We are looking for a Senior Security Engineer to join our team in Lithuania. The core focus of this role is to help identify gaps in the CUJO AI Security Platform and provide a path to remediation through research, investigation, and proof of concept (POC) development.

Responsibilities

• Identify gaps in the CUJO AI Security Platform and drive remediation through research, investigation, and proof-of-concept development.
• Build, tune, and improve SIEM rules and detections, supporting real-time security monitoring efforts.
• Conduct end-to-end cybersecurity incident analysis and lead or assist in response activities.
• Develop and maintain playbooks and runbooks for consistent, high-confidence incident response.
• Design and build prototypes, honeypots, or research infrastructure to analyze emerging threats and attack campaigns.
• Collaborate with machine learning and security teams to improve detection content, attack analysis tools, and threat modeling.
• Contribute to threat monitoring strategies and detection logic to continuously enhance the platform’s detection and response capabilities.
• Monitor threats and attack patterns using SIEM tools, supporting continuous improvement of the platform’s detection and response capabilities.

Requirements

What We’re Looking For:

• Proficiency in one or more scripting languages.
• Experience in developing research infrastructure and tools in Python.
• Low-level understanding of security principles, theories, and attacks.
• Ability to work autonomously in a less structured start-up type environment.
• Ability to efficiently collaborate with cross-functional teams.
• Strong team player with a can-do attitude and a drive to take ownership and initiative.
• Hands-on experience in security monitoring, incident response, and continuous defense improvement.
• Strong expertise with SIEM tools, including experience in writing, tuning, and improving detections.
• Experience with end-to-end cybersecurity incident analysis and forensic investigations, such as log analysis and timeline reconstruction.
• Proven ability to build and maintain playbooks and runbooks to ensure a consistent and effective response to security incidents.
• Solid understanding of security principles, attack vectors, and defenses.
• Experience working with cross-functional teams to apply policies, procedures, and security best practices, and translate regulatory requirements (e.g., ISO 27001, SOC 2) into practical workflows.
• Ability to work autonomously and take ownership in a dynamic, fast-paced environment.

What Will Make You Stand Out:

• Bachelors/Masters/PhD in Computer Science/Engineering/Security with the Tactics, Techniques, and Procedures (TTPs) of malicious actors.
• 10+ years expertise in real attack scenarios including phishing and spam campaigns, vulnerability exploitation, and botnets.
• Ability to research, author, and present technical security concepts.

Benefits

• Flexible Work – Hybrid or fully remote options based on your location.
• Team Gatherings – Annual company events and team activities.
• Career Growth – Training bonuses for AWS certifications and other learning opportunities.
• Performance Bonuses – Company-wide annual bonus program.
• Referral Rewards – Earn up to €1,000 for referring new hires.

At CUJO AI, we value innovation, collaboration, and continuous improvement. Join us and work on technology that makes the internet safer!