Cyber security officer

Gaijin develops AAA-grade online games for PC, consoles, and mobile platforms, including the popular MMO "War Thunder", "Enlisted" and other games.

The Gaijin team consists of hundreds of talented game developers from all over Europe and is constantly growing.

We are looking for an Information Security specialist to join our team who will own incidents end to end: spot them, investigate, respond and draw conclusions so they don't happen again.

Key responsibilities:

• Incident management: from detection and classification to response, closure and post-incident analysis;
• Security risk assessment of cloud and network infrastructure;
• Maintaining documentation, as well as monitoring and auditing compliance with security policies and standards;
• Monitoring discovered vulnerabilities and ensuring they are remediated;
• Security analysis and monitoring of the infrastructure via SIEM;
• Developing and implementing custom SIEM correlation rules;
• Investigating incidents and providing recommendations to prevent them in the future;
• Analyzing network and cloud infrastructure for security issues and security policy violations;
• Coordinating and responding to security incidents;
• Developing incident response playbooks;
• Identifying security issues in internal and external systems;
• Finding weak spots in the infrastructure and preparing remediation recommendations.

Our candidate should have:

• Experience investigating information security incidents: event analysis; determining the cause, source and scale of an incident; defining its impact boundaries; searching for traces of the incident;
• Experience with SIEM systems: rule configuration; event analysis; reducing false positives; onboarding new event sources;
• Experience in information security audits: internal reviews of infrastructure, servers, systems and access configurations, assessing criticality and preparing remediation recommendations;
• Server security: reviewing configurations; access rights; services and basic hardening;
• Cloud platform security (AWS, Yandex, etc.): managing network access to cloud resources; account management; security services;
• Basic understanding of the main container security risks and protection methods;
• Understanding of identity and access management: role-based model, principle of least privilege, access management services (LDAP, FreeIPA);
• Understanding of the main types of attacks and how to detect and prevent them;
• Experience with endpoint and server protection (antivirus solutions);
• Experience with Linux (RHEL / Debian family) and Windows server operating systems.

Nice to have:

• Participation in ISO 27001 and SOC certifications;
• Experience automating alert handling with LLM agents;
• Experience with Wazuh.

Our offer to the finalist:

• Work at the company behind one of the most popular games in the world;
• Competitive salary (discussed individually with the candidate during the interview);
• Non-trivial tasks using innovative, cutting-edge technologies that keep our solutions attractive and relevant in the fast-changing IT market;
• An international team of strong professionals;
• Work format: remote. Flexible start of the working day;
• Health insurance.