Managed Detection and Response

Cyber attacks are constantly evolving – so are we – only through staying at the forefront of technology can we make sure that breaches and gaps never cause real damage. Our Managed Detection and Response (MDR) service keeps you safe from harm

Learn how

MANAGED DETECTION AND RESPONSE

Learn more

Consulting
Services

IT & Security consulting. Are you not sure if your current setup is the right one for you? Do you need assistance in evaluation, security consulting or penetration testing? We offer our services at competitive prices for Managed Security clients and customers of other Security services

IT Consulting and Software Architecture & Development
Cyber Security Consulting & Penetration testing
You can order our service as one off or continuous service
On-site & Remote - EU-wide

Managed Security
Standard

Security Information and Event Management (SIEM)

Get full visibility of your data, automate detection of threats, enrich you anomaly detection. Add MDR-service for full protection.

Full visibility of data and assets, security intelligence, quick deployment, unlimited scalability
Low Total Cost of Ownership - no platform licences, no source limits
Anticipate and counteract security threats
Deploy anywhere or purchase as SaaS

Managed Security
Enterprise

Security Information and Event Management (SIEM) + Endpoint Protection (EDR).

A security setup which offers full autonomous protection – everything that is covered in Managed Security Standard +

Enterprise-level visibility of data and assets, security intelligence, quick deployment, unlimited scalability
Low Total Cost of Ownership - no platform licences, no source limits
Full Endpoint Security - anticipate, protect & counteract against known and unknown threats
Deploy anywhere or purchase as SaaS

Learn more

SIEM Essentials vs. SIEM Standard

Compare the features of our SIEM as a Service solution or enrich SaaS with business supporting expert services. Our SIEM Essentials and SIEM Standard solutions are provided as a fully maintained SaaS solution, so you gain organization-wide visibility and security intelligence, quick deployment, unlimited scalability and evolving security. There are no platform licences or data source limits. To learn more about our offerings and to discuss your needs in detail, call us on:

+31 6 2919 4554

	SIEM Essentials	SIEM Standard
Windows logs detection and traceability for all Windows infrastructure, including data parsing and normalization to achieve cross-cutting within analyse
Linux logs detection and traceability for all servers, including data parsing and normalization to achieve cross-cutting within analyse
Log detection and traceability of device sources (firewalls, switches, routers..). Possibility to include the IDPS-solutions and Antivirus scanners in to the holistic security monitoring
Log detection and traceability of cloud services (e.g. AWS, G-Suite, Azure/O365), and common container platforms
Holistic log management providing data storing as JSON format, powerful search, filters, queries and report creation, data compression, long-term archiving, built-in integrations e.g. to Client’s or third party ITMS systems, fetching security data from cloud services, APIs for data leverage in other Security Analytics systems
Rich reporting capability to all normalized data from all data sources, correlation rules with alerting logic, cross-sectional analysis of vulnerabilities through the whole data mass. SIEM is open for Client’s own security analytics, correlation rules, configuration assessment policies.
Automated asset discovery and passive network scanning e.g. for MAC address spoofing, TCP / IP traffic analysis, IP header analysis. Discovery provides information of network connected assets, installed software, running services, system versions, patches etc. Also, cloud and container assets are discovered within the capabilities of API’s
Automated vulnerability assessment run analysis to identify known threats and vulnerabilities against continuously updated CVE knowledge basis. Vulnerability scanning helps to detect, correct and anticipate security vulnerabilities in business systems.
Configuration assessment monitors the configuration of system and application settings, and alerts in case of violation of set policies, standards or other hardening rules, or when detects of known vulnerabilities, missing patches or security settings. Assessment tool provides the suggestions for system remedies.
Host-based Intrusion Detection (HIDS) perform continuous analysis of target systems, exposing eg. hidden processes, rootkits, recognizing intrusion patterns, intrusion indicators, unregistered network listeners, malware, inconsistencies in system call responses.
File Integrity Monitoring (FIM) continuously follows the file system for detecting the compromised services and threats. FIM identifies e.g. changes in content, permissions, ownership, and attributes of files as well as identifies users and applications used to create or modify files.
Intrusion Detection in Cloud (CID) analyzes security data provided by Azure, AWS, and Google services, monitor infrastructure configuration, and identify security vulnerabilities. Similarly, CID monitors Docker host and container processes, network settings, disk, and analyzes runtime data anomalies and security threats.
Endpoint Detection and Response (EDR) provides the target systems can run automatic countermeasures related to e.g. to prevent cyber-attacks, hijacking user accounts, blocking malware, or isolating infected files. In addition of internal logic, threat and anomaly identification utilizes external threat knowledge basis, along with recommended measures to counter the threats as part of EDR’s countermeasure logic. The EDR functionality adds to the security of Customer’s existing Antivirus and IDPS tools.
Regulatory Compliance leverages the runtime data collected to support the monitoring of common compliance rules (e.g. PCI-DSS, GDPR, NIST, HIPAA) and the reporting of detected deviations from all systems within SIEM. Alerts include references to the sections of the compliance code that are affected by deviations.
Security Orchestration, Automation and Response (SOAR) collects threat identification and metadata from HIDS, CID, and FIM sources for MDR (Managed Detection & Response) expert analyse. With integration to log management it compiles data for automated threat analysis, processes workflows and responsibilities for security expert, IT team and other parties.
SaaS environment built on ISO 27001 certified data center contains always enough I/O capacity and data volume, and provides security, scalability, maintenance, evolvement and backup included, SSO support over modern IdP sources, auditing SIEM usage, separating log indexes, reporting, tools for user groups. System updates and maintenance included in SLA.

Consulting
Services

IT Consulting and Software Architecture & Development
Cyber Security Consulting & Penetration testing
You can order our service as one off or continuous service
On-site & Remote - EU-wide

Managed Security
Standard

Security Information and Event Management (SIEM)

Get full visibility of your data, automate detection of threats, enrich you anomaly detection. Add MDR-service for full protection.

Full visibility of data and assets, security intelligence, quick deployment, unlimited scalability
Low Total Cost of Ownership - no platform licences, no source limits
Anticipate and counteract security threats
Deploy anywhere or purchase as SaaS

Managed Security
Enterprise

Security Information and Event Management (SIEM) + Endpoint Protection (EDR).

A security setup which offers full autonomous protection – everything that is covered in Managed Security Standard +

Enterprise-level visibility of data and assets, security intelligence, quick deployment, unlimited scalability
Low Total Cost of Ownership - no platform licences, no source limits
Full Endpoint Security - anticipate, protect & counteract against known and unknown threats
Deploy anywhere or purchase as SaaS

SIEM as a Service:
Standard

Data normalization consistent with all sources, deployment of SIEM, HIDS, CID, EDR and SOAR solutions. Advanced security analytics enriched with anomaly detection, external threat feeds and analyzers, as well as the automatic vulnerability responses. And make it turnkey solution with MDR Service.

Enterprise-level visibility, security intelligence, quick deployment, unlimited scale
Low Total Cost of Ownership - no platform licences, no source limits
Anticipate and counteract security threats
Deploy anywhere or purchase as SaaS

SIEM as a Service:
Essentials

Data normalization consistent with all sources, holistic log management solution with minimal effort. Security inventory for assets, vulnerability analytics, alerts and dashboards are included in roll-out. Let MDR Service support your IT team resolving the security vulnerabilities and threats.

Get full-wide visibility to all assets data with minimum effort
Cost efficient solution for any size of organization
Deploy anywhere or purchase as SaaS
Get cybersecurity expertise to your use flexible

Consulting
Services

IT Consulting and Software Development, Cyber Security Consulting and Penetration Testing of the customer’s security solutions as well as optional benchmarking. The customer can choose from basic vulnerability assessments, periodic testing of systems to security consulting to enhance the current systems.

IT Consulting and Software Development
Cyber Security Consulting and best practices
Overview of vulnerability and risk exposure of company systems and environment
Vulnerability assessment and guidance for discovered risks

Endpoint Security

Endpoint Security and Endpoint Detection and Response (EDR) service are using the full power of Elastic Security.

Elastic Security offers an endpoint protection product which fully combines prevention, detection, and response into a single, autonomous agent. It is simple to use, it is speedy and it stops threats at the earliest stages of attacks.

Endpoint Security
Endpoint Security and Endpoint Detection and Response (EDR) service are using the full power of Elastic Security.

Elastic Security offers an endpoint protection product which fully combines prevention, detection, and response into a single, autonomous agent. It is simple to use, it is speedy and it stops threats at the earliest stages of attacks.

Powerful and easy to use

Integrated Endpoint Security with Elastic SIEM delivers a unique and comprehensive security operations solution which supports multiple user and use cases such as:

Ransomware & Malware prevention
Phishing & Fileless attack prevention
Reflex & Custom Prevention

Powerful and easy to use

Integrated Endpoint Security with Elastic SIEM delivers a unique and comprehensive security operations solution which supports multiple user and use cases such as:

Ransomware & Malware prevention
Phishing & Fileless attack prevention
Reflex & Custom Prevention

Enriched Data and Machine Learning

Provides full visibility for autonomous prevention, and collects, enriches, and contextualizes endpoint telemetry data with the help of Hunters and Responders.
Elastic Security is aided with Machine Learning models – Endpoint Security can block more than 99% of malware and ransomware attacks before it can cause any significant damage.

Enriched Data and Machine Learning

Provides full visibility for autonomous prevention, and collects, enriches, and contextualizes endpoint telemetry data with the help of Hunters and Responders.
Elastic Security is aided with Machine Learning models – Endpoint Security can block more than 99% of malware and ransomware attacks before it can cause any significant damage.

Speed, Scalability & Intelligent automation

Elastic Endpoint Security can collect and analyze 260 million events generated by 100,000 endpoints in 1 second and is almost limitless in scalability.
Threat hunting is made easy with a unique Threat Hunting UI which is build around user experience and workflow. Designed and used by world class security researchers.

Speed, Scalability & Intelligent automation

Elastic Endpoint Security can collect and analyze 260 million events generated by 100,000 endpoints in 1 second and is almost limitless in scalability.
Threat hunting is made easy with a unique Threat Hunting UI which is build around user experience and workflow. Designed and used by world class security researchers.

Expert Services for Cyber Security

Our mission is to offer the top notch professionals with the knowledge of latest cyber tech tools help you to build security into your business operations. We offer wide range of experts from roles of hands-on analysts to very demanding expert tasks or advising roles for management.

Expert Services for Cyber Security
Our mission is to offer the top notch professionals with the knowledge of latest cyber tech tools help you to build security into your business operations. We offer wide range of experts from roles of hands-on analysts to very demanding expert tasks or advising roles for management.

Penetration testers

Are you looking for an efficient team delivering regular penetration tests? Or do you need certified and experienced ethical hackers to detect potential vulnerabilities for external hacking attempts?
Our testers simulate external hacking and cyber attacks by black-box penetration methodologies and combine white-box testing to find vulnerable areas in your setup. We gain powerful results by simulating a malicious insider and mimicking attacks against the discovered weaknesses.

Penetration testing and analysis requires a knowledge-intensive approach to target the system. Depending on the testing goals and scope of the assignment, our testers will use various security assessment tools, programming tools, coverage tools, fault injection tools, and source code analyzers. Our delivery includes the following structured phases

Scoping and planning the pen-testing targets. The Client will provide the penetration tester with general information about why testing is necessary (e.g. compliance needs, testing security program, finding architectural weaknesses), assessment time frame, potential staff involvement, test expectations, whether testing arrangement is done on-site or off-site, which IP addresses are in the scope, which systems or critical applications are in the scope, how firewalls, WAFs or IDSs should be taken into account, is social engineering involved, is wireless network assessment needed etc. Thorough planning is necessary to accomplish good results.
In the reconnaissance phase we identify any additional information that may have been overlooked, was unknown, or not provided. Additional details are found in public sources and by using cyber security tools for fetching employee details, IDs, personnel internet foot-printing, properties of client systems, domains, sub-domains, technologies used by the client etc.
Threat discovery and Vulnerability scanning. When enough information has been gathered, we launch the scan of ports and services that could be available for targeted hosts, sub-domains, or e.g. for web applications. In this phase we identify any potential security weaknesses that could allow an outside attacker to gain access to the environment or technology being tested (e.g. domain structure, possible exploitable servers, access to local admin credentials, admin credentials etc).
In the exploitation phase our penetration testers will use options and opportunities to gain access to systems by validating, attacking, and exploiting the vulnerabilities found in the scanning of the systems.
Reporting and reviewing of exploitation. After the systems have been exploited and tested in the agreed timeline, the review collects the testing methods and provides exact findings of the vulnerabilities that compromised the client’s systems. The review provides information on which steps should be taken to remediate weaknesses and vulnerabilities. The report can also provide notes of attacks that worked, accessed devices and the associated vulnerabilities, exfiltrated data, exploitable personnel information etc. Also, pentesting cleanup will be performed in this phase (removal of scripts, accounts and files, reset settings etc.).
Leveraging test results. After the assignment has been completed, the client should prioritize the findings in their security assessment and do actions to mitigate the potential impacts of the vulnerabilities found. If needed, after the issues have been resolved by the client, our penetration testers can verify the vulnerability no longer exists by running a second test on the system.

Penetration testers

Scoping and planning the pen-testing targets. The Client will provide the penetration tester with general information about why testing is necessary (e.g. compliance needs, testing security program, finding architectural weaknesses), assessment time frame, potential staff involvement, test expectations, whether testing arrangement is done on-site or off-site, which IP addresses are in the scope, which systems or critical applications are in the scope, how firewalls, WAFs or IDSs should be taken into account, is social engineering involved, is wireless network assessment needed etc. Thorough planning is necessary to accomplish good results.
In the reconnaissance phase we identify any additional information that may have been overlooked, was unknown, or not provided. Additional details are found in public sources and by using cyber security tools for fetching employee details, IDs, personnel internet foot-printing, properties of client systems, domains, sub-domains, technologies used by the client etc.
Threat discovery and Vulnerability scanning. When enough information has been gathered, we launch the scan of ports and services that could be available for targeted hosts, sub-domains, or e.g. for web applications. In this phase we identify any potential security weaknesses that could allow an outside attacker to gain access to the environment or technology being tested (e.g. domain structure, possible exploitable servers, access to local admin credentials, admin credentials etc).
In the exploitation phase our penetration testers will use options and opportunities to gain access to systems by validating, attacking, and exploiting the vulnerabilities found in the scanning of the systems.
Reporting and reviewing of exploitation. After the systems have been exploited and tested in the agreed timeline, the review collects the testing methods and provides exact findings of the vulnerabilities that compromised the client’s systems. The review provides information on which steps should be taken to remediate weaknesses and vulnerabilities. The report can also provide notes of attacks that worked, accessed devices and the associated vulnerabilities, exfiltrated data, exploitable personnel information etc. Also, pentesting cleanup will be performed in this phase (removal of scripts, accounts and files, reset settings etc.).
Leveraging test results. After the assignment has been completed, the client should prioritize the findings in their security assessment and do actions to mitigate the potential impacts of the vulnerabilities found. If needed, after the issues have been resolved by the client, our penetration testers can verify the vulnerability no longer exists by running a second test on the system.

Security Consultants, Analysts and Researchers

Take advantage of our experienced Managed Detection and Response (MDR) specialist consultants to mitigate the security threats and vulnerability risks in your business. Our Consultants design and implement security architectures, Security Information and Events Management (SIEM), Endpoint Detection and Response (EDR) and Security Orchestration, Automation and Response (SOAR) solutions with the right technology for your need. The Consulting services also include security audits, risk analysis and vulnerability assessments.

Our Consultants usually work under the guidance of a CISO executing the development of organization’s security by

running security audits and risk assessment
preparing action plan and design of security architectures
implementing SIEM solution gaining holistic view to all data of an organization
implementing EDR solution, leveraging Machine Learning in anomaly and threat detection
initiating of MDR service, running incident response processes with SOAR platform
consulting security hardening processes for customer

Our MDR supports the daily incident investigation, preparing response actions and security development. Examples of the expertise areas are:

Security Analytics
Intrusion Detection
File Integrity Monitoring
Vulnerability Detection
Configuration Assessment
Incident Response
Regulatory Compliance
Cloud & containers security

Security Consultants, Analysts and Researchers

Our Consultants usually work under the guidance of a CISO executing the development of organization’s security by

running security audits and risk assessment
preparing action plan and design of security architectures
implementing SIEM solution gaining holistic view to all data of an organization
implementing EDR solution, leveraging Machine Learning in anomaly and threat detection
initiating of MDR service, running incident response processes with SOAR platform
consulting security hardening processes for customer

Our MDR supports the daily incident investigation, preparing response actions and security development. Examples of the expertise areas are:

Security Analytics
Intrusion Detection
File Integrity Monitoring
Vulnerability Detection
Configuration Assessment
Incident Response
Regulatory Compliance
Cloud & containers security

Cyber Security Advisors (CSA) and CISOs

Take advantage of cost effectiveness, competence and flexibility with a CISO consultancy instead of a full-time security manager. Our CISO experts have a strong real-world security and process experience, and are available on-site or virtually depending on your requirements. Pragmatic approach to the best practices, recognized methodologies and technology of cyber security ensures great results of CISO assignment.

The first tasks of our CISO is to survey your security needs. The CISO is responsible for the base of the security strategy and implementation of the processes. During the assignment the CISO is in touch with our Security Team at Recmatic to identify the best tools, technologies and practices for the IT security and protection of business operations. Our service is flexible and can be tailored specifically to your needs including areas such as:

Risk Reviews, audit management
Vulnerability Management Monitoring
Company policy initiatives
Data breach management, data doss prevention deployment
Compliance Initiatives (PCI-DSS, GDPR, HIPAA, NIST)
Identity and Access management, privilege auditing
Secure IT Architecture, configurations, network segmentation
Encryption, tokenization, access key management
End-to-end and point-to-point encryption
Holistic anti-malware detection
Secure messaging, Anti-Virus, Anti-Spam, Archiving solutions
Security Information and Event Management (SIEM), application security
Intrusion Detection and Prevention (IDS/IPS)
Incident response, SOC processes
Security Training Services, Security Program Design

Cyber Security Advisors (CSA) and CISOs

Risk Reviews, audit management
Vulnerability Management Monitoring
Company policy initiatives
Data breach management, data doss prevention deployment
Compliance Initiatives (PCI-DSS, GDPR, HIPAA, NIST)
Identity and Access management, privilege auditing
Secure IT Architecture, configurations, network segmentation
Encryption, tokenization, access key management
End-to-end and point-to-point encryption
Holistic anti-malware detection
Secure messaging, Anti-Virus, Anti-Spam, Archiving solutions
Security Information and Event Management (SIEM), application security
Intrusion Detection and Prevention (IDS/IPS)
Incident response, SOC processes
Security Training Services, Security Program Design

Careers at Recmatic

We are always looking for good people to join our international organisation. Whether you are a young professional or a seasoned expert, there is an opportunity for you to work with us.

Careers at Recmatic
We are always looking for good people to join our international organisation. Whether you are a young professional or a seasoned expert, there is an opportunity for you to work with us.

International
assigments

We have interesting opportunities and challenging projects within our international customer base, for permanent and contractor staff.

We offer international projects across Europe in IT Development and Cyber Security Consulting
Our Clients work in different industries from manufacturing to services and banking
Project lengths vary from a few weeks to several months

Develop
your expertise

We pride ourselves in having the best experts working for us – so whether you are already an expert or quickly becoming one, we are the right place for you!

Our senior experts work closely with our junior members to share knowledge and expertise
We offer comprehensive training for all our experts
You can earn extra bonus through good performance

Comprehensive
employee benefits

all our employees enjoy a broad range of benefits such as: extra healthcare*, pension scheme*, choosing of own devices and tools for work, incentives and company events.

*if applicable

Competetive base salary, performance based bonus and chance to get equity in the business
Flexible working from our Offices in City Centre locations or comfortably from your home
International environment with projects all over Europe

International
assigments

We have interesting opportunities and challenging projects within our international customer base, for permanent and contractor staff.

We offer international projects across Europe in IT Development and Cyber Security Consulting
Our Clients work in different industries from manufacturing to services and banking
Project lengths vary from a few weeks to several months

Develop
your expertise

We pride ourselves in having the best experts working for us – so whether you are already an expert or quickly becoming one, we are the right place for you!

Our senior experts work closely with our junior members to share knowledge and expertise
We offer comprehensive training for all our experts
You can earn extra bonus through good performance

Comprehensive
employee benefits

all our employees enjoy a broad range of benefits such as: extra healthcare*, pension scheme*, choosing of own devices and tools for work, incentives and company events.

*if applicable

Competetive base salary, performance based bonus and chance to get equity in the business
Flexible working from our Offices in City Centre locations or comfortably from your home
International environment with projects all over Europe

Join our team of experts!

You can join us in Helsinki, Amsterdam or Warsaw. Check below for further details.

SENIOR SECURITY TESTER/ANALYST

Learn more

Location: Warsaw / Home office

Salary: 150 – 250 PLN/hr (B2B) / 18-24k PLN (permanent contract)

We are growing our team with experienced Senior Security Testers/Analyst for our Location in Warsaw, Poland. Our business and partnerships are growing at fast pace in the Nordics and we are looking to strengthen our capabilities in the Information Security field. Customers see our Security Testing as an excellent tool to strengthen their ability to be secure in an ever-changing world. That’s why we want to hire the best Testers to aid our clients and partners to provide the highest level of security.

As a member of our team, you make sure our team can find the best security solution for our customers by testing the systems before and after implementation. We expect you to be a leading figure in our business and bring new ideas and actively find new ways to stay ahead of the game.

WHAT WE EXPECT FROM YOU

You are skilled in programming languages such as SQL, C and C ++, Python, JavaScript, PHP
You are experienced with security assessment tools such as Kali Linux, Burp Suite, Nessus, SQLmap, Wireshark, Elasticsearch, Aircrack-ng, Metasploit
You have excellent knowledge of security frameworks such as NIST, CIS, SOX, HIPAA
You know your way around operating systems such as Linux, Unix, Windows

Certifications are seen beneficial, but not mandatory:

GIAC Penetration Tester (GPEN) Certification
Offensive Security Certified Professional (OSCP)
Certified Ethical Hacker (CEH) Certification
Other certifications from major vendors such as MCP, MCSE or CCNA Security

Other requirements

You speak and write English on business level
You have the ability to travel – up to 30%, mainly EU countries.

WHAT ARE YOUR RESPONSIBILITIES

You understand the complex systems as well as the technical terms needed in day to day activities
You carry our remote and/or onsite testing of client networks and infrastructure to find and expose weaknesses in security.
You work in partnership with clients to determine the scope of the requirements and lead the customers to the best solutions for their specific need.
You plan and execute penetration methods, scripts and tests.
You advise our clients on the best methods to fix or lower security risks to their systems.
You understand and consider the impact your ‘attack’ will have on the client’s business and users.
You create reports and recommendations based on the results of your testing.
You understand the business risks and advice the clients on future risks if found threats and faults are not fixed.

WHAT YOU CAN EXPECT FROM US

You get to work in a challenging international environment and have the chance to shape our team and culture with us.
You have the chance to form and lead our Security Analyst teams at our locations.
We work in a professional, but relaxed way, with opportunities to use both home-office as well as our office close to Warsaw Airport.
We provide you with the best tools – you tell us what you need, and we will provide this to you
We offer incentives and performance-based bonuses on top of a very competitive salary.
Through us you will have leadership opportunities in a growing international business.

Apply by sending your CV at info@recmatic.com

OPEN APPLICATION

Learn more

Location: Warsaw / Home office

Salary: 100 – 200 PLN/hr (B2B) / 12-18k PLN (permanent contract)

We are growing our team with experienced SOC Analyst for our Location in Warsaw, Poland. Our business and partnerships are growing at fast pace in the Nordics and we are looking to strengthen our capabilities in the Information Security field. Customers see our Security Testing as an excellent tool to strengthen their ability to be secure in an ever-changing world. That’s why we want to hire the best Testers to aid our clients and partners to provide the highest level of security.

The SOC analyst is responsible for first level monitoring and maintaining the security tools that are used to secure our clients. The person will be responsible for generating and responding to tickets from our SIEM tools and escalating when appropriate to Engineers or vCTO’s. Qualified candidates should have exposure to network security assets (Firewalls/AV/IPS/SIEM). They will need excellent documenting skills as well as strong Interpersonal skills.

WHAT WE EXPECT FROM YOU

At least 2 years hand-on experience in system or network administration
Familiarity with network, system, and security administration, including:
- Fundamental Windows and Linux administration
- Next Generation firewall
- Intrusion Detection/Prevention systems
- Vulnerability management platforms
- Enterprise endpoint protection
- DNS and fundamental TCP/IP protocols
First experience in cloud environments
Knowledge and experience in SIEM platforms including creating and modifying queries and alerts.
Hands-on experience with endpoint security and vulnerability scanners.
Successfully execute and triage Incident response procedures
Understanding of threat intelligence models and data
Understanding of incident response procedures and practices
Experience with security automation technologies, like Phantom are highly desirable
Formal incident response training or certification is seen beneficial

Other requirements

You speak and write English on business level
You have an interest in growing knowledge in the Security field
You want to pursuit or complete Security related certifications

WHAT ARE YOUR RESPONSIBILITIES

Managed Detection and Response – 70%

Effectively perform managed detection and response for clients, entailing:

Hunt client data sources such as:
- SIEM
- Next Generation Firewalls
- Endpoint Protection platforms
- Vulnerability management and scanners
- Windows and Linux server logs
- Application server logs
- Identity management platforms
Make use of varied, disparate, constantly changing threat information
Operate SIEM and other data analysis platforms
Report on threat and vulnerability data using risk-evaluation methodologies

Security Operations – 30%

Effectively perform security operations duties such as:

Provide Tier-1 support for our clients
Use our Service Desk ticketing system
Collaborate with Tier-2 and 3 level support
Schedule internal Vulnerability Scans though our SIEM tool
Monitor service requests to ensure prompt action and completion

WHAT YOU CAN EXPECT FROM US

You get to work in a challenging international environment and have the chance to shape our team and culture with us.
You have the chance to form and lead our Security Analyst teams at our locations.
We work in a professional, but relaxed way, with opportunities to use both home-office as well as our office close to Warsaw Airport.
We provide you with the best tools – you tell us what you need, and we will provide this to you
We offer incentives and performance-based bonuses on top of a very competitive salary.
Through us you will have leadership opportunities in a growing international business.

Apply by sending your CV at info@recmatic.com

Learn more

Didn’t find what you were looking for in our open positions? Then feel free to tell us about you and why we should welcome you in our team. Please remember to add into your application at which location you would like to work, your salary wish and of course position you apply for.

Send the application at careers(at)recmatic.com, with the subject line “Open Application” following with the location you apply for. We will do our best to get back to you in a timely manner.

Join our team of experts!

You can join us in Helsinki, Amsterdam or Warsaw. Check below for further details.

SENIOR SECURITY TESTER/ANALYST

Learn more

Location: Warsaw / Home office

Salary: 150 – 250 PLN/hr (B2B) / 18-24k PLN (permanent contract)

WHAT WE EXPECT FROM YOU

You are skilled in programming languages such as SQL, C and C ++, Python, JavaScript, PHP
You are experienced with security assessment tools such as Kali Linux, Burp Suite, Nessus, SQLmap, Wireshark, Elasticsearch, Aircrack-ng, Metasploit
You have excellent knowledge of security frameworks such as NIST, CIS, SOX, HIPAA
You know your way around operating systems such as Linux, Unix, Windows

Certifications are seen beneficial, but not mandatory:

GIAC Penetration Tester (GPEN) Certification
Offensive Security Certified Professional (OSCP)
Certified Ethical Hacker (CEH) Certification
Other certifications from major vendors such as MCP, MCSE or CCNA Security

Other requirements

You speak and write English on business level
You have the ability to travel – up to 30%, mainly EU countries.

WHAT ARE YOUR RESPONSIBILITIES

You understand the complex systems as well as the technical terms needed in day to day activities
You carry our remote and/or onsite testing of client networks and infrastructure to find and expose weaknesses in security.
You work in partnership with clients to determine the scope of the requirements and lead the customers to the best solutions for their specific need.
You plan and execute penetration methods, scripts and tests.
You advise our clients on the best methods to fix or lower security risks to their systems.
You understand and consider the impact your ‘attack’ will have on the client’s business and users.
You create reports and recommendations based on the results of your testing.
You understand the business risks and advice the clients on future risks if found threats and faults are not fixed.

WHAT YOU CAN EXPECT FROM US

You get to work in a challenging international environment and have the chance to shape our team and culture with us.
You have the chance to form and lead our Security Analyst teams at our locations.
We work in a professional, but relaxed way, with opportunities to use both home-office as well as our office close to Warsaw Airport.
We provide you with the best tools – you tell us what you need, and we will provide this to you
We offer incentives and performance-based bonuses on top of a very competitive salary.
Through us you will have leadership opportunities in a growing international business.

Apply by sending your CV at info@recmatic.com

OPEN APPLICATION

Learn more

Send the application at careers(at)recmatic.com, with the subject line “Open Application” following with the location you apply for. We will do our best to get back to you in a timely manner.

About Recmatic

Recmatic is a specialist in cyber security, software development and IT consultancy providing a wide scale of technically experienced professionals for customer-driven projects and expert outsourcing. In addition to our in-house experts, we leverage the wide network of professionals that allows us to flexibly and efficiently bring together variation of expertise.

About Recmatic
Recmatic is a specialist in cyber security, software development and IT consultancy providing a wide scale of technically experienced professionals for customer-driven projects and expert outsourcing. In addition to our in-house experts, we leverage the wide network of professionals that allows us to flexibly and efficiently bring together variation of expertise.

Contact us for more information.

We keep you protected

Value
for our
customer

We don’t stop at “the minimum necessary”, we strive to take care of our customers and their needs with expertise and commitment. We are proud to offer the best Managed Detection and Response services to our customers and the right price. Our service is easy to purchase and set up, it’s easy to upgrade or suspend.

Innovative
consultancy
provider

We value new ideas and breakthroughs, we don’t hang on to old practices for comfort – we strive to find better and more effective ways to offer the best service possible. Thanks to our strategic partnerships we can provide excellent customer service, the best products and can continuously improve on our performance.

The right partner
for your
security needs

We value honesty, respect and integrity – we want to make sure that you get the right product for your need. We work with a solution first approach and value long lasting customer relationships. To make that happen we hold ourselves to high standards in work, relationships and keeping true to our values.

In partnership with Sofecta

Recmatic is working in close partnership with Sofecta. Together we deliver state-of-the-art Managed Detection and Response (MDR) Service and Cyber Security Consulting in Europe.

Sofecta is an independent IT-company with certified Microsoft & Elastic experts. Sofecta is also the first Finnish certified MSP for Elastic.

We keep you protected

Value
for our
customer

Innovative
consultancy
provider

The right partner
for your
security needs

In partnership with Sofecta

Recmatic is working in close partnership with Sofecta. Together we deliver state-of-the-art Managed Detection and Response (MDR) Service and Cyber Security Consulting in Europe.

Sofecta is an independent IT-company with certified Microsoft & Elastic experts. Sofecta is also the first Finnish certified MSP for Elastic.

Our Customers

1 2

Our Customers

1 2 3 4

Latest industry news

Let’s talk

Is your company interested in our
services or do you have any further
questions regarding our offering? Then
don’t hesitate to get in touch with our
sales team – you can contact us in
English, German and Finnish.

Call us
+31 6 2919 4554

Email us
sales@recmatic.com

Let’s talk
Is your company interested in our services or do you have any further questions regarding our offering? Then don’t hesitate to get in touch with our sales team – you can contact us in English, German and Finnish.

Call us
+31 6 2919 4554

E-mail us
sales@recmatic.com