Cybersecurity Engineer

Gorgias is a leading CX platform empowering e-commerce brands to grow through AI-powered customer experience. We are trusted by over 15,000 merchants worldwide, from small independent shops to large e-commerce brands.

Our platform offers seamless integrations with Shopify (100+) and streamlined onboarding processes. Gorgias provides a unified platform for managing customer support across every channel.

We automate up to 60% of support tasks, allowing agents to focus on high-value conversations and driving sales. Additionally, we offer purpose-built marketing tools to convert shoppers into customers, boosting GMV.

This role involves contributing to our security program as a Cybersecurity Engineer - Cloud Infrastructure, working closely with our SRE team and engineering leadership.

You will implement and manage essential security tools and processes, focusing on protecting critical infrastructure and ensuring system reliability.

This position is crucial in setting up proactive security measures and responding to incidents, making a tangible impact on Gorgias' ability to meet enterprise-grade security standards.

• Contribute to the development of a robust security framework, integrating security practices and tools into existing and emerging platforms, including Kubernetes and multi-region deployments.
• Collaborate closely with the SRE and Infrastructure teams to ensure comprehensive monitoring, threat detection, and alerting capabilities.
• Improve the Security Information and Event Management (SIEM) system to enhance comprehensive monitoring, threat detection, and alerting.
• Develop automated detection and mitigation playbooks for common security incidents, such as DDoS attacks, phishing, and other infrastructure-related threats.
• Conduct and evaluate attack simulations and real-time incident management to improve detection and mitigation rates.
• Champion security best practices within the engineering organization, promoting secure coding practices, incident response protocols, and real-time threat mitigation strategies.

• 5+ years of experience in a security engineering or infrastructure security role, preferably within a high-growth SaaS or eCommerce environment.
• Proven expertise in infrastructure security, DDoS mitigation, and SIEM/SOC platforms.
• Strong knowledge of cloud environments, particularly in Kubernetes/GKE, Postgres clusters, and networking protocols.
• Hands-on experience with automation tools and Infrastructure as Code (IaC), such as Terraform.
• Proficiency in scripting languages like Python or Golang for automating security processes and incident responses.

• 5 weeks paid vacation plus 2 weeks remote work time
• Paid sick leave
• 6 weeks full remote work per year
• Paid parental leave (16 weeks)
• 50% public transportation reimbursement
• MacBook Pro provided
• Personal credit card for lunches
• Private health insurance
• Up to €700 for workstation setup at home
• Up to €2000 for learning material and wellness support per year