Security Engineer

About the role

Prime Insights is seeking its first dedicated Security Engineer to lead security operations within the Technical Operations organization. Reporting to the CTO, you will own security architecture, vulnerability management, cloud posture and access automation across multiple engineering teams.

Key responsibilities

• Design and implement security architecture for services built on PHP/Laravel, MariaDB, ClickHouse, Kafka, RabbitMQ and Valkey.
• Manage vulnerability scanning pipelines (DAST, dependency, container and infrastructure) using tools such as Nuclei, Trivy and ZAP, triage findings and drive remediation.
• Harden AWS and on‑prem cloud infrastructure and Kubernetes clusters, including secrets management, image security and supply‑chain hygiene.
• Handle day‑to‑day identity and access management, improve SSO/OAuth/OIDC and SCIM provisioning, and conduct regular off‑boarding audits.
• Raise corporate security awareness through training and phishing resilience programs.
• Build security logging on the observability stack, lead incident response, perform vendor assessments and provide technical evidence for GDPR and other compliance requirements.

Required profile

• 3+ years of hands‑on security engineering or backend/SRE experience with a strong security focus.
• Proven ability to operate scanning pipelines and turn results into actionable remediation.
• Experience owning a security function and driving projects across multiple teams.
• Excellent written and verbal communication skills in English.

Required skills

• PHP / Laravel
• MariaDB, ClickHouse, Kafka, RabbitMQ, Valkey
• DAST, dependency, container and infrastructure scanning (Nuclei, Trivy, ZAP)
• AWS and on‑prem cloud environments
• Kubernetes security
• Scripting/automation with Go, Python or PHP
• Identity infrastructure: SSO, OAuth/OIDC, SCIM, Google Workspace administration