Security Engineer

Job description

Sisu Group is a fast-growing iGaming startup with over 200 team members and offices in Tallinn and Malaga. We are on a mission to redefine the future of iGaming and sports betting by building cutting-edge technology and next-generation player experiences. In 2024, two brands were successfully launched. Backed by €21M in secured funding , the majority of our company is owned by the people building it, our team. Sisu promotes a collaborative, non-corporate culture, offering competitive salaries with stock options to match. We are seeking a Security Engineer to help protect our cloud-native iGaming platform and our brands. You’ll work directly with the Head of Information Security across cloud, application, and operational security. If you like solving real security problems and want real ownership from day one, Sisu Group is the place for you. You’ll have the exciting opportunity to: Operate and improve our security monitoring and detection stack Drive vulnerability management end-to-end — from finding to verified fix Support incident response and post-incident reviews Harden our cloud environments and CI/CD pipelines Partner with engineering on threat modeling and secure design Contribute to ISO 27001 and gambling-license security obligations What we expect: 3–5 years of hands-on security engineering or DevSecOps experience Solid cloud security knowledge (AWS or GCP) Comfortable with SIEM, log analytics, and detection tuning Experience with vulnerability management and incident response Strong scripting / automation skills Good written and spoken English Nice to have (but not required): Experience in iGaming, fintech, or another regulated industry Exposure to MGA or Estonian Gambling Act expectations Threat modeling and secure SDLC experience Relevant security certifications (e.g. OSCP, Security+, cloud security specialty, ISO 27001 LI/LA) What we use: Major cloud provider, cloud-native architecture Containerized workloads on a managed orchestrator Modern SIEM, log aggregation, and observability stack Static analysis and infrastructure-as-code scanning in CI Centralized vulnerability and finding management Git-based source control with modern CI/CD Company culture and benefits: At Sisu Group we believe in creating a positive and inclusive workplace culture where teamwork is the key. We value collaboration, open communication, and treat all team members as equals. We encourage each other to be proactive and take ownership, while also providing the support and resources needed to help them grow and develop even further. We understand that our employees are our biggest asset, which is why we offer a competitive compensation package that includes stock options, and generous paid time off. We believe that building a great company is about more than just creating a successful product, it’s about building a community of passionate and driven individuals who share a common goal. If you’re looking for a company where you can grow professionally, work with talented and dedicated colleagues, and make a real impact, while sharing our key values of caring, thinking outside the box, taking charge and having a positive mindset, then Sisu Group is the place for you. By submitting this application, the candidate agrees that Sisu Group stores personal details to be able to process the job application. Sisu Group follows and is compliant with the General Data Protection Regulation. Clear police record required, ensuring a commitment to integrity and a safe workplace.