Cyber Security Engineer, Elastic (Security Operations)

Bitpanda

WHO WE ARE  We simplify wealth creation. Founded in 2014 in Vienna, Austria by Eric Demuth, Paul Klanschek and Christian Trummer, we’re here to help people trust themselves enough to build their financial freedom — for now and the future. Our user-friendly, trade-everything platform empowers both first-time investors and seasoned experts to invest in the cryptocurrencies, crypto indices, stocks*, precious metals and commodities* they want — with any sized budget, 24/7. Our global team works across different cultures and time zones, bringing our products to more than 7 million customers, making us one of Europe’s safest and most secure platforms that powers modern investing.   Headquartered in Austria but operating across Europe, our products are built by fast-moving, talented, “roll-up-your-sleeves-and-make-it-happen” kind of people. It’s these diverse perspectives and innovative minds operating as ONE TEAM that keep Bitpanda at the cutting edge of our industry. So if you’re someone who thinks big, moves fast and wants to make an impact right from day one, then get ready to join our industry-changing team. Let’s go!   Your mission Millions of customers trust Bitpanda to protect their money, identities and digital assets. As a Senior Cyber Security Engineer, you'll play a critical role in staying ahead of evolving threats by building the capabilities that detect attacks, respond to incidents and continuously strengthen our security posture.  You'll combine deep technical expertise with engineering excellence to evolve our security operations, drive automation at scale and partner across the business to embed security into everything we build. Your work will directly shape how Bitpanda protects its customers today; and how it stays resilient tomorrow. WHAT YOU'LL DO * Detection engineering. Own the strategy and quality of our detection library in Elastic Security (ES|QL/KQL), designing high-fidelity detections mapped to real-world attacker techniques while continuously improving coverage, reducing noise and raising the maturity of our SOC. * Drive incident response and threat hunting. Lead investigations into complex security incidents, proactively hunt for advanced threats across AWS, Elastic and Datadog, refine response playbooks, and turn every incident into lasting improvements to our security capabilities. * Build automation that scales security. Design and implement automated investigation, enrichment and response workflows using SOAR, APIs and custom tooling, reducing manual effort while increasing speed, consistency and resilience across security operations. * Strengthen Bitpanda's security posture. Improve cloud security monitoring, system hardening and security tooling across our AWS environment, partner with engineering teams to proactively eliminate risk, and support compliance initiatives including ISO 27001, PCI DSS and DORA. * Raise the security bar across the organisation. Act as a technical leader within the Security team, mentor engineers, influence architectural decisions, champion security best practices and help build a security-first culture across Bitpanda.   WHO YOU ARE: * You have 4+ years of hands-on security engineering experience, with deep expertise across incident response, threat hunting, SIEM, digital forensics and scripting. * You've built and evolved security operations; not just operated them. You have experience designing detections, automating workflows and improving security processes that deliver measurable outcomes. * You have strong experience securing cloud-native environments, particularly AWS, alongside expertise in system hardening, network security, IAM and security monitoring. Experience with Elastic Security, ES|QL and KQL is highly desirable. * You take ownership of complex technical challenges, balancing pragmatism with security excellence, and are comfortable leading initiatives from idea through implementation. * You're an excellent collaborator and communicator who enjoys mentoring others, influencing technical direction and partnering across engineering to build secure systems at scale.   WHAT’S IN IT FOR YOU * Flexibility to work where you thrive – Enjoy the freedom of our Hybrid working model, combining onsite collaboration and remote work, with an additional 25 days per year to work from a city or country of your choice. * Reward for your impact – Receive a competitive total compensation package aligned with Bitpanda’s pay-for-impact policy, including participation in our stock option plan. * Support for your mental wellbeing – Access confidential coaching, counselling, and mental health resources whenever you need them through OpenUP. * Time to recharge – On top of your standard annual leave, Prioritise your wellbeing with 3 additional days of paid time off to rest, reset, and recharge, available once you’ve been with us for 6 months. * Continuous learning and growth – Grow your skills and stay ahead in your career with unlimited access to Udemy’s library of online courses at your own pace. * Exclusive perks and rewards – Enjoy discounts, rewards, and perks from partners worldwide across lifestyle, wellness, tech, and travel. * Support during life milestones – Take advantage of our additional 8 weeks of gender-neutral new parent leave to welcome and bond with your new addition to the family. * Fuel and focus on-site – Pandas in Vienna, Bucharest, Barcelona, and Berlin can enjoy free onsite dining, with freshly prepared lunches and snacks to keep you fueled and focused all day long. * Recognition for your contributions – Celebrate milestones and achievements with recognition and rewards for your Tenure at Bitpanda. * Show your Bitpanda pride – Access exclusive Bitpanda-branded merchandise and gear to represent. * Connect and celebrate with your team – Join unforgettable company events, from our Winter Party in Vienna to gatherings worldwide, fostering fun, connection, and celebration        .…and even more location-specific benefits designed to make life at Bitpanda even more rewarding wherever you are.   Above all, you will have the opportunity to learn and grow as part of Bitpanda’s incredible journey towards being Europe’s future #1 investment platform. BITPANDA IS COMMITTED TO FOSTERING A FAIR AND EQUAL ENVIRONMENT BASED ON TRUST AND MUTUAL RESPECT. WE BELIEVE THAT A DIVERSE AND INCLUSIVE WORKPLACE IS PARAMOUNT TO OUR SUCCESS AND WE ARE COMMITTED TO BUILDING A TEAM THAT REPRESENTS A WIDE VARIETY OF BACKGROUNDS, PERSPECTIVES, AND SKILLS. * THESE BENEFITS MAY BE ADJUSTED AT BITPANDA’S DISCRETION AND DO NOT APPLY TO OUR INTERNSHIPS AND EXCEPTIONS TO OUR HYBRID WORKING POLICY APPLY TO TEAMS WITH SHIFT SCHEDULES OR FOR FOLKS WHOSE ROLES REQUIRE THEM TO BE IN-OFFICE (THINK: WORKPLACES TEAM OR IT).

Gitlab

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. *Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. AN OVERVIEW OF THIS ROLE We’re looking for a manager to lead the GitLab security incident response team (SIRT) in the Americas region. GitLab SIRT manages and investigates cybersecurity incidents across all GitLab operating environments and operates in a tierless SOC model. The team is responsible for threat hunting, alert triage, security investigations, deep-dive DFIR, and large-scale incident response, among other responsibilities. In this role, you will manage the day-to-day work of a team of incident response engineers - setting clear performance expectations, coaching their growth, and holding the team accountable for delivering quality results. You should have a strong technical background, be comfortable owning the full incident lifecycle from alert triage to retrospective actions, and be skilled at developing others to do the same. We are looking for someone who makes sound operational decisions under pressure and who actively looks for opportunities to "shift left" - improving defenses and leveraging AI and automation to optimize team workflows. You will implement program direction, maintain a culture of high performance, and defend GitLab infrastructure and products including GitLab.com, GitLab Dedicated, and GitLab Dedicated for Government (FedRAMP). This role requires availability during US West Coast business hours. Candidates based on the West Coast are preferred, though candidates in other time zones who are comfortable working these hours are also welcome to apply. Some after-hours and weekend coverage may be required to support engineers during high-severity incidents. Learn more about the Security Operations Department: * Security Incident Response Team * Trust and Safety Team * Security Logging Team * Red Team * Signals Engineering Team WHAT YOU'LL DO * Manage day-to-day team operations - establish clear goals, performance expectations, and accountability for direct reports; monitor progress and ensure timely delivery of quality results. * Develop and coach incident responders - provide candid, real-time feedback; advise on career growth; and foster a culture of investigation excellence, prioritizing depth and accuracy of analysis. * Proactively identify and fill talent gaps - participate in hiring decisions with a focus on candidates who will amplify GitLab's values and raise the team's technical bar. * Drive engagement and retention - recognize team member contributions, address engagement risks early, and create an environment of open feedback and psychological safety. * Cascade organizational context - translate division and company-wide strategy into clear, actionable team priorities; keep team members informed in a timely manner. * Implement and mature incident response processes - build and improve runbooks, procedures, and team capabilities that translate functional plans into tactical execution. * Lead incident response - serve as an escalation point and incident commander for high-severity events, including occasional nights and weekends; model the standard for quality investigations. * Enable cross-functional collaboration - coordinate effectively with peer SecOps teams, Legal, Customer Support, and Infrastructure to resolve incidents and close defense gaps through actionable retrospective mitigations. * Align the team on defensive improvements - drive insights from alerts, investigations, and incidents to improve GitLab's security posture and support a "shift left" mindset. * Champion remote-first practices - consistently model and coach team members on GitLab's remote working best practices, async communication norms, and handbook-first culture. WHAT YOU'LL BRING * Proven people management experience - track record of managing and developing a team of security engineers, setting performance expectations, providing coaching, and driving accountability for results. * Incident response leadership - demonstrated experience leading complex incident response operations, including large-scale incident coordination and the full lifecycle from triage to retrospective. * Hands-on technical background - experience conducting security investigations and log analysis using SIEM tools (e.g., Splunk, Elastic); working knowledge of GCP and/or AWS, including cloud forensics. * Customer-facing credibility - comfortable representing GitLab Security during customer escalations and high-visibility cybersecurity discussions. * Proactive hunting and threat intelligence - proficiency in threat hunting based on intelligence, and familiarity with supply chain threats targeting SaaS platforms. * AI and automation mindset - experience using AI/LLMs to improve incident response workflows and automate repetitive processes. * Platform familiarity - experience using GitLab (or a comparable DevSecOps platform) for project tracking; bonus if you have experience responding to threats against a SaaS platform. * Prioritization under pressure - ability to make sound operational decisions quickly, escalate issues cleanly, and guide the team on balancing what is urgent versus what is important. Due to government requirements, you must be a United States Citizen (defined as any individual who is a citizen of the United States by law, birth, or naturalization) to fill this position. ABOUT THE TEAM The Security Incident Response Team is a globally distributed team of incident response engineers split across three core regions; AMER, APAC and EMEA, and is at the forefront of security events that impact both GitLab’s products and company. We are both proactive and reactive, responding to security alerts, leading security investigations, conducting threat hunts and collaborating with peer Security Operations teams to conduct purple teaming exercises, build threat detections, improve security telemetry and investigate trending threats. Even though we’re a global team, we work together in a cross-regional manner and have automation and processes to facilitate collaboration when resolving incidents, handovers, and general collaboration for project work as well. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $150,000—$235,000 USD HOW GITLAB SUPPORTS FULL-TIME EMPLOYEES * Benefits to support your health, finances, and well-being * Flexible Paid Time Off  * Team Member Resource Groups * Equity Compensation & Employee Stock Purchase Plan * Growth and Development Fund * Parental Leave  Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. ---------------------------------------------------------------------------------------------------------------------------------- Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.   Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.

Zscaler

About Zscaler Zscaler accelerates digital transformation to ensure our customers can be more agile, efficient, resilient, and secure. As an AI-forward enterprise, we are constantly pushing the envelope, leveraging the world’s largest security data lake to power our cloud-native Zero Trust Exchange platform. This innovation protects our customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Here, impact in your role matters more than title and trust is built on results. We say, impact over activity. We seek innovators who actively use AI to amplify their impact and who thrive in an environment where we leverage intelligent systems to stay ahead of evolving threats. We believe in transparency and value constructive, honest debate—we’re focused on getting to the best ideas, faster. We build high-performing teams that can make an impact quickly and with high quality. To do this, we are building a culture of execution centered on customer obsession, collaboration, ownership, and accountability. We value high-impact, high-accountability with a sense of urgency where you’re enabled to do your best work and embrace your potential. If you’re driven by purpose, thrive on solving complex challenges, and want to be part of the team that’s helping to secure the AI age, we invite you to bring your talents to Zscaler and help shape the future of cybersecurity.    Role We are looking for a Sr. Software Developer to join our team. This is a Hybrid role, reporting to the Leader in the Tools & Technology Team in the ThreatLabz department. The Sr. Software Developer will be primarily responsible for designing, building, and maintaining client-side and server-side web applications, taking ownership of end-to-end feature modules and ensuring seamless communication between user-facing interfaces and backend infrastructure. Working within ThreatLabz, the world-class security research arm of Zscaler, this role contributes directly to hunting new threats and protecting millions of global users. What you’ll do (Role Expectations) * Build and scale server-side web applications, secure RESTful APIs, and microservices using Node.js, Python, Django, or Flask * Manage core application security settings, user authentication, authorization protocols, and data protection measures * Map and optimize database schemas using relational systems like PostgreSQL or MySQL and NoSQL engines like MongoDB * Build responsive, high-performance user interfaces and reusable frontend modules utilizing HTML5, CSS3, JavaScript/TypeScript, and modern frameworks * Collaborate closely with the ThreatLabz Cyber Threat Research organization to conduct code reviews, perform unit testing, and maintain software applications Who You Are (Success Profile) * You thrive in ambiguity. You're comfortable building the path as you walk it. You thrive in a dynamic environment, seeing ambiguity not as a hindrance, but as the raw material to build something meaningful. * You act like an owner. Your passion for the mission fuels your bias for action. You operate with integrity because you genuinely care about the outcome. True ownership involves leveraging dynamic range: the ability to navigate seamlessly between high-level strategy and hands-on execution. * You are a problem-solver. You love running towards the challenges because you are laser-focused on finding the solution, knowing that solving the hard problems delivers the biggest impact. * You are a high-trust collaborator. You are ambitious for the team, not just yourself. You embrace our challenge culture by giving and receiving ongoing feedback—knowing that candor delivered with clarity and respect is the truest form of teamwork and the fastest way to earn trust. * You are a learner. You have a true growth mindset and are obsessed with your own development, actively seeking feedback to become a better partner and a stronger teammate. You love what you do and you do it with purpose. What We’re Looking for (Minimum Qualifications) * Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies like frontier LLMs and vibe coding into workflows to augment problem-solving * A minimum of 2-3 years of professional application development experience with proficiency in Python and backend frameworks including Django and Flask * Strong understanding of database systems like PostgreSQL and MongoDB, alongside hands-on experience with Object Relational Mapper libraries * Expertise in frontend development with HTML5, CSS3, JavaScript, jQuery, and AngularJS * In-depth knowledge of the ELK Stack, including cluster setup, Logstash configuration, Kibana visualizations, Elastic beats, and core Elasticsearch concepts What Will Make You Stand Out (Preferred Qualifications) * Competency in Python-based data science tools such as pandas and NumPy, and experience implementing machine learning algorithms to optimize security solutions * Experience in Agile methodologies and version control tools such as GitHub, GitLab, or SVN * Familiarity with cloud services offered by major providers like AWS, Azure, or GCP #LI-Hybrid #LI-PM5 At Zscaler, we are committed to building a team that reflects the communities we serve and the customers we work with. We foster an inclusive environment that values all backgrounds and perspectives, emphasizing collaboration and belonging. Join us in our mission to make doing business seamless and secure. Our Benefits program is one of the most important ways we support our employees. Zscaler proudly offers comprehensive and inclusive benefits to meet the diverse needs of our employees and their families throughout their life stages, including: * Various health plans * Time off plans for vacation and sick time * Parental leave options * Retirement options * Education reimbursement * In-office perks, and more! Learn more about Zscaler's hybrid working model and benefits here. By applying for this role, you adhere to applicable laws, regulations, and Zscaler policies, including those related to security and privacy standards and guidelines. Zscaler is committed to providing equal employment opportunities to all individuals. We strive to create a workplace where employees are treated with respect and have the chance to succeed. All qualified applicants will be considered for employment without regard to race, color, religion, sex (including pregnancy or related medical conditions), age, national origin, sexual orientation, gender identity or expression, genetic information, disability status, protected veteran status, or any other characteristic protected by federal, state, or local laws. See more information by clicking on the Know Your Rights: Workplace Discrimination is Illegal link. Pay Transparency Zscaler complies with all applicable federal, state, and local pay transparency rules. Zscaler is committed to providing reasonable support (called accommodations or adjustments) in our recruiting processes for candidates who are differently abled, have long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support.