Information/System Security Engineer
We`re rapidly growing and inviting an Information/System Security Engineer to our team.
You would be running such tasks as:
- Design and maintain the security architecture based on frameworks such as ISO 27001, NIST, CIS Controls, or other relevant standards;
- Develop and enforce security policies, standards, and procedures.
- Conduct cybersecurity risk assessments and develop mitigation measures.
- Integrate threat monitoring systems and implement/administer SOC tools.
- Secure macOS, Linux, and Windows endpoints.
- Ensure information and data protection across company systems and infrastructure.
- Manage access control, configure IAM in corporate systems in accordance with company policies, and conduct regular access reviews.
- Manage vulnerabilities, respond to security incidents, analyze their root causes, and implement remediation measures to prevent future attacks.
Required skills and expertise:
- Higher education in Information Security or related fields (Computer Science, Software Engineering, Information Systems, etc.).
- At least 3 years of experience in a similar role.
- Experience in gambling, betting, fintech, or other high-risk industries is a must.
- Knowledge of user authentication principles, access control, and understanding of MFA, SSO, and SAML; experience working with IAM systems such as Okta, MS Entra ID, or Ping Identity.
- Experience configuring and administering security tools such as SIEM, EDR, SOAR, MISP, IDS/IPS, WAF, DLP, ESG, and VPN.
- Experience securing server, network, and cloud infrastructure, including CSPM (Cloud Security Posture Management), IAM hardening, and conducting pentest or misconfiguration reviews.
- Experience working with monitoring and logging systems.
- Experience implementing or supporting DLP solutions.
- Experience writing scripts for automation.
- Experience responding to security incidents, with the ability to analyze and interpret data and prepare investigation reports.
- Experience with IT audits and risk management processes.
- Risk-oriented mindset with the ability to assess consequences and implement systemic improvements.
- English level: Intermediate or higher (ability to read technical documentation and correspond in English).
Will be a plus:
- Experience with OSINT tools (Credential & Data Leak Monitoring, Infrastructure Reconnaissance, Threat Actor Tracking).
- ZTNA/SSE knowledge.
- Security certifications and training.
Tech Stack: Google Workspace, Jamf, OpenVPN
We offer:
Care for your health and well-being
β’ 100β% paid sick leaves;
β’ 20 working days of paid vacation;
β’ Medical support;
β’ Benefits Cafeteria (budget for gym/stomatology/psychological service & etc.);
β’ Ability to work remotely or in the office (as you wish);
β’ Corporate gifts & events.
Professional growth & development
β’ Competitive salary with annual salary promotions;
β’ The annual budget for professional courses, conferences, workshops, and books;
β’ Internal training courses;
β’ Work with a team of professionals and have the opportunity to share knowledge.
Corporate Culture
β’ Dynamic and result-oriented work environment;
β’ The ability to influence product development at an early stage;
β’ Openness to new ideas and approaches, healthy team discussions;
β’ No βred tapeβ culture.
Candidate journey:
HR Interview β Technical Interview β Final Interview
Required domain experience
| Gambling | 1 year |
Required languages
| English | B1 - Intermediate |
| Ukrainian | B1 - Intermediate |