Senior Security Engineer – Cloud Detection & Response (Remote)

Jobgether; Belgique; Remote; EUR 75,000 - 110,000; Full time

Benefits offered by this job

Remote work: Fully remote

Equity: Competitive share options

Paid time off: 25 days minimum

Coworking access

Team events: Workations and annual off

Equipment: High-quality equipment

Home office support: £500 contribution

Learning and development budget

Healthcare: Private medical insurance

Additional perks: Location-based

Professional onboarding and support

Job summary

Jobgether is seeking a Security Engineer III - Security Operations based in Belgium for a fully remote role within a globally distributed engineering team. You will own detection and response capabilities, build and tune detections in Elastic SIEM and AWS, and automate response workflows using Python and no-code tools.

You will triage alerts, investigate incidents, document findings, and contribute to SOC 2 and PCI DSS compliance while collaborating to improve security maturity and tooling

Qualifications

• Hands-on experience building, maintaining, and tuning SIEM detections across Elastic (preferred) or other platforms like Splunk or Microsoft Sentinel.
• Practical experience securing AWS environments and implementing cloud-native detection and response capabilities.
• Proficiency in Python for scripting, automation, and security tooling.
• Experience with Terraform or other infrastructure-as-code technologies.
• Working knowledge of the MITRE ATT&CK framework and applying it to threat detection and investigation.
• Demonstrated experience triaging, investigating, and resolving security incidents.
• Strong written communication skills for documenting investigations, findings, and risk decisions.
• Ability to work independently, prioritize security issues, and own assigned responsibilities.

Responsibilities

• Own key aspects of security detection and response from detection rule creation to automated response workflows.
• Build, tune, and maintain detections across Elastic SIEM and AWS environments.
• Manage the security investigation queue: triage alerts, investigate, escalate, drive to resolution.
• Document investigations and findings to support follow-up actions and knowledge sharing.
• Develop runbooks and automation workflows using Python and no-code tools like Zapier or Tines.
• Make risk decisions within your area and escalate when needed.
• Support compliance by maintaining audit-ready controls and contributing evidence for SOC 2, PCI DSS.
• Use Terraform and Python to build and improve infrastructure supporting detections and tooling.
• Participate in on-call rotation for security monitoring and incident response.
• Continuously improve detection coverage and response efficiency.

Skills

Elastic SIEM

AWS security

Python scripting

Terraform

MITRE ATT&CK

Incident response

Automation workflows

No-code tools

Tools

Zapier

Tines

Job description

Jobgether is seeking a Security Engineer III - Security Operations based in Belgium for a fully remote role within a globally distributed engineering team. You will own detection and response capabilities, build and tune detections in Elastic SIEM and AWS, and automate response workflows using Python and no-code tools.

You will triage alerts, investigate incidents, document findings, and contribute to SOC 2 and PCI DSS compliance while collaborating to improve security maturity and tooling