MERCO represents a new digital finance offering, which is committed to security, transparency and performance. Our talented teams build the bridge between the old and new economy and own a wealth of experience in financial markets, regulation, technology and information security.

We are bringing a new financial services paradigm to the crypto economy. In scope of our growth plans we are seeking for a IT Security Specialist as part of our Technology team.

In the IT Security Specialist function, you will be responsible for the following:

• IT and Network Security
  • Ownership of IT security operation projects to further develop security systems (e.g. security monitoring, data leakage prevention and network security)
  • Contribute to the development of penetration testing and incident response programs
  • Support the continuous security monitoring and protection of IT systems
  • Contribute to security reports, dashboards and alerts to create an overall situational awareness of the threats
  • Assist in the review of applications and/or technology environments acquisition and/or procurement of new applications or technologies

• Incident Response
  • Act as a shift lead and escalation point of contact with our Cyber Defense Center team on-duty and provide on-call services when needed for incidents
  • Provide incident response / support to IT teams during security incidents. Investigate suspected security incidents, recommend and coordinate corrective actions
  • Analyze malware to identify its behavior, assess the impact and mitigate accordingly
  • Focus on triaging of SOC incidents, Malware Protection Systems, AV and EDR alerts
  • Drive improvements initiatives for detection and mitigation capabilities

• Threat Hunting
  • Perform internal technical security verification's, assessments, and threat hunting
  • Deep knowledge of IOCs (Indicators of Compromise) data correlation and meaningful alerting
  • Test the security posture of the MERCO’s platforms and perform compliance assessments of MERCO services and infrastructure
  • Identify gaps in the hardening of applications and infrastructure and propose mitigation controls collaborating with the IT Operations team
  • Develop in-depth threat models considering targeted attacks on services and infrastructure
  • Perform code and infrastructure design auditing for security flaws, as well as identify and handle security incidents and execute forensic tasks

For you to become part of MERCO’s journey, we require the following set of experience:

Must-have

• Recognised professional security certification (e.g. OSCP, CEH, CISSP, GIAC) or comparable experience
• Proven experience in Security Operation analysis, identifying, monitoring and controlling with at least 3 years on hands-on security incident handling and coordination
• Experience handling security incident, threat intelligence and auditing code, features, and system designs
• Excellent knowledge of securing IT infrastructure with respect to information security concerns
• Experience in IT security architectures design with focus on zero trust in public clouds
• Deep knowledge of IT security in areas such as system security, incident response, forensics, security monitoring management, and application security
• Solid understanding of secure software development best practices
• Knowledge and experience with Information Security Frameworks (e.g.: OWASP, ISO27001, NIST)

Optional

• Experience as pentester
• Advanced Microsoft certifications in the areas of Security, IAM and Architecture

At MERCO, our people make the difference. We look forward to receiving your full application (CV, Motivation Letter, Reference Letters and Diplomas).