Cybersecurity Specialist / Security Engineer

#vacancy #Cybersecurity Specialist / Security Engineer, #Cyprus office, 6-8k euros net. Fintech

About the Role

We are looking for an experienced Cybersecurity Specialist / Security Engineer to secure and continuously improve the company’s server, network, cloud, and application infrastructure.

The ideal candidate combines strong hands-on technical expertise with the ability to independently investigate security incidents, assess risks, design secure architectures, and implement effective security controls. A key requirement is practical experience with Zero Trust architecture and Zero Trust Network Access (ZTNA), including secure identity-based access to internal infrastructure and critical systems.

Key Responsibilities

• Ensure the security of the company’s server, network, and cloud infrastructure.

• Monitor and analyze information security events to detect attacks, scanning activity, anomalies, and unauthorized access attempts.

• Respond to security incidents, including investigation, containment, remediation, root cause analysis, and documentation.

• Conduct regular infrastructure security audits and manage vulnerabilities.

• Harden Linux and Windows servers, operating systems, and network services.

• Configure and maintain Firewalls, WAF, IDS/IPS, VPN, and DDoS protection solutions.

• Ensure the security of Web applications and APIs.

• Manage and control access to production infrastructure and critical systems.

• Develop and maintain security policies, procedures, and Incident Response Playbooks.

• Collaborate with DevOps engineers, system administrators, DBAs, and developers to identify and mitigate security risks.

• Design, implement, and continuously improve the company’s security architecture and technical controls.

Required Qualifications (Must-Have)

• 3+ years of hands-on experience in Cybersecurity / Information Security.

• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, TLS, VPN, NAT, and network routing.

• Solid Linux administration skills.

• Practical experience configuring Firewalls, WAF, ACLs, and network segmentation.

• Hands-on experience with Cloudflare or equivalent WAF/CDN/DDoS protection solutions.

• Good understanding of the OWASP Top 10 and common Web/API attack vectors.

• Practical experience with Vulnerability Management tools such as Nessus, OpenVAS, Qualys, or equivalents.

• Knowledge of CVE/CVSS and the ability to assess the actual business and technical risks associated with identified vulnerabilities.

• Experience with SIEM, IDS/IPS, and centralized log collection.

• Ability to analyze system, network, application, and web server logs.

• Experience investigating security incidents and working with Indicators of Compromise (IOCs).

• Understanding of RBAC, MFA, PAM, the Principle of Least Privilege, and privileged access management.

• Experience with Docker and an understanding of container security principles.

• Understanding of SAST, DAST, dependency scanning, and secret scanning.

• Ability to automate security tasks using Bash and/or Python.

Zero Trust — Mandatory Requirements

Practical experience implementing Zero Trust Network Access (ZTNA) solutions and a solid understanding of Zero Trust architecture are essential for this role.

The candidate should be able to design, implement, and maintain a Zero Trust approach, including:

• Designing and implementing Zero Trust security architecture.

• Implementing ZTNA for employees’ and administrators’ access to internal infrastructure.

• Replacing network/IP-based trust with identity-based access controls.

• Implementing Device Trust and Device Posture checks.

• Configuring MFA and Conditional Access policies.

• Enforcing Least Privilege Access.

• Implementing microsegmentation.

• Providing short-lived access and temporary privileged access.

• Monitoring and auditing administrative sessions.

• Integrating Zero Trust solutions with IAM, SSO, and Identity Providers (IdPs).

• Building secure access mechanisms for Linux and Windows servers, databases, internal Web services, and administrative panels. 
• Managing and securing access to critical infrastructure through solutions such as Cloudflare Zero Trust, Teleport, BeyondTrust, CyberArk, Tailscale, Zscaler, or equivalent platforms.

Nice to Have

• Experience with AWS, Azure, or GCP security.

• Kubernetes security experience.

• Hands-on experience with Wazuh, Suricata, or Snort.

• Familiarity with ELK/OpenSearch and Loki/Grafana.

• Experience with HashiCorp Vault or equivalent secrets management solutions.

• Experience conducting penetration tests or Red Team exercises.

• Knowledge of Threat Modeling methodologies.

• Experience building security monitoring systems and automating incident response.

• Familiarity with ISO 27001, PCI DSS, SOC 2, or equivalent security standards.

Expected Level of Expertise

The successful candidate must be able to independently manage the entire security threat and incident lifecycle:

Detect → Analyze → Assess Risk → Contain → Remediate → Verify → Document

We are looking for a hands-on security professional who goes beyond operating security tools. The candidate must be capable of independently assessing risks, designing security architectures, making sound technical decisions, and implementing effective security measures to protect the company’s infrastructure and critical systems.