Fintech company seeking an experienced Cybersecurity Specialist / Security Engineer to secure and continuously improve its server, network, cloud, and application infrastructure.
Responsibilities:
- Secure server, network, and cloud infrastructure; monitor security events and investigate, contain, remediate, and document incidents.
- Conduct infrastructure security audits, manage vulnerabilities, and harden Linux and Windows servers and network services.
- Configure and maintain firewalls, WAF, IDS/IPS, VPN, and DDoS protection; secure web applications and APIs.
- Manage access to production infrastructure and critical systems; develop security policies, procedures, and incident response playbooks.
- Collaborate with DevOps engineers, system administrators, DBAs, and developers to mitigate risks and improve security architecture and controls.
- Design, implement, and maintain Zero Trust architecture and ZTNA, including identity-based access, device trust and posture checks, MFA and conditional access, least privilege, microsegmentation, temporary privileged access, session monitoring, and IAM/SSO/IdP integrations.
Requirements:
- 3+ years of hands-on cybersecurity or information security experience.
- Strong knowledge of TCP/IP, DNS, HTTP/HTTPS, TLS, VPN, NAT, and network routing; solid Linux administration skills.
- Practical experience with firewalls, WAF, ACLs, network segmentation, and Cloudflare or equivalent WAF/CDN/DDoS solutions.
- Knowledge of OWASP Top 10, web/API attack vectors, vulnerability management tools, CVE/CVSS, SIEM, IDS/IPS, log analysis, incident investigation, and IOCs.
- Understanding of RBAC, MFA, PAM, least privilege, Docker and container security, SAST, DAST, dependency scanning, and secret scanning.
- Ability to automate security tasks with Bash and/or Python.
- Practical ZTNA implementation experience is mandatory, including secure access to Linux and Windows servers, databases, internal web services, and administrative panels.