Mid-Level Cyber Security Engineer

About the role

Threye is a deep‑tech startup operating in the defense and simulation space. We are looking for a mid‑level Cyber Security Engineer (3–6 years experience) to own the security of our primarily on‑premise, hybrid environment while collaborating closely with infrastructure, networking, and development teams.

Key responsibilities

• Secure and manage on‑premise servers, firewalls, VPNs and internal services.
• Configure network segmentation and design access controls for internal tools such as Git and storage.
• Harden Linux and Windows systems and enforce baseline configurations.
• Deploy, tune and operate SIEM/EDR solutions (e.g., Wazuh, OSSEC, ELK, Splunk).
• Monitor logs, detect anomalies, reduce alert noise and respond to incidents.
• Work with development teams to secure APIs, conduct vulnerability assessments and basic penetration testing.
• Manage endpoint security, device control, patching and MDM where applicable.
• Strengthen identity systems (SSO, MFA, RBAC) and maintain audit documentation.
• Investigate security events, lead incident response and build playbooks.

Required profile

• 3–6 years of hands‑on experience in cybersecurity, network or system security.
• Strong problem‑solving mindset able to work with evolving, imperfect infrastructure.
• Comfortable operating in a low‑trust, high‑sensitivity environment.
• Ability to balance security requirements with productivity needs.

Required skills

• Networking fundamentals (TCP/IP, routing, firewalls, VPNs).
• Linux system administration and basic Windows administration.
• Firewalls such as Fortinet or pfSense.
• SIEM/log monitoring tools (Wazuh, ELK, Splunk, etc.).
• Vulnerability scanning tools.
• Identity and access management concepts (IAM, RBAC, MFA).
• Scripting for automation (Python, Bash).