{"id":4019664,"url":"https://alion.io/job/link-mobility-senior-cyber-security-engineer","title":"Senior Cyber Security Engineer","company":{"id":56629,"name":"LINK Mobility","domain":"linkmobility.com","url":"https://alion.io/company/link-mobility","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gliwice, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"ElasticSearch","optional":false},{"name":"Linux","optional":false},{"name":"OpenSearch","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Wazuh","optional":false},{"name":"WhatsApp","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Bash","optional":true},{"name":"GCP","optional":true},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-11-10T13:47:20Z","employer_posted_date":null,"last_verified_at":"2026-11-10T13:47:20Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"At LINK, we connect businesses to customers through our communications products and services that drive engagement and satisfaction during each stage of the customer journey. \nYou're probably already familiar with us: we're behind the messages you receive via SMS, WhatsApp, email, or even to check-in for your upcoming flight, receive delivery notifications, cash in a mobile coupon to your favorite store, and so much more. \nYou will be joining a security team as the engineer and an equal technical partner. Our environment is a complex hybrid infrastructure combining bare-metal systems and multiple cloud platforms. We are looking for a hands-on engineer who sees technology as a tool to solve real security and operational problems.\nThis role requires a high level of independence and ownership. You should be comfortable planning and prioritizing your own work, investigating problems without detailed instructions, and taking technical topics from analysis through implementation and documentation.\nYou will help us build and mature our SOC capabilities, improve threat detection, investigate security incidents, develop automation, and maintain the security monitoring platform.\nKey Responsibilities:\nMaintaining and tuning the Wazuh HA cluster: Making sure the system doesn't choke. This includes OpenSearch performance optimization, data retention management, tuning queues on managers and workers, and optimizing I/O load and disk space\n\nWorking with raw logs: Creating custom decoders and local rules for specific services and edge cases that standard rules can't handle. Fighting false-positives at the detection logic level\n\nSOAR Engineering (Automation): Building integrations and automation around APIs to remove manual workload from the future SOC team\n\nK8s Security: Integrating container environments with the central logging system\n\nIncident Response Processes: Creating pragmatic, technical security procedures and incident response playbooks\n\nSystem hardening: Working closely with IT and DevOps teams to secure operating systems and services\n\nYour Tech Stack:\nSIEM/XDR: Wazuh HA\n\nInfrastructure: Complex hybrid environment (Bare-metal, AWS, Azure, GCP)\n\nOS: Linux (various distributions)\n\nData / Logs: OpenSearch / Elasticsearch, auditd, syslog, custom decoders, local_rules\n\nContainerization: Kubernetes\n\nAutomation & IaaC: Bash, API, Ansible, Python\n\nMust-have Requirements:\nAdvanced knowledge of Polish is an absolute must-have;\n\nWazuh (SIEM/XDR): Commercial experience with the system in a large enterprise environment. You need to understand how agents, decoders, and rules work under the hood\n\nDeep Linux Adminstration: Fluent administration and troubleshooting. We are looking for someone who can diagnose issues at the OS level\n\nOpenSearch / Elasticsearch: Proficiency in cluster management (ISM configuration, index lifecycle, troubleshooting queries and database performance)\n\nScripting & Automation: Fluent scripting and working with REST APIs – you must know how to \"glue\" different systems together\n\nUnderstanding Log Sources: Good knowledge of systems like auditd and syslog\n\nEnglish: B2+ level (to comfortably work with technical documentation and communicate with international IT teams)\n\nNice-to-have:\nExperience in designing and deploying Wazuh HA clusters from scratch\n\nPractical knowledge of Ansible for configuration management\n\nPractical knowledge of Python\n\nOperational experience in a Security Operations Center\n\nDeeper experience with Kubernetes security\n\nPractical experiments using LLMs to support log analysis and automation in a SOC\n\nWe offer:\nHybrid work model after trial period\n\nCo-financed Medicover care\n\nCo-financed private life-insurance\n\nCo-financed MultiSport card\n\nExtra day off on your birthday\n\nTeam building events\n\nExtra fee from employer for retirement program (PPK)\n\nEmployee Referral Program\n\nSummer bonus\n\nFruits in the office\n\nLunch days: Mondays & Wednesdays\n\nFree parking (cars & bikes)\n\nTech stack\nWAZUH","description_format":"text","description_chars":3978,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Unified Communications"],"lifecycle":[{"event":"open","at":"2026-11-10T14:26:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":36,"reasons":["seen:0","win:early"],"computed_at":"2026-11-10T16:07:57Z"},"pay":null,"html_url":"https://alion.io/job/link-mobility-senior-cyber-security-engineer","json_url":"https://alion.io/job/link-mobility-senior-cyber-security-engineer.json","meta":{"generated_at":"2026-11-10T16:07:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3131,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":56629},"rest":"https://alion.io/mcp/rest/get_company?id=56629"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flink-mobility-senior-cyber-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flink-mobility-senior-cyber-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flink-mobility-senior-cyber-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/link-mobility-senior-cyber-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flink-mobility-senior-cyber-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4019664}},{"tool":"search_jobs","arguments":{"company":"linkmobility.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4019664},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}