Planning, implementing, managing, monitoring, and upgrading security measures for the protection of the organization's data, systems, and networks, as a part of the Security Operations Center
Responding to and troubleshooting security and network security issues
Identifying threats and vulnerabilities to cloud systems and performing threat simulations
Monitoring and detecting malicious activity, responding to security incidents and alerts, and alerts in the cloud environment
Ensuring that the organization's data and infrastructure are protected by enabling the appropriate security controls
Participating in the change management process
Implementing Identity and Access Management and configuring cloud environments securely
Keeping cloud infrastructure current, providing security recommendations, identifying security gaps, and continually improving cloud security technologies and systems
Helping deliver our services effectively, efficiently, and reliably on a global scale
Working with internal and external Information security and Cybersecurity teams, business customers, and systems owners to enhance cloud security capabilities and help develop custom solutions to security gaps in visibility and capability
Developing and maintaining Security policies
Participation in completing and maintaining vendor risk assessment questionnaires (DDQs)
Requirements
3+ years of experience in cybersecurity operations
Experience with cloud-native security technologies, with focus on Sentinel
Experience in risk management, vulnerability management, and security compliance
Understand baseline security requirements and platform hardening principles
Operations experience running and maintaining software, operating a large cloud deployment, or creating and triaging alerts around the health and security of systems
Microsoft Defender management experience (e.g., Cloud, Endpoint, O365)
Understanding of networking basics (understand the OSI model, routing, firewalls, IP)
Bachelor's or Master's Degree in Computer Science or a related field (Preferred)
Experience in Microsoft Azure cloud computing platform (Preferred)
Relevant and verifiable cybersecurity certifications – such as Microsoft Azure Security Certification (Preferred)
Experience in SIEM (Security information and event management) (Preferred)
Knowledge of information technology (Preferred)
Benefits
Hybrid role with a comfortable office in the center of Belgrade
Office Lunches & Socials
Private medical insurance package, for you and your family
33 days of vacation days per year, including public holidays
Permanent employment contract
Access to training and coaching to support your professional development
The opportunity to receive a yearly performance bonus
Professional certifications sponsored by the company
Collaboration with talented, enthusiastic, global teams
Lead Security Monitoring and Response Analyst at Mastercard coordinating enterprise crisis response and ensuring organizational resilience. Managing multi - region incident response and critical operations continuity.
IT - Security & Resilience Chief Engineer focusing on Security Monitoring for LBBW. Leading IT - Security projects and ensuring compliance and operational security within IT.
Director leading security operations and enhancing vulnerability management at IDEXX. Driving strategic execution and operational excellence across key domains in cybersecurity.
IT Security Operations Specialist ensuring security of global networks, systems, and data. Implementing security controls and performing advanced threat hunting using Microsoft Sentinel and Darktrace.
Staff SOC Analyst driving advanced threat detection and incident response for Sunrun's security team. Leading complex investigations, mentoring analysts, and improving detection capabilities in a remote setup.
GSOC Analyst focusing on critical events and risk management operations at Netflix. Monitoring global threats and coordinating incident management efforts in a hybrid work setting.
GSOC Analyst monitoring global events and managing critical incidents for Netflix's security operations. Ensuring timely communication and assessment during major security threats.
Security Operations Center Engineer enhancing security posture via automation and threat hunting. Requires strong experience with SIEM and SOAR platforms and Python scripting.
Security Operations Vulnerability Analyst II identifying and mitigating security vulnerabilities. Collaborating with teams to ensure timely risk remediation and protection of enterprise systems.
Cyber Defender (SOC Analyst) acts as the key point of contact for major security incidents. Coordinating response efforts and enhancing procedures at a leading AI - powered security partner.