HQ - Lead Information Security Engineer

Job description

### Join us to shape the future of work: your next adventure awaits! ## **About the Role** We are seeking a proactive and experienced **Lead Information Security Engineer** to join our Information Security team. In this role, you will take ownership of incident management, threat detection, and the continuous improvement of our security posture, while **leading and managing our team of four Information Security Engineers**. You will be responsible for setting priorities, providing technical guidance, developing team capabilities, and ensuring the effective execution of our Security Operations strategy. You will play a pivotal role in safeguarding Job&Talent’s systems, data, and operations, fostering a culture of security excellence, and ensuring our security capabilities evolve ahead of emerging threats. Combining hands-on technical expertise with people management, you will drive operational excellence, strengthen our detection and response capabilities, and collaborate closely with DevOps and other teams across the business. This is a fully remote position with flexibility within ±1 hour of CET. ### Responsibilities - **Team Leadership and Management:** Lead and manage a team of four security professionals, providing direction, technical guidance, mentoring, and support to drive individual development and overall team performance. - **SecOps and Threat Detection:** Own and continuously improve incident management processes, ensuring effective investigation, response, and resolution of security incidents. - **Detection and Response:** Improve threat detection capabilities, optimize SIEM alerting to reduce noise and false positives, develop and maintain incident response playbooks, and strengthen email security. - **Security Policies and Standards:** Develop security guides and define, implement, and monitor security measures to protect Job&Talent’s systems, data, and operations. - **Security Tooling and Processes:** Drive the continuous improvement of security tools, processes, and standards to provide consistent security assurance across the business. - **Cloud Security:** Use our Cloud Security Posture Management (CSPM) tool to monitor and improve cloud security configurations across AWS, Azure, and Google Cloud Platform. - **Cross-functional Collaboration:** Work closely with DevOps teams to integrate security into cloud deployment environments, infrastructure, and CI/CD pipelines. - **Risk Management:** Perform risk assessments, threat modeling, and security reviews, ensuring risks are identified, prioritized, and addressed effectively. - **Logging and Visibility:** Improve logging, monitoring, visibility, and evidence collection across corporate and production systems. - **Continuous Improvement:** Establish best practices, identify opportunities to improve operational efficiency, and ensure the team continuously develops its technical capabilities in response to evolving threats. ### Requirements - 5+ years of experience in SecOps, cloud security, incident response, security engineering, or a similar role. - Previous experience leading or managing a security team, including mentoring engineers, setting priorities, and coordinating workloads. Experience managing a team of a similar size is a plus. - At least 3 years of experience in threat analysis, SIEM alert investigation, detection engineering, noise reduction, and incident management. - At least 2 years of experience working with CSPM tools. - At least 3 years of experience working for a cloud-based, global technology product company. - Hands-on experience with EDR/XDR tools and endpoint investigation. - Experience with vulnerability management and risk-based prioritization. - Strong understanding of cloud security principles and experience working with AWS, Azure, and/or Google Cloud Platform. - Ability to combine hands-on technical expertise with team leadership, ensuring effective execution while supporting the development of team members. - Strong communication and collaboration skills, with the ability to work effectively with technical teams and stakeholders across the business.