Security Engineer – Detection & Security Operations

About the role

Reap is building a multi‑rail financial connectivity platform and needs a pragmatic security engineer to design and operate its detection capabilities. You will lead the creation of a SIEM‑based detection infrastructure, turning regulatory requirements and threat intelligence into concrete, automated controls that protect the company 24/7.

Key responsibilities

• Evaluate, select, and deploy a SIEM platform, driving log ingestion from CrowdStrike, AWS CloudTrail, Okta, Microsoft 365 and other SaaS applications.
• Develop and maintain a library of detection rules targeting known TTPs such as Lazarus Group C2 beaconing, credential harvesting, lateral movement, cloud misconfigurations and AI data exfiltration.
• Own the alert triage and escalation process, defining SLAs, reducing false positives and coordinating hand‑off to the Crypto/IR Security Engineer.
• Operationalise threat intelligence feeds, extract IOCs/TTPs and translate them into detection rules on a regular cadence.
• Build security metrics dashboards and automated reports for the CISO board, covering mean detection time, mean response time, alert volume and coverage gaps.

Required profile

• Hands‑on experience building and operating detection infrastructure in a fast‑growing technology environment.
• Strong understanding of threat actor tactics, especially state‑sponsored groups, and ability to map them to detection logic.
• Proven ability to work cross‑functionally with engineering, risk and operations teams.

Required skills

• SIEM platform evaluation and deployment (e.g., Splunk, Elastic, or similar).
• Log collection from CrowdStrike, AWS CloudTrail, Okta, Microsoft 365 and SaaS applications.
• Detection rule authoring and tuning.
• Threat intelligence consumption and IOC extraction.
• Security metrics, dashboard creation and automated reporting.

What we offer

• Opportunity to build security detection from the ground up in a high‑impact fintech company.
• Collaboration with cutting‑edge engineering and risk teams.
• Competitive compensation and equity in a fast‑growing startup.