Security Engineer III - Security Operations

Primer.io · Remote · United Kingdom · Hungary · Poland · South Africa · Ireland · Romania ·
Fully remoteFull-timeMiddle3–5 years
COMPENSATION
€•• – ••k
0 applicants so far

Listed on the employer's job board (Ashby)

  • Fully remote globally
  • Elastic SIEM + AWS
  • Python + Terraform
  • Incident response focus
  • Competitive share options

Join Primer's security team to protect the unified infrastructure powering global payments. You will own detection capabilities, build automation for faster reaction times, and serve as a first responder for threats across the cloud environment.

The position requires end-to-end management of security incidents, from triage to resolution, while ensuring compliance with standards like SOC 2 and PCI DSS. You will work with a distributed team that values strong remote practices and collaborative problem-solving.

What you'll do

  • Plan and deliver detection and response workflows from rule creation to automated action
  • Build and tune detections in Elastic SIEM and AWS to close coverage gaps
  • Triage, investigate, and resolve security incidents with clear documentation
  • Create runbooks and automations using Python or no-code tools to reduce manual effort
  • Maintain audit-ready controls and contribute evidence for SOC 2 and PCI DSS compliance
  • Use Terraform and Python to manage infrastructure supporting security tooling
  • Participate in on-call rotation for incident monitoring and response

What you'll need

  • Hands-on experience building and tuning detections in a SIEM, preferably Elastic
  • Proficiency with AWS and cloud-native detection and response strategies
  • Comfortable writing Python scripts for automation tasks
  • Experience with Terraform or other infrastructure-as-code tools
  • Working knowledge of the MITRE ATT&CK framework
  • Proven track record in triaging and resolving security incidents
  • Strong structured written communication skills

Nice to have

  • Experience with no-code security automation or SOAR platforms
  • Familiarity with compliance frameworks such as PCI DSS, SOC 2, or ISO 27001
  • Background in fintech, payments, or other regulated industries

Stack

  • Elastic
  • AWS
  • Python
  • Terraform
  • Zapier
  • Tines

How you'll work

  • Fully remote since company inception
  • Globally distributed team
  • On-call rotation for incident response
  • Access to co-working spaces in major cities

What you get

  • Competitive share options
  • Minimum 25 days flexible holiday
  • Annual company retreat and workations
  • £500 home office setup allowance
  • Generous learning budget
  • Private medical insurance
  • Best-in-class equipment provided

Hiring process

  • Initial introduction call with Talent Partner
  • Interview with Hiring Manager
  • Role-contextualized challenge stage
  • Final values-alignment interview