HQ - Lead Information Security Engineer

Join us to shape the future of work: your next adventure awaits!

**About the Role**

We are seeking a proactive and experienced **Lead Information Security Engineer** to join our Information Security team. In this role, you will take ownership of incident management, threat detection, and the continuous improvement of our security posture, while **leading and managing our team of four Information Security Engineers**. You will be responsible for setting priorities, providing technical guidance, developing team capabilities, and ensuring the effective execution of our Security Operations strategy.

You will play a pivotal role in safeguarding Job&Talent’s systems, data, and operations, fostering a culture of security excellence, and ensuring our security capabilities evolve ahead of emerging threats. Combining hands-on technical expertise with people management, you will drive operational excellence, strengthen our detection and response capabilities, and collaborate closely with DevOps and other teams across the business.

This is a fully remote position with flexibility within ±1 hour of CET.

Responsibilities

• **Team Leadership and Management:** Lead and manage a team of four security professionals, providing direction, technical guidance, mentoring, and support to drive individual development and overall team performance.
• **SecOps and Threat Detection:** Own and continuously improve incident management processes, ensuring effective investigation, response, and resolution of security incidents.
• **Detection and Response:** Improve threat detection capabilities, optimize SIEM alerting to reduce noise and false positives, develop and maintain incident response playbooks, and strengthen email security.
• **Security Policies and Standards:** Develop security guides and define, implement, and monitor security measures to protect Job&Talent’s systems, data, and operations.
• **Security Tooling and Processes:** Drive the continuous improvement of security tools, processes, and standards to provide consistent security assurance across the business.
• **Cloud Security:** Use our Cloud Security Posture Management (CSPM) tool to monitor and improve cloud security configurations across AWS, Azure, and Google Cloud Platform.
• **Cross-functional Collaboration:** Work closely with DevOps teams to integrate security into cloud deployment environments, infrastructure, and CI/CD pipelines.
• **Risk Management:** Perform risk assessments, threat modeling, and security reviews, ensuring risks are identified, prioritized, and addressed effectively.
• **Logging and Visibility:** Improve logging, monitoring, visibility, and evidence collection across corporate and production systems.
• **Continuous Improvement:** Establish best practices, identify opportunities to improve operational efficiency, and ensure the team continuously develops its technical capabilities in response to evolving threats.

Requirements

• 8+ years of experience in SecOps, cloud security, incident response, security engineering, or a similar role.
• 3+ years of experience managing a security team, including mentoring engineers, setting priorities, and coordinating workloads.
• At least 5 years of experience in threat analysis, SIEM alert investigation, detection engineering, noise reduction, and incident management.
• At least 3 years of experience working with CSPM tools.
• At least 5 years of experience working for a cloud-based, global technology product company.
• Hands-on experience with EDR/XDR tools and endpoint investigation.
• Experience with vulnerability management and risk-based prioritization.
• Strong understanding of cloud security principles and experience working with AWS and/or Google Cloud Platform.
• Ability to combine hands-on technical expertise with team leadership, ensuring effective execution while supporting the development of team members.
• Strong communication and collaboration skills, with the ability to work effectively with technical teams and stakeholders across the business.