Security Engineer Iii - Security Operations
pbThis position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineer III - Security Operations based in Italy. /b /p pPer essere preso/a in considerazione per un colloquio, la preghiamo di assicurarsi che la sua candidatura sia pienamente in linea con le specifiche del lavoro riportate di seguito. /p pJoin a globally distributed engineering team focused on protecting critical cloud infrastructure and strengthening security operations within a modern payments environment. As a Security Engineer III, you will take ownership of key detection and response capabilities, helping identify emerging threats, investigate incidents, and improve security coverage. You will build and optimize SIEM detections, automate response workflows, and develop reliable security tooling using Python and infrastructure-as-code practices. Working across cloud infrastructure, compliance, and incident response, you will help reduce operational risk while making security processes more efficient. This role offers meaningful technical ownership, opportunities to improve security maturity, and collaboration with a team that values autonomy, continuous learning, and clear communication. /p h3Accountabilities: /h3 ul lipPlan and deliver end-to-end detection and response initiatives, from creating detection rules to implementing automated response workflows. /p /li lipBuild, tune, and maintain security detections across Elastic SIEM and AWS environments, identifying and closing gaps in existing threat coverage. /p /li lipManage the security investigation queue by triaging alerts, investigating suspicious activity, escalating incidents when necessary, and driving issues toward resolution. /p /li lipDocument incident investigations and findings clearly to support follow-up actions, knowledge sharing, and operational consistency.
/p /li lipDevelop and maintain runbooks and automation workflows using Python and no-code tools such as Zapier or Tines to reduce manual work and accelerate incident response. /p /li lipMake and document risk decisions within your area of responsibility, escalating issues when additional expertise or support is required. /p /li lipSupport compliance initiatives by maintaining audit-ready security controls and contributing evidence for frameworks such as SOC 2 and PCI DSS. /p /li lipUse Terraform and Python to build, maintain, and improve the infrastructure supporting security detections and operational tooling. /p /li lipParticipate in the on-call rotation for security monitoring and incident response. /p /li lipContinuously improve detection coverage, investigation processes, and response efficiency. /p /li /ul h3Requirements: /h3 pThe ideal candidate has practical experience in security operations and cloud-native threat detection, with strong scripting skills and the ability to investigate incidents independently. You should be comfortable taking ownership of security outcomes while communicating findings and risks clearly. /p ul lipHands-on experience building, maintaining, and tuning SIEM detections. Experience with Elastic is preferred, while Splunk, Microsoft Sentinel, or comparable platforms is also relevant. /p /li lipPractical experience securing AWS environments and implementing cloud-native detection and response capabilities. /p /li lipProficiency in Python for scripting, automation, and security tooling. /p /li lipExperience with Terraform or other infrastructure-as-code technologies.
/p /li lipWorking knowledge of the MITRE ATTCK framework and its application to threat detection and investigation. /p /li lipDemonstrated experience triaging, investigating, and resolving security incidents. /p /li lipStrong written communication skills, with the ability to document investigations, technical findings, and risk decisions in a clear, structured manner. /p /li lipAbility to work independently, prioritize security issues, and take ownership of assigned responsibilities. /p /li lipWillingness to participate in an on-call rotation for monitoring and incident response. /p /li /ul h3Nice to have: /h3 ul lipExperience with security orchestration, automation, and response (SOAR) platforms or no-code security automation tools. /p /li lipFamiliarity with compliance frameworks such as PCI DSS, SOC 2, or ISO 27001. /p /li lipExperience in fintech, payments, or another regulated industry. /p /li /ul h3Benefits: /h3 ul lipbRemote work: /b Fully remote working environment within a globally distributed team. /p /li lipbEquity: /b Competitive share options. /p /li lipbPaid time off: /b Flexible holiday policy, with a minimum of 25 days to be taken. /p /li lipbCoworking access: /b Access to coworking spaces across major cities. /p /li lipbTeam events: /b Workations and an annual company retreat. /p /li lipbEquipment: /b High-quality equipment suited to your role. /p /li lipbHome office support: /b £500 contribution toward your home office setup. /p /li lipbLearning and development: /b Generous learning budget to support continued professional growth. /p /li lipbHealthcare: /b Private medical insurance. /p /li lipbAdditional perks: /b A range of other benefits depending on location. /p /li lipbProfessional support: /b Structured onboarding and a collaborative environment that encourages learning and shared problem-solving. xlwpduy /p /li /ul pWe appreciate your interest and wish you the best! /p p#J-18808-Ljbffr /p #J-18808-Ljbffr
/p /li lipDevelop and maintain runbooks and automation workflows using Python and no-code tools such as Zapier or Tines to reduce manual work and accelerate incident response. /p /li lipMake and document risk decisions within your area of responsibility, escalating issues when additional expertise or support is required. /p /li lipSupport compliance initiatives by maintaining audit-ready security controls and contributing evidence for frameworks such as SOC 2 and PCI DSS. /p /li lipUse Terraform and Python to build, maintain, and improve the infrastructure supporting security detections and operational tooling. /p /li lipParticipate in the on-call rotation for security monitoring and incident response. /p /li lipContinuously improve detection coverage, investigation processes, and response efficiency. /p /li /ul h3Requirements: /h3 pThe ideal candidate has practical experience in security operations and cloud-native threat detection, with strong scripting skills and the ability to investigate incidents independently. You should be comfortable taking ownership of security outcomes while communicating findings and risks clearly. /p ul lipHands-on experience building, maintaining, and tuning SIEM detections. Experience with Elastic is preferred, while Splunk, Microsoft Sentinel, or comparable platforms is also relevant. /p /li lipPractical experience securing AWS environments and implementing cloud-native detection and response capabilities. /p /li lipProficiency in Python for scripting, automation, and security tooling. /p /li lipExperience with Terraform or other infrastructure-as-code technologies.
/p /li lipWorking knowledge of the MITRE ATTCK framework and its application to threat detection and investigation. /p /li lipDemonstrated experience triaging, investigating, and resolving security incidents. /p /li lipStrong written communication skills, with the ability to document investigations, technical findings, and risk decisions in a clear, structured manner. /p /li lipAbility to work independently, prioritize security issues, and take ownership of assigned responsibilities. /p /li lipWillingness to participate in an on-call rotation for monitoring and incident response. /p /li /ul h3Nice to have: /h3 ul lipExperience with security orchestration, automation, and response (SOAR) platforms or no-code security automation tools. /p /li lipFamiliarity with compliance frameworks such as PCI DSS, SOC 2, or ISO 27001. /p /li lipExperience in fintech, payments, or another regulated industry. /p /li /ul h3Benefits: /h3 ul lipbRemote work: /b Fully remote working environment within a globally distributed team. /p /li lipbEquity: /b Competitive share options. /p /li lipbPaid time off: /b Flexible holiday policy, with a minimum of 25 days to be taken. /p /li lipbCoworking access: /b Access to coworking spaces across major cities. /p /li lipbTeam events: /b Workations and an annual company retreat. /p /li lipbEquipment: /b High-quality equipment suited to your role. /p /li lipbHome office support: /b £500 contribution toward your home office setup. /p /li lipbLearning and development: /b Generous learning budget to support continued professional growth. /p /li lipbHealthcare: /b Private medical insurance. /p /li lipbAdditional perks: /b A range of other benefits depending on location. /p /li lipbProfessional support: /b Structured onboarding and a collaborative environment that encourages learning and shared problem-solving. xlwpduy /p /li /ul pWe appreciate your interest and wish you the best! /p p#J-18808-Ljbffr /p #J-18808-Ljbffr