• Workstyle: This is a remote position; however, to be eligible for hire, candidates must reside within the Czech Republic, with in-office presence for onboarding.
• Reports to: Director of Infrastructure Technology
• Travel Expectations: Minimal travel; will be determined by business needs and may include occasional trips for key meetings, collaboration opportunities, or area-connected events.
• Physical Requirements/Demands: This is a primarily sedentary, home-based role that requires the ability to remain in a stationary position for extended periods while working at a computer. The role involves regular use of standard office equipment, such as a computer, keyboard, mouse, and telephone. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position.

What we’re looking for

Custom Ink is seeking an experienced and technically adept Senior Security Engineer to help lead our efforts in defending the integrity, availability, and confidentiality of our systems and data. You will provide hands-on security expertise while collaborating with engineering and infrastructure teams to proactively reduce risks and build a stronger security culture. We’re looking for someone who combines deep technical knowledge with communication and leadership skills to guide improvements and respond to emerging threats.

Qualifications include

• 5–10+ years of progressive experience in security engineering, including threat detection, response, and infrastructure hardening
• Proven experience in incident response, vulnerability management, and compliance readiness (e.g., SOC 2, PCI, NIST)
• Deep understanding of modern cloud infrastructure, especially AWS (certifications preferred)
• Hands-on experience with SIEMs, EDR platforms, IAM tools, IDS/IPS, firewalls, and encryption protocols
• Strong experience implementing DevSecOps practices, automated patching, and secure CI/CD pipelines
• Familiarity with penetration testing methodologies and tools
• Experience with network, endpoint, and application security architectures
• Strong scripting or programming skills for automation (e.g., Python, Bash, or similar)
• Excellent written and verbal communication skills with the ability to explain technical concepts to non-technical stakeholders
• Bachelor’s degree in Computer Science, Information Security, or related field; certifications such as CISSP, OSCP, or AWS Security are a plus

What you’ll do

• Design and implement security solutions across network, infrastructure, and application layers
• Proactively identify and mitigate risks through vulnerability management and system hardening
• Lead security incident detection, triage, containment, and root cause analysis
• Own and evolve security tooling including SIEM, EDR, WAF, IAM, and DevSecOps platforms
• Collaborate with engineering teams to embed secure-by-design principles in systems and services
• Automate security controls, patching, and compliance processes to improve scale and responsiveness
• Develop and maintain incident response plans and runbooks
• Support internal and external audit efforts, ensuring compliance with frameworks like SOC 2 and PCI
• Educate and mentor team members and engineering partners on security best practices
• Stay ahead of emerging security technologies, threats, and compliance trends

How you’ll be measured

• Timeliness and effectiveness of incident response and mitigation
• Reduction in vulnerability exposure across infrastructure and applications
• Security posture improvements through automated controls and detection capabilities
• Successful integration of security into development and deployment workflows
• Contribution to audit preparedness and compliance with industry standards
• Cross-functional collaboration and influence with engineering and IT stakeholders
• Quality and impact of security documentation, architecture, and knowledge sharing

How you’ll make a difference

As a Senior Security Engineer at Custom Ink, you’ll play a mission-critical role in protecting our technology and customer data. You'll lead the charge on evolving our infrastructure to meet modern threats, guiding secure development practices, and strengthening operational defenses. Your expertise will be central to enabling innovation while maintaining trust, resilience, and compliance across all layers of the business.

Compensation

We are committed to providing pay transparency and equitable compensation.

• For this position, the daily rate range is 5,300-6,300 CZK. Placement within the range is determined by a variety of factors, including but not limited to: knowledge, skills, years & depth of experience, and equity with internal team members.

The perks!

• Contractor Wellness: Multisport card and access to mental health wellness program with Soulmio.
• Professional Development: Grow your career with access to training programs, English classes, certifications, and tuition assistance.
• Friendly Team Environment: A beautiful office in Karlín with a full fridge, amazing coffee, and an Xbox. Every Tuesday, company breakfast, occasional lunches and dinners, and regular team buildings (game nights).