Security Engineer / DevSecOps

The role

You will implement and improve security controls across corporate infrastructure and digital services, including AI solutions. You will work with the CISO, DevOps, and IT teams to identify risks, automate security tasks, and verify controls.

What you will do

• Develop and implement a security monitoring roadmap.
• Contribute to the selection and evolution of SIEM/XDR architecture.
• Integrate log sources and maintain security telemetry.
• Develop and test detection rules, correlation logic, and threat-hunting queries.
• Support incident investigation and improve response procedures.
• Implement a process for vulnerability discovery, validation, and remediation.
• Review the security of service architectures, configurations, and CI/CD pipelines.
• Implement and automate secure configuration baselines.
• Build scripts and integrations for event analysis and reporting.
• Develop and apply security assessment checklists for corporate LLM services and AI assistants.

Required qualifications

• Practical experience in Security Engineering, DevSecOps, or infrastructure/DevOps roles.
• Hands-on SIEM/XDR experience, including log onboarding, queries, detection rules, and alert investigation.
• Practical experience with vulnerability management and system or service hardening.
• Strong understanding of Linux, Windows Server/Active Directory, networking, authentication, and access controls.
• Understanding of cloud, container, API, and CI/CD security, including secrets management.
• Ability to review code, Infrastructure as Code, and configurations.
• Scripting and automation skills using Python, PowerShell and/or Bash, APIs, and Git.
• Practical use of AI tools for engineering tasks.
• Ability to validate security weaknesses and work with technical teams on remediation.
• English proficiency sufficient for technical documentation and vendor support.
• Ability to translate security policies and risk decisions into technical configurations and checklists.

Nice to have

• Experience with Cortex XDR, Microsoft Sentinel, or Wazuh; familiarity with XQL or KQL.
• AWS or Azure security, Terraform, Ansible, and GitLab CI/CD.
• Palo Alto, Google Workspace, Microsoft 365/Entra ID, or privileged access management solutions.
• Experience implementing or testing AI agents, retrieval-augmented generation (RAG), or corporate LLM services.
• Penetration testing, red teaming, adversary emulation, or purple teaming experience.
• Experience providing technical evidence for audits or implementing controls within an ISMS/ISO 27001 programme.
• Experience building practical security processes in a small team.

Benefits

• Flexible remote work, with occasional in-person team meetings and collaboration sessions.
• €600 learning and development budget.
• Flexible benefits allowance for sports, mental well-being, and leisure activities: €50/month for employees in Ukraine and other European locations, or €150/month for employees in Cyprus.
• Medical insurance.
• Coworking space reimbursement of up to €200/month in Europe.

About the company

toogeza is a Ukrainian recruiting company focused on hiring talents and building teams for tech startups worldwide.