Security Engineer
Sisu Group4 months ago
Tallinn, EstoniaMid Level / Senior
Responsibilities
- Operate and improve the security monitoring and detection stack.
- Drive vulnerability management from discovery through verified remediation.
- Support incident response and post-incident reviews.
- Harden cloud environments and CI/CD pipelines.
- Partner with engineering on threat modeling and secure design.
- Contribute to ISO 27001 and gambling-license security obligations.
Requirements
- 3–5 years of hands-on security engineering or DevSecOps experience.
- Solid cloud security knowledge with AWS or GCP.
- Experience with SIEM, log analytics, and detection tuning.
- Experience with vulnerability management and incident response.
- Strong scripting and automation skills.
- Good written and spoken English.
- Experience in iGaming, fintech, or another regulated industry is preferred but not required.
- Exposure to MGA or Estonian Gambling Act expectations is preferred.
- Threat modeling and secure SDLC experience is preferred.
- Relevant certifications such as OSCP, Security+, cloud security specialty, or ISO 27001 LI/LA are preferred.
Benefits
- Competitive compensation package with stock options.
- Generous paid time off.
- Collaborative, inclusive, non-corporate workplace culture with professional growth support.
- Offices in Tallinn and Malaga.
- A clear police record is required.
- Personal data is processed in compliance with the General Data Protection Regulation.
Tech Stack
Categories
About Sisu Group
Sisu Group builds a cloud-native iGaming platform and operates consumer brands for online casino and sports betting. Headquartered in Tallinn with an office in Malaga, it was founded in 2022 as a privately held company. The company launched ReSpin.com and Epicbet.com in 2024, the latter featuring a proprietary sportsbook engine.