Run an access review and provide evidence for ISO 27001.
Build a prioritized hardening backlog against CIS Benchmarks.
Own first-pass vulnerability disclosure programme triage within the service-level agreement.
Desired Qualifications
Google Cloud security experience.
Python, Bash, or PowerShell automation.
Bug bounty or vulnerability disclosure programme experience.
ISO 27001 or SOC 2 audit exposure.
ABOUT US At IPRoyal, we empower startups and global enterprises with cutting-edge data mining infrastructure. Our dedicated team works around the clock to deliver powerful, cost-effective, and reliable solutions that create real value for our clients. From streamlining operations to unlocking new opportunities, our engineers turn publicly available data into actionable insights. With IPRoyal, businesses enjoy first-class, scalable experiences that grow alongside them.
ABOUT THE ROLE Can you make security tools work every single day, so real threats stand out from the noise? And can you stay calm and prioritise when five things land at once? IPRoyal provides proxy infrastructure trusted by businesses worldwide. Our customers rely on us to keep their traffic and data safe, so security is part of our product, not an afterthought. We're strengthening our Security Programme and looking for a hands-on Security Engineer to join the Security team, reporting to our Cyber Security Manager. The tools are in place: Wazuh, Cortex XDR, a live Vulnerability Disclosure Programme, and an ISO 27001-certified ISMS. Your job is to make them work well every day.
WHAT YOU'LL DO
Run our SIEM: Wazuh/OpenSearch agent coverage, custom rules, dashboards, and retention;
Triage and tune Cortex XDR alerts, so real threats stand out from the noise;
Track new CVEs and security news, and turn them into clear patch or mitigation actions;
Do first-pass triage of vulnerability reports from researchers (validity, CVSS, duplicates), then verify fixes with our developers;
Enforce MFA and SSO across our systems, run access reviews, and own patch policies;
Harden Google Workspace, GCP, Linux, macOS, and Windows against CIS Benchmarks.
WHAT WE EXPECT
Experience: 3–5 years in security operations, SOC, or a security-focused sysadmin/cloud role;
SIEM & EDR: Hands-on SIEM and EDR/XDR experience;
Vulnerabilities: Solid grasp of common web vulnerabilities (OWASP Top 10) and CVSS scoring;
Systems: Practical Linux skills and working knowledge of macOS and Windows security;
Identity: Experience with MFA, SSO, and identity platforms such as Google Workspace;
Judgment: The ability to prioritise calmly when five things land at once, and the clarity to explain why;
Nice to have: Google Cloud security experience, Python, Bash, or PowerShell automation, bug bounty or VDP experience, or ISO 27001 or SOC 2 audit exposure.
SUCCESS IN THE FIRST 90 DAYS Days 1–30: Learn and assess
Get access to the security stack (SIEM, EDR, identity, MDM, Jira) and learn how each part is used day to day;
Measure SIEM agent coverage across the server fleet and list any gaps;
Triage EDR alerts alongside the Cyber Security Manager to learn our baseline and tuning approach.
Days 31–60: Take ownership
Close agent coverage gaps and add health monitoring;
Write the first custom detection rules and tune noisy alerts with narrow, documented exceptions;
Start an inventory of MFA/SSO exceptions and service accounts.
Days 61–90: Measure and improve
Report monthly security metrics: coverage, alert volume, and patch compliance;
Run a first access review with evidence for ISO 27001;
Build a prioritised hardening backlog against CIS Benchmarks;
Own first-pass VDP triage within SLA.
WHAT WE OFFER
Real ownership: The tools are in place and the outcomes are clear. You own how well SIEM, EDR, access reviews, and patching work day to day;
Security that matters: A live Vulnerability Disclosure Programme and an ISO 27001-certified ISMS, in a company where security is part of the product;
Clear expectations: Defined outcomes at 3, 6, and 12 months, and a Cyber Security Manager to work with from day one;
Resources to win: Budgets for tools, wellness, and professional growth - plus support for work equipment and other essentials;
Flexible ways of working: Work from the office in Vilnius or Kaunas, hybrid, or remotely, and take it further with manager approval;
Exclusive perks: A range of benefits, from snacks to workations and special company experiences;