First Security Engineer: Build Core Security (Hybrid)

Flox; Portugal; Hybrid; EUR 65,000 - 95,000; Full time

Job summary

Flox is seeking a hands-on Security Engineer to stand up security practices from scratch. You will deploy tools, configure controls, and harden infrastructure, working directly with engineering leadership.

This role focuses on doing—deploying, testing, and tightening controls to protect a product central to the software supply chain. You’ll influence security roadmaps, balance pragmatic controls, and own incident response, IAM, and CI/CD security.

Qualifications

• 3–5 years hands-on security engineering experience.
• Proven track record implementing security tools and controls.
• Solid working knowledge of AWS security services: IAM, SCPs, GuardDuty, Security Hub, CloudTrail.
• Hands-on experience with Cloudflare - WAF rule management, Zero Trust, DLP, or similar.
• Experience deploying and managing endpoint protection (EDR/MDM).
• Familiarity with SBOMs, dependency management, artifact signing, and SLSA concepts.
• Experience integrating SAST, SCA, or DAST tools into CI/CD pipelines.
• Comfort with scripting (Python, Bash) to build repeatable processes.

Responsibilities

• Deploy and configure security tools and controls.
• Hardens infrastructure and closes security gaps.
• Own SIEM/incident response path or SOC vendor relations.
• Manage Cloudflare configuration and CI/CD security checks.
• Oversee endpoint protection deployment across dev and production systems.
• Secure software supply chain and release pipelines.

Skills

Security engineering

Security tooling implementation

AWS security services

Cloudflare experience

EDR/MDM

SBOMs / dependency management

SLSA / supply chain concepts

SAST / SCA / DAST in CI/CD

Scripting (Python, Bash)

Independent work / prioritization

Nix / reproducible builds

SOC / SIEM familiarity

Security certifications

Education

Bachelor’s degree in a relevant field

Tools

Cloudflare

SIEM

EDR / MDM

Checkov

tfsec

Semgrep

Snyk

GitHub Advanced Security

Job description

Flox is seeking a hands-on Security Engineer to stand up security practices from scratch. You will deploy tools, configure controls, and harden infrastructure, working directly with engineering leadership.

This role focuses on doing—deploying, testing, and tightening controls to protect a product central to the software supply chain. You’ll influence security roadmaps, balance pragmatic controls, and own incident response, IAM, and CI/CD security.