{"id":2280660,"url":"https://alion.io/job/muse-group-information-security-specialist","title":"Information Security Specialist","company":{"id":705205,"name":"Muse Group","domain":"mu.se","url":"https://alion.io/company/muse-group","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bulgaria"],"countries":["BG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":32000,"max_usd":94000,"period":"year","method":null,"sample_n":4493},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"GDPR","optional":false},{"name":"Graylog","optional":false},{"name":"Invicti","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-18T15:11:52Z","employer_posted_date":null,"last_verified_at":"2026-09-18T15:11:52Z","board_verified":false,"closed_at":null,"days_open":25,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":25},"description":"We are looking for an Information Security Specialist to strengthen our approach to cyber and business security. We need an expert who can embed security by default into our IT services, working closely with our IT Operations and Application Management teams.\n\nWe are actively integrating AI automation into relevant areas of the business and expect candidates with mindset focused on improving efficiency and deliver a better user experience.\n\nWork format is hybrid: 3 days on-site, 2 days remote.\n\nKey responsibilities\n\nSecure Software Development Lifecycle (S-SDLC)\n\nBuild S-SDLC mostly from scratch. Then own and continuously improve the company’s secure SDLC framework: requirements, design and architecture review gates, secure coding standards, and the role of SAST/DAST and dependency scanning within the pipeline. Work with product and engineering teams on adoption, and track compliance against the framework.\n\nSIEM implementation and management\n\nDefine the SIEM architecture, log source inventory, retention requirements, correlation rules and alerting logic, building on the company’s existing log-management approach. Partner with IT Operations and Enterprise IT, who own the underlying platform build and day-to-day maintenance.\n\nMonitoring of information security systems\n\nRegularly review output from the company’s security monitoring stack (endpoint detection and response, vulnerability scanning, SIEM, threat intelligence and etc.) and translate findings into prioritised, risk-based recommendations and escalations.\n\nInformation security audits\n\nPlan and run internal audits against ISO 27001 and the CIS Critical Security Controls (CIS18) or similar frameworks, maintain the related compliance trackers, and coordinate external audits, and penetration tests and remediation follow-up.\n\nSecurity architecture, configuration and “secure by default” analysis\n\nPrepare and analyse proposals for security architecture and secure configuration of infrastructure and products. Review new initiatives against “secure by default” and “secure by design” principles, and provide written recommendations to the owning teams.\n\nInformation security incident handling\n\nParticipate in incident response as a governance and coordination function: support the incident team, review evidence and logs, coordinate the data-protection breach assessment, and own post-incident root-cause and lessons-learned documentation.\n\nZero Trust concept\n\nDesign the company’s Zero Trust roadmap — identity-centric access, least privilege, network micro-segmentation, Zero Trust network access — and drive its adoption across corporate and product infrastructure, in partnership with the teams that implement it.\n\nImportant, what this role is and is not:\n\nIs: governance, architecture and configuration review, audit planning and execution, monitoring oversight, and coordination during incident response.\n\nIs not: hands-on implementation of infrastructure changes, production system administration, or a place on an on-call / out-of-hours rotation.\n\nHands-on access is expected for read purposes only — reviewing configurations, logs, dashboards and alerts to produce well-founded recommendations.\n\nRequired experience\n\nMore than 6 years of hands-on experience in information security or IT infrastructure, with a strong technical background — this is what allows the Specialist to review configurations and logs credibly, even though the role itself is not hands-on.\n\nSolid understanding of web and mobile application vulnerabilities and secure coding practices (e.g., OWASP Top 10), Ability to identify, explain, and mitigate risks based on the OWASP framework, familiarity with OWASP ASVS (Application Security Verification Standard) for security requirements and testing.\n\nPractical knowledge of ISO 27001 and the CIS Critical Security Controls (CIS18) or similar frameworks; experience running or supporting internal or external security audits.\n\nWorking knowledge of SIEM concepts and tools (e.g., Graylog, Splunk, Elastic, Microsoft Sentinel), secure SDLC / DevSecOps practices, vulnerability management, EDR, and identity and access management.\n\nUnderstanding of Zero Trust architecture principles and how to sequence their adoption.\n\nStrong written English and the ability to produce clear, business-facing documentation and recommendations.\n\nBeneficial:\n\nExperience in multi-product SaaS or consumer software company.\n\nPrior exposure to GDPR or data-privacy work is an advantage.\n\nFamiliarity with CrowdStrike Falcon, Invicti, or comparable EDR / vulnerability-scanning tools.\n\nRelevant certifications (e.g., CompTIA Security+, CSSLP, CISM, ISO 27001 Lead Auditor/Implementer, CISA or analogs).\n\nBenefits\n\nCreativity every day: Make inspiring products for musicians, artists and creators – no day is the same.\n\nImpactful work Influence the future of the music industry and change the lives of millions worldwide.\n\nWork set up: We’ll make sure you’re set up for success with the right work equipment, whether that’s company-provided hardware or an equipment allowance.\n\nGrowth and development: Receive specialized training, language lessons, conferences and learning materials.\n\nTeam well-being: Support for your mental health and wellbeing, including confidential help during life’s tougher moments.","description_format":"text","description_chars":5297,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Custom Software Development","Audio & Music Software"],"lifecycle":[{"event":"open","at":"2026-10-11T11:16:15Z"}],"visa":[],"liveness":{"score":45,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.705,"p_room":0.75,"age_days":24,"expected_fill_days":31,"reasons":["seen:24","win:late"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/muse-group-information-security-specialist","json_url":"https://alion.io/job/muse-group-information-security-specialist.json","meta":{"generated_at":"2026-10-13T18:03:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27578,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":705205},"rest":"https://alion.io/mcp/rest/get_company?id=705205"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmuse-group-information-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmuse-group-information-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmuse-group-information-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/muse-group-information-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmuse-group-information-security-specialist"}]}