Security Engineer

Stack

Responsibilities

• ▹Improve and tune SIEM detection rules and alerting workflows
• ▹Identify gaps in detection coverage and develop pragmatic detection improvements
• ▹Enhance DLP and secure web gateway controls
• ▹Monitor and remediate findings from CASB and ISPM platforms
• ▹Investigate security alerts and incidents, including root cause analysis
• ▹Support vulnerability management across cloud, endpoints and SaaS platforms, including prioritisation and remediation tracking
• ▹Maintain and improve incident response procedures, including playbooks, tabletop exercises and post-incident reviews
• ▹Provide security input into internal technology decisions, including new SaaS integrations and cloud architecture changes
• ▹Automate repetitive security workflows and reporting
• ▹Reduce false positives and continuously improve signal quality
• ▹Use scripting and automation to streamline security operations
• ▹Use AI tools responsibly to improve investigation workflows, reporting and documentation
• ▹Build lightweight automation to reduce manual compliance overhead
• ▹Own and maintain selected ISO 27001 controls and ensure they are technically implemented and operating effectively
• ▹Maintain evidence, support internal and external audits, and track and remediate control gaps
• ▹Support risk assessments and control reviews, and improve security policies and standards
• ▹Support access reviews and vendor security assessments
• ▹Communicate technical risk clearly to non-technical stakeholders

Requirements

• ▹5–7 years of hands-on experience in information security
• ▹Practical experience operating and tuning security tools such as ISPM, SIEM, DLP, CASB and EDR
• ▹Solid understanding and real-world implementation experience of Zero Trust principles: identity-based access controls, least privilege, device posture enforcement and continuous verification
• ▹Experience in incident response and security investigations
• ▹Strong understanding of cloud logging, telemetry pipelines and log source integration
• ▹Automation experience in Python, Bash or similar scripting languages
• ▹Experience supporting ISO 27001 or similar compliance frameworks, including control ownership and audit readiness
• ▹Comfortable taking ownership of security controls, identifying gaps and driving measurable improvements independently
• ▹Full professional fluency in English

Nice to have

• ▹Experience in cloud environments, especially Google Cloud
• ▹Experience with Infrastructure as Code such as Terraform or Pulumi
• ▹Experience preparing for or supporting ISO audits
• ▹Relevant certifications (CompTIA Security+, Google Professional Cloud Security Engineer or similar)

Soft skills

What we offer

• ▹27 days of vacation
• ▹Supplementary and additional health insurance
• ▹50% covered MultiSport membership
• ▹Hybrid working model

About the company

Datatonic is Google Cloud's premier partner in AI, working on machine learning, data engineering and analytics on Google Cloud. It is a cloud-first company of about 300 employees with Apple endpoints.