{"id":2327696,"url":"https://alion.io/job/lhv-security-engineer","title":"Security Engineer","company":{"id":1799805,"name":"LHV","domain":"lhv.ee","url":"https://alion.io/company/lhv-ee","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamdash","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tallinn, Estonia"],"countries":["EE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":50000,"max_usd":117000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1891},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TypeScript","optional":false},{"name":"CIS Benchmarks","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Nessus","optional":true},{"name":"OpenVAS","optional":true},{"name":"Prowler","optional":true},{"name":"Trivy","optional":true}],"status":"live","first_seen_at":"2026-10-05T12:00:00Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-14T00:56:16Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Security Engineer (Cloud & Automation)ABOUT LHV\nWe're building a bank the world actually needs - modern, sharp and genuinely human. We started in Estonia, growing through grit and high standards. Now we're taking on the UK and Europe. The next chapter is about doing the most ambitious work we've ever done, and changing how people experience money.\nWe run on three values: No Bullshit, Agile, and Never Satisfied. They're not wall art. They're how we make decisions, push each other and show up every day.\nWHY THIS ROLE MATTERS\nLHV is in the middle of something big. And this is your chance to be part of it.\nWe’ve migrated our core systems to the cloud, and we’re rapidly integrating AI across our services and software development. But with our rapid growth, and appetite for pushing boundaries, the risk landscape evolves just as fast. That’s where you come in.\nWe aren't looking for a checklist-driven person. We need an engineer at heart who uses automation to multiply our security team's impact. You'll have the autonomy to act as your own project manager, bridging the gap between development, operations, and security. By automating threat controls, simplifying workflows, and utilizing AI-driven security testing, you will ensure our rapid pace remains incredibly secure.\nWHAT YOU'LL DO\nPartner with DevEx to define and continuously improve automated security controls across our development lifecycle (SAST, SCA, DAST), including requirements, rules, coverage, and exception handling, and ensure they actually work in practice.\n\nBuild and automate technical safeguards in our cloud and identity environments (AWS, Kubernetes, Entra ID), analyzing access paths and configuration baselines.\n\nAct as a hands-on security partner for engineering teams right from the design phase: modeling threats for APIs, OAuth2/OIDC, MCP interfaces, AI-agent integrations, and integrations with internal systems.\n\nDevelop and manage our AWS security platform, scaling our logging pipelines, SIEM, and EDR integrations.\n\nAutomate the everyday work of the security team, from alert triage to evidence collection, and smart LLM-driven tooling to eliminate manual work.\n\nTake complete ownership of your projects from identifying technical risks to coordinating with stakeholders and documenting your solutions.\n\nAdapt and grow with the role; we don't believe in rigid boxes, so you'll have the freedom to shape your responsibilities as our technology and challenges evolve.\n\nWHAT WE'RE LOOKING FOR\nA strong engineering background in infrastructure, platform development, or systems-level security, ideally with a minimum of 7 years of experience.\n\nSolid capability to write clean code or scripts in Python, Go, or Bash, alongside comfort with Infrastructure-as-Code and CI/CD pipelines.\n\nHands-on experience with AWS (IAM, networking, logging) and Kubernetes, or a rock-solid background in on-prem systems and virtualization, combined with a clear understanding of cloud-native fundamentals.\n\nA practical grasp of application security, including the OWASP Top 10 and OWASP guidance for LLM applications, authentication flows like OAuth2/OIDC, and the ability to comfortably read code in Java/Spring, Python, or TypeScript.\n\nActive use of LLMs and AI tools in daily workflows, with a realistic understanding of what agentic tools can and shouldn't do.\n\nHigh autonomy and the ability to run tasks like a project manager, proactively finding stakeholders, organizing meetings, and driving initiatives.\n\nA strong commitment to clear documentation, ensuring complex configurations, processes, and security exceptions are easily understood by others.\n\nA broad technical horizon and a desire to move comfortably between attack and defense, development and operations, rather than being boxed into a narrow, rigid role.\n\nYou thrive in an environment where things move quickly.\n\nYou already reside in Estonia as we don't offer relocation for this role.\n\nNice-to-haves:\nExperience with Microsoft Defender, Sentinel, and security scanning tools like Prowler, Trivy, Nessus, or OpenVAS.\n\nAn offensive security mindset, whether from professional pentesting, bug bounties, or CTF experience, or familiarity with security standards like CIS Benchmarks.\n\nProficiency in the Estonian language is preferred.\n\nWHY YOU'LL LOVE IT HERE\nOwn security automation.\n\nWork with ambitious colleagues who rapidly push boundaries.\n\nEnjoy the freedom to experiment and the ownership to build real impact.\n\nWe value mutual respect, direct communication, and colleagues who are excited to solve complex problems.\n\nGrow professionally and personally through meaningful opportunities.\n\nTHE FUTURE WE'RE BUILDING\nBanking has been ugly, slow and impersonal for too long. We're fixing that with design that respects people's intelligence and technology that actually works for them.\nIf that sounds like the kind of problem worth working on, let's talk.\nJOB LOCATION\nTallinn, Tartu\nCONTACT\n","description_format":"text","description_chars":4962,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Estonian","level":"All levels","optional":true}]},"benefits":[],"hiring_locations":[{"name":"Estonia","iso":"EE","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-12T07:58:02Z"}],"visa":[],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.851,"p_room":0.945,"age_days":7,"expected_fill_days":22,"reasons":["conf:0","win:mid"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/lhv-security-engineer","json_url":"https://alion.io/job/lhv-security-engineer.json","meta":{"generated_at":"2026-10-14T01:20:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1989,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1799805},"rest":"https://alion.io/mcp/rest/get_company?id=1799805"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flhv-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flhv-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flhv-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lhv-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flhv-security-engineer"}]}