Security Engineer

Location: Serbia, remote with optional office work in Novi Sad About Semaphore Semaphore is a remote-first software company helping engineering teams build, test, and deliver software with confidence. Our customers rely on Semaphore Cloud and our self-hosted enterprise products to run critical development workflows securely and reliably. We maintain SOC 2 Type 2 and ISO 27001:2022 compliance and are hiring a Security Engineer to own the technical side of our security program. About the role You will be the technical owner of information security across our infrastructure and internal systems. You will work closely with Engineering, Infrastructure, and our Compliance Manager to turn security and compliance requirements into practical, reliable controls. This is a hands-on role. You will investigate vulnerabilities, operate security monitoring, improve infrastructure and access controls, automate recurring work, and lead technical remediation. Our Compliance Manager owns the ISMS, policies, audit coordination, and legal or regulatory interpretation; you will own the implementation, operation, and testing of the technical controls behind them. We care more about demonstrated ownership and sound judgment than a specific number of years or a previous job title. What you will own Run the vulnerability-management lifecycle: scanning, triage, prioritization, remediation, exceptions, and verification. Operate and improve security monitoring and SIEM tooling, including alert quality, d