Security Engineer

About Us: Prime Insights is a Sweden-based technology company reaching millions of diverse users through our proprietary Market Research Panel. Our innovative technology supports our international community and gives our members a world-class survey taking experience. Our mission is to match our authentic members to our client's market research surveys which allows our clients to achieve meaningful insights from the sample we deliver via online quantitative research. Members are rewarded with meaningful incentives, ensuring their sincere participation.

Your Role: As our first dedicated Security Engineer, you will be instrumental in defining and running our security operations within the Technical Operations organization, reporting directly into the CTO's org. This is a hands-on, high-ownership role across two engineering organizations, internal departments, and external partners. You will own security architecture, vulnerability scanning, cloud posture, and access automation—handling day-to-day provisioning alongside our team while building automated, sound processes for the long term.

Your Responsibilities:

• Security Architecture & Engineering: Own security design across services built on PHP/Laravel, MariaDB, ClickHouse, Kafka, RabbitMQ, and Valkey; build secure-by-default paths for APIs and MCPs.
• Vulnerability Management: Manage DAST, dependency, container, and infrastructure scanning; tune tooling to minimize noise, triage findings with leads, and drive remediation.
• Cloud & Platform Security: Harden cloud infrastructure and Kubernetes clusters, managing secrets, image security, and supply-chain hygiene alongside DevOps.
• Identity & Access Management: Handle day-to-day access requests, strengthen SSO/OAuth/OIDC and SCIM-based provisioning, and run periodic offboarding audits and access reviews.
• Corporate Security & Awareness: Raise the baseline for organizational tools, endpoints, and phishing resilience through practical team training.
• Detection, Response & Compliance: Build security logging on our observability stack, lead technical incident response, conduct vendor assessments, and supply technical evidence for GDPR and compliance.

Your Skills:

• 3+ years of hands-on experience in security engineering, or backend/SRE roles with a deep security focus
• Strong hands-on experience with AWS/On-prem and Kubernetes security in production environments
• Proven track record operating scanning pipelines (e.g., Nuclei, Trivy, ZAP) and converting output into actionable remediation
• Solid scripting and automation skills using Go, Python, or PHP
• Hands-on experience with identity infrastructure including SSO, OAuth/OIDC, SCIM, and Google Workspace administration
• Ability to independently own a security function and drive projects forward across multiple teams
• Excellent communication and influencing skills in English, both written and verbal

Nice to Have:

• Experience with high-traffic consumer products and handling high-volume data
• Incident response leadership experience
• Exposure to compliance frameworks such as ISO 27001 or SOC 2
• Practical experience managing data privacy and GDPR requirements

Our Offer:

• Competitive salary commensurate with your experience and expertise;
• Regular salary reviews to ensure your compensation reflects your contributions;
• Collaborate with an international team on diverse and engaging projects;
• Enjoy a safe and stable work environment with ample opportunities for growth and development;
• AI enablement budget to support innovation and efficiency.

❗Important: We are not considering freelancers or engineers working on multiple projects simultaneously. This is a full-time position for a dedicated professional who’s ready to fully commit to a single product ecosystem and contribute meaningfully to its long-term success.