{"id":3613628,"url":"https://alion.io/job/toogeza-security-engineer-devsecops","title":"Security Engineer / DevSecOps","company":{"id":7168,"name":"Toogeza","domain":"toogeza.tech","url":"https://alion.io/company/toogeza","size_band":"51-200","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":91,"open_postings":39,"ghost_share":0,"stale_share":0.179,"repost_share":0,"time_to_fill_p50_days":101,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"AI Agents","optional":true},{"name":"Ansible","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Cortex XDR","optional":true},{"name":"GitLab CI","optional":true},{"name":"Google Workspace","optional":true},{"name":"ISO 27001","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"RAG","optional":true},{"name":"Red Teaming","optional":true},{"name":"Terraform","optional":true},{"name":"Wazuh","optional":true}],"status":"live","first_seen_at":"2026-11-02T15:16:56Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-05T15:44:41Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"We are toogeza, a Ukrainian recruiting company that is focused on hiring talents and building teams for tech startups worldwide. People make a difference in the big game, and we may help to find the right ones.\nWe are looking for a Security Engineer / DevSecOps professional to implement and improve security controls across our corporate infrastructure and new digital services, including AI solutions.\nOur environment combines Windows and Linux systems, private and cloud infrastructure, SaaS platforms, and internally developed applications and integrations.\nYou will work closely with the CISO, DevOps, IT Operations, and project teams to identify technical risks, implement safeguards, automate security tasks, and verify that controls work effectively. We value practical engineering skills, independent problem-solving, and experience translating governance requirements into technical implementation.\nReports to: Head of Cybersecurity (CISO)\nRole type: Hands-on individual contributor\nWhat you will do:\nSecurity monitoring and detection\nDevelop and implement a security monitoring roadmap, including requirements, architecture, and integration priorities.\n\nContribute to the selection and evolution of our SIEM/XDR architecture.\n\nIntegrate log sources and maintain reliable, complete, and useful security telemetry.\n\nDevelop and test detection rules, correlation logic, and threat-hunting queries.\n\nSupport incident investigation and improve response procedures.\n\nVulnerability management\nImplement a repeatable process for vulnerability discovery, validation, prioritisation, remediation tracking, and retesting.\n\nAssess exploitability and business impact, considering exposure, asset criticality, and potential attack paths.\n\nDevelop remediation plans with IT and DevOps, track progress, and verify that fixes are effective.\n\nSecure service delivery and hardening\nReview the security of service architectures, configurations, integrations, and CI/CD pipelines.\n\nDevelop technical checklists covering access controls, role models, credentials and secrets, network connectivity, external integrations, encryption, and logging.\n\nImplement and automate secure configuration baselines.\n\nWork with DevOps to assess security readiness before production launches and address identified risks.\n\nPlan and validate security changes with attention to service availability and rollback options.\n\nSecurity automation and AI-assisted engineering\nBuild scripts and integrations for event analysis, configuration checks, vulnerability management, and reporting.\n\nUse AI coding assistants and agent tools to support engineering tasks.\n\nValidate generated code and findings, and protect credentials, access permissions, and corporate data throughout these workflows.\n\nAI security and governance implementation\nDevelop and apply security assessment checklists for corporate LLM services, AI assistants, agents, and their integrations.\n\nAssess access to data and tools, execution isolation, and scenarios that could adversely affect information or systems.\n\nAddress risks such as prompt injection, data leakage, excessive permissions, and authorisation failures.\n\nTranslate agreed AI governance requirements into technical controls and verification steps.\n\nSecurity validation\nConduct authorised tests of attack scenarios and vulnerability exploitability.\n\nVerify whether monitoring and protection tools detect or prevent the tested activity.\n\nUse findings to improve configurations, detection coverage, and response procedures.\n\nWhat we are looking for:\nPractical experience in Security Engineering, DevSecOps, or infrastructure/DevOps roles with substantial responsibility for production security.\n\nAbility to own technical tasks from investigation and planning through implementation and validation.\n\nHands-on SIEM/XDR experience, including log onboarding, queries, detection rules, and alert investigation.\n\nPractical experience with vulnerability management and system or service hardening.\n\nStrong understanding of Linux, Windows Server/Active Directory, networking, authentication, and access controls. Deeper expertise in one environment is welcome, supported by working knowledge of the other.\n\nUnderstanding of cloud, container, API, and CI/CD security, including secrets management.\n\nAbility to review code, Infrastructure as Code, and configurations, and propose actionable improvements.\n\nScripting and automation skills using Python, PowerShell and/or Bash, APIs, and Git.\n\nPractical use of AI tools for engineering tasks, with a disciplined approach to checking their output.\n\nAbility to validate security weaknesses, explain their impact, and work constructively with technical teams on remediation.\n\nEnglish proficiency sufficient for technical documentation and vendor support.\n\nExperience working with governance\nYou should be comfortable translating security policies, risk decisions, and agreed requirements into configurations, technical checklists, and acceptance criteria.\n\nThis includes documenting control gaps, remediation plans, and compensating measures; providing evidence that controls have been implemented and tested; and escalating unresolved risks or exceptions through the agreed process.\n\nThe CISO sets security direction and priorities and coordinates risk decisions with accountable stakeholders. Your role is to provide technical analysis, implementation, and verification.\n\nNice to have:\nExperience with Cortex XDR, Microsoft Sentinel, or Wazuh; familiarity with XQL or KQL.\n\nAWS or Azure security, Terraform, Ansible, and GitLab CI/CD.\n\nPalo Alto, Google Workspace, Microsoft 365/Entra ID, or privileged access management solutions.\n\nExperience implementing or testing AI agents, retrieval-augmented generation (RAG), or corporate LLM services.\n\nPenetration testing, red teaming, adversary emulation, or purple teaming experience.\n\nExperience providing technical evidence for audits or implementing controls within an ISMS/ISO 27001 programme.\n\nExperience building practical security processes in a small team.\n\nHow you will work\nYou will partner with experienced DevOps and IT engineers, explain security issues with clear technical evidence, and help develop workable solutions. Priorities will be agreed with the CISO, with delivery sequenced according to risk and team capacity.\nWe value demonstrated hands-on contribution and the ability to deliver verified improvements. Experience with every technology listed above is not required.\nWhat can we offer you?\nMake a real impact on security. Take ownership of key security engineering initiatives, help shape security practices, and see the direct results of your work across the company’s infrastructure and digital services.\n\nBuild and improve, not just maintain. Get hands-on experience developing security monitoring, vulnerability management, and automation solutions, with the opportunity to influence technical approaches and tooling.\n\nCombine offensive and defensive security. Apply a Purple Team mindset by identifying and validating vulnerabilities, testing detection capabilities, and turning findings into practical security improvements.\n\nExplore AI Security and emerging technologies. Work with AI-powered security tools and contribute to securing new AI services, assistants, and integrations as the company expands its use of AI.\n\nExpand your technical expertise. Gain exposure to diverse environments, including private cloud infrastructure, Linux and Windows systems, cloud platforms, and modern DevOps practices.\n\nWork closely with security leadership. Collaborate directly with the Cybersecurity Lead (CISO) and experienced DevOps and IT engineers, with room for technical initiative, knowledge sharing, and professional growth.\n\nFlexible remote work, with occasional in-person team meetings and collaboration sessions.\n\n€600 learning and development budget to support your professional growth.\n\nFlexible benefits allowance for sports, mental well-being, and leisure activities: €50/month for employees in Ukraine and other European locations, or €150/month for employees in Cyprus.\n\nMedical insurance to support your health and well-being.\n\nCoworking space reimbursement of up to €200/month in Europe.","description_format":"text","description_chars":8205,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Security Operations"],"lifecycle":[{"event":"open","at":"2026-11-02T15:27:29Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":1,"age_days":2,"expected_fill_days":101,"reasons":["conf:0","agency","velocity","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/toogeza-security-engineer-devsecops","json_url":"https://alion.io/job/toogeza-security-engineer-devsecops.json","meta":{"generated_at":"2026-11-05T18:02:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23621,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7168},"rest":"https://alion.io/mcp/rest/get_company?id=7168"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftoogeza-security-engineer-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftoogeza-security-engineer-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftoogeza-security-engineer-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/toogeza-security-engineer-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftoogeza-security-engineer-devsecops"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3613628}},{"tool":"search_jobs","arguments":{"company":"toogeza.tech","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3613628},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}