Company Overview

The organisation operates in the financial technology industry, providing digital financial services, electronic payment solutions, and technology-enabled banking platforms. Its security operations focus on identifying cyber threats, protecting financial systems, monitoring suspicious activities, and maintaining the integrity of sensitive business and customer information.

Role Summary

The Security Operations & Threat Intelligence Engineer will support the organisation’s cybersecurity operations through continuous threat monitoring, security investigation, intelligence analysis, and incident response. The position focuses on identifying potential attacks against financial technology infrastructure and developing effective detection mechanisms to strengthen the organisation’s security posture.

The successful candidate will work with infrastructure engineers, application security specialists, compliance professionals, and technology operations teams to investigate security events and improve threat detection capabilities.

The role requires practical knowledge of security information and event management systems, threat intelligence platforms, endpoint protection, and incident investigation techniques.

Key Responsibilities

• Monitor security events across financial technology systems, networks, cloud environments, and endpoints.

• Analyse security alerts to identify suspicious activities and potential cyber threats.

• Investigate security incidents involving unauthorised access, malware, phishing, and infrastructure compromise.

• Develop and refine detection rules for identifying malicious activities.

• Collect and analyse threat intelligence from relevant cybersecurity sources.

• Conduct threat hunting exercises to identify previously undetected security risks.

• Investigate unusual authentication patterns and potentially compromised user accounts.

• Support incident containment, evidence collection, and recovery activities.

• Maintain and improve SIEM monitoring rules and security alert workflows.

• Collaborate with infrastructure teams to investigate vulnerabilities and security weaknesses.

• Prepare incident reports, threat assessments, and security investigation documentation.

• Evaluate emerging cyberattack techniques targeting financial institutions and payment platforms.

• Support vulnerability management and security remediation programmes.

• Contribute to security playbooks and incident response procedures.

• Recommend improvements to security monitoring coverage and detection capabilities.

Requirements and Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Security, or a related discipline.

• Minimum of four years of experience in security operations, threat intelligence, or cybersecurity engineering.

• Practical experience with SIEM platforms such as Microsoft Sentinel, Splunk, or IBM QRadar.

• Understanding of network security, endpoint protection, and cloud security monitoring.

• Knowledge of common cyberattack techniques, attack indicators, and incident investigation procedures.

• Familiarity with MITRE ATT&CK and threat intelligence frameworks.

• Experience with security log analysis and incident response.

• Working knowledge of Python, PowerShell, or Bash scripting is advantageous.

• Understanding of authentication security, access management, and endpoint detection technologies.

• Familiarity with financial services cybersecurity requirements and GDPR.

• Strong analytical thinking and investigative abilities.

• Relevant cybersecurity certifications such as Security+, GCIH, or equivalent are advantageous.

Benefits

• Fully remote working arrangement within Estonia.

• Opportunity to strengthen cybersecurity across fintech infrastructure.

• Exposure to advanced threat detection and intelligence technologies.

• Professional cybersecurity training and certification opportunities.

• Collaboration with international security and infrastructure professionals.

• Flexible working arrangements and long-term career development.

Application Instructions

Interested candidates should submit an updated CV highlighting their experience in security operations, threat intelligence, SIEM monitoring, and incident response. Applications should demonstrate practical experience investigating cyber threats, improving security detection processes, and protecting technology infrastructure.

Are you interested in this position?

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecruitment
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.