IT Security Specialist

Quick Facts

• Role: IT Security Specialist (SecSysAdmin)

• Focus: Security hardening, vulnerability management, endpoint and network protection, SIEM/WAF operations, identity hardening, and incident support

Description

You will define and enforce secure configurations (CIS Benchmarks, NIST) for Windows, Linux, and macOS, hardening systems by closing unused ports and removing insecure protocols. You will scan and assess vulnerabilities (CVSS and real-world exploit context), manage EDR/MDR and SIEM log collection, and administer Fortinet WAF/firewall/IDS-IPS/VPN components. You will enforce Least Privilege in Active Directory and Microsoft Entra ID, handle MFA/SSO/PAM, and support alert response through endpoint isolation, forensic data collection, and immutable backup resilience against ransomware.

Responsibilities

• Enforce secure configuration baselines using CIS Benchmarks and NIST (GPO/config tools) across Windows, Linux, and macOS

• Close unnecessary ports and eliminate legacy/insecure protocols (e.g., SMBv1, NTLMv1)

• Perform regular infrastructure scans, evaluate vulnerabilities using CVSS and exploit context, and plan patching with minimal business impact

• Manage EDR/MDR agents and configure log ingestion into SIEM

• Administer WAF, firewalls, IDS/IPS, and Fortinet VPN gateways

• During incidents: isolate compromised endpoints, collect forensic evidence for SOC/analysts, and monitor resilience of immutable backups against ransomware

Requirements

• SŠ/VŠ education in IT, telecommunications, or cybersecurity

• At least 1 year of experience in information security or cybersecurity

• Strong networking fundamentals (TCP/IP, OSI, VLAN, STP, LACP, QoS, DNS, DHCP, NAT)

• Proficiency with Windows Server 2016–2025

• Knowledge of Linux distributions (RHEL, Debian, SLES) and virtualization (Hyper-V, KVM)

• Familiarity with FortiOS (Fortinet), and orientation in EDR/SIEM tools

• Awareness of relevant regulations (NIS2, GDPR) and ISO 27000

• Analytical thinking, ability to do Root Cause Analysis under pressure, independent decision-making

• Reliability with privileged accounts; clean criminal record

• English B2 or higher (technical documentation and communication with global vendor support)

Benefits

• Hybrid work model with flexibility; participation in a rotating on-call system (24/7/365 critical infrastructure)

• Occasional on-site visits to data centers or branches for audits and planned maintenance

• 5 weeks of vacation + 2 additional “love” Fridays

• Meal support and benefits from Kofola

• More favorable calling plan for you and your family

• Multisport and cafeteria benefits (sport, culture, relaxation)

• Salary bonuses, company events, festivals, and more