Informacje o stanowisku
Client:
Limango
Location:
Job Category:
Other
-
EU work permit required:
Yes
Job Reference:
826a3e7faed5
Job Views:
19
Posted:
23.01.2025
Expiry Date:
09.03.2025
Job Description:
DFIR Specialist / Security Engineer
As limango we create a company which has been specializing in e-commerce for 17 years. Together with platforms in the Netherlands, Poland, Austria and Germany, we are part of the OTTO Group, one of Europes leading e-commerce companies. We are the shopping platform with the largest selection of products for the whole family!
We work and play together. We value work-life balance and create a culture of respect, trust and equality. If these values are also key for you, there is a good chance that you will find your place with us.
What else you need to know?
100% remote position with flexible working hours (once in a while visit in Munich or Wroclaw office will be expected)
Your role and main tasks
- Responding to information security alerts and incidents through all response phases
- Analysing IoCs, suspicious network and email communication
- Co-ordinating additional support in case of more complex incidents
- Collaborating with group-level incident response team and relevant authorities in Poland and Germany
- Seeking for optimal solutions (processes, tools, procedures) to improve overall response capabilities
Weekend on-call expectations and hours?
- Approximately 2 days per month – typically uneventful
- Close collaboration with Otto – workshops in Hamburg twice a year
Training/certification budget?
- 2-3 internal trainings, access to the RangeForce platform
- Opportunity to co-create the team from the ground up, significant impact on team operations and quick decision-making
You will need
Professional requirements for the candidate:
- Previous experience in a similar role - ideally both on SOC L1 and L2
- Deep understanding of the end-to-end incident response process and cyber kill chain
- Working knowledge of MITRE ATT&CK framework and its real-life application
- Great understanding of MS Defender suite - mainly Defender for Endpoint and Defender for Office 365; KQL (Kusto) knowledge would be a great plus
- Working knowledge and experience in deployment of tools supporting incident response and digital forensics - such as FTK, Autopsy, Volatility, Wireshark, ExifTool, Snort, ...
- Working knowledge of ELK stack
- Fluency in English
- Bonus for any of the following certificates: GCFA, GEIR, GCIH, GNFA, SC-200, SC-300, ECIH
- Bonus for experience with cloud security incident response on AWS
- Bonus for German fluency
Personal requirement for the candidate:
- Top communication skills- this role requires constant collaboration with variety of stakeholders - from non-technical junior employees, through senior engineers, up to the top-level management
- "Im here to help" attitude
- Willingness to exercise own ideas, propose solutions, improve the environment.
- Experience with incident handling on AWS would be a Massive plus
Benefits
- Private healthcare
We provide access to the best specialists for you and your loved ones. - Language classes
English and German lessons in small groups, tailored to your skills. - Remote work and flexible working hours
Possibility of partial remote work, as well as adjusting working hours to your daily schedule. - Office in the center of Wrocław
Nearby cinema, fitness club and a large selection of lunch places. - Fruit Mondays
There is no shortage of coffee, fruit, pizza, sweets and healthy snacks in our office. - Company events in the best company
After hours we often organize interesting outings or meetings in our office.
What you can count for:
- Interesting and challenging work in the dynamic environment of the Internet industry - you will not get bored with us!
- The possibility of real shaping of the business - we value independence and delegate responsibility,
- Gaining experience in an international team, operating in different European markets.
Sounds good?
We cant wait to get to know you.
Please note that if you are NOT a passport holder of the country for the vacancy you might need a work permit. Check our Blog for more information.
Bank or payment details should not be provided when applying for a job. Eurojobs.com is not responsible for any external website content. All applications should be made via the Apply now button.
#J-18808-Ljbffr
Praca WrocławChief security officer WrocławWrocław - Oferty pracy w okolicznych lokalizacjach