infrastructure security and operations engineer in fintech

Unlimit is a global fintech ecosystem that provides payment processing, multi-currency business accounts, BaaS, and crypto gateways through a single platform. It is transforming its infrastructure into AI-native financial infrastructure for businesses and AI agents.

• Strengthen and continuously improve infrastructure security controls across the global technology environment
• Operate and enhance Security Operations, including monitoring, alert triage, incident investigation, and response
• Develop and maintain detection engineering capabilities, SIEM correlation rules, detection use cases, log analysis, and security monitoring integrations
• Conduct threat hunting and use cyber threat intelligence to identify emerging threats and improve defenses
• Lead technical incident response, including investigation, containment, remediation, and post-incident improvements
• Manage infrastructure vulnerability assessment and remediation, including scanning, prioritization, tracking, and validation
• Implement and improve security hardening and configurations across servers, endpoints, networks, and cloud environments
• Develop and maintain security controls across AWS, Kubernetes, and containerized environments
• Own and optimize endpoint protection and detection capabilities, including EDR/XDR
• Contribute to network security, directory security, and infrastructure security architecture reviews
• Administer, integrate, and improve SIEM, EDR/XDR, vulnerability management, and infrastructure security platforms
• Coordinate external penetration testing within the infrastructure security scope, validate findings, and support remediation
• Support IT and Information Security audits through evidence collection, technical control validation, and remediation of identified gaps
• Collaborate with Infrastructure, DevOps, Engineering, and Application Security teams on practical, scalable security improvements
• Design, develop, and maintain AI-powered and agentic security automation for Cyber Security operations
• Build autonomous and semi-autonomous workflows for alert triage, investigation, enrichment, and response
• Develop AI-assisted detection engineering, threat hunting, and threat intelligence processing
• Automate vulnerability analysis, risk-based prioritization, and remediation workflows
• Build security integrations, automation scripts, and internal tools using Python, APIs, and AI development frameworks
• Use LLMs and agentic development tools, including Claude, to improve security operations efficiency and engineering productivity
• Ensure AI-powered security workflows include appropriate validation, access controls, and human oversight for sensitive or high-impact actions

• 6+ Years of hands-on engineering experience, including at least 4 years in Cyber Security, Infrastructure Security, or Security Operations
• Strong background in IT infrastructure, systems engineering, cloud engineering, or platform engineering
• Experience implementing and maintaining infrastructure security controls in complex production environments
• Hands-on experience with Security Operations, SIEM, detection engineering, incident response, and threat hunting
• Strong understanding of cyber attack tactics, techniques, and procedures (TTPs), including MITRE ATT&CK
• Practical experience with EDR/XDR, vulnerability management, and security monitoring technologies
• Understanding of Linux, networking, operating system security, and infrastructure hardening
• Experience securing AWS environments, Kubernetes clusters, and containerized workloads
• Strong Python development skills and experience building security automation, integrations, and internal tools
• Experience developing AI-powered and agentic solutions, including LLM integrations, tool orchestration, autonomous workflows, and AI-assisted automation
• Experience integrating security controls and automation into infrastructure and DevOps workflows
• Ability to independently investigate complex security issues, identify root causes, and implement technical solutions
• Strong analytical and problem-solving skills, with an engineering-first approach to security
• Ability to work independently and collaborate effectively with Infrastructure, DevOps, Engineering, and Security teams
• Будет плюсом: experience in fintech, financial services, payments, or large-scale regulated e-commerce; experience building AI-powered SOC capabilities or autonomous security operations workflows; experience developing custom detection rules, security integrations, or open-source security tools; knowledge of infrastructure security architecture and secure cloud design; experience with offensive security techniques, infrastructure penetration testing, or adversary simulation; relevant security, cloud, or engineering certifications

• Условий в вакансии нет