Senior SecOps Engineer

We are a regulated payments group focused on designing and building secure payment processing solutions globally.

• 5+ years in security operations or security engineering in financial services or regulated environments (e.g., DORA, PCI DSS)
• Hands-on experience with SIEM platforms such as Elastic/OpenSearch, Wazuh, or Splunk and log pipeline engineering
• Strong AWS security knowledge including GuardDuty, Security Hub, IAM, and VPC controls
• Practical experience with vulnerability management including scanners, prioritization, and remediation tracking
• Strong Infrastructure-as-Code (IaaC) skills
• Enthusiasm for AI-assisted security operations using large language models and agents
• Ability to own and deliver a security domain independently

Nice to have:

• Hands-on experience with Kubernetes security including admission controllers and runtime detection tools like Falco
• Knowledge of detection-as-code practices (e.g., Sigma, version-controlled rules, CI for detections)
• Certifications such as CCSP, CISSP, or OSCP

• Design, build, and operate the SIEM system including architecture, deployment, tuning, and operation
• Plan and execute log-source onboarding across cloud and application estates
• Integrate AI-assisted triage and enrichment into alert pipelines
• Establish and manage the vulnerability management programme including deployment, asset coverage, prioritization, remediation SLAs, and reporting
• Implement processes and procedures for effective vulnerability lifecycle management
• Operate and improve the security incident process end-to-end: detection, classification, response, and post-incident review
• Develop, maintain, and automate runbooks, playbooks, and event handlers
• Harden and monitor AWS estate using GuardDuty, Security Hub, IAM, and cloud-native logging
• Drive security hardening across infrastructure and runtime
• Automate routine security operations using scripting, APIs, infrastructure-as-code, and AI agents
• Conduct proof-of-concepts, evaluate security tooling, and shape technical roadmap
• Provide security engineering consultancy to Engineering, IT, and DevOps teams

Location options include Limassol (Cyprus), remote from Poland or Portugal. Benefits and contract type vary by location and will be discussed during recruitment. Privacy policy applies to personal data processing during recruitment.