pythonkubernetessiemelasticsearchbashincident responsewazuhcloud securityweb securityowasp top 10
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
84
Хорошая вакансия
развернуть
Зона ответственности в SOC и реагировании на инциденты описана чётко, стек актуальный, а обучение подкреплено конкретными возможностями; формат B2B и ограничение удалённой работы Польшей стоит сверить со своими условиями.
?Только из Польши
Актуальные инструменты
Чёткие обязанности
Поддержка развития
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Cybersecurity Analyst (B2B) (Wazuh/Elasticsearch): Monitoring and investigating security alerts, leading incident response, and expanding detection coverage for a web data ecosystem with an accent on SIEM operations, web application security, and automated detection. Focus on tuning detection rules and decoders, normalizing log sources, analyzing attack techniques, and improving SOC response workflows.
Location: Remote, Warsaw
Gross salary: 17,200–23,000 PLN/month, with flexibility based on skills and competencies.
Company
Source is an ecosystem of independent technology companies providing shared standards and support for responsible access to web data.
What you will do
Monitor, triage, and investigate SIEM and security-tool alerts, distinguishing true positives from noise.
Execute incident response, including containment, evidence collection, root-cause analysis, and remediation follow-up.
Build, tune, and maintain Wazuh and Elasticsearch detection rules and decoders.
Onboard and normalize log sources to expand security visibility.
Improve SOC operations by identifying gaps in detection logic, playbooks, and triage workflows.
Assess and validate external penetration-test and bug-bounty reports.
Requirements
2–4 years of experience in security operations, incident response, or application security.
Experience with SIEM platforms such as Wazuh, Elastic/ELK, Splunk, or similar, including query and detection-rule development.
Scripting skills in Python, Bash, or similar for automation, log parsing, and testing tools.
Strong understanding of web technologies and attack methods, including HTTP/S, session management, OAuth 2.0, OIDC, JWT, REST and GraphQL APIs, SOP, CORS, and CSP.
Knowledge and practical experience with OWASP Top 10 exploitation.
Nice to have
Security certifications such as OSCP, OSWE, BSCP, eWPT/eWPTX, GWAPT, GCIH, or CySA+.
Experience with WAFs, bot management, or anti-abuse systems such as Cloudflare, Akamai, or AWS WAF.
Experience with AWS, GCP, or Azure and containerized applications using Docker or Kubernetes.
Familiarity with Elastic Fleet/Agent and Wazuh rule and decoder development.
Culture & Benefits
Cross-company collaboration, knowledge sharing, and a high standard for technical work.
Bonus vacation days, paid life-moment days off, and required work tools.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →