2. For candidates
  3. Network Security Engineer / Architect (NDR)

Network Security Engineer / Architect (NDR)

Seniorní role Praha / hybrid zaměřená na návrh a rozvoj NDR řešení, síťové detekce a analýzu provozu v enterprise prostředí. Hledáme zkušeného Security Engineer / Architect, který rozumí síťovým tokům, protokolům, detekční logice a integraci NDR se SIEM/SOAR a dalšími bezpečnostními platformami.

I'm interested
Job Type

Permanent
Contract

Job type

Full time

Salary

90.000-140.000 CZK

Location

Hlavní město Praha
Hybrid

ID

STQ_509_JOB

O našem klientovi

Česká technologická společnost specializovaná na kybernetickou bezpečnost, která více než deset let poskytuje služby v oblasti bezpečnostního monitoringu, detekce hrozeb a provozu SOC. Pokrývá celý cyklus bezpečnostních řešení – od architektonického návrhu a implementace, přes migrace a integrace, až po dlouhodobý provoz, konzultační podporu a rozvoj bezpečnostních služeb.

Tým odborníků pracuje napříč doménami SIEM, SOAR, EDR/XDR, NDR, Data Security, network visibility, threat hunting a vulnerability & patch managementu. Technologicky staví na širokém portfoliu platforem, například IBM QRadar, Palo Alto XSIAM/XDR ekosystému, Fortinet SecOps, SentinelOne, Greycortex nebo Flowmon, doplněných o vlastní nástroje a interní know-how.

Přístup společnosti je postavený na kombinaci Threat Intelligence, Purple Teamingu a proaktivního vyhledávání hrozeb. Projekty probíhají v prostředí velkých enterprise organizací i subjektů kritické infrastruktury, s důrazem na odbornou kvalitu, technologickou nezávislost a úzkou spolupráci se zákazníky.

Náplň práce

Náplň práce
• Návrh a rozvoj řešení v oblasti Network Detection & Response (NDR) a network visibility, včetně posouzení vhodnosti technologií (např. Flowmon, Greycortex a další) a jejich integrace do širší bezpečnostní architektury.
• Architektonický návrh monitoringu síťové komunikace – segmentace, sběr flow dat (NetFlow/IPFIX), analýza anomálií a laterálního pohybu.
• Konzultační podpora zákazníků při návrhu síťové detekční strategie a optimalizaci stávajících bezpečnostních opatření.
• Odborné vedení projektů zaměřených na implementaci NDR řešení, integraci do SIEM/XDR ekosystému a rozvoj detekčních use-case scénářů.
• Tvorba a validace detekční logiky nad síťovými toky a metadaty, návrh korelačních scénářů napříč síťovou a aplikační vrstvou.
• Zapojení do threat hunting aktivit zaměřených na síťové anomálie a pokročilé útoky.
• Spolupráce s týmy infrastruktury (network, firewall, proxy, IDS/IPS) při návrhu bezpečnostní architektury.
• Integrace NDR výstupů do SIEM a SOAR workflow pro automatizaci reakce.
• Podíl na rozvoji Network Detection kompetence v rámci společnosti – technologický směr, metodika, přenos know-how.

Požadavky

• Praktická zkušenost s návrhem, implementací nebo provozem řešení typu NDR / Network Detection & Response.
• Silná orientace v síťových technologiích – TCP/IP, routing, switching, VLAN, VPN, firewalling, DNS, proxy, load balancers.
• Schopnost analyzovat síťový provoz (PCAP, NetFlow/IPFIX, metadata, TLS handshake, DNS anomálie).
• Zkušenost s některou z NDR platforem (např. Darktrace, Vectra, ExtraHop, Corelight, Cisco Secure Network Analytics nebo obdobné řešení).
• Schopnost navrhovat architekturu sběru síťových dat (SPAN/TAP, flow export, cloud traffic mirroring).
• Tvorba a ladění detekční logiky nad síťovou telemetrií (anomálie, laterální pohyb, C2 komunikace, exfiltrace dat).
• Orientace v MITRE ATT&CK a schopnost mapovat síťové indikátory na konkrétní techniky útoku.
• Zkušenost s integrací NDR do SIEM / XDR ekosystému a definice korelačních scénářů.
• Schopnost vést technickou diskusi se zákazníkem – návrh detekční strategie, umístění senzorů, optimalizace viditelnosti.
• Zkušenost s incident analysis na síťové vrstvě (threat hunting, forenzní analýza komunikace).
• Přehled v oblasti šifrování a jeho dopadu na viditelnost (TLS inspection, JA3 fingerprinting, metadata-based detection).
• Schopnost pracovat samostatně a nést odpovědnost za rozvoj NDR kompetence.
• Angličtina pro technickou komunikaci.

Nabídka a podmínky

• Flexibilní pracovní doba a možnost hybridní práce.
• Moderní kanceláře na Praze 4 s vlastním parkováním a green zónou pro odpočinek a neformální meetingy.
• Spolupráce na HPP nebo IČO podle preferencí.
• 5 týdnů dovolené.
• Firemní MacBook a iPhone i pro osobní použití.
• Možnost firemního vozu dle typu a seniority role.
• Multisport karta nebo Sodexo benefity.
• Podpora odborného rozvoje – školení, certifikace a účast na konferencích dle vlastního zaměření.
• Neformální prostředí, nízká míra byrokracie a prostor pro vlastní iniciativu.

Více informací

Pozice je vhodná pro technicky zaměřené specialisty, konzultanty i architekty. Otevřená je zkušeným mediorům i seniorům, kteří mají přehled napříč moderními bezpečnostními technologiemi.

Pozice je nabraná přímo s vedením společnosti a technickými experty, takže dostanete přesné informace o reálném fungování týmu i používaných technologiích.

Zaujalo? Ozvěte se!

Výběrovým procesem vás provede seniorní IT recruiter s reálnou technickou a doménovou zkušeností – žádné obecné fráze, ale věcná a profesionální debata.

This opportunity is open only to candidates based in the Czech Republic with valid EU work authorization and a registered EU freelance/business license (B2B).
No visa sponsorship is available.

I'm interested
I am interested

I am interested in this position

+420 222 765 001

>_Let us know about you

    Similar jobs

    IAM / Identity Security Analyst

    Location

    Hlavní město Praha
    Hybrid

    Job Type

    Permanent
    Contract

    Field

    Networks / Security

    Salary

    75.000 - 110.000 CZK

    International technology group with 30+ years in the market, 800+ professionals, and offices across Central and Eastern Europe. They deliver projects in IT infrastructure, data centres, cloud solutions, and cybersecurity. The company is growing — clients are expanding their demand, new projects are coming in, and there's space for new competencies. The Cyber Security / IAM division currently works heavily with the IdStory platform, but the environment includes other IAM/IDM solutions too. They need someone who can handle the full cycle from analysis to implementation. Why This Role Exists Now: Client demand for identity security is growing. The IAM division is expanding its project portfolio and needs someone who can own the full delivery cycle — from analysis through architecture to go-live. There's space for new competencies and platforms beyond IdStory. The right person can shape what the IAM practice looks like going forward.What Matters Most: — IAM/IDM experience — minimum 3–5 years in IT security / IAM. Real implementation experience, not just operations — IAM platforms — IdStory, SailPoint, One Identity, Entra ID, Okta, or similar. Knowing one superficially isn't enough — Client-facing communication — analysis, consultations, presenting solutions. This is non-negotiable — Integration and APIs — REST, SOAP, GraphQL. You know how to connect systems Fluent Czech or Slovak required. English at a level where you can handle a normal working discussion. Nice to Have: — SQL and databases — you work with data, not just look at GUIs — Scripting (Groovy, PowerShell, Python) — Basic Linux knowledge — Identity governance concepts and identity lifecycle management — Experience with HR systems and their integration with IAM These are nice to have — not hard filters.Role / Mission: You own the full cycle — from the first client workshop through architecture to go-live. You walk into a client's environment, map what's actually there, ask the right questions, pull the data together into a document, and design a new architecture. Then you implement it. You're an analyst and implementer in one — not someone who waits for a spec. After 12 months, this is what good looks like: completed projects, clients who trust you, and working identity integrations in real environments. Key Responsibilities: — You analyse customer requirements and design IAM/IDM architecture — You implement and integrate identity solutions into client environments — You handle incidents and operational support within SLA — not as the core of your work, but as part of it — You create technical documentation — actually useful materials, not formal paperwork — You provide technical consultations to clients — You contribute to presales — solution proposals, presentations, technical input for bids — You work with sales, presales, support, and delivery teams What This Role Is NOT: — Not AD administration — you won't be resetting passwords and creating accounts — Not a pure operations role — SLA tickets are part of the job, but not the core — Not an isolated position — client and team communication is key Operating Model: Prague-based, remote-friendly. More time in the office during onboarding. After that, remote is possible — but you're expected at the office or client sites as needed. Most of the business is in and around Prague, so a reasonable commute matters. No 24/7 on-call. Permanent contract preferred, freelance possible. Czech or Slovak proficiency required. Direct report: Head of Network & Security division.More Information: Interested? Apply or get in touch: | linkedin.com/in/jirisoljak No CV needed — a LinkedIn profile and a few sentences about yourself is enough. You'll speak directly with a senior IT recruiter with hands-on IT background — 450+ hires. A relevant conversation without the HR fluff. Process: — Short intro call (15–30 min) — Maximum 2 rounds — if there's a fit, a decision can come after the first one — In-person meeting before the final decision — You'll know where you stand at every step EU work authorization required. No visa sponsorship.

    Enterprise Network Architect

    Location

    Hlavní město Praha
    Hybrid

    Job Type

    Permanent
    Contract

    Field

    Networks / Security

    Salary

    160.000 - 200.000 CZK

    An international technology group with more than 30 years in the market, 800+ professionals, and a presence across several countries in Central and Eastern Europe. It delivers projects in IT infrastructure, data centres, cloud, cybersecurity and IT outsourcing for customers ranging from banking and public administration to European enterprise organisations. Why This Role Exists Now: Regulatory pressure, NIS2 in particular, is pushing organisations toward segmented, auditable networks. Microsegmentation and identity-based access are becoming baseline requirements, and the volume of enterprise network engagements has grown accordingly. That architecture layer is currently covered on an ad hoc basis — by the presales team or by drawing on capacity from elsewhere in the group. The company is building a permanent capability instead.What Matters Most: - CCNP Enterprise Architecture or equivalent - certification at architectural, not implementation, level - Minimum 5 years in enterprise network design - demonstrable experience across switching, routing, microsegmentation and security - Software-defined networking and automation - conceptual command is required; hands-on implementation is not - Consultative capability - the ability to present and defend a design to a customer stakeholder is a condition of the role, not an advantage English at B2/C1 for the international team; Czech or Slovak for day-to-day work. Nice to Have: - CCNP Data Center or CCNP Security - Cloud or multi-cloud experience - TOGAF or ArchiMate - Practical involvement in lab work or proof-of-concept builds These describe the working context, not selection criteria.Role / Mission: You own the architecture of enterprise network and data centre solutions for large customers — from initial concept through customer-facing validation to oversight during implementation. You work alongside the internal presales team, and when a design change becomes necessary during implementation, you adapt the concept rather than handing it off. Within twelve months, the expectation is a set of delivered engagements, established relationships with the customers you have worked with, and a working model with presales that moves designs into delivery without unnecessary iteration. Key Responsibilities: - Design and optimise enterprise networks — LAN, WAN and SD-WAN — for large-scale customer environments - Present and defend technical solutions directly to customers in consultative settings - Work with presales and sales on accounts you subsequently deliver - Govern design changes during implementation, maintaining the integrity of the original concept - Coordinate with service providers on configuration standards; review Bill of Materials and assess solution sizing What This Role Is NOT: - Not an implementation role — configuration delivery sits with the engineering team - Not a hand-off model — architectural ownership continues into implementation, not concluding at design sign-off - Not a back-office technical function — customer-facing consultation is central to the role, not adjacent to it Operating Model: Prague-based, hybrid. On-site presence with customers at least twice a week; the majority of the customer base is in and around Prague. More time in the office during onboarding, with greater flexibility thereafter. English at B2/C1 for the international team; Czech or Slovak for day-to-day work. Direct report: Head of Network & Security division. Options: The engagement model is open to discussion: - Permanent employment - 160 000-180 000 CZK/month with a company car - Contract (self-employed) - day rate up to 11 000 CZK, agreed individually - Reduced capacity - four days per week is acceptable under either model for the right profileInterested? Apply or reach out — no CV needed, your LinkedIn and a few lines is enough. We reply to everyone within two business days. | linkedin.com/in/jirisoljak You will speak directly with a senior IT recruiter with a hands-on technical background — a relevant conversation without the HR fluff. Process: - A short introductory call, 15 to 30 minutes - A maximum of two rounds — where there is a clear fit, a decision can follow the first - An in-person meeting precedes the final decision - You always know where you stand Open only to candidates eligible to work in the EU without visa sponsorship, residing in the Czech Republic long-term, with proficiency in Czech or Slovak. The contract track additionally requires a registered EU freelance or business licence.
    All positions
    IT jobs