Information Security Specialist
Embed security by default into IT services by designing secure SDLC, SIEM, Zero Trust, and audits while coordinating incident response and compliance for a SaaS company.
- Compensation
- Not disclosed
- Location
- Sofia, Bulgaria
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 6+ years
- Category
- Security
- Posted
Skills
Must have
- More than 6 years of hands-on experience in information security or IT infrastructure
- Solid understanding of web and mobile application vulnerabilities and secure coding practices (e.g., OWASP Top 10)
- Practical knowledge of ISO 27001 and the CIS Critical Security Controls (CIS18) or similar frameworks
- Working knowledge of SIEM concepts and tools (e.g., Graylog, Splunk, Elastic, Microsoft Sentinel)
- Understanding of Zero Trust architecture principles
- Strong written English and ability to produce clear, business-facing documentation
Full description
We are looking for an Information Security Specialist to strengthen our approach to cyber and business security. We need an expert who can embed security by default into our IT services, working closely with our IT Operations and Application Management teams.
We are actively integrating AI automation into relevant areas of the business and expect candidates with mindset focused on improving efficiency and deliver a better user experience.
Work format is hybrid: 3 days on-site, 2 days remote.
Key responsibilities
Secure Software Development Lifecycle (S-SDLC)
- Build S-SDLC mostly from scratch. Then own and continuously improve the company's secure SDLC framework: requirements, design and architecture review gates, secure coding standards, and the role of SAST/DAST and dependency scanning within the pipeline. Work with product and engineering teams on adoption, and track compliance against the framework.
SIEM implementation and management
- Define the SIEM architecture, log source inventory, retention requirements, correlation rules and alerting logic, building on the company's existing log-management approach. Partner with IT Operations and Enterprise IT, who own the underlying platform build and day-to-day maintenance.
Monitoring of information security systems
- Regularly review output from the company's security monitoring stack (endpoint detection and response, vulnerability scanning, SIEM, threat intelligence and etc.) and translate findings into prioritised, risk-based recommendations and escalations.
Information security audits
- Plan and run internal audits against ISO 27001 and the CIS Critical Security Controls (CIS18) or similar frameworks, maintain the related compliance trackers, and coordinate external audits, and penetration tests and remediation follow-up.
- Security architecture, configuration and “secure by default” analysis
- Prepare and analyse proposals for security architecture and secure configuration of infrastructure and products. Review new initiatives against “secure by default” and “secure by design” principles, and provide written recommendations to the owning teams.
Information security incident handling
- Participate in incident response as a governance and coordination function: support the incident team, review evidence and logs, coordinate the data-protection breach assessment, and own post-incident root-cause and lessons-learned documentation.
Zero Trust concept
- Design the company's Zero Trust roadmap — identity-centric access, least privilege, network micro-segmentation, Zero Trust network access — and drive its adoption across corporate and product infrastructure, in partnership with the teams that implement it.