Cyber Security Automation Engineer / Developer

- Main task will be Integration and Automation of Security processes e.g. simple script to pull leaked credentials from our Threat Intelligence provider – a JSON object with username:password pairs, match such against our Active Directory. If the user in question still uses the password - which is now part of online available breached password dump, disable the user account, send user’s manager an email of this action taken to protect security of our company.
- Integrate Security Incident and Event Management (Splunk, ELK), Security Automation and Orchestration (Demisto) and Threat Intelligence tools with enterprise systems e.g. REST call/LDAP query/PowerShell script to pull information or perform action against Active Directory/AntiVirus platform/Email Gateway.
- Maintenance of Incident Response systems e.g. error checking, cluster configuration, change management, upgrades.
- Supporting the Security Operations Center in their incident response e.g. Security Analyst would like a button in his IR tool which will perform a portscan of investigated machine and output open ports in his dashboard, around 3 lines to execute nmap with the IP from the incident, another 2 lines to format the retrieved data, around 2 hours of troubleshooting and testing.

- Flexible working hours and Work from home arrangement that suits your needs. No one cares whether you start at 6am or 10am.
- Eur 3,000 base pay, bonus, language training.
- Opportunity for you to work with technologies/concepts which are the future of Cyber Security: Automation, Orchestration, Machine Learning, Cyber Defense, SIEM.
- Ability to work independently and shape the future of the department, you will be the architect, analyst and developer - as long as the team can understand your work and it is efficient.