{"id":2863158,"url":"https://alion.io/job/unlimit-senior-infrastructure-security-operations-engineer","title":"Senior Infrastructure Security & Operations Engineer","company":{"id":5441,"name":"Unlimit","domain":"unlimit.com","url":"https://alion.io/company/unlimit","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":81,"open_postings":19,"ghost_share":0,"stale_share":0.579,"repost_share":0,"time_to_fill_p50_days":63,"computed_at":"2026-10-25T05:49:26Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Belgrade, Serbia"],"countries":["RS"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":33000,"max_usd":92000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":3299},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Claude","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Cloudflare","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Elastic SIEM","optional":true},{"name":"ElasticSearch","optional":true},{"name":"GitLab","optional":true},{"name":"Rest API","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-19T14:07:10Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-25T03:04:26Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"What You'll Be Doing\nAs a Senior Infrastructure Security & Operations Engineer, you’ll be a hands-on technical expert responsible for strengthening Unlimit’s infrastructure security and operational cyber defence capabilities.\nYou’ll combine security engineering, detection and response, vulnerability management, and cloud security expertise to protect our technology ecosystem against evolving threats.\nA major part of this role will involve transforming traditional security operations through AI-powered and agentic automation. You’ll design and build intelligent security workflows, automate investigations and response activities, and continuously improve the effectiveness and efficiency of our cyber defence capabilities.\nThis role is ideal for an experienced infrastructure or security engineer who combines strong systems engineering fundamentals with practical security operations experience, advanced automation skills, and a passion for building modern, AI-driven security solutions.\nWhat You’ll Do\nOwn and continuously improve infrastructure security controls across Unlimit’s global technology environment.\n\nOperate and enhance internal Security Operations, including security monitoring, alert triage, incident investigation, and response.\n\nDevelop and maintain detection engineering capabilities, including SIEM correlation rules, detection use cases, log analysis, and security monitoring integrations.\n\nConduct proactive threat hunting and leverage cyber threat intelligence to identify emerging threats and improve defensive capabilities.\n\nLead technical incident response activities, including investigation, containment, remediation, and post-incident improvements.\n\nManage infrastructure vulnerability assessment and remediation processes, including vulnerability scanning, prioritisation, tracking, and validation.\n\nImplement and continuously improve infrastructure hardening and security configurations across servers, endpoints, networks, and cloud environments.\n\nDevelop and maintain security controls across AWS, Kubernetes, and containerised environments.\n\nOwn and optimise endpoint protection and detection capabilities, including EDR/XDR technologies.\n\nContribute to network security, directory security, and infrastructure security architecture reviews.\n\nAdminister, integrate, and continuously improve security technologies, including SIEM, EDR/XDR, vulnerability management, and infrastructure security platforms.\n\nCoordinate external penetration testing activities within the infrastructure security scope, validate findings, and support remediation.\n\nProvide technical support for IT and Information Security audits, including evidence collection, technical control validation, and remediation of identified gaps.\n\nCollaborate closely with Infrastructure, DevOps, Engineering, and Application Security teams to implement practical and scalable security improvements.\n\nAI & Agentic Security Automation\nDesign, develop, and maintain AI-powered and agentic security automation as a core part of Cyber Security operations.\n\nBuild autonomous and semi-autonomous workflows for security alert triage, investigation, enrichment, and response.\n\nDevelop AI-assisted detection engineering, threat hunting, and threat intelligence processing capabilities.\n\nAutomate vulnerability analysis, risk-based prioritisation, and remediation workflows.\n\nBuild custom security integrations, automation scripts, and internal security tools using Python, APIs, and modern AI development frameworks.\n\nLeverage LLMs and agentic development tools, including Claude, to improve security operations efficiency and engineering productivity.\n\nEnsure AI-powered security workflows incorporate appropriate validation, access controls, and human oversight for sensitive or high-impact actions.\n\nWhat We’re Looking For\n6+ years of hands-on engineering experience, including at least 4 years in Cyber Security, Infrastructure Security, or Security Operations.\n\nStrong technical background in IT infrastructure, systems engineering, cloud engineering, or platform engineering.\n\nProven experience implementing and maintaining infrastructure security controls in complex production environments.\n\nHands-on experience with Security Operations, SIEM, detection engineering, incident response, and threat hunting.\n\nStrong understanding of modern cyber attack tactics, techniques, and procedures (TTPs), including MITRE ATT&CK.\n\nPractical experience with EDR/XDR, vulnerability management, and security monitoring technologies.\n\nSolid understanding of Linux, networking, operating system security, and infrastructure hardening.\n\nExperience securing AWS environments, Kubernetes clusters, and containerised workloads.\n\nStrong Python development skills and experience building security automation, integrations, and internal tools.\n\nPractical experience developing AI-powered and agentic solutions, including LLM integrations, tool orchestration, autonomous workflows, and AI-assisted automation.\n\nExperience integrating security controls and automation into infrastructure and DevOps workflows.\n\nAbility to independently investigate complex security issues, identify root causes, and implement effective technical solutions.\n\nStrong analytical and problem-solving skills, with an engineering-first approach to security.\n\nAbility to work independently while collaborating effectively with Infrastructure, DevOps, Engineering, and Security teams.\n\nTechnical Experience\nHands-on experience with several of the following technologies is highly desirable:\nSecurity Operations: CrowdStrike, Elastic Security / Elasticsearch, Tenable.\n\nCloud & Infrastructure: AWS, Kubernetes, container technologies, Cloudflare.\n\nEngineering & Automation: Python, Terraform, GitLab, REST APIs.\n\nAI & Agentic Development: Claude, LLM APIs, agentic frameworks, tool integrations, and AI-powered workflow orchestration.\n\nNice to Have\nPrevious experience in fintech, financial services, payments, or large-scale regulated e-commerce environments.\n\nExperience building AI-powered SOC capabilities or autonomous security operations workflows.\n\nExperience developing custom detection rules, security integrations, or open-source security tools.\n\nKnowledge of infrastructure security architecture and secure cloud design.\n\nExperience with offensive security techniques, infrastructure penetration testing, or adversary simulation.\n\nRelevant security, cloud, or engineering certifications.","description_format":"text","description_chars":6448,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Financial Software & Embedded Finance","Security Operations","Currency Exchange & FX Payments"],"lifecycle":[{"event":"open","at":"2026-10-19T16:52:14Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":5,"expected_fill_days":63,"reasons":["conf:2","stale_co","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/unlimit-senior-infrastructure-security-operations-engineer","json_url":"https://alion.io/job/unlimit-senior-infrastructure-security-operations-engineer.json","meta":{"generated_at":"2026-10-25T06:10:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8414,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5441},"rest":"https://alion.io/mcp/rest/get_company?id=5441"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Funlimit-senior-infrastructure-security-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Funlimit-senior-infrastructure-security-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Funlimit-senior-infrastructure-security-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/unlimit-senior-infrastructure-security-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Funlimit-senior-infrastructure-security-operations-engineer"}]}