Mid Security Engineer

About Us

HFM is an internationally acclaimed multi-asset broker, delivering cutting-edge trading tools, platforms, and conditions to traders worldwide. We are committed to innovation, transparency, and excellence in the financial markets.

As we continue to expand, we are seeking a driven and strategic Mid Security Engineer to join our team.

Responsibilities :

• Monitor, maintain, and optimize security solutions to detect, investigate, and prevent unauthorized activities and emerging threats.

• Evaluate, deploy, configure, and manage security technologies, including EDR, SIEM, DLP, email security, and threat prevention solutions.

• Investigate security alerts and incidents, perform root cause analysis, and improve incident response procedures.

• Monitor emerging threats, vulnerabilities, attack techniques, and security technologies, identifying weaknesses and recommending mitigations.

• Implement security controls across endpoints, servers, networks, and cloud environments, following security standards and best practices.

• Develop and optimize security policies, detection rules, and automated responses to enhance threat visibility and reduce false positives.

• Support network segmentation, zero-trust architecture, endpoint hardening, vulnerability management, security automation, and information security strategy development.

• Resolve security-related technical issues by collaborating with Infrastructure, Network, DevOps, Cloud, and IT teams, and support compliance with ISO 27001, DORA, GDPR, and CySEC, where applicable.

Requirements

Required Skills & Experience :

• Minimum of 4 years of hands-on experience in similar role.

• Strong knowledge of cybersecurity principles, security architectures, threat detection, and incident response.

• Hands-on experience implementing, managing, and troubleshooting enterprise security solutions.

• Experience with Endpoint Detection and Response (EDR), Antivirus, HIPS, SIEM, and Data Loss Prevention (DLP).

Must Have:

• Hands-on experience investigating security incidents, analyzing alerts, identifying threats, and coordinating remediation activities.

• Experience developing security rules, detection policies, and prevention mechanisms, with knowledge of MITRE ATT&CK, LoLBins, ransomware, brute-force attacks, and password spraying.

• Experience in malware investigation, troubleshooting, and security assessments.

• Strong knowledge of Windows, Active Directory, and Linux, with familiarity in Python, Bash, or PowerShell for security automation.

Nice to Have:

• Hands-on experience securing cloud environments, particularly AWS, Azure, or Google Cloud.

• Knowledge of cloud security architectures, identity management, network security, and cloud-native security services.

• Experience with SOAR platforms, security automation, and automated incident response playbooks.

• Relevant cybersecurity certifications, including OSCP, OSCP+, SANS GIAC (GCIH, GCIA, GCFA), CEH, or CompTIA Security+.

• Cloud security certifications such as AWS Certified Security – Specialty or CCSP.

• Experience in financial services or other highly regulated, security-sensitive environments.

Resumes must be submitted in English. Applicants must be eligible or have legal authorization to work in the country where the position is based.

Benefits

• Hybrid

Work Model (2 days working from home)

• Comprehensive

Health Insurance (from day one!)

• 21

days of Annual Leave

• Birthday

Leave

• Referral

Bonus Program

Additional Support

• Visa

Sponsorship and Relocation Assistance (If applicable)

​

Sounds like you? Let’s write the next chapter together!

​

All Applications will be handled with the strictest confidentiality.