SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: EUR 4,000 - 6,000 / monthly
FYUL (formed in 2024 from the merger of Printful, Printify, and Snow Commerce) is seeking a Senior Cybersecurity Engineer to own significant portions of its security operations platform. The cybersecurity team is deliberately small and execution-focused, running a large-scale telemetry and detection platform covering endpoints, network traffic, cloud workloads, and SaaS—a modern SIEM at its core, extended with custom machine learning and AI agents.
This is a senior individual-contributor role reporting directly to the Information Security Engineering Manager. You will own detection engineering, vulnerability discovery, cloud and endpoint security, data loss prevention, and automation of security operations. Professional growth comes from depth of expertise and ownership of outcomes.
Key responsibilities include:
- Detection engineering: design, implement, and tune detections across security telemetry (SIEM rules and custom ML models for anomaly and risk detection); triage alerts, investigate incidents, and drive them to closure.
- Cloud and platform security: harden and monitor AWS and Kubernetes (EKS) environments, including workload security, IAM, container runtime defense, and configuration standards.
- Endpoint security: own the health and hardening of the endpoint agent fleet across macOS, Windows, and Linux.
- Data loss prevention: operate and extend DLP coverage across removable media, email, and SaaS channels; detect data exfiltration with tuned false-positive rates.
- Security automation: automate recurring operations and detection-to-response workflows, including AI-based agents and pipelines.
- Vulnerability discovery and management: find infrastructure vulnerabilities through scanning, configuration review, and targeted penetration testing; prioritize and drive remediation.
The security program is mature with governance and compliance handled by a dedicated GRC function, so this role focuses on building and running security engineering full-time. You will collaborate with engineering teams to position security as enablement, not friction.
Tech stack: AWS, Kubernetes, Terraform, Helm, Atlantis, Elastic Security (SIEM), Grafana, Kibana, Prometheus, Git, GitHub Copilot, Jira.
QUALIFICATIONS:
- 5+ years in security engineering or SecOps roles with hands-on responsibility for detections and incidents in production (not solely policy or advisory work).
- Real detection engineering experience on a modern SIEM/security platform (Elastic Security preferred; Splunk, Sentinel, or comparable); appetite to go beyond built-in rules into custom ML-based detection.
- Deep, hands-on mastery of Linux, macOS, and Windows: internals, hardening, and investigation on all three platforms.
- Strong networking expertise: TCP/IP, routing, VPNs, firewalls, packet-level analysis; ability to reconstruct events from packet captures and reason about traffic flow.
- Strong cloud security foundation in AWS, including Kubernetes; personal experience securing and monitoring production cloud workloads.
- Hands-on LLM experience: built or operated LLM-powered tooling (agents, pipelines, detection/automation workflows), not merely used a chat assistant.
- A certification in practical infrastructure hacking or hardening (e.g., OSCP, OSEP, or comparable hands-on offensive credential).
- Demonstrated automation capability: scripts, integrations, pipelines, or AI-assisted workflows you can show. Software engineering background not required; track record of building practical automation is.
- Self-directed working style with strong ownership; ability to take ambiguous problems through to completed outcomes with minimal supervision.
- Excellent written and spoken English.
- Further certifications (CISSP, GIAC/GCFA/GCIH, AWS Security) are an advantage, but hands-on hacking/hardening credential is prioritized. Hands-on experience always outweighs certification.
