Security Engineer (Mid‑Level)

About the role

Americaneagle.com is looking for a mid‑level Security Engineer to support security operations and DevSecOps initiatives across its infrastructure, cloud, and application environments. The role provides critical daytime coverage for global systems and aligns with Bulgaria (EET/EEST) working hours.

Key responsibilities

• Monitor and triage alerts from WAF, SIEM, EDR, firewalls and cloud security tools.
• Investigate suspicious activity, perform initial response actions and hand off incidents to the U.S. team.
• Support hardening and validation of Windows and Linux systems and review configurations (services, ports, encryption, access controls).
• Assist with cloud security posture in Azure, AWS and GCP (IAM, networking, logging).
• Review, triage and validate vulnerability scan results from Tenable/Nessus and track remediation.
• Execute operational security controls aligned to PCI DSS and related frameworks, and help collect audit evidence.
• Write Bash, PowerShell and Python scripts to automate security checks, reporting and workflow integration.
• Provide primary security coverage during EMEA hours and ensure smooth handoffs to the U.S. team.
• Integrate security testing (SAST, DAST, dependency scanning) into CI/CD pipelines and work with developers to remediate OWASP Top 10 issues.

Required profile

• Hands‑on engineer comfortable balancing security operations, vulnerability management and DevSecOps.
• Mid‑level experience with a strong ability to work independently and communicate clearly across time zones.
• Willingness to provide primary coverage during EMEA business hours.

Required skills

• WAF, SIEM, EDR, firewall technologies
• Windows and Linux system hardening
• Azure, AWS, GCP basics (IAM, networking, logging)
• Tenable/Nessus vulnerability scanning
• Bash, PowerShell, Python scripting
• CI/CD pipeline integration (SAST, DAST, dependency scanning)
• Understanding of PCI DSS and OWASP Top 10