2 months ago
Helsinki, FinlandSenior
Responsibilities
- Own the architecture and outcomes of the Google Cloud security event and log pipeline, including detections, alerting, and dashboards.
- Extend security automation such as vulnerability triage, remediation nudging, and scanning-stack integrations.
- Build tooling for the GRC function and automate recurring manual security work, including churned-customer data-removal monitoring.
- Harden cloud security architecture with SRE and Platform teams across trust boundaries, IAM, least privilege, network egress, secrets, and infrastructure-as-code.
- Drive technical decisions, mentor through code review, and contribute to AI-assisted security review tooling.
Requirements
- At least five years of experience building production software is preferred.
- Deep hands-on experience with Google Cloud, including IAM, networking, logging, eventing services, containers, and Kubernetes.
- Production experience with at least one of TypeScript, Python, or Go, with willingness to work across all three in a large monorepo.
- Experience building data or event pipelines, observability systems, or detection tooling as version-controlled, reviewed, and tested software.
- Strong ownership of system-scale outcomes, ambiguous problem solving, and influence on secure engineering practices.
- Genuine interest in security; a security-specific title is not required.
- Experience using AI agents and modern AI tools in daily engineering workflows.
Benefits
- Monthly salary of €6,000–7,500 depending on experience.
- Flexible hybrid working arrangement with an expectation to visit the Helsinki office weekly.
- Extensive healthcare benefits.
- Fresh Helsinki office with a gym and swimming pool.
- High-autonomy, supportive workplace with psychological safety and ownership over security automation priorities.
Tech Stack
Categories
About Hoxhunt
Hoxhunt builds a human risk management platform for enterprises that uses AI and behavioral science to deliver personalized phishing training, threat reporting, and outcome metrics. It sells SaaS security awareness and response tools to help security teams reduce phishing risk and act on user-reported threats. Founded in 2016 and headquartered in Helsinki, customers include DocuSign and Nokia, and it partners with Microsoft and Deloitte.