Cybersecurity Specialist / Security Engineer

#vacancy #Cybersecurity Specialist / Security Engineer, #Cyprus office, 6-8k euros net. Fintech

About the Role

We are looking for an experienced Cybersecurity Specialist / Security Engineer to secure and continuously improve the company’s server, network, cloud, and application infrastructure.

The ideal candidate combines strong hands-on technical expertise with the ability to independently investigate security incidents, assess risks, design secure architectures, and implement effective security controls. A key requirement is practical experience with Zero Trust architecture and Zero Trust Network Access (ZTNA), including secure identity-based access to internal infrastructure and critical systems.

Key Responsibilities

• Ensure the security of the company’s server, network, and cloud infrastructure.
• Monitor and analyze information security events to detect attacks, scanning activity, anomalies, and unauthorized access attempts.
• Respond to security incidents, including investigation, containment, remediation, root cause analysis, and documentation.
• Conduct regular infrastructure security audits and manage vulnerabilities.
• Harden Linux and Windows servers, operating systems, and network services.
• Configure and maintain Firewalls, WAF, IDS/IPS, VPN, and DDoS protection solutions.
• Ensure the security of Web applications and APIs.
• Manage and control access to production infrastructure and critical systems.
• Develop and maintain security policies, procedures, and Incident Response Playbooks.
• Collaborate with DevOps engineers, system administrators, DBAs, and developers to identify and mitigate security risks.
• Design, implement, and continuously improve the company’s security architecture and technical controls.

Required Qualifications (Must-Have)

• 3+ years of hands-on experience in Cybersecurity / Information Security.
• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, TLS, VPN, NAT, and network routing.
• Solid Linux administration skills.
• Practical experience configuring Firewalls, WAF, ACLs, and network segmentation.
• Hands-on experience with Cloudflare or equivalent WAF/CDN/DDoS protection solutions.
• Good understanding of the OWASP Top 10 and common Web/API attack vectors.
• Practical experience with Vulnerability Management tools such as Nessus, OpenVAS, Qualys, or equivalents.
• Knowledge of CVE/CVSS and the ability to assess the actual business and technical risks associated with identified vulnerabilities.
• Experience with SIEM, IDS/IPS, and centralized log collection.
• Ability to analyze system, network, application, and web server logs.
• Experience investigating security incidents and working with Indicators of Compromise (IOCs).
• Understanding of RBAC, MFA, PAM, the Principle of Least Privilege, and privileged access management.
• Experience with Docker and an understanding of container security principles.
• Understanding of SAST, DAST, dependency scanning, and secret scanning.
• Ability to automate security tasks using Bash and/or Python.

Zero Trust — Mandatory Requirements

Practical experience implementing Zero Trust Network Access (ZTNA) solutions and a solid understanding of Zero Trust architecture are essential for this role.

The candidate should be able to design, implement, and maintain a Zero Trust approach, including:

• Designing and implementing Zero Trust security architecture.
• Implementing ZTNA for employees’ and administrators’ access to internal infrastructure.
• Replacing network/IP-based trust with identity-based access controls.
• Implementing Device Trust and Device Posture checks.
• Configuring MFA and Conditional Access policies.
• Enforcing Least Privilege Access.
• Implementing microsegmentation.
• Providing short-lived access and temporary privileged access.
• Monitoring and auditing administrative sessions.
• Integrating Zero Trust solutions with IAM, SSO, and Identity Providers (IdPs).
• Building secure access mechanisms for Linux and Windows servers, databases, internal Web services, and administrative panels.