Senior Cybersecurity Engineer – Infrastructure

This is a fully remote position, open to applicants in Latvia, +4 more countries.

📋 Description

• Develop, implement, and optimize detection mechanisms across security telemetry, including SIEM rules and custom machine learning models.

• Manage alerts, investigate genuine incidents, and ensure their resolution.

• Conduct technical incident responses and post-incident enhancements.

• Strengthen and oversee AWS and Kubernetes (EKS) environments, focusing on workload security, IAM, container runtime protection, and compliance with configuration standards.

• Work closely with engineering teams to ensure security acts as an enabler.

• Take responsibility for the health and fortification of endpoint agents across macOS, Windows, and Linux platforms.

• Manage and expand Data Loss Prevention (DLP) coverage across removable media, email, and SaaS channels.

• Identify data exfiltration through telemetry while maintaining low false-positive rates.

• Automate routine security operations and detection-to-response workflows, including AI-driven agents and pipelines.

• Identify and mitigate infrastructure vulnerabilities via scanning, configuration assessments, and targeted penetration testing.

• Prioritize vulnerabilities and oversee their remediation to completion.

• Manage key components of the security operations infrastructure, encompassing endpoints, network traffic, cloud workloads, and SaaS applications.

• Report directly to the Information Security Engineering Manager as an individual contributor.

⛳️ Requirements

• Over 5 years of experience in security engineering or SecOps roles with direct responsibility for detections and incidents in production environments.

• Practical detection engineering experience on a contemporary SIEM/security platform; Elastic Security preferred, but experience with Splunk, Sentinel, or equivalent platforms is acceptable.

• Proficiency in custom ML-based detection methods.

• In-depth, hands-on expertise in Linux, macOS, and Windows, including their internals, hardening techniques, and investigative processes.

• Strong networking knowledge, including TCP/IP, routing, VPNs, firewalls, and packet-level analysis.

• Solid foundation in AWS cloud security, including Kubernetes; experience in securing and monitoring production cloud workloads is essential.

• Hands-on experience with LLMs, including building or operating LLM-powered tools, agents, pipelines, or detection/automation workflows.

• Relevant certification in practical infrastructure hacking or hardening, such as OSCP, OSEP, or other comparable offensive credentials.

• Proven ability to automate processes through scripts, integrations, pipelines, or AI-assisted workflows.

• Self-motivated work style with a strong sense of ownership and the capability to tackle ambiguous tasks with minimal supervision.

• Excellent proficiency in written and spoken English.

• Additional certifications such as CISSP, GIAC/GCFA/GCIH, or AWS Security are beneficial.

• A background in software engineering is not required.

• Resume must be submitted in English.

🏝️ Benefits

• A global, inclusive team that is as supportive as it is ambitious, dedicated to achieving results.

• The flexibility to work remotely or in a modern, welcoming office located in Riga.

• Flexible working hours, allowing you to start your day as late as 11 AM.

• Private health insurance coverage.

• Two additional paid days off to prioritize your mental or physical well-being.

• One extra paid day off to celebrate a birthday or any personal occasion of your choice.

• Opportunities for both internal and external learning.

• Access to mentorship, internal meetups, and hackathons, available both onsite and online.

• Complimentary healthy lunch provided for those working from the Riga office.

• Ability to design and order your own merchandise through our platforms with an employee discount.

• Exciting team-building events and unforgettable parties!