We are looking for a Security Automation Engineer who will focus primarily on building internal services and automation solutions across security and risk management domains. 

This is a full-time, office-based role (no remote/hybrid) in one of our hubs:

• Belgrade, Serbia
• Warsaw, Poland
• Lisbon, Portugal
• Sofia, Bulgaria

The final location will depend on business needs and the feasibility of relocation from your current spot.

✅ Requirements: 

• Strong hands-on experience with Python (mid-level or higher, able to work independently);
• Proven experience building automation services in security and/or risk management domains;
• Solid experience with Bash / Shell scripting;
• Experience with Git workflows (PRs, CI usage, version control best practices);
• AWS (must-have): IAM (roles, policies, AssumeRole), EC2, S3, Lambda, VPC (networking fundamentals), experience with multi-account environments;
• Infrastructure & Tools: Docker (build, optimization, debugging), Kubernetes, experience integrating security tools;
• Security Knowledge: understanding of IAM misconfigurations, familiarity with OWASP Top 10, basic threat modeling, experience with secrets management (Vault, SOPS, or cloud-native solutions), experience integrating security tools into CI/CD (e.g., Slack, Jira);
• Systems Knowledge: Linux (processes, networking, logs), Windows (AD basics, permissions);
• English level: B2 or higher.

✅ Nice-to-Have:

• Experience with Terraform / Infrastructure as Code (IaC);
• Familiarity with cloud security tools (e.g., Prowler, ScoutSuite);
• Experience with Cloudflare or edge security solutions;
• Experience working with large-scale logging pipelines.

✅ Responsibilities:

• Design, develop, and maintain security automation services using Python;
• Build scalable tools to automate security and risk management processes across multiple departments;
• Conduct technical security audits and identify vulnerabilities and improvement areas;
• Develop integrations with internal systems and third-party security tools;
• Create scripts and services for detecting, preventing, and mitigating security risks;
• Integrate security checks and tooling into CI/CD pipelines;
• Troubleshoot and debug infrastructure, applications, and automation workflows.