
Security Engineer
Nuvei
full-time
Posted on:
Location Type: Hybrid
Location: Sofia • Bulgaria
Visit company websiteExplore more
About the role
- Lead the implementation, configuration, and ongoing maintenance of a variety of advanced security technologies, including but not limited to EDR, Proxy, DLP, email protection, and other critical security solutions.
- Collaborate with the CISO and security leadership to align security strategies with business objectives, ensuring security requirements are properly designed and executed across the company’s infrastructure.
- Continuously monitor and analyze security systems, firewalls, logs, and relevant data sources to detect, analyze, and respond to potential security threats in real time.
- Regularly assess and refine the security architecture to ensure it meets current and emerging threats while aligning with best practices.
- Conduct thorough market research and spearhead proof of concept (POC) evaluations for new security tools, identifying opportunities to improve the organization’s overall security posture.
- Identify and assess emerging security threats through continuous monitoring, vulnerability assessments, and log analysis, proactively addressing risks before they materialize.
- Enhance internal security controls, including identity and access management (IAM), key management, security monitoring, and cloud security posture management (CSPM).
- Ensure security best practices and policies are adhered to across all systems and services.
Requirements
- 5+ years of hands-on experience in security engineering, with deep expertise in multiple IT security domains.
- Proven expertise in the following areas:
- Data Loss Prevention (DLP)
- Endpoint Protection (EDR/XDR)
- Proxy Solutions
- Email Protection
- SIEM
- Cloud Security Posture Management (CSPM)
- Data Security Posture Management (DSPM)
- Strong experience securing Windows, Linux, and macOS environments, with a comprehensive understanding of system security controls.
- Demonstrated expertise in both on-premises and cloud architecture security, with experience securing public cloud platforms (AWS, GCP, Azure, Office365).
- Advanced knowledge of network security, protocols, and the ability to secure complex network environments.
- Familiarity with host-based forensics, OS artifacts, and exploitation methods, with the ability to respond to security incidents effectively.
- Familiarity with compliance frameworks and certification programs (PCI-DSS, SOC II, ISO27001), with the ability to manage security audits and maintain compliance.
- Proven ability to lead cross-functional security initiatives, driving collaboration and widespread adoption of security best practices across teams.
- Passionate about staying ahead of the curve in cybersecurity trends, emerging threats, and security technologies.
- Preferred Qualifications:
- Experience with security design, threat modeling, and conduct security audits.
- Familiarity with containerization and cloud-native technologies (Kubernetes, Docker).
- Strong analytical and problem-solving skills, with attention to detail and a proactive approach to addressing complex security challenges
- SOAR solutions.
Benefits
- A challenging job in a fast-developing, international company.
- A friendly work environment where you can thrive and develop your skills.
- Career advancement possibilities.
- Competitive remuneration package.
- Additional Health insurance incl. Dentist.
- Fully covered MultiSport card.
- Food vouchers.
- Employee discounts card, Seminars and conference tickets, Playroom, and other additional perks.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
Data Loss Prevention (DLP)Endpoint Protection (EDR/XDR)Proxy SolutionsEmail ProtectionSIEMCloud Security Posture Management (CSPM)Data Security Posture Management (DSPM)Windows securityLinux securitymacOS security
Soft Skills
analytical skillsproblem-solving skillsattention to detailproactive approachcollaborationleadershipcommunication
Certifications
PCI-DSSSOC IIISO27001