security engineer for cloud infrastructure

Gcore; United States; Remote; USD 100,000 - 170,000; Full time

Benefits offered by this job

Private medical insurance

Flexible working hours

Work from anywhere up to 45 days perปี

Paid vacation and sick leave

Language courses

Modern offices with snacks

Team sports and social activities

Job summary

Gcore ищет специалиста по безопасности для управления безопасностью инфраструктуры и защитой облачных сервисов. В обязанности входит эксплуатация и автоматизация инструментов безопасности, мониторинг инцидентов и подготовка отчетов, а также повышение эффективности политики безопасности и соответствия регламентам.

Кандидат будет работать с Microsoft Defender XDR, Entra ID, Intune, Exchange Online и SIEM, обеспечивая защиту сетей, серверов и рабочих станций в условиях глобальной удаленной работы.

Qualifications

• Опыт работы в службах безопасности или инженерии безопасности.
• Опыт работы с Microsoft Defender XDR, Entra ID, Intune, Exchange Online и SIEM.
• Твердое понимание сетей и администрирования Windows, macOS и Linux.
• Знание ISO/IEC 27001, SOC 2 и прочих рамок комплаенса.
• Скриптовые навыки в PowerShell, Python или Bash; умение объяснять темы безопасности неискушенным аудиториям.
• Свободное владение английским языком.

Responsibilities

• Оперативное управление и автоматизация инструментов безопасности для защиты сетей и систем.
• Мониторинг и кластеризация инцидентов, подготовка отчетов и превентивных мер.
• Обработка фишинга пользователей и поддержка почтовой защиты.
• Планирование и внедрение мер сетевой безопасности и требований к ОС, сетям и сервисам.
• Контроль безопасностью устройств через MDM (Intune, Kandji) и исправление уязвимостей.
• Проведение обзоров доступа и периодическая очистка групп и разрешений.
• Проведение программы безопасности и обучающих материалов, фишинг-симуляции.
• Сопровождение аудитов и сбор доказательств (Vanta) и устранение замечаний.
• Проверка безопасности нового ПО и SaaS с юридическим отделом

Skills

Security operations

Security engineering

Microsoft Defender XDR

Entra ID

Intune

Exchange Online

SIEM

Networking

Windows administration

macOS administration

Linux administration

ISO/IEC 27001

SOC 2

PowerShell

Python

Bash

Security communications

Fluent English

Tools

Intune

Kandji

Exchange Online

Job description

Описание

Gcore provides infrastructure and software solutions for AI, cloud, networking, and security. Its platforms support real-time communication, streaming, enterprise AI, and secure web applications.

Задачи

• Operate and automate security tooling, including Microsoft Defender XDR, Entra ID, and Wazuh SIEM, to protect the company’s network, systems, and applications
• Monitor and triage security events, investigate incidents, propose measures to prevent recurrence, and prepare incident reports
• Handle user-reported phishing and maintain email protection controls
• Plan and implement network security measures and define security requirements for operating systems, networks, and services
• Manage device security and compliance through MDM tools, including Intune and Kandji, and track endpoint vulnerability remediation
• Grant access based on business need, conduct periodic access reviews, and clean up groups and permissions
• Run the company-wide security awareness program, including training materials on current threats, phishing simulations, results reports, and employee security communications
• Control compliance with corporate security standards and maintain related policies and procedures
• Support internal and external audits, including evidence collection in Vanta and remediation of findings
• Review the security of new third-party software, SaaS, and AI tools with Legal

Требования

• Experience in security operations or security engineering
• Hands-on experience with Microsoft Defender XDR, Entra ID, Intune, Exchange Online, and a SIEM
• Solid understanding of networking and Windows, macOS, and Linux administration
• Familiarity with ISO/IEC 27001, SOC 2, and other security compliance frameworks
• Scripting skills in PowerShell, Python, or BashAbility to explain security topics to non-technical audiences
• Fluent English

Будет плюсом

• Experience with Vanta or a similar compliance automation platform, relevant certifications such as Microsoft SC-200, CompTIA Security+, or CySA+

Условия

• Competitive compensation
• Flexible working hours
• Work from anywhere in the world for up to 45 days per year
• Private medical insurance for the employee and family; benefits may vary by location
• Extra paid vacation and sick leave days; benefits may vary by location
• Support for important life moments and celebrations
• Language courses
• Modern offices with snacks, drinks, and entertainment; benefits may vary by location
• Team sports and social activities; benefits may vary by location