Job Opportunities API

The Security Engineering Manager owns Maltego’s operational security function and leads the team that protects our infrastructure, product, and corporate environment. This is a hands-on technical role combined with people leadership You will run detection and incident response, harden our multi-cloud and endpoint estate, embed security into engineering workflows, and build the practices and team that scale with the company. You act as the technical authority for operational security while partnering closely with Engineering, Corporate IT, and our Governance, Risk & Compliance (GRC) function. Reporting initially to the Head of Infrastructure & Operations, you set operational security direction independently and translate risk into concrete, prioritized action. Success in the first phase means a well-instrumented and measurable security posture, reliable incident response, and a team operating to clearly defined technical standards. Key Responsibilities: Own detection, triage, and resolution of security incidents across cloud, product, and corporate environments – ensuring fast, reliable response and continuously improving incident response playbooks and tooling (Microsoft Sentinel, Microsoft Defender). Own operational security monitoring across the multi-cloud estate (Azure as primary, plus AWS and GCP), tuning detections, alerting, and response workflows for fast and reliable threat handling. Drive vulnerability management end-to-end – coordinating scanning, prioritization, and remediation tracking with Nessus and Snyk in partnership with Engineering. Define security baselines and secure-by-default standards, and embed them into the software development lifecycle and infrastructure, integrating tooling such as Snyk into engineering workflows. Manage endpoint and identity security across Windows and macOS fleets using Microsoft Intune, Defender, and Purview, ensuring consistent hardening and data protection. Build and lead the operational security team – line-managing and mentoring engineers, contractors, and working students toward clear technical and delivery standards. Plan and deliver security awareness and enablement across the organization, including onboarding content and phishing simulations, translating risk into plain language for non-technical audiences. Partner with the AI transformation team to engineer security guardrails and monitoring for the responsible use of AI across the organization. Required Qualifications (Must Have) 5+ years in security operations or security engineering, preferably in a SaaS or B2B software environment. Experience owning security outcomes or domains end-to-end (not only contributing to them). Hands-on incident detection and response experience, including SIEM (Microsoft Sentinel), EDR/XDR (Microsoft Defender), and cloud security monitoring. Strong technical fluency across multi-cloud infrastructure (Azure primary; AWS and GCP) and endpoint/identity management (Microsoft Intune, Windows, macOS). Experience with vulnerability management and developer security tooling such as Nessus and Snyk, including coordinating remediation with engineering teams. Proven ability to define and embed security baselines and secure-default standards into engineering and infrastructure. Proven people leadership experience, including setting expectations, developing engineers, and holding teams accountable for delivery and technical quality. Clear communicator able to translate security risk into plain language for engineers and non-technical stakeholders. Comfortable acting as the primary operational security practitioner, setting technical direction independently while collaborating with a separate GRC function. Professional proficiency in English. Preferred Qualifications (Nice to Have) Experience producing audit evidence for ISO 27001 / SOC 2 control operation and working with compliance automation platforms such as Vanta. Experience with Microsoft Purview f