Security Engineer

About the role

You will be the technical owner of information security across Semaphore’s infrastructure and internal systems. Working closely with Engineering, Infrastructure, and the Compliance Manager, you will translate security and compliance requirements into practical, reliable controls.

Key responsibilities

• Run the full vulnerability‑management lifecycle: scanning, triage, prioritisation, remediation and verification.
• Operate and enhance security monitoring and SIEM tooling, including alerts, dashboards and detection rules.
• Investigate security alerts and lead technical response to incidents.
• Improve security of Linux hosts, cloud infrastructure, networks, firewalls, containers and internal services.
• Implement and maintain IAM, least‑privilege, just‑in‑time access, secrets and certificate controls.
• Automate patching, evidence collection and recurring security checks.
• Coordinate penetration tests and drive remediation of findings.
• Translate SOC 2 and ISO 27001 requirements into effective technical implementations.

Required profile

• Proven ownership of technical security in a production SaaS, cloud or infrastructure environment.
• Strong fundamentals in Linux systems, networking and cloud security.
• Hands‑on experience with vulnerability management, patching and large‑scale remediation.
• Experience operating SIEM or security‑monitoring platforms and investigating events.
• Practical knowledge of IAM, privileged access, secrets management and network controls.
• Ability to automate tasks using Python, Bash or infrastructure‑as‑code.
• Experience participating in incident response and communicating under pressure.
• Familiarity with ISO 27001, SOC 2 or similar security frameworks.

Required skills

• Linux
• Cloud security
• Vulnerability management
• SIEM
• Incident response
• IAM
• Secrets management
• Python
• Bash
• Infrastructure‑as‑code