Security Engineer / DevSecOps

Toogeza is a Ukrainian recruiting firm building teams for tech startups worldwide. This role is a hands-on Security Engineer / DevSecOps position reporting to the CISO, responsible for implementing and improving security controls across corporate infrastructure, cloud services, and AI solutions in a mixed Windows and Linux environment.

* Develop and implement a security monitoring roadmap including SIEM/XDR architecture, log source integration, detection rule development, and threat-hunting capabilities * Establish repeatable vulnerability management processes covering discovery, validation, prioritization, remediation tracking, and retesting with technical assessments of exploitability and business impact * Review service architectures, CI/CD pipelines, and configurations; develop security checklists for access controls, secrets management, encryption, and logging; implement secure configuration baselines * Build security automation scripts and integrations for event analysis, configuration checks, vulnerability management, and reporting; use AI-assisted tools while validating output and protecting credentials * Develop AI security assessment checklists for corporate LLM services and AI integrations; address risks including prompt injection, data leakage, and excessive permissions

* Practical experience in Security Engineering, DevSecOps, or infrastructure/DevOps roles with substantial responsibility for production security * Hands-on SIEM/XDR experience including log onboarding, query development, detection rules, and alert investigation * Practical vulnerability management and system or service hardening experience * Strong understanding of Linux, Windows Server/Active Directory, networking, authentication, and access controls * Scripting and automation skills using Python, PowerShell, Bash, APIs, and Git; ability to review code, Infrastructure as Code, and configurations

* Experience with Cortex XDR, Microsoft Sentinel, or Wazuh; familiarity with XQL or KQL * AWS or Azure security, Terraform, Ansible, and GitLab CI/CD * Penetration testing, red teaming, adversary emulation, or purple teaming experience * Experience implementing or testing AI agents, retrieval-augmented generation (RAG), or corporate LLM services * Experience providing technical evidence for audits or implementing controls within an ISMS/ISO 27001 programme