Senior Information Security Engineer - Infrastructure Security

Who we are:

Since 1984, the company has run a comparison site for car insurance, mortgages and credit cards. Built and run from Toronto, the site connects pet owners with local sitters and dog walkers.

The role:

We are adding a Senior Information Security Engineer - Infrastructure Security to our Application Security team. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Employment is through our payroll partner in Luxembourg. Salary is paid monthly in euros. Expect to work a schedule that overlaps with US Eastern business hours until about noon ET. Good written English matters here, since most updates are written.

In your first few months you will:

• Write secure coding guidelines and run developer training.
• Automate security checks in CI/CD pipelines.
• Coordinate external penetration tests and track remediation.
• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.

Requirements:

• 7+ years in security engineering, application security or a related engineering role.
• Experience with SIEM, EDR or vulnerability management tools.
• Good judgment on risk: knowing what to fix now and what can wait.

Nice to have:

• Kubernetes and container security (Falco, OPA Gatekeeper)

Compensation and benefits:

Salary: €114,000 - €154,000 a year

• Two weeks of paid leave at year end.
• Public holidays observed per your country.
• Annual salary review.
• Wellness allowance.
• Home office setup budget.
• Co-working space stipend.

Candidates must be eligible to work in Luxembourg.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Everard Commerce.