ml engineer for endpoint security

Kiwi.com; Barcelona; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Relocation package

Visa transfer support

Flight vouchers

Flexible compensation plan

30 paid vacation days

Dogs welcome in offices

Job summary

Kiwi.com ищет инженера по кибербезопасности для разработки агентных систем, внедрения базовых мер безопасности на платформах Windows/macOS/iOS/Android и сопровождения политик. Вы будете работать над автоматизацией инцидентов, участием в планировании спринтов и взаимодействием с отделами HR, Legal и Finance.

Требуется опыт инцидент-реакции, знание CIS/NIST и отличные навыки английского. Рассматривается релокация; оклад конкурентоспособный и включает бонусы.

Qualifications

• Глубокие знания конечной точки безопасности Windows/macOS/iOS/Android.
• Опыт работы с MDM платформами Intune, Jamf или аналогами и инструментами защиты.
• Опыт написания скриптов на Python, Bash, PowerShell для развертывания конфигураций.
• Понимание управления человеческим риском: фишинг и поведение пользователей.
• Знание CIS Benchmarks, Apple Security Recommendations и NIST.
• Интерес к агентному AI и автоматизации.
• Опыт инцидент-реакции и дежурств.
• Хорошие навыки английского языка (письменно и устно).

Responsibilities

• Разработка агентных систем для автономной классификации и устранения первых security-findings.
• Развёртывание и поддержка базовых мер безопасности на рабочих средах.
• Владение слоем разведки и циклами обратной связи для security AI агентов.
• Автоматизация рабочих процессов безопасности: обновления политик, патчи, соответствие, инцидент-реакции.
• Сотрудничество с HR, Finance, Legal и People Ops для автоматизированных процессов.
• Повышение эффективности команды и участие в планировании спринтов.
• Мониторинг метрик безопасности и улучшение базовых политик.

Skills

Endpoint security

MDM platforms

Python scripting

Bash scripting

PowerShell scripting

Security awareness

CIS Benchmarks

NIST guidelines

English communication

On-call experience

Tools

Intune

Jamf

SentinelOne

CrowdStrike

Job description

Описание

Kiwi.com is a global travel-tech company headquartered in the Czech Republic. Its algorithm helps users find route options and prices that other search engines may not identify, performing billions of price checks across 95% of global flight content.

Задачи

• Design agentic systems to autonomously triage, remediate, and resolve first-response security findings, including phishing, user behavior anomalies, and risky device states


• Build, deploy, and enforce endpoint security baselines across macOS, Windows, iOS, and Android using MDM and endpoint protection tools


• Own the intelligence layer, triage logic, and feedback loops for security AI agents


• Automate security workflows such as policy updates, software patching, compliance checks, incident response, and device offboarding


• Build partnerships and coordinate agent-driven automations across HR, Finance, Legal, and People Ops


• Drive team efficiency and visibility for security work, participate in sprint planning, and take responsibility for one internal tool or a small platform project


• Monitor endpoint security metrics and iterate on security baselines to reduce time-to-remediation, improve policy compliance, and elevate user security awareness

Требования

• Strong foundational knowledge of endpoint security across Windows, macOS, iOS, and Android


• Hands‑on experience with mobile device management platforms such as Intune, Jamf, or similar, and endpoint protection tools such as SentinelOne, CrowdStrike, or equivalent


• Proven experience building automation and scripts with Python, Bash, or PowerShell to deploy and manage security configurations at scale


• Understanding of human risk management, including phishing attacks, social engineering, user behavior analysis, and security awareness


• Familiarity with security baselines and hardening standards such as CIS Benchmarks, Apple Security Recommendations, and NIST guidelines


• Strong curiosity about agentic AI and intelligent automation


• Experience with incident response and participation in on-call rotations to investigate live security events


• Strong written and verbal communication skills in English, with the ability to explain security concepts to non-technical audiences

Условия

• Monthly entitlement of 200 Euro redeemable through Cobee


• Employees can allocate up to 30% of gross salary to certain products or services through flexible compensation and tax exemption


• Flexible working hours, 30 paid vacation days, and sick days


• Annual financial bonus based on company and individual performance


• Flight vouchers for Kiwi anniversaries


• Relocation package including visa transfer support


• Dogs are welcome in the offices