Security Engineer

Stack

Responsibilities

• ▹Run the vulnerability-management lifecycle (scan, triage, remediate)
• ▹Operate and improve SIEM and security-monitoring tooling
• ▹Investigate security alerts and lead incident response
• ▹Improve security of Linux hosts, cloud infra and networks
• ▹Own technical identity and access management controls
• ▹Automate patching, evidence collection and control checks
• ▹Coordinate penetration tests and drive remediation
• ▹Implement SOC 2 and ISO 27001 technical controls

Requirements

• ▹Proven ownership of technical security in production SaaS/cloud
• ▹Strong Linux systems, networking and cloud-security fundamentals
• ▹Vulnerability management, patching and hardening at scale
• ▹Experience operating SIEM/security-monitoring systems
• ▹Practical IAM, privileged access and secrets management knowledge
• ▹Automation skills in Python, Bash or infrastructure-as-code
• ▹Incident response experience and clear communication
• ▹Working knowledge of ISO 27001, SOC 2 or similar frameworks

Nice to have

• ▹Experience with Wazuh or a comparable SIEM platform
• ▹Experience with Telepo

Soft skills

About the company

Semaphore is a remote-first software company helping engineering teams build, test and deliver software, maintaining SOC 2 Type 2 and ISO 27001:2022 compliance.