Jobs at Djinni

Intetics Inc., a leading American technology company specializing in custom software application development, distributed professional team creation, software product quality assessment, and end‑to‑end digital solutions, is looking for a Senior Kotlin Developer to join a long‑term project.

Responsibilities

• Design, develop, and maintain backend services using Kotlin and Java
• Build scalable microservices with focus on performance and reliability
• Participate in architecture design and technical decision‑making
• Work with asynchronous and reactive programming (Coroutines, Flow, WebFlux)
• Integrate systems using Kafka, Redis, and relational databases
• Ensure high code quality through testing and code reviews
• Mentor and support other team members
• Collaborate with cross‑functional teams in English

Required Skills & Experience

• Strong experience with Kotlin (Coroutines, Flow) and Java (Core)
• Deep understanding of JVM, multithreading, and concurrency
• Experience with Spring Boot, Spring WebFlux, Spring Data
• Hands‑on work with PostgreSQL, SQL, JPA / R2DBC
• Experience with Kafka, Redis
• Knowledge of Docker and Kubernetes
• Experience with observability tools: Prometheus, Grafana, Micrometer
• Familiarity with Camunda BPM
• Strong testing background: JUnit, Kotest, MockK, Testcontainers
• Solid understanding of DDD and microservice architecture
• English level: B1 or higher

Nice to Have

• Experience working in distributed teams
• Previous mentoring or tech‑lead responsibilities
• Production experience with high‑load systems

Why Join

• Challenging and technically strong project
• Real influence on architecture and technical decisions
• Professional team with strong engineering culture

Basic qualification

• 3+ years of experience in test development and automation using Python
• Strong knowledge of software testing principles and techniques
• Proficiency in Linux application testing (user space) and command-line environment
• Proven experience with the L2/Ethernet stack
• Experience in validating embedded systems or firmware-level components.
• Hands-on experience with Debugging and Profiling tools
• Experience in creating technical documentation
• Advanced written and spoken English for active client-facing communication

Will be a plus

• Ability to read and analyze C code to better understand implementation logic and hardware interactions.
• Familiarity with low-level protocols such as SPI, I2C, and UART.
• Familiarity with real-time operating systems (RTOS)
• Experience with C# for internal tool development or test utilities.
• Background in working with hardware simulators/emulators or virtual test environments
• ISTQB certification

Job Responsibilities

• analyze product requirements and create validation documentation
• expand automation framework
• develop, debug, and maintain automated tests
• report bugs and verify bug-fixes
• intra-team and client-facing communication

Department/Project Description

This is a great opportunity for an experienced Test Engineer. You will work with modern technologies, validating cutting-edge products for a market leader in Corporate Networking Solutions. Additionally, you will have the chance to expand your knowledge in networking, embedded solutions, and business appliances. If you have always dreamed of working with cutting-edge hardware and understanding what powers the Internet of tomorrow, this job is for you!

Analytical skills and the ability to investigate the product and prepare high-quality test documentation are key to this position. You will work with the Python automation framework and have the ability to influence its architecture. The successful candidate will have a good background in testing theory, strong analytical skills, and experience working in an international environment. We expect our new colleague to be a responsible and communicative team player as well. Our Kyiv Team consists of 15+ engineers in both Test and Development. As a QA engineer, you will be involved in a variety of testing activities, including (but not limited to) test planning and development, bug reporting and verification, test framework extension, and test reporting

GCP, Linux, Docker, Kubernetes, Terraform, Logging solutions (ELK, EFK, Graylog), Monitoring solutions (Prometheus+Grafana), Configuration management tools (Ansible, Puppet, SaltStack, Chef), Hands-on experience with SQL (MySQL, PostgreSQL, MariaDB), NoSQL databases (MongoDB, Redis, DynamoDB, Elasticsearch), Message Broker systems (RabbitMQ, ActiveMQ, Kafka),CI/CD tools and version control (Jenkins, ArgoCD, GitHub actions)

Requirements: 

• Proficiency in infrastructure as code (IaC) and relevant tools 
• Experience in software development and continuous integration 
• Strong system administration skills 
• Advanced knowledge of Linux 
• Ability to work independently and remotely 
• Excellent problem-solving and troubleshooting skills 
• Good communication and collaboration skills 

• English – Upper-Intermediate+   

   

Would be an advantage: 

• Experience with cloud platforms and technologies 

• Relevant certifications in DevOps or cloud technologies 

   

What we offer: 

• Competitive salary    
• Remote work  
• Flexible schedule  
• Career growth  
• Sport compensations  
• Professional working environment, where you’d be an essential member of our company  
• Corporate culture, mutual support. 

Hi! We are looking for a Node.js Backend Developer (NestJS) to join our pack at SharksCode 🦈💙
SharksCode is a Ukrainian IT company that develops high-tech software solutions and B2B platforms, particularly in the iGaming industry.
  We are looking for a Node.js Backend Developer who will work on building scalable backend services and integrations within a distributed architecture. In this role, you will participate in designing and developing platform services, integrating external systems, and contributing to technical decisions that impact the overall product architecture.

We expect that you:

– Have 4+ years of commercial experience with Node.js development.
– Have 2+ years of experience with NestJS (or are ready to quickly adopt it).
– Have experience developing REST APIs and/or GraphQL using NestJS.
– Have strong proficiency in TypeScript.
– Have hands-on experience with MongoDB, MySQL, or PostgreSQL.
– Have experience integrating third-party APIs/services (e.g., sports feeds, payment gateways, etc.).
– Have experience working with message queues (RabbitMQ, Kafka, or similar).
– Understand distributed systems architecture.
– Have experience using Redis for caching and Pub/Sub (preferable).

Your future responsibilities:

– Design and develop backend services and product functionality.
– Build and maintain integrations with third-party financial and technical services.
– Develop public payment APIs and internal microservices.
– Participate in technical discussions and architecture decisions related to platform development.
– Ensure high code quality and follow engineering best practices.
– Share knowledge and contribute to the development culture within the team.

Nice to have:

– Experience working on high-load projects, especially with live data.
– Experience writing and maintaining automated tests (Unit, Integration, E2E).
– Experience with WebSocket, gRPC, or other real-time technologies.
– Knowledge of architectural patterns: CQRS, Event Sourcing, DDD.
– Experience with Docker, Kubernetes, and CI/CD.
– Experience in igaming/betting industry (optional, but a strong plus).

Interview stages:

🤝 Interview with Recruiter
🧠 Technical Interview
💙 Offer

We offer:

🌴 24 paid vacation days, 14 sick days, and 5 days off
⏰ Flexible start of the working day — from 9:00 to 11:00
🏥 Medical insurance
💰 Bonuses and performance-based rewards
🐶 Office in the center of Kyiv — pets are welcome, we are pet-friendly
💆 Lounge area in the office to recharge during the day
🎾 Padel tennis, football, and training at the polygon for those who enjoy active leisure
📚 Learning compensation, internal meetups and workshops, as well as access to the corporate LMS with courses
🎁 Corporate currency that can be exchanged for merch, gifts, or additional benefits

Summary:
Our client is searching for an experienced Python Developer to join their team.

General Information:
The client is a leading agriculture company helping to improve global food security by enabling millions of farmers to make better use of available resources.

Tasks and Deliverables:
- Design and implement solutions using Python and Azure services to address various business problems.
- Conduct experiments and prototype new concepts to improve existing processes and to explore new capabilities.
- Maintain and optimize existing systems for performance and scalability.
- Document processes, systems, and protocols for internal and external stakeholders.
- Ensure compliance with data privacy and protection regulations.

Required Experience:
Strong programming skills in Python and familiarity with common data science libraries (e.g., NumPy, Pandas, Scikit-learn).
In-depth knowledge of Azure services and cloud architecture.

Nice to have
- Proven experience as an AI Engineer or similar role.
- Experience with Bedrock AI platform for model management and deployment.
- Familiarity with Langchain for integrating language models.
- Understanding of machine learning frameworks (e.g., TensorFlow, PyTorch).
- Experience with Natural Language Processing (NLP) and computer vision

Engagement highlights:
Work in a big enterprise company on exciting global projects

Detailed Required Skills: FastAPI, Python, NumPy, LangGraph, Artificial Intelligence (AI), Pandas, Azure, LangChain
Job Timezone: Asia/Kolkata
Work Type: Remote
Estimated Length: 6-12 months

About the Role

We're looking for a senior commercial operator to run and grow the business without requiring heavy founder involvement. The founder stays engaged on strategy and key relationships — everything else is yours to own.

This is not a junior sales, SDR, or marketing role. We need someone who has already operated or grown a services business.
 

What You'll Own

• Day-to-day commercial execution and pipeline
• Client relationship management and account expansion
• Proposal preparation and coordination
• Delivery team coordination
• Margin discipline and utilisation oversight
   

Who We're Looking For

The strongest candidates will be:

• Ex-founders or operators of software agencies or IT services firms
• Commercial Directors, COOs, or Managing Partners from tech consultancies
• Heads of Delivery who also owned revenue and client relationships
• Senior Account Directors from technology services businesses
   

Must-Have Experience

• Selling or growing B2B technology services (not SaaS)
• Personal ownership of revenue, accounts, or P&L
• Working with CTOs, founders, or enterprise stakeholders
• Understanding of gross margin, utilisation, and delivery economics
• Strong English — written and spoken
   

Engagement Structure

90-day paid trial with a fixed component and results-based upside. Strong fit leads to a longer-term managing partner / profit-share / earn-in arrangement.
 

If you've built or run a services business and want to take real ownership — let's talk.

N-iX is looking for a Middle Azure DevOps for one of our clients.
The Middle Devops role focuses on the design, implementation, and maintenance of an Azure-based cloud infrastructure. This infrastructure is critical for powering connected safety systems, handling secure data ingestion from mobile and embedded devices, and managing scalable storage for telemetry and crash data. The position involves providing reliable notification services for emergency contacts and collaborating with mobile, embedded, and algorithm teams to ensure robust integrations. Additionally, the role supports the deployment of machine learning models for crash detection while maintaining alignment with cybersecurity and data privacy standards.

Responsibilities:

• Architecture & Design: Contribute to the design and implementation of scalable Azure cloud architecture for telemetry ingestion, user data management, and crash event processing
• API Development: Develop and maintain RESTful APIs for the integration of mobile apps and BLE-enabled devices
• Database Management: Support database design and performance optimization to ensure scalability for telemetry and event workloads
• Notification Workflows: Build and manage SMS, email, and push notification workflows triggered by crash events
• ML Support: Assist in the deployment and versioning of machine learning models used for crash detection
• Automation & DevOps: Implement and maintain CI/CD pipelines for cloud services and infrastructure using Azure DevOps
• Optimization: Monitor and optimize cloud resource usage, costs, and overall performance
• Compliance: Support the implementation of infrastructure and workflows aligned with cybersecurity and data privacy standards such as GDPR and ISO/IEC 27001

Requirements:

• Experience: 2–4 years of experience in cloud engineering, with hands-on exposure to Microsoft Azure
• Technical Knowledge: Working understanding of cloud-native services, API development, and data pipelines
• Security & Compliance: Basic familiarity with security best practices, including encryption, identity management, and regulatory compliance
• Scripting & Automation: Some experience with scripting and automation tools such as PowerShell, Python, Terraform, or Bicep
• Monitoring: Exposure to monitoring tools like Azure Monitor, Application Insights, or similar
• Tech Stack: Familiarity with Azure services including Functions, API Management, Event Grid, IoT Hub, Blob Storage, Cosmos DB, and/or PostgreSQL
• English Level: Upper-Intermediate+

Nice to have:

• Experience with IoT, wearable safety systems, or BLE device integration and telemetry handling
• Exposure to machine learning model deployment or MLOps concepts
• Azure certifications (e.g., AZ-900, AZ-204, or AZ-104) are a plus

We offer*:

• Flexible working format - remote, office-based or flexible
• A competitive salary and good compensation package
• Personalized career growth
• Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
• Active tech communities with regular knowledge sharing
• Education reimbursement
• Memorable anniversary presents
• Corporate events and team buildings
• Other location-specific benefits

We are the creators of a new fintech era!
Our mission is to revolutionize the world by making blockchain technology accessible to everyone in everyday life. WhiteBIT is a global team of more than 1,200 professionals united by a shared vision of shaping the Web3 future.
 

We are building our own blockchain ecosystem, ensuring maximum transparency and security for over 8 million users worldwide. Our cutting-edge solutions, rapid adaptation to market challenges, and technological excellence set us apart from traditional companies.
Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT, and VISA.

The future of Web3 starts with you — join us as a Liquidity Monitoring Specialist!

Requirements: 

— Higher economic education;
— Systemic thinking and analytical mind;
— Ability to work with tables (excellent knowledge of Excel: formulas, summary tables);
— Willingness to work different shifts (day, evening, night).

Responsibilities:

— Processing and analysis of trading operations;
— Monitoring the state of the market;
— Research and analysis of exchange situations with the help of information and analytical tools;
— Interaction with the technical department.

Will be a plus: 

— Commercial experience and knowledge in the crypto domain. 

Work conditions: 

Immerse yourself in Crypto & Web3:
— Master cutting-edge technologies and become an expert in the most innovative industry.
Work with the Fintech of the Future:
— Develop your skills in digital finance and shape the global market.
Take Your Professionalism to the Next Level:
— Gain unique experience and be part of global transformations.
Drive Innovations:
— Influence the industry and contribute to groundbreaking solutions.
Join a Strong Team:
— Collaborate with top experts worldwide and grow alongside the best.
Work-Life Balance & Well-being:
— Modern equipment.
— Comfortable working conditions, and an inspiring environment to help you thrive.
— 24 calendar days of paid leave.
— Additional days off for national holidays.

With us, you’ll dive into the world of unique blockchain technologies, reshape the crypto landscape, and become an innovator in your field. If you’re ready to take on challenges and join our dynamic team, apply now and start a new chapter in your career!
Let’s Build the Future Together!

Description

GlobalLogic, a digital product engineering company. GlobalLogic integrates experience design and complex engineering to help our clients imagine what’s possible and accelerate their transition into tomorrow’s digital businesses. GlobalLogic is a Hitachi Group Company.

Your role is to work within and help lead a multidisciplinary project team. You collaborate with other colleagues and support them in order to deliver a high-quality outcome regardless of the size of the engagement for the client. You are a core contributor, helping in charting the project’s direction.

Requirements

• 3+ years of experience in test engineering with a strong focus on automated testing.
• Hands-on experience testing mobile applications on both Android and iOS platforms.
• Practical experience with Appium or similar tools for mobile and browser-based test automation.
• Strong proficiency in JavaScript as the primary programming language.
• Experience working with Node.js for building and maintaining automation solutions.
• Proven experience in developing, maintaining, and scaling an automation framework for mobile or web applications.
• Experience with API testing, including tools such as Postman or other API automation frameworks.

• Hands-on experience with GIT and IDEs such as VS Code for automation development.

  Nice to Have:

• Experience with Maestro for mobile automation.

Job responsibilities

• Analyzing information needs and creating test data
• Write automated test scripts both mobile and web based
• Conferring with users and engineers
• Studying systems flow, data usage, and work processes
• Investigating and understanding problem areas
• Standing up and maintaining the test automation suite
• Review test cases and ensure that they align with requirements and have appropriate coverage.
• Design test cases and perform various types of testing such as functional, integration, and end-to-end, on various platforms such as mobile devices and web browsers.
• Support project teams in defining suitable quality objectives and acceptance criteria.
• Participate in code reviews and provide feedback and suggestions to increase quality.
• Fulfill all the duties of more junior test engineer team members when necessary.

Responsibilities:

– Identify and reach out to potential clients in the crypto space

– Initiate conversations (create chats) with interested projects

– Work with Telegram groups and other social media platforms to source leads

– Qualify initial interest and pass leads to the listing team

Requirements:

– Strong written communication skills

– Basic understanding of the crypto industry is a plus

– Experience with Telegram and social media outreach

– Self-motivated and result-oriented

We offer:

– Payment per created chat (performance-based)

– Monthly payouts (on the 5th of each month)

– Fully remote work

– Flexible schedule

– Possibility to combine with other jobs or projects

Hi, we’re BetCare 👋
 

Our company specializes in multilingual customer care where we put heavy focus on sales, conversion, and customer reactivation strategies. Our clients are primarily from Europe, Canada, and Australia, so we operate in licensed markets globally.
 

Our team members’ strongest skills are Positive Language, Care and Sales. Our approach to every contact is to provide an excellent service experience in order to open up the customer to a sale.
 

WHO WE ARE LOOKING FOR 😎

We are seeking a highly motivated and organized VIP Manager

with at least an Advanced level of English proficiency and a minimum of 6 months of proven experience in a similar role in the Gambling niche. 

The ideal candidate has a proven track record in a similar role, excellent communication and troubleshooting skills, and a strong customer-focused mentality.

We value: respect, transparency, commitment, responsibility, and attention to detail.
We despise: dishonesty in any form, exaggerated snobbism, and unprofessional work ethics.

Main Responsibilities 🦾

• Build trust and maintain long-term relationships with high-value players through personalized communication and exceptional service.
• Drive player engagement through email, chat, and messenger platforms
• Boost player activity and retention by offering personalized bonuses, promotions, and exclusive deals.
• Monitor player behavior and activity to create individualized offers and memorable experiences.
• Work closely with CRM, Marketing, and Payments teams to ensure a seamless and premium VIP journey.
• Track, analyze, and report on key VIP KPIs, providing insights and suggestions for ongoing improvements.
  
   

A Few Musts ❗

• Proven experience as a VIP Manager in the iGaming industry.
• Strong command of English (C1 level).
• Outstanding communication skills, with a sharp eye for detail, empathy, and a professional tone.
• Resilience under pressure and confidence in managing high-value, high-demand clients.
• Solid understanding of bonus systems, KYC/verification flows, payment processes, and platform functionality.

WHAT WE OFFER 💎

• Fully remote work. In case you are Lviv based - ability to attend the office (which is absolutely pet-friendly 🐶).
• Comprehensive onboarding program, which will help you to facilitate your seamless integration into projects and enhance your adoption of best practices. (It is fully paid after successful completion).
• Diverse paid times off: Vacation, Recreation days, Birthday off, Sick leaves.
• Presents and bonuses from the company.

Can you relate to this? If your answer is "Hell Yes", contact us here!

Interaction Partners is a Switzerland-based company at the intersection of investor relations and AI. Our core product, DIRO (Digital Investor Relations Officer), is an AI-powered IR assistant deployed by listed companies in Switzerland, e.g. at BKW. schedulR, our IR

platform, powers event management, news distribution, and CRM workflows for Swiss and German listed companies and SIX, and the Swiss Exchange.

GEO is our next product layer. DIRO already ingests, structures, and enriches IR data daily. The recurring GEO audit and AI-optimized subpage are the natural extension: making that data visible not only to human visitors, but to the AI systems that are increasingly shaping

how companies are perceived by investors and analysts - and tracking whether it is working.

Why work with us:

• First-mover position in a real, underserved gap - Automated GEO for listed companies does not yet exist as a product.

• Your work directly shapes a new product line, not a feature on an existing roadmap.

• Direct access to the founding team and an interesting client base: listed companies, SIX Swiss Exchange

• Small, friendly and collaborative team

• No politics, the better argument wins

• Fully remote, flexible working.

• Full-time role in a small, profitable, and growing company - with real scope to grow with it.

Required:

• Hands-on GEO experience - you have actively worked on AI search visibility (ChatGPT, Perplexity, Google AI Overviews) and can demonstrate what that work looks like in practice. 

• 3+ years of solid SEO experience - technical SEO, on-page optimisation, and content structure are the foundation you bring to GEO work.

• Ability to build a structured, repeatable methodology from scratch: scoring frameworks, audit templates, measurement logic.

• Ability to communicate findings and solutions clearly in English - the audience is CFOs and IR heads, not technical teams.

• Comfortable working independently and driving your own priorities without close supervision.

• Hands-on experience with crawlability and indexation controls (robots.txt, XML sitemaps, canonical tags) and structured data implementation (schema markup, JSON-LD).

Nice to have

• Experience in financial services, SaaS, or regulated industries.

• Familiarity with llms.txt and emerging AI-indexing standards.

• Python or scripting skills for automating parts of the audit or subpage generation process.

• Experience with Ahrefs, Screaming Frog, Google Search Console, or Looker Studio.

What you will do:

• Design and run recurring GEO audits on listed companies’ IR websites: establish baselines, track how AI systems interpret and surface IR content over time, and measure the impact of optimisation work.

• Build and continuously refine the audit methodology: define what to check, how to score it, and how to communicate findings to IR teams who are not SEO specialists.

• Develop the AI-optimized subpage product: design the structured, machine-readable layer for issuer websites - specifying schema, content architecture, and data flow — and work with our back-end engineer and our tech lead to implement it.

• Apply technical SEO best practices across both audit and subpage work: schema markup, structured data, content architecture, crawlability, llms.txt.

• Identify patterns across IR websites that help or hinder visibility in AI-driven environments and translate them into repeatable recommendations.

• Contribute to the product narrative: turn audit findings and results data into positioning and sales materials for IR teams at listed companies.

• Work closely with the founding team - this is a small operation and your output will be visible immediately.

Mindset & approach:

• You build things, then refine them - you do not wait for a perfect brief before starting.

• You are comfortable with ambiguity: parts of this product do not fully exist yet, and your job is partly to define them.

• You think in systems: audits should be repeatable, subpages should be scalable, results should be measurable.

• You can translate technical findings into clear, commercial language for a non- technical audience.

About Us
We're a product company building AI-powered solutions for international markets. Our team is lean and fast-moving — we don't wait months to make decisions. We test, analyze, and scale what works. If that's how you naturally operate, keep reading.

The Role
This isn't a portfolio role. You'll measure success in CTR, hook rates, and conversions — and you'll own the full cycle from concept to launch to performance analysis as a core member of our growth team.

Responsibilities
— Produce video ads and static banners for Meta, TikTok, YouTube, and Google with a clear focus on conversion
— Generate several fundamentally different creative directions every week — not variations of the same idea
— Research competitor ads, identify strong mechanics, and build on them to create more effective versions
— Create UGC-style videos that blend naturally into the feed and don't feel like ads
— Use AI as a default — generation, editing, voiceover, characters — not as an occasional shortcut
— Launch hypotheses, read the data, adjust your approach, and repeat
— Occasionally contribute to landing page and presentation design

Requirements
— Strong grasp of performance metrics — CTR, hook rate, ROAS, scroll-stop rate — and how to move them through creative decisions
— Proven experience with video advertising: you know how to stop the scroll in the first 2 seconds and hold attention through to the CTA
— Hands-on with AI tools for image generation, video production, and voice content (not just aware of them — actively using them)
— Able to develop a concept from scratch with minimal briefing — high autonomy is the default here
— Comfortable maintaining high production volume without sacrificing quality

Nice to Have
Experience with AI avatars (HeyGen, Synthesia, D-ID), voice synthesis (ElevenLabs), or any tooling built for scalable UGC production

About the role

We're looking for a software engineer with leadership experience to lead a small team building a product management ecosystem in the defense sector. This is not a purely managerial role — the lead continues writing code and contributing to development while coordinating the team, defining priorities, and owning delivery quality.

Responsibilities

• Develop and maintain internal deployment and product management tooling
• Build and maintain CI/CD pipelines (GitHub Actions)
• Own Docker-based build and deployment workflows
• Code reviews and technical quality across the team
• Team planning, backlog prioritization, cross-team sync
• Onboarding and mentoring team members

Requirements

• Strong Python: async, threads, concurrent programming
• Experience with Python web frameworks (FastAPI preferred)
• Deep understanding of Docker and containerization
• Linux: systemd, journald, containers, confident CLI usage
• Networking: HTTP(S), SSH, WebSocket
• Strong understanding of client-server architecture and API design
• Databases and ACID fundamentals
• Cloud or on-premise infrastructure experience

• English for technical communication

   

   

  Nice to Have

• Bare-metal / Raspberry Pi / embedded Linux (firmware flashing, secure boot)
• Information security fundamentals
• Python deployment optimization
• Experience with ArduPilot or other autopilot stacks

• Prior tech lead or mentoring experience

   

   

  What we expect from the lead

• Structured approach to planning — not purely ad hoc
• Clear cross-team communication: status, blockers, priorities
• Autonomy in technical decisions within the team's scope
• Readiness to grow ownership as the company scales

Location: Remote

Team: Security / Platform

About the company

Our client is a leading autonomous vehicle technology company operating at the cutting edge of self-driving software development. 

Role overview

We are not looking for a traditional SOC analyst. This role is about building detection systems, not clicking through alerts. You will work with large volumes of logs (cloud, application, network), design detection logic, and improve it over time. That includes both rule-based detection (SIEM/XDR) and data-driven approaches (statistical models, anomaly detection, simple ML where it makes sense). You should be comfortable treating logs as a data problem, not just a monitoring stream.

Important! This is not a role where you:

• sit in SIEM all day clicking alerts
• blindly add rules
• overcomplicate things with ML

This is a role where you: build detection systems that work in practice.

What you'll be doing

Detection & analytics

• Build and maintain detections across:
• application logs (auth, APIs, business logic abuse)
• cloud activity (CloudTrail, IAM, infrastructure changes)
• network telemetry (DNS, proxy, firewall, NetFlow)
• Work directly with data in platforms like Elasticsearch / Splunk / similar
• Write and tune detection logic (queries, correlation rules)
• Reduce noise — expect to spend time fixing false positives, not just adding new rules.

Working with data (this is a big part of the job)

• Build pipelines for:
• log ingestion
• normalization
• feature extraction
• Work with streaming or batch pipelines (Kafka / queues / scheduled jobs)
• Turn raw logs (e.g. CloudTrail) into structured data usable for detection.

Anomaly detection / ML (practical, not theoretical)

• Apply simple models where they add value (e.g. One-Class SVM or similar approaches)
• Focus on:
• behavior baselining
• anomaly scoring
• Tune models based on real output (false positives matter more than theory) 
• If ML does not improve signal — don't use it.

Automation & response

• Build response playbooks for common cases
• Automate where it actually saves time (not for the sake of it)
• Integrate with SOAR or write lightweight orchestration
• Improve:
• detection speed
• response consistency.

AI usage (realistic expectations)

• Use LLMs for:
• alert enrichment
• investigation summaries
• internal tooling
• Not building an "AI security platform"
• Focus on practical gains, not hype.

Threat hunting

• Run targeted hunts based on hypotheses
• Use internal data + external signals

• Identify gaps in logging and detection.

   

Requirements

• Solid experience with SIEM (Elastic, Splunk, Sentinel, etc.)
• Strong understanding of:
• cloud activity (especially AWS logs and IAM)
• network basics
• modern application behavior (APIs, auth flows)
• Comfortable working with large datasets (not afraid of raw logs)
• Python or similar for data processing

• Experience with automation (SOAR or custom scripts).

   

Nice-to-have (but not critical)

• Experience applying ML to logs (even simple models is enough)
• Familiarity with LLMs in tooling (not research)
• Experience with data pipelines (Kafka, Spark, etc.)

• MITRE ATT&CK mapping

   

What will make you effective here

• You don't trust alerts blindly
• You care about signal quality, not number of detections
• You can debug why a detection is noisy or useless
• You understand systems, not just tools

• You prefer building something once instead of repeating manual work.

   

How success looks like

• Fewer false positives
• Better visibility across systems
• Faster investigations
• Less manual work in SOC
• Detections that actually catch real issues