We are looking for a Senior Security Engineer to strengthen our defensive security capabilities across cloud-native infrastructure, Linux systems, applications, and networks.

This is a hands-on role focused on Security Operations, Threat Hunting, Incident Response, Detection Engineering, Security Hardening, and Cloud Security. You will work closely with Infrastructure, Platform, Network, and Development teams to improve security visibility, detection capabilities, and the overall security posture of our environment.

Key Responsibilities

Monitor, analyze, and investigate security events and coordinate incident response and remediation activities
Perform proactive threat hunting across cloud infrastructure, Linux systems, endpoints, networks, and applications
Develop and improve SIEM use cases, correlation rules, detection logic, and dashboards
Work with technical teams to onboard log sources and improve log collection, parsing, normalization, and security telemetry
Identify detection and visibility gaps, reduce false positives, and continuously improve detection coverage
Perform security hardening and configuration reviews across Linux systems, infrastructure, applications, and cloud workloads
Review authentication, authorization, privileged access, logging, auditing, and network exposure
Support vulnerability assessment, prioritization, remediation, and validation activities
Translate attacker techniques and TTPs into practical preventive and detective security controls
Develop and improve SOC and Blue Team processes, incident response playbooks, and security baselines
Use scripting and automation to improve investigation, enrichment, response, and operational efficiency
Collaborate with Infrastructure, Platform, Network, and Development teams to identify and remediate security weaknesses

Requirements

Proven experience in Security Engineering, SOC, Blue Team, or a similar defensive security role
Strong hands-on experience with SIEM platforms, including log onboarding, log pipelines, parsing, security telemetry, and detection engineering
Solid understanding of incident investigation, incident response, and proactive threat hunting
Strong understanding of Linux security, system hardening, and common security misconfigurations
Good understanding of network security, authentication, authorization, IAM, and privileged access concepts
Familiarity with cloud-native environments and security challenges across cloud infrastructure and workloads
Good understanding of common attacker techniques and the ability to investigate security issues across different layers of the technology stack
Experience with scripting or automation using Python, Bash, or similar languages
Strong troubleshooting, analytical, and cross-team collaboration skills

Nice to Have

Experience with Splunk or other enterprise SIEM platforms
Familiarity with MITRE ATT&CK and its practical use in threat hunting and detection engineering
Experience with EDR/XDR, SOAR, or security automation
Familiarity with CIS Benchmarks or similar security hardening frameworks
Experience with Kubernetes and container security
Experience with cloud security controls, IAM, or cloud-native security services

Supplementary health insurance for you and your family (supports most treatments, including psychotherapy).
Competitive salary with regular promotion opportunities.
Reimbursement for educational courses, internet, and even programs for self-development. (like art classes or learning a new language, etc.)
Flexible working hours, including remote work opportunity.
An exciting work environment with talented colleagues and an open environment for new ideas.
We provide everything you need to work comfortably, such as laptops, equipment for remote work, etc.
Various on-site meals and snacks.

Senior Blue Team Engineer

Personal information

Profile

Details