{"id":3523134,"url":"https://alion.io/job/semaphore-security-engineer-2","title":"Security Engineer","company":{"id":55851,"name":"Semaphore","domain":"semaphore.io","url":"https://alion.io/company/semaphore","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Serbia"],"countries":["RS"],"hiring_countries":["RS"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"CI/CD","optional":true},{"name":"Teleport","optional":true},{"name":"Wazuh","optional":true}],"status":"live","first_seen_at":"2026-10-30T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-30T00:00:00Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"About Semaphore\nSemaphore is a remote-first software company helping engineering teams build, test, and deliver software with confidence. Our customers rely on Semaphore Cloud and our self-hosted enterprise products to run critical development workflows securely and reliably.\n\nWe maintain SOC 2 Type 2 and ISO 27001:2022 compliance and are hiring a Security Engineer to own the technical side of our security program.\n\nAbout the role\nYou will be the technical owner of information security across our infrastructure and internal systems. You will work closely with Engineering, Infrastructure, and our Compliance Manager to turn security and compliance requirements into practical, reliable controls.\n\nThis is a hands-on role. You will investigate vulnerabilities, operate security monitoring, improve infrastructure and access controls, automate recurring work, and lead technical remediation.\n\nOur Compliance Manager owns the ISMS, policies, audit coordination, and legal or regulatory interpretation; you will own the implementation, operation, and testing of the technical controls behind them.\n\nWe care more about demonstrated ownership and sound judgment than a specific number of years or a previous job title.\n\nWhat you will own\n\nRun the vulnerability-management lifecycle: scanning, triage, prioritization, remediation, exceptions, and verification.\n\nOperate and improve security monitoring and SIEM tooling, including alert quality, dashboards, detection rules, and integrations.\n\nInvestigate security alerts and lead the technical response to security incidents.\n\nImprove the security of Linux hosts, cloud infrastructure, networks, firewalls, containers, and internal services.\n\nOwn technical controls for identity and access management, least privilege, just-in-time access, secrets, and certificates.\n\nAutomate patching, evidence collection, recurring control checks, and other security operations.\n\nCoordinate penetration tests and drive technical findings through remediation and verification.\n\nTranslate SOC 2 and ISO 27001 control requirements into effective technical implementations.\n\nProduce clear technical evidence for internal and external audits in partnership with the Compliance Manager.\n\nMaintain security runbooks, system documentation, risk-based priorities, and operational metrics.\n\nHelp engineering teams make practical security decisions without adding unnecessary process.\n\nReference: h9H8_bFC5mcFUHoKPe6eaUYYMFK98Bci_djl7SWfXjPO7LulzzCaD_ThvSSvVFn0\n\nWhat we are looking for\n\nProven ownership of technical security in a production SaaS, cloud, hosting, or infrastructure environment.\n\nStrong Linux systems, networking, and cloud-security fundamentals.\n\nHands-on experience with vulnerability management, patching, hardening, and remediation at scale.\n\nExperience operating SIEM or security-monitoring systems and investigating security events.\n\nPractical understanding of IAM, privileged access, secrets management, certificates, and network controls.\n\nAbility to automate operational work using Python, Bash, infrastructure-as-code, or similar tools.\n\nExperience participating in incident response and communicating clearly during high-pressure situations.\n\nWorking knowledge of ISO 27001, SOC 2, or similar security-control frameworks.\n\nStrong written and spoken English and comfort working independently in a remote, asynchronous team.\n\nGood risk judgment: the ability to distinguish urgent security problems, acceptable exceptions, and low-value processes.\n\nNice to have\n\nExperience with Wazuh or a comparable SIEM/security-monitoring platform.\n\nExperience with Teleport, PAM, or just-in-time access systems.\n\nExperience securing large Linux server fleets or hybrid cloud/on-premise environments.\n\nFamiliarity with CI/CD systems, build infrastructure, containers, and software supply-chain security.\n\nExperience supporting SOC 2 or ISO 27001 audits from the technical-control side.\n\nRelevant certifications such as Security+, CISSP, CISM, GIAC, or ISO 27001, although certification is not required.\n\nWhat success looks like\n\nWithin your first six months:\n\nTechnical security operations have a clear owner, documented priorities, and reliable response expectations.\n\nVulnerability findings are consistently triaged, remediated, or explicitly accepted based on risk.\n\nSecurity monitoring is stable, actionable, and connected to an effective incident-response process.\n\nRecurring patching, access-control, and evidence-collection work is increasingly automated.\n\nEngineering and Infrastructure teams receive clear, practical guidance and security issues reach closure.\n\nTechnical controls and audit evidence are reliable enough that compliance work does not depend on senior engineers doing manual follow-up.\n\nHow you will work\nYou will work closely with the Engineering and Infrastructure teams and partner with the Compliance Manager. The Compliance Manager owns governance, policies, the ISMS, audit coordination, and regulatory interpretation. You own the design, implementation, operation, testing, and remediation of technical security controls.\n\nThis role is an individual-contributor position with broad ownership and direct influence on how Semaphore protects its systems, customers, and company data.","description_format":"text","description_chars":5247,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Serbia","iso":"RS","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevOps & Platform Engineering","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-30T12:57:31Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":5,"expected_fill_days":27,"reasons":["seen:5","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/semaphore-security-engineer-2","json_url":"https://alion.io/job/semaphore-security-engineer-2.json","meta":{"generated_at":"2026-11-04T21:14:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32898,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":55851},"rest":"https://alion.io/mcp/rest/get_company?id=55851"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsemaphore-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsemaphore-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsemaphore-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/semaphore-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsemaphore-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3523134}},{"tool":"search_jobs","arguments":{"company":"semaphore.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3523134},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}