Security Engineer (IT Security)
你将要做什么安全运营和事件响应 · 操作和自动化安全工具 (Microsoft Defender XDR,Entra ID,Wazuh SIEM) 来保护公司的网络，系统和应用程序。·监测和分类安全事件，调查事故，并提出预防重复情况的措施；编制事件报告。·处理用户报告的鱼行为和维护电子邮件保护控制。·规划和实施网络安全措施，定义对操作系统，网络和服务的安全要求。终端点和访问安全·通过 MDM 管理设备安全和合规 (Intune,Kandji) 并跟踪终端点漏洞的纠正。· 确保根据业务需求获得访问权限；定期审查访问权限，清理团体和许可证。安全意识·运行全公司的安全意识计划：关于当前威胁的培训材料，与结果报告进行鱼模拟以及向员工传达安全信息。治理和合规 · 控制遵守企业安全标准并维护相关政策和程序。·支持内部和外部审计 (ISO/IEC 27001,SOC 2,BSI C5,PCI DSS),包括 Vanta 中的证据收集和发现的修复。· 审查新第三方软件，SaaS 和 AI 工具的安全性，以及法律。我们正在寻找什么？·安全运营或安全工程经验。· 亲身使用微软安全堆 (Defender XDR,Entra ID,Intune,Exchange Online) 和 SIEM 的经验。• 网络和 Windows,macOS 和 Linux 管理方面的良好理解。·熟悉 ISO/IEC 27001,SOC 2和其他安全合规框架。· 自动化脚本写作技能 （PowerShell,Python 或 Bash）. · 不技术观众解释安全主题的能力；流利英语。拥有：· 与 Vanta 或类似的合规自动化平台有经验。在 Gcore,我们希望你尽力努力享受旅程。我们的福利旨在支持你的增长，幸福感和工作以外的生活：· 竞争性补偿 · 灵活的工作时间以及混合或远程选择，根据你的职位 · 从世界任何地方工作一年最多45天 · 私人医疗保险为你和你的家庭* ·额外付费假期等
查看英文原文
What You’ll Do
Security Operations and Incident Response
- Operate and automate security tooling (Microsoft Defender XDR, Entra ID, Wazuh SIEM) to protect the company's network, systems, and applications.
- Monitor and triage security events, investigate incidents, and propose measures to prevent recurrence; prepare incident reports.
- Handle user-reported phishing and maintain email protection controls.
- Plan and implement network security measures and define security requirements for operating systems, networks, and services.
Endpoint and Access Security
- Manage device security and compliance through MDM (Intune, Kandji) and track remediation of endpoint vulnerabilities.
- Ensure access is granted based on business need; run periodic access reviews and cleanup of groups and permissions.
Security Awareness
· Run the company-wide security awareness program: training materials on current threats, phishing simulations with results reports, and security communications to employees.
Governance and Compliance
- Control compliance with corporate security standards and maintain related policies and procedures.
- Support internal and external audits (ISO/IEC 27001, SOC 2, BSI C5, PCI DSS), including evidence collection in Vanta and remediation of findings.
- Review the security of new third-party software, SaaS, and AI tools together with Legal.
What We’re Looking For
- Experience in security operations or security engineering.
- Hands-on experience with the Microsoft security stack (Defender XDR, Entra ID, Intune, Exchange Online) and a SIEM.
- Solid understanding of networking and of Windows, macOS, and Linux administration.
- Familiarity with ISO/IEC 27001, SOC 2, and other security compliance frameworks.
- Scripting skills for automation (PowerShell, Python, or Bash).
- Ability to explain security topics to non-technical audiences; fluent English.
Nice to have:
- Experience with Vanta or a similar compliance automation platform.
- Relevant certifications (e.g., Microsoft SC-200, CompTIA Security+ / CySA+) are a strong advantage.
Benefits
At Gcore, we want you to do your best work and enjoy the journey. Our benefits are designed to support your growth, well-being, and life beyond work:
- Competitive compensation
- Flexible working hours and hybrid or remote options, depending on your role
- Work from anywhere in the world for up to 45 days per year
- Private medical insurance for you and your family*
- Extra paid vacation and sick leave days*
- Support for life’s important moments and celebrations
- Language courses to help you connect and grow
- Modern, welcoming offices with snacks, drinks, and entertainment*
- Team sports and social activities*
*Benefits may vary depending on your location.
Equal Opportunity Employer
We provide equal opportunity to all applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity, gender expression, national origin, disability, or any other legally protected characteristics.
The world’s digital experiences run on something invisible: the infrastructure and software that keep them fast, reliable, and secure. At Gcore, you’ll help design and deliver that foundation for an AI-driven world.
We’re a global provider of infrastructure and software solutions for AI, cloud, network, and security, powering everything from real-time communication and streaming to enterprise AI and secure web applications. With 210+ edge locations, 50+ cloud regions, and thousands of GPUs, your work here can reach users and businesses across the globe.
You’ll collaborate with leading technology partners such as Intel, NVIDIA, Dell, and Equinix, and work on platforms that power digital products used around the world. Our vision is simple: to connect the world to AI, anywhere, anytime.
Want to work on technology that goes beyond a single product or industry? Join a global team of 550+ professionals building infrastructure and software that supports the entire digital ecosystem.
We are currently looking for a Security Engineer to join our Information Security team.
Originally posted on Himalayas