Senior IT Security Engineer
Finoa is a technology infrastructure provider that helps regulated custodians and institutional investors manage digital assets securely.
Funding history
About Finoa
Finoa provides technology infrastructure enabling regulated virtual asset service providers to store and manage client digital assets. Users can access fully segregated wallets, multi-signature workflows for governance policies, and on-chain transaction verification across a wide range of digital assets. Formerly a BaFin-licensed crypto-asset custodian, the company rebranded to Finoa Technical Services following the surrender of its custody license in December 2025.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own day-to-day operational security, including SIEM operations, detection monitoring, incident response, vulnerability management, threat intelligence, and security tooling. You will harden systems, support vendor security reviews, and provide on-call coverage for security incidents.
Requirements
- 4+ years of hands-on IT or information security experience with depth in security operations
- Experience owning or operating a SIEM, including design, tuning, and monitoring
- Hands-on incident response experience
- Knowledge of vulnerability management, endpoint and network security tooling, and cloud security fundamentals
- Ability to work closely with engineering and own topics end to end
- Understanding of security and compliance requirements in a regulated business
- Right to work in Lithuania or the EU and ability to regularly attend the Vilnius office
Responsibilities
- Own and operate the SIEM, including detection use cases, log onboarding, tuning, and alert triage
- Run continuous security monitoring and escalation into incident response
- Lead containment, eradication, and recovery during security incidents
- Run vulnerability scanning, triage, remediation tracking, and verification
- Support annual independent penetration testing
- Track threat-intelligence feeds and maintain indicators of compromise
- Configure and maintain endpoint and network security tooling, including EDR, firewalls, and network monitoring
- Maintain baseline security-configuration and access-control standards
- Contribute technical security due diligence for third parties and cloud providers
- Provide on-call coverage for security incidents outside business hours
