Security Engineer (Hybrid or Remote)

Stack

Responsibilities

• ▹Own SIEM alerting end-to-end: log shipping, detection rules, false-positive reduction
• ▹Act as first responder for security incidents, investigate, contain and close with clear runbooks
• ▹Administer the identity provider (SSO via SAML/OIDC, MFA, conditional access) and run access recertification
• ▹Hunt down over-permissive and stale access, enforce least privilege and PAM
• ▹Improve SaaS security posture and apply DLP controls
• ▹Keep the endpoint stack healthy (MDM, XDR/AV, device-compliance checks)
• ▹Defend against phishing and spoofing, run phishing simulations and awareness training
• ▹Build internal tooling and automate repetitive security operations

Requirements

• ▹5+ years in security operations, corporate/IT security or endpoint engineering
• ▹Strong with a SIEM (Splunk, Elastic, Panther, Sumo Logic) — detection engineering and incident response
• ▹Experience with an identity provider (Okta, Entra ID, Google Workspace), access recertification, least-privilege/PAM
• ▹Working knowledge of endpoint security (MDM, XDR/EDR/AV) and email/phishing defense
• ▹Practical experience securing how a company uses AI internally
• ▹Strong scripting and automation skills, building tooling against APIs
• ▹Track record of driving improvements end-to-end with little oversight
• ▹Clear written and spoken English

Soft skills

What we offer

• ▹Hybrid model in the Limassol office, or fully remote outside office locations
• ▹Relocation support to Cyprus (visa, package) when needed
• ▹Learning & development budget
• ▹Fully paid vacation and sick leave
• ▹Sports compensation

About the company

Vivid is a Berlin-founded fintech (2019) building tools for businesses and individuals to manage and grow their money across Europe, serving over 500,000 customers with more than €200 million raised.