Senior Security Engineer — Cloud & DevSecOps Architect

Supermetrics; Helsinki; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Equity

Home office allowance

Annual personal learning budget

Sports and wellness allowance

Job summary

Supermetrics in Helsinki HQ is seeking a Senior Security Engineer to join our Security team. You will work with product development to embed security best practices across the software development lifecycle and secure our SaaS platform and internal infrastructure.

You will drive security automation in CI/CD, perform threat modeling, reviews, and collaborate across teams to promote a security‑first culture. The role offers autonomy and opportunities to shape our cloud security posture.

Qualifications

• 3+ years of full‑time experience in information security and total at least 5 years of full‑time work experience in software development.
• Expertise in securing cloud infrastructure in AWS, GCP or Azure.
• Basic knowledge of Kubernetes and securing Kubernetes clusters.
• Software development experience, including proficiency in at least one programming language (e.g., Python, Go, PHP) and understanding of secure coding practices.
• Experience of modern CI / CD systems (GitLab / GitHub) and implementing automated security scanning tools (SAST, SCA) as part of pipelines.
• Knowledge of security frameworks and standards such as OWASP ASVS, OWASP SAMM, ISO 27001, and CIS Benchmarks, and applying them to product development.
• Hands‑on experience in configuring SIEMs, threat detection and response tooling and web application firewalls.
• Experience of incident response in cloud environments.
• Relevant technical security certifications (e.g., CISSP, SANS, etc.).

Responsibilities

• Design, implement, and maintain security controls across our SaaS platform and internal infrastructure, automating vulnerability and threat detection (SAST, SCA, IAC, container image analysis) and ensuring robust audit logging via SIEM.
• Do internal reviews, threat modeling and testing of new product features using automated tools and manual code review to identify security issues.
• Collaborate closely with development and operations teams to integrate security into the Software Development Life Cycle (DevSecOps) and promote a security‑first culture.
• Improve our existing security tooling in CI / CD and add new tools, implementing automated threat detection and policy‑as‑code solutions to detect data breaches and insecure configurations.

Skills

Information security

Cloud security

Kubernetes

Programming

CI/CD security

Threat modeling

SAST

SCA

IAM policies

SIEM

Tools

GitLab

GitHub

SIEM tooling

Job description

Supermetrics in Helsinki HQ is seeking a Senior Security Engineer to join our Security team. You will work with product development to embed security best practices across the software development lifecycle and secure our SaaS platform and internal infrastructure.

You will drive security automation in CI/CD, perform threat modeling, reviews, and collaborate across teams to promote a security‑first culture. The role offers autonomy and opportunities to shape our cloud security posture.