Senior Security Engineer

About This Opportunity

We are representing a confidential open-source orchestration platform company seeking their first dedicated Senior Security Engineer in Europe. This is a rare opportunity to build security foundations from the ground up for a platform trusted by thousands of organizations worldwide.

Our client runs user-defined code at scale—scripts, containers, and queries against production systems through hundreds of community-built plugins. The entire source code is public. This creates an unusually complex attack surface, and securing it is a genuinely hard engineering problem, not a checkbox exercise.

This is a hands-on technical role, not GRC or compliance-focused. You'll actively break systems to find vulnerabilities and fix them by writing code, submitting pull requests, and hardening infrastructure. If you want to shape security posture for a fast-growing SaaS and open-source ecosystem, we want to hear from you.

Responsibilities

Your first six months will focus on penetration testing, vulnerability management, and infrastructure hardening. The role expands from there:

• Conduct hands-on penetration testing and threat modeling across web applications, APIs, control planes, and cloud environments
• Manage end-to-end vulnerability tracking across codebases, software dependencies, container images, and cloud infrastructure
• Proactively fix security flaws by writing patches, submitting PRs, or collaborating with product teams on remediation
• Audit and harden cloud infrastructure (GCP, Kubernetes clusters, networking) against external and internal threats
• Automate security tooling into CI/CD pipelines (SAST, DAST, dependency scanners) to catch CVEs before production
• Perform security code reviews and evaluate third-party dependencies, open-source integrations, and supply-chain risks
• Lead incident response efforts and establish continuous monitoring, detection, and mitigation strategies
• Own public security posture: vulnerability disclosure process, CVE handling, security advisories, and plugin ecosystem trust models

What We're Looking For

• 5+ years in Security Engineering, Product Security, DevSecOps, or combined Offensive/Defensive roles
• Strong hands-on penetration testing background with proven ability to discover application, API, and network-level vulnerabilities
• A builder/fixer mindset: you read code, understand exploits, write fixes, or provide clear remediation steps—not just export scanner PDFs
• Deep familiarity with cloud security (AWS or GCP) and containerized environments (Kubernetes, Docker)
• Experience with dependency and supply-chain security (CVE management, open-source licensing, SCA tools)
• Fluent in English and comfortable working autonomously in a fully remote environment
• Adaptability to a fast-paced open-source startup where pragmatism and execution speed matter

Tech stack includes: Trivy, GitHub Security/Dependabot, Elastic Security, Docker, Kubernetes, Terraform, GCP, Java, TypeScript, JavaScript, PostgreSQL, Elasticsearch, Redis, Kafka, AMQP, ELK, Prometheus, Grafana, GitHub Actions, ArgoCD

How We Work With You

All applications are processed through Get A Job.ai. After you apply on our platform, one of our talent team members will conduct an initial screening. If there's a strong match, we'll submit your profile to our client for consideration. The client's interview process typically takes 2-3 weeks and includes a hiring manager intro call, a technical scenario/practical assessment (asynchronous homework), a team chat, and a final discussion with leadership.

Important: Please do not attempt to contact the client directly. All communication and coordination will be managed by our recruiting team to ensure a smooth process for everyone involved.

Benefits

• Remote-first: work from anywhere in Europe with access to coworking spaces worldwide
• Health coverage including medical, dental, and vision
• Home office setup provided

Pay

Compensation details will be discussed during the screening process based on experience and location.

Get A Job.ai is an equal opportunity recruiter. We welcome applications from candidates of all backgrounds and work to ensure fair and inclusive hiring practices for the organizations we represent.