.*
findatechjob
Prima

Incident Response Security Engineer

Prima · IT · 292d ago
Remote Python
Apply now

About the role

Are you looking for a new challenge?
Fancy helping us shape the future of motor insurance?
Prima could be the place for you. 

Since 2015, we’ve been using our love of data and tech to rethink motor insurance and bring drivers a great experience at a great price. Our story began in Italy, where we’ve quickly become the number one online motor insurance provider. In fact, we’re trusted by over 5 million drivers. And now we’re expanding to help millions more drivers in the UK and Spain.

To help fuel that growth, we need a Security Engineer focused on Incident Response to join our Security Team. 
 
The Engineering Department is the beating heart of Prima. You’ll be joining over 350 engineers across software development, infrastructure, operations and security: fueled by curiosity, experimentation and collaboration, you’ll help deliver scalable, impactful solutions that shape the future of insurance.
 
Excited to make an impact? Here are the details

What you'll do

  • Automate security alerts triage and Incident Response playbooks.
  • Strengthen EDR/XDR and DLP configurations.
  • Define new automatic detections of security events in our SIEM.
  • Improve automatic enrichment and integration with SIEM/SOAR.
  • Define runbooks to be used during Incident Response.
  • Collaborate on all the activities of the Security Engineering team.
    •  

    What we're looking for

  • Hands-on experience with SIEM and SOAR platforms.
  • Hands-on experience with Crowdstrike or similar EDR/XDR solutions.
  • Knowledge of AWS or similar cloud providers.
  • Proficiency in scripting and programming languages (e.g., Python, Rust).
  • Availability in on-call shifts to guarantee 24x7 security support.
  • Strong English communication skills, with the ability to collaborate effectively with multidisciplinary teams.
  • Self-motivated and proactive, with strong problem-solving skills and accountability for deliverables.

    • Nice-to-have

  • Experience in using CI/CD systems and Infrastructure as Code (e.g., Python Pulumi).
  • Knowledge of Cloud Control Frameworks (e.g. CIS, CSA, NIST).
  • Web and mobile application security knowledge.
  • Relevant certifications such as GCIH, CIH, GREM, OSCP or similar are preferred.
  • Experience in security research, bug bounty programs or CTFs.
    •  

    Tech stack

    Python
    Arrangement Remote
    Location IT
    Posted 292d ago
    .*
    findatechjob

    Tech jobs straight from company career pages. No recruiters, no middlemen, no spam.

    Company
    About
    © 2026 findatechjob · Logos provided by Logo.dev