Senior Security Engineer

This is a fully remote position, open to applicants in Estonia.

📋 Description

• You will collaborate with our Security Leader to co-manage the company security roadmap, ensuring a balance across domains based on risk while engaging as a hands-on technical contributor.

• You will take ownership of security programs from inception to completion: shaping the roadmap, aligning stakeholders, and overseeing implementation and adoption.

• This position offers a realistic opportunity for advancement to DevSec Team Lead — a player-coach role that involves leading the team's delivery and development while remaining actively involved, with a career progression path on the engineering IC track.

• The role encompasses the entire security landscape, prioritizing by risk rather than specialization:

• Application & product security — including threat modeling, secure SDLC, design/code reviews, and supply chain security.

• Infrastructure & cloud security — focusing on AWS posture, runtime security, and IAM; collaborating closely with the Infrastructure team.

• Security automation & AI — developing and managing automation and AI tools that support the company's security objectives; ensuring the security of our AI-assisted development practices and LLM tools.

• Endpoint & corporate security — addressing developer endpoint security (MDM, privilege management, software governance) and maintaining secrets hygiene.

• Whole-posture assessment — conducting framework-based assessments (CIS Controls), identifying areas that require the most attention, and translating findings into prioritized, actionable engineering plans.

• Compliance interface — linking technical efforts to SOC 2 / PCI-DSS / ISO 42001 requirements.

• Mentor engineers, facilitate blameless post-mortems for security incidents, and present findings to align with senior management.

⛳️ Requirements

• Demonstrable hands-on experience in at least two security domains (e.g. AppSec + cloud/infra) with a comprehensive understanding across other areas — you consider overall posture and risk rather than merely tools.

• You have successfully built or scaled a security program from start to finish (including process, tools, and adoption), preferably in an environment with minimal structure.

• Proficient in coding and automation (Python preferred) and possess substantial knowledge in cloud security (AWS).

• Experience with AI-assisted development and securing it: familiarity with LLM tools (e.g. MCP) and awareness of AI governance.

• A demonstrated appetite for leadership — whether through mentoring, substituting for a lead, or holding formal leadership positions — along with the ambition to manage a team's delivery while remaining technically engaged.

• An educator and multiplier rather than a gatekeeper: you thrive on empathetic collaboration with developers.

• Based in Europe.

🏝️ Benefits

• Glia stock options and a competitive salary.

• Support for professional development (training, courses, conferences, books, etc.).

• A transparent career development framework.

• Various options for your work preferences (in-office, remote, flexible).

• Access to the latest tools and equipment necessary for your role.

• Sports compensation and reimbursement for therapy and counseling sessions.

• Team events including annual employee awards, internal hackathons, and numerous exciting activities ranging from cooking to the Glia Olympic Games. :)

• Generous referral bonuses.