Security Engineer

Skills

About the Role

You'll build and maintain SIEM detection rules, alert pipelines, and response playbooks, owning detection coverage for a defined set of systems end-to-end. You'll support incident response by triaging alerts, executing IR playbooks, and helping run tabletop exercises. You'll help operate DLP and data protection controls across Google Workspace, Slack, and internal tooling, owning day-to-day monitoring and tuning. You'll conduct cloud security assessments across AWS and Kubernetes environments under the guidance of senior team members. You'll support application security work including threat modelling sessions, secure code review, API security testing, and CI/CD pipeline checks. You'll help review and monitor AI/agentic workflows for prompt risks, unsafe automated actions, and data exposure. You'll also execute vendor security assessments using an established due diligence framework, owning the review process for a portion of the vendor pipeline.

Requirements

• 2–4 years in information security or a closely related technical role
• 2+ years at a regulated fintech/bank/payment company
• Working experience with at least one cloud environment (AWS preferred) and familiarity with Kubernetes fundamentals
• Exposure to SIEM platforms and an interest in detection engineering
• Basic familiarity with application security concepts: threat modelling, secure code review, or API security testing
• Some experience with endpoint security tooling (EDR/XDR) or identity & access management in a SaaS environment (Google Workspace, Okta/Cloudflare Access, SSO)
• Curiosity about AI/agentic tooling risks (LLM integrations, MCP servers, automated workflows)
• Strong written and verbal communication
• Business fluent in English

Responsibilities

• Build and maintain SIEM detection rules, alert pipelines, and response playbooks
• Own detection coverage for a defined set of systems end-to-end
• Support incident response: triage alerts, execute IR playbooks, and help run tabletop exercises
• Help operate DLP and data protection controls across Google Workspace, Slack, and internal tooling
• Conduct cloud security assessments across AWS and Kubernetes environments
• Support application security work: threat modelling sessions, secure code review, API security testing, and CI/CD pipeline checks
• Review and monitor AI/agentic workflows for prompt risks, unsafe automated actions, and data exposure
• Execute vendor security assessments using the established due diligence framework

Benefits

• Stock options
• Discretionary performance bonus
• The latest tools and technology