Senior Cyber Security Engineer: SOC Automation & Linux

Link mobility group; Italy; Hybrid; EUR 65,000 - 100,000; Full time

Benefits offered by this job

Co-financed Medical care

Co-financed private life insurance

Co-financed MultiSport card

Extra day off on your birthday

Team building events

Retirement program contributions

Job summary

LINK mobility group is seeking a hands-on Security Engineer to strengthen our SOC and automation capabilities. You will manage Wazuh SIEM, tune OpenSearch, and integrate security across Linux, Kubernetes, and cloud environments. Strong scripting and API automation are essential.

English proficiency required for international teams. You will contribute to incident response, log analysis, and security hardening in a complex hybrid infrastructure, collaborating with IT and DevOps to deliver robust

Qualifications

• Advanced knowledge of Polish is an absolute must-have.
• Wazuh (SIEM/XDR) with enterprise experience.
• Deep Linux administration skills and troubleshooting.
• OpenSearch/Elasticsearch cluster management.
• Scripting and automation using REST APIs to glue systems together.
• Understanding log sources like auditd and syslog.
• English at least B2+ level for technical docs and teams.

Responsibilities

• Maintain and tune the Wazuh HA cluster and OpenSearch performance.
• Create decoders and rules for services; reduce false positives.
• Develop SOAR integrations and automation around APIs.
• Secure Kubernetes environments and integrate with central logging.
• Develop incident response processes and playbooks.
• Hardening operating systems and collaborating with IT/DevOps.
• Automation and IaC using Bash, Ansible, Python.

Skills

Advanced Polish

Wazuh (SIEM/XDR)

Linux Administration

OpenSearch/Elasticsearch

Scripting & Automation

Understanding Log Sources (auditd, sys

English (B2+)

Tools

Ansible

Python

Job description

LINK mobility group is seeking a hands-on Security Engineer to strengthen our SOC and automation capabilities. You will manage Wazuh SIEM, tune OpenSearch, and integrate security across Linux, Kubernetes, and cloud environments. Strong scripting and API automation are essential.

English proficiency required for international teams. You will contribute to incident response, log analysis, and security hardening in a complex hybrid infrastructure, collaborating with IT and DevOps to deliver robust