Security Engineer

We are looking for a hands-on Security Engineer to strengthen our security operations and take ownership of key risks and controls. This is the first dedicated security hire in the team and will play a central role in improving monitoring, detection, data protection, and automation across the organisation.

Responsibilities

Improve and tune SIEM detection rules and alerting workflows; Identify gaps in detection coverage and develop pragmatic detection improvements; Enhance DLP and secure web gateway controls; Monitor and remediate findings from CASB and ISPM platforms; Investigate security alerts and incidents, including root cause analysis; Support vulnerability management across cloud, endpoints, and SaaS platforms; Maintain and improve incident response procedures; Provide security input into internal enterprise technology decisions; Automate repetitive security workflows and reporting; Reduce false positives and improve signal quality; Use scripting and automation to streamline security operations; Leverage AI tools responsibly to improve investigation workflows; Build lightweight automation to reduce manual compliance overhead; Own and maintain selected compliance controls (ISO 27001); Ensure controls are technically implemented and operating effectively; Maintain evidence and support internal and external audits; Track and remediate control gaps; Support risk assessments and control reviews; Contribute to improving security policies and standards; Support access reviews and vendor security assessments; Communicate technical risk clearly to non-technical stakeholders

Requirements

5–7 years of hands-on experience in information security; Practical experience operating and tuning security tools such as ISPM, SIEM, DLP, CASB, EDR, and related platforms; Solid understanding and real-world implementation experience of Zero Trust principles, including identity-based access controls, least privilege, device posture enforcement, and continuous verification; Experience in incident response and security investigations; Strong understanding of cloud logging, telemetry pipelines, and log source integration; Strong technical mindset with automation experience (Python, Bash, or similar scripting languages) to streamline security operations and reduce manual effort; Experience supporting ISO 27001 or similar compliance frameworks, including control ownership and audit readiness; Comfortable taking ownership of security controls, identifying gaps, and driving measurable improvements independently; Full professional fluency in English, with the ability to communicate clearly with technical and non-technical stakeholders

Nice to have

Experience in cloud environments, especially Google Cloud; Experience with Infrastructure as Code such as Terraform or Pulumi; Experience preparing for or supporting ISO audits; Relevant certifications (CompTIA Security+, Google Professional Cloud Security Engineer, or similar)

Benefits

27 days of vacation; Supplementary and additional health insurance; 50% covered MultiSport membership; Hybrid working model for flexibility and balance