RemoteLeaf Logo
Log in Sign up

Engineer, Threat Detection - 5

21 hours, 27 minutes ago
Bulgaria
Full-time
Senior
Security Engineer
Software Development
AWS GCP macOS Penetration Testing Sentinel SIEM Splunk
Apply Now
Tide

Tide

Tide is a UK SME business account provider revolutionizing business banking with smart solutions that save time and money for entrepreneurs.

Banks
51-250
Founded 2015
$195M raised
View All Jobs 4

Description

  • Support the development and implementation of a strategic threat detection vision and team priorities.
  • Build and tune SIEM detections, including custom log parsers, alert rules, and log analysis to reduce false positives.
  • Create security automations and services to streamline routine tasks, including data enrichment and phishing email removal.
  • Continuously hunt for sophisticated threats across AWS, GCP, internal applications, and employee endpoints.
  • Collaborate with cross-functional teams to develop and implement business-specific threat detection rules.
  • Ensure the quality and uptime of the detection ecosystem through test-driven development and proactive health monitoring.
  • Identify opportunities to build or improve internal tools that increase visibility and response efficiency.
  • Lead complex incident investigations and coordinate containment, remediation, and recovery with security, IT, and engineering teams.
  • Support the wider security incident response on-call rota.

Requirements

  • Strong knowledge of one of the following: Splunk, Scanner, Sentinel, or SecOps.
  • Strong understanding of modern attack and defense techniques for cloud environments such as AWS and GCP.
  • Strong understanding of modern attack and defense techniques for SaaS tools such as Google Workspace and Okta.
  • Strong understanding of modern attack and defense techniques for desktop environments including Windows and macOS.
  • Strong experience in security automation, from scripting to end-to-end automated workflows.
  • Familiarity with SOAR platforms and automating threat detection and response tasks.
  • Excellent spoken and written communication skills.
  • Hands-on attitude with the ability to drive solutions to completion.
  • Passion for sharing knowledge with colleagues.
  • Experience writing automation and scripts, with a portfolio or repository to showcase work preferred.

Benefits

  • Remote-first work setup with flexibility to work from anywhere in Bulgaria.
  • Performance-based incentives.
  • 25 days of paid annual leave.
  • 3 additional days for volunteering and learning.
  • Private health insurance.
  • Mental health support platform.
  • Company-sponsored Multisport Card.
  • Family and friendly leave according to statutory entitlements.
  • Personal learning and development budget.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Y

Security Compliance Engineer

Yuno 51-200 Payment Processing Software

Yuno is hiring a Security Compliance Engineer in LATAM to help translate security, privacy, and compliance requirements into technical controls that support audits and secure global payment operations.

Chile Colombia Paraguay Puerto Rico Mexico Argentina Full-time Mid Level Security Engineer
AWS CI/CD CloudFormation GCP Kubernetes Python Serverless Terraform WAF
17 hours, 57 minutes ago
Softeta

Cybersecurity Engineer (OT)

Softeta 51-250 Internet Software & Services

Softeta is hiring a Cybersecurity Engineer to support an energy-sector client by testing and securing industrial OT and SAS environments.

Poland Full-time Mid Level Security Engineer
Agile Cybersecurity Scrum
22 hours, 12 minutes ago
Rackner

DevSecOps (Kubernetes) Engineer SME

Rackner 11-50 Internet Software & Services

Rackner is hiring a remote DevSecOps (Kubernetes) Engineer SME to support the U.S. Air Force Platform One Big Bang program building a Kubernetes-based platform-as-a-service environment.

United States Full-time Mid Level DevOps Engineer Security Engineer
CI/CD Cybersecurity Docker GitOps Helm Kubernetes OpenShift Terraform
22 hours, 12 minutes ago
Plain Concepts

Security Automation Architect (SIEM/SOAR & AI)

Plain Concepts 251-1K Internet Software & Services

Plain Concepts is hiring a senior cybersecurity professional to design AI-native security operations workflows that modernize SOC detection, investigation, and response.

Spain Full-time Senior AI Engineer Security Engineer
Agile Azure Cybersecurity DevSecOps SIEM Splunk
22 hours, 12 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers