About
Unlimit is a global fintech ecosystem that provides payment processing, multi-currency business accounts, BaaS, and crypto gateways through a single platform. It is transforming its infrastructure into AI-native financial infrastructure for businesses and AI agents.
Responsibilities
•Strengthen and continuously improve infrastructure security controls across the global technology environment
•Operate and enhance Security Operations, including monitoring, alert triage, incident investigation, and response
•Develop and maintain detection engineering capabilities, SIEM correlation rules, detection use cases, log analysis, and security monitoring integrations
•Conduct threat hunting and use cyber threat intelligence to identify emerging threats and improve defenses
•Lead technical incident response, including investigation, containment, remediation, and post-incident improvements
•Manage infrastructure vulnerability assessment and remediation, including scanning, prioritization, tracking, and validation
•Implement and improve security hardening and configurations across servers, endpoints, networks, and cloud environments
•Develop and maintain security controls across AWS, Kubernetes, and containerized environments
•Own and optimize endpoint protection and detection capabilities, including EDR/XDR
•Contribute to network security, directory security, and infrastructure security architecture reviews
•Administer, integrate, and improve SIEM, EDR/XDR, vulnerability management, and infrastructure security platforms
•Coordinate external penetration testing within the infrastructure security scope, validate findings, and support remediation
•Support IT and Information Security audits through evidence collection, technical control validation, and remediation of identified gaps
•Collaborate with Infrastructure, DevOps, Engineering, and Application Security teams on practical, scalable security improvements
•Design, develop, and maintain AI-powered and agentic security automation for Cyber Security operations
•Build autonomous and semi-autonomous workflows for alert triage, investigation, enrichment, and response
•Develop AI-assisted detection engineering, threat hunting, and threat intelligence processing
•Automate vulnerability analysis, risk-based prioritization, and remediation workflows
•Build security integrations, automation scripts, and internal tools using Python, APIs, and AI development frameworks
•Use LLMs and agentic development tools, including Claude, to improve security operations efficiency and engineering productivity
•Ensure AI-powered security workflows include appropriate validation, access controls, and human oversight for sensitive or high-impact actions
Requirements
•6+ years of hands-on engineering experience, including at least 4 years in Cyber Security, Infrastructure Security, or Security Operations
•Strong background in IT infrastructure, systems engineering, cloud engineering, or platform engineering
•Experience implementing and maintaining infrastructure security controls in complex production environments
•Hands-on experience with Security Operations, SIEM, detection engineering, incident response, and threat hunting
•Strong understanding of cyber attack tactics, techniques, and procedures (TTPs), including MITRE ATT&CK
•Practical experience with EDR/XDR, vulnerability management, and security monitoring technologies
•Understanding of Linux, networking, operating system security, and infrastructure hardening
•Experience securing AWS environments, Kubernetes clusters, and containerized workloads
•Strong Python development skills and experience building security automation, integrations, and internal tools
•Experience developing AI-powered and agentic solutions, including LLM integrations, tool orchestration, autonomous workflows, and AI-assisted automation
•Experience integrating security controls and automation into infrastructure and DevOps workflows
•Ability to independently investigate complex security issues, identify root causes, and implement technical solutions
•Strong analytical and problem-solving skills, with an engineering-first approach to security
•Ability to work independently and collaborate effectively with Infrastructure, DevOps, Engineering, and Security teams
Nice to have
•Experience in fintech, financial services, payments, or large-scale regulated e-commerce
•Experience building AI-powered SOC capabilities or autonomous security operations workflows
•Experience developing custom detection rules, security integrations, or open-source security tools
•Knowledge of infrastructure security architecture and secure cloud design
•Experience with offensive security techniques, infrastructure penetration testing, or adversary simulation
•Relevant security, cloud, or engineering certifications
Conditions
Not specified in the posting.
