Kibernetinio saugumo incidentų tyrimų specialistas – grėsmių paieška

About the role

The National Cyber Security Centre (NKSC) is seeking an experienced Cyber Security Incident Investigation Specialist to join its Threat Hunting team in Vilnius. You will work on analysing cyber threats, conducting digital forensics, and supporting rapid response operations to protect Lithuania’s digital assets.

Key responsibilities

• Develop and test hypotheses about threats based on available intelligence and attack methods.
• Perform network monitoring using ELK Stack and Arkime.
• Inspect workstations and service stations with Velociraptor, Bash and PowerShell.
• Maintain and improve cyber‑threat investigation and analysis methodologies.
• Lead and participate in threat‑hunting operations and Cyber Rapid Response Team (CRRT) activities.
• Prepare analytical reports on detected cyber threats.
• Track emerging threat trends, new vulnerabilities, and evolving attack techniques.

Required profile

• Higher education (Bachelor’s degree) or equivalent.
• Minimum 2 years of experience with SIEM platforms or digital forensics.
• Proficiency in PowerShell, Python or Bash (preferred).
• English language proficiency at B2 level.
• Eligibility to handle classified information (labelled SECRET).
• Values of responsibility, professionalism, collaboration and respect.

Required skills

• ELK Stack
• Arkime
• Velociraptor
• Bash
• PowerShell
• Python
• SIEM systems
• Digital forensics

What we offer

• Opportunity to strengthen Lithuania’s cyber security.
• Open, idea‑driven work environment.
• Learning and development opportunities in Lithuania and abroad after the probation period.
• Partial remote work flexibility.
• Access to partner discounts.
• Financial and other incentives for excellent performance.
• Salary ranging from 2,535 EUR to 4,135 EUR per month (net), based on competence and qualifications.