logo[мetahunt]
> DOU
lead

Security Engineer

Osavul
format:Remotecompany:Startup
siemedrmdmiso 27001soc 2nistcloud securitymfaincident responsevulnerability managementfirewallsinformation security
englishB2
experience5+ years
domainCyberSec
> full description

Are you passionate about safeguarding countries, societies, and businesses from hybrid threats?

Look no further! Our rapidly scaling company is committed to this crucial mission, collaborating with some of the world’s most influential organizations, including NATO and the EU.

If you’re ready to join a high-impact team shaping the future of intelligence and security, we invite you to become part of our journey. Join us and help defend the digital world with purpose and innovation!

Role Overview

As our Founding Information Security Lead, you’ll be our first and only security hire, owning information security at Osavul end-to-end and reporting directly to the CEO.

We’re starting almost from scratch. You’ll audit where we stand, decide what we need and in what order, and then build it yourself. You’ll be the strategist and the operator at once: writing policies, configuring tools, monitoring, and teaching the team good security habits.

This role suits a hands-on security professional who has already taken on some leadership and wants to build a security function from the ground up.

Key Responsibilities

  • Audit our current security posture and define the security strategy and roadmap.
  • Own Osavul’s information security end-to-end, and make the key decisions on what we implement and when.
  • Lead our security certification work (ISO 27001, SOC 2, etc.)
  • Roll out company-wide security practices such as MFA, access control and a password manager, and make sure the team actually uses them.
  • Set up and manage company devices (MDM), including firewall, application restrictions, and automatic updates.
  • Set up and run security tooling such as SIEM, and lead incident detection, response, and analysis.
  • Write, maintain, and enforce security policies and procedures.
  • Run risk assessments and vulnerability management across our infrastructure, product, and remote team.
  • Detect and stop threats early, from phishing and social engineering to more complex attempts such as corporate espionage.
  • Run security awareness training for the team.
  • Work closely with engineering and infrastructure to build security into how we develop and run our product.

Requirements

  • 5+ years of hands-on experience in information security, security operations, security engineering, or system administration with a strong security focus.
  • Leadership experience, such as leading a security initiative, project, or small team, while still doing the hands-on work yourself.
  • Experience in incident response and incident analysis.
  • Hands-on experience with security tooling such as SIEM, EDR, or MDM.
  • Working knowledge of security frameworks such as ISO 27001, SOC 2, or NIST.
  • Experience securing cloud infrastructure and distributed remote teams.
  • Experience running security awareness training.
  • High level of independence and ownership.
  • Ability to both define security strategy and implement it yourself.
  • Upper-Intermediate English or higher.

Nice to Have

  • Interest in multi-domain security, where cyber, information, and physical security are handled together.
  • Background in intelligence, military, or law enforcement before moving into cybersecurity.
  • Understanding of counterintelligence and influence operations.
  • Interest in using Osavul’s products in your own work and helping us improve them.

We Offer

  • Opportunity to contribute to a mission-driven startup and support prestigious clients, including governments worldwide, enterprise clients, and leading NGOs in tackling global security challenges.
  • Autonomy and freedom to drive experiments and bring your own ideas to life.
  • Flexibility of fully remote work.
  • Flexible, unlimited time-off policy.


*If your skills and experience are a strong fit for this opportunity, a member of our team will reach out to guide you through the next steps.

Given the large number of applications we process, we are unfortunately unable to provide individual updates to every applicant. If you don’t hear back from us, please consider that your application was not selected for this role.

We truly appreciate your time and interest in applying to join our team!

Відгукнутись на вакансію