Jobs Security

We are inviting you, a highly motivated and results-oriented Security Manager (Hybrid Infrastructure) to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success.
 

Responsibilities

• Own and lead Hybrid Infrastructure Security across cloud, network, identity, endpoint, and data domains
• Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions
• Lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments
• Manage cloud IAM and security-group guardrails in close collaboration with Platform and SRE teams
• Operate and mature endpoint security (EDR/XDR/MDM) across managed devices, including hardening and telemetry health
• Own data security and cryptography controls: KMS, secrets management, PKI, and certificate lifecycle
• Lead, mentor, and develop a team of security engineers (4 direct reports — Cloud & Network, Endpoint, IAM, Data Security & Cryptography)

Track, analyze, and report enterprise security metrics

Requirements

• 5+ years of experience in managing and developing security teams
• Proven track record in hands-on cybersecurity engineering roles
• Enterprise-level background
• Practical experience with on-premises environments
• Solid experience with networking
• Hands-on experience with cloud platforms
• Broad experience across cloud posture, network, identity, endpoint, and data protection security domains
• Experience with CSPM/CNAPP/CWPP tooling and cloud guardrails (WAF, DNS security, IaC scanning)
• Experience with cloud IAM and security-group/IaC security patterns
• Experience operating EDR/XDR and MDM solutions
• Experience with KMS, secrets management, PKI, and certificate management
• Ability to enforce security controls without unnecessarily blocking delivery for Platform/SRE/DevOps teams
• Upper-Intermediate English and higher

Will be a plus

• Higher education in Computer Science, Information Security
• Background in fintech, brokerage, trading platforms, payments, or other regulated environments
• Track record of building or maturing an enterprise/cloud security function from an early stage
• Familiarity with tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk
• Knowledge of Kubernetes/container security and cloud-native architectures
• Exposure to SOC 2, ISO 27001, or DORA compliance frameworks
   

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a Security Coordinator who will help us keep our company’s data, infrastructure, and SaaS ecosystem secure and well-governed.
 

This role focuses on access control, SaaS security, and risk management, ensuring that our systems are used safely and only by the people who actually need access.
 

Responsibilities

• Maintain a complete inventory of company systems and assets, including:
  • Cloud infrastructure
  • Databases
  • Google Workspace / shared drives
  • Internal tools
  • Third-party SaaS applications
  • AI tools used by the team
• Ensure proper access management across all systems:
  • Apply the principle of least privilege
  • Review and revoke unnecessary permissions
  • Monitor shared accounts and external access
• Conduct periodic access audits for:
  • Cloud environments
  • Databases
  • Google Drive and internal documentation
  • SaaS tools and integrations
• Identify and mitigate security risks related to AI tools, including:
  • Preventing sensitive data from being uploaded to AI platforms
  • Managing access to AI tools
  • Creating safe usage policies
• Work with engineering and operations teams to:
  • Improve security practices
  • Document access processes
  • Maintain internal security guidelines
• Track and manage security risks from third-party services
• Assist with security documentation and compliance processes (e.g., SOC2 or internal security policies).
   

Requirements

• Experience with cloud platforms (AWS, GCP, Azure, or similar)
• Familiarity with identity and access management concepts
• Experience managing SaaS ecosystems (Google Workspace, Slack, etc.)
• Understanding of data security risks and access control
• Ability to analyze system permissions and identify unnecessary access
• Awareness of AI-related security risks (data leakage, prompt injection, uncontrolled usage)
   

Nice to Have

• Experience with SOC 2 / security compliance
• Familiarity with IAM tools or security monitoring platforms
• Background in DevOps, IT administration, or security operations
   

What Success Looks Like

• All company systems are properly inventoried and documented
• Access is granted strictly on a need-to-know basis
• No forgotten accounts, open shares, or unnecessary privileges
• AI tools are used safely and responsibly

You will join a small, high-trust Cyber Security Engineering team responsible for strengthening the security posture of a modern, globally distributed technology environment.

This is a hands-on engineering role focused on application security, container security, and AI security. You will build automated security controls, guardrails, and real-time visibility that make the secure path the easiest path for engineering teams.

You’ll work closely with platform engineering, cloud infrastructure, identity, technology assurance, and security leadership teams. The role offers significant ownership and the opportunity to influence not only technical controls, but also security standards and governance decisions across the organization.

This is not a role focused on manually reviewing individual applications. You’ll be expected to build automated, scalable security solutions that enforce standards at the point of deployment and provide clear visibility into security risks across running environments.

What we’re looking for:

We need a technically strong security engineer who understands that security and developer experience should work together.

The ideal candidate:

• thinks in terms of automation, scalability, and enforceable controls rather than manual reviews;
• has strong hands-on experience with Kubernetes and container security;
• understands application security, software supply chain risks, and secure development practices;
• enjoys building security tooling, observability, and policy-as-code solutions;
• is actively using AI-assisted development tools in their own engineering workflow;
• has practical or growing experience with AI and LLM security;
• can communicate complex technical findings clearly to senior technical and security stakeholders;
• is comfortable working in a small, collaborative, high-trust environment;
• approaches security friction as an engineering problem to solve.

Responsibilities:

• Design and deploy automated security controls for Kubernetes and application deployments.
• Implement admission controllers, policy-as-code, and automated security scanning.
• Define and enforce container security standards, including image scanning, runtime baselines, and registry governance.
• Manage software supply chain security, including dependency scanning, SBOMs, build-time and runtime analysis.
• Build application security observability and dashboards that provide real-time visibility into deployed and running systems.
• Develop automated guardrails that enable teams to use AI coding tools securely without requiring manual security review for every use case.
• Own security configuration and controls for AI platforms, including access controls, data flows, hardening, and protection against prompt injection and data exfiltration.
• Assess security risks associated with AI tools, MCP connectors, APIs, and agentic systems.
• Define security and behavioural baselines for agentic execution environments.
• Collaborate with security and engineering teams on container runtime telemetry and monitoring.
• Work with identity and cloud security teams on workload access, service identity, and secrets management.
• Curate and automate internal security tooling with a focus on reliability, security, and operational efficiency.
• Contribute to security standards, technical controls, and governance decisions.
• Communicate security findings and recommendations to senior stakeholders.

Requirements:

• Proven hands-on experience with Kubernetes and container security.
• Experience with container image scanning, admission control, runtime protection, and policy-as-code.
• Experience building automated security controls that can scale across complex environments.
• Strong understanding of application security fundamentals, including OWASP Top 10 and secure software development practices.
• Experience with software supply chain security and dependency management.
• Experience building security visibility through instrumentation, runtime analysis, monitoring, or operational dashboards.
• Experience with CI/CD security and automated security checks.
• Active experience using AI-assisted development tools such as Claude Code, GitHub Copilot, or equivalent.
• Practical or growing knowledge of AI/LLM security, including prompt injection, data exfiltration, model/API security, or agentic system controls.
• Strong analytical and problem-solving skills.
• Ability to communicate complex technical security topics clearly and concisely to senior stakeholders.
• Advanced English.

Nice to have:

• Experience with security tools such as Aikido, CrowdStrike, Bold Security, Nightfall, Zscaler, or Lakera Guard.
• Experience with MCP (Model Context Protocol), agentic frameworks, or AI platform administration.
• Experience in private equity, FinTech, financial services, or other environments where protection of sensitive information is critical.
• Experience measuring and optimizing the operational cost of security controls.
• Experience working with local or open-source LLMs for automation and security use cases.
• Experience with Datadog or similar observability platforms.
• Experience with SBOM tooling and software composition analysis.
• Experience with cloud security and workload identity.
• Experience working with policy-as-code frameworks.

Tools you’ll work with:

Kubernetes, CI/CD platforms, SBOM tooling, Aikido, Claude Enterprise, Claude Code, MCP, CoWork, DTEX, Datadog, and policy-as-code frameworks.

We are looking for a Head of Security Business Partnering to drive the execution of the cybersecurity strategy across a diverse technology ecosystem.

Purpose of the role:

• You will coordinate Security Business Partners assigned to individual business units and ensure that security priorities are translated into clear roadmaps, measurable targets and completed actions.
• You will own the Security Business Partnering operating model, planning cycle and performance framework.
• You will establish governance, drive continuous improvement of interaction processes, and track security posture, risks and delivery across the ecosystem.
• You will resolve dependencies and escalate issues that require executive decisions. Central security teams will remain responsible for their domains.
• Your role is to align priorities, clarify ownership and ensure that agreed actions are delivered.
   

Key responsibilities:

• Coordinate and develop Security Business Partners across the business units.
• Set common responsibilities, working practices and performance expectations.
• Review the performance against agreed KPIs, objectives and delivery commitments.
• Turn the cybersecurity strategy into business-unit roadmaps, targets and delivery plans.
• Manage the security portfolio across the ecosystem, including strategic programmes, remediation plans, KPIs, OKRs and SLAs.
• Track delivery, address delays and require recovery plans when work falls behind.
• Escalate material risks, missed commitments and unclear ownership.
• Coordinate initiatives involving several business units or central security teams.
• Match business demand with the priorities and capacity of central security functions.
• Explain technical risks in terms of revenue, operations, customers, regulation and market expansion.
• Identify recurring problems that should be solved through shared capabilities, common standards or secure-by-default solutions.
• Support the security integration of acquired and newly established business units.

Required Experience:

• Management experience in cybersecurity within a complex technology organisation.
• Experience coordinating or functionally leading senior security professionals.
• Experience working across several business units or products in a matrix structure.
• Strong skills in security planning, governance and delivery management.
• A record of turning security strategy into measurable business-unit results.
• Experience managing security KPIs, OKRs, SLAs, roadmaps and remediation programmers.
• The ability to influence executives, align stakeholders and hold owners accountable.
• Strong performance-management and stakeholder-management skills.
• The ability to create structure and transparency where ownership is distributed.
   

Nice to have:

• Experience in iGaming, FinTech, or another highly regulated digital industry is an advantage.
• Experience with federated security models, M&A integration or executive governance is also valuable.

At MacPaw, we craft software that makes everyday tech life simpler, cleaner, and more enjoyable. From globally loved products like CleanMyMac and Setapp to emerging cybersecurity tools like ClearVPN and Moonlock, we are building a product ecosystem that reaches millions of people worldwide.

We’re looking for a Senior Infrastructure Security Engineer to join our Information Security Team, supporting MacPaw’s product ecosystem as we transition to our next-generation setup.

Our Security and Infrastructure teams ensure that all MacPaw products run on a highly resilient, compliant, and rock-solid foundation, protecting user data and business operations at scale.

As a Senior Infrastructure Security Engineer, you will take dedicated ownership of securing our production infrastructure, establishing compliance control baselines, and maintaining a strong security posture. You’ll define, test, and coordinate security frameworks across bare-metal environments and GCP, working hand-in-hand with our SRE team as a technical peer and security partner.

If you’re excited to take ownership of MacPaw’s infrastructure security, reduce automated evidence coverage gaps, and collaborate on advanced CNAPP tools and agentic AI automation, we’d love to hear from you!

In this role, you will:

• Participate in Wiz CNAPP service adoption.
• Drive Kubernetes and cloud posture hardening across GCP, including RBAC reviews, admission control, network policies, and runtime threat detection.
• Take ownership of the infrastructure vulnerability backlog, driving remediation down against severity-based SLAs in close collaboration with SRE.
• Build and ship agentic AI security automation into code-reviewed repositories to streamline vulnerability management and operational security workflows. 
• Collaborate closely with the SRE team to embed security controls into CI/CD pipelines and Infrastructure-as-Code without adding unnecessary friction.

Skills you’ll need to bring:

• Strong expertise in Infrastructure-as-Code and automation using Terraform.
• Python or Go skills to build security tooling rather than just filing tickets.
• Hands-on experience with incident management, threat containment, and root cause analysis (RCA) for infrastructure security incidents.
• Demonstrated ability to work with Service Reliability Engineers (SRE) team as a technical peer, driving security engineering through influence and shared goals.
• Hands-on production cloud security experience at scale on GCP (IAM least privilege, network segmentation, runtime detection, and posture hardening).
• In-depth Kubernetes security experience in production: RBAC, admission control (OPA/Kyverno), network policies, runtime detection, and image provenance.
• Proven experience in bare-metal and self-hosted Linux infrastructure security (host-based controls, Linux hardening, and multi-tenancy risk mitigation outside managed cloud).
• Experience in infrastructure vulnerability management: triage, SLA management, and driving remediation through engineering teams.
• Ability to write and ship agentic AI automation into production repositories to enhance security operations.
• At least an Upper-Intermediate level of English and fluent Ukrainian.

As a plus:

• Experience securing agentic AI systems in production (prompt injection, tool poisoning across MCP, human-in-the-loop approval flows, and kill switches).
• Experience with CNAPP/CSPM platform migrations or ownership (Wiz, Sysdig, Orca, or Prisma Cloud).
• Experience with NixOS or other immutable Linux distributions.
• Familiarity with Cloudflare edge security controls.
• Experience operating within environments under active ISO 27001 or SOC 2 Type II compliance frameworks.
• Relevant security certifications as signal (CKS, OSCP, GCP Professional Cloud Security).

What we offer:

• We are a Ukrainian company, and we stand with Ukraine against the russian aggression
  We maintain workplaces for the mobilized Macpawians and provide financial support to colleagues or their families affected by the war. Here, you can also read about the MacPaw Foundation, which intends to help save the lives of Ukrainian defenders and provide relief to as many civilians as possible.
• We are committed to our veterans
  Our Veteran Career and Empowerment Program is designed to ensure our veterans and active military personnel receive the recognition, support, and opportunities they deserve.
• Hybrid work model
  Whether to work remotely or at the hub is entirely up to you. If you decide to mix it, our Kyiv office, which works as a coworking space, is open around the clock. The office is supplied with UPS and Starlink for an uninterrupted work process.
• Your health always comes first
  We guarantee medical insurance starting on your first working month. For those abroad, you can receive a yearly Medical insurance allowance as compensation for managing your medical expenses.
• Flexible working hours
  You can choose a schedule that is comfortable for you. No one here tracks your clock in/out because MacPaw is built on trust and cooperation.
• Space to grow both professionally and personally
  Education opportunities to grow both hard and soft skills, annual development reviews, and internal community.
• Teams we are proud of
  We build honest, transparent, and reliable relationships within teams. Every Macpawian can improve processes and implement their ideas. We encourage open and constructive feedback and provide training for Macpawians on giving and receiving feedback.
• Office designed for people (and pets)
  Our office has it all: a spacious workplace with enough room for sitting up, lying down, and running around; a gym for recreation; cozy kitchens; a sleeping/meditation room; and a terrace with a view where we throw summer parties. Also, we have two cats living in the office, and you are welcome to bring your pets to the office (we have separate floors for cats and dogs).
• Time-off policy that covers life’s needs
  Convenient personal time-off policy to help you take care of essential matters in your personal life, and parental leaves. On top of all that, sabbaticals are open after 5 years of being with MacPaw.
• Join social initiatives with MacPawCares
  MacPaw participates in numerous humanitarian aid and charity projects across many fields, and you are welcome to jump in to make the world a better place.
• We’re an equal-opportunity employer. Here is a safe place for applicants of all backgrounds
  We are hiring talented humans. Meaning with all our variety of backgrounds and identities, including service members and veterans, women, members of the LGBTQIA+ community, individuals with disabilities, and other often underrepresented groups. MacPaw does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.
  
  *Some benefits are under development, and new adjustments are possible.

We are looking for an Application Security Research Engineer . In this role, you will work with a team of researchers and ethical hackers focused on offensive security testing, automated exploit discovery, and advanced application security research. Your work will directly influence the security posture of company products and help scale secure-by-design principles. This is a hands-on technical role with a strong emphasis on offensive security, code exploitation, automation, and innovation.
 

Responsibilities:

• Help to reshape the company's Product Security
• Plan and execute advanced penetration testing campaigns.
• Develop tools and frameworks for scalable security testing and fuzzing.
• Lead Security innovation by building and managing penetration testing tools \ AI Agents
• Analyze vulnerabilities, perform root cause analysis, and develop proofs of concept.
• Identify systemic product weaknesses and help define long-term mitigations.
• Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities.
• Contribute to security research publications, CVE submissions, and industry knowledge sharing.
• Continuously evolve internal testing capabilities using modern tooling and AI-assisted approaches.

Requirements:

• 5+ years of experience in Research and penetration testing.
• Strong coding skills and deep technical understanding of web, API, cloud-native, and backend technologies.
• AI and LLM Penetration testing knowledge and Experience
• Experience with penetration testing tools (Burp Suite, Metasploit, etc.) and custom security tool development.
• Familiarity with modern architectures (e.g., Cloud, microservices, containers, Kubernetes).
• Familiarity with secure software architecture and typical attack vectors.
• Demonstrated ability to lead security testing engagements and report technical findings effectively.
• Experience building or integrating automated PT or fuzzing pipelines is a strong advantage.
• Knowledge and hands-on experience with SSDLC tools and CI/CD pipelines,
• Publications or open-source contributions in the security domain are a plus.

Full-time, long-term position. The role is remote for the first 3–4 months, after which it becomes hybrid, with 2–3 days per week in the office, under a B2B contract.
The office is located in Barcelona. We will organize the relocation, but any additional relocation-related expenses will need to be covered by you.

You must already have the legal right to work in Europe, so there are no issues with working from Barcelona. We do not provide visa sponsorship, but we can assist with information or guidance if needed.