Jobs Security

We are looking for an experienced Head of Corporate & Physical Security to lead the security function, identify and prevent potential threats, and improve existing processes across the organization.

Reporting directly to the CEO, you will manage an established security team, oversee security operations, and implement modern technologies and automation to strengthen the company's security framework.

Key Responsibilities

• Lead and develop the corporate security function across the organization.
• Audit existing processes, team structure, and security procedures; identify risks and implement improvements.
• Develop and implement security strategies to prevent potential threats and incidents.
• Oversee employee security procedures throughout the entire lifecycle, from recruitment to offboarding.
• Ensure the physical security of offices, facilities, corporate events, and company assets.
• Manage crisis situations and coordinate incident response.
• Protect confidential information and internal company data.
• Introduce digital tools and automation to improve operational efficiency.
• Oversee background checks, internal audits, integrity assessments, and polygraph procedures.
• Manage internal teams and external security providers.
• Report key risks and mitigation plans directly to the CEO and senior management.

Requirements

• 3–5 years of experience in corporate, physical, or economic security.
• Experience in an international company with offices in multiple countries.
• Proven team management experience, with at least 2 direct reports.
• Strong knowledge of corporate, physical, and economic security.
• Experience with personnel background checks, internal audits, and polygraph testing.
• Experience organizing security for offices and corporate events.
• Ability to optimize and automate processes using modern digital tools.
• Basic understanding of cybersecurity and information security.
• English proficiency at B2 level or above.

Preferred background: FinTech, banking, forex, financial services, or large international organizations.

What We Offer

• Direct reporting to the CEO and influence over strategic decisions.
• Responsibility for security across an international organization of 5,000+ employees.
• An established security function to optimize and develop.
• The opportunity to implement modern technologies and automation.
• Management of 5 direct reports and a broader structure of 20+ specialists.
• Flexible work arrangements: on-site, hybrid, or remote, depending on location.
• Flexible cooperation model and compensation discussed individually.

About the product

Our client is a US-based healthcare technology company that develops medical-device technology and provides remote cardiac monitoring services. Its environment combines connected medical devices, cloud software, and clinical workflows, with a strong focus on service reliability, patient-data security, and regulatory compliance.

Technology stack

AWS: IAM, Identity Center, EC2, VPC, S3, RDS/Aurora, CloudWatch, CloudTrail, GuardDuty, Inspector, KMS, Systems Manager, Secrets Manager

Microsoft: Microsoft 365, Entra ID, Intune, Windows Autopilot, Microsoft Defender

Systems: Windows and Linux administration

IaC and automation: Terraform and/or CloudFormation, PowerShell, Python or Bash, Microsoft Graph and AWS APIs

Security platforms: Cloudflare Zero Trust, Purview, MDR platforms

Fundamentals: networking, DNS, TLS, identity, logging, cloud security

Your team

You will be part of the security function of a US-based company and will report directly to the CISO. On a daily basis, you will work with the DevOps team and with colleagues from software engineering, Corporate IT, Clinical Operations, and Quality/Regulatory. Your shift covers the hours when the US team is offline, so you will own your coverage window and hand over to the US Central team with clear, written updates.

Culture

We are committed to implementing high standards in the technology industry, and it is the fundamental mission of our work. To achieve this goal, the company and all its members are constantly evolving.

Each of us has the opportunity to contribute to the product, the company, the team, the industry, and our personal development. At Techstack, you have the option to choose from various growth opportunities that align with your interests:

- meetups, where you can share your knowledge and develop simultaneously by sharing your experiences within the company and local technical communities;

- roles such as a mentor or a technical lead. In any of these roles, you will assist junior professionals and share your knowledge and experiences with them.

- participation in our technical Guilds, where you can discuss technical solutions, approaches, and industry trends.

All of these elements contribute to shaping the culture and expertise within both our team and the company as a whole.

Your responsibilities

• Operate, secure, and troubleshoot AWS infrastructure across multiple accounts.
• Administer Microsoft 365, Entra ID, Intune, Defender, Exchange Online, Teams, SharePoint, and OneDrive.
• Manage identity, access, endpoint compliance, and secure SaaS integrations.
• Monitor security and service health, investigate alerts, and coordinate incident response.
• Support backup, recovery, patching, capacity management, and infrastructure as code.
• Maintain controls and audit-ready evidence for HIPAA, SOC 2, HITRUST, and other regulatory requirements.
• Create automation, operational documentation, and runbooks.
• Prepare clear handoffs to the US team at the end of each shift.
• Participate in planned maintenance.

It's about you

• Experience working in a SOC 2-compliant organization, including at least one audit or assessment cycle.
• Hands-on experience with MDR/SIEM tools.
• Experience with tools similar to Cloudflare Zero Trust.
• Hands-on AWS administration (AWS should be your strongest platform).
• 5+ years of experience in infrastructure engineering, systems administration, cloud operations, or security operations, with independent ownership of production systems.
• Working-level experience with Microsoft 365 and Entra ID, plus a basic understanding of Intune.
• Experience with Windows endpoints and Windows/Linux servers.
• Strong troubleshooting skills across cloud infrastructure, networking, identity, and security.
• Experience with incident response, endpoint security, vulnerability management, and patching.
• Strong PowerShell and practical Python or Bash skills.
• Good written English, independent ownership, and effective remote collaboration.
• Ability to learn fast and fill knowledge gaps on your own.
• Will be a plus:
• Knowledge of HIPAA and HITRUST practices.
• Hands-on experience with Cloudflare Zero Trust and Purview.
• Deeper Intune and Windows Autopilot experience.
• Terraform and/or CloudFormation.
• Experience in healthcare, medical devices, or another regulated industry.

What we have for you

Stable and long-term position in an experienced team.

Broad opportunities for professional and career growth, including professional challenges that encourage personal development, meetups, hackathons, professional communities, and more.

Horizontal connections and the absence of micromanagement foster a collaborative environment in which all team members are accessible to one another for any concerns.

Hubs in Kharkiv, Kyiv, Lviv, and Wrocław (Poland), or everything necessary for remote work.

Up to 50% compensation for the cost of educational courses and conferences to support professional development.

Free English language and business English courses.

20 days off and 7 sick days to support your health and well-being.

Legal and accounting support.

Appreciation gifts for significant events and occasions.

How to join Techstack

• Pre-screening with a recruiter.
• Review of your resume by experts.
• English check.
• Interview with our experts.
• Interview with our client.
• Technical test task (optional).

About us

Techstack is a technology product engineering company that sets an example for high development standards in the IT industry. We empower each team member to influence the development of the product, company, and processes.

Learn more about Techstack

Ajax Systems is an international technology company and the largest security systems manufacturer in Europe. Ajax products are trusted by more than 4.5 million end users and 330,000 PRO users across over 180 countries. The company offers comprehensive solutions for protecting residential and commercial properties of various sizes. Today, the Ajax portfolio includes 280 devices for intrusion protection, video surveillance, fire safety, and comfort and automation. Every year, we demonstrate exponential growth both in the size of our team and in the number of users worldwide.

Ajax Systems operates a full-cycle production model, from idea generation and prototyping to mass production and global sales. Each department fully covers a specific operational need of the business. The company’s specialists are involved at every stage — from the production line in Ukraine to the logistics center in Poland, from where products are shipped to distributors worldwide.

Now we are looking for a hands-on Cyber Security Specialist to strengthen our security posture and operational resilience. You will be at the forefront of our cybersecurity defense, responsible for incident monitoring and investigation, the deployment and improvement of security solutions, and ensuring our corporate processes and infrastructure meets compliance standards. If you are passionate about building secure systems, incidents investigation and translating technical findings into efficient mitigation actions, this role is for you.

Key Responsibilities:

• Security systems support and improvements: Participate in security architecture improvement, provide support for the full lifecycle of security systems — from design and deployment to enhancement and technical support.
• Security Monitoring & Incident Response: Improve security monitoring processes and practices, participate in security events monitoring and triaging detected events. Develop and refine SIEM detection rules, investigate anomalies and identify root-cause of incidents, develop and execute mitigation plans to neutralize threats.
• Conduction Security Assessments: Conduct technical security assessments of corporate IT systems to identify compliance deviations and vulnerabilities. Participate in risks assessments, mitigation measures design and implementation.
• Compliance & Governance: Participate in improvement of security procedures, policies, and operational instructions. Collaborate with stakeholders on security processes implementation and improvement to ensure readiness for external security audits (e.g., ISO 27001, SOC2).
• Consultancy & Support: Partner with internal teams to define security requirements for new systems and solutions, provide expert guidance on implementing security controls. Participate in security requests processing, security awareness trainings preparation and conduction.
• Reporting & Strategy: Participate in preparation of reports for management, definition and description of security strategy.

Required Technical Skills & Qualifications:

• Experience: 5+ years in CyberSecurity with a strong focus on SOC operations and security systems implementation.
• Core Proficiency: Hands-on experience with SIEM systems (Splunk/QRadar/Logsign/Wazuh), MDM solutions (Jamf/Crowdstrike/JumpCloud/Zoho), EDR/XDR solutions (SentinelOne/ESET/Defender), Cloud security monitoring (M365, GWS, AWS), and Firewall/WAF technologies (Cisco/PaloAlto/Fortinet/Ubiquiti).
• Domain Knowledge: Strong understanding of On-Premise and Cloud architectures, network security protocols, endpoint and application security. Practical experience in industry security best practices implementation (CIS, OWASP, NIST).
• Security assessment: Practical experience performing IT systems and application security assessments and reports preparation.
• Security governance: Experience in preparation of security reports, procedures and instructions for reporting. Practical knowledge of ISO 27001 technological controls implementation.
• Language Proficiency: Intermediate (B1-B2) English level required for working with technical documentation, cross-regional communication with colleagues and partners.

Preferred Skills & Certifications:

• Certifications: Vendor-specific security certifications (e.g., Google, MIcrosoft, Cisco, Palo Alto PCNSE, Fortinet NSE) are highly valued.
• Frameworks: Practical knowledge of ISO 27001 organizational controls implementation.

Why Join Us:

• Impact: Take ownership of security projects from concept to deployment.
• Culture: Work in a “zero bullshit” environment that values technical excellence and autonomy.
• Growth: Access to corporate English training and professional development/certification support.
• Health care: medical insurance.
• Beta Access: Get hands-on experience with new Ajax security systems before they reach the market.
• Innovation: Help shape the future of “Made in Ukraine” reliability.

We are looking for a SOC Lead (Detection Engineering and Automation) to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are seeking a Head of Infrastructure & Cloud Security to lead and develop our security operations across cloud, network, identity, endpoint, and data domains. In this role, you will design and enforce security protocols in a hybrid environment, lead a team of security engineers, promote a cloud-first approach, and report on enterprise security metrics
 

Responsibilities

• Shape and oversee the infrastructure and cloud security strategy, reporting directly to the CISO
• Hire, lead, mentor, and develop security engineers and team leads
• Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions
• Manage and lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments
• Collaborate with Platform and SRE teams to manage cloud IAM and security-group guardrails
• Enhance and manage endpoint security across managed devices, including hardening and telemetry health
• Own data security and cryptography controls, including KMS, secrets management, PKI, and certificate lifecycle
• Track, analyze, and report enterprise security metrics

Requirements

• Proven experience in leading security engineers and managing teams
• Hands-on experience in cybersecurity engineering
• Strong experience in securing on-premises infrastructure in an enterprise environment
• Experience with any major cloud provider
• Proficiency in cloud and network security, including CSPM/CNAPP/CWPP tools, WAF, DNS security, and IaC scanning
• Experience with EDR/XDR and MDM solutions
• Understanding of identity and access management, including cloud IAM and security-group guardrails
• Experience with KMS, secrets management, PKI, and certificate management
• Ability to enforce security controls without hindering delivery for Platform/SRE/DevOps teams

Will be a plus

• Experience in building or maturing an infrastructure/cloud security function from an early stage
• Background in fintech, brokerage, trading platforms, payments, or regulated environments
• Knowledge of Kubernetes/container security and cloud-native architectures
• Exposure to SOC 2, ISO 27001, or DORA compliance frameworks
• Familiarity with security tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a Security System Engineer to join our team!

Requirements:
- 5+ years in cybersecurity, including SOC engineering, SIEM, or detection engineering.
- Deep understanding of SOC operations, detection engineering, incident response, threat intelligence, threat hunting, DFIR, and SOC engineering.
- Hands-on experience with SIEM, EDR/XDR, NDR, threat intelligence platforms, and incident management systems.
- Knowledge of  ISO/IEC 27001, MITRE ATT&CK, and SOC maturity models, with experience assessing monitoring maturity and defining a target state and roadmap.
- Solid grasp of monitoring architecture: log collection and processing, data quality, and the trade-offs between visibility, cost, and operational load.
- Proven experience designing and tuning detections on application and infrastructure telemetry.

Responsibilities:

- Assess the maturity of the security monitoring function (data sources, pipelines, detections, processes, tooling) against industry good practice and the organization's threat landscape. Turn the findings into a prioritized, evidence-based improvement roadmap.
- Own the monitoring architecture: data sources, log pipelines, SIEM/analytics platforms, and their reliability, scalability, and cost. Define standards for log onboarding, normalization, and data quality.
- Design and evolve the detection engineering lifecycle: use-case management, coverage analysis, testing and validation, tuning, and retirement. Build detections from available telemetry and relevant threat scenarios, and measure their effectiveness.
- Use incident investigations and root cause analysis as inputs for systemic improvements to telemetry and detections.
- Automate repetitive monitoring, enrichment, and response tasks, prioritizing by the value they bring to SOC workflows.
- Work with the SOC, security, engineering, and infrastructure teams to onboard new services into monitoring by design. Provide technical guidance to SOC analysts.
- Maintain architecture and operational documentation so that decisions, integrations, and procedures stay transparent and transferable.

Our benefits to you:

☘️An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance and more

🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed

🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided

🏖Paid vacations, sick leave, personal events days, days off

💵Referral program — enjoy cooperation with your colleagues and get the bonus

📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences

🎯Rewards program for mentoring and coaching colleagues

✈️In-house Travel Service

🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more

🎳Other benefits could be added based on your location 

We are looking for a Detection Engineering & Automation Lead to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Location: Remote — Worldwide
Engagement: Full-time / Part-time
Duration: Long-term
Start: ASAP
Seniority: Senior / Architect / Consultant
English: B2+
Compensation: Negotiable, based on experience and availability

About the Project

We are looking for an experienced Senior Security / GRC Consultant to support an innovative healthcare technology company developing a robotic remote ultrasound solution for hospitals in the US and EU.

The product involves remote medical examinations, patient data processing, and healthcare software integrations.

The primary objective is to establish a robust security and compliance framework, prepare the company for SOC 2 certification readiness and a successful external audit, and address cybersecurity requirements from healthcare customers.

This is a hands-on consulting role requiring proven experience leading SOC 2 readiness and audit preparation, not simply working as an engineer in a SOC 2-compliant environment.

Key Responsibilities

SOC 2 Readiness & Audit Preparation

• Independently lead SOC 2 readiness and compliance initiatives.
• Conduct gap assessments and identify security and compliance risks.
• Develop and implement security policies, procedures, and controls.
• Organize evidence collection and audit documentation.
• Coordinate with external auditors and support the SOC 2 audit process.
• Provide actionable recommendations to engineering and management teams.

Healthcare Security & Compliance

• Ensure alignment with HIPAA, GDPR, and healthcare data protection requirements.
• Define security requirements for handling Protected Health Information (PHI).
• Assess cybersecurity risks associated with medical software and patient data.
• Support compliance with security expectations of US and EU hospitals.

Security Documentation & Customer Support

• Prepare comprehensive security white papers describing security architecture, controls, processes, and data protection practices.
• Independently complete and review customer security questionnaires.
• Participate in client calls and address technical security and compliance questions.
• Develop technical security specifications and implementation guidelines for the development team.

Medical Software Compliance

• Collaborate with the client's QA/RA Manager on IEC 62304-related processes and documentation.
• Contribute to Software Requirements Specifications (SRS), software architecture documentation, and Verification & Validation (V&V) processes.

Required Qualifications

• Senior-level experience in information security, GRC, security compliance, or security consulting.
• Proven hands-on experience independently preparing at least one organization for SOC 2 and supporting it through a successful external audit.
• Strong understanding of SOC 2 Trust Services Criteria, security controls, audit evidence, and compliance processes.
• Practical experience implementing security policies and compliance frameworks.
• Knowledge of HIPAA, GDPR, and PHI protection requirements.
• Experience creating security white papers and responding to enterprise customer security questionnaires.
• Ability to translate regulatory and compliance requirements into clear technical tasks for engineering teams.
• Strong communication and stakeholder management skills.
• English B2+ or higher, with the ability to independently lead client discussions.

Nice to Have

• Previous SOC 2 audit preparation experience in healthcare, MedTech, or digital health.
• Experience with medical devices or medical software.
• Familiarity with IEC 62304 and medical software lifecycle documentation.
• Knowledge of ISO 27001, ISO 13485, or other healthcare-related standards.
• Experience with cloud infrastructure, SaaS security, or security architecture.
• Experience supporting enterprise sales or technical presales.

Engagement Details

The engagement will begin with a technical presales phase, during which the consultant will independently assess the client's security and compliance needs, answer relevant questions, and help define the scope of work.

Following successful presales, the consultant will take ownership of SOC 2 readiness and security compliance activities.

The initial workload is expected to be substantial, potentially full-time, with the possibility of transitioning to part-time involvement as the project progresses.

Part-time consultants are also welcome to apply. The exact workload and engagement model will be determined together with the selected specialist.

The project is long-term, with potential team expansion and additional healthcare software initiatives, including ultrasound video streaming, robotic HMI, and urgent examination booking platforms.

Important

We are specifically looking for someone who has personally led SOC 2 preparation and successfully supported an external audit.

Experience developing software within a SOC 2-compliant organization alone is not sufficient.

Candidates should be ready to discuss concrete examples of previous SOC 2 projects, their responsibilities, implemented controls, evidence collection processes, and audit outcomes.

How to Apply

Please share your CV, expected hourly rate, availability, and a brief description of your hands-on SOC 2 audit preparation experience.

We are particularly interested in candidates who can demonstrate successful SOC 2 readiness projects and independently lead security compliance discussions with healthcare clients.

Smarter is a management company responsible for defining the overall strategy of investment activities and ensuring optimal management and development strategies for each business unit within the group. The main areas of activity and focus of our company include the international fintech community SFORS (https://sfors.com), the brokerage company Statok (https://statok.global), and the product company Pine Software (https://pinesoftware.com.cy)

The Head of Security is responsible for the comprehensive protection of the Group’s and the Owner’s assets, information, and interests by establishing an integrated security system—encompassing financial-economic, information, internal, and physical security—that minimizes the risks of loss, fraud, and external threats while supporting the stability and value growth of the asset portfolio.

Responsibilities

1. Corporate & Enterprise Security

• Developing, updating and implementing the company’s global security strategy in line with business objectives.
• Establishing an effective security governance framework and developing corporate security policies.
• Assessing, structuring and managing corporate risks (Enterprise Risk Management).
• Protecting the company’s physical, information, financial and reputational assets.
• Transforming and developing the security culture within the company.
• Advising the Executive Team and the Board on strategic security and risk-related decisions.

2. Physical Security & Crisis Management

• Organising comprehensive physical security for offices, sites, facilities and personnel.
• Monitoring and modernising access control systems, CCTV, security and emergency response systems.
• Developing and regularly testing crisis response scenarios (including those specific to martial law, relocation and blackouts).
• Management of travel security and executive protection processes (where required).

3. Personnel Security & Background Checks

• Organisation and automation of background verification processes for candidates, employees and third-party vendors.
• Assessment of potential reputational, compliance and fraud risks.
• Development and implementation of employee screening and insider risk management procedures (to prevent internal leaks and sabotage).
• Effective collaboration with the HR and Legal departments when resolving sensitive cases.

4. Fraud Prevention & Internal Investigations

• Designing and auditing systems to prevent fraud, corruption and internal misconduct.
•  Organising and conducting independent internal investigations.
•  Identifying conflicts of interest, industrial espionage, financial fraud and leaks of trade secrets.
•  Developing preventive controls and tools for monitoring operational risks.
•  Leading the Incident Response process (responding to security incidents).

5. Information Protection & Insider Risk Management

•  Ensuring the security aspects of processes involving the handling of confidential information and trade secrets.
• Developing and implementing measures to prevent insider threats.
• Monitoring compliance with internal requirements for handling sensitive information.
•  Participating in the investigation of information leaks, breaches of NDAs and other incidents related to human error.
•  Assessing security risks associated with counterparties, partners and third-party contractors.

6. Risk Management & Business Continuity

•  Developing and maintaining procedures for responding to security incidents.
•  Preparing and conducting training sessions, drills and crisis simulations.
• Coordinating actions during incidents relating to physical, personnel or corporate security.
• Participating in post-incident analysis and the development of corrective measures.
• Preparing recommendations to enhance the company’s preparedness for security threats.

7. Compliance & Governance

• Monitoring compliance with internal security policies and external compliance requirements.
• Fostering constructive collaboration with the Legal and Audit functions, government and law enforcement agencies, as well as external stakeholders.
• Participating in the development and oversight of policies relating to data protection, confidentiality (NDAs) and acceptable use.

• Preparing regular security reports and dashboards for executive leadership.

   

Job requirements

• Experience: At least 5 years in roles such as Head of Security, Director of Corporate Security or Enterprise Risk Manager within established organisations (mature mid-market or enterprise-level).
• Expertise: A deep understanding of how physical, operational, personnel and financial security function within a modern business.
• Management skills: Experience of building security processes, regulations and policies ‘from scratch’ or completely transforming them to suit the new scale of the business.
• Crisis management: Practical experience of incident handling and coordinating actions in stressful, uncertain situations.
• Business focus: Skills in engaging with executive stakeholders. The ability to defend budgets and decisions using the language of figures, risk analysis and business opportunities, rather than the language of ‘restrictions’.
• Technical literacy: An understanding of the basic principles of information security and modern digital risks. The ability to interact effectively with IT and other technical functions within the company.
• Personal qualities: An impeccable reputation, high ethical standards, emotional intelligence, well-developed strategic thinking and absolute discretion.

Nice to have

•  Experience of working in international companies or matrix organisations.
•  Experience of managing security in high-risk environments or geographically dispersed teams/branches.
•  Professional certifications (e.g. ASIS CPP, CISM, risk management or audit certifications).
•  Knowledge of international practices and standards in the field of corporate security, risk management and internal controls (ISO 31000, ISO 22301, ISO 27001 would be an advantage).
•  Experience of professional and effective interaction with law enforcement or military organisations.

Company offers

• Care from Day One — medical insurance from your first day, including dental care, massage, and professional psychological support.
• Work-Life Balance — 21 days of paid vacation + 30 days of paid sick leave.
• Knowledge Library — office books and access to the Kuka online library. 
• Investment in Your Energy — partial reimbursement for sports and fitness activities.
• Modern Workspaces with full power-backup infrastructure in Larnaca, Cyprus.
• Island Relaxation — up to 14 days per year at the company villa in Cyprus. 

‍

Join the Smarter team, where your talents and aspirations will be recognized! We offer a dynamic work environment, opportunities for professional growth, and support at every step of your career path. Start your journey to success with us—apply today and take the first step towards your bright future.

Smarter is an equal opportunity employer. We encourage applications from candidates of all backgrounds and experiences. Please note that only shortlisted candidates will be contacted. Thank you for considering Smarter as your next career move!!

About us
 

ARRISE is a global leader in software development and services for the iGaming industry, bringing together more than 2,500 professionals operating across more than 12 locations worldwide.

From concept through to delivery, we combine technical expertise, creativity and industry knowledge to develop products, platforms and services that shape player experiences and support some of the industry's leading brands.

We are best known for the work we deliver for Pragmatic Play, creating and supporting technology, products and specialists services enjoyed by millions of players worldwide.

About the role

We are seeking an experienced IT Compliance Specialist to lead and manage our compliance programs across ISO 27001 and SOC 2, ensuring our gaming platform and related services meet the highest standards of security, privacy, and regulatory compliance. The role will serve as the primary liaison for both external and internal auditors for ISO 27001 certification and SOC 2 attestation, with a focus on addressing scope changes, corporate structure changes, and responding to client security questionnaires.

What you will do

• Compliance Management
  • Lead and maintain the company’s ISO 27001 Information Security Management System (ISMS) and SOC 2 Trust Services Criteria certification programs.
  • Serve as the primary point of contact for engaging with external and internal auditors, facilitating ISO 27001 certification and SOC 2 attestation processes.
  • Own compliance audits: plan, coordinate with auditors, collect evidence, and provide comprehensive audit responses.
  • Manage risk assessments, control testing, and remediation activities to ensure ongoing compliance.
• Policy & Process Governance
  • Develop, maintain, and enforce IT security and compliance policies, procedures, and standards.
  • Ensure documentation aligns with ISO 27001 Annex A controls, SOC 2 requirements, and addresses evolving compliance needs due to scope or structural changes.
  • Respond to client security questionnaires with accurate and detailed information to demonstrate compliance
• Control Implementation & Monitoring
  • Oversee access control, change management, incident management, and third-party/vendor risk management within the scope of ISO 27001 and SOC 2.
  • Ensure compliance across environments supporting software development, hosting platforms, and APIs.
  • Monitor the effectiveness of security controls and recommend improvements to mitigate emerging risks.
• Audit & Assurance
  • Act as the central liaison for external auditors, regulators, and certification bodies, ensuring clear communication and issue resolution.
  • Conduct internal compliance audits, gap assessments, and readiness reviews to maintain certification readiness.
  • Track and close compliance findings and audit issues, ensuring timely resolution and documentation.
  • Provide expert guidance on compliance implications of ISO 27001 scope changes and corporate structure changes.
• Training & Awareness
  • Build awareness of compliance requirements across development, operations, and support teams.
  • Deliver targeted training on compliance obligations, including secure software development, data handling, and gaming industry standards.
  • Vendor & Third-Party Risk Management
  • Assess compliance of key vendors, including cloud hosting providers, content partners (e.g., Pragmatic Play), and integration providers.
  • Ensure contractual and SLA alignment with ISO 27001 and SOC 2 requirements.
• Reporting
  • Provide regular compliance updates, risk posture reports, and responses to client inquiries to senior management and stakeholders.

  • Support management with compliance performance metrics and KPIs.

     

What you bring

• Bachelor's degree in information security, Computer Science, Risk Management, or a related field.
• 5+ years’ experience in IT compliance, GRC, risk management, or information security, ideally in gaming, fintech, or other regulated industries.
• Strong understanding of:
• ISO 27001:2022 Information Security Management System (ISMS)
• SOC 2 Trust Services Criteria (Security, Availability, Confidentiality, Processing Integrity, Privacy)
• Proven track record of leading certification and audit processes, including direct engagement with auditors.
• Experience responding to client security questionnaires and communicating compliance status effectively.
• Experience with SaaS/PaaS environments, APIs, and cloud-based hosting services.
• Knowledge of secure SDLC, DevOps, and CI/CD compliance integration.
• Professional certifications preferred (e.g., CISA, CISM, ISO 27001 Lead Implementer/Auditor, CCSK, CRISC).
• Excellent knowledge of IT compliance, audit, and risk frameworks, with expertise in ISO 27001 and SOC 2.
• Strong communication and stakeholder management skills, with the ability to represent the company to auditors and clients.
• Ability to influence cross-functional teams (dev, ops, support) to adopt compliance practices.
• Analytical thinker with a problem-solving approach to compliance challenges, including scope and structural changes.
• Detail-oriented with strong documentation, evidence management, and client questionnaire response skills.

What we offer

• Competitive compensation
  • A competitive salary that reflects your skills and experience.
• Annual leave
  • In accordance with the applicable legislation (20 or 26 days annual leave).
• Private medical cover
  • Private medical insurance to help you look after your health and wellbeing, available after successfully passing the probation period.
• Learning Hub
  • Access to our online learning platform, with courses and resources to help you build your skills and grow your career.
• Gym & fitness membership
  • Multisport membership, after successfully passing probation.

We are looking for an experienced Information Security GRC Manager to lead and develop our Information Security Governance, Risk & Compliance function.

This is a hands-on leadership role with the opportunity to shape the GRC operating model, roadmap, team, and core processes in a growing international FinTech environment.

You will work directly with the CISO and collaborate closely with Security, Legal, Risk, Procurement, IT, Engineering, Product, Platform, HR, and business teams.

The role combines security governance, cyber risk, regulatory assurance, third-party risk, policy management, and security awareness, with a strong focus on building practical controls and processes that support business growth.
 

Responsibilities

• Own and develop the Information Security GRC strategy, roadmap, operating model, and governance cadence
• Lead security governance, regulatory assurance, cyber risk, third-party security risk, policy lifecycle, and security-awareness oversight
• Establish clear ownership for security controls, risks, exceptions, evidence, and remediation actions
• Coordinate SOC 2, DORA/CySEC-related assurance, internal and external audits, and regulatory requests
• Maintain cyber-risk and exception registers and ensure material risks are treated, accepted, or escalated
• Lead security aspects of ICT supplier tiering, due diligence, reassessment, and high-risk supplier decisions
• Develop practical security policies, standards, controls, and guidance
• Ensure audit and assurance evidence is reliable, traceable, and reusable
• Track control gaps, findings, and remediation commitments and escalate material risks
• Partner with Security, IT, Engineering, Product, Platform, Legal, and business teams on control design and risk-based decisions
• Prepare concise GRC and risk reporting for the CISO and executive stakeholders
• Build, develop, and manage the GRC team, including responsibilities, goals, and performance expectations
• Improve GRC efficiency through automation, reusable evidence, better data quality, and responsible AI-assisted workflows
   

Requirements

• Strong practical experience in Information Security GRC, cyber/technology risk, security compliance, or assurance
• Hands-on experience with recognized frameworks such as SOC 2, ISO 27001, DORA, PCI DSS, NIST CSF, COBIT, or similar
• Experience establishing or operating security controls, risk registers, exception processes, and assurance programs
• Strong understanding of control design, operating effectiveness, evidence quality, findings, and remediation
• Experience coordinating internal or external audits and regulatory or assurance activities
• Practical experience with cyber risk assessment, risk treatment, risk acceptance, and escalation
• Understanding of third-party and ICT supplier security risk
• Ability to translate regulatory and security requirements into practical controls and processes
• Strong stakeholder management skills and ability to work effectively with technical, business, and executive audiences
• Sufficient technical understanding of cloud, infrastructure, identity, IT operations, and product development to work effectively with technical teams
• Experience leading a team, function, program, or complex cross-functional initiatives
• Strong ownership, prioritization, and decision-making skills
   

We Offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays according to company policy
• Medical budget
• Remote work opportunity
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear, etc.)

We are inviting you, a highly motivated and results-oriented Incident Response & DFIR Lead to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success.
 

Responsibilities

• Lead incident response, containment and forensic coordination for confirmed security incidents.
• Act as Incident Commander for major security incidents within the defined authority model.
• Assign incident roles and maintain clear ownership of investigation, containment and recovery actions.
• Maintain incident timelines, evidence logs, decision logs and action tracking.
• Coordinate investigation across endpoints, servers, identities, cloud platforms, SaaS environments and relevant network telemetry.
• Direct forensic collection and analysis required to determine attack path, scope, persistence and impact.
• Coordinate containment actions with IAM, Platform, IT, Security Engineering, Product and other technical owners.
• Recommend high-impact containment decisions to the Group Manager of Cyber Defense and CISO where required.
• Coordinate eradication and recovery activities and ensure systems return to a sufficiently trusted state.
• Ensure relevant evidence is preserved for Legal, HR, regulatory, disciplinary and post-incident requirements.
• Maintain practical forensic and evidence-handling standards.
• Develop and maintain incident playbooks, forensic checklists and containment procedures.
• Lead post-incident reviews and root-cause analysis.
• Ensure post-incident remediation actions have accountable owners, due dates and follow-up.
• Identify telemetry, detection and forensic-readiness gaps exposed during investigations.
• Convert investigation findings into recommendations for Detection Engineering, IAM, Security Engineering, Product Security and other control owners.
• Support incident exercises and readiness testing.
• Develop and mentor Incident Response / DFIR Specialists.
• Coordinate with external forensic, incident-response or specialist providers where required.
• Provide concise incident updates to Cyber Defense leadership, CISO and relevant stakeholders.
   

Requirements

• Strong hands-on knowledge of the incident response lifecycle: investigation, containment, eradication, recovery and lessons learned.
• Experience leading complex security incidents and coordinating multiple technical teams during active response.
• Practical experience investigating endpoint, identity, server, cloud or network compromise using EDR/XDR, SIEM and relevant audit logs.
• Ability to reconstruct attacker activity, including initial access, credential abuse, persistence, privilege escalation, lateral movement, data access and exfiltration.
• Working knowledge of digital forensics, evidence preservation, forensic timelines and chain-of-custody principles.
• Experience designing and validating containment actions such as endpoint isolation, account/session revocation, credential rotation, blocking indicators, network restrictions and service isolation.
• Experience with Microsoft Entra ID / Active Directory incident investigation.
• Understanding of common incident scenarios including ransomware, malware, phishing/BEC, account takeover, cloud/SaaS compromise, data exfiltration and insider misuse.
• Strong understanding of Windows, Linux, identity and enterprise networking from an investigation perspective.
• Ability to document technical findings, timelines, evidence, assumptions and containment recommendations clearly.
   

Will be a plus

• Hands-on experience with Cortex XDR, Elastic Security or equivalent enterprise platforms.
• Experience investigating AWS or other cloud environments.
• Experience with forensic tools such as Velociraptor, KAPE, Volatility, Autopsy, Magnet, EnCase, FTK or equivalent.
• Experience investigating ransomware, BEC, insider-threat or cloud-account-compromise cases.
• Experience developing or improving incident response playbooks and containment procedures.
• Experience running tabletop or cyber incident exercises.
• Experience working with Legal, Privacy, HR or regulators during security incidents.
• Experience managing external DFIR or incident-response retainers.
• Python, PowerShell or other scripting experience useful for investigation and evidence processing.
• Experience in fintech, payments, brokerage, trading, banking or another regulated environment.
• Relevant certifications such as GCIH, GCFA, GCFE, GNFA, OSCP, CISSP or equivalent (preferred, not mandatory).
   

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company's approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Компанія: продуктова компанія, що створює сучасні хмарні сервіси та embedded-рішення. 

Основні завдання 

• Захист хмарних сервісів (AWS / GCP / Azure). 
• Побудова політик IAM, впровадження Zero Trust. 
• Налаштування захищеної мережевої архітектури (VPC, security groups, WAF). 
• Контроль конфігурацій, аудит та моніторинг безпеки. 
• Аналіз журналів, реагування на інциденти, Threat Hunting. 
• Захист даних: KMS, encryption at rest/in-transit. 
• Перевірка безпеки CI/CD та інфраструктурного коду (Terraform, Ansible). 
• Співпраця з розробниками для покращення безпеки API, мікросервісів та контейнерів. 

Необхідні компетенції

Технічні: 

• Досвід з AWS/GCP/Azure на рівні безпеки та архітектури. 
• IAM, KMS, WAF, CloudTrail/GuardDuty або їх аналоги. 
• Контейнеризація та Kubernetes Security. 
• SIEM/SOC процеси, моніторинг, реагування. 
• DevSecOps: SAST, DAST, secret scanning, IaC security. 
• Знання OWASP, MITRE ATT&CK. 

Архітектурні: 

• Проєктування безпечної хмарної архітектури згідно best practices. 
• Threat Modeling для хмарних систем. 
• Ризик-менеджмент та формування політик. 

Софт-скіли: 

• Вміння працювати з технічними командами. 
• Чітка документація та презентація результатів. 

Очікувані результати (перші 3 місяці)
1-й місяць 

• Провести аудит існуючих хмарних систем компанії. 
• Скласти перелік компонентів, як і потребують безпекової перевірки. 
• Створити протокол аудиту хмарної безпеки. 
• Провести аудит одного продукту та обговорити висновки з технічним керівником. 

2-й місяць 

• Розробити комплексний протокол безпеки для хмарних сервісів. 
• Провести аудит другого продукту. 
• Узгодити результати та підготувати рекомендації розробникам. 
• Написати методичні рекомендації щодо підвищення рівня безпеки 
• API, мікросервісів та інфраструктури. 

3-й місяць 

• Створити та задокументувати Політику безпеки хмарних сервісів. 
• Впровадити автоматичні перевірки інфраструктури (IaC scanning, misconfiguration detection). 
• Розробити річний план безпекових ініціатив.
   

Ми пропонуємо:

Кар'єрний розвиток: вертикальний та горизонтальний ріст, профільні курси, тренінги, технічний обмін і участь у стратегічних проєктах.

Безпека та стабільність: бронювання військовозобов'язаних співробітників із першого місяця.

Медичне страхування.

Офіційне працевлаштування та соціальні гарантії: відпустка, лікарняні, повний соціальний пакет.

Юридична підтримка: консультації та супровід із питань військового обліку.

Адаптація: якісний онбординг із менторською підтримкою та поетапним залученням у проєктну діяльність.

Комфортні умови: корпоративне харчування, зони відпочинку, дружня атмосфера та облаштоване укриття на території офісу.

Зручна локація: 10 хвилин пішки від метро.

Приєднуйтесь до команди, яка створює технології, що роблять Україну безпечнішою. Реальний вплив. Реальні рішення. Реальне майбутнє.

Приєднуйся до Zeely як Security Engineer і допоможи нам посилити й масштабувати безпеку нашої платформи та інфраструктури.

Це hands-on роль: ти шукатимеш і виправлятимеш вразливості, самостійно закриватимеш security-тікети й допомагатимеш відбивати атаки. Ти тісно співпрацюватимеш з Security Officer, Principal System Architect, а також з Platform, DevOps і Backend командами.

Про нас:
Zeely — це агентна AI-платформа для створення, запуску та масштабування платної реклами.

Простими словами: ми зробили найкращі AI-рішення та маркетингові інструменти доступними для малого й середнього бізнесу — інструменти, які раніше були лише у великих брендів із дорогими маркетинговими командами.

Наступний великий крок — B2B-рішення для великих маркетингових команд і enterprise-клієнтів: воркфлоу, аналітика креативів і повний контроль над кампаніями на рівні всієї команди. Для компаній, де performance-маркетинг уже працює на масштабі й потребує більшої ефективності та автоматизації.

Цифри, які говорять самі за себе:

• 4 роки на ринку — стабільна, прибуткова компанія з міжнародними інвесторами;
• ×6 зростання за минулий рік;
• 2 000 000+ бізнесів уже користуються Zeely;
• Топ-1 у своїй категорії на ринку США;
• 200+ спеціалістів у команді;

• Ринки: США + worldwide.

   

Що ти робитимеш:

• Шукати, пріоритезувати й виправляти вразливості в продукті та хмарній інфраструктурі;
• Реагувати на security-інциденти й допомагати відбивати атаки в реальному часі;
• Закривати security-тікети від початку до кінця: від розслідування до фіксу в коді чи інфраструктурі;
• Інтегрувати security-перевірки та інструменти в процес розробки (SDLC / CI/CD);
• Перевіряти зміни в коді та інфраструктурі з погляду безпеки;
• Допомагати впроваджувати security-контролі та збирати докази для compliance (SOC 2, CASA);

• Працювати з DevOps і Platform командами над управлінням доступами, секретами та hardening нашого AWS-середовища.

   

Що потрібно, щоб приєднатися до нас:

• 5+ років досвіду в інженерії та вміння працювати повністю самостійно;
• 2+ роки hands-on досвіду в security (Security Engineer або комбінована роль Security/DevOps чи Platform);
• Досвід backend-розробки хоча б однією з мов: Node.js / JavaScript / TypeScript, Java, C#/.NET, Go або Rust;
• Сильний практичний досвід у DevOps і хмарній інфраструктурі (AWS);
• Hands-on досвід пошуку й виправлення вразливостей (OWASP Top 10, помилки конфігурації в хмарі, вразливості залежностей);
• Досвід роботи з security-інцидентами;
• Англійська на рівні Upper-Intermediate (B2+) або вище;

• Вільна українська.

   

Буде плюсом:

• Кар’єрний шлях backend → DevOps/Platform → Security;
• Security-сертифікації (AWS Security Specialty або аналогічні);
• Досвід підготовки до аудитів SOC 2, ISO 27001 або CASA;
• Розуміння вимог GDPR та/або CCPA (CPRA).

Чому варто працювати з нами:

• Hands-on роль у security з реальним впливом у стабільній, прибутковій продуктовій компанії;
• Робота з новітніми технологіями та розробка AI-інструментів;
• Сильна команда A-level гравців, які мотивують одне одного рости;
• Remote-first формат та офіси у Варшаві й Києві;
• Регулярні performance review, щоб твій ріст був прозорим і винагороджувався.

Етапи рекрутменту:
Intro Call → Technical Interview → Test Task → Final Interview → Reference Check → Offer.

Надсилай CV — будемо раді познайомитися 💚

Ми — IT SmartFlex, українська ІТ компанія, заснована в 2019 році як дочірня компанія провідного мобільного оператора Vodafone Ukraine.

🌟 Наша місія — об’єднати талановитих експертів у телекомунікаціях та програмному забезпеченні, щоб створювати інноваційні рішення та продукти, які роблять життя мільйонів користувачів кращим та зручнішим.

Про нас:
— Ми розробляємо WOW-діджитал сервіси, якими може користуватися кожен другий українець.
— Створюємо програмні продукти в Україні, які цікаві за її межами.
— Використовуємо сучасні новітні технології та інструменти.

Основним напрямком діяльності IT SmartFlex є R&D для телекому — це одна з найбільш високотехнологічних галузей, яка сьогодні охоплює не тільки послуги мобільного зв’язку, а й такі напрямки, як сервіси самообслуговування, Вig Data, IoT, CRM, хмарні сервіси.

Наші цінності:
— Відповідальність 🛡️
Ми віримо, що кожен член нашої команди відповідає за результат своєї роботи і впливає на успіх компанії.

— Людиноцентричність 👥
Ми уважно слухаємо потреби наших користувачів і завжди прагнемо перевершити їхні очікування.

— Єдність 🙏
Ми переконані, що разом ми сильніші. Єдність нашої команди дозволяє нам долати будь-які виклики та досягати поставлених цілей.

— Довіра 🤝
Довіра — це основа наших відносин як всередині компанії, так і з нашими партнерами. Ми віримо в чесність і прозорість у всіх наших діях.

— Сміливість 💪
Ми не боїмося нових викликів і завжди прагнемо до кращого. Сміливість дозволяє нам виходити за рамки звичного, експериментувати та знаходити нові шляхи для розвитку.

Ми шукаємо висококваліфікованого та мотивованого експерта з інформаційної безпеки, який відповідатиме за забезпечення інформаційної безпеки «ІТ СмартФлекс» в процесі життєвого циклу розробки програмного забезпечення у відповідності до вимог міжнародних стандартів та супровід, адміністрування та експлуатацію систем забезпечення інформаційної безпеки. Ця роль вимагає глибокого розуміння мережевої безпеки, сильних аналітичних навичок та здатності випереджати нові кібер-загрози.

Задачі:

• Розробка та вдосконалення процесів захисту ІТ-інфраструктури, хмарних середовищ і продуктів.
• Аналіз проєктних ініціатив та проєктної документації, проведення security/architecture review, формування висновків щодо ризиків і відповідності вимогам інформаційної безпеки.
• Участь у threat modeling та оцінці ризиків для програмних продуктів.
• Реагування на інциденти безпеки (Incident Response): triage, containment, eradication, lessons learned
• Співпраця з DevOps та розробниками у межах DevSecOps.
• Реагування на інциденти та участь у розслідуваннях інформаційної безпеки, аналіз журналів, мережевого трафіку, поведінки користувачів і сервісів.
• Підтримка та налаштування засобів захисту (EDR/XDR, DLP, WAF, IDS/IPS)
• Підготовка звітів, рекомендацій та документації з інформаційної безпеки.

Бажані кваліфікації:

• Вища технічна освіта в галузі ІТ, інформаційної безпеки, телекомунікацій або суміжних галузях
• 5+ роки досвіду в Information Security / Blue Team
• Розуміння принципів мережевої безпеки (TCP/IP, DNS, HTTP(S), VPN, firewalls)
• Досвід з EDR/XDR-рішеннями (Microsoft Defender, CrowdStrike, SentinelOne, Cortex та ін.)
• Оцінка AI рішень на всіх етапах життєвого циклу (design → development → deployment → operation) з точки зору інформаційної безпеки, Security review AI ініціатив:
  • внутрішніх (власні ML/LLM рішення, AI фічі продукту)
  • зовнішніх (Copilot, SaaS AI сервіси, third party AI API)
• Знання MITRE ATT&CK, kill chain, типових TTP загроз
• Досвід аналізу логів Windows / Linux / Cloud
• Розуміння безпеки веб-додатків (OWASP Top 10)
• Практичні навички роботи з інцидентами безпеки
• Досвід роботи з хмарними середовищами (Azure / AWS / GCP)
• Знання підходів DevSecOps, CI/CD security
• Навички скриптингу (Python, PowerShell, Bash)
• Участь у purple team активностях
• Досвід проведення внутрішніх security awareness або tabletop exercises
• Знання українського законодавства у сфері інформаційної безпеки (Закони України «Про інформацію», «Про захист персональних даних») та міжнародних стандартів і методологій у сфері інформаційної безпеки (ISO/IEC 27001, NIST)

Буде перевагою:

• Розуміння життєвого циклу розробки ПЗ
• Досвід захисту SaaS / Web / API / Microservices
• Участь у побудові безпеки «з нуля»
• Практичний досвід роботи з SIEM (Microsoft Sentinel, Splunk, Elastic, QRadar тощо)
• Англійська мова на рівні Intermediate+ (документація, комунікація)

Ми пропонуємо:

• Цікаві проекти та передові технології 💻
• Робота у високопрофесійній та мотивованій команді
• Гнучкий гібридниій графік (м.Київ) та можливість іноді працювати віддалено 🏠
• Корпоративні тренінги, професійні конференції 📚
• Обмін знаннями та найкращими практиками 💡
• Медичне страхування з першого місяця роботи 🏥
• 24 дні оплачуваної відпустки
• Оплачувані лікарняні 🤒
• Корпоративна техніка
• Якісний корпоративний зв’язок Vodafone 📲

Процес інтервʼю на дану позицію:
Інтерв’ю з рекрутером

• Технічне інтерв’ю з технічними фахівцями
• Інтерв’ю з керівництвом

Якщо ви маєте проактивну позицію, бажання працювати в продуктовій команді, прагнете працювати з передовими технологіями та налаштовані на професійне зростання разом з нами — ми чекаємо на вас! 🚀