Senior Cybersecurity Engineer – Infrastructure

• Design, implement, and tune detections across security telemetry, including SIEM rules and custom ML models
• Triage alerts, investigate real incidents, and drive them to closure
• Perform technical incident response and post-incident improvement
• Harden and monitor AWS and Kubernetes (EKS) environments, including workload security, IAM, container runtime defense, and configuration standards
• Collaborate with engineering teams so security functions as enablement
• Own the health and hardening of endpoint agents across macOS, Windows, and Linux
• Operate and extend DLP coverage across removable media, email, and SaaS channels
• Detect data exfiltration through telemetry while maintaining low false-positive rates
• Automate recurring security operations and detection-to-response workflows, including AI-based agents and pipelines
• Discover and manage infrastructure vulnerabilities through scanning, configuration review, and targeted penetration testing
• Prioritize vulnerabilities and drive remediation to closure
• Own significant parts of the security operations backbone spanning endpoints, network traffic, cloud workloads, and SaaS
• Report directly to the Information Security Engineering Manager as an individual contributor

• 5+ years in security engineering or SecOps roles with hands-on responsibility for detections and incidents in production
• Real detection engineering experience on a modern SIEM/security platform; Elastic Security preferred, with Splunk, Sentinel, or comparable experience accepted
• Experience with custom ML-based detection
• Deep, hands-on mastery of Linux, macOS, and Windows, including internals, hardening, and investigation
• Strong networking expertise: TCP/IP, routing, VPNs, firewalls, and packet-level analysis
• Strong cloud security foundation in AWS, including Kubernetes; experience securing and monitoring production cloud workloads
• Hands-on LLM experience building or operating LLM-powered tooling, agents, pipelines, or detection/automation workflows
• A certification in practical infrastructure hacking or hardening, such as OSCP, OSEP, or comparable hands-on offensive credential
• Demonstrated automation capability through scripts, integrations, pipelines, or AI-assisted workflows
• Self-directed working style with strong ownership and ability to complete ambiguous work with minimal supervision
• Excellent written and spoken English
• Further certifications such as CISSP, GIAC/GCFA/GCIH, or AWS Security are advantageous
• Software engineering background is not required
• Resume must be submitted in English

• A global, inclusive team that’s as supportive as it is ambitious and serious about getting things done
• An opportunity to work remotely or in a modern and welcoming office in Riga
• Flexible working hours (start your day as late as 11 AM)
• Private health insurance
• 2 extra paid days off to focus on your mental or physical well-being
• 1 extra paid day off to celebrate a Birthday or any other celebration of your choice
• Internal and external learning opportunities
• Access to mentorship, internal meetups, and hackathons, both on-site and online
• Free and healthy lunch if you work from the Rīga office
• Design and order your own merch using our platforms with an employee discount
• Exciting team-building events and parties you’ll never forget!