Datadog SIEM · CrowdStrike · Cloudflare · Google Workspace · Kubernetes
WHAT YOU'LL DO
- Build and improve SIEM detection rules, alert pipelines, and automated response playbooks (Datadog SIEM, CrowdStrike, Cloudflare)
- Contribute to incident response readiness, including IR playbooks, tabletop exercises, and forensic procedures
- Support DLP strategy and data protection controls across Google Workspace, Slack, and internal tooling
- Conduct cloud security assessments across AWS and Kubernetes environments
- Drive application security initiatives: threat modelling, secure code review support, API testing, and security pipeline improvements
- Assess and secure AI/agentic workflows across the company — reviewing prompts, preventing destructive actions, and controlling data exposure
- Establish and run the vendor security assessment process — building a scalable due diligence framework for third-party onboarding
WHAT YOU'LL NEED
- 4–7 years in cyber security, ideally having built or significantly shaped the security function at a startup or high-growth company - you've been the person who sets things up, not just maintains them
- 2+ years at a regulated fintech/bank/payment company
- Hands-on experience with cloud infrastructure security (AWS, Kubernetes)
- Working knowledge of SIEM platforms and detection engineering - you've written detection rules, not just consumed alerts
- Familiarity with application security practices: threat modelling, secure code review, CI/CD pipeline hardening, and API security testing
- Experience with endpoint security tooling (EDR/XDR) and identity & access management in a SaaS-heavy e