Senior Cybersecurity Engineer (Infrastructure)
New
F
FYULCybersecurity
Source API remote eligibility restrictions: Estonia, Latvia, Lithuania, Poland, SpainFull-TimeSenior
Salary4,000 - 6,000 EUR per month
Apply NowOpens the employer's application page
Job Details
- Languages
- Excellent written and spoken English.
- Experience
- 5+ years in security engineering or SecOps roles
- Required Skills
- AWSKubernetesMachine LearningLinux
Requirements
- Have 5+ years of security engineering or SecOps experience, with hands-on responsibility for production detections and incidents.
- Have detection engineering experience on a modern SIEM/security platform; Elastic Security is preferred, with Splunk, Sentinel, or comparable platforms also accepted.
- Have hands-on mastery of Linux, macOS, and Windows internals, hardening, and investigation.
- Have strong networking expertise, including TCP/IP, routing, VPNs, firewalls, and packet-level analysis.
- Have a strong AWS cloud security foundation, including Kubernetes, and have secured and monitored production cloud workloads.
- Have built or operated LLM-powered tooling such as agents, pipelines, or detection and automation workflows.
- Hold a practical infrastructure hacking or hardening certification such as OSCP, OSEP, or a comparable hands-on offensive credential.
- Demonstrate automation capability through scripts, integrations, pipelines, or AI-assisted workflows.
- Work self-directed, taking ambiguous problems through to completion with minimal supervision.
- Have excellent written and spoken English.
- Additional certifications such as CISSP, GIAC/GCFA/GCIH, or AWS Security are advantageous.
Responsibilities
- Design, implement, and tune SIEM detections and custom ML models for anomaly and risk detection.
- Triage alerts, investigate incidents, lead technical incident response, and drive post-incident improvements.
- Harden and monitor AWS and Kubernetes (EKS) environments, including workloads, IAM, container runtime defense, and configuration standards.
- Collaborate with engineering teams to integrate security into their work.
- Own the health and hardening of endpoint agents across macOS, Windows, and Linux.
- Operate and extend DLP coverage across removable media, email, and SaaS channels while tuning detections to reduce false positives.
- Automate security operations and detection-to-response workflows, including AI-based agents and pipelines.
- Discover infrastructure vulnerabilities through scanning, configuration review, and targeted penetration testing; prioritize and drive remediation.
- Prefer integration of established tooling over bespoke development where it achieves the same outcome.
View Full Description & ApplyYou'll be redirected to the employer's site
