Senior Security Engineer (Remote) - SIEM & Cloud Threats

Jobgether; Veneto; Remote; EUR 70,000 - 95,000; Full time

Benefits offered by this job

Remote work

Equity

Flexible holidays

Coworking access

Team events

Equipment provided

Home office stipend

Learning budget

Private health insurance

Onboarding program

Job summary

Jobgether is seeking a Security Engineer III - Security Operations based in Italy to join a globally distributed engineering team protecting critical cloud infrastructure and payments platforms.

You will own detection and response capabilities, build and tune SIEM detections across Elastic SIEM and AWS, automate responses with Python and no-code tools, and drive incident investigations with rigorous documentation and collaboration.

Qualifications

• Hands-on experience building, maintaining, and tuning SIEM detections in Elastic or similar platforms.
• Practical AWS security experience and cloud-native detection/response capabilities.
• Proficient in Python for scripting, automation, and security tooling.
• Experience with Terraform; knowledge of MITRE ATT&CK and incident investigations.
• Strong written communication to document investigations and risk decisions.

Responsibilities

• Plan and deliver end-to-end detection and response initiatives with automated workflows.
• Build and tune detections across Elastic SIEM and AWS, closing coverage gaps.
• Triages alerts, investigates incidents, escalates when needed, drives issues to resolution.
• Document investigations and findings for knowledge sharing and audit trails.
• Develop runbooks and automation with Python and no-code tools to speed response.
• Support compliance by maintaining audit-ready controls for SOC 2 and PCI DSS.
• Contribute to on-call rotation for security monitoring and incident response.

Skills

SIEM detections

Elastic

AWS

Python

Terraform

MITRE ATT&CK

Incident investigation

Documentation

On-call readiness

Tools

Zapier

Tines

Job description

Jobgether is seeking a Security Engineer III - Security Operations based in Italy to join a globally distributed engineering team protecting critical cloud infrastructure and payments platforms.

You will own detection and response capabilities, build and tune SIEM detections across Elastic SIEM and AWS, automate responses with Python and no-code tools, and drive incident investigations with rigorous documentation and collaboration.