{"id":516655,"url":"https://alion.io/job/primer-security-engineer-iii-security-operations","title":"Security Engineer III - Detection & Response","company":{"id":172390,"name":"Primer","domain":"primer.io","url":"https://alion.io/company/primer-3","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":90,"open_postings":5,"ghost_share":0,"stale_share":0.4,"repost_share":0,"time_to_fill_p50_days":50,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["GB","HU","IE","PL","RO","ZA"],"hiring_countries_total":6,"salary":null,"salary_estimate":{"min_usd":51000,"max_usd":124000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"Tines","optional":false},{"name":"Zapier","optional":false},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-09-07T15:53:03Z","employer_posted_date":"2026-09-07","last_verified_at":"2026-10-26T23:21:48Z","board_verified":true,"closed_at":null,"days_open":49,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":49},"description":"An Introduction to Primer\nPrimer is the unified infrastructure for global payments. We give finance and payments teams the visibility and control to reduce complexity, improve performance, and capture more revenue - all from a single platform.\nBacked by Sofina, Peak XV Partners, ICONIQ, Tencent, Accel, and Balderton, we're building the payments layer the world's best companies rely on.\nWatch our showcase >\nRead up on our $100m Series C\nLearn more about our culture >\nPrimer is looking for a Security Engineer to help us detect, investigate, and respond to threats across our cloud infrastructure. You'll take ownership of a meaningful slice of our detection and response capability - tuning what our SIEM catches, building the automation that speeds up how we react, and being a first responder when something looks wrong.\nWhat you'll be doing\nPlan and deliver detection and response work end-to-end - from a new detection rule to a fully automated response - within your area of ownership.\n\nBuild, tune and maintain detections across our SIEM (Elastic) and AWS environment, closing gaps that existing coverage misses.\n\nOwn an investigation queue: triage, investigate, escalate and resolve security incidents, and write up findings clearly enough to stand on their own.\n\nBuild runbooks and automations (Python, and no-code tools like Zapier or Tines) to cut manual work out of triage and response.\n\nMake and document risk decisions in your area, and know when to pull in others.\n\nSupport our compliance programme by keeping the controls you own audit-ready and contributing evidence for audits (e.g. SOC 2, PCI DSS).\n\nUse Terraform and Python to build and maintain the infrastructure behind your detections and tooling.\n\nJoin our on-call rotation for incident response and monitoring.\n\nWhat we're looking for\nHands-on experience building and tuning detections in a SIEM (Elastic preferred; Splunk, Sentinel or similar also welcome)\n\nExperience with AWS and cloud-native detection and response\n\nComfortable with Python for scripting and automation\n\nExperience with Terraform or other infrastructure-as-code\n\nWorking knowledge of MITRE ATT&CK\n\nReal experience triaging, investigating and resolving security incidents\n\nClear, structured written communication\n\nNice to have\nExperience with no-code security automation / SOAR-style tooling\n\nExposure to compliance frameworks like PCI DSS, SOC 2 or ISO 27001\n\nBackground in fintech, payments or another regulated industry\n\nA typical interview process\nAn initial intro call with a Talent Partner\n\nAn interview with the Hiring Manager\n\nChallenge Stage - Contextualised to the role\n\nA final, values-alignment interview\n\nWhat's the culture like at Primer?\nWe're building a culture where people can do their best work and be proud of the impact they have. You'll be working with people who are mission-driven, smart, and reflective, and who are genuinely invested in building exceptional products and delivering success for our merchants.\nWe work remotely, and have done since day one. We believe that building a successful, profitable company goes beyond proximity. We invest in our relationships through great remote working practices and thoughtfully designed face-to-face time, including workations, our annual company retreat, and access to co-working spaces across most major cities.\nThe work is challenging. Scaleups are a challenge, and building category-defining products is a challenge. But there's a meaningful difference between a challenge and a struggle. At Primer, the right challenge comes with the right support: strong onboarding, a collaborative environment, and a team that is genuinely invested in your success. It's never something you face alone.\nOur benefits\nWe are fully remote and globally distributed; and have been since day one\nCompetitive share options\nFlexible holiday, with 25 days minimum to be taken\nCo-working space access across major cities\nWorkations & Company Retreat\nThe best equipment for your role\n£500 towards your home office setup\nGenerous learning budget\nPrivate Medical Insurance\nA broad set of additional perks and benefits (depending on location)\nDon’t meet every single requirement?\nAt Primer, we're dedicated to building a diverse, inclusive, and authentic workplace. If you're excited about this role but your experience doesn't align perfectly with every qualification listed, we encourage you to apply. You may be the right candidate for this or other roles.\nPrimer is committed to the equal treatment of all current and prospective employees and adopts a zero-tolerance approach to discrimination, regardless of age, disability, sex, sexual orientation, pregnancy and maternity, race or ethnicity, religion or belief, gender identity, marriage and civil partnership, or any other background or belief.","description_format":"text","description_chars":4799,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance","Home office","Stock options"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"Hungary","iso":"HU","kind":"country"},{"name":"Ireland","iso":"IE","kind":"country"},{"name":"Poland","iso":"PL","kind":"country"},{"name":"Romania","iso":"RO","kind":"country"},{"name":"South Africa","iso":"ZA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-09-07T20:04:53Z"}],"visa":[],"liveness":{"score":42,"band":"fade","label":"Fading","p_open":1,"p_active":0.561,"p_room":0.75,"age_days":48,"expected_fill_days":50,"reasons":["conf:1","velocity","win:late"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/primer-security-engineer-iii-security-operations","json_url":"https://alion.io/job/primer-security-engineer-iii-security-operations.json","meta":{"generated_at":"2026-10-27T00:04:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":85,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":172390},"rest":"https://alion.io/mcp/rest/get_company?id=172390"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fprimer-security-engineer-iii-security-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fprimer-security-engineer-iii-security-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fprimer-security-engineer-iii-security-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/primer-security-engineer-iii-security-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fprimer-security-engineer-iii-security-operations"}]}