Cybersecurity Specialist / Security Engineer

About the Role We are looking for an experienced Cybersecurity Specialist / Security Engineer to secure and continuously improve the company’s server, network, cloud, and application infrastructure. The ideal candidate combines strong hands-on technical expertise with the ability to independently investigate security incidents, assess risks, design secure architectures, and implement effective security controls. A key requirement is practical experience with Zero Trust architecture and Zero Trust Network Access (ZTNA), including secure identity-based access to internal infrastructure and critical systems. Key Responsibilities • Ensure the security of the company’s server, network, and cloud infrastructure. • Monitor and analyze information security events to detect attacks, scanning activity, anomalies, and unauthorized access attempts. • Respond to security incidents, including investigation, containment, remediation, root cause analysis, and documentation. • Conduct regular infrastructure security audits and manage vulnerabilities. • Harden Linux and Windows servers, operating systems, and network services. • Configure and maintain Firewalls, WAF, IDS/IPS, VPN, and DDoS protection solutions. • Ensure the security of Web applications and APIs. • Manage and control access to production infrastructure and critical systems. • Develop and maintain security policies, procedures, and Incident Response Playbooks. • Collaborate with DevOps engineers, system administrators, DBAs, and developers to identify and mitigate security risks. • Design, implement, and continuously improve the company’s security architecture and technical controls. Required Qualifications (Must-Have) • 3+ years of hands-on experience in Cybersecurity / Information Security. • Strong understanding of TCP/IP, DNS, HTTP/HTTPS, TLS, VPN, NAT, and network routing. • Solid Linux administration skills. • Practical experience configuring Firewalls, WAF, ACLs, and network segmentation. • Hands-on experience with Cloudflare or equivalent WAF/CDN/DDoS protection solutions. • Good understanding of the OWASP Top 10 and common Web/API attack vectors. • Practical experience with Vulnerability Management tools such as Nessus, OpenVAS, Qualys, or equivalents. • Knowledge of CVE/CVSS and the ability to assess the actual business and technical risks associated with identified vulnerabilities. • Experience with SIEM, IDS/IPS, and centralized log collection. • Ability to analyze system, network, application, and web server logs. • Experience investigating security incidents and working with Indicators of Compromise (IOCs). • Understanding of RBAC, MFA, PAM, the Principle of Least Privilege, and privileged access management. • Experience with Docker and an understanding of container security principles. • Understanding of SAST, DAST, dependency scanning, and secret scanning. • Ability to automate security tasks using Bash and/or Python. Zero Trust — Mandatory Requirements Practical experience implementing Zero Trust Network Access (ZTNA) solutions and a solid understanding of Zero Trust architecture are essential for this role. The candidate should be able to design, implement, and maintain a Zero Trust approach, including: • Designing and implementing Zero Trust security architecture. • Implementing ZTNA for employees’ and administrators’ access to internal infrastructure. • Replacing network/IP-based trust with identity-based access controls. • Implementing Device Trust and Device Posture checks. • Configuring MFA and Conditional Access policies. • Enforcing Least Privilege Access. • Implementing microsegmentation. • Providing short-lived access and temporary privileged access. • Monitoring and auditing administrative sessions. • Integrating Zero Trust solutions with IAM, SSO, and Identity Providers (IdPs). • Building secure access mechanisms for Linux and Windows servers, databases, internal Web services, and administrative panels.