Information Technology Security Engineer

Please note that this is a remote role open exclusively to candidates based in Bulgaria. A direct match with the profile is strictly required — please do not apply if you do not have proven hands-on experience in networking and cybersecurity (general software engineers will not be considered).

Company Description Sdefender LTD delivers an Agentic SOC Platform that enables MSSPs and enterprises to run their own security operations with AI agents performing end-to-end SOC tasks, from initial alert to final response. The platform monitors networks, endpoints, identities, email, cloud, and connected devices, investigating suspicious activity like an experienced analyst and correlating subtle signals into real attacks. Built-in decoy assets detect intruders early, allowing threats to be contained before they become breaches, while automated responses act within approved limits and remain fully explainable. Sdefender helps MSSPs protect more customers without proportional headcount growth and gives enterprises round-the-clock SOC coverage without relying on large internal teams or outsourced providers. The solution integrates with existing tools such as Palo Alto Networks, Fortinet, Cisco, Splunk, and QRadar and can be deployed on-premises when data residency is critical.

Role Description The Information Technology Security Engineer will play a key role in designing, implementing, and maintaining secure infrastructures that support Sdefender’s Agentic SOC Platform in customer environments. In this full-time remote role, the engineer will configure and harden network, endpoint, cloud, and application security controls, integrate with security tools (e.g., firewalls, EDR, SIEM), and ensure secure deployments across on-premises and cloud environments. Day-to-day responsibilities include reviewing and tuning security policies, analyzing security events, supporting incident response, and collaborating with product and engineering teams to enhance detection and response capabilities. The engineer will also participate in security architecture reviews, conduct risk assessments, support compliance initiatives, and document security configurations and best practices for internal and customer use.

Qualifications

• Candidates should possess strong skills in Cybersecurity and Information Security, with experience in security operations, threat detection, and incident response.
• Candidates should possess robust Network Security skills, including firewall configuration, VPNs, IDS/IPS, and secure network architecture design.
• Candidates should possess Application Security skills, including secure coding principles, vulnerability assessment, and remediation of web and API-based applications.
• Candidates should possess solid Information Technology skills, including system administration (Linux/Windows), cloud platforms (e.g., AWS, Azure, GCP), and scripting or automation (e.g., Python, Bash).
• Experience integrating and managing security tools such as SIEM, EDR, and firewalls (e.g., Palo Alto Networks, Fortinet, Cisco, Splunk, QRadar) is highly beneficial.
• Relevant certifications such as CISSP, CISM, CEH, OSCP, or vendor-specific security certifications are a plus.
• Strong analytical and problem-solving abilities, clear written and verbal communication skills, and the ability to collaborate