Jobs at Djinni

We're a multi-asset broker operating across 160+ countries — and we're growing fast in some of the world's most competitive markets. To stay ahead, we need someone who can turn our story into headlines. As our Global PR Specialist, you'll own our media presence end-to-end: building journalist relationships, securing placements in top-tier financial publications, and making sure the world's traders hear about us first.

Responsibilities

• Research global and regional financial media and secure high-value partnership terms
• Build and maintain relationships with editors and journalists to secure organic placements
• Develop and manage a content plan and media placement calendar aligned with company priorities
• Work with journalist request platforms to secure expert commentary opportunities
• Transform analysts' insights into compelling opinion pieces and place them in relevant financial media to build brand authority
• Collaborate with regional managers to align PR activity with local market needs
• Brief content teams, review materials, and oversee the full publication workflow
• Conduct regular competitor media analysis — track where they publish, what topics they cover, and identify gaps and opportunities for our own PR strategy
• Monitor brand mentions across media, track coverage metrics, and report on PR performance

Requirements

• 2+ years in B2C Public Relations
• Proven track record of securing placements in Tier 1 and Tier 2 financial publications
• Solid grasp of brand metrics: SOV, brand sentiment, branded search, non-social reach
• Hands-on experience with media monitoring and outreach tools — Brandwatch, Brand24, Cision, Muck Rack, Mailchimp, HubSpot, or similar
• Comfortable briefing and reviewing creative output (design, content) 
• Solid understanding of how brand awareness feeds into performance funnels
• Basic project management tools (Jira, Asana, Monday, or similar)
• Advanced English — written and spoken

Will be a plus

• Experience in Fintech, CFD/Forex, or Crypto company
• Experience targeting SEA, LATAM, or MENA markets 
• Basic understanding of financial regulations (CySEC, FCA, ASIC)
• Experience working with partnerships
• Experience using AI tools for content scaling or brand sentiment analysis
• Fluency in a second language (e.g., Spanish, French or other relevant to our markets)

We offer

• Join a product built around advanced trading technology and real-time analytics that set us apart in a crowded market
• Be part of a team delivering truly personalized trading solutions to clients across 160+ countries
• Tax expenses coverage for private entrepreneurs in Ukraine
• Expert support and guidance for Ukrainian private entrepreneurs
• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company's approved Public holiday list
• Medical insurance
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

About us
We develop and support hardware‑related solutions: embedded systems, network equipment, low‑level services and tools for working with real devices. You will work directly with engineers who live in C++, Python, Linux and hardware every day.

About the role
We are looking for a Trainee/Junior C++/Python Developer who wants to grow in low‑level development and work closely with hardware. This is a full‑time on‑site position in Kyiv with official employment, paid salary and the possibility of military deferment.

Responsibilities

• Develop and maintain software in C++ and Python for hardware‑related projects (embedded systems, drivers, communication protocols, test tools).
• Work with real devices in the lab: bring‑up, debugging, testing, log analysis.
• Write Python scripts for automation, infrastructure tasks and data analysis.
• Collaborate with senior engineers and follow a structured learning plan.

Requirements

• Basic knowledge of C++ (pointers, memory management, classes, structures, basic STL).
• Basic knowledge of Python (scripts, file processing, small utilities).
• Confident Linux user (terminal, basic commands, build/compile).
• Understanding of computer science fundamentals (data structures, algorithms, networking basics).
• Strong motivation to learn and develop in low‑level/hardware engineering.
• Ability and readiness to work on‑site in Kyiv (this is mandatory).

Nice to have

• Any experience with Arduino/STM32/other microcontrollers, robotics, electronics, SDR, etc.
• Pet projects or code samples on GitHub (study projects are also fine).
• Participation in competitions, hackathons or university tech projects.
• Experience with higher‑level languages (C#, JavaScript, Node.js and others) — this knowledge will also be useful in our work.

We offer

• Full‑time on‑site work in Kyiv.
• Paid position (salary range discussed individually based on skills and experience).
• Possibility of military deferment (бронь).
• Mentorship from experienced engineers, code reviews and a clear growth roadmap.
• Work with real hardware products and systems, not just typical web tasks.
• Friendly, engineering‑driven environment.

Conditions:
Full-time position, office-based (Poltava, Ukraine), long-term cooperation.

Requirements:

• 2+ years of Full-Stack development experience.
• Stack: PHP, JavaScript, MySQL, HTML5, CSS3, AJAX.
• Required: Experience working with Claude (or other AI tools) for coding/optimization.
• Required frameworks: Yii2 (preferred) or Laravel.
• Understanding of OOP, MVC, REST API, JSON, and e-commerce architecture.
• Experience with Git and maintaining existing projects.

Responsibilities:

• Support, development, and refactoring of existing websites.
• Integration with BAS / CRM / supplier APIs / payment systems.
• Optimization of performance, stability, and database operations.
• Participation in launching new web projects.

Will be a plus:

• TWIG, Bootstrap, jQuery, React, Vue, SCSS, BEM.
• Linux, VPS, CI/CD, Composer, Figma.
• Experience with high-load websites.

About the project

European product company developing a Marketing Data Integration & Analytics Platform is looking for a strong Fullstack Developer.

The platform helps clients aggregate and process data from multiple external sources through custom connectors and integrations.

Tech Stack

• Python
• Flask
• React
• Threads
• pytest-xdist

Requirements

• 4+ years of commercial Fullstack experience
• Strong Python experience
• Experience with Flask
• Experience with React
• Understanding of multithreading
• Experience with testing tools (pytest, pytest-xdist)
• Experience building integrations/connectors
• English — B2+

Nice to have

• Experience with data platforms
• Analytics or marketing domain experience

Responsibilities

• Develop backend and frontend features
• Build integrations and data connectors
• Improve platform performance and scalability
• Participate in architecture discussions
• Collaborate with distributed teams

Candidate Locations

Priority:Georgia

We are looking for a strong Media Buyer with proven experience in the Forex / Trading vertical using Facebook Ads and high-risk/scheme traffic.

We need a hands-on specialist who knows how to:

• work with Tier-1 GEOs
• handle large-scale traffic volumes
• scale profitable funnels
• deliver stable performance and ROI

Requirements:

• Proven experience in the Forex / Trading vertical
• Strong hands-on experience with Facebook Ads
• Experience working with high-risk / scheme traffic
• Understanding of scaling and optimization strategies
• Experience with Tier-1 GEOs
• Ability to provide case studies / results
• самостоятельность, ownership mindset and strong performance approach

We offer:

• Fixed salary + % from profit
• Compensation discussed individually depending on experience and results
• Open to strong buyers’ expectations
• Fully remote format
• Fast decision-making and minimal bureaucracy

About the project

Israeli agrotech product company is scaling rapidly from 60k to 250k+ users and looking for experienced backend engineers to improve infrastructure scalability and system reliability.

The team is currently focused on scalability challenges, backend optimization, and future AI-ready data collection.

Open Roles

• 1x Team Lead
• 2x Senior Backend Developers

Tech Stack

• Java
• Cassandra
• MySQL → Aurora
• Elasticsearch / OpenSearch

Requirements

• Strong commercial experience with Java backend development
• Experience designing scalable distributed systems
• Experience with high-load infrastructure
• Strong database expertise:
  • Cassandra
  • MySQL/Aurora
• Experience with Elasticsearch/OpenSearch
• Understanding of scalability and performance optimization
• English — B2+

Will be a plus

• Experience with messaging systems
• Experience with WhatsApp/Facebook APIs
• AI/analytics-oriented data architecture experience

Responsibilities

• Improve backend scalability and reliability
• Optimize infrastructure for rapid user growth
• Design scalable backend services
• Work on messaging and communication systems
• Build systems for future AI data analysis
• Collaborate with cross-functional engineering teams

Full-time • Remote • EU • Long-term

About the project

We are looking for a Flexcube System Analyst to join a Core Banking team working with Oracle FLEXCUBE (FCUBS).

This is a techno-functional role combining banking domain expertise with hands-on platform knowledge.

Requirements

• Strong understanding of core banking operations
• Hands-on experience with Oracle FLEXCUBE (FCUBS)
• Knowledge of:
  • accounting entries
  • fees & interest calculations
  • regulatory reporting
  • account lifecycle
• Understanding of FLEXCUBE architecture
• Basic technical skills:
  • SQL
  • SOAP/REST
  • XML
  • UNIX/Linux logs
• Experience in production/support environments
• Strong analytical and communication skills
• English — Upper-Intermediate+

Nice to have

• ISO 20022
• SWIFT MT/MX
• FLEXCUBE certifications

Responsibilities

• Support and enhance Oracle FLEXCUBE platform
• Participate in banking transformation initiatives
• Reduce technical debt
• Support integrations and interfaces
• Analyze system data and documentation
• Collaborate with technical and business teams

About the project

We are looking for a Senior DevSecOps Engineer to support modernization of deployment and delivery infrastructure.

There are two focus areas:

• Kubernetes / k3s migration
• Secure CI/CD pipeline architecture

The role is highly hands-on and requires strong practical DevSecOps expertise.

Requirements

• 6+ years of experience in DevSecOps / Platform Engineering
• Strong hands-on experience with:
  • Docker
  • Kubernetes
  • k3s
• Experience migrating workloads from Docker Compose to Kubernetes
• Strong experience with:
  • Azure DevOps
  • GitLab CI/CD or Jenkins
• Experience implementing:
  • SAST
  • dependency scanning
  • container scanning
  • secrets management
  • image signing
  • release gates
• Linux administration and scripting skills
• Experience with Git workflows and Agile/Scrum
• Strong troubleshooting and communication skills
• English — Upper-Intermediate+

Responsibilities

• Migrate applications from Docker Compose to Kubernetes/k3s
• Build secure CI/CD pipelines
• Improve deployment automation and release reliability
• Implement DevSecOps security controls
• Troubleshoot CI/CD and Kubernetes environments
• Collaborate with engineering and security teams
• Document solutions and best practices

We offer

• Long-term cooperation
• Fully remote work
• International environment
• High-impact infrastructure projects

Important

We consider only candidates whose recent primary experience is DevSecOps.

About the project

We’re looking for a Senior Azure Data Engineer / Tech Lead to join a long-term Data Warehouse transformation project in the insurance & finance domain.

You’ll work on enterprise-scale DWH architecture, large-volume data processing, and modern Azure-based pipelines. The role combines hands-on engineering with technical leadership responsibilities.

Requirements

• 5+ years of experience in Data Engineering
• 2+ years of hands-on experience with Azure ecosystem
• Strong SQL expertise (complex queries, optimization, procedures, functions)
• Deep experience with:
  • Azure Synapse Analytics
  • PySpark
  • Python
  • Azure SQL Managed Instance
  • ADLS Gen2
• Strong knowledge of DWH architecture and data modeling
• Experience with Kimball/Inmon methodologies
• Understanding of SCD and historical data management
• Experience designing fact/dimension tables and Gold Layer aggregations
• Strong understanding of ETL/ELT pipelines
• Experience in financial or insurance projects
• Experience with technical leadership:
  • code reviews
  • architecture decisions
  • delivery planning
• English — Upper-Intermediate (B2+) or higher

Will be a plus

• Experience with Scrum delivery environments
• Experience decomposing business requirements into technical tasks
• Azure certifications

Responsibilities

• Design and improve enterprise DWH architecture
• Build scalable ETL/ELT pipelines in Azure
• Develop data processing solutions with PySpark & Python
• Optimize SQL performance and data workflows
• Lead technical decisions and code quality processes
• Collaborate with engineering and business stakeholders
• Support data reconciliation and month-end financial processes

We offer

• Long-term project
• Modern Azure stack
• International team
• Full remote
• Stable B2B cooperation

We are looking for a dedicated Middle QA Engineer to join our team. This role combines quality assurance and customer support, requiring strong attention to detail, proactivity, excellent communication skills, and a good understanding of system functionality.
 

Responsibilities

• Test website functionality to ensure everything works as expected.
• Write and execute test cases, and document any bugs with clear details.
• Work with developers to explain issues and verify fixes.
• Understand the system’s business logic and how it should work.
• Stay on top of updates.

Requirements

• Soft Skills:
  • Strong problem-solving and analytical skills.
  • Excellent written and verbal English communication skills.
  • Ability to work under pressure and multitask.
     

What We Value

• A quick learner who enjoys understanding how systems work.
• Someone who can explain technical issues clearly to both customers and developers.
• A proactive individual with a strong work ethic.
   

Nice to Have

• Experience working on fintech projects.

We are a fast-growing company operating in the field of Affiliate Marketing.
Currently, we are looking for an experienced Business Development Manager  ( FB )  in the IGaming niche with an existing base of direct advertisers and brokers.

What We Value:

• Experience: At least 6 months as a Business Development Manager in traffic sales for a media buying team, product, or affiliate program in the Gambling industry.
• Industry Knowledge: Strong understanding of the Gambling vertical specifics.
• Personal Network: An active database of advertisers/brokers is mandatory.
• Communication Skills: Excellent ability to interact with advertisers and partners.
• Analytical Skills: Understanding of key performance metrics and ability to analyze them.
• Language: Fluent English is required.
• Personal Traits: Proactivity, results-oriented mindset, and ability to handle complex tasks quickly.
  
  Your Responsibilities:
•  
• Partner Acquisition: Search for, attract, and support new partners for traffic sales.
• Relationship Building: Establish and maintain long-term relationships with affiliate networks and brokers.
• Partner Management: Support and develop existing partnerships.
• Presentations: Present our team, conditions, and the benefits of working with us.
• Analysis: Research partner activities and analyze traffic.
• Payments Control: Monitor payments from partners.
• Reporting: Maintain regular reports on performance.
  What We Offer:
• Stability: Work in a stable, growing company that thrives under any circumstances.
• Competitive Motivation: Opportunity to monetize your efforts through a competitive salary + %.
• Payments: Timely salary payments in crypto.
• Work Schedule: Flexible working hours.
• Work Format: Remote 
• Growth Opportunities: Professional growth and freedom to make decisions.
• Team Environment: Friendly and supportive team to help you get started and grow further.

We are a leading sea moss superfood brand in the U.S., on a mission to redefine natural wellness by making it simple, accessible, and affordable for everyone, everywhere.

As we continue to expand our presence on Walmart US & Canada, we are looking for a strong Marketplace Manager & PPC Specialist to take full ownership of advertising performance and marketplace operations. This is a hands-on, growth-focused role for someone who understands how paid traffic, unit economics, and marketplace mechanics work together.

While Walmart is the primary focus, this role will also include managing Amazon PPC campaigns for Canada and contributing to future multi-marketplace growth.

Why join us?

You’ll play a key role in building and scaling our Walmart business from a strong foundation to a major growth channel. This role offers real ownership, direct impact on revenue, and the opportunity to expand your expertise across multiple marketplaces globally as the business grows.

What we’re looking for:

You are:

•   PPC-first – Hands-on experience running and optimizing marketplace ads.
•  Analytical – Comfortable with ROAS, ACoS, unit economics, and profitability metrics.
•   Adaptable – Ready to manage multiple marketplaces and learn new platforms.
•   Execution-oriented – Able to manage campaigns, test hypotheses, and scale what works.
•   Ownership-minded – Treat accounts like a business, not just a task list.

•   Collaborative – Work closely with operations, marketing, and leadership teams.

  
  What you’ll do:
  Walmart PPC Ownership (Primary Focus)

•   Own and scale Walmart Ads (US & Canada) — structure, optimization, testing, and scaling.
•   Drive improvements across key metrics (ROAS, ACoS, revenue, efficiency).

•   Develop and execute strategic PPC plans aligned with business objectives.

  Walmart Marketplace Operations

•   Manage marketplace operations: listings, feeds, assortment, and basic analytics.
•   Ensure product pages are accurate, optimized, and ready to convert traffic.
•   Implement operational improvements that support advertising performance.

Amazon PPC (Canada)

 Manage and optimize Amazon PPC campaigns for the Canadian marketplace. 
Expansion & Growth

•  Support the launch and management of PPC campaigns on additional marketplaces (UK, Japan, and others) over time.
•   Analyze cross-marketplace performance to identify scalable opportunities. 
  
  What we offer:
•   Welcome Pack and custom True Sea Moss merch to ensure you arrive like you were always meant to be here
•   Sports reimbursement to support your physical and mental health
•   Coaching & career consultations to support your personal and professional growth
•   Access to corporate English lessons to sharpen your communication skills
•   WHOOP membership to help you track your health, sleep, and recovery
•   Coworking membership if you prefer a hybrid work lifestyle
•   Sabbatical options after long-term contributions

•   Project grants for side ideas, personal initiatives, or creative experiments

  
  Ready to Build the Future of Wellness Marketplaces?

  If you’re a performance-driven marketplace specialist with a passion for Walmart, Amazon, and multi-channel e-commerce — and you have the drive to scale campaigns, optimize operations, and expand globally — this is your opportunity.

  Apply now and help us redefine what’s possible in wellness in every marketplace.

Come build something true with us.

At True Sea Moss, we’re on a mission to bring real, wild nourishment back into people’s lives. Our products are rooted in nature, clean by design, and crafted with care. As we grow, we’re not just scaling orders — we’re deepening relationships.

That’s where you come in.

We’re looking for a Head of Customer Support who doesn’t just manage tickets — you design systems that reflect care, calm, and clarity at every customer touchpoint. You know that behind every inquiry is a human being, and behind every world-class brand is a world-class support operation.

Now – who are we looking for?

You’re a people-first, process-driven leader. You can zoom out to design scalable systems and zoom in to resolve a delicate issue with nuance and empathy. You know how to build teams, train for tone, and turn everyday conversations into brand loyalty.

What You’ll Be Doing

• Lead and evolve our customer support strategy, systems, and team as we scale across markets
• Own and optimize support operations, including SLAs, workflows, ticket routing, and knowledge management
• Design and implement feedback loops that turn customer insight into product, policy, and experience improvements
• Track and report on core CX metrics (CSAT, response time, resolution rate, etc.) to inform team performance and company decisions
• Oversee our support platforms and ensure tool usage is efficient, integrated, and evolving
• Build and nurture a high-performing team — from hiring to training to coaching
• Partner with Marketing, Product, and Ops to ensure seamless communication and aligned customer touchpoints
• Lead crisis response, escalations, and sensitive communications with clarity and care

What You Bring

• Proven experience leading customer support or CX teams in a high-growth DTC or e-commerce environment
• Strong command of support platforms (e.g., Zendesk, Shopify, Klaviyo) and automation tools
• Operational mindset: you love process design, SOPs, and scalable systems
• Deep understanding of CX metrics and the ability to use data to drive continuous improvement
• Experience managing remote teams across multiple time zones
• A calm, proactive, solutions-first approach to customer challenges

Nice-to-Haves

• Familiarity with U.S. consumer expectations and CX best practices
• Experience with health & wellness, lifestyle, or mission-driven brands
• Background in customer lifecycle, retention, or post-purchase engagement strategy

Why Work With Us

We don’t treat customer support as an afterthought — it’s central to our brand and business.

You’ll help shape how we show up in the world: consistently, compassionately, and with conviction.

We listen. We care. We build things that last.

Here’s How We Back Our Words with Care

• Welcome pack and custom True Sea Moss merch to start strong
• Sports reimbursement to support your mental and physical well-being
• Additional vacation days beyond standard holidays
• Coaching & career development sessions to fuel your growth
• Corporate English lessons to help you sharpen communication
• WHOOP membership to support your health and recovery
• Coworking membership for flexibility and focus
• Sabbatical options after long-term contributions
• Travel and project grants to support personal growth and creativity

So — does this sound like your kind of work?

If you believe great customer support is about connection, consistency, and care — and you're ready to build something that truly matters — we’d love to hear from you.

Let’s make things worth remembering.

Come build something true with us.

We’re True Sea Moss, a fast-growing wellness brand built on the healing powers of one of nature’s oldest superfoods, sea moss.

No powdered promises. No pretty lies. Our products move through a complex global supply chain — and behind that flow sits structure, discipline, and crystal-clear organization.

As we scale across marketplaces, systems, marketing platforms, data warehouses, and internal tools, security is no longer optional — it’s foundational.

We’re looking for a Cybersecurity Specialist — someone exceptionally structured, risk-aware, and confident owning company-wide security, access control, and infrastructure protection end-to-end.

Now — who are we looking for?

You’re the person who sees vulnerabilities before others even notice them.

You think in permissions, identity management, audit logs, and prevention frameworks. You don’t just react to incidents — you design systems that minimize the chance of them happening.

You’re calm under pressure, precise in execution, and serious about protecting company data, systems, and people.

What You’ll Be Doing

• Own company-wide access management (Google Workspace, Slack, AWS, Shopify, BI tools, internal systems, etc.)
• Create, modify, and revoke user access based on role and security policies
• Implement role-based access control (RBAC) and least-privilege principles
• Maintain secure credential and password management systems
• Implement and enforce multi-factor authentication (MFA) across all platforms
• Secure cloud environments and monitor infrastructure permissions
• Monitor logs, detect suspicious activity, and define response protocols
• Build and maintain internal security policies and documentation
• Conduct periodic security audits and vulnerability assessments
• Develop backup and disaster recovery strategies
• Lead incident response processes when needed
• Educate the team on security awareness and best practices

What You Bring

• Proven experience in cybersecurity or information security
• Strong understanding of identity & access management (IAM) principles
• Experience securing cloud environments (AWS preferred)
• Knowledge of endpoint protection and monitoring tools
• Understanding of encryption, authentication, and network security fundamentals
• Experience implementing MFA and access governance frameworks
• Ability to create clear security policies and enforce standards
• Strong sense of ownership and discretion when handling sensitive data
• English level B2+
• Comfortable working remotely

Nice-to-Haves

• Experience working with fast-growing e-commerce or digital-first companies
• Experience preparing companies for compliance audits
• Background in cloud infrastructure security automation

Why Work With Us

• A role with real responsibility and ownership from day one
• Direct impact on how safely and confidently we scale
• High trust and autonomy
• Opportunity to build security systems from the ground up
• A team that values structure, clarity, and calm execution

Here’s How We Back Our Words with Care

• Welcome Pack and custom TrueSeaMoss merch to make sure you arrive like you were always meant to be here
• Sports reimbursement to support your physical and mental health
• Additional vacation days beyond standard holidays
• Coaching & career consultations to support your personal and professional growth
• Access to corporate English lessons to sharpen your communication skills
• WHOOP membership to help you track your health, sleep, and recovery
• Coworking membership if you prefer a hybrid work lifestyle
• Sabbatical options after long-term contributions
• Travel grants to support work-related or wanderlust trips — we believe in leaving to come back better
• Project grants for side ideas, personal initiatives, or creative experiments

So — does this sound like you?

If you’re serious about protecting systems, building secure foundations, and owning cybersecurity end-to-end — we’d love to meet you.

Location: Remote

Team: Security / Platform

About the company

Our client is a leading autonomous vehicle technology company operating at the cutting edge of self-driving software development. 

Role overview

We are not looking for a traditional SOC analyst. This role is about building detection systems, not clicking through alerts. You will work with large volumes of logs (cloud, application, network), design detection logic, and improve it over time. That includes both rule-based detection (SIEM/XDR) and data-driven approaches (statistical models, anomaly detection, simple ML where it makes sense). You should be comfortable treating logs as a data problem, not just a monitoring stream.

Important! This is not a role where you:

• sit in SIEM all day clicking alerts
• blindly add rules
• overcomplicate things with ML

This is a role where you: build detection systems that work in practice.

What you'll be doing

Detection & analytics

• Build and maintain detections across:
• application logs (auth, APIs, business logic abuse)
• cloud activity (CloudTrail, IAM, infrastructure changes)
• network telemetry (DNS, proxy, firewall, NetFlow)
• Work directly with data in platforms like Elasticsearch / Splunk / similar
• Write and tune detection logic (queries, correlation rules)
• Reduce noise — expect to spend time fixing false positives, not just adding new rules.

Working with data (this is a big part of the job)

• Build pipelines for:
• log ingestion
• normalization
• feature extraction
• Work with streaming or batch pipelines (Kafka / queues / scheduled jobs)
• Turn raw logs (e.g. CloudTrail) into structured data usable for detection.

Anomaly detection / ML (practical, not theoretical)

• Apply simple models where they add value (e.g. One-Class SVM or similar approaches)
• Focus on:
• behavior baselining
• anomaly scoring
• Tune models based on real output (false positives matter more than theory) 
• If ML does not improve signal — don't use it.

Automation & response

• Build response playbooks for common cases
• Automate where it actually saves time (not for the sake of it)
• Integrate with SOAR or write lightweight orchestration
• Improve:
• detection speed
• response consistency.

AI usage (realistic expectations)

• Use LLMs for:
• alert enrichment
• investigation summaries
• internal tooling
• Not building an "AI security platform"
• Focus on practical gains, not hype.

Threat hunting

• Run targeted hunts based on hypotheses
• Use internal data + external signals

• Identify gaps in logging and detection.

   

Requirements

• Solid experience with SIEM (Elastic, Splunk, Sentinel, etc.)
• Strong understanding of:
• cloud activity (especially AWS logs and IAM)
• network basics
• modern application behavior (APIs, auth flows)
• Comfortable working with large datasets (not afraid of raw logs)
• Python or similar for data processing

• Experience with automation (SOAR or custom scripts).

   

Nice-to-have (but not critical)

• Experience applying ML to logs (even simple models is enough)
• Familiarity with LLMs in tooling (not research)
• Experience with data pipelines (Kafka, Spark, etc.)

• MITRE ATT&CK mapping

   

What will make you effective here

• You don't trust alerts blindly
• You care about signal quality, not number of detections
• You can debug why a detection is noisy or useless
• You understand systems, not just tools

• You prefer building something once instead of repeating manual work.

   

How success looks like

• Fewer false positives
• Better visibility across systems
• Faster investigations
• Less manual work in SOC
• Detections that actually catch real issues