Mid Security Engineer

About Us

HFM is an internationally acclaimed multi-asset broker, delivering cutting-edge trading tools, platforms, and conditions to traders worldwide. We are committed to innovation, transparency, and excellence in the financial markets. As we continue to expand, we are seeking a driven and strategic Mid Security Engineer to join our team.

Responsibilities

Monitor, maintain, and optimize security solutions to detect, investigate, and prevent unauthorized activities and emerging threats. Evaluate, deploy, configure, and manage security technologies, including EDR, SIEM, DLP, email security, and threat prevention solutions. Investigate security alerts and incidents, perform root cause analysis, and improve incident response procedures.

Monitor emerging threats, vulnerabilities, attack techniques, and security technologies, identifying weaknesses and recommending mitigations. Implement security controls across endpoints, servers, networks, and cloud environments, following security standards and best practices. Develop and optimize security policies, detection rules, and automated responses to enhance threat visibility and reduce false positives.

Support network segmentation, zero-trust architecture, endpoint hardening, vulnerability management, security automation, and information security strategy development. Resolve security-related technical issues by collaborating with Infrastructure, Network, DevOps, Cloud, and IT teams, and support compliance with ISO 27001, DORA, GDPR, and CySEC, where applicable.

Requirements

Minimum of 4 years of hands-on experience in similar role. Strong knowledge of cybersecurity principles, security architectures, threat detection, and incident response. Hands-on experience implementing, managing, and troubleshooting enterprise security solutions. Experience with Endpoint Detection and Response (EDR), Antivirus, HIPS, SIEM, and Data Loss Prevention (DLP).

Must Have: Hands-on experience investigating security incidents, analyzing alerts, identifying threats, and coordinating remediation activities. Experience developing security rules, detection policies, and prevention mechanisms, with knowledge of MITRE ATT&CK, LoLBins, ransomware, brute-force attacks, and password spraying.

Experience in malware investigation, troubleshooting, and security assessments. Strong knowledge of Windows, Active Directory, and Linux, with familiarity in Python, Bash, or Power. Shell for security automation.

Nice to Have

Hands-on experience securing cloud environments, particularly AWS, Azure, or Google Cloud. Knowledge of cloud security architectures, identity management, network security, and cloud-native security services. Experience with SOAR platforms, security automation, and automated incident response playbooks. Relevant cybersecurity certifications, including OSCP, OSCP+, SANS GIAC (GCIH, GCIA, GCFA), CEH, or CompTIA Security+.

Cloud security certifications such as AWS Certified Security – Specialty or CCSP. Experience in financial services or other highly regulated, security-sensitive environments. Resumes must be submitted in English. Applicants must be eligible or have legal authorization to work in the country where the position is based.

Benefits

Hybrid Work Model (2 days working from home) Comprehensive Health Insurance (from day one!) 21 days of Annual Leave Birthday Leave Referral Bonus Program Additional Support Visa Sponsorship and Relocation Assistance (If applicable) Sounds like you? Let’s write the next chapter together! All Applications will be handled with the strictest confidentiality.