Cyber security officer

Gaijinent; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

Health insurance

Job summary

Gaijin is seeking an Information Security specialist to own incidents end to end, from detection to post-incident analysis, across cloud and on‑prem infrastructure. You will lead incident response, develop playbooks, and drive improvements in security controls.

The role requires strong experience in SIEM, security audits, cloud security (AWS), and Linux/Windows server environments. Remote work with international teams is offered, plus health coverage.

Responsibilities

• Incident management from detection to post-incident analysis.
• Security risk assessment of cloud and network infrastructure.
• Maintaining documentation and monitoring compliance with security policies.
• Remediating discovered vulnerabilities and monitoring closure.
• SIEM monitoring and custom correlation rule development.
• Investigating incidents and implementing preventive measures.
• Analyzing security issues in network and cloud resources.
• Coordinating incident response and developing playbooks.
• Identifying security gaps and providing remediation recommendations.

Skills

Incident investigation

SIEM expertise

Security audits

Server hardening

Cloud security (AWS)

Container security

IAM / least privilege

Network security

Linux (RHEL/Debian)

Windows Server

Russian language

Tools

AWS

Wazuh

LDAP/FreeIPA IAM tools

Job description

Gaijin develops AAA-grade online games for PC, consoles, and mobile platforms, including the popular MMO "War Thunder", "Enlisted" and other games.

The Gaijin team consists of hundreds of talented game developers from all over Europe and is constantly growing.

We are looking for an Information Security specialist to join our team who will own incidents end to end: spot them, investigate, respond and draw conclusions so they don't happen again.

Key responsibilities:

• Incident management: from detection and classification to response, closure and post-incident analysis;
• Security risk assessment of cloud and network infrastructure;
• Maintaining documentation, as well as monitoring and auditing compliance with security policies and standards;
• Monitoring discovered vulnerabilities and ensuring they are remediated;
• Security analysis and monitoring of the infrastructure via SIEM;
• Developing and implementing custom SIEM correlation rules;
• Investigating incidents and providing recommendations to prevent them in the future;
• Analyzing network and cloud infrastructure for security issues and security policy violations;
• Coordinating and responding to security incidents;
• Developing incident response playbooks;
• Identifying security issues in internal and external systems;
• Finding weak spots in the infrastructure and preparing remediation recommendations.

Our candidate should have:

• Experience investigating information security incidents: event analysis; determining the cause, source and scale of an incident; defining its impact boundaries; searching for traces of the incident;
• Experience with SIEM systems: rule configuration; event analysis; reducing false positives; onboarding new event sources;
• Experience in information security audits: internal reviews of infrastructure, servers, systems and access configurations, assessing criticality and preparing remediation recommendations;
• Server security: reviewing configurations; access rights; services and basic hardening;
• Cloud platform security (AWS, Yandex, etc.): managing network access to cloud resources; account management; security services;
• Basic understanding of the main container security risks and protection methods;
• Understanding of the main identity and access management: role-based model, principle of least privilege, access management services (LDAP, FreeIPA);
• Understanding of the main types of attacks and how to detect and prevent them;
• Experience with endpoint and server protection (antivirus solutions);
• Experience with Linux (RHEL / Debian family) and Windows server operating systems.
• Fluent Russian (spoken and written).

Nice to have:

• Participation in ISO 27001 and SOC certifications;
• Experience automating alert handling with LLM agents;
• Experience with Wazuh.

Our offer to the finalist:

• Work at the company behind one of the most popular games in the world;
• Competitive salary (discussed individually with the candidate during the interview);
• Non-trivial tasks using innovative, cutting-edge technologies that keep our solutions attractive and relevant in the fast-changing IT market;
• An international team of strong professionals;
• Work format: remote. Flexible start of the working day;
• Health insurance.