Senior Security Engineer

This is a fully remote position, open to applicants in Europe.

📋 Description

• Ensure the operation of SEON’s real-time fraud prevention platform across multiple AWS regions, utilizing Kubernetes, Terraform, and GitHub.

• Develop evidence pipelines integrating AWS, GitHub, CI/CD, and identity management tools.

• Select and implement compliance automation tools.

• Automate access review processes for AWS IAM, Google Workspace, GitHub, and essential SaaS applications.

• Create self-service workflows for routine access requests in collaboration with Platform and IT teams.

• Strengthen and address IAM issues at scale, focusing on unused roles, excessive permissions, long-lived credentials, root access, and emergency access protocols.

• Transition towards short-lived, scoped identities with designated owners for individuals, workloads, and AI agents.

• Deploy Terraform and CI guardrails, including secret scanning, policy enforcement, signed container images, and established baselines.

• Engage in on-call duties and triage rotation.

• Examine alerts from GuardDuty, Security Hub, WAF, and Kubernetes.

• Manage vulnerability and bug bounty reports, ensuring incidents are contained and resolved.

• Craft and refine detection mechanisms across CloudTrail, GuardDuty, WAF, and Kubernetes signals.

• Assist in cross-signal correlation and AI-assisted triage efforts.

• Verify penetration test results and vulnerability fix implementations.

• Assess changes in infrastructure and IAM.

• Contribute to threat modeling for new services and AI functionalities.

• Oversee ISO 27001, ISO 42001, SOC 2, and PCI DSS initiatives.

• Manage scoping, gap analysis, auditor communication, remediation tracking, and monitoring cycles.

• Handle customer security inquiries and vendor security assessments.

• Maintain trust documentation and develop AI-assisted tools for questionnaire management.

• Keep policies and the risk register up to date.

• Translate DORA, EU AI Act, and regional financial regulatory obligations into engineering tasks.

⛳️ Requirements

• Over 5 years of experience in security engineering.

• Practical experience with AWS, including IAM, CloudTrail, GuardDuty, Security Hub, and WAF.

• Proficient in Terraform, Kubernetes, and GitHub Actions.

• Knowledge of Python or similar programming languages for automating evidence gathering, access reviews, and alert enhancement.

• Comfortable working with APIs and CI pipelines.

• Experience leading ISO 27001 or SOC 2 initiatives as the primary contact for auditors.

• Familiarity with customer security questionnaires and vendor security assessments.

• Ability to communicate clearly and concisely in written English for auditors, engineers, and clients.

• Experience with ISO 42001 or AI governance, PCI DSS as a service provider, DORA or financial regulatory exposure, detection engineering or incident response, or security tools like Kyverno, Linkerd, or EKS is a plus.

🏝️ Benefits

• Flexible remote work options within Europe.

• Commitment to equal opportunity employment.

• Provision for reasonable adjustments in the recruitment process.