Security Engineer (Hybrid or Remote)

Stack

Responsibilities

• ▹Own SIEM alerting end-to-end: ship logs, write and tune detection rules, cut false positives
• ▹Act as first responder for security incidents: investigate, contain and drive to closure
• ▹Administer the IdP (SSO via SAML/OIDC, MFA, conditional access) and run access recertification
• ▹Hunt over-permissive and stale access, enforce least privilege and PAM
• ▹Improve SaaS security posture and apply DLP controls
• ▹Keep the endpoint stack (MDM, XDR/AV, device-compliance checks) healthy and tuned
• ▹Defend against phishing and spoofing (DMARC/SPF/DKIM), run phishing simulations and awareness
• ▹Build internal tooling and automate repetitive operations
• ▹Own the roadmap for your areas

Requirements

• ▹5+ years in security operations, corporate/IT security or endpoint engineering
• ▹Strong SIEM skills (Splunk, Elastic, Panther, Sumo Logic): detection engineering and incident response
• ▹Identity provider experience (Okta, Entra ID, Google Workspace), access recertification, least privilege and PAM
• ▹Working knowledge of endpoint security and email/phishing defense
• ▹Practical experience securing internal AI use
• ▹Strong scripting and automation skills, building tooling against APIs
• ▹Clear written and spoken English

Soft skills

What we offer

• ▹Hybrid model in the Limassol office or fully remote
• ▹Relocation support to Cyprus (visa, package)
• ▹Learning and development budget
• ▹Fully paid vacation and sick leave
• ▹Sports compensation

About the company

Vivid is a fast-growing EMI-licensed fintech running in a fully cloud-native AWS environment.