Security Engineer

Everseen; Barcelona; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Everseen, a leader in vision AI solutions for global retailers, is seeking a Security Engineer to join its Security team. You will work with Infrastructure and Security teams to harden environments and improve detection across cloud, network, and on-prem stacks.

You will own security across AKS, GKE, Azure, perform CIS hardening, patch Linux hosts, manage vulnerability lifecycles, and build SIEM and SOAR workflows. Strong Linux, cloud, container, and automation skills are required.

Formación

• 3+ years in a Security Engineer, DevSecOps, or equivalent hands-on role.
• Solid Linux fundamentals: Comfortable navigating, troubleshooting and administering Linux environments strictly via the command line.
• Cloud Infrastructure: Practical experience with at least one major cloud platform (Azure or GCP is strongly preferred).
• Networking fundamentals: Understanding of TCP/IP, DNS, routing, firewall rule logic, and VPN concepts.
• Automation & IAC: Proficient in Bash for scripting, alongside hands-on experience with configuration management and provisioning tools like Ansible and/or Terraform.
• Vulnerability Management & Cloud Security: Hands-on experience with traditional and cloud-native security tooling such as Tenable (including Tenable Cloud Security / Ermetic), Wazuh, Qualys, or equivalent platforms.
• Container Ecosystems: Hands-on experience with Docker, Kubernetes, and container image scanning.
• Software Development Lifecycle: Experience with GitLab CI/CD pipeline security integration (SAST, DAST, secret detection).
• Microsoft Sentinel administration (log ingestion, KQL query writing, analytics rules) or other SIEM administration experience is preferred.
• Azure certifications (e.g., AZ-500: Azure Security Engineer) are extremely useful for this role.
• Experience with RHEL subscription management, Insights, and patch automation with Ansible is an advantage.
• Having a working knowledge of security frameworks in a live environment (ISO 27001, NIST, or CIS Benchmarks) is an advantage.
• Ownership mindset: You close the loop and solve problems; you don't just flag issues.
• Clear communication: You are comfortable coordinating asynchronously and possess business‑flüent English for both written and verbal collaboration.

Responsabilidades

• Define and maintain security standards for workloads (AKS, GKE) — covering RBAC, network policies, and admission controls.
• Maintain and improve security posture across Azure (Entra ID, Sentinel, Defender for Cloud).
• Contribute to container image scanning and runtime security monitoring.
• Support JFrog Artifactory operations including artifact security and access control.
• Apply and maintain CIS benchmark hardening across all environments company-wide.
• Manage patching across Linux systems, ensuring timely remediation and compliance.
• Support vulnerability management lifecycle: triage, prioritization, and remediation tracking.
• Maintain and improve Microsoft Sentinel log ingestion, analytics rules, and detection coverage.
• Investigate security alerts, triage incidents, and support SOC activities.
• Build and maintain correlation rules, workbooks, and SOAR playbooks.
• Implement and maintain SAST, DAST, dependency scanning, and secrets detection in GitLab CI/CD.
• Automate security operations tasks using Bash and Ansible.
• Contribute to Infrastructure-as-Code security reviews (Terraform, Helm, Kubernetes manifests).
• Support shift-left security practices and developer security enablement.

Conocimientos

Security engineering

Linux fundamentals

Cloud infrastructure

Networking fundamentals

Automation & IAC

Vulnerability management

Container security

CI/CD security

SIEM administration

Azure security

RHEL patching

Security frameworks

Ownership & communication

Herramientas

Docker

Kubernetes

Ansible

Terraform

GitLab CI/CD

Tenable Cloud Security / Ermetic

Wazuh

Qualys

Microsoft Sentinel

Azure AD / Entra ID

Descripción del empleo

Everseen: A leader in vision AI solutions for the world’s leading retailers.

The Role

As a Security Engineer with Everseen’s Security team, you will work closely with Infrastructure and Security teams, build, automate, and operate across a modern cloud, network, and on-premises stack. You'll take direct ownership of hardening our environments and improving detection coverage within a streamlined, collaborative culture.

What you’ll do

Cloud & Container Security

• Define and maintain security standards for various workloads (AKS, GKE) — covering RBAC, network policies, and admission controls
• Maintain and improve security posture across Azure (Entra ID, Sentinel, Defender for Cloud)
• Contribute to container image scanning and runtime security monitoring
• Support JFrog Artifactory operations including artifact security and access control

Infrastructure & Endpoint Security

• Apply and maintain CIS benchmark hardening across all environments company-wide.
• Manage patching across Linux systems, ensuring timely remediation and compliance.
• Support vulnerability management lifecycle: triage, prioritization, and remediation tracking

Detection, Monitoring & Response

• Maintain and improve Microsoft Sentinel log ingestion, analytics rules, and detection coverage.
• Investigate security alerts, triage incidents, and support SOC activities.
• Build and maintain correlation rules, workbooks, and SOAR playbooks.

DevSecOps & Automation

• Implement and maintain SAST, DAST, dependency scanning, and secrets detection in GitLab CI/CD.
• Automate security operations tasks using Bash and Ansible.
• Contribute to Infrastructure-as-Code security reviews (Terraform, Helm, Kubernetes manifests).
• Support shift-left security practices and developer security enablement.

Collaborating With

You will work closely with the Infrastructure and Security teams, operating seamlessly alongside network engineering, DevOps, and development groups. Day-to-day, your collaboration will be highly technical working directly with engineering peers to harden our infrastructure and integrate security tooling into CI/CD pipelines.

Profile and Skills

• 3+ years in a Security Engineer, DevSecOps, or equivalent hands-on role.
• Solid Linux fundamentals: Comfortable navigating, troubleshooting and administering Linux environments strictly via the command line.
• Cloud Infrastructure: Practical experience with at least one major cloud platform (Azure or GCP is strongly preferred).
• Networking fundamentals: Understanding of TCP/IP, DNS, routing, firewall rule logic, and VPN concepts.
• Automation & IAC: Proficient in Bash for scripting, alongside hands‑on experience with configuration management and provisioning tools like Ansible and/or Terraform.
• Vulnerability Management & Cloud Security: Hands‑on experience with traditional and cloud‑native security tooling such as Tenable (including Tenable Cloud Security / Ermetic), Wazuh, Qualys, or equivalent platforms.
• Container Ecosystems: Hands‑on experience with Docker, Kubernetes, and container image scanning.
• Software Development Lifecycle: Experience with GitLab CI/CD pipeline security integration (SAST, DAST, secret detection).
• Microsoft Sentinel administration (log ingestion, KQL query writing, analytics rules) or other SIEM administration experience is preferred.
• Azure certifications (e.g., AZ-500: Azure Security Engineer) are extremely useful for this role.
• Experience with RHEL subscription management, Insights, and patch automation with Ansible is an advantage.
• Having a working knowledge of security frameworks in a live environment (ISO 27001, NIST, or CIS Benchmarks) is an advantage.
• Ownership mindset: You close the loop and solve problems; you don't just flag issues.
• Clear communication: You are comfortable coordinating asynchronously and possess business‑fluent English for both written and verbal collaboration.

About Everseen

Shrink and inefficiency cost global retailers more than a hundred billion dollars each year. But Everseen is changing that equation. We are a leader in vision AI, transforming business operations for global retailers by reducing shrink, improving operations, and delivering a better customer experience.

Supporting 11 of the top 20 global retailers, Everseen’s AI innovations help retailers save millions of dollars every month. Its flagship product, Evercheck, is deployed in 10,000 retail stores and 150,000 checkouts globally. Everseen operates at unmatched scale, processing over 15 million transactions, and more than six petabytes of video data, daily.

Trusted by major food, drug, mass, and specialty retailers around the world - including Kroger, Meijer, and Woolworths - we also partner with leading hardware, AI, and cloud computing providers such as Google, NVIDIA, NCR, and Dell.

Founded in 2007 and headquartered in Cork, Ireland, Everseen has over 700 employees globally, with a European headquarters in Cork, Ireland, a U.S. headquarters in Miami, and hubs in Romania, Serbia, India, Australia, and Spain.

We are a dedicated team of inventors, research scientists, engineers, AI experts and retail industry veterans. Our culture is built on accountability, collaboration, and high standards. We take ownership of outcomes, prioritise our customers, operate as one team, move quickly with purpose, and continually raise the bar in everything we deliver.

Our Culture

Our culture is built on ownership and accountability, we own outcomes, not tasks. We stay relentlessly customer‑first, letting their needs shape our priorities and decisions.

We work as one team: we challenge ideas, align quickly, and commit together. We move with pace, without compromising on simplicity or quality. And every day, we raise the bar, strengthening our talent, pushing innovation forward, and maximizing our impact.

Our Values

We OWN THE OUTCOME. No silos, no excuses.

We ARE CUSTOMER-FIRST. They guide our decisions.

We ARE ONE TEAM. Debate, decide, commit.

We MOVE WITH PACE. With simplicity and quality.

We RAISE THE BAR. On talent, innovation and impact.

Our Commitment

Everseen is committed to creating an environment where everyone can succeed. Our employees should feel a sense of belonging, have an opportunity to grow their careers, and feel free to be their most authentic selves. Everseen takes great pride in the diversity of its global workforce, and insists upon a safe, inclusive workplace where our differences are our collective strength. We treat each other with dignity, and respect, and require all employees, officers, and directors to seek to understand the importance and value to Everseen of diversity, and inclusion.

Everseen is committed to creating a safe environment for all employees and has a zero tolerance policy for bias and discrimination of any kind. Our work environment is one without offensive, hostile, or intimidating conduct, whether verbal, written or physical, in nature. Everseen will not tolerate prejudice or discrimination of any kind including without limitation, where based on aspects such as, race, colour, sex, gender, religion, age, family status, disability of any kind, sexual orientation.