Senior Cyber Security Engineer
pAt LINK, we connect businesses to customers through our communications products and services that drive engagement and satisfaction during each stage of the customer journey.br/You're probably already familiar with us: we're behind the messages you receive via SMS, WhatsApp, email, or even to check-in for your upcoming flight, receive delivery notifications, cash in a mobile coupon to your favorite store, and so much more. /p pYou will be joining a security team as the engineer and an equal technical partner. Our environment is a complex hybrid infrastructure combining bare-metal systems and multiple cloud platforms. We are looking for a hands‑on engineer who sees technology as a tool to solve real security and operational problems.br/This role requires a high level of independence and ownership. You should be comfortable planning and prioritizing your own work, investigating problems without detailed instructions, and taking technical topics from analysis through implementation and documentation. /p pYou will help us build and mature our SOC capabilities, improve threat detection, investigate security incidents, develop automation, and maintain the security monitoring platform. /p h3Key Responsibilities: /h3 ul libMaintaining and tuning the Wazuh HA cluster: /bMaking sure the system doesn't choke. This includes OpenSearch performance optimization, data retention management, tuning queues on managers and workers, and optimizing I/O load and disk space /li libWorking with raw logs: /bCreating custom decoders and local rules for specific services and edge cases that standard rules cannot handle. Fighting false‑positives at the detection logic level /li libSOAR Engineering (Automation): /bBuilding integrations and automation around APIs to remove manual workload from the future SOC team /li libK8s Security:
/bIntegrating container environments with the central logging system /li libIncident Response Processes: /bCreating pragmatic, technical security procedures and incident response playbooks /li libSystem hardening: /bWorking closely with IT and DevOps teams to secure operating systems and services /li libAutomation IaaC: /bBash, API, Ansible, Python /li /ul h3Must-have Requirements: /h3 ul libAdvanced knowledge of Polish is an absolute must-have /b; /li libWazuh (SIEM/XDR): /bCommercial experience with the system in a large enterprise environment. You need to understand how agents, decoders, and rules work under the hood /li libDeep Linux Administration: /bFluent administration and troubleshooting. We are looking for someone who can diagnose issues at the OS level /li libOpenSearch / Elasticsearch: /bProficiency in cluster management (ISM configuration, index lifecycle, troubleshooting queries and database performance) /li libScripting Automation: /bFluent scripting and working with REST APIs – you must know how to "glue" different systems together /li libUnderstanding Log Sources: /bGood knowledge of systems likeauditdandsyslog /li libEnglish: /bB2+ level (to comfortably work with technical documentation and communicate with international IT teams) /li /ul h3Nice-to-have: /h3 ul liExperience in designing and deploying Wazuh HA clusters from scratch /li liPractical knowledge of Ansible for configuration management /li liPractical knowledge of Python /li liOperational experience in a Security Operations Center /li liDeeper experience with Kubernetes security /li liPractical experiments using LLMs to support log analysis and automation in a SOC /li /ul h3We offer: /h3 ul liCo‑financed Medicover care /li liCo‑financed private life‑insurance /li liCo‑financed MultiSport card /li liExtra day off on your birthday /li liTeam building events /li liExtra fee from employer for retirement program (PPK) /li /ul #J-18808-Ljbffr
/bIntegrating container environments with the central logging system /li libIncident Response Processes: /bCreating pragmatic, technical security procedures and incident response playbooks /li libSystem hardening: /bWorking closely with IT and DevOps teams to secure operating systems and services /li libAutomation IaaC: /bBash, API, Ansible, Python /li /ul h3Must-have Requirements: /h3 ul libAdvanced knowledge of Polish is an absolute must-have /b; /li libWazuh (SIEM/XDR): /bCommercial experience with the system in a large enterprise environment. You need to understand how agents, decoders, and rules work under the hood /li libDeep Linux Administration: /bFluent administration and troubleshooting. We are looking for someone who can diagnose issues at the OS level /li libOpenSearch / Elasticsearch: /bProficiency in cluster management (ISM configuration, index lifecycle, troubleshooting queries and database performance) /li libScripting Automation: /bFluent scripting and working with REST APIs – you must know how to "glue" different systems together /li libUnderstanding Log Sources: /bGood knowledge of systems likeauditdandsyslog /li libEnglish: /bB2+ level (to comfortably work with technical documentation and communicate with international IT teams) /li /ul h3Nice-to-have: /h3 ul liExperience in designing and deploying Wazuh HA clusters from scratch /li liPractical knowledge of Ansible for configuration management /li liPractical knowledge of Python /li liOperational experience in a Security Operations Center /li liDeeper experience with Kubernetes security /li liPractical experiments using LLMs to support log analysis and automation in a SOC /li /ul h3We offer: /h3 ul liCo‑financed Medicover care /li liCo‑financed private life‑insurance /li liCo‑financed MultiSport card /li liExtra day off on your birthday /li liTeam building events /li liExtra fee from employer for retirement program (PPK) /li /ul #J-18808-Ljbffr