Senior Security Engineer

BENEFITS

• Competitive annual salary.
• Private health insurance and a flexible benefits plan, allowing you to tailor part of your compensation package to your personal needs.
• Annual bonus based on individual performance and company results.
• Flexible working hours.
• Remote work options.

We are looking for a Senior Security Engineer to join our Information Security team and help protect our cloud-hosted platform and the infrastructure behind it. This is a hands-on role with broad scope across cloud and infrastructure security, AI security, vulnerability management, incident response, and security automation.

You will review and harden our cloud environment, improve its security architecture, and run vulnerability management across cloud workloads, servers, endpoints, and containers, from scanning and risk-based prioritization through to remediation. As our use of AI grows, you will model AI features and internal AI tools from a threat perspective, review AI vendors and services, and help turn AI governance into practical controls. You will also take part in incident response, investigate root causes, contribute to post-incident reviews, and strengthen detection and monitoring based on what we learn.

A key part of the role is automation: replacing repetitive manual work with integrations and workflows that keep security continuous rather than point-in-time. You will work closely with our Infrastructure, Platform, and IT teams as a trusted security advisor, and report on risk and posture to leadership.

RESPONSABILITIES

AI Security

• Threat model of AI/ML and LLM-based features and internal AI tools, including prompt injection, data leakage, model and supply-chain risk, insecure tool or agent permissions, and abuse of connectors and integrations.
• Run security reviews of AI vendors, models, and third-party AI services, covering data handling, retention, training-use terms, and subprocessors.
• Partner with AI governance to put policy into practice: approved-use standards, data classification for AI use, access controls, and logging.
• Support alignment with AI management and risk frameworks (ISO/IEC 42001, NIST AI RMF, OWASP Top 10 for LLM Applications).

Platform, Cloud & Infrastructure Security

• Design and improve security architecture for our cloud-hosted platform, including identity and access management, network segmentation, secrets management, encryption, and tenant isolation.
• Review cloud configurations (AWS and Azure) against security baselines such as CIS Benchmarks and cloud provider best practices. Identify misconfigurations, excessive permissions, exposed services, and drift, and work with IT and engineering to fix them.
• Use cloud security posture management (CSPM) and configuration monitoring tools to keep reviews continuous rather than point-in-time.
• Run vulnerability management across cloud workloads, servers, endpoints, containers, and applications: scan, triage, prioritize by real-world risk and exposure, and track remediation to closure.
• Monitor security advisories and patch-related risk (including post-patch failures) affecting our systems and stack, and coordinate response with IT.

Incident Response & Review

• Participate in security incident response: triage, investigation, containment, and recovery.
• Review security and operational incidents, including those that start as IT or system failures, to determine root cause, security impact, and whether other systems are exposed to the same issue.
• Lead post-incident reviews and write-ups with clear findings, corrective actions, and follow-up audits of similar systems.
• Build detection and monitoring for the platform and AI systems, and improve alerting and runbooks based on lessons learned.
• Track incident trends and report them to IT and operations leadership.

Security Automation

• Automate repetitive security work such as evidence collection, vulnerability triage, alert enrichment, ticketing, and reporting, with scripting and AI agents.
• Build integrations between security tools and the teams that act on their findings, so remediation flows without manual handoffs.
• Evaluate and safely adopt AI-assisted security workflows, with appropriate guardrails, logging, and human oversight.

Compliance & Customer Assurance

• Support the security controls and evidence behind customer and regulatory requirements (for example SOC 2, ISO 27001, and regional frameworks such as ENS) and use compliance automation tooling to keep controls continuously monitored.
• Contribute to security aspects of M&A integration and vendor or entity separation work.

Collaboration & Leadership

• Act as a security advisor to infrastructure, platform and IT teams.
• Report on risk, posture, and progress to IT and operations leadership.