Senior Security Engineer, Detection & Response

This is a fully remote position, open to applicants in Serbia.

📋 Description

• Develop, manage, and enhance SIEM/XDR capabilities, encompassing log ingestion, detection rules, alert tuning, and investigation processes.

• Create and implement detection strategies to identify suspicious activities and prevent data exfiltration.

• Broaden audit and attribution coverage across Kubernetes, databases, SSO, and access-path telemetry.

• Investigate and respond to security incidents affecting cloud infrastructure and applications.

• Conduct root cause analyses and implement long-term solutions.

• Execute proactive threat hunting across cloud and identity environments.

• Establish repeatable, agentic threat-hunting processes.

• Manage vulnerability assessments across infrastructure, platforms, and applications.

• Assess and validate external security findings, including bug bounty reports.

• Collaborate with engineering teams for remediation and validate implemented fixes.

• Contribute to threat modeling and participate in security design reviews.

• Utilize AWS and Kubernetes expertise to enhance the security of operated systems and provide guidance to owning teams.

• Facilitate security controls that comply with PCI DSS, SOC 2, and other regulatory requirements.

• Innovate automation solutions, including AI, for security operations, detection, and response.

• Engage in an on-call rotation for detection and response as well as owned services.

• Report directly to the Director of Information Security and collaborate with security platform, network, and zero-trust engineers.

⛳️ Requirements

• Over 6 years of experience in security, software, or infrastructure engineering.

• Practical experience in securing cloud-based production systems.

• Familiarity with SIEM platforms such as Wazuh, Splunk, or ELK.

• Proven experience in designing and fine-tuning detection rules, minimizing alert noise, and enhancing investigation workflows.

• Strong hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification.

• Extensive knowledge of AWS, Linux, and Kubernetes infrastructure, focusing on security architecture and operational best practices.

• Capability to investigate issues utilizing logs, cloud tools, and system-level data.

• Experience in evaluating detection and logging implications during design reviews.

• Understanding of common security vulnerabilities and mitigation techniques, including OWASP and SANS frameworks.

• Working knowledge of PCI DSS and SOC 2 compliance standards.

• Demonstrated experience in AI-forward engineering using tools such as Claude Code, Codex, Cursor, or custom LLM integrations.

• Preferred: background in creating AI-assisted workflows adopted by others.

• Preferred: familiarity with log-based detection, telemetry pipelines, and security analytics.

• Preferred: experience in internal penetration testing or adversarial exercises.

• Preferred: knowledge of cloud-native security controls, including IAM, network segmentation, and container security.

• Preferred: familiarity with tools like Snyk, Trivy, or Grype.

• Preferred: experience aligning technical security efforts with regulatory and compliance frameworks.

• Preferred: background in fintech, payments, or regulated sectors.

🏝️ Benefits

• Competitive gross salary ranging from $5,000 to $9,500 USD per month, contingent on experience level.

• A culture that fosters AI-assisted engineering and embraces emerging technologies.

• An opportunity to collaborate with a dynamic and innovative fintech and retail team.

• An open-source-focused engineering environment.

• A team culture that supports diverse interests and purpose-driven employees.