Remote Senior SecOps Engineer

Summary

Join Kontakt.io as a Senior Security Operations Engineer and build and lead the company's security operations from the ground up. Design, implement, and manage a comprehensive security operations framework to protect Kontakt.io systems, infrastructure, and data.

Requirements

• Experience in cybersecurity, with proven experience in security operations and incident response
• Hands-on experience with security tools, including firewalls, SIEM, IDS/IPS, endpoint protection, and cloud security solutions (AWS)
• Experience building security policies and frameworks from scratch in fast-paced or startup environments
• Deep expertise in cybersecurity principles, threat hunting, and incident response
• Advanced knowledge of networking, encryption, and authentication protocols
• Excellent communication and interpersonal skills, capable of working with both technical and non-technical teams to drive security initiatives
• Strong strategic thinking skills to anticipate threats and design proactive solutions

Responsibilities

• Conduct a comprehensive risk assessment to identify vulnerabilities, gaps, and key security challenges in the current infrastructure
• Create a multi-phase security roadmap, with short-term and long-term goals to improve the security posture of the company
• Design and implement security strategies for cloud environments to protect against sophisticated threats
• Architect and implement security solutions that safeguard the company’s network, data, and cloud AWS infrastructure
• Design and implement security operations framework, including incident response, threat detection, and vulnerability management processes
• Establish monitoring and logging solutions for real-time detection of security events using SIEM tools
• Establish a DevSecOps culture by integrating security into the software development lifecycle and drive the adoption of secure coding practices
• Collaborate with engineering, DevOps, and IT teams to ensure secure design, implementation, and operations of systems and applications
• Lead the investigation, containment, and remediation of the security incidents
• Continuously evaluate the security infrastructure and recommend improvements or new tools as threats evolve
• Perform regular security assessments, penetration tests, and red team exercises to measure and improve defenses
• Developing and conducting training programs for employees on information security and data protection policies
• Raising awareness about threats related to cyberattacks, phishing, social engineering, and other risks

Benefits

• Fast-paced and dynamic startup environment, flat structure
• B2B contract or a permanent agreement
• 20 days of fully paid holidays on the B2B contract
• Competitive salary and stock option plan
• Work with our IoT experts and trending technologies
• Remote or hybrid work (office in Krakow)
• Collaborative and self-organized environment
• Flexible working hours
• Private medical care, cafeteria system