Jobs at Ontinue

Own the roadmap and continuous improvement of Ontinue’s AI-powered MXDR service. Translate customer, market, and technical feedback into product requirements, user stories, priorities, and service improvements. Partner with Product, Sales, Engineering, Security Operations, Customer Success, and customers. Lead requirements engineering, customer discovery, documentation, stakeholder alignment, go-to-market support, and monitoring of cybersecurity, MDR, SOC, Microsoft Security, and AI-security trends.

Develop and maintain cloud-native applications and integrations on Azure using .NET, Power Platform, and related services. Design scalable, fault-tolerant architectures, REST APIs, event-driven microservices, automation pipelines, monitoring, and observability solutions. Collaborate with cybersecurity and detection engineering teams to improve SOAR capabilities using Microsoft security products. Perform code reviews, resolve escalated incidents, support on-call operations, and contribute to API governance, security, and platform reliability.

Build and evolve backend services, APIs, event-driven workflows, and customer-facing platforms using .NET, C#, and Azure. Collaborate with frontend engineers and product stakeholders, improve existing systems, contribute to CI/CD and Terraform infrastructure workflows, and use AI-assisted development tools. The role supports cybersecurity operations through scalable, secure, performance-sensitive software and requires strong engineering fundamentals, testing, debugging, and cloud development experience.

Build and maintain automated frontend, backend, and API tests using Playwright with TypeScript or C#. Test microservices, Azure workflows, and event-driven integrations; coordinate release readiness; combine automated, manual, and exploratory testing; improve QA processes; and collaborate with developers and stakeholders to scale quality efficiently. Use AI-assisted tools for test creation, maintenance, triage, and analysis.

Monitor and investigate threats in a Cyber Defense Center, perform end-to-end incident investigations, and support detection and response across identity, endpoint, network, and cloud environments. Contribute to internal processes, automation, and continuous improvement while collaborating across global security teams. The role requires participation in follow-the-sun support and on-call coverage, including off-hours and public holidays.

Lead technical strategy for complex cybersecurity sales opportunities across Austria and DACH. Advise CISOs and security leaders, assess security postures, conduct workshops, deliver Microsoft security demonstrations, shape architectures, defend RFPs, and connect Defender and Sentinel capabilities to business outcomes. The role also supports partners, collaborates with sales and delivery teams, and ensures successful customer handovers.

Design, develop, and maintain Python-based SOC automation workflows for alert triage, investigation, enrichment, incident handling, and response. Build reliable Temporal.io workflows and integrations with Microsoft Sentinel, Defender, REST APIs, databases, and threat intelligence systems. Develop KQL queries, translate SOC requirements into technical solutions, and improve automation scalability, observability, reliability, and analyst efficiency while collaborating with Cyber Defenders and cross-functional engineering teams.

Advise customers throughout the cybersecurity service lifecycle, supporting onboarding, security posture improvement, threat mitigation, and operational resilience. Use Azure, Microsoft Sentinel, KQL, Microsoft Defender, and related Microsoft security technologies to provide tailored recommendations. Build trusted customer relationships, translate complex security concepts into actionable guidance, monitor attacker tradecraft, and identify opportunities to strengthen defenses. Incident response, threat hunting, scripting, and managed security services experience are preferred.

Design, deploy, and operate secure, highly available Azure infrastructure using IaC and automation. Build CI/CD pipelines, scripting, containerized solutions, and AI-enabled automations. Administer Atlassian Cloud and Entra ID, enforce cloud security best practices, monitor performance/costs, lead migrations, troubleshoot complex platform issues, mentor engineers, and support Global IT and Security initiatives.

Act as a trusted security advisor to customers across the service lifecycle: onboard, provide technical guidance, align Ontinue capabilities to customer environments, recommend Microsoft security solutions, identify defense improvements, and help customers adopt and optimize security operations.

Customer-facing cybersecurity advisor for Ontinue's MXDR service, guiding onboarding and the service lifecycle. Translate complex security concepts into actionable guidance, align Microsoft security tools to customer environments, proactively identify risks, recommend hardening and improvements, build trusted relationships, and help customers realize value from the platform.

Act as a trusted security advisor for customers across onboarding and service lifecycle. Provide expert guidance on Microsoft security stack (Azure, Sentinel, Defender), translate complex security concepts into actionable recommendations, identify risks, and improve security posture. Build customer relationships, proactively recommend improvements, and stay current on attacker tradecraft and best practices to maximize value from Ontinue's MXDR platform.

Perform end-to-end detection and response in a 24/7 SOC, investigate threats across identity, endpoint, network and cloud, mentor junior analysts, lead shifts, improve processes and automation, and collaborate with internal teams and customers.