Security Engineer – Security Operations

Regnology; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Удаленная работа

Гибкий рабочий график

Работа над международными проектами

Программа сопровождения (buddy)

Job summary

Regnology ищет специалиста по кибербезопасности, который будет работать над защитой инфраструктуры, облачных сервисов и данных в глобальной команде. В задачи входит сопровождение жизненного цикла уязвимостей, аудит и развитие AI‑регуляторной рамки, а также интеграция инструментов и автоматизации для повышения уровня защиты.

Кандидат должен обладать фундаментальными знаниями в области безопасности, иметь бакалавра в CS/IT security и владеть английским на уровне, необходимом для сотрудничества в

Qualifications

• Страсть к вопросам безопасности, инфраструктуры и технологий.
• Диплом бакалавра в области CS/IT security или эквивалент.
• Опыт или явная заинтересованность в вопросах AI security, облачной и инфраструктурной безопасности.

Responsibilities

• Участвовать в triage уязвимостей в облаке и локациях инфраструктуры.
• Поддерживать учёт активов (облачные ресурсы, конечные узлы, identidade, SaaS, AI-инструменты).
• Мониторинг DLP‑оповещений и политик, разбор классификации чувствительных данных.

Skills

Безопасность инфраструктуры

Свободный английский

Командная работа

Education

Бакалавр в CS/IT security

Tools

SIEM

EDR

Kubernetes

Google Cloud

Azure

AWS

Job description

Описание:

At Regnology our greatest asset is our people. We value diversity and foster an inclusive environment that supports learning, safety, and growth. By investing in our team, listening to customers, and encouraging creativity, we drive continuous innovation and improvement. We offer a flexible, innovative environment where your ideas matter and your career can thrive. Regnology is a global leader in regulatory reporting, helping financial institutions, regulators, and tax authorities improve data quality, efficiency, and cost savings. Our mission: to safeguard financial markets through smarter, future-ready solutions.

Задачи:

• Be a Defender: Work alongside senior engineers to triage vulnerability findings across our cloud infrastructure, endpoints, and workloads, and track their remediation with the responsible teams.
• Know What We Protect: Help maintain an accurate inventory of our assets (cloud resources, endpoints, identities, SaaS applications, and AI tools) and spot gaps in security tool coverage.
• Protect Our Data: Support the monitoring of data loss prevention (DLP) alerts and policies, and learn how sensitive data is classified and handled across the company.
• Secure AI Adoption: Help us develop and implement our AI governance strategy and framework, and review AI tools and integrations against our security and data-protection requirements.
• Explore and Grow: Get familiar with our security tooling landscape, including SIEM, EDR, cloud security posture management, and AI-driven solutions.
• Defend: Drive the vulnerability management lifecycle from detection and prioritisation to remediation and reporting.
• Take part in incident response and coordinate penetration tests.
• Harden Our Infrastructure: Help secure our cloud and container platforms (e.g., Google Cloud, Kubernetes) through secure configuration baselines, IAM reviews, network security, and infrastructure as code.
• Govern AI Responsibly: Help evolve our AI Security Monitoring framework and AI Agentic Security Management into concrete processes and controls, assessing risks such as prompt injection, data leakage, and model or agent misuse.
• Automate and Innovate: Build detection rules, automated workflows, and internal tooling—including AI agents to cut manual effort and improve our security posture.
• Collaborate and Drive the Security Mindset: Work closely with Infrastructure, IT, Application Security, and Compliance teams, help prepare for audits (e.g., ISO 42001, ISO 27001, SOC 2), and take part in security awareness initiatives.

Требования:

• A true passion for security, infrastructure, and technology.
• Successfully completed bachelor's degree or higher in Computer Science, IT Security, or a related field.
• First experience or a strong, demonstrable interest in one or more of the following:
• a) AI Security and Governance (e.g., OWASP Top 10 for LLM Applications, NIST AI RMF, EU AI Act)
• b) Cloud and Infrastructure Security (e.g., Google Cloud, Azure, AWS, Kubernetes, IAM, networking)
• c) Data Loss Prevention and Data Classification (e.g., Microsoft Purview, Google Cloud DLP)
• d) Asset Management and Attack Surface Management
• e) Vulnerability Management and vulnerability scanners
• f) Security Monitoring and Detection (e.g., SIEM, EDR such as Microsoft Defender for Endpoint)
• g) Scripting and Automation (e.g., Python, Bash, PowerShell) and Infrastructure as Code (e.g., Terraform)
• Mindset: Hands-on mentality, innovative way of thinking, and attention to detail.
• Communication & Collaboration: A proactive, communicative personality who can build strong relationships with internal teams across regions.
• Fluent in English.

Benefits and Culture:

• We promote remote working and flexible working hours to create a positive work-life balance.
• We provide you with the opportunity to take on responsibility and participate in international projects.
• In addition to our buddy-program, we offer numerous individual and wide-ranging training opportunities during which you can explore technical and functional areas.
• We are proud of our positive working atmosphere characterized by a supportive team across various locations and countries and transparent communication across all levels.
• Together we’re better - meet your colleagues at our numerous team events.

ID:

IT_2026_16