{"id":761511,"url":"https://alion.io/job/swarmer-cybersecurity-engineer-detection-response","title":"Cybersecurity Engineer (Detection & Response)","company":{"id":687566,"name":"Swarmer","domain":"swarmer.com","url":"https://alion.io/company/swarmer-2","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kyiv, Ukraine","Lviv, Ukraine"],"countries":["UA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":48000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-11T08:24:55Z","employer_posted_date":"2026-09-11","last_verified_at":"2026-10-28T15:39:00Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":47},"description":"Why we exist:\nSwarmer develops software that makes drones autonomous and allows them to operate together, in large, coordinated teams - no pilots needed. Our technology has been battle-tested in Ukraine- the world’s most intense proving ground for drone warfare.\nIn March 2026, we became the first Ukrainian defense startup to go public on NASDAQ, following a $15M Series A - the largest investment in a Ukrainian defense tech company since the start of the war.\nWorking at Swarmer means operating at the intersection of engineering rigor and frontline reality. The problems and environments are complex, and the stakes are very real. We built this software to enable democratic nations to defend themselves.\nIf you are motivated by building resilient systems that matter and by seeing the direct impact of your work, you’ll find purpose here.\nWhat we’re looking for:\nWe're looking for an experienced Cybersecurity Engineer to join our team. You'll be responsible for defending our endpoints, identities, SaaS stack, networks, and cloud environment against the people actively trying to breach them. Product security lives with a separate team, so your focus stays sharp: keep the corporate perimeter tight.\nThis is a builder's role, not a maintainer's. You'll stand up and run our detection stack (SIEM/SOAR, EDR), lock down and manage the device fleet (MDM, hardening), and design identity controls built on ZeroTrust principles (SSO, MFA, ZTNA).\nYou won't be handed a mature security program to babysit. You'll design it, implement it, and operate it, with recognized frameworks as your guardrails and real-world attack patterns as your test cases.\nWhat you’ll do:\nOwn and continuously improve our SIEM/SOAR capabilities, including log source onboarding, detection rules and correlation logic, alert tuning, dashboards, automated response workflows, and integration across the security stack\n\nMonitor and analyze security events and logs to catch anomalies and potential threats; investigate, contain, and remediate incidents, documenting timelines, root causes, and lessons learned\n\nDeploy and manage endpoint and server protection across the fleet (EDR/NGAV, MDM), including policy enforcement, compliance configuration, and hardening baselines (encryption, security policies, benchmarks)\n\nImplement and operate identity and Zero Trust access controls, including SSO, MFA, conditional access, ZTNA, device posture checks, RBAC, least privilege, privileged access management, and periodic access reviews\n\nManage vulnerabilities across endpoints, servers, and cloud, with risk-based prioritization and remediation tracking\n\nMonitor cloud and SaaS security posture, remediate misconfigurations, and review third-party integrations and access scopes\n\nReview infrastructure projects and architecture from a security lens, ensuring secure-by-default configurations\n\nDocument technical security controls (runbooks, hardening guides) and support internal and external audits\n\nWhat we need:\n4+ years of hands-on experience in cybersecurity or IT infrastructure engineering, with a clear specialization in security\n\nHands-on experience with SIEM/SOAR platforms, covering log source integration, detection engineering, alert investigation, and security automation\n\nHands-on experience with EDR/NGAV platforms, covering endpoint policy management, detection, investigation, and response\n\nExperience hardening and managing endpoints across Windows, macOS, and Linux, including MDM platforms\n\nExperience with identity and Zero Trust access technologies, including SSO, MFA, conditional access, device posture, and ZTNA\n\nSolid grasp of networking fundamentals (TCP/IP, DNS, DHCP, VPN), with practical experience configuring firewalls and other network security controls\n\nWorking knowledge of common attack techniques and how to detect and prevent them\n\nPractical familiarity with recognized security frameworks and standards (e.g., CIS, NIST, MITRE ATT&CK)\n\nStrong risk-assessment instincts, with the ability to prioritize pragmatically and explain technical issues clearly to non-technical colleagues\n\nEnglish proficiency, for documentation, vendors, and external partners\n\n Would be an advantage:\nScripting ability for automating security and infrastructure tasks (Python, Bash, PowerShell, or SOAR playbooks)\n\nExperience with vulnerability management platforms\n\nWorking knowledge of cloud and SaaS security controls (e.g., CSPM/SSPM)\n\nRelevant security certifications\n\nExperience working in enterprise or critical-infrastructure environments\n\nWhat you’ll get:\nProfessional growth through working with cutting-edge defense technologies and exposure to international security best practices.\n\nDirect impact: your work protects systems that operate in real, high-stakes environments.\n\nA fast-paced environment with minimal bureaucracy and no “process for the sake of process”.\n\nCompetitive salary and a comprehensive benefits package (insurance, paid sick leave, 20 paid days off per year).\n\nBenefits of the defense sector (e.g., reservation, etc.).\n\nFlexible remote work options where possible.\n\nHow’s the hiring process going:\nRecruiter Screen → Technical Interview → Final Interview → Security check → Offer\n Ready to Apply?","description_format":"text","description_chars":5217,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Ukraine","iso":"UA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Military Drones","Drone AI"],"lifecycle":[{"event":"open","at":"2026-09-11T18:41:29Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.576,"p_room":0.45,"age_days":46,"expected_fill_days":30,"reasons":["conf:4","win:tail"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/swarmer-cybersecurity-engineer-detection-response","json_url":"https://alion.io/job/swarmer-cybersecurity-engineer-detection-response.json","meta":{"generated_at":"2026-10-28T18:40:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25466,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":687566},"rest":"https://alion.io/mcp/rest/get_company?id=687566"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fswarmer-cybersecurity-engineer-detection-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fswarmer-cybersecurity-engineer-detection-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fswarmer-cybersecurity-engineer-detection-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/swarmer-cybersecurity-engineer-detection-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fswarmer-cybersecurity-engineer-detection-response"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":761511}},{"tool":"search_jobs","arguments":{"company":"swarmer.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":761511},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}