Cybersecurity Specialist / Security Engineer

About the Role We are looking for an experienced Cybersecurity Specialist / Security Engineer to secure and continuously improve the company’s server, network, cloud, and application infrastructure. The ideal candidate combines strong hands-on technical expertise with the ability to independently investigate security incidents, assess risks, design secure architectures, and implement effective security controls. A key requirement is practical experience with Zero Trust architecture and Zero Trust Network Access (ZTNA), including secure identity-based access to internal infrastructure and critical systems. Key Responsibilities: — Ensure the security of the company’s server, network, and cloud infrastructure. — Monitor and analyze information security events to detect attacks, scanning activity, anomalies, and unauthorized access attempts. — Respond to security incidents, including investigation, containment, remediation, root cause analysis, and documentation. — Conduct regular infrastructure security audits and manage vulnerabilities. — Harden Linux and Windows servers, operating systems, and network services. — Configure and maintain Firewalls, WAF, IDS/IPS, VPN, and DDoS protection solutions. — Ensure the security of Web applications and APIs. — Manage and control access to production infrastructure and critical systems. — Develop and maintain security policies, procedures, and Incident Response Playbooks. — Collaborate with DevOps engineers, system administrators, DBAs, and developers to identify and mitigate security risks. — Design, implement, and continuously improve the company’s security architecture and technical controls. Required Qualifications (Must-Have): — 3+ years of hands-on experience in Cybersecurity / Information Security. — Strong understanding of TCP/IP, DNS, HTTP/HTTPS, TLS, VPN, NAT, and network routing. — Solid Linux administration skills. — Practical experience configuring Firewalls, WAF, ACLs, and network segmentation. — Hands-on experience with Cloudflare or equivalent WAF/CDN/DDoS protection solutions. — Good understanding of the OWASP Top 10 and common Web/API attack vectors. — Practical experience with Vulnerability Management tools such as Nessus, OpenVAS, Qualys, or equivalents. — Knowledge of CVE/CVSS and the ability to assess the actual business and technical risks associated with identified vulnerabilities. — Experience with SIEM, IDS/IPS, and centralized log collection. — Ability to analyze system, network, application, and web server logs. — Experience investigating security incidents and working with Indicators of Compromise (IOCs). — Understanding of RBAC, MFA, PAM, the Principle of Least Privilege, and privileged access management. — Experience with Docker and an understanding of container security principles. — Understanding of SAST, DAST, dependency scanning, and secret scanning. — Ability to automate security tasks using Bash and/or Python. Zero Trust — Mandatory Requirements: Practical experience implementing Zero Trust Network Access (ZTNA) solutions and a solid understanding of Zero Trust architecture are essential for this role. The candidate should be able to design, implement, and maintain a Zero Trust approach, including: — Designing and implementing Zero Trust security architecture. — Implementing ZTNA for employees’ and administrators’ access to internal infrastructure. — Replacing network/IP-based trust with identity-based access controls. — Implementing Device Trust and Device Posture checks. — Configuring MFA and Conditional Access policies. — Enforcing Least Privilege Access. — Implementing microsegmentation. — Providing short-lived access and temporary privileged access. — Monitoring and auditing administrative sessions. — Integrating Zero Trust solutions with IAM, SSO, and Identity Providers (IdPs). — Building secure access mechanisms for Linux and Windows servers, databases, internal Web services, and administrative panels.