Corporate CSIRT Specialist

This role supports cybersecurity across a group operating e-commerce, payment, and fintech services that handle substantial amounts of personal information. The CSIRT specialist helps protect the reliability and safety of internal information and systems by preparing for incidents, managing risk, and coordinating emergency response.

The work includes responding to information-security incidents, analyzing attack methods against information systems, planning and running incident-response exercises, and implementing measures to prevent recurrence. The role also improves response processes, detects and analyzes security logs, and evaluates SIEM through proof-of-concept and implementation studies. Required experience includes at least five years in CSIRT or SOC work, analyzing logs from SASE, EDR, authentication platforms, or network equipment, building and operating cloud infrastructure such as AWS or GCP, and introducing and operating cloud services.

Applicants must meet the stated experience requirements. Experience managing information assets and risk assessments, knowledge of Zscaler or CrowdStrike, security certifications, DevSecOps, vulnerability assessment, or financial and cashless-payment domains is listed separately as welcome experience rather than a requirement.