Security Engineer (Infrastructure)

TL;DR

Security Engineer (Infrastructure): Designing and implementing endpoint security and OS hardening for corporate environments with an accent on workstation protection and telemetry. Focus on automating security tasks using scripting, managing EDR/MDM solutions, and responding to workstation-level incidents.

Location: Hybrid in Almaty, Kazakhstan. Relocation package offered.

Company

A global tech company providing ride-hailing, delivery, and financial services on a mission to challenge injustice.

What you will do

• Design, maintain, and optimize the endpoint security stack solutions.
• Develop and enforce OS hardening standards to minimize the attack surface of corporate endpoints.
• Test, assess, and deploy new security products and technologies for employee workstations.
• Configure advanced workstation logging and telemetry for threat detection.
• Proactively identify, assess, and resolve vulnerabilities and misconfigurations on workstations.
• Respond to workstation-level security incidents and maintain high-quality documentation.

Requirements

• Proven track record of managing and securing Windows and MacOS endpoints in enterprise environments at scale.
• Experience administering cloud-based AV/EDR solutions.
• Ability to use scripting languages like PowerShell, Python, or Bash to automate security tasks.
• Expertise in managing system configurations via MDM solutions or other configuration management tools.
• Knowledge of log collection mechanisms and operating system hardening best practices.
• English: B1+ required.

Nice to have

• Experience securing Linux workstations.
• Experience working with SIEM solutions such as Splunk, ArcSight ESM, IBM QRadar, or Elastic Security.
• Professional certificates in offensive or defensive information security.
• Experience participating in CTFs.

Culture & Benefits

• Official employment with a stable salary and health insurance.
• Hybrid work mode and flexible schedule.
• Relocation package offered for candidates from other regions.
• Access to professional counseling services (psychological, financial, and legal).
• Diverse internal training programs and partially or fully paid additional courses.
• Discount club membership and all necessary work equipment provided.

Hiring process

• Application review.
• Offer.
• Hiring.