Jobs Security

We are looking for an experienced Anti-Fraud Manager to take ownership of fraud prevention and risk management across our crypto gambling platform.

You will be responsible for identifying fraudulent behavior, investigating suspicious activity, developing risk rules, and building effective anti-fraud processes across the entire player journey — from acquisition and registration to deposits, gameplay, and withdrawals.

This is a hands-on role for someone who understands crypto gambling, player behavior, affiliate traffic, payments, and modern fraud schemes and is comfortable building and improving anti-fraud processes from the ground up.

Requirements & Experience

• 3+ years of experience in Anti-Fraud / Risk Management in the gambling industry
• Hands-on experience in crypto gambling
• Strong understanding of casino and/or sportsbook fraud risks
• Experience working with SoftSwiss, BetBy, or similar gambling platforms
• Strong analytical skills and ability to work with large volumes of user and transaction data
• Ability to identify abnormal user behavior and traffic patterns using metrics such as FTD, CR, Retention, LTV, ROI, and player activity
• Experience working with affiliate traffic and tracking systems: SubID, S2S postbacks, pixels, CPA, Hybrid, RevShare
• Strong understanding of fraud schemes, including:
  • Multi-accounting
  • Bonus abuse
  • Affiliate fraud
  • Incentivized traffic
  • Payment fraud
  • VPN / Proxy / device manipulation
  • Collusion and coordinated player activity
  • Withdrawal abuse
  • Game exploits
• Experience creating and optimizing risk rules, stop rules, fraud detection logic, and investigation processes
• Understanding of KYC / AML principles and suspicious transaction patterns

• Ability to make independent decisions based on data and risk assessment

   

Responsibilities

Anti-Fraud & Risk Management

• Build and continuously improve the anti-fraud system and risk management processes
• Create, maintain, and optimize risk rules and stop rules
• Monitor player activity and identify suspicious behavioral patterns
• Investigate multi-accounting, bonus abuse, collusion, payment fraud, and withdrawal abuse
• Analyze gameplay and betting activity to identify abnormal or fraudulent behavior
• Review player activity before withdrawals when additional verification is required
• Detect and investigate game exploits and abnormal gameplay patterns

• Analyze deposits, withdrawals, transactions, and payment behavior for suspicious activity

   

Affiliate & Traffic Fraud

• Monitor affiliate traffic and identify fraudulent acquisition patterns
• Analyze FTD, CR, Retention, LTV, ROI, EPC and other traffic metrics
• Investigate incentivized traffic, fake FTDs, multi-accounting, and other affiliate abuse
• Work with tracking data, including SubIDs, S2S postbacks, and pixel tracking

• Identify abnormal traffic sources and provide recommendations on traffic quality

   

KYC / AML

• Investigate suspicious accounts and transactions
• Review KYC documentation when required
• Analyze source of funds and other risk indicators
• Escalate potentially high-risk cases and coordinate appropriate actions
• Communicate with players when additional verification or clarification is required
•  

Process & Development

• Build investigation workflows and internal anti-fraud procedures
• Analyze existing fraud cases and identify opportunities to prevent similar incidents
• Work closely with Payments, KYC, Support, Affiliate, and Product teams
• Continuously improve fraud detection based on real cases, data, and emerging fraud patterns
• Prepare reports and insights on fraud trends, incidents, and risk metrics

Who We Are 

PAR Retail, with its Open Commerce® product suite and patent pending Wallet Steering® System, empowers Convenience & Fuel Retailers to gain more share of wallet and customer lifetime value than possible with any other solution provider. PAR Retail’s unified Open Commerce product suite consists of: Activate for Intelligent 1:1 Loyalty, Transact for Contactless Commerce, and Experience for Cross-Channel Customer Experiences. PAR Retail’s solutions are supported by a set of subscription-based program management services and are contractually backed by its 1.5X Performance Guarantee. 

Requirements:  
- Operational knowledge of modern operating systems and networking; 

- Experience with common cloud services: AWS, GCP, and Azure; 

- Network Security and expertise in network pentesting; 

- Security testing of web applications, web services, mobile apps (hybrid and native), and IT infrastructure; 

- Understanding security certifications (PCI DSS / SOC2); 

- Ability to apply modern Application Security methodologies and frameworks; 

- Ability to use at least one modern programming language; 

- Practical experience with Burp Suite; 

- Experience with IDS, IPS, SIEM configuration; 

- Upper-intermediate English level. 

Responsibilities:  

- Requirements analysis, performing penetration testing and security audit; 

- BE, WEB, cloud and mobile clients testing; 

- Vulnerability reporting and remediation process; 

- Communication with development and project management teams; 

- Prepare security testing reports; 

- Prepare and support internal documentation for the project. 

PAR Retail Offers: 

- Long-term employment; 

- Competitive compensation with regular performance-based salary and career development reviews; 

- Paid vacations and sick leaves; 

- Health insurance program; 

- Flexible working hours; 

- Sponsored company educational program, corporate library; 

- Funny celebrations, team outings, and company events; 

- A unique and friendly environment where everyone can explore and learn new technologies. 

At MacPaw, we craft software that makes everyday tech life simpler, cleaner, and more enjoyable. From globally loved products like CleanMyMac and Setapp to emerging cybersecurity tools like ClearVPN and Moonlock, we are building a product ecosystem that reaches millions of people worldwide.

We’re looking for a Senior Infrastructure Security Engineer to join our Information Security Team, supporting MacPaw’s product ecosystem as we transition to our next-generation setup.

Our Security and Infrastructure teams ensure that all MacPaw products run on a highly resilient, compliant, and rock-solid foundation, protecting user data and business operations at scale.

As a Senior Infrastructure Security Engineer, you will take dedicated ownership of securing our production infrastructure, establishing compliance control baselines, and maintaining a strong security posture. You’ll define, test, and coordinate security frameworks across bare-metal environments and GCP, working hand-in-hand with our SRE team as a technical peer and security partner.

If you’re excited to take ownership of MacPaw’s infrastructure security, reduce automated evidence coverage gaps, and collaborate on advanced CNAPP tools and agentic AI automation, we’d love to hear from you!

In this role, you will:

• Participate in Wiz CNAPP service adoption.
• Drive Kubernetes and cloud posture hardening across GCP, including RBAC reviews, admission control, network policies, and runtime threat detection.
• Take ownership of the infrastructure vulnerability backlog, driving remediation down against severity-based SLAs in close collaboration with SRE.
• Build and ship agentic AI security automation into code-reviewed repositories to streamline vulnerability management and operational security workflows. 
• Collaborate closely with the SRE team to embed security controls into CI/CD pipelines and Infrastructure-as-Code without adding unnecessary friction.

Skills you’ll need to bring:

• Strong expertise in Infrastructure-as-Code and automation using Terraform.
• Python or Go skills to build security tooling rather than just filing tickets.
• Hands-on experience with incident management, threat containment, and root cause analysis (RCA) for infrastructure security incidents.
• Demonstrated ability to work with Service Reliability Engineers (SRE) team as a technical peer, driving security engineering through influence and shared goals.
• Hands-on production cloud security experience at scale on GCP (IAM least privilege, network segmentation, runtime detection, and posture hardening).
• In-depth Kubernetes security experience in production: RBAC, admission control (OPA/Kyverno), network policies, runtime detection, and image provenance.
• Proven experience in bare-metal and self-hosted Linux infrastructure security (host-based controls, Linux hardening, and multi-tenancy risk mitigation outside managed cloud).
• Experience in infrastructure vulnerability management: triage, SLA management, and driving remediation through engineering teams.
• Ability to write and ship agentic AI automation into production repositories to enhance security operations.
• At least an Upper-Intermediate level of English and fluent Ukrainian.

As a plus:

• Experience securing agentic AI systems in production (prompt injection, tool poisoning across MCP, human-in-the-loop approval flows, and kill switches).
• Experience with CNAPP/CSPM platform migrations or ownership (Wiz, Sysdig, Orca, or Prisma Cloud).
• Experience with NixOS or other immutable Linux distributions.
• Familiarity with Cloudflare edge security controls.
• Experience operating within environments under active ISO 27001 or SOC 2 Type II compliance frameworks.
• Relevant security certifications as signal (CKS, OSCP, GCP Professional Cloud Security).

What we offer:

• We are a Ukrainian company, and we stand with Ukraine against the russian aggression
  We maintain workplaces for the mobilized Macpawians and provide financial support to colleagues or their families affected by the war. Here, you can also read about the MacPaw Foundation, which intends to help save the lives of Ukrainian defenders and provide relief to as many civilians as possible.
• We are committed to our veterans
  Our Veteran Career and Empowerment Program is designed to ensure our veterans and active military personnel receive the recognition, support, and opportunities they deserve.
• Hybrid work model
  Whether to work remotely or at the hub is entirely up to you. If you decide to mix it, our Kyiv office, which works as a coworking space, is open around the clock. The office is supplied with UPS and Starlink for an uninterrupted work process.
• Your health always comes first
  We guarantee medical insurance starting on your first working month. For those abroad, you can receive a yearly Medical insurance allowance as compensation for managing your medical expenses.
• Flexible working hours
  You can choose a schedule that is comfortable for you. No one here tracks your clock in/out because MacPaw is built on trust and cooperation.
• Space to grow both professionally and personally
  Education opportunities to grow both hard and soft skills, annual development reviews, and internal community.
• Teams we are proud of
  We build honest, transparent, and reliable relationships within teams. Every Macpawian can improve processes and implement their ideas. We encourage open and constructive feedback and provide training for Macpawians on giving and receiving feedback.
• Office designed for people (and pets)
  Our office has it all: a spacious workplace with enough room for sitting up, lying down, and running around; a gym for recreation; cozy kitchens; a sleeping/meditation room; and a terrace with a view where we throw summer parties. Also, we have two cats living in the office, and you are welcome to bring your pets to the office (we have separate floors for cats and dogs).
• Time-off policy that covers life’s needs
  Convenient personal time-off policy to help you take care of essential matters in your personal life, and parental leaves. On top of all that, sabbaticals are open after 5 years of being with MacPaw.
• Join social initiatives with MacPawCares
  MacPaw participates in numerous humanitarian aid and charity projects across many fields, and you are welcome to jump in to make the world a better place.
• We’re an equal-opportunity employer. Here is a safe place for applicants of all backgrounds
  We are hiring talented humans. Meaning with all our variety of backgrounds and identities, including service members and veterans, women, members of the LGBTQIA+ community, individuals with disabilities, and other often underrepresented groups. MacPaw does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.
  
  *Some benefits are under development, and new adjustments are possible.

We're looking for a highly skilled, driven Senior Security Researcher/Senior Application Security Researcher to join our research group to analyze supply chain attacks, dissect malware, and build open-source tools. This is a high-impact role: you'll work with cross-functional teams to scan and protect users and organizations worldwide from the hottest cyber threats, playing a key part in shaping the future of the team.

Must-Have Skills

• 5+ years of experience as a Cybersecurity Researcher (supply-chain attacks, malware analysis)
• Familiarity with open-source registry ecosystems (npm, PyPI, Maven) and their respective attack surfaces
• Proven ability to ship software in a production environment
• Strong understanding of the SDLC and modern CI/CD pipelines
• Comfortable leveraging AI tools to optimize research and development processes
• Proactive and independent mindset, with the ability to take full ownership of projects

Nice to Have

• Active contributions to open-source security tools or research projects
• Hands-on experience with decompilers, debuggers, and network traffic analysis
• Advanced malware analysis experience (obfuscation, encryption, anti-analysis, and sandbox-evasion techniques)
• Web application penetration testing experience
• Published CVEs, coordinated disclosures, writeups, blogs, or research papers
• Experience public speaking at major industry conferences (e.g., Black Hat, DEFCON, RSAC)
• A genuine passion for cybersecurity, open-source communities, and solving complex ecosystem threats

Role Summary

We're looking for a highly skilled, driven Senior Security Researcher/Senior Software Supply Chain Security Researcher to join our research group to analyze supply chain attacks, dissect malware, and build open-source tools. This is a high-impact role: you'll work with cross-functional teams to scan and protect users and organizations worldwide from the hottest cyber threats, playing a key part in shaping the future of the team.

Must-Have Skills

• 5+ years of experience as a Cybersecurity Researcher (supply-chain attacks, malware analysis)
• Familiarity with open-source registry ecosystems (npm, PyPI, Maven) and their respective attack surfaces
• Proven ability to ship software in a production environment
• Strong understanding of the SDLC and modern CI/CD pipelines
• Comfortable leveraging AI tools to optimize research and development processes
• Proactive and independent mindset, with the ability to take full ownership of projects

Nice to Have

• Active contributions to open-source security tools or research projects
• Hands-on experience with decompilers, debuggers, and network traffic analysis
• Advanced malware analysis experience (obfuscation, encryption, anti-analysis, and sandbox-evasion techniques)
• Web application penetration testing experience
• Published CVEs, coordinated disclosures, writeups, blogs, or research papers
• Experience public speaking at major industry conferences (e.g., Black Hat, DEFCON, RSAC)
• A genuine passion for cybersecurity, open-source communities, and solving complex ecosystem threats

Role Summary

We're looking for a highly skilled, driven Security Researcher/Security Research Engineer to join our research group to analyze supply chain attacks, dissect malware, and build open-source tools. This is a high-impact role: you'll work with cross-functional teams to scan and protect users and organizations worldwide from the hottest cyber threats, playing a key part in shaping the future of the team.

Must-Have Skills

• 5+ years of experience as a Cybersecurity Researcher (supply-chain attacks, malware analysis)
• Familiarity with open-source registry ecosystems (npm, PyPI, Maven) and their respective attack surfaces
• Proven ability to ship software in a production environment
• Strong understanding of the SDLC and modern CI/CD pipelines
• Comfortable leveraging AI tools to optimize research and development processes
• Proactive and independent mindset, with the ability to take full ownership of projects

Nice to Have

• Active contributions to open-source security tools or research projects
• Hands-on experience with decompilers, debuggers, and network traffic analysis
• Advanced malware analysis experience (obfuscation, encryption, anti-analysis, and sandbox-evasion techniques)
• Web application penetration testing experience
• Published CVEs, coordinated disclosures, writeups, blogs, or research papers
• Experience public speaking at major industry conferences (e.g., Black Hat, DEFCON, RSAC)
• A genuine passion for cybersecurity, open-source communities, and solving complex ecosystem threats

Who we are:
Selesa offers IT outsourcing, specialist out-staffing, and project management services to enhance business operations. We focus on providing skilled professionals for IT needs, including development, security consulting, and business development. Selesa also manages sales, account management, and human resources to support company growth. Our services are known for efficiency, quality, and strong communication, making us a trusted partner for businesses looking to streamline and secure their IT infrastructure. Originated in Vilnius, Lithuania, we cater to global clients.

Who we are looking for:

We’re looking for a Junior Security Operations Assistant, working alongside experienced professionals to protect our clients from cyber threats. In this role, you’ll be at the forefront of defending our clients’ networks, gaining hands-on experience, and contributing to a safer digital landscape. 

Responsibilities

• Assist with daily security monitoring and SOC activities
• Review security alerts and escalate issues when required
• Help with log collection and analysis
• Support incident documentation and reporting
• Assist with vulnerability tracking and follow-ups
• Help maintain security and ISO 27001 documentation
• Support internal audits, evidence collection, and basic security tests
• Follow security policies and procedures

Requirements

• Proficiency in English 
• Basic knowledge of Linux (command line, logs, permissions)
• Basic understanding of cybersecurity concepts (phishing, malware, attacks)
• Awareness of SOC operations and incident escalation
• Basic understanding of networking concepts (ports, protocols, firewalls)
• Willingness to learn security tools and processes
• Good attention to detail and documentation skills
• Junior / Entry-level
• 0–2 years of experience in IT, SOC, or cybersecurity-related roles
• Education, training, or internships in IT/security are acceptable
• Strong attention to detail and teamwork skills.

• Ability to meet deadlines in a fast-paced environment

   

Nice to Have 

• Basic scripting (Bash or Python)
• Exposure to SIEM or endpoint security tools
• Familiarity with security frameworks
• Entry-level security certifications (e.g., Security+)

What we offer:

• Fully remote position with a flexible schedule
• Long-term opportunity with potential for financial and career advancement

• Supportive and positive work culture, collaborating with like-minded teammates

   

When submitting your application, please make sure to include your responses to the following screening questions in your COVER LETTER:

1. Please explain to us your level of spoken/written English. Just rank it from 1 to 10, where 10 means a Native Speaker; 8-9 means a Near Native Speaker; 6-7 means Fluent Speaker; under 6 any further levels.
2. How would you approach assessing and mitigating the risks associated with a new software or system implementation?
3. What methods or tools do you use to stay updated with the latest cybersecurity threats and trends?
4. What are your Monthly salary expectations for a long-term, full-time position (if we consider 40 hours a week)?

• Job Description
  Minimum two years of experience administering Splunk in enterprise production environments.
• Official Splunk certification such as Enterprise Certified Admin, Architect or Core Certified Consultant (preferred)
• Practical experience integrating Splunk with AWS cloud infrastructure and services.
• Strong capabilities in Python or Shell scripting for system automation and REST API integration.
• Deep technical expertise in observability, metrics and log analytics.
• Hands on experience with data ingestion, sourcetype management and custom parsing configurations.

• Solid knowledge of indexer cluster maintenance and search head configuration.

  
  Nice to have skills:

• Experience implementing Model Context Protocol (MCP) solutions.
• Familiarity with AI developer tools such as Claude.
• Development experience using TypeScript.

• Exposure to Infrastructure as Code practices and continuous integration pipelines.
   

  Job Responsibilities

• Integrate Splunk with AWS cloud services including CloudWatch, S3, EC2, Kinesis and container logs.
• Execute regular component updates and lifecycle management across Indexers, Search Heads and Forwarders.
• Conduct routine platform health checks, indexer cluster maintenance and system performance tuning.
• Onboard new data sources and manage custom parsing configurations
• Automate routine maintenance, reporting and log parsing using Python or Shell scripts alongside Splunk REST APIs.
• Support deployment pipelines to enable seamless infrastructure provisioning with minimal manual intervention.
• Collaborate with stakeholders to optimize search query performance for both ad hoc and scheduled tasks.
• Design intuitive dashboards and telemetry visualizations for operational engineering and business teams.
   

Department/Project Description
We are seeking a Splunk Consultant to manage, maintain, and optimize a high-volume enterprise Splunk environment. Embedded within a modern cloud and DevOps ecosystem, you will support large-scale telemetry ingestion while pairing platform administration with automated scripting to ensure peak reliability. Joining a collaborative team focused on continuous performance tuning, you will help cross-functional partners translate complex system data into actionable insights, driving observability, log analytics, and application performance monitoring across both operational and business domains. Eager to know more? If you are proactive, bring new ideas and suggestions, don’t waste any second and apply!

We are looking for an Endpoint Security Engineer to join our Security team. In this role, you will be responsible for implementing, operating, and improving endpoint security controls across corporate workstations, production servers, and critical infrastructure.

You will ensure reliable endpoint visibility, strong security baselines, effective telemetry collection, and containment capabilities across Windows, Linux, and macOS environments. You will work closely with IT, Cyber Defense, IAM, and Compliance teams to maintain measurable endpoint protection coverage and reduce security risks.

Responsibilities

• Deploy, operate, and tune endpoint security controls (EDR/XDR, EPP, MDM) across corporate endpoints, servers, and critical infrastructure
• Monitor endpoint telemetry health, investigate security events, and identify potential security incidents
• Implement and maintain OS security baselines and hardening standards across Windows, Linux, and macOS environments based on CIS Benchmarks, DISA STIG, and internal policies
• Support vulnerability remediation, patching activities, and endpoint security improvements in collaboration with IT and infrastructure teams
• Configure and maintain endpoint protection capabilities, including file integrity monitoring and endpoint isolation readiness for critical systems
• Support containment and response activities for compromised or non-compliant devices together with SOC and Cyber Defense teams
• Assist with tracking endpoint security gaps, remediation actions, and configuration improvements
• Document endpoint security configurations, operational procedures, and investigation findings

Requirements

• 3+ years of hands-on experience in Endpoint Security, Endpoint Protection, Infrastructure Security, System Security, or a similar cybersecurity role
• Higher education in Computer Science, Information Security, Software Engineering, or a related technical field is preferred
• Practical experience securing both desktop endpoints and server workloads in enterprise environments
• Experience supporting environments with 1,000+ managed endpoints is highly preferred
• Strong hands-on experience with EDR/XDR, Endpoint Protection Platforms (EPP), and Mobile Device Management (MDM) solutions
• Deep understanding of Windows, Linux, and macOS architecture, services, processes, logging, and security mechanisms
• Experience implementing OS hardening based on CIS Benchmarks, DISA STIG, or similar security standards
• Knowledge of operating system access control models, RBAC, and least-privilege principles
• Experience with native operating system security features such as Microsoft Defender, Attack Surface Reduction (ASR), BitLocker, SELinux, AppArmor, Gatekeeper, System Integrity Protection (SIP), and FileVault
• Understanding of endpoint telemetry, file integrity monitoring, and endpoint isolation techniques
• Scripting skills for automation using PowerShell and Python
• English - Intermediate/Upper-Intermediate level

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We're looking for a highly skilled, driven Security Researcher to join our research group to analyze supply chain attacks, dissect malware, and build open-source tools. This is a high-impact role: you'll work with cross-functional teams to scan and protect users and organizations worldwide from the hottest cyber threats, playing a key part in shaping the future of the team.

Must-Have Skills

• 5+ years of experience as a Cybersecurity Researcher (supply-chain attacks, malware analysis)
• Familiarity with open-source registry ecosystems (npm, PyPI, Maven) and their respective attack surfaces
• Proven ability to ship software in a production environment
• Strong understanding of the SDLC and modern CI/CD pipelines
• Comfortable leveraging AI tools to optimize research and development processes
• Proactive and independent mindset, with the ability to take full ownership of projects

Nice to Have

• Active contributions to open-source security tools or research projects
• Hands-on experience with decompilers, debuggers, and network traffic analysis
• Advanced malware analysis experience (obfuscation, encryption, anti-analysis, and sandbox-evasion techniques)
• Web application penetration testing experience
• Published CVEs, coordinated disclosures, writeups, blogs, or research papers
• Experience public speaking at major industry conferences (e.g., Black Hat, DEFCON, RSAC)
• A genuine passion for cybersecurity, open-source communities, and solving complex ecosystem threats

WCC Technologies Group is a rapidly growing Managed Network Services Provider and technology consulting firm specializing in enterprise networking, Wi-Fi engineering, structured cabling, and physical security systems. We are seeking a Network Security Engineer with 5 years of hands-on experience who will support both pre-sales and post-sales consulting engagements, advising WCC customers on and delivering advanced firewall, SD-WAN, and SASE solutions across our K-12, municipal, and enterprise client base.

Job Responsibilities:

• Support the sales team in pre-sales consulting engagements by advising WCC customers on security requirements, recommending best-fit technologies, and designing firewall, SD-WAN, and SASE solutions.
• Design, configure, and deploy next-generation firewalls and secure network architectures using Palo Alto Networks (PAN-OS, Panorama), Fortinet (FortiGate, FortiManager), Cisco, and other leading platforms.
• Architect and implement SD-WAN and SASE solutions, including ZTNA, SWG, CASB, and cloud-delivered security services (e.g., Prisma Access, Cisco Umbrella, Fortinet SASE).
• Participate in customer discovery calls, RFP reviews, and requirements gathering, and help build Bills of Materials (BoMs) for firewall, SD-WAN, and SASE projects.
• Configure and troubleshoot advanced routing and switching environments, including BGP, OSPF, VLANs, and enterprise WAN/LAN architectures.
• Implement site-to-site and remote access VPNs, IPsec/GRE tunnels, and Zero Trust access policies across hybrid and multi-cloud customer environments.
• Perform security policy audits, firewall rule optimization, and vulnerability remediation to strengthen customer security postures.
• Support post-sales delivery for WCC customers, including staging, configuration, validation, on-site installation, and support during network cutovers.
• Create and maintain customer-facing technical documentation including network diagrams, firewall rule sets, configuration standards, and implementation runbooks.
• Serve as a client-facing technical resource, mentoring junior engineers and escalating/resolving complex customer security incidents as needed.

• Build and maintain network automation workflows and monitoring integrations using tools such as Ansible, n8n, Python, and platforms like Zabbix or PRTG to improve visibility and reduce manual effort.

   

Experience:

• 5 years managing enterprise network security platforms: Palo Alto Networks (PAN), Fortinet, Cisco, or similar.
• Strong knowledge of SD-WAN and SASE, including ZTNA, SWG, and CASB.
• Advanced routing and switching: BGP, OSPF, VLANs, spanning tree, enterprise WAN design.
• Hands-on experience with Panorama and FortiManager.
• Solid understanding of VPNs (IPsec, SSL/TLS), network segmentation, and Zero Trust.
• Familiarity with cloud networking (AWS, Azure, or GCP) — VPC/VNet peering, Transit Gateway, ExpressRoute.
• Strong troubleshooting skills: packet capture, log analysis, and monitoring tools like Zabbix, PRTG, SolarWinds, or LibreNMS.
• Experience with automation tools such as Ansible, n8n, Python, or Terraform.
• Exposure to AI-assisted network operations (AIOps) or AI-driven troubleshooting is a plus.
• Familiarity with IPAM/DCIM (e.g., NetBox) and ITSM tools (e.g., ServiceNow, Jira).
• Strong communication and documentation skills; able to manage multiple client-facing projects.
• Certifications such as PCNSE, Fortinet NSE 4-7, CCNP (Enterprise or Security), or CCIE are highly desired.

Cloudfresh ⛅️ is a Global Google Cloud Premier Partner, Zendesk Premier Partner, Asana Solutions Partner, GitLab Select Partner, Hubspot Platinum Partner, Okta Activate Partner, and Microsoft Partner.

Since 2017, we’ve been specializing in the implementation, migration, integration, audit, administration, support, and training for top-tier cloud solutions. Our products focus on cutting-edge cloud computing, advanced location and mapping, seamless collaboration from anywhere, unparalleled customer service, and innovative DevSecOps.

We’re looking for a Google Cloud Security Engineer to harden client environments across GCP. You’ll implement and help design security controls, automate guardrails, improve detection & response, and guide stakeholders through pragmatic, risk-based decisions across EMEA.

Requirements:

• 3+ years proven, hands-on experience in a Security Engineer, SecOps (or similar) role.
• Strong knowledge of building and operating Security Porture, Edge protection, WAF, Endpoint security.
• Technical certifications related to CyberSecurity Google Cloud Solutions, Cloudflare and JumpCloud are an advantage.
• Experience of presentation, documentation.
• Excellent communication and strategic planning abilities, able to explain trade-offs, influence remediation, and drive adoption of guardrails.
• Basic scripting experience (e.g., Python, Bash, or gcloud CLI).
• Fluency in English.

Responsibilities:

• Design, implement, and operate security controls for internal needs and clients across.
• Perform cybersecurity audits.
• Configure and monitor Security Command Center, audit logs, and threat protection.
• Establish logging, detection and incident response.
• Assist clients with implementation of Cybersecurity products (Google Cloud Security Center, Google Workspace Security, Cloudflare, JumpCloud) and compliance controls.
• Generate security assessment reports and provide actionable recommendations.
• Continuously assess the landscape: track new Vendors features and update baselines to improve posture, reliability, and cost efficiency.

Work conditions:

• Competitive Salary & Transparent Motivation: Receive a competitive base salary with performance-based bonuses, providing clear financial rewards for your success.
• Flexible Work Format: Work remotely with flexible hours, allowing you to balance your professional and personal life efficiently.
• Training with Leading Cloud Products: Access in-depth training on cutting-edge cloud solutions, enhancing your expertise and equipping you with the tools to succeed in an ever-evolving industry.
• International Collaboration: Work alongside A-players and seasoned professionals in the cloud industry. Expand your expertise by engaging with international markets across the EMEA and CEE regions.
• Vibrant Team Environment: Be part of an innovative, dynamic team that fosters both personal and professional growth, creating opportunities for you to advance in your career.

When applying to this position, you consent to the processing of your personal data by CLOUDFRESH for the purposes necessary to conduct the recruitment process, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
Additionally, you agree that CLOUDFRESH may process your personal data for future recruitment processes. You can withdraw this consetn at any time.

Come Back Agency supports US software and technology companies by running their hiring process. We work with delivery and leadership teams to define roles, screen candidates, and manage interviews. Successful candidates are hired directly by the company and become part of its team.

This position is with a US-based software company providing custom development and AI implementation for North American clients. The team builds and maintains production software, including AI-enabled systems, and works in long-term client engagements. Team members operate as part of an internal, distributed team and collaborate directly with client stakeholders.

About the role

We are looking for an experienced DevSecOps / Security & Compliance Consultant for a 3–4 month contract.
 

The company already has two DevOps engineers responsible for the existing infrastructure. Your role will be to independently assess the company’s current security and compliance posture, create a practical SOC 2 and/or ISO 27001 readiness roadmap, coordinate the implementation of required controls, and prepare the company for an external audit.
 

What you will do:

• Conduct a security and compliance gap assessment
• Define a realistic SOC 2 and/or ISO 27001 readiness roadmap
• Map requirements to technical and organizational controls
• Configure and manage Vanta, Drata, Secureframe, or a similar compliance platform
• Define the required evidence and coordinate its collection
• Work with the existing DevOps engineers to implement AWS, IAM, logging, monitoring, backup, vulnerability management, and secure SDLC controls
• Prepare or improve security policies, risk registers, incident response procedures, access reviews, and business continuity documentation
• Support client security questionnaires and auditor requests
• Conduct a readiness review or mock audit
• Document remaining gaps and provide a clear handover plan
   

Requirements:

• Proven hands-on ownership of at least one SOC 2 or ISO 27001 readiness and audit cycle
• Experience implementing controls, collecting evidence, and working directly with auditors or external assessors
• Strong understanding of AWS infrastructure, IAM, logging, security, CI/CD, and vulnerability management
• Experience with Vanta, Drata, Secureframe, or similar compliance automation tools
• Ability to independently manage the compliance workstream and coordinate technical implementation with the internal DevOps team
• Strong documentation and stakeholder communication skills
• English at B2 level or higher

Apply with your resume and a short note outlining your relevant experience. You can also submit it through our website at comeback.ua. Selected candidates will be contacted by Come Back Agency.

Наш клієнт, Growe, провідна консалтингова компанія та група сервісів у сфері iGaming і розваг. Вони створюють стратегії, що працюють, та рішення, які масштабуються. 

Ідеально для тих, хто прагне:

• Сортувати, перевіряти та визначати пріоритети результатів перевірки безпеки, отриманих за допомогою інструментів сканування SAST, SCA та Secret, фільтрація хибнопозитивних результатів, оцінка ризиків та відстеження проблем до їх усунення;
• Проводити ручні та інструментальні перевірки коду для виявлення вразливостей безпеки та небезпечних варіантів реалізації до того, як код потрапить у Production;
• Проводити практичне тестування безпеки вебзастосунків, мікросервісів та API для виявлення вразливостей безпеки та недоліків у бізнес-логіці;
• Проводити аудит REST та GraphQL API та веб-додатків з акцентом на основні ризики безпеки додатків, аутентифікацію, авторизацію та бізнес-логіку.

Досвід, який стане твоєю перевагою:

• 2-4 роки досвіду роботи в Application Security, Product Security, or Penetration Testing;
• Практичний досвід сортування та аналізу результатів, отриманих за допомогою Semgrep/OpenGrep, Gitleaks, Trivy та OSV-Scanner;
• Досвід роботи з Burp Suite (Pro), Nuclei, Subfinder, SQLmap, Metasploit та NetExec;
• Розуміння класичних вразливостей OWASP Top 10, включаючи недоліки ін'єкцій (SQLi, Command Injection), підробку запитів на стороні сервера (SSRF), міжсайтовий скриптинг (XSS), підробку міжсайтових запитів (CSRF), порушений контроль доступу / незахищені прямі посилання на об'єкти (IDOR / BOLA), неправильні конфігурації безпеки, криптографічні збої, незахищену десеріалізацію та масове призначення;
• Знання OWASP API Security Top 10 для архітектур REST та GraphQL;
• Розуміння протоколів ідентифікації та механіки контролю доступу (OAuth 2.0, OIDC, JWT, SAML, RBAC/ABAC);
• Здатність виявляти складні обходи авторизації, недоліки управління сеансами та помилки бізнес-логіки;
• Середній рівень англійської мови (розмовний та письмовий).
• Здатність читати та аналізувати сучасний код додатків для виявлення недоліків безпеки (буде плюсом);
• Базове розуміння принципів хмарної безпеки в середовищах AWS та основ безпеки Kubernetes (K8s) (буде плюсом);
• Сертифікації BSCP, CWES, OSCP, CPTS (будуть плюсом).

Ми цінуємо:

• Сильні комунікативні навички для ефективної співпраці з командами інженерів, розробників продуктів та DevOps;
• Навички спрямованості на результат;
• Відкритість до навчання.

Наші клієнти пропонують конкурентні переваги для підтримки вашого професійного та особистого зростання, зокрема:

• Орієнтація на здоров’я та добробут;
• Глобальне медичне страхування;
• Можливості для зростання;
• Програми бенефітів (компенсація спорту / стоматології / психолога тощо);
• Бонуси за досягнення результатів;
• Динамічне робоче середовище.

English version:

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. 

Perfect for those who aim to:

• Triage, validate, and prioritize security findings from SAST, SCA, and Secret scanning tools, filter out false positives, assess risks, and track issues through to remediation;
• Conduct manual and tool-assisted code reviews to identify security vulnerabilities, logic flaws, and insecure implementation choices before code reaches production;
• Perform hands-on penetration testing of web applications, microservices, and APIs to uncover security vulnerabilities and business logic flaws; 
• Audit REST and GraphQL APIs and web applications with a strong focus on core application security risks, authentication, authorization, and business logic.

Experience you’ll need to bring:

• 2-4 years of experience in Application Security, Product Security, or Penetration Testing; 
• Hands-on experience triaging and analyzing findings from Semgrep / OpenGrep, Gitleaks, Trivy, and OSV-Scanner;
• Experience with Burp Suite (Pro), Nuclei, Subfinder, SQLmap, Metasploit, and NetExec; 
• Deep understanding of classic OWASP Top 10 vulnerabilities, including Injection flaws (SQLi, Command Injection), Server-Side Request Forgery (SSRF), Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), Broken Access Control / Insecure Direct Object References (IDOR / BOLA), Security Misconfigurations, Cryptographic Failures, Insecure Deserialization, and Mass Assignment;
• Solid knowledge of OWASP API Security Top 10 for REST and GraphQL architectures; 
• Deep understanding of identity protocols and access control mechanics (OAuth 2.0, OIDC, JWT, SAML, RBAC/ABAC);
• Ability to identify complex authorization bypasses, session management flaws, and business logic bugs;
• Ability to read and analyze modern application code to spot security flaws (will be a plus); 
• Basic understanding of cloud security principles in AWS environments and Kubernetes (K8s) security fundamentals (will be a plus);
• Intermediate level of English (spoken and written);
• BSCP, CWES, OSCP, CPTS certifications (will be a plus).

It's a perfect match if you have those personal features:

• Strong communication skills to effectively collaborate with engineering, product, and DevOps teams;
• Result-oriented mindset;
• Openness to learning.

Our clients offer competitive benefits to support your professional and personal growth, including: 

• Health & Wellness Focus;
• Global Medical Coverage;
• Growth Opportunities;
• Benefits Programs (compensation for the gym/stomatology/psychological service & etc.);
• Performance-Driven Rewards;
• Dynamic Work Environment.

We’re hiring a DevSecOps Engineer who thrives in fast-moving environments, understands
technical depth, and can independently own security across multiple areas — from architecture and infrastructure to monitoring and investigations.

The role is ideal for someone who prefers deep thinking over surface-level “best practices”.
You’ll play a key role in securing our systems and eventually take ownership of technical implementation and decision-making.

The project is a high-load financial platform that acts as a payment processor for cryptocurrency and fiat transactions. The system utilizes integrations with blockchain networks and processes a high volume of requests within the cloud infrastructure.

Must-Have Skills:

• General Security Engineering: Multipurpose security engineer with broad security knowledge.
• Network Security: Understanding of network principles and network security.
• Cloud Security: Knowledge of cloud providers and cloud security.
• Kubernetes Security: Experience with Kubernetes, specifically how to secure Kubernetes, including knowledge of security policies, admission tasks, securing pods, and tools like Kyverno.
• DevOps Basics: Some basic DevOps knowledge, including CI/CD pipelines.
• Infrastructure as Code: Familiarity with tools like Terraform.
• Audit Infrastructure: Ability to implement audit infrastructure.
• DevSecOps: Familiarity with DevSecOps practices.
• Cryptographic Principles: Strong knowledge of cryptographic principles.
• Proactive Mindset: Proactive approach to security and problem-solving.
• Experience in FinTech or Web3: Experience in either FinTech or Web3 is acceptable; both are considered relevant backgrounds.

Nice-to-Have / Plus:

• Web3/Blockchain Security: Some knowledge of blockchain security, consensus protocols, or smart contract security (but not required).

We offer:

• Competitive compensation
• Social package (24 working days of annual leave, 5 paid sick days)
• Flexible working hours
• Challenging projects in diverse business domains and a variety of tech stacks
• Personal development and professional growth opportunities
• Work with talented, ambitious and family-feel teams
• Educational possibilities: corporate courses, knowledge hubs, and in-house English classes
• Compensation for your professional certification & support for your learning activities
• Opportunity to choose IT equipment you like
• Corporate social responsibility