WIAM is an international fintech company. We are growing and building our own information security function.
Our current task is to ensure that the infrastructure is protected "by default": events from all critical systems are collected in SIEM, threats are detected in time, and there is a clear incident response procedure.
You will be one of the key people in this area. You will work directly with the CTO, without bureaucracy. You will have a real impact on how security is organized in the company.
What you will do
- Configure and maintain Linux servers, services, and network components from a security perspective: access, MFA, firewalls, VPN, audit logs.
- Close vulnerabilities, monitor updates, check backups.
- Connect servers, services, and security tools to SIEM and ensure logs are received completely and on time.
- Analyze alerts, configure detection rules, and reduce false positives.
- Conduct initial incident investigations and escalate them.
- Automate routine tasks and maintain documentation and response scenarios.
Key Requirements
- 3+ years of practical experience in system administration or infrastructure information security. Experience where you configured systems yourself, not just analyzed events, is required.
- Confident Linux administration: servers, services, permissions, logs, diagnostics.
- Good understanding of networks: TCP/IP, DNS, TLS, VPN, routing, firewalls.
- Practical experience with SIEM: connecting data sources, analyzing alerts, or writing rules.
- Bash or Python scripting.
Will be a plus
- Experience with Wazuh, EDR, NGFW, IDS/IPS, and vulnerability scanners.
- Writing correlation rules and parsers.
- MITRE ATT&CK in practice.
- Experience with Windows and Active Directory.
What is expected in the first 3 months
- Understand the infrastructure and define your area of responsibility.
- Set up log collection from critical systems and alerts if logs stop being received.
- Verify key detection scenarios and fix major configuration issues.
Conditions
- Fully remote format.
- Career growth as the direction scales.
- Direct interaction with the CTO and the opportunity to build the information security direction "for yourself".
- Cooperation and payment terms are discussed individually.
