Security Engineer

You will own and improve the security of the internal environment covering identities, SaaS apps, endpoints, AI tooling, and networks used every day. This is a hands-on senior role where you design controls, find gaps, and drive the changes that close them while building automation that scales. You'll lead technical initiatives independently, influence security architecture, challenge outdated approaches, and clearly explain security topics to engineers and leadership.

Responsibilities

• Own SIEM alerting end-to-end: ship logs from endpoints, IdP, VPN, SaaS, and cloud
• Write and tune detection rules and cut false positives
• Act as first responder for security incidents and investigate, contain, and drive to closure with clear runbooks
• Feed recurring issues back into preventive controls
• Administer the IdP (SSO via SAML/OIDC, MFA, conditional access)
• Run access recertification end-to-end across IdP, SaaS, AWS, and internal tools
• Hunt down over-permissive and stale access, enforce least privilege and PAM
• Catch SoD gaps and make JML and third-party access work in practice
• Improve SaaS security posture for Google/Microsoft, Slack, GitHub, and others
• Apply DLP controls to limit data leakage
• Keep the endpoint stack healthy and well-tuned including MDM, XDR/AV, device-compliance checks for VPN/ZTNA
• Define posture requirements such as disk encryption, EDR presence, and OS version with automated remediation
• Defend against phishing and spoofing with secure email gateway rules and DMARC/SPF/DKIM
• Run phishing simulations and security awareness training and act on results
• Build internal tooling and automate repetitive operations
• Own the roadmap for security areas and lead initiatives independently

Requirements

• 5+ years in security operations, corporate/IT security, or endpoint engineering
• Strong with a SIEM (Splunk, Elastic, Panther, Sumo Logic) including detection engineering and incident response
• Experience with an identity provider (Okta, Entra ID, Google Workspace), access recertification, and least-privilege / PAM
• Working knowledge of endpoint security (MDM, XDR/EDR/AV) and email / phishing defense
• Practical experience securing how a company uses AI internally including shadow AI discovery, DLP for AI tools, and controls for AI assistants and agents
• Strong scripting and automation skills building tooling against APIs
• Track record of driving improvements end-to-end and leading initiatives with little oversight
• Clear written and spoken English for engineers and leadership

Benefits

• Hybrid model in Limassol office or fully remote outside office locations
• Relocation support to Cyprus (visa, package) when needed
• Learning & development budget
• Fully paid vacation and sick leave
• Sports compensation