Information Security Engineer

This is a fully remote position, open to applicants in Czechia.

📋 Description

• Oversee the AWS security posture by identifying vulnerabilities, managing GuardDuty and Security Hub findings, and spearheading remediation efforts with relevant teams.

• Operate and enhance EDR and SIEM, ensure endpoint coverage, create detection queries and dashboards, optimize alerts, and investigate suspicious activities.

• Lead proactive incident response efforts, which include investigation, containment, forensic analysis, remediation, and post-incident evaluations.

• Execute vulnerability management operations, including curation of scanners, establishing severity SLAs, tracking remediation, and triaging code/secret scans.

• Manage KnowBe4 phishing tests and training in collaboration with Compliance.

• Support WAF monitoring, conduct IaC security reviews, and maintain cloud account hygiene in a multi-account setting.

• Collaborate on data mapping, DLP, classification, and compliance controls, including PCI ASV scans and Vanta testing.

• Provide guidance on security inquiries related to customers and products.

• Maintain runbooks to ensure all processes are reproducible by any team member.

• After 1 to 6 months of integration with U.S.-based teams, assist in forming autonomous, locally led squads.

• Collaborate with teams across Europe and the U.S., with potential travel for company events.

⛳️ Requirements

• A minimum of 4 years in security engineering or security operations, with hands-on incident response experience.

• In-depth knowledge of AWS security, including IAM, logging, GuardDuty/Security Hub, and multi-account strategies.

• Proficient in SIEM query languages and detection tuning.

• Familiarity with at least one scripting language, with a preference for Python.

• Experience with vulnerability management tools and remediation SLA processes.

• Ability to work independently within a distributed team environment.

• Strong proficiency in written English.

• Proven experience in utilizing AI tools and technologies to enhance workflows, improve decision-making, or foster innovation.

• Ideally located in Brno, Czech Republic.

• Bonus: Experience in a PCI DSS or SOC 2 environment and operations involving ASV scans.

• Bonus: Experience with Terraform/IaC security reviews.

• Bonus: Familiarity with securing AI-assisted development or agentic tooling.

🏝️ Benefits

• Opportunities for performance bonuses and employee referral rewards.

• Flexible Time Off (FTO).

• 13 paid public holidays in accordance with the Czech calendar.

• Paid sick leave with additional support from the Czech social security system.

• Maternity, paternity, and parental leave compliant with Czech regulations.

• Additional paid paternity leave starting from 8 AM.

• Comprehensive statutory benefits, including public health insurance, social security, pension, and work accident coverage.

• Access to Coursera, including Gen AI Academy.

• Continuous professional development opportunities.

• Clearly defined growth paths, regular feedback, and chances for career advancement.

• Opportunities to travel for company events, including potential visits to the U.S.

• Local events, outings, and community initiatives.

• Company merchandise.

• Programs dedicated to wellness, learning, and fostering connections.