Cyber Security Engineer
Vexelon Cybersecurity
/job-details/11908
**ABOUT VEXELON**
Vexelon is a Managed Security Service Provider protecting organizations across four continents from our Security Operations Center in Skopje, North Macedonia. Through our Vexelon360™ framework, we help clients prepare for threats, strengthen their defenses, and detect and respond to incidents.
We’re looking for a
**Cybersecurity Engineer**
to strengthen the defensive capabilities we deliver to our clients. You’ll combine hands-on engineering with investigation and response, building detections, improving security controls, and automating security operations across diverse environments.
**RESPONSIBILITIES**
- Design, implement, and continuously improve security monitoring and detection capabilities.
- Configure and tune SIEM, EDR/XDR, IDS/IPS, and related security controls.
- Investigate security events and lead incident response activities, coordinating containment and remediation with clients and internal teams.
- Conduct threat hunting to identify suspicious activity and gaps in existing defenses.
- Develop and maintain detection rules, correlation logic, response playbooks, and security automations.
- Strengthen security controls across Windows, Linux, identity, network, and cloud environments, working with the relevant infrastructure owners.
- Support vulnerability management by helping prioritize findings and validate remediation.
- Automate security workflows using scripting, APIs, and integrations.
- Document investigations and technical changes, and communicate findings and recommendations clearly.
**REQUIREMENTS**
- **4+ years of professional cybersecurity experience**
, preferably in security engineering, SOC operations, detection and response, or incident response.
- Strong understanding of networking, Windows and Linux environments, Active Directory, and common attack techniques.
- Hands-on experience configuring, operating, and tuning SIEM and EDR/XDR technologies.
- Strong incident investigation, troubleshooting, and analytical skills.
- Experience developing detection rules and security automations.
- Proficiency in at least one scripting language, such as Python, PowerShell, or Bash.
- Familiarity with MITRE ATT&CK and its application to detection engineering and threat hunting.
- Ability to work independently, prioritize effectively, and collaborate with clients and technical teams.
- Ability to communicate technical findings clearly and maintain accurate documentation.
**NICE TO HAVE**
- Experience with Microsoft Sentinel, Splunk, Elastic, Wazuh, CrowdStrike, or comparable platforms.
- Security experience in AWS, Microsoft Azure, or Google Cloud environments.
- Digital forensics experience or experience handling complex incidents across multiple environments.
- Experience working for an MSSP or supporting multiple client environments.
- Relevant certifications in defensive security, incident response, cloud security, or penetration testing.
**WHAT WE OFFER**
- Hands-on work with real-world security environments and incidents.
- Exposure to international clients and a broad range of security technologies.
- Technical ownership and autonomy, with opportunities to shape how we detect and respond to threats.
- Professional development and certification support.
- A collaborative team that values technical depth, practical security outcomes, and continuous improvement.
**APPLY**
If you enjoy detecting threats, investigating incidents, and building effective defenses, we’d like to hear from you.
Send your CV to
**careers@vexelon.io**
with the subject line
**“Cybersecurity Engineer.”**
Vexelon is a Managed Security Service Provider protecting organizations across four continents from our Security Operations Center in Skopje, North Macedonia. Through our Vexelon360™ framework, we help clients prepare for threats, strengthen their defenses, and detect and respond to incidents.
We’re looking for a
**Cybersecurity Engineer**
to strengthen the defensive capabilities we deliver to our clients. You’ll combine hands-on engineering with investigation and response, building detections, improving security controls, and automating security operations across diverse environments.
**RESPONSIBILITIES**
- Design, implement, and continuously improve security monitoring and detection capabilities.
- Configure and tune SIEM, EDR/XDR, IDS/IPS, and related security controls.
- Investigate security events and lead incident response activities, coordinating containment and remediation with clients and internal teams.
- Conduct threat hunting to identify suspicious activity and gaps in existing defenses.
- Develop and maintain detection rules, correlation logic, response playbooks, and security automations.
- Strengthen security controls across Windows, Linux, identity, network, and cloud environments, working with the relevant infrastructure owners.
- Support vulnerability management by helping prioritize findings and validate remediation.
- Automate security workflows using scripting, APIs, and integrations.
- Document investigations and technical changes, and communicate findings and recommendations clearly.
**REQUIREMENTS**
- **4+ years of professional cybersecurity experience**
, preferably in security engineering, SOC operations, detection and response, or incident response.
- Strong understanding of networking, Windows and Linux environments, Active Directory, and common attack techniques.
- Hands-on experience configuring, operating, and tuning SIEM and EDR/XDR technologies.
- Strong incident investigation, troubleshooting, and analytical skills.
- Experience developing detection rules and security automations.
- Proficiency in at least one scripting language, such as Python, PowerShell, or Bash.
- Familiarity with MITRE ATT&CK and its application to detection engineering and threat hunting.
- Ability to work independently, prioritize effectively, and collaborate with clients and technical teams.
- Ability to communicate technical findings clearly and maintain accurate documentation.
**NICE TO HAVE**
- Experience with Microsoft Sentinel, Splunk, Elastic, Wazuh, CrowdStrike, or comparable platforms.
- Security experience in AWS, Microsoft Azure, or Google Cloud environments.
- Digital forensics experience or experience handling complex incidents across multiple environments.
- Experience working for an MSSP or supporting multiple client environments.
- Relevant certifications in defensive security, incident response, cloud security, or penetration testing.
**WHAT WE OFFER**
- Hands-on work with real-world security environments and incidents.
- Exposure to international clients and a broad range of security technologies.
- Technical ownership and autonomy, with opportunities to shape how we detect and respond to threats.
- Professional development and certification support.
- A collaborative team that values technical depth, practical security outcomes, and continuous improvement.
**APPLY**
If you enjoy detecting threats, investigating incidents, and building effective defenses, we’d like to hear from you.
Send your CV to
**careers@vexelon.io**
with the subject line
**“Cybersecurity Engineer.”**
