Stručnjak za informacijsku sigurnost

About the role

The Information Security Specialist will lead the design, implementation and continuous improvement of security controls protecting Telemach's information systems, networks, cloud environments and endpoints. You will work closely with cross‑functional teams to ensure security measures align with the company’s strategy and respond to emerging cyber threats.

Key responsibilities

• Define security frameworks and monitor the application of security measures across the information system.
• Design, implement, configure and maintain security solutions for networks, endpoints, identities and cloud platforms.
• Develop and update security policies, procedures and internal documentation.
• Participate in cyber‑security projects, including tool deployment, data source integration and control validation.
• Analyze security incidents, logs, alerts, network traffic and endpoint telemetry to detect compromise.
• Administer and enhance detection rules, security policies, exceptions and tool configurations.
• Create and maintain technical playbooks, incident‑response procedures and hardening recommendations.
• Collaborate with network, system, cloud and application teams to remediate findings and vulnerabilities.
• Monitor new threats, TTPs and security technologies, proposing technical measures to increase resilience.
• Implement and operate advanced detection platforms such as EDR/XDR (e.g., CrowdStrike) and NDR/AI tools (e.g., Darktrace).
• Configure, tune and develop use cases for SIEM solutions, including log onboarding and correlation.

Required profile

• Strong understanding of information security principles and best practices.
• Experience with security monitoring, incident response and vulnerability management.
• Ability to work with cross‑functional teams and communicate technical findings clearly.

Required skills

• CrowdStrike (EDR/XDR)
• Darktrace (NDR/AI)
• SIEM platforms
• Log analysis and correlation
• Endpoint telemetry analysis
• Network traffic analysis
• Security policy development
• Detection engineering