Remote job
DevOps System Administrator (Security Operations Team)
Job details
About this role
Role overview Support security operations at the intersection of systems administration, detection, and automation. The role helps protect endpoints and infrastructure by investigating alerts, improving monitoring, managing vulnerabilities, and building tools and workflows that help teams respond efficiently. It includes collaboration with colleagues across a global IT organization and offers a hybrid setup.
Responsibilities - Operate and monitor endpoint protection and SIEM platforms; investigate endpoint alerts and security incidents through resolution. - Review quarantined email and assess phishing, business email compromise, and other email threats using threat intelligence where useful. - Track vulnerabilities and security advisories, assess risk, and contribute to infrastructure security reviews. - Analyze root causes, document findings and runbooks, and refine detection rules to improve signal quality. - Automate routine security tasks with scripts, APIs, or workflow tools; maintain security agents and configurations across endpoints and servers. - Build internal dashboards and reports, improve system integrations, and assist with access control and identity processes.
Requirements - Two to three years of experience in system administration, security operations, or both. - Hands-on experience with endpoint protection/EDR or SIEM platforms. - Working knowledge of Windows and Linux administration and scripting in PowerShell, Python, or Bash. - Understanding of vulnerability management and risk-based prioritization; familiarity with ticketing tools such as Jira. - Strong analytical skills, sound risk judgment, initiative, and clear written communication. - Polish and English proficiency for day-to-day collaboration.
Nice to have - SOAR, Logic Apps, API integrations, Docker, macOS security, cloud identity, directory services, or threat intelligence and OSINT experience. - Exposure to offensive security or penetration testing; relevant cybersecurity certifications.
Benefits and work setup - Hybrid work with flexible benefits, including meal vouchers, mobile service support, healthcare and dental packages, sports benefits, and group insurance. Training budget, language classes, internal courses, and mentoring are also offered.