Find your next opportunity
Browse fresh openings from leading companies and apply with a resume tailored to the role.
Browse expert rolesBrowse expert rolesBrowse fresh openings from leading companies and apply with a resume tailored to the role.
Browse expert roles13409 openings
3513-3520 of 13409
European Payments Initiative (EPI)
Free to start · No card · 5 credits the moment you sign up
🚀 Be part of a movement to change the way Europe pays
In today’s digital Europe, payments still feel too complicated. Random delays, confusing rules, extra apps and accounts make it harder than it should be to pay and get paid.
The European Payments Initiative is changing that with Wero, a proudly European digital wallet to make payments easier, clearer and more secure. Online, in store, at home and across borders, with your money and data protected under European laws and regulations.
Wero is live in Belgium, France, Germany and the Netherlands and launching very soon in Luxembourg and Austria. Backed by 17 major banks and the two largest European acquirers, we’re building a brand new, proudly European payment system. Why not join us?
Play a key role in protecting Europe’s next-generation payment infrastructure. As an Operations Security Engineer, you will be at the heart of EPI’s Security Operations capability: triaging alerts, responding to incidents, improving detection coverage and proactively hunting for threats across cloud, identity, endpoint and application environments.
This is a high-impact opportunity to combine hands-on SOC expertise, threat hunting and detection engineering in a remote-first, pan-European company where security directly supports the resilience and trust of Wero.
You’ll join the Security Operations team within Operations Services Delivery. The team brings together highly skilled security profiles, including SOC, IAM, general security, threat hunting and penetration testing expertise.
You’ll collaborate closely with Security, Engineering, DevOps, IT and Operations teams to strengthen detection and response capabilities, improve tooling and ensure strong visibility across our environments. This role is ideal for someone who enjoys hands-on investigation, structured incident response and clear communication with both technical and non-technical stakeholders.
Act as a central point of contact for alert triage, incident identification and security event investigation across EPI environments.
Execute incident response activities using structured frameworks such as SANS PICERL, from preparation and identification through containment, eradication, recovery and lessons learned.
Conduct proactive, hypothesis-driven threat hunts based on attacker behaviour, emerging threats, threat intelligence and MITRE ATT&CK techniques.
Parse, analyse and correlate logs from authentication, application, system, endpoint and cloud telemetry sources, including AWS and Azure.
Design, tune and maintain detection rules, use cases, dashboards, custom alerts and automation workflows to identify anomalies, lateral movement and persistent threats.
Contribute to the development and continuous improvement of SOC playbooks, runbooks, SIEM and EDR integrations.
Document and communicate threat findings, incident outcomes and remediation recommendations clearly to technical and non-technical stakeholders.
Collaborate with engineering, SOC, IR and IT teams to improve detection coverage, response readiness and operational resilience.
Primary security tools: Rapid7, Microsoft Defender, SIEM and EDR technologies
Cloud, identity & operations: AWS, Azure, Microsoft Entra ID, Okta, PagerDuty
Scripting, querying & automation: Python, PowerShell, KQL, custom alerting and auto-remediation workflows
Collaboration & delivery: Jira, Confluence, GitHub
🕵🏻♀️ To succeed, you should meet at least 70% of these requirements
+8 years of experience in cybersecurity, with strong hands-on experience as a SOC analyst, incident responder, detection engineer or similar role.
Fluent in English (CEFR C1 or C2); French, German, Dutch or other European languages are a plus.
Thrive in a remote-first, multicultural and fast-paced environment.
Strong familiarity with the full SOC lifecycle, from Tier 1 to Tier 3, including alert triage, incident response, threat hunting and threat intelligence.
Proven experience in threat hunting, detection engineering or threat intelligence, with the ability to turn attacker behaviours into actionable detections.
Solid understanding of SIEM and EDR technologies, log parsing, detection engineering and alert tuning.
Hands-on experience with scripting and querying tools such as Python, PowerShell or KQL to support automation, investigations and custom alerting.
Ability to analyse and correlate logs from diverse sources, including authentication, application, system and cloud telemetry across AWS and Azure.
Knowledge of attacker TTPs, MITRE ATT&CK, threat exposure and attack path analysis.
Experience creating or improving incident response playbooks, runbooks and automation workflows.
Strong communication skills, with the ability to explain technical findings and security risks clearly to both technical and non-technical stakeholders.
Willingness to participate in a 24/7 on-call rotation, approximately one week per month, to support incident response and operational continuity.
Familiarity with Microsoft Entra ID and its integration into detection and response workflows.
Nice-to-have certifications such as GSEC, GCIH, BTL1/2, SC-200 or AZ-500.
Experience in payments, banking, fintech or another highly regulated environment.
🪜 If this looks like you, the recruitment steps are:
A technical interview with our CISO and a security expert
You prefer a purely reactive SOC role where you only handle out-of-the-box alerts and escalations.
You don’t enjoy digging into logs, building queries, tuning detections or investigating ambiguous signals across distributed systems.
You are looking for a role with no on-call responsibilities or no operational incident response exposure.
You prefer working in isolation rather than collaborating with engineering, DevOps, IT and business stakeholders.
Remote-first culture with quarterly and annual all-staff in-person meetups to keep teams connected and collaborative
Possibility to work from another EU country for up to 3 months per year
Competitive compensation package, featuring salary, performance-based bonus and a thoughtfully designed, high-quality benefits programme
The opportunity to be part of a true pan-European company
Learning & development budget: €5,000 training budget per year
EPI offers the same job opportunities to all, without distinction of gender, ethnicity, religion, sexual orientation, social status, disability or age. EPI promotes the development of an inclusive work environment that mirrors the diversity of the clients our product is serving.
Originally posted on Himalayas
Start with a role or skill you want to use in your next job. Use the location and role filters to narrow the results, then open a listing to review the description. A title alone rarely explains the level of responsibility, working arrangement, or experience a team needs. Compare those details before deciding which opportunities deserve a tailored application.
Employers use different titles for similar work. If an exact phrase produces no results, try a shorter title, a core skill, or an alternative name for the role. Remove one filter at a time to understand which requirement is narrowing your search. A broader search can reveal suitable work without asking you to change your actual qualifications.
For each promising listing, read the responsibilities and separate essential requirements from preferences. Note the location, schedule, employment type, and compensation when provided. Missing details are questions to confirm with the employer. A remote opening may still require a particular country, work authorization, or time-zone overlap, so check the full posting before treating it as a location-independent opportunity.
Choose a few examples that demonstrate the skills this employer names. Explain your contribution and its outcome, using accurate numbers where available. Put the most relevant experience first and keep your resume easy to scan. Avoid adding technologies, qualifications, or achievements simply because they appear in a description. Your application should make your existing strengths easier to understand.
Follow the employer’s instructions for resumes, cover letters, work samples, and screening questions. Review the exported file before submitting it: confirm that contact details are correct, text can be selected, and links reach the intended pages. A resume check can help you spot unclear writing before you apply. Its feedback is advisory and does not predict a hiring decision.
Listings are collected from external sources and may change after they appear here. The employer or recruiting destination controls whether applications are open. If an original link is unavailable, check the company’s careers page for the title or move to another opening. An employer website link is a place to check current vacancies, rather than confirmation that a particular job is still accepting applications.
Keep a simple record of the company, role, job reference, application date, and documents you sent. Record any follow-up instructions and the next action you plan to take. This makes it easier to prepare for interviews, compare opportunities, and avoid applying repeatedly to the same opening through different boards. Review your shortlist as employers update their listings and prioritize opportunities with clear requirements that match the work you want to do.