DevOps System Administrator – Security Operations Team

This is a fully remote position, open to applicants in Poland.

📋 Description

• Oversee and evaluate security platforms, encompassing AV/EDR and SIEM solutions.

• Examine email quarantines and investigate threats such as phishing, BEC, and other email-related risks.

• Leverage threat intelligence resources to bolster and enhance security investigations.

• Monitor CVEs and security advisories, evaluate their impact, and assist in vulnerability management.

• Engage in regular security assessments of the company’s infrastructure.

• Assess, investigate, and resolve security incidents and endpoint alerts.

• Determine root causes and document findings, processes, and operational runbooks.

• Refine and enhance detection rules to improve monitoring capabilities and decrease false positives.

• Automate routine security operations using scripting languages, APIs, and workflow automation tools.

• Install, maintain, and support security agents and configurations across endpoints and servers.

• Integrate security and IT systems to enhance visibility, alerting, and operational efficiency.

• Create and develop internal tools, dashboards, and reports for security operations.

• Assist with access control and identity management processes.

• Collaborate with local and global teams within an international IT organization to strengthen the security posture.

⛳️ Requirements

• 2–3 years of experience in system administration and/or security operations.

• Practical experience with AV/EDR and/or SIEM platforms.

• Strong understanding of Windows and Linux administration.

• Proficient scripting skills in PowerShell, Python, or Bash.

• Knowledge of vulnerability management and risk-based prioritization.

• Familiarity with ticketing systems such as Jira.

• Security-first mindset and an understanding of cybersecurity best practices.

• Proficient in both written and spoken Polish and English.

• Excellent analytical and problem-solving abilities.

• Demonstrated ownership, initiative, and the capability to drive improvements independently.

• Inquisitive and proactive in identifying root causes and solutions.

• Strong written communication skills and sound judgment in risk assessment.

• Experience with SOAR platforms, Logic Apps, or similar workflow automation tools is a plus.

• Familiarity with system integration through APIs is advantageous.

• Knowledge of containerization technologies like Docker is a plus.

• Experience in offensive security and penetration testing is advantageous.

• Understanding of macOS security is beneficial.

• Familiarity with cloud identity platforms and directory services is a plus.

• Knowledge of threat intelligence and OSINT methodologies is advantageous.

• Relevant cybersecurity certifications such as CEH, CISSP, OSCP, CRTM, OSEP, or eCPPT are advantageous.

🏝️ Benefits

• Hybrid work model; office presence is encouraged but not mandatory.

• Flexible benefits package, including pyszne.pl vouchers, mobile phone, data subscription via modem, or cash benefit.

• Budget allocated for training and development.

• Language classes available.

• Internal courses and training opportunities.

• Mentoring and support for career development.

• Medicover + More Smile Package.

• Multisport benefits.

• Group Insurance options.

• Subsidized sports activities.

• Team bonding events for employees and their children.

• Strong commitment to CSR initiatives.