(Senior) IT Security Engineer

At Finoa, we are on a mission to enable institutions and individuals globally to migrate their capital into the onchain economy. We are actively engineering the platform that makes this possible.

We believe great products are built by people who are eager to leave their mark on the world. We are looking for ambitious, curious, and hard-working individuals who want to learn quickly, take ownership, and help us grow in a fast-moving market.

If you are excited by fintech, digital assets, AI, and the future of institutional finance, we would love to hear from you.

We are looking for a (Senior) IT Security Engineer to own and run operational security across Finoa Group. This is a hands-on role for someone who wants to be close to the technology: you'll own our SIEM, run detection and monitoring, and lead the technical response when security incidents happen.

You'll own operational security as a function, working alongside our engineering teams and reporting into security leadership. As we also operate a regulated business inside our Group, you'll help make sure our day-to-day security practices meet the standards our regulated environment demands, though the formal regulatory ownership sits elsewhere.

This is a Vilnius-based role. We are building a local team and an in-office culture, so we expect you to be based in Lithuania, within commuting distance of our Vilnius office, and present there on a regular basis. This is not a remote or relocation-on-hire role.

• Own and operate our SIEM Design detection use cases, onboard log sources, tune out noise, and triage alerts.

• Run security monitoring Own continuous detection coverage and the escalation path from detection into incident response.

• Lead incident response Own containment, eradication and recovery for security incidents, working hand in hand with engineering. Escalate promptly to the appointed CISO / security leadership where required.

• Run vulnerability management Own scanning, triage, remediation tracking and verification day to day, and support the annual independent penetration test.

• Operate threat intelligence Track relevant feeds, maintain indicators of compromise, and keep detections current.

• Own security tooling Configure and maintain our endpoint and network security tooling (EDR, firewalls, network monitoring), in coordination with engineering.

• Harden our environment Help set and maintain baseline security-configuration and access-control standards, and drive remediation with the teams that own the systems.

• Support vendor security Contribute the technical side of security due diligence on third parties and cloud providers.

• Own on-call for security incidents Hold or share coverage for security incidents outside business hours.

• 4+ years in a hands-on IT / information security role, with real depth in security operations.

• Practical experience owning or operating a SIEM (design, tuning, monitoring), not just consuming its output.

• Hands-on incident response experience: you've been in the room containing and recovering from real incidents.

• Working knowledge of vulnerability management, endpoint and network security tooling (EDR, firewalls), and cloud security fundamentals.

• Comfortable working close to engineering, in a fast-moving environment, and taking ownership of a topic end to end.

• You're pragmatic about security in a regulated business: you know how to move fast while respecting the security and compliance requirements that apply.

• You have the right to work in Lithuania / the EU and can be based within commuting distance of our Vilnius office for regular on-site presence. This role is not available fully remotely.

 Nice to have

• Experience in a regulated environment (financial services, VASP, e-money or comparable).

• Cloud or platform security experience (AWS, Kubernetes).

• Detection-engineering or scripting skills (e.g. Python) to automate monitoring and response.

• CISSP, CISM, SANS/GIAC or other relevant certifications

• Own the topic Take end-to-end ownership of operational security across the Group, with the autonomy to shape how it's run.

• Stay hands-on A role built around the technology, not one that pulls you into pure management.

• Shape a founding LT culture Be one of the early members of our growing Vilnius team, with real influence over the security setup and culture.

• Grow with the role As the business scales, the scope grows with you, including a path towards broader security leadership.

• Move fast, stay rigorous Work in a fast-paced environment while holding the line on security and regulatory requirements.

• Learn from security leadership Work directly with experienced internal and external security leaders, in a business where security genuinely matters.

Salary Band for this role

The salary band for this role is €3,900 - €4,900 a month (before tax deduction).

The final offer will depend on the experience and competencies of the selected candidate. The overall remuneration package consists of the salary together with other benefits.

Finoa processes candidate data in accordance with GDPR.