Podsumowanie oferty
Build and run parts of FYUL’s security telemetry and detection platform as a member of its cybersecurity engineering team. The role covers detection engineering, cloud and endpoint security, vulnerability management, and security automation across AWS and Kubernetes, including custom ML detections and AI agents.
Wymagania
- 5+ years in security engineering or SecOps roles, with hands-on production responsibility for detections and incidents.
- Hands-on detection engineering experience with a modern SIEM or security platform; Elastic Security is preferred, and Splunk, Sentinel, or comparable platforms are accepted. Willingness to extend beyond built-in rules into custom ML-based detection.
- Hands-on mastery of Linux, macOS, and Windows, including internals, hardening, and investigation on all three.
- Strong networking expertise, including TCP/IP, routing, VPNs, firewalls, and packet-level analysis.
- Strong cloud security foundation in AWS, including Kubernetes, and experience securing and monitoring production cloud workloads.
- Hands-on experience building or operating LLM-powered tooling such as agents, pipelines, or detection and automation workflows.
- A practical infrastructure hacking or hardening certification, such as OSCP, OSEP, or a comparable hands-on offensive credential.
- Demonstrated automation capability through scripts, integrations, pipelines, or AI-assisted workflows.
- Self-directed working style and strong ownership, including the ability to take ambiguous problems through to completion with minimal supervision.
- Excellent written and spoken English.
Nice to have:
- Further certifications such as CISSP, GIAC/GCFA/GCIH, or AWS Security.
Obowiązki
Detection engineering:
- Design, implement, and tune detections across security telemetry, including SIEM rules and custom ML models for anomaly and risk detection.
- Triage alerts, investigate incidents, drive them to closure, and carry out technical incident response and post-incident improvement.
Cloud and platform security:
- Harden and monitor AWS and Kubernetes (EKS) environments, including workload security, IAM, container runtime defense, and configuration standards.
- Collaborate with engineering teams to make security an enabler.
Endpoint security:
- Own the health and hardening of the endpoint agent fleet across macOS, Windows, and Linux.
Data loss prevention:
- Operate and extend DLP coverage across removable media, email, and SaaS channels.
- Detect data exfiltration using telemetry while tuning to keep false positives low.
Security automation:
- Automate recurring operations and detection-to-response workflows, including AI-based agents and pipelines.
- Prefer integrating established tooling over bespoke development when it delivers the same outcome.
Vulnerability discovery and management:
- Find infrastructure vulnerabilities through scanning, configuration review, and targeted penetration testing.
- Prioritize vulnerabilities and drive remediation to closure.
Benefity
- Flexible working hours, with the option to start the day as late as 11 AM.
- Private health insurance.
- Two extra paid days off for mental or physical well-being.
- One extra paid day off for a birthday or another celebration of your choice.
- Internal and external learning opportunities.
- Access to mentorship, internal meetups, and hackathons, on-site and online.
- Free lunch for employees working from the Riga office.
- Employee discount on designing and ordering merchandise through the company’s platforms.
- Team-building events and parties.
Elastyczne godziny
Opieka zdrowotna
Płatny urlop
Spotkania integracyjne
Fyul
10 aktywnych ofert