Cyber Security Engineer

ABOUT VEXELON

Vexelon is a Managed Security Service Provider protecting organizations across four continents from our Security Operations Center in Skopje, North Macedonia. Through our Vexelon360™ framework, we help clients prepare for threats, strengthen their defenses, and detect and respond to incidents.

We’re looking for a Cybersecurity Engineer to strengthen the defensive capabilities we deliver to our clients. You’ll combine hands-on engineering with investigation and response, building detections, improving security controls, and automating security operations across diverse environments.

RESPONSIBILITIES

• Design, implement, and continuously improve security monitoring and detection capabilities.
• Configure and tune SIEM, EDR/XDR, IDS/IPS, and related security controls.
• Investigate security events and lead incident response activities, coordinating containment and remediation with clients and internal teams.
• Conduct threat hunting to identify suspicious activity and gaps in existing defenses.
• Develop and maintain detection rules, correlation logic, response playbooks, and security automations.
• Strengthen security controls across Windows, Linux, identity, network, and cloud environments, working with the relevant infrastructure owners.
• Support vulnerability management by helping prioritize findings and validate remediation.
• Automate security workflows using scripting, APIs, and integrations.
• Document investigations and technical changes, and communicate findings and recommendations clearly.

REQUIREMENTS

• 4+ years of professional cybersecurity experience , preferably in security engineering, SOC operations, detection and response, or incident response.
• Strong understanding of networking, Windows and Linux environments, Active Directory, and common attack techniques.
• Hands-on experience configuring, operating, and tuning SIEM and EDR/XDR technologies.
• Strong incident investigation, troubleshooting, and analytical skills.
• Experience developing detection rules and security automations.
• Proficiency in at least one scripting language, such as Python, PowerShell, or Bash.
• Familiarity with MITRE ATT&CK and its application to detection engineering and threat hunting.
• Ability to work independently, prioritize effectively, and collaborate with clients and technical teams.
• Ability to communicate technical findings clearly and maintain accurate documentation.

NICE TO HAVE

• Experience with Microsoft Sentinel, Splunk, Elastic, Wazuh, CrowdStrike, or comparable platforms.
• Security experience in AWS, Microsoft Azure, or Google Cloud environments.
• Digital forensics experience or experience handling complex incidents across multiple environments.
• Experience working for an MSSP or supporting multiple client environments.
• Relevant certifications in defensive security, incident response, cloud security, or penetration testing.

WHAT WE OFFER

• Hands-on work with real-world security environments and incidents.
• Exposure to international clients and a broad range of security technologies.
• Technical ownership and autonomy, with opportunities to shape how we detect and respond to threats.
• Professional development and certification support.
• A collaborative team that values technical depth, practical security outcomes, and continuous improvement.

APPLY

If you enjoy detecting threats, investigating incidents, and building effective defenses, we’d like to hear from you.

Send your CV to [email protected] with the subject line “Cybersecurity Engineer.”