Sobre esta vaga de HQ - Lead Information Security Engineer na Jobandtalent
Join us to shape the future of work: your next adventure awaits!
About the Role
We are seeking a proactive and experienced Lead Information Security Engineer to join our Information Security team. In this role, you will take ownership of incident management, threat detection, and the continuous improvement of our security posture, while leading and managing our team of four Information Security Engineers. You will be responsible for setting priorities, providing technical guidance, developing team capabilities, and ensuring the effective execution of our Security Operations strategy.
You will play a pivotal role in safeguarding Job&Talent’s systems, data, and operations, fostering a culture of security excellence, and ensuring our security capabilities evolve ahead of emerging threats. Combining hands-on technical expertise with people management, you will drive operational excellence, strengthen our detection and response capabilities, and collaborate closely with DevOps and other teams across the business.
This is a fully remote position with flexibility within ±1 hour of CET.
Responsibilities
-
Team Leadership and Management: Lead and manage a team of four security professionals, providing direction, technical guidance, mentoring, and support to drive individual development and overall team performance.
-
SecOps and Threat Detection: Own and continuously improve incident management processes, ensuring effective investigation, response, and resolution of security incidents.
-
Detection and Response: Improve threat detection capabilities, optimize SIEM alerting to reduce noise and false positives, develop and maintain incident response playbooks, and strengthen email security.
-
Security Policies and Standards: Develop security guides and define, implement, and monitor security measures to protect Job&Talent’s systems, data, and operations.
-
Security Tooling and Processes: Drive the continuous improvement of security tools, processes, and standards to provide consistent security assurance across the business.
-
Cloud Security: Use our Cloud Security Posture Management (CSPM) tool to monitor and improve cloud security configurations across AWS, Azure, and Google Cloud Platform.
-
Cross-functional Collaboration: Work closely with DevOps teams to integrate security into cloud deployment environments, infrastructure, and CI/CD pipelines.
-
Risk Management: Perform risk assessments, threat modeling, and security reviews, ensuring risks are identified, prioritized, and addressed effectively.
-
Logging and Visibility: Improve logging, monitoring, visibility, and evidence collection across corporate and production systems.
-
Continuous Improvement: Establish best practices, identify opportunities to improve operational efficiency, and ensure the team continuously develops its technical capabilities in response to evolving threats.
Requirements
-
5+ years of experience in SecOps, cloud security, incident response, security engineering, or a similar role.
-
Previous experience leading or managing a security team, including mentoring engineers, setting priorities, and coordinating workloads. Experience managing a team of a similar size is a plus.
-
At least 3 years of experience in threat analysis, SIEM alert investigation, detection engineering, noise reduction, and incident management.
-
At least 2 years of experience working with CSPM tools.
-
At least 3 years of experience working for a cloud-based, global technology product company.
-
Hands-on experience with EDR/XDR tools and endpoint investigation.
-
Experience with vulnerability management and risk-based prioritization.
-
Strong understanding of cloud security principles and experience working with AWS, Azure, and/or Google Cloud Platform.
-
Ability to combine hands-on technical expertise with team leadership, ensuring effective execution while supporting the development of team members.
-
Strong communication and collaboration skills, with the ability to work effectively with technical teams and stakeholders across the business.
