Senior Internal Security & Security Operations Engineer at UltaHost — Belgrade, Serbia

About the role

UltaHost is a global web hosting and cloud infrastructure provider. The company is seeking a Senior Internal Security & Security Operations Engineer to strengthen the protection of its employees, identities, systems and everyday business operations.

This is a hands-on technical position covering Identity and Access Management (IAM), security monitoring, Security Operations Centre (SOC) activities and incident response.

The successful candidate will be responsible for securing employee and contractor accounts, managing privileged access, protecting credentials and monitoring suspicious activity across internal applications, endpoints and cloud-based services.

The role requires someone who can implement preventive security controls, investigate real incidents, coordinate remediation and continuously improve the organisation's security practices.

You will collaborate with HR, IT, DevOps, Network, Product, Engineering, Support, Finance, Legal and other teams to reduce security risks throughout the organisation.

Responsibilities

Identity, access and credential security

• Design and maintain role-based access control (RBAC) across departments and critical systems.
• Manage multi-factor authentication (MFA), single sign-on (SSO), privileged access management (PAM), password vaults, API keys, SSH keys and other credentials.
• Secure employee and contractor onboarding, role changes, temporary access and offboarding.
• Identify and remove unnecessary, dormant, shared and excessively privileged accounts.
• Conduct regular access reviews and maintain approval records and audit evidence.

Security monitoring and incident response

• Monitor alerts from security information and event management (SIEM) tools, endpoint detection and response (EDR) systems, intrusion detection and prevention systems (IDS/IPS), authentication services and cloud platforms.
• Investigate suspicious logins, compromised accounts, malware, credential leaks, privilege abuse and unauthorised access.
• Collect evidence, contain threats, coordinate recovery and ensure corrective actions are completed.
• Maintain detection rules, incident records, escalation procedures and response playbooks.
• Lead internal security investigations and support infrastructure or product incidents involving compromised identities and credentials.

Internal systems and workforce security

• Define security requirements for employee devices, VPNs, remote access, email, code repositories and administrative systems.
• Work with HR and IT to improve employee access management and internal security investigations.
• Support security awareness, phishing prevention and the secure handling of sensitive information.

Security improvement

• Improve privileged-access coverage and the removal of access when employees change roles or leave.
• Reduce the number of dormant and unnecessarily privileged accounts.
• Improve alert response, incident-resolution times and access-review coverage.
• Strengthen security standards, procedures and operational playbooks.

Requirements

Applicants should have:

• At least 5 years of hands-on experience in internal security, IAM, SOC/security operations, incident response, IT security or a closely related field.
• Practical experience implementing RBAC, MFA, SSO, PAM, identity providers, password management and account lifecycle controls.
• Hands-on experience with SIEM, EDR, IDS/IPS, centralised logging, authentication logs, alert triage and incident case management.
• Proven ability to investigate compromised accounts, malware, credential leaks, suspicious authentication activity and unauthorised access.
• Strong knowledge of Linux access controls, SSH, VPNs, endpoints, cloud/SaaS administration, email security and remote-workforce security.
• Strong organisational and problem-solving skills.
• The ability to work with HR, IT, managers and system owners to implement and enforce security controls.
• A practical, hands-on approach to investigating incidents and reducing security risks.

Preferred experience and certifications

Experience in web hosting, cloud infrastructure, data centres, SaaS, fintech, managed security services or distributed technology environments is an advantage.

Relevant certifications may include:

• CompTIA Security+
• CompTIA CySA+
• GIAC Certified Incident Handler (GCIH)
• Microsoft SC-200
• IAM/PAM vendor certifications
• Certified Information Systems Security Professional (CISSP)

Certifications are considered beneficial, but the employer prioritises practical technical experience.

Important: This is not a policy-only or compliance-only position. Applicants must demonstrate real experience administering access controls, operating security tools, investigating logs and responding to security incidents.

Benefits

The supplied vacancy description does not specify a salary range or a detailed employee benefits package.

The role offers responsibility for internal security across a technology company, with opportunities to work on identity protection, security monitoring, incident response and operational risk reduction.

Applicants should ask UltaHost about salary, insurance, leave, work arrangements, relocation support and other benefits during the recruitment process.

How to apply

1. Review the vacancy on the UltaHost job listing on LinkedIn.
2. Visit the official UltaHost careers page for company recruitment information.
3. Prepare your CV, highlighting practical experience with IAM, SIEM, EDR, incident response, access governance and internal security operations.
4. Include relevant examples of security incidents you have investigated, controls you have implemented and improvements you have delivered.
5. Highlight any relevant certifications and experience securing cloud, SaaS, hosting or distributed technology environments.
6. Submit your application through the available recruitment link and follow the employer's instructions.

For Nigerian and other African applicants: The vacancy is listed in Belgrade, Serbia, but the work arrangement and visa sponsorship policy are not specified in the supplied description. Confirm whether applicants based outside Serbia are eligible and whether relocation or work-permit support is available before applying.

Official company careers page: https://ultahost.com/career