Security Engineer (Mid-Level), Infrastructure Hosting

About the role

FDC Servers is looking for a hands-on Security Engineer to strengthen its security team and support the Security Manager with security operations, incident investigations, vulnerability management and security improvement projects. FDC operates across 30+ global locations with thousands of servers, offering dedicated servers, VPS, colocation and IP transit services. This is a fully remote, long-term independent contractor position reporting to the Security Manager.

Key responsibilities

• Investigate security alerts, suspicious activity and incidents by correlating logs across systems, networks and applications.
• Research vulnerabilities and CVEs, assess exposure and exploitability, prioritize risks and coordinate remediation.
• Perform infrastructure security assessments, configuration audits and security testing of new services, applications and APIs.
• Improve SIEM monitoring, threat detection, identity and access controls and incident response procedures.
• Identify recurring weaknesses and work with infrastructure teams to implement scalable improvements through automation and standardized controls.
• Leverage AI-assisted tools for security research, incident analysis, vulnerability assessment and testing.

Required profile

• 3+ years of experience in cybersecurity or infrastructure operations, or equivalent hands-on experience.
• Ability to troubleshoot Linux systems and investigate TCP/IP, routing, firewall and application log issues.
• Ability to investigate issues independently, document findings and communicate clearly in English.

Required skills

• Hands-on experience with vulnerability assessment, security monitoring, incident investigation and remediation.
• Hands-on experience with SIEM platforms, log correlation and security event analysis.
• Good understanding of IAM, SSO, MFA, authentication and authorization.
• Practical knowledge of Juniper Junos, including firewall filters, ACLs and routing policies.
• Strong Bash scripting and Git; practical use of AI tools for security research and automation.
• Nice to have: hosting, ISP or data center experience; Juniper PTX/QFX, BGP security and RTBH; Wazuh, Greenbone/OpenVAS, Nessus, Nuclei, Cloudflare WAF; Python, Ansible, AWX; Authentik, Keycloak, Grafana, Loki; Proxmox VE, Docker, Kubernetes; Burp Suite, OWASP ZAP.

Pay is by agreement, based on experience. Recruitment agencies are asked not to contact the employer, which works with direct candidates only.