Application Security SOC Associate

Location: 100% Remote (Candidates must be based in Poland)

Working Hours: 5 AM – 10 PM (8-hour shifts within this timeframe, shift schedule to be coordinated with the team). The remaining hours are covered by team members in Singapore

About the Role: Join our Information App Security team and contribute to safeguarding our applications' security. As a member of this team, you will handle security incidents related to application security. You will collaborate with other security teams and utilize a range of security tools including Web Application Firewalls, API security tools, Kubernetes security, and more.

Key Responsibilities:

• Monitor and investigate security alerts from Web Application Firewalls (WAFs), API security, Kubernetes security, Cloud security, and other systems
• Prepare incident reports documenting identified attacks and actions taken
• Coordinate with other teams to remediate detected incidents
• Work with security engineers and Product Owners to enhance the security posture of our applications
• Create and update cybersecurity runbooks for perimeter security
• Implement best practices for Web/API/Cloud/Kubernetes security
• Work in a 24/7 environment

Requirements:

• At least 2-3 years working experience in the SOC and/or Incident Management
• Advanced English skills
• Knowledge and experience of security and application security is essential
• Basic knowledge of Cloud and Kubernetes security
• Basic coding experience (Python, Terraform)
• Logical reasoning and problem-solving skills
• Ability to make decisions independently and multi-task under pressure, responding quickly to changing situations in complex environments without compromising quality
• Strong verbal and written communications skills
• Preferred candidates are those who have completed courses such as SecurityPL, Securac, HTTP400, HTTP500, and Firewall

Team:

• Information App Security team consists of approximately 13 members
• Currently, there are 4 members in this role, with a target of 7 members
• The team monitors incidents related to firewalls, Kubernetes clusters, cloud environments, and unusual logins. They do not monitor users, only applications

Learning Opportunities:

• Extensive learning opportunities available. Candidates do not need to know everything but must have a solid foundation and a willingness to learn

Offer:

• 100% remote work
• B2B via Experis
• MultiSport Plus
• Group insurance
• Medicover Premium
• E-learning platform
• Paid Referral Program