Lead Security Engineer

🔥 0 minutes ago

🇪🇺 Europe – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DotWorld

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2015

💼 Consulting

📣 Marketing

☁️ SaaS

Consulting • Marketing • SaaS

DotWorld is a company that specializes in helping web entrepreneurs and SaaS startups to develop, scale, and manage their online businesses. They provide a comprehensive set of services including idea generation, resource provision, market testing, and tailored marketing strategies to ensure the success of SaaS ventures. With a multi-disciplinary team of experts in development, marketing, design, and AI, DotWorld aims to supercharge SaaS ideas and facilitate their growth in the global market.

📋 Description

• Secure access, cloud infrastructure, production systems, and workstations • Build centralized identity management with SSO, SCIM, and strong MFA • Apply the principle of least privilege and manage temporary, auditable privilege elevations • Secure employee onboarding, team changes, and offboarding, including for contractors • Administer the password manager and service accounts • Secure multi-account AWS environments, deployment platforms, CDNs, and WAFs • Replace static secrets with ephemeral identities and automate their rotation • Harden configurations and conduct security reviews of new architectures • Manage fleet security with MDM, encryption, and updates • Deploy a zero-trust approach for critical tools • Centralize security logs and build useful alerts • Lead security incidents from detection through post-mortem • Counter credential stuffing, account takeover, card testing, mass account creation, scraping, and DDoS attacks • Conduct internal penetration tests and security code reviews • Lead external penetration tests and potentially a bug bounty program • Raise team awareness through training, guides, and phishing exercises • Support squads in writing secure code • Subsequently conduct security audits across departments • Contribute over time to ISO 27001, SOC 2, and PCI DSS initiatives • Work directly with the CTO, partnering with the DevOps engineer, supporting approximately 25 developers organized into squads • Collaborate with the Tech, Risk & Payments teams and department heads

🎯 Requirements

• Experience independently owning the security function for a company or a broad scope • Proven experience leading real security incidents end to end • Ability to prioritize based on actual risk • Ideally, experience in a company or team that has implemented a compliance program • Experience with ISO 27001, SOC 2, or PCI DSS audits is a plus • Experience with fraud and abuse affecting B2C products that process payments is a strong plus • Strong command of AWS cloud security and its native tooling: IAM, Organizations, SCPs, CloudTrail, and GuardDuty • Proficiency in web and API penetration testing, the OWASP Top 10, and vulnerability exploitation • Proficiency with penetration-testing tools, ideally enhanced with AI • Strong automation mindset and experience with Python, scripting, and Go • Knowledge of SAML, OIDC, SCIM, MFA, and the principle of least privilege • Knowledge of CDN/WAF, DNS, deployment platform, and secrets-management security • OSCP, OSWE, AWS Security Specialty, CISSP, or equivalent certifications are a differentiator • Fluent French required • English proficiency at a minimum B2 level required and assessed during the recruitment process • Availability to work within the CET ±4-hour time zone range

🏖️ Benefits

• €200 monthly coworking budget • Flexible paid time off • Flexible working hours • Option to work remotely from a different time zone for one month • Equipment budget for a laptop, desk, chair, monitor, and headset • Two company offsites per year • Professional development opportunities • Culture of innovation • Career growth opportunities in a fast-growing company • Inclusive work environment • Dedicated tooling budget • Access to leading cloud models and security-focused open-source models • Remote work from anywhere in Europe • A culture built on trust, flexibility, and respect for individual working rhythms