Helmes
Security Engineer (Threat Detection) - Helmes - Software Development Company
HybridEstonia
Our Take
Detect threats and automate security operations across Microsoft Sentinel and Defender platforms.
What you’ll do
- Threat detection, hunting, and incident response across Microsoft Sentinel, Defender.
- Security analytics using KQL queries and custom detection rules.
- Forensic investigations spanning endpoints, cloud infrastructure, and network traffic.
- Designing security architecture in collaboration with development teams.
What they’re looking for
- SOC or security engineering experience
- Knowledge of AD/Entra, Azure, SIEM platforms, EDR tools
- Strong scripting ability (KQL, Python, PowerShell, Bash)
- Experience with security automation and Logic Apps/playbooks
What you get
- Fully transparent salary and career model
- Healthy work-life balance with flexible hybrid working options
- Supplementary health insurance
- Opportunities to engage in sports activities
Skills & Focus Areas
- SOC
- security engineering
- AD/Entra
- Azure
- SIEM platforms
- EDR tools
- KQL
- Python
- PowerShell
- Bash
- security automation
- Logic Apps
As posted by Helmes
Security Engineer (Threat Detection) - Helmes - Software Development Company Deadline 31.07.2026 At Helmes, our lean security team protect s software development operation s across Estonia, Latvia, Lithuania, and Poland — and we’re now looking for a Security Engineer to join us. You’ll work closely with the CISO while having the freedom to manage your own work and priorities. Apply Now We’d love to hear from you if you have: SOC or security engineering experience Knowledge of AD/Entra, Azure, SIEM platforms, EDR tools Strong scripting ability (KQL, Python, PowerShell, Bash or similar) Experience with security automation and Logic Apps/playbooks Clear technical communication Strong self-management and autonomous work capabilities Fluent Estonian and English It’s useful if you also have experience with Windows, MacOS and Linux security features and architecture, NDR platforms, OAuth/OIDC security, and software development. If you don’t meet every requirement, we still encourage you to apply — we value potential, curiosity, and a willingness to grow. Your contribution to the team: Threat detection, hunting and incident response across Microsoft Sentinel, Defender and other platforms Security analytics – KQL queries, custom detection rules, automation workflows Forensic investigations spanning endpoints, cloud infrastructure, and network traffic Security architecture design and development Collaboration with development teams on application security What is in it for you? Small team, high impact and visibility Minimal bureaucracy, agile decisions Lots of freedom and responsibility Varied work – mix of operational security and strategic projects Fully transparent salary and career model Healthy work-life balance with flexible hybrid working options Supplementary health insurance Opportunities to engage in a variety of sports, including volleyball, football, and badminton, along with sports compensation Participating in enjoyable team events, hikes, and other engaging activities at Helmes e.g. Helmes Summer Days , New Year Gala Deadline 31.07.2026 Please note that recruitment for this position is an ongoing process and may close early. Join Helmes! Find out more about us on social media Other open positions Tallinn, Estonia Head of Workplace Experience Security Analyst Lithuania .NET/Fullstack Engineer Riga, Latvia HR Business Partner Riga, Latvia Helmes Latvia vacancies Career in Lithuania Want to join our team in Lithuania?