Security Engineer

Lever, Inc.; Cork; On-site; EUR 90,000 - 130,000; Full time

Job summary

Everseen is seeking a Security Engineer to join the Security team. You will own hardening across cloud, on‑prem, and networked environments, and drive detection coverage and automation across the stack.

You’ll work with Infrastructure and Security teams to secure workloads, containers, artifacts, and endpoints, while advancing shift‑left practices and SOC collaboration.

Qualifications

• 3+ years in a Security Engineer, DevSecOps, or equivalent hands-on role.
• Solid Linux fundamentals: navigating, troubleshooting and administering Linux environments via CLI.
• Cloud Infrastructure: practical experience with at least one major cloud platform (Azure or GCP strongly preferred).
• Networking fundamentals: TCP/IP, DNS, routing, firewall logic, VPN concepts.
• Automation & IaC: proficient in Bash, with Ansible and/or Terraform.
• Vulnerability Management & Cloud Security: hands-on with Tenable, Wazuh, Qualys, or similar tools.
• Container Ecosystems: hands-on with Docker, Kubernetes, and image scanning.
• Software Development Lifecycle: experience with GitLab CI.

Responsibilities

• Define and maintain security standards for workloads (AKS, GKE) including RBAC, network policies & admission controls.
• Improve security posture across Azure services like Entra ID, Defender for Cloud, and Sentinel.
• Contribute to container image scanning and runtime security monitoring.
• Support Artifactory operations including artifact security and access control.
• Apply CIS benchmark hardening across environments company-wide.
• Manage patching across Linux systems ensuring timely remediation and compliance.
• Triage, prioritize, and track remediation in vulnerability management lifecycle.
• Maintain and improve Sentinel-based logging, analytics, and detection rules.
• Investigate security alerts, triage incidents, and support SOC activities.
• Build and maintain correlation rules, workbooks, and SOAR playbooks.
• DevSecOps automation: SAST/DAST, dependency scanning, secrets detection in CI/CD.

Skills

Linux CLI

Cloud platforms

Networking

Automation

Bash scripting

Terraform

Kubernetes

Docker

GitLab CI

Vulnerability mgmt

Tools

Tenable

Wazuh

Qualys

Ermetic

Terraform

Helm

Kubernetes

Ansible

Azure Sentinel

Artifactory

Job description

Everseen: A leader in vision AI solutions for the world’s leading retailers.

The Role

As a Security Engineer with Everseen’s Security team, you will work closely with Infrastructure and Security teams, build, automate, and operate across a modern cloud, network, and on-premises stack. You'll take direct ownership of hardening our environments and improving detection coverage within a streamlined, collaborative culture.

What you’ll doCloud & Container Security

• Define and maintain security standards for various workloads (AKS, GKE) — covering RBAC, network policies, and admission controls
• Maintain and improve security posture across Azure (Entra ID, Sentinel, Defender for Cloud)

Contribute to container image scanning and runtime security monitoring

• Contribute to container image scanning and runtime security monitoring

Support JFrog Artifactory operations including artifact security and access control

• Support JFrog Artifactory operations including artifact security and access control

Infrastructure & Endpoint Security

• Apply and maintain CIS benchmark hardening across all environments company-wide.

Manage patching across Linux systems, ensuring timely remediation and compliance.

• Manage patching across Linux systems, ensuring timely remediation and compliance.

Support vulnerability management lifecycle: triage, prioritization, and remediation tracking

• Support vulnerability management lifecycle: triage, prioritization, and remediation tracking

Detection, Monitoring & Response

• Maintain and improve Microsoft Sentinel log ingestion, analytics rules, and detection coverage.

Investigate security alerts, triage incidents, and support SOC activities.

• Investigate security alerts, triage incidents, and support SOC activities.

Build and maintain correlation rules, workbooks, and SOAR playbooks.

• Build and maintain correlation rules, workbooks, and SOAR playbooks.

DevSecOps & Automation

• Implement and maintain SAST, DAST, dependency scanning, and secrets detection in GitLab CI/CD.
• Automate security operations tasks using Bash and Ansible.
• Contribute to Infrastructure-as-Code security reviews (Terraform, Helm, Kubernetes manifests).
• Support shift-left security practices and developer security enablement.

Collaborating With

You will work closely with the Infrastructure and Security teams, operating seamlessly alongside network engineering, DevOps, and development groups. Day-to-day, your collaboration will be highly technical working directly with engineering peers to harden our infrastructure and integrate security tooling into CI/CD pipelines.

Profile and Skills

• 3+ yearsin a Security Engineer, DevSecOps, or equivalent hands-on role.
• Solid Linux fundamentals:Comfortablenavigating, troubleshooting and administering Linux environments strictly via the command line.
• Cloud Infrastructure:Practical experience with at least one major cloud platform (Azureor GCPis strongly preferred).
• Networking fundamentals:Understanding of TCP/IP, DNS,routing,firewall rule logic, and VPN concepts.
• Automation & IAC:Proficient in Bash for scripting, alongside hands-on experience with configuration management and provisioning tools like Ansible and/or Terraform.
• Vulnerability Management & Cloud Security:Hands-on experience with traditional and cloud-native security tools such as Tenable (including Tenable Cloud Security / Ermetic), Wazuh, Qualys, or equivalent platforms.
• Container Ecosystems:Hands on experiencewith Docker, Kubernetes, and container image scanning.
• Software Development Lifecycle:Experience withGitLab CI