Current vacancy

Responsibilities

Security Engineering

• Design, implement, and maintain security controls across cloud infrastructure, networks, SaaS, and internal systems.
• Strengthen security of AWS (IAM, VPC, KMS, EC2, EKS, S3, etc), Kubernetes, CI/CD pipelines, identity management, secrets handling, and internal services.
• Build and automate security tooling to reduce manual work and improve visibility.
• Conduct security reviews of new systems, architectures, and product changes.
• Participate in designing HashiCorp Vault solutions, including defining roles, policies, access workflows, and implementing automation for secure secrets lifecycle management

Collaboration

• Work closely with engineering, IT, and product teams to integrate security best practices.
• Support teams with secure design decisions.
• Mentor junior team members and raise the technical bar of the security function.

Security Initiatives

• Own and drive security initiatives end-to-end.
• Continuously improve controls and processes through automation and simplification.
• Lead improvements in identity, network security, secrets management, observability, and detection.

Incident Support and Analysis

• Participate in incident investigations and security troubleshooting.
• Analyze logs, identify root causes, and propose mitigation and prevention measures.

Access Management

• Perform regular access reviews across AWS, Kubernetes, and SaaS.
• Support and improve identity and access management workflows and systems.

Requirements

• 5+ years of hands-on experience in Security Engineering or similar technical roles.
• Strong understanding of security fundamentals: threats, vulnerabilities, attack techniques, defensive measures.
• Deep experience with AWS (IAM, VPC, KMS, EC2, EKS, S3).
• Strong hands-on experience with Kubernetes in production.
• Familiarity with CI/CD and secure deployment practices.
• Python for automation and tooling.
• Experience with Terraform and/or Ansible.
• Understanding of IAM concepts, OIDC, SAML, and RBAC.

Nice-to-have

• Experience with SIEM platforms.
• Experience with Kyverno or other admission control frameworks.
• Experience with Falco or other runtime security tools.
• Experience with EDR platforms.
• Experience with application security (SDLC, API security).

We offer

• Competitive remuneration
• Support in relocation to Cyprus
• Convinient location in Limassol
• Flexible start of the day
• Paid leave of 21 days