IT Security Engineer

For our Business Center in Bratislava (Slovakia) we are currently seeking to recruit a

IT Security Engineer

The Role

Based in North America/EMEA, the IT Security Operations Center Security Engineer is a position reporting to the Global Information Security Operations Manager with the responsibility of providing subject matter expertise (SME) for Forescout Network Access Control (NAC) technologies. Support the company’s systems, network, security operations team, and contribute as a lead technical resource on implementation, operations, and maintenance of the Forescout solution. This position is also responsible for developing and updating standard operating procedures, policy development, troubleshooting, ensuring best practices, responding to outages, and reporting information regarding the status of the tool and its integration points.

Primary Responsibilities

Primary duties for this position include deploying and providing ongoing support as a NAC Subject Matter Expert.
Forescout experience is preferred but not required for the right candidate.
Forescout is a Network Access Control (NAC) technology that will enable the organization to provide visibility, control, and orchestration.
Work to continually improve the tool, processes, and documentation utilized within the organization. Assist with creating security designs and configure security controls within the Cyber Security Engineering portfolio.

Secondary Opportunities as time allows

This role is primarily based on NAC management but there are other areas within the SOC where individuals can learn and contribute to other teams and tools to include but not limited to the following:

Provide technical assistance for incident response for security incidents and participate on company-wide incident response as needed.
Validate security control coverage against identified IOCs based on emerging cyber threat intelligence.
Collaborate with the Security Operations team to analyze and evaluate the effectiveness of existing security controls against identified TTPs.
Contribute to engineering initiatives to operationalize Cyber Threat Intelligence feeds and API integrations.
Work with enterprise architects, network engineers, and developers to design optimal security practices for supporting new and existing business processes / applications.
Ensure the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies.
Conduct periodic security architecture reviews on existing security technologies to offer actionable recommendations for improvements and remediations where needed.
Ability to work both independently and with internal teams in a project-oriented environment.
Communicate technical application security concepts to business users, developers, architects, and managers.
Participates in special projects as required.

Candidate Profile

The successful candidate will be a passionate information security professional with excellent technical skills and the ability to communicate to different business and IT leaders. The candidate will demonstrate drive, intelligence, maturity, and energy.

A minimum bachelor’s degree in Cyber Security, Network Security, Information Assurance, Computer Science discipline, or relevant work experience.
5 years of information security related experience, in areas such as: cybersecurity concepts, network protocols, firewalls, IDS/IPS systems, proxy, email security, endpoint security, network security, Windows/Linux/macOS systems, cyber threat hunting, cyber threat intelligence, common threat actor TTPs, application security concepts, cloud security fundamentals, Incident Response methodologies.
Solid understanding of basic computer science including operating systems, networks, and tool development.
Ability to think with a security mindset. The successful candidate has a strong IT background with in-depth knowledge of several key security practice area: security strategy, security architecture, network security, access control, application security, insider threat, kill chain analysis, risk assessment, and security metrics.
Ability to quickly assimilate new technologies, tools, internal/external systems, and design frameworks. Strong and broad technology background.
Experience with enterprise security management tools.
Advanced knowledge of networking (TCP/IP, network layers,).
Experience generating and modifying network and host-based Indicators of Compromise (IOC).
Moderate to Advanced knowledge of Windows and Unix or Linux.
Knowledge of relevant frameworks, standards, and best practices such as NIST CSF, PCI-DSS, CIS CSCs, MITRE ATT&CK, Cyber Kill Chain etc.
Team member with good communication skills and the ability to communicate to technical and non-technical audiences at different seniority levels.
Ability to create and maintain good business relationships with counter parts, customers, and external entities to achieve the security operations management goals.
Ability to maintain a high level of discretion and personal integrity in the exercise of duties, including the ability to professionally address confidential matters.

Desired Certifications (but not required):

Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
GIAC Defensible Security Architecture (GDSA)
GIAC Certified Detection Analyst (GCDA)
GIAC Certified Incident Handler (GCIH)
GIAC Certified Intrusion Analyst (GIAC)
GIAC Certified Forensic Analyst (GCFA)
Cisco Certified Network Associate (CCNA)
Cisco Certified Network Professional (CCNP)
Cisco Certified Network Professional Security (CCNP Security)
Server Platform Certifications (Microsoft, Linux)
Certified Information Systems Auditor (CISA)

We offer you:

Base gross monthly salary starting from 2500 EUR. Our salary is fair and competitive and can be higher than the starting minimum written in the advert
13th salary
Language courses
Meal vouchers (fully paid by employer)
Flexible working time, home offices, extra holiday entitlement
Wedding allowance, childbirth allowance, jubilee allowance, housing allowance
Referral bonus
Health, safety and ergonomics events, training sessions
Active life with colleagues full of various sports activities (swimming, yoga, tennis, volleyball etc.)
Massage at workplace, modern relax areas and game room
Coffee/Tea/Fruit on the workplace

Adient is committed to equal employment opportunity, diversity and inclusion in the workplace. We are looking forward to receiving your application including your salary expectations and your earliest availability date. If you have additional questions, please do not hesitate to contact Michal Majzlan on +421 32 7413099.