Cyber Security Engineer

Description

The company is a provider of IT services, and this role sits in its security operations centre (SOC).

You will work on onboarding customers and connecting their systems to SOC platforms, with a focus on SIEM, Azure, Defender, Splunk and ITSM tools.

Responsibilities

• Set up, run and keep improving the SOC security tools, monitoring platforms and related cloud security services.
• Work with SIEM and SOAR platforms such as Sentinel and Splunk, along with endpoint protection and threat intelligence integrations.
• Give technical input on critical-severity incidents, help decide on escalations, and make sure response and follow-up actions are handled properly.
• Take part in threat hunting, threat intelligence work and security investigations, and support incident response when needed.
• Build and refine detection logic and monitoring capabilities inside SOC platforms.
• Build and maintain automations, integrations and CI/CD pipelines that make SOC detection and response faster and more efficient.
• Find and make improvements to SOC tools, detection logic and day-to-day processes.
• Write clear, accurate documentation covering technical solutions, configurations and SOC procedures.
• Work with other teams to put security controls, procedures and best practices in place.

Requirements

• A university degree or ongoing studies in cybersecurity, IT, computer science, engineering or a related field is preferred.
• 2 to 4 years of experience in cybersecurity or IT, in roles such as SOC analyst, security engineer, system administrator, network administrator or similar.
• Experience reviewing security events from log data across SIEM, SOAR, firewalls, intrusion detection systems, endpoint tools and network monitoring platforms.
• Hands-on experience with Microsoft Azure, Microsoft Entra ID (Azure AD) and cloud security concepts.
• Experience writing and tuning detection rules, onboarding log sources and supporting monitoring use cases in SOC platforms.
• A solid grasp of incident response and monitoring workflows, including alert triage, investigation and escalation.
• Good knowledge of Windows and Linux administration and basic system hardening.
• Understanding of networking basics, TCP/IP, authentication methods (MFA, SSO) and enterprise security principles.
• Scripting or automation skills in PowerShell, Python or Bash, and experience with APIs, are an advantage.
• You keep up with cybersecurity threats, technologies and best practices on your own initiative.
• Very good English, at least B2, for communicating across the company's international locations.
• Certifications are an advantage: Microsoft Certified Azure Security Engineer Associate (AZ-500), Microsoft Certified Security Operations Analyst Associate (SC-200), CompTIA Security+ or CySA+, and CCNA, Splunk or other relevant cybersecurity certifications.

Conditions

Monthly gross base salary of 2600 to 4700 EUR, depending on your level of expertise.

Hybrid working, set by your preference, with access to an office in central Riga when you need it.

Equal-opportunity statement: the company welcomes applicants regardless of background.

Personal data is processed for recruitment under GDPR Art. 6 (1) b and Section 26 (1) sentence 1 BDSG, and kept for the statutory period after recruitment ends.

Benefits

• 4 extra vacation days and birthday leave.
• A children's play space, "Happy Land", in the office, and more family-oriented perks.
• An individual development and learning plan with an annual budget for external training.
• Comprehensive health insurance, including dental and sports coverage.
• A trusting, supportive team where your ideas and initiative are welcomed.
• A friendly, multicultural and collaborative group of colleagues.