(Senior) IT Security Engineer

Finoa

About us: At Finoa, we are on a mission to enable institutions and individuals globally to migrate their capital into the onchain economy. We are actively engineering the platform that makes this possible. We believe great products are built by people who are eager to leave their mark on the world. We are looking for ambitious, curious, and hard-working individuals who want to learn quickly, take ownership, and help us grow in a fast-moving market. If you are excited by fintech, digital assets, AI, and the future of institutional finance, we would love to hear from you. Your mission: We are looking for a (Senior) IT Security Engineer to own and run operational security across Finoa Group. This is a hands-on role for someone who wants to be close to the technology: you'll own our SIEM, run detection and monitoring, and lead the technical response when security incidents happen. You'll own operational security as a function, working alongside our engineering teams and reporting into security leadership. As we also operate a regulated business inside our Group, you'll help make sure our day-to-day security practices meet the standards our regulated environment demands, though the formal regulatory ownership sits elsewhere. This is a Vilnius-based role. We are building a local team and an in-office culture, so we expect you to be based in Lithuania, within commuting distance of our Vilnius office, and present there on a regular basis. This is not a remote or relocation-on-hire role. In this role, you will: - Own and operate our SIEM  Design detection use cases, onboard log sources, tune out noise, and triage alerts. - Run security monitoring  Own continuous detection coverage and the escalation path from detection into incident response. - Lead incident response  Own containment, eradication and recovery for security incidents, working hand in hand with engineering. Escalate promptly to the appointed CISO / security leadership where required. - Run vulnerability management  Own scanning, triage, remediation tracking and verification day to day, and support the annual independent penetration test. - Operate threat intelligence  Track relevant feeds, maintain indicators of compromise, and keep detections current. - Own security tooling  Configure and maintain our endpoint and network security tooling (EDR, firewalls, network monitoring), in coordination with engineering. - Harden our environment  Help set and maintain baseline security-configuration and access-control standards, and drive remediation with the teams that own the systems. - Support vendor security  Contribute the technical side of security due diligence on third parties and cloud providers. - Own on-call for security incidents  Hold or share coverage for security incidents outside business hours. What you need to be successful: - 4+ years in a hands-on IT / information security role, with real depth in security operations. - Practical experience owning or operating a SIEM (design, tuning, monitoring), not just consuming its output. - Hands-on incident response experience: you've been in the room containing and recovering from real incidents. - Working knowledge of vulnerability management, endpoint and network security tooling (EDR, firewalls), and cloud security fundamentals. - Comfortable working close to engineering, in a fast-moving environment, and taking ownership of a topic end to end. - You're pragmatic about security in a regulated business: you know how to move fast while respecting the security and compliance requirements that apply. - You have the right to work in Lithuania / the EU and can be based within commuting distance of our Vilnius office for regular on-site presence. This role is not available fully remotely.  Nice to have - Experience in a regulated environment (financial services, VASP, e-money or comparable). - Cloud or platform security experience (AWS, Kubernetes). - Detection-engineering or scripting skills (e.g. Python) to automate monitoring and response. - CISSP, CISM, SANS/GIAC or other relevant certifications What’s in it for you: - Own the topic  Take end-to-end ownership of operational security across the Group, with the autonomy to shape how it's run. - Stay hands-on  A role built around the technology, not one that pulls you into pure management. - Shape a founding LT culture  Be one of the early members of our growing Vilnius team, with real influence over the security setup and culture. - Grow with the role  As the business scales, the scope grows with you, including a path towards broader security leadership. - Move fast, stay rigorous  Work in a fast-paced environment while holding the line on security and regulatory requirements. - Learn from security leadership  Work directly with experienced internal and external security leaders, in a business where security genuinely matters. Salary Band for this role The salary band for this role is €3,900 - €4,900 a month (before tax deduction). The final offer will depend on the experience and competencies of the selected candidate. The overall remuneration package consists of the salary together with other benefits. Diversity & Inclusion: Finoa is an equal opportunity employer devoted to diversity and inclusion in the workplace. We genuinely welcome and encourage applications from people of all backgrounds, cultures, genders, sexual orientations, abilities, neurodiversities, and ages. Data Privacy: Finoa processes candidate data in accordance with GDPR.