обновлено 7 дней назад
Senior Cyber Security Engineer, Elastic (Security Operations)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Cyber Security Engineer, Elastic (Security Operations) (Elastic/AWS): Building detection, incident response, threat hunting, and automated security operations capabilities to protect customer funds, identities, and digital assets with an accent on Elastic Security, cloud monitoring, and scalable response automation. Focus on designing high-fidelity detections, investigating advanced threats, hardening AWS environments, and improving resilience against complex security incidents.
Location: Vienna, Austria; hybrid working model with onsite collaboration. Relocation benefits are available within the European Union to support relocation to Vienna.
Company
operates a digital investment platform for cryptocurrencies, crypto indices, stocks, precious metals, and commodities, serving more than 7 million customers across Europe.
What you will do
- Own the detection engineering strategy and quality of the Elastic Security detection library using ES|QL and KQL.
- Design high-fidelity detections mapped to attacker techniques while improving SOC coverage and reducing alert noise.
- Lead complex incident investigations and threat hunting across AWS, Elastic, and Datadog.
- Build automated investigation, enrichment, and response workflows using SOAR, APIs, and custom tooling.
- Improve AWS security monitoring, system hardening, security tooling, and compliance readiness for ISO 27001, PCI DSS, and DORA.
- Mentor engineers, influence security architecture, promote secure engineering practices, and participate in a weekly rotating on-call schedule.
Requirements
- 4+ years of hands-on security engineering experience across incident response, threat hunting, SIEM, digital forensics, and scripting.
- Experience designing security detections, automating workflows, and improving security operations with measurable outcomes.
- Strong experience securing cloud-native environments, particularly AWS.
- Expertise in system hardening, network security, IAM, and security monitoring.
- Ownership of complex technical initiatives from concept through implementation, along with strong collaboration, communication, and mentoring skills.
- Availability to participate in a weekly rotating on-call schedule.
Nice to have
- Experience with Elastic Security, ES|QL, and KQL.
Culture & Benefits
- Hybrid work with onsite collaboration and remote work, plus up to 25 additional days per year working from a city or country of choice.
- Competitive total compensation with participation in a stock option plan.
- Confidential coaching, counselling, and mental health resources through OpenUP.
- Additional paid time off, unlimited Udemy access, partner discounts, and location-specific benefits.
- Up to 8 additional weeks of gender-neutral new parent leave and onsite dining in Vienna and selected other offices.
- Company events, recognition programs, and an inclusive workplace based on trust and mutual respect.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →