Security Engineer / DevSecOps

• Make a real impact on security. Take ownership of key security engineering initiatives, help shape security practices, and see the direct results of your work across the company's infrastructure and digital services.

• Build and improve, not just maintain. Get hands-on experience developing security monitoring, vulnerability management, and automation solutions, with the opportunity to influence technical approaches and tooling.

• Combine offensive and defensive security. Apply a Purple Team mindset by identifying and validating vulnerabilities, testing detection capabilities, and turning findings into practical security improvements.

• Explore AI Security and emerging technologies. Work with AI-powered security tools and contribute to securing new AI services, assistants, and integrations as the company expands its use of AI.

• Expand your technical expertise. Gain exposure to diverse environments, including private cloud infrastructure, Linux and Windows systems, cloud platforms, and modern DevOps practices.

• Work closely with security leadership. Collaborate directly with the Cybersecurity Lead (CISO) and experienced DevOps and IT engineers, with room for technical initiative, knowledge sharing, and professional growth.

• Flexible remote work, with occasional in-person team meetings and collaboration sessions.

• €600 learning and development budget to support your professional growth.

• Flexible benefits allowance for sports, mental well-being, and leisure activities: €50/month for employees in Ukraine and other European locations, or €150/month for employees in Cyprus.

• Medical insurance to support your health and well-being.

• Coworking space reimbursement of up to €200/month in Europe.

We are toogeza, a Ukrainian recruiting company that is focused on hiring talents and building teams for tech startups worldwide. People make a difference in the big game, and we may help to find the right ones.

We are looking for a Security Engineer / DevSecOps professional to implement and improve security controls across our corporate infrastructure and new digital services, including AI solutions.

Our environment combines Windows and Linux systems, private and cloud infrastructure, SaaS platforms, and internally developed applications and integrations.

You will work closely with the CISO, DevOps, IT Operations, and project teams to identify technical risks, implement safeguards, automate security tasks, and verify that controls work effectively. We value practical engineering skills, independent problem-solving, and experience translating governance requirements into technical implementation.

Reports to: Head of Cybersecurity (CISO)
Role type: Hands-on individual contributor

Security monitoring and detection

• Develop and implement a security monitoring roadmap, including requirements, architecture, and integration priorities.

• Contribute to the selection and evolution of our SIEM/XDR architecture.

• Integrate log sources and maintain reliable, complete, and useful security telemetry.

• Develop and test detection rules, correlation logic, and threat-hunting queries.

• Support incident investigation and improve response procedures.

Vulnerability management

• Implement a repeatable process for vulnerability discovery, validation, prioritisation, remediation tracking, and retesting.

• Assess exploitability and business impact, considering exposure, asset criticality, and potential attack paths.

• Develop remediation plans with IT and DevOps, track progress, and verify that fixes are effective.

Secure service delivery and hardening

• Review the security of service architectures, configurations, integrations, and CI/CD pipelines.

• Develop technical checklists covering access controls, role models, credentials and secrets, network connectivity, external integrations, encryption, and logging.

• Implement and automate secure configuration baselines.

• Work with DevOps to assess security readiness before production launches and address identified risks.

• Plan and validate security changes with attention to service availability and rollback options.

Security automation and AI-assisted engineering

• Build scripts and integrations for event analysis, configuration checks, vulnerability management, and reporting.

• Use AI coding assistants and agent tools to support engineering tasks.

• Validate generated code and findings, and protect credentials, access permissions, and corporate data throughout these workflows.

AI security and governance implementation

• Develop and apply security assessment checklists for corporate LLM services, AI assistants, agents, and their integrations.

• Assess access to data and tools, execution isolation, and scenarios that could adversely affect information or systems.

• Address risks such as prompt injection, data leakage, excessive permissions, and authorisation failures.

• Translate agreed AI governance requirements into technical controls and verification steps.

Security validation

• Conduct authorised tests of attack scenarios and vulnerability exploitability.

• Verify whether monitoring and protection tools detect or prevent the tested activity.

• Use findings to improve configurations, detection coverage, and response procedures.