Security Engineer

WELCOME TO OLX

We're building marketplace sustainable ecosystems that millions of people depend on every month – to buy and sell cars, find homes, land jobs, and trade secondhand goods. It's commerce that matters: safe, smart, and environmentally responsible.

We do this with courage to innovate, commitment to outcomes, collaboration across 50+ nationalities and 7 markets, and a customer-led approach that puts real people first. Add a desire to win – and you get a culture that's ambitious, fast-moving, and built on trust.

Our brands – including AutoTrader, OLX, Otomoto Property24, and more – are loved by millions. And we're backed by Prosus, one of the world's largest tech investors.

Join OLX and see how far you can go.

ABOUT THE ROLE

As a Security Operations Engineer in our team, you'll be reporting to our Head of Security and collaborating with other engineers and tech stakeholders at OLX. You will assist in designing, implementing, and promoting our security incident management processes and automation.

This role will be based in Portugal and you need to be residing in the country already.

What you will be doing:

• Support the OLX Security Operations Center (SOC) by assisting with the incident response and its lifecycle;

• Contribute to incident response training for the organization;

• Assist in integrating our platforms and services with the SOC;

• Participate in “protect, detect, and respond” engineering tasks;

• Participate in Threat Hunting tasks;

• Participate in improving our threat intelligence system;

• Help develop, improve, and manage alerts of automated escalation processes;

• Work on custom integrations, which may require development skills in Python and Bash in containerized environments such as Kubernetes;

• Collaborate with other teams to streamline security across OLX, including Tech, Privacy, and Compliance teams.

What we are looking for:

• 4-6 years of experience working in a Security;

• 4-6 years of experience with the Elastic stack for SIEM;

• Experience in Incident Response and Security Operations within a dynamic and evolving environment, including Cloud technologies (IaaS, PaaS, SaaS);

• 4-6 years of experience working with Cloud environments (AWS, GCP, Azure).Understanding of modern Security technologies, especially for customer-centric applications, WAF, SSDLC, IAM, IDS/IPS, SOAR, SIEM, MDM, XDR, and AV;

• Experience in most common Operating Systems and Networks. Knowledge of pager applications for alert management and escalation;

• Basic understanding of concepts like least privilege, agile, continuous integration and continuous delivery (CI/CD), infrastructure as code, and containerization orchestration;

• Some familiarity with Security and Privacy frameworks and best practices, such as NIST, ISO27001, CIS, PCI DSS, GDPR and NIS2.

Our benefits:

• Permanent contract

• Salary + annual bonus up to 15% of your annual gross salary

• Work with and impact all OLX websites around the world

• Train and conference budget, and free access to Udemy courses

• Health insurance and life insurance

• MacBook Pro or a Windows Dell, along with the necessary accessories to make your work comfortable

• 100% remote work (and the possibility to work from our offices in Lisboa and Porto)

Diversity, Equity and Inclusion at OLX OLX values diversity and welcomes applicants of all races, ethnicities, disabilities, ages, genders, sexual orientations, religions, backgrounds, and experiences to apply. If this role excites you, we encourage you to apply, even if you don’t meet all the requirements - you may be just the right fit for this or other opportunities with us!

OLX will process your personal data to assess your fit for the applied position. You may optionally consent to store your data for up to 12 months after the application process for consideration in future OLX roles. For more details on how your application data will be processed please check our Privacy Statement.

Verified from the employer's public Lever job collection. The provider-supplied title, description, location and application URL were normalized without inferring unstated facts.