Security Engineer

As GetGround’s first dedicated security engineer, you will own the security posture across cloud, devices, identity and SaaS. You’ll define a pragmatic security roadmap aligned with business needs and communicate risk to leadership. You will run the SIEM, craft detection rules, and lead incident response, shaping security standards and processes as the team and platform scale. This role offers broad ownership, cross-functional collaboration, and a path to build the security function from the ground up. You’ll work at the intersection of fintech, real-time data protection and regulated services to enable safe, compliant growth.

• private health and dental cover
• learning budget
• home-office setup budget
• 12 mental health days per year

• Own and continuously improve GetGround's security posture and roadmap
• Run and tune the SIEM, ensure logs reach and stay in the SIEM, and map coverage to MITRE ATT&CK
• Develop detection rules and incident response playbooks; lead incident response when needed
• Protect data across devices, endpoints, email, cloud storage and access controls
• Collaborate with Site Reliability, Product, Compliance and DPO on secure infrastructure, training and vendor assessments
• Define and maintain information security policies and ISMS; implement controls for certifications (ISO 27001) and audits
• Educate and align the organization on security requirements and risk-aware decision making

• Hands-on detection and response experience with SIEM and production alerting
• Stay-current on attacker techniques and AI-driven threats
• Deep cloud security knowledge (infrastructure, identity, networking; ideally GCP)
• Experience with EDR, anti-malware, and identity tooling across devices and SaaS
• Automation-first mindset; using AI tools to scale security operations
• Risk judgement; ability to explain trade-offs to non-specialists
• Ownership and clear communication; ability to articulate security risks to engineers, auditors, and leadership

• strong communication
• ownership
• pragmatic risk management
• SIEM
• Detection rule authoring
• MITRE ATT&CK mapping