Senior Security Engineer

Location: Remote in Hungary or Sofia, Bulgaria

Company

Technology company providing PR, marketing, social media management, monitoring, analytics, and communications intelligence solutions.

What you will do

• Monitor and investigate security alerts across cloud, identity, endpoint, network, and operating system environments.
• Review logs and activity from AWS, GCP, Active Directory, Linux, Windows, and security tools.
• Support incident response by gathering evidence, validating suspicious activity, and documenting findings.
• Write scripts to automate security tasks, log analysis, reporting, and enrichment.
• Conduct security reviews of IAM, storage exposure, compute workloads, and network configurations.
• Work with internal teams on risk identification, remediation, compliance, and audit activities, including urgent after-hours incident response.

Requirements

• 3–5 years of experience in security operations, incident response, systems administration, cloud operations, or a similar technical role.
• Experience with cloud security concepts, services, logs, and IAM, particularly AWS.
• Strong scripting ability with Python, Bash, or PowerShell.
• Experience with SIEM platforms such as Splunk, Chronicle, Sentinel, or similar tools.
• Working knowledge of Linux and Windows systems, command-line usage, permissions, processes, logs, and Active Directory.
• Understanding of phishing, credential compromise, privilege escalation, lateral movement, exposed services, and security log analysis.

Nice to have

• Google Cloud Platform security experience with IAM, Cloud Logging, Compute Engine, Cloud Storage, VPCs, and service accounts.
• Exposure to Kubernetes, containers, or cloud-native workloads.
• Experience creating automation for security monitoring or incident response.

Culture & Benefits

• Remote work available from Hungary or Sofia, Bulgaria.
• Participation in a global organization with offices across the Americas, EMEA, and APAC.
• Inclusive workplace focused on diversity, equity, inclusion, and reasonable accommodations.
• Availability for after-hours incident response is required when urgent security events occur.

Hiring process

• Interview process includes a hands-on practical exercise conducted through screen sharing.
• Candidates demonstrate relevant technical security skills during the exercise.