top of page

Senior Cybersecurity Specialist

SOC

Hybrid

Explore Truvo's Powerful Features All-in-One

The Security Operations Centre is expanding its SOC service line and is looking for a senior cybersecurity specialist who can both understand cybersecurity requirements and assess, implement, verify and improve technical security controls in client environments. This role suits someone who understands how real IT infrastructure works - logs, EDR/XDR, SIEM, networks, accounts, vulnerabilities, incidents and technical risks - but who also wants to work not only with tools, but on building the overall security maturity of organisations.

Day-to-day activities and responsibilities:

  • Technical assessment of clients' cybersecurity posture: analysis of networks, servers, workstations, accounts, access rights, logs, backups, vulnerabilities and protective controls.
  • Developing and maintaining SOC processes: building and improving event monitoring, incident escalation, investigation, response and documentation processes.
  • Working with SIEM, EDR/XDR, antivirus, firewalls, vulnerability scanning, log management and other security technologies.
  • Analysis of security events and incidents: assessing suspicious logins, malicious activity, unusual network traffic, compromised accounts, malicious emails and other threats.
  • Preparing technical recommendations for clients in areas such as MFA, access management, log collection, EDR/XDR, backups, segmentation, patching, vulnerabilities and other controls.
  • Coordinating the vulnerability management process: analysing scan results, setting priorities, assessing risk, and tracking remediation deadlines and statuses.
  • Collecting and assessing clients' technical evidence against KSĮ, NIS2, KSIS, NKSC and other cybersecurity requirements.
  • Working with the CISO team, clients' IT administrators, vendors and management to ensure security risks are not just documented but genuinely managed through technical controls.
  • Assessing the technical side of incident response plans, business continuity, backups, logs, access management, vulnerabilities and other security processes.
  • Creating SOC playbooks, incident scenarios, escalation algorithms, technical checklists and internal methodologies.
  • Supporting the development of our internal platform and processes for centrally monitoring client security posture, risks, incidents, vulnerabilities, evidence and tasks.

Explore Truvo's Powerful Features All-in-One

  • 3+ years of hands-on experience in IT security, SOC, systems administration, network security, incident response or cybersecurity.
  • A solid technical understanding of Windows / Linux environments, Active Directory, Microsoft 365, networks, VPNs, firewalls, servers, workstations, backups and access management.
  • Experience with, or a good understanding of, SIEM, EDR/XDR, antivirus, firewalls, log management, vulnerability scanning or incident analysis tools.
  • The ability to analyse security events, logs, suspicious activity, logins and technical weaknesses, and to explain the risk they pose to the organisation.
  • An understanding of the incident response process: detection, classification, escalation, evidence collection, containment, recovery and post-incident analysis.
  • The ability to structure technical information independently and produce clear, practical recommendations for the client.
  • The ability to work with several clients at once, plan your work, meet deadlines and document results.
  • English language skills for technical documentation, tool administration and security information analysis.
  • Accountability, attention to detail, and the ability to dig into technical detail while keeping the organisation's wider security context in view.

Considered an advantage:

  • Experience as a SOC analyst, SOC engineer, security engineer, IT security specialist, or in infrastructure security.
  • Experience with Microsoft Defender, Sentinel, Wazuh, Fortinet, Sophos, ESET, Bitdefender, CrowdStrike, SentinelOne, Nessus, OpenVAS, Qualys, Zabbix or other security and monitoring tools.
  • Familiarity with NIS2, KSĮ, KSIS and NKSC requirements, ISO/IEC 27001, or the context of CISO services.
  • Experience drafting or assessing technical security policies: access management, log management, incident response, backups, vulnerabilities, patching or business continuity processes.
  • The ability to script or automate tasks using PowerShell, Python, Bash or other tools.
  • Experience with cloud security, Microsoft 365 security settings, Azure, Entra ID, MFA, Conditional Access or similar technologies.
  • Certifications: CompTIA Security+, CySA+, Network+, Microsoft SC-200, AZ-500, Fortinet NSE, Cisco CCNA, CEH, GIAC, CISSP, CISM, ISO 27001 or other relevant certifications.
  • The ability to advise not only technical specialists but also management, explaining risks in plain, business-friendly language.

Explore Truvo's Powerful Features All-in-One

  • The chance to help shape the technical direction of a growing cybersecurity company.
  • Work with clients across a range of sectors who need real technical security solutions, not just formal documentation.
  • The opportunity to build and refine SOC processes, incident response scenarios, technical checklists, client security monitoring models and internal methodologies.
  • The opportunity to work on a platform and processes for centrally managing clients' cybersecurity posture.
  • Professional growth, training, and funding for relevant certifications.
  • A hybrid working model.
  • A salary of EUR 5,500 - 6,500 gross, depending on the candidate's technical experience, autonomy, SOC competencies and ability to work with clients.
bottom of page