{"id":3466321,"url":"https://alion.io/job/esca-cybersecurity-specialist-security-engineer","title":"Cybersecurity Specialist / Security Engineer","company":{"id":4486781,"name":"ESCA","domain":"e-s-c-a.com","url":"https://alion.io/company/esca-3","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ukraine"],"countries":["UA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":7000,"max":9000,"currency":"USD","period":"month","gross":false,"usd_annual":108000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"BeyondTrust","optional":false},{"name":"Cloudflare","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"CyberArk","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Nessus","optional":false},{"name":"OpenVAS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Teleport","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"Grafana","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"Loki","optional":true},{"name":"OpenSearch","optional":true},{"name":"PCI DSS","optional":true},{"name":"Red Teaming","optional":true},{"name":"Snort","optional":true},{"name":"SOC 2","optional":true},{"name":"Suricata","optional":true},{"name":"Threat Modeling","optional":true},{"name":"Wazuh","optional":true}],"status":"live","first_seen_at":"2026-10-13T17:34:10Z","employer_posted_date":null,"last_verified_at":"2026-10-13T17:34:10Z","board_verified":false,"closed_at":null,"days_open":20,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":20},"description":"#vacancy #Cybersecurity Specialist / Security Engineer, #Cyprus office, 6-8k euros net. Fintech\nAbout the Role\nWe are looking for an experienced Cybersecurity Specialist / Security Engineer to secure and continuously improve the company’s server, network, cloud, and application infrastructure.\nThe ideal candidate combines strong hands-on technical expertise with the ability to independently investigate security incidents, assess risks, design secure architectures, and implement effective security controls. A key requirement is practical experience with Zero Trust architecture and Zero Trust Network Access (ZTNA), including secure identity-based access to internal infrastructure and critical systems.\nKey Responsibilities\n• Ensure the security of the company’s server, network, and cloud infrastructure.\n\n• Monitor and analyze information security events to detect attacks, scanning activity, anomalies, and unauthorized access attempts.\n\n• Respond to security incidents, including investigation, containment, remediation, root cause analysis, and documentation.\n\n• Conduct regular infrastructure security audits and manage vulnerabilities.\n\n• Harden Linux and Windows servers, operating systems, and network services.\n\n• Configure and maintain Firewalls, WAF, IDS/IPS, VPN, and DDoS protection solutions.\n\n• Ensure the security of Web applications and APIs.\n\n• Manage and control access to production infrastructure and critical systems.\n\n• Develop and maintain security policies, procedures, and Incident Response Playbooks.\n\n• Collaborate with DevOps engineers, system administrators, DBAs, and developers to identify and mitigate security risks.\n\n• Design, implement, and continuously improve the company’s security architecture and technical controls.\nRequired Qualifications (Must-Have)\n• 3+ years of hands-on experience in Cybersecurity / Information Security.\n\n• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, TLS, VPN, NAT, and network routing.\n\n• Solid Linux administration skills.\n\n• Practical experience configuring Firewalls, WAF, ACLs, and network segmentation.\n\n• Hands-on experience with Cloudflare or equivalent WAF/CDN/DDoS protection solutions.\n\n• Good understanding of the OWASP Top 10 and common Web/API attack vectors.\n\n• Practical experience with Vulnerability Management tools such as Nessus, OpenVAS, Qualys, or equivalents.\n\n• Knowledge of CVE/CVSS and the ability to assess the actual business and technical risks associated with identified vulnerabilities.\n\n• Experience with SIEM, IDS/IPS, and centralized log collection.\n\n• Ability to analyze system, network, application, and web server logs.\n\n• Experience investigating security incidents and working with Indicators of Compromise (IOCs).\n\n• Understanding of RBAC, MFA, PAM, the Principle of Least Privilege, and privileged access management.\n\n• Experience with Docker and an understanding of container security principles.\n\n• Understanding of SAST, DAST, dependency scanning, and secret scanning.\n\n• Ability to automate security tasks using Bash and/or Python.\nZero Trust — Mandatory Requirements\nPractical experience implementing Zero Trust Network Access (ZTNA) solutions and a solid understanding of Zero Trust architecture are essential for this role.\nThe candidate should be able to design, implement, and maintain a Zero Trust approach, including:\n• Designing and implementing Zero Trust security architecture.\n\n• Implementing ZTNA for employees’ and administrators’ access to internal infrastructure.\n\n• Replacing network/IP-based trust with identity-based access controls.\n\n• Implementing Device Trust and Device Posture checks.\n\n• Configuring MFA and Conditional Access policies.\n\n• Enforcing Least Privilege Access.\n\n• Implementing microsegmentation.\n\n• Providing short-lived access and temporary privileged access.\n\n• Monitoring and auditing administrative sessions.\n\n• Integrating Zero Trust solutions with IAM, SSO, and Identity Providers (IdPs).\n\n• Building secure access mechanisms for Linux and Windows servers, databases, internal Web services, and administrative panels. \n\n• Managing and securing access to critical infrastructure through solutions such as Cloudflare Zero Trust, Teleport, BeyondTrust, CyberArk, Tailscale, Zscaler, or equivalent platforms.\nNice to Have\n• Experience with AWS, Azure, or GCP security.\n\n• Kubernetes security experience.\n\n• Hands-on experience with Wazuh, Suricata, or Snort.\n\n• Familiarity with ELK/OpenSearch and Loki/Grafana.\n\n• Experience with HashiCorp Vault or equivalent secrets management solutions.\n\n• Experience conducting penetration tests or Red Team exercises.\n\n• Knowledge of Threat Modeling methodologies.\n\n• Experience building security monitoring systems and automating incident response.\n\n• Familiarity with ISO 27001, PCI DSS, SOC 2, or equivalent security standards.\nExpected Level of Expertise\nThe successful candidate must be able to independently manage the entire security threat and incident lifecycle:\nDetect → Analyze → Assess Risk → Contain → Remediate → Verify → Document\nWe are looking for a hands-on security professional who goes beyond operating security tools. The candidate must be capable of independently assessing risks, designing security architectures, making sound technical decisions, and implementing effective security measures to protect the company’s infrastructure and critical systems.","description_format":"text","description_chars":5376,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-29T15:24:45Z"}],"visa":[],"liveness":{"score":51,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.803,"p_room":0.75,"age_days":20,"expected_fill_days":25,"reasons":["seen:20","win:late"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":108000,"is_top_pay":false},"html_url":"https://alion.io/job/esca-cybersecurity-specialist-security-engineer","json_url":"https://alion.io/job/esca-cybersecurity-specialist-security-engineer.json","meta":{"generated_at":"2026-11-03T15:53:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22200,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4486781},"rest":"https://alion.io/mcp/rest/get_company?id=4486781"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fesca-cybersecurity-specialist-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fesca-cybersecurity-specialist-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fesca-cybersecurity-specialist-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/esca-cybersecurity-specialist-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fesca-cybersecurity-specialist-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3466321}},{"tool":"search_jobs","arguments":{"company":"e-s-c-a.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3466321},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}