Information Security Engineer, Tier 3

This is a fully remote position, open to applicants in Bulgaria.

📋 Description

• Develop, execute, and oversee the comprehensive security strategy for managed clients.

• Independently address security incidents and drive them to resolution.

• Collaborate with team members on security initiatives and contribute to best practices in processes, technology, and security awareness.

• Enhance existing security technologies, including the creation of use cases and the customization or configuration of tools based on emerging threats.

• Proactively detect potential security issues, provide thorough reporting, and remain accessible until these issues are resolved.

• Support the Security Operations Center's continuous 24/7 defensive operations.

• Analyze SIEM logs and other data sources to generate reports and prepare for suspicious activities or malicious events.

• Conduct penetration testing and vulnerability assessments.

• Manage and monitor the remediation of identified vulnerable systems.

• Engage with local and international colleagues from both technical and non-technical domains.

⛳️ Requirements

• A minimum of 5 years of experience in Information Security.

• Practical experience with the integration of various security systems and devices.

• At least 2 years of coding and scripting experience in Python, Linux shell scripting, or Windows PowerShell scripting.

• Knowledge and experience with SOAR platforms and solutions.

• 2 to 4 years of systems analysis experience.

• Familiarity with Linux and syslog from the command line interface (CLI).

• Experience in computer network/application penetration testing and associated techniques.

• Demonstrated ability to perform moderately complex security analyses for information technology.

• Strong writing and communication skills in English.

• Knowledge of information and network security tools, including Azure Sentinel SIEM, QRadar SIEM, Splunk, McAfee Security Suite, Cisco IDS/IPS, Tenable Nessus, and Palo Alto.

• Familiarity with Network Access Control software such as Cisco ISE and ForeScout.

• SQL or KQL knowledge is a plus.

• Operational knowledge of APIs is a plus.

• A bachelor's degree in computer information systems or a related field is preferred.

• Background and experience sufficient to obtain industry or SOC-specific certifications as directed by management.

• Availability from Monday to Friday, 8 AM to 5 PM Central Time, with on-call participation; shifts may rotate or change based on support coverage requirements.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Retirement plan with company matching contributions.

• Opportunities for professional development and certifications.

• Flexible work arrangements and potential remote work options.

• Generous paid time off and holiday schedule.