Senior Security Engineer (Latvia)

About the role

About Levelpath:

Levelpath is the modern AI procurement platform for global enterprises. Since our founding in 2022, we have been on a mission to make procurement delightful. Uniquely intuitive, Levelpath makes procurement more nimble in days and unlocks savings in weeks, while delivering clarity, control and intelligence for all stakeholders. Levelpath provides a complete view of spend for procurement, finance, legal and IT - from intake and sourcing to contracting and payment. Built in AI delivers contextually relevant and genuinely helpful answers, uncovering valuable opportunities and dramatically increasing efficiency. Global brands trust Levelpath’s deep procurement expertise to transform their business outcomes and drive value from their supplier relationships.

Engineering at Levelpath:

We’re looking for a experienced Senior Security Engineer to elevate and lead our security initiatives. This role is central to maturing Levelpath’s security posture, helping us safeguard infrastructure, ensure compliance, and maintain the trust of our customers.
You will work closely with Engineering, DevOps, and Compliance teams to establish best-in-class security programs—from policy definition and incident response to tool implementation and secure development practices.

This position is hybrid/remote with flexible working hours and office in Teodors /Jaunā Teika. In this role you will have the opportunity to be a part of an international team and an agile environment with short decision paths. We currently use Slack, Zoom, Github, AWS, but you may leverage any devices and tools that allow you to do your best work.

What You Will Do:

- Lead the design and implementation of security and compliance frameworks and internal policies

- Drive incident response efforts and lead investigations of potential breaches

- Manage vulnerability assessment workflows and oversee mitigation planning

- Oversee the implementation and maintenance of security tools such as SIEM, DLP, SAST/DAST, and identity & access management solutions

- Collaborate with Engineering and DevOps to bake security into CI/CD pipelines and infrastructure

- Guide and participate in customer-facing security reviews, audits (e.g., SOC 2, ISO 27001), and risk assessments

- Conduct security architecture reviews and data flow mapping from a risk and compliance perspective

- Manage the bug bounty program and coordinate with external researchers

- Deliver security awareness training and foster a culture of proactive risk management across the organization

What you Bring to the Table:

- Proven experience in leading cybersecurity programs at a tech-focused organization

- Strong understanding of security operations, tooling, and secure development life cycles

- Knowledge of regulatory frameworks and audit practices (SOC 2, ISO 27001, GDPR, etc.)

- Hands-on experience with industry-standard tools and platforms (e.g., Vanta, CrowdStrike, Splunk, Rapid 7, Snyk)

- Comfortable participating in customer security reviews and communicating complex concepts clearly

- Effective team collaborator who can also work independently and drive initiatives to completion

- Excellent English communication skills both verbal and written

- Enjoys working in a team and helping each other

Levelpath is committed to equal treatment and opportunity in all aspects of recruitment, selection, and employment. We work hard to evaluate all employees and job applicants consistently, without regard to race, color, religion, gender, national origin, age, disability, pregnancy, gender expression or identity, sexual orientation, citizenship, or any other legally protected class. We’re working to build a more inclusive economy where our customers have equal access to opportunity, and we strive to live by these same values in our workplace