4 months ago
Zagreb, CroatiaSenior
Responsibilities
- Improve and tune SIEM detection rules, alerting workflows, detection coverage, and signal quality.
- Enhance DLP and secure web gateway controls and remediate findings from CASB and ISPM platforms.
- Investigate security alerts and incidents, including root cause analysis, and improve incident response playbooks, exercises, and post-incident reviews.
- Support vulnerability management across cloud, endpoints, and SaaS platforms, including prioritization and remediation tracking.
- Provide security input on SaaS integrations, cloud architecture changes, and internal enterprise technology decisions.
- Automate security operations, reporting, investigation workflows, and compliance activities using scripting and responsible AI tooling.
- Own selected ISO 27001 controls, maintain audit evidence, track control gaps, and support audits, risk assessments, access reviews, and vendor security assessments.
- Communicate technical risk clearly to technical and non-technical stakeholders.
Requirements
- 5–7 years of hands-on information security experience.
- Practical experience operating and tuning ISPM, SIEM, DLP, CASB, EDR, and related security platforms.
- Real-world implementation experience with Zero Trust, identity-based access controls, least privilege, device posture enforcement, and continuous verification.
- Experience with incident response, security investigations, cloud logging, telemetry pipelines, and log source integration.
- Automation experience with Python, Bash, or similar scripting languages.
- Experience supporting ISO 27001 or similar compliance frameworks, including control ownership and audit readiness.
- Ability to independently own security controls, identify gaps, and drive measurable improvements.
- Full professional fluency in English and clear communication with technical and non-technical stakeholders.
- Preferred: experience with Google Cloud, Terraform or Pulumi, ISO audit preparation or support, and relevant certifications such as CompTIA Security+ or Google Professional Cloud Security Engineer.
Benefits
- 27 days of vacation.
- Supplementary and additional health insurance.
- 50% covered MultiSport membership.
- Hybrid working model for flexibility and balance.
About Datatonic
Datatonic is a London‑headquartered, privately held data and AI consultancy founded in 2013 that designs and implements cloud analytics, machine learning, and generative AI solutions, with a strong focus on Google Cloud. It delivers data platform engineering, MLOps, and BI projects for enterprises in telecommunications, media and entertainment, and financial services and insurance.