Jobs Security

The Role

The Security Engineer starts primarily in managed detection and response (MDR). On a normal day, the focus is detecting, investigating, and responding to security events. When project work requires additional engineering capacity, the engineer may be moved to support project work. When a significant cybersecurity incident occurs - whether for a client or internally - incident response becomes the priority and the broader security team participates as needed, regardless of normal schedules.

What You Will Do

• Investigate security alerts and events and determine whether activity is benign, suspicious, or requires escalation.
• Participate in detection and response operations, including guided containment and remediation decisions.
• Analyze security issues and recommend remediation or configuration changes; early in the role, changes are performed under guidance rather than independently.
• Work with logs and telemetry from endpoints, operating systems, networks, identity systems, cloud environments, and security platforms.
• Participate in client and internal cybersecurity incidents as part of the incident response team.
• Contribute to cybersecurity projects when assigned, learning the required technology as part of the project.
• Analyze internal and client security environments and make practical security recommendations under guidance.
• Grow into broader engineering responsibilities as your technical capability and interests develop.

Core Technical Foundation

We do not expect one person to know every security product. We care more about a strong technical foundation and the ability to understand how technologies fit together.

• Strong understanding of TCP/IP and computer networking. Networking knowledge is fundamental to this role.
• Intermediate knowledge of Windows and Linux administration and security, including how systems are secured and hardened without relying only on security tools.
• Solid understanding of core cybersecurity concepts, threats, controls, detection, and response.
• Working understanding of firewalls, network perimeter security, and modern security architecture concepts such as Zero Trust.
• Ability to reason through unfamiliar technical problems and learn new technologies quickly.
• Prior security operations, systems administration, network administration, or security engineering experience.
• Experience with any SIEM, EDR/XDR, log collection, or security monitoring platform.
• Active Directory, Microsoft Entra ID, identity management, or identity security experience.
• Cloud infrastructure or cloud security experience.
• Communication is in English – B1+ English level is required

Experience That Is a Plus

• Scripting or automation experience, such as PowerShell, Python, or similar technologies.
• Relevant technical certifications. Strong certifications in foundational technologies are valuable; we do not require a specific cybersecurity certification.

What Matters Most

• Responsibility and ownership – you take ownership of assigned work, follow it through to completion, communicate when something is blocked or unclear, and make sure important issues do not fall through the cracks.
• Curiosity - when something looks unusual, you want to understand why.
• Creativity - you can think beyond a checklist when an investigation does not follow an obvious path.
• Investigative mindset - you keep digging until the situation is understood and you are comfortable that the environment is secure.
• Attention to detail - small technical details can change the meaning of a security event.
• Learning ability - how quickly you comprehend new technologies and apply what you learn will directly influence how quickly you grow.
• Initiative and engagement - you are interested in the technology and the problem, not simply completing a queue of assigned tasks.

Training and Career Growth

This is a growth-oriented position. The initial concentration is detection and response. From there, the career path is not predetermined. We want to develop each engineer around both capability and passion. Someone with strength in scripting and automation may grow in that direction; another engineer may become stronger in infrastructure, cloud, incident response, security engineering, projects, or client-facing work. With sufficient growth, the path can lead to senior engineering, project leadership, client management, and potentially virtual CISO responsibilities.

Working Model

• Fully remote position.
• Aligned with U.S. working core hours (9 am to 5 pm EST/EDT).
• Detection and response is a 24x7 company function; over time, shifts may become more flexible based on team coverage and what works for the engineer.
• Significant cybersecurity incidents are treated as team events and may require participation outside the normal schedule.
• Client communication is not expected from day one; it can become part of the role as the engineer develops.
• No travel requirement.

ABOUT FIRST CRYPTO EXCHANGE 

First Crypto is a VARA-licensed OTC broker-dealer in Dubai serving individual and institutional clients. We are building our own platform for digital assets and fiat payments, including an OTC desk, web client, and mobile app.

FCE is committed to building a trusted, well-governed exchange, combining robust market infrastructure with strong financial controls, regulatory compliance, and operational transparency.
 

JOB OVERVIEW

We are looking for a Platform & Security Operations Engineer (DevSecOps) to own and develop our production infrastructure, cloud-native platform, and security operations.

The key objective of this role is to ensure the reliability, scalability, and security of FCE's production environment while strengthening infrastructure automation, security monitoring, incident response, and compliance readiness.

You will work closely with the CTO and a small, experienced engineering team, taking ownership of critical infrastructure and security initiatives in a regulated digital asset environment where reliability and security are essential.
 

KEY RESPONSIBILITIES

• Own and maintain production infrastructure and Kubernetes clusters, ensuring reliability, availability, scalability, and security.
• Develop and maintain infrastructure as code using Terraform and Terragrunt, covering networking, data infrastructure, and identity management.
• Build, maintain, and improve GitOps workflows and infrastructure delivery processes.
• Design and implement security monitoring, including alerts, detection rules, and tuning to reduce false positives.
• Develop incident response runbooks and establish on-call procedures.
• Respond to production and security incidents, investigate root causes, coordinate remediation, and conduct postmortems.
• Improve CI/CD pipelines and strengthen software supply chain security.
• Implement security scanning for dependencies and container images, as well as artifact signing and verification.
• Establish and maintain infrastructure standards, technical documentation, operational procedures, and security guidelines.
• Prepare technical evidence and documentation to support external audits and demonstrate the effectiveness of infrastructure and security controls.
• Continuously improve platform security, operational resilience, and incident detection and response capabilities.
• Leverage AI-assisted development tools where appropriate, critically reviewing generated code and configurations before deployment.
   

QUALIFICATIONS & SKILLS

• Strong hands-on production experience with Kubernetes, including cluster upgrades, workload identity, network policies, autoscaling, and incident investigation.
• Practical experience with Terraform and Terragrunt for infrastructure provisioning and management.
• Experience with Atlantis or similar tools for managing and reviewing infrastructure changes.
• Hands-on experience implementing GitOps workflows using Flux, Argo CD, or equivalent tools.
• Deep knowledge of AWS, including VPC, multi-AZ architecture, KMS, OIDC federation, and DNS.
• Practical experience with security monitoring and detection engineering, including alerting, detection rule development, and false-positive reduction.
• Experience designing and maintaining secure CI/CD pipelines and implementing software supply chain security controls.
• Experience with dependency and container image scanning, artifact signing, and verification.
• Experience supporting external security and compliance audits, such as ISO 27001, SOC 2, PCI DSS, HIPAA, or equivalent frameworks.
• Proven experience operating production systems where failures or security breaches can result in significant financial losses or regulatory consequences.
• Experience developing incident response procedures, conducting root-cause analysis, and documenting postmortems.
• Experience using AI-assisted development tools and the ability to critically evaluate AI-generated code and configurations.
• Strong problem-solving skills, ownership mentality, and the ability to work independently on critical infrastructure.
• English proficiency at C1 level or above.
   

WOULD BE A PLUS

• Experience in cryptocurrency, digital assets, fintech, banking, payments, or other regulated financial services.
• Familiarity with virtual asset regulatory requirements and the compliance expectations of regulated financial institutions.
• Experience operating security-critical infrastructure for financial platforms or systems handling sensitive financial data.
• Experience implementing security controls aligned with multiple compliance frameworks.
• Experience with workload security, cloud security posture management, secrets management, and identity and access management.
• Experience building security operations processes and establishing on-call rotations in a growing engineering team.
   

WORKING CONDITIONS & BENEFITS

1. Location: Dubai, UAE, with a hybrid working arrangement and regular office presence. Relocation could be considered.
2. Employment Type: Full-time, permanent contract.
3. Reporting Line: Direct reporting to the CTO.
4. Compensation: Competitive compensation based on experience.
5. Vacation: 20 working days per year.
6. Sick Leave: 10 days per year.
7. Days Off: 5 days per year.
8. Public Holidays: 8–10 days per year, depending on the holiday calendar of different countries.
9. Engineering Environment: Work with a small, highly skilled engineering team and modern cloud-native infrastructure without legacy systems.
10. Ownership & Impact: High autonomy and direct influence on infrastructure architecture, security standards, and engineering decisions.

N-iX is a global software development service company that helps businesses across the globe create next-generation software products. Founded in 2002, we unite 2,400+ tech-savvy professionals across 40+ countries, working on impactful projects for industry leaders and Fortune 500 companies. Our expertise spans cloud, data, AI/ML, embedded software, IoT, and more, driving digital transformation across finance, manufacturing, telecom, healthcare, and other industries. Join N-iX and become part of a team where your ideas make a real impact.

We are looking for a Junior Cybersecurity Administrator to join our team and contribute to maintaining and improving our information security processes.

Responsibilities

• Assist in maintaining and improving the company's information security processes.
• Monitor security events, perform initial alert triage, and support security incident investigations.
• Support the development and improvement of security detection rules and monitoring capabilities.
• Assist with vulnerability management, including vulnerability analysis and tracking.
• Support endpoint security processes and related activities.
• Participate in security assessments, configuration reviews, and compliance activities.

• Document security findings, identified issues, and remediation recommendations.

   

Requirements

• Basic understanding of information security principles, including the CIA Triad, least privilege, defense in depth, and Multi-Factor Authentication (MFA).
• Basic knowledge of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, VPNs, and firewalls.
• Knowledge of Windows, macOS, and Linux operating systems, including user permissions, processes, services, and system logs.
• Understanding of authentication, authorization, Identity and Access Management (IAM), and access control principles.
• Understanding of common cybersecurity threats, including phishing, malware, credential theft, brute-force attacks, and privilege escalation.
• Basic understanding of security logging, monitoring, SIEM solutions, and incident response processes.
• Basic knowledge of web application security and common vulnerabilities covered by the OWASP Top 10.
• Intermediate level of English.
• Strong analytical and problem-solving skills, with attention to detail and a willingness to learn new technologies.

• Ability to independently research technical issues and clearly document findings.

   

We offer*:

• Flexible working format - remote, office-based or flexible
• A competitive salary and good compensation package
• Personalized career growth
• Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
• Active tech communities with regular knowledge sharing
• Education reimbursement
• Memorable anniversary presents
• Corporate events and team buildings
• Other location-specific benefits

*not applicable for freelancers

Who We Are 

PAR Retail, with its Open Commerce® product suite and patent pending Wallet Steering® System, empowers Convenience & Fuel Retailers to gain more share of wallet and customer lifetime value than possible with any other solution provider. PAR Retail’s unified Open Commerce product suite consists of: Activate for Intelligent 1:1 Loyalty, Transact for Contactless Commerce, and Experience for Cross-Channel Customer Experiences. PAR Retail’s solutions are supported by a set of subscription-based program management services and are contractually backed by its 1.5X Performance Guarantee. 

Requirements:  
- Operational knowledge of modern operating systems and networking; 

- Experience with common cloud services: AWS, GCP, and Azure; 

- Network Security and expertise in network pentesting; 

- Security testing of web applications, web services, mobile apps (hybrid and native), and IT infrastructure; 

- Understanding security certifications (PCI DSS / SOC2); 

- Ability to apply modern Application Security methodologies and frameworks; 

- Ability to use at least one modern programming language; 

- Practical experience with Burp Suite; 

- Experience with IDS, IPS, SIEM configuration; 

- Upper-intermediate English level. 

Responsibilities:  

- Requirements analysis, performing penetration testing and security audit; 

- BE, WEB, cloud and mobile clients testing; 

- Vulnerability reporting and remediation process; 

- Communication with development and project management teams; 

- Prepare security testing reports; 

- Prepare and support internal documentation for the project. 

PAR Retail Offers: 

- Long-term employment; 

- Competitive compensation with regular performance-based salary and career development reviews; 

- Paid vacations and sick leaves; 

- Health insurance program; 

- Flexible working hours; 

- Sponsored company educational program, corporate library; 

- Funny celebrations, team outings, and company events; 

- A unique and friendly environment where everyone can explore and learn new technologies. 

We are looking for a Head of Security Operations Center to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection, investigation, containment, and exposure reduction. You will lead our security operations function, making the organization faster in responding to threats while continuously improving controls across the attack surface.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging
• Hands-on experience with at least one enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response
• Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences
• English - Upper-Intermediate or higher

Will be a plus

• Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes
• Hands-on background as a SOC analyst, incident responder, or detection engineer prior to moving into management
• Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one
• Familiarity with threat intelligence platforms and threat-informed defense methodologies
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH) or equivalent

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

About the product

Our client is a US-based healthcare technology company that develops medical-device technology and provides remote cardiac monitoring services. Its environment combines connected medical devices, cloud software, and clinical workflows, with a strong focus on service reliability, patient-data security, and regulatory compliance.

Technology stack

AWS: IAM, Identity Center, EC2, VPC, S3, RDS/Aurora, CloudWatch, CloudTrail, GuardDuty, Inspector, KMS, Systems Manager, Secrets Manager

Microsoft: Microsoft 365, Entra ID, Intune, Windows Autopilot, Microsoft Defender

Systems: Windows and Linux administration

IaC and automation: Terraform and/or CloudFormation, PowerShell, Python or Bash, Microsoft Graph and AWS APIs

Security platforms: Cloudflare Zero Trust, Purview, MDR platforms

Fundamentals: networking, DNS, TLS, identity, logging, cloud security

Your team

You will be part of the security function of a US-based company and will report directly to the CISO. On a daily basis, you will work with the DevOps team and with colleagues from software engineering, Corporate IT, Clinical Operations, and Quality/Regulatory. Your shift covers the hours when the US team is offline, so you will own your coverage window and hand over to the US Central team with clear, written updates.

Culture

We are committed to implementing high standards in the technology industry, and it is the fundamental mission of our work. To achieve this goal, the company and all its members are constantly evolving.

Each of us has the opportunity to contribute to the product, the company, the team, the industry, and our personal development. At Techstack, you have the option to choose from various growth opportunities that align with your interests:

- meetups, where you can share your knowledge and develop simultaneously by sharing your experiences within the company and local technical communities;

- roles such as a mentor or a technical lead. In any of these roles, you will assist junior professionals and share your knowledge and experiences with them.

- participation in our technical Guilds, where you can discuss technical solutions, approaches, and industry trends.

All of these elements contribute to shaping the culture and expertise within both our team and the company as a whole.

Your responsibilities

• Operate, secure, and troubleshoot AWS infrastructure across multiple accounts.
• Administer Microsoft 365, Entra ID, Intune, Defender, Exchange Online, Teams, SharePoint, and OneDrive.
• Manage identity, access, endpoint compliance, and secure SaaS integrations.
• Monitor security and service health, investigate alerts, and coordinate incident response.
• Support backup, recovery, patching, capacity management, and infrastructure as code.
• Maintain controls and audit-ready evidence for HIPAA, SOC 2, HITRUST, and other regulatory requirements.
• Create automation, operational documentation, and runbooks.
• Prepare clear handoffs to the US team at the end of each shift.
• Participate in planned maintenance.

It's about you

• Experience working in a SOC 2-compliant organization, including at least one audit or assessment cycle.
• Hands-on experience with MDR/SIEM tools.
• Experience with tools similar to Cloudflare Zero Trust.
• Hands-on AWS administration (AWS should be your strongest platform).
• 5+ years of experience in infrastructure engineering, systems administration, cloud operations, or security operations, with independent ownership of production systems.
• Working-level experience with Microsoft 365 and Entra ID, plus a basic understanding of Intune.
• Experience with Windows endpoints and Windows/Linux servers.
• Strong troubleshooting skills across cloud infrastructure, networking, identity, and security.
• Experience with incident response, endpoint security, vulnerability management, and patching.
• Strong PowerShell and practical Python or Bash skills.
• Good written English, independent ownership, and effective remote collaboration.
• Ability to learn fast and fill knowledge gaps on your own.
• Will be a plus:
• Knowledge of HIPAA and HITRUST practices.
• Hands-on experience with Cloudflare Zero Trust and Purview.
• Deeper Intune and Windows Autopilot experience.
• Terraform and/or CloudFormation.
• Experience in healthcare, medical devices, or another regulated industry.

What we have for you

Stable and long-term position in an experienced team.

Broad opportunities for professional and career growth, including professional challenges that encourage personal development, meetups, hackathons, professional communities, and more.

Horizontal connections and the absence of micromanagement foster a collaborative environment in which all team members are accessible to one another for any concerns.

Hubs in Kharkiv, Kyiv, Lviv, and Wrocław (Poland), or everything necessary for remote work.

Up to 50% compensation for the cost of educational courses and conferences to support professional development.

Free English language and business English courses.

20 days off and 7 sick days to support your health and well-being.

Legal and accounting support.

Appreciation gifts for significant events and occasions.

How to join Techstack

• Pre-screening with a recruiter.
• Review of your resume by experts.
• English check.
• Interview with our experts.
• Interview with our client.
• Technical test task (optional).

About us

Techstack is a technology product engineering company that sets an example for high development standards in the IT industry. We empower each team member to influence the development of the product, company, and processes.

Learn more about Techstack

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies.

We are looking for a Middle SecOps Engineer!  

Requirements: 
- 2+ years of professional experience in Security Engineering, Infrastructure Security, Cloud Security, DevSecOps, or a related role.
- Strong understanding of infrastructure and network security principles, including network segmentation, firewalls, access control, TLS, secure network configuration, and service-to-service
communication.
- Practical experience with Linux systems security and hardening.
- Experience conducting security audits, configuration reviews, vulnerability assessments, or compliance assessments.
- Good understanding of CIS Benchmarks and security hardening principles.
- Experience with vulnerability management, including vulnerability validation, prioritization, remediation tracking, and risk-based decision making.
- Experience with security monitoring / SIEM / security analytics tools.
- Understanding of security incident response processes and basic incident investigation techniques.
- Understanding of patch management and operating system vulnerability remediation processes.
- Experience with cloud infrastructure security, preferably AWS.
- Understanding of Kubernetes security and container security principles.
- Ability to read and understand infrastructure configurations, logs, security findings, and network flows.
- Basic understanding of Infrastructure as Code and security implications of infrastructure changes.
- Good understanding of security controls and their practical implementation rather than purely theoretical knowledge.
- English sufficient for reading technical documentation and communicating with international teams. 

Will be a plus:
- Experience with OpenStack security.
- Experience automating security checks and operational processes using Python, Bash, or similar scripting languages.
- Experience integrating security controls into CI/CD pipelines. 

Responsibilities: 
- Infrastructure Security Monitoring — continuously monitor infrastructure for security events, anomalies, misconfigurations, and potential threats.
- Infrastructure Security Audits — plan and conduct regular security audits of infrastructure, cloud environments, operating systems, networks, and security controls.
- CIS Compliance & Hardening Assessment — assess infrastructure against CIS Benchmarks and internal security baselines, identify gaps, and drive remediation.
- Vulnerability Management — monitor infrastructure vulnerabilities, validate findings, prioritize remediation based on risk, and track remediation progress.
- Security Findings Triage & Escalation — triage findings from security tools, audits, and monitoring systems; validate their severity and escalate critical issues according to defined SLAs.
- Security Posture Management — continuously assess and improve the security posture of infrastructure and track security improvement initiatives.
- Security Standards & Baseline Compliance — ensure infrastructure complies with approved security standards, baselines, and security requirements.
- Security Control Validation — verify that implemented security controls are properly configured and effectively mitigate the intended risks. 
- Security Risk Identification & Reporting — identify infrastructure security risks, assess their potential impact, and provide clear reports and recommendations to stakeholders.
- Data Security — ensure appropriate infrastructure-level controls are implemented to protect sensitive and business-critical data.
- Patch Management Monitoring & Compliance — monitor patch management processes, identify overdue or missing security updates, and work with infrastructure teams to ensure
timely remediation.

Our benefits to you:

☘️An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance, and more

🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed

🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided

🏖Paid vacations, sick leave, personal events days, days off

💵Referral program — enjoy cooperation with your colleagues and get the bonus

📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences

🎯Rewards program for mentoring and coaching colleagues

✈️In-house Travel Service

🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more

🎳Other benefits could be added based on your location 

About the project:
Build the core data engineering capability that enables AI agents, analytics products, and business workflows to securely discover, access, combine, govern, and activate data across enterprise systems, client environments, media platforms, and third-party providers.

We are seeking a senior engineering specialists who will be responsible for implementation and delivery of key platform capabilities. While architecture leadership is provided by the platform architecture team, this specialist is  expected to bring deep expertise, contribute to solution design, challenge assumptions, and guide implementation decisions based on industry experience.

Job Description

• Implement governance, security, compliance, and commercial control capabilities across the platform.
• Strong experience with SQL, Python, and cloud-based platforms like AWS, GCP, or Azure.
• Solid understanding of data modelling, pipelines and orchestration tools (Airflow, dbt, or similar).
• Familiarity with modern data ecosystems — e.g. Spark, Databricks, Snowflake, BigQuery or Redshift.
• Experience working with CI/CD, version control and testing best practices.
• A proactive approach to solving problems and improving systems.
• Excellent communication skills — you can translate technical concepts into language anyone can understand.
• A passion for data and how it can drive better decisions in media, marketing and beyond. 
• Experience with technologies and platforms such as
• Purview, Collibra, Alation, Immuta, Unity Catalog, Apache Ranger
  Enterprise identity and access management solutions
  Data lineage, audit, privacy, and compliance frameworks
  Governance and policy enforcement platforms
   

Job Responsibilities

• Implementing access controls and entitlement services
  Building policy enforcement capabilities
  Delivering lineage, audit, and monitoring solutions
  Supporting compliance, privacy, and commercial governance requirements
  Enabling secure data sharing across platforms and partners
  Providing governance expertise during platform implementation

About Come Back Agency & Client Position

Come Back Agency supports US software and technology companies by running their hiring process. We work with delivery and leadership teams to define roles, screen candidates, and manage interviews. Successful candidates are hired directly by the company and become part of its team.

This position is with a US-based software company providing custom development and AI implementation for North American clients. The team builds and maintains production software, including AI-enabled systems, and works in long-term client engagements. Team members operate as part of an internal, distributed team and collaborate directly with client stakeholders.

About the Role

As we scale our operations and infrastructure, we are looking for a hands-on DevOps / Platform Engineer who can design robust cloud environments, standardize infrastructure templates, and support our compliance readiness.

In this role, you will build automated end-to-end cloud infrastructure, manage multi-account AWS environments, support Kubernetes clusters, and collaborate on security hardening. You will also play a key role in supporting upcoming enterprise vendor reviews and compliance readiness (SOC 2 / ISO 27001) by gathering evidence, addressing security gaps, and utilizing cloud security mechanisms.

What You Will Do

• Cloud Architecture & Multi-Account Setup: Design, build, and maintain AWS infrastructure from scratch; standardize multi-account environments (AWS Organizations) and repeatable landing zones.
• Infrastructure & CI/CD: Manage Infrastructure as Code using Terraform and maintain scalable automated CI/CD pipelines (primarily GitHub Actions).
• Container Orchestration: Support and maintain production Kubernetes clusters (Amazon EKS).
• System Migration: Assist with migrating internal and client services/applications to AWS in alignment with security best practices.
• Security Hardening & Access Control: Implement least privilege access (IAM), secrets management, network isolation, and standard security practices across cloud environments.
• Compliance Readiness & Evidence Gathering: Support SOC 2 and/or ISO 27001 readiness by identifying security gaps, collecting audit evidence, and providing technical artifacts (using AWS Artifact, Security Hub, or integrated compliance tools).
• Observability & Incident Support: Standardize logging, monitoring, and alerting across environments to ensure full auditability and infrastructure reliability.
   

Requirements

• Experience: 2.5+ years of practical DevOps / Platform / Cloud Engineering experience managing cloud infrastructure.
• AWS & Infrastructure Design: Strong experience with AWS (IAM, VPC networking, compute, logging) and hands-on experience or familiarity with AWS Organizations and multi-account structures.
• Containers & Kubernetes: Hands-on experience managing and supporting production Kubernetes clusters (Amazon EKS).
• Infrastructure as Code (IaC): Solid experience writing and maintaining Terraform scripts.
• CI/CD: Practical experience configuring deployment pipelines from scratch (GitHub Actions preferred, or GitLab CI / Bitbucket Pipelines).
• Practical Security & Compliance: Familiarity with cloud security controls (IAM, encryption, vulnerability scanning) and practical experience with evidence collection and gap remediation for SOC 2 or ISO 27001 audits.
• Communication: B2+ English level (upper-intermediate or higher) for effective daily communication with US-based stakeholders and auditors.

Nice to Have

• Experience or familiarity with compliance automation platforms (e.g., Vanta, Drata, Secureframe, or AWS Security Hub).
• AWS Certifications (e.g., AWS Certified Solutions Architect, SysOps Administrator, or AWS Certified Security - Specialty).
• Experience with cloud application migrations.
   

What We Offer

• Working hours aligned with US time zones, typically 16:00–23:59 Kyiv time.
• Company-sponsored English lessons to support clear and confident communication.
• Paid vacation and sick days.
• Fully remote work model.
• Opportunities for professional growth and support with professional certifications.
• Structured, personalized onboarding to help you ramp up effectively.

Apply with your resume and a short note outlining your relevant experience. You can also submit it through our website at comeback.ua. Selected candidates will be contacted by Come Back Agency.

PrivatBank is the largest bank in Ukraine and one of the most innovative banks around the world. It holds a leading position for all the financial indicators in the area and comprises about a quarter of the whole banking system of our country.

We are looking for an Application Security Engineer. We are searching for the person who seeks to work in a dynamic environment and shares the values of initiative, openness and mutual trust.

We are striving to find a goal-oriented and multitask professional who would be focused on making good results and high quality.

Requirements:

• At least 3 years of experience in application security or related fields such as penetration testing and security architecture
• Proficiency in using security scanners such as SAST, DAST, SCA, Secret Detection, and Container scanning
• Experience integrating security scanners in CI/CD pipelines using Jenkins for GitLab
• Certifications such as CEH, OSCP, CSSLP, AWS Certified Security Specialty, etc. is preferred
• Background in software development, including roles such as Developer, Business Analyst, Architect, DevOps, etc
• Knowledge of Secure Software Development Life Cycle (S-SDLC) and frameworks like OWASP SAMM, BSIM, and Microsoft SDL
• Familiarity with the software development process and stages
• Basic understanding of software code
• Knowledge of key infrastructure components like databases, queues, application servers, load balancers, NoSQL, etc
• Understanding of major types of vulnerabilities
• Understanding of software architecture
• Knowledge of network protocols such as DNS, HTTP/S, SMTP, SSH, and FTP
• Ability to independently research information and solve complex problems
• Critical thinking skills

Responsibilities:

• Conduct security audits using the OWASP SAMM framework to assess current practices, identify gaps, and evaluate compliance levels within the organization
• Develop and implement strategic plans aimed at enhancing security maturity levels throughout the organization, with gradual improvements
• Application security governance and metrics
• Collaborate with various team members, including developers and top management, to advocate and implement application security best practices
• Improve our application security management platform
• Manage security architecture, focusing on integrating security at every stage of the software development lifecycle
• Integrate and oversee security automation tools to enhance security processes and reduce manual error
• Oversee security testing across various stages of software development to identify and mitigate potential security vulnerabilities
• Engage in threat modeling activities to predict and neutralize potential security threats before they impact the system
• Ensure compliance with relevant industry standards and regulations by regularly updating security policies and standards
• Track and manage software defects to ensure timely resolution of security-related issues
• Develop and conduct training and awareness programs to enhance security knowledge and practices across the organization
• Spearhead the secure integration of CI/CD practices into software development processes to ensure continuous security
• Use cloud services for application security

We offer:

• Work in the largest and most innovative bank of Ukraine
• Official employment and 24+4 calendar days of vacation
• Sick leave compensation
• Medical Insurance
• Competitive salary
• Bonuses, premium according to company policy
• Corporate training
• Modern comfortable office
• Interesting projects, ambitious tasks and dynamic growth
• Corporate financial assistance in critical situations
• A friendly professional and strong team
• Possibility of remote work format

PrivatBank is open to support and employ veterans and people with disabilities.

We believe that discrimination due to health conditions, physical abilities, age, race and ethnicity, gender or marital status is unacceptable.

We are ready to train veterans and candidates with disabilities without banking experience.

We are the creators of a new fintech era!

Our mission is to change this world by making blockchain accessible to everyone in everyday life. WhiteBIT is a global team of over 1,200 professionals united by one mission — to shape the new world order in the Web3 era. Each of our employees is fully engaged in this transformative journey.

We work on our blockchain platform, providing maximum transparency and security for more than 8 million users worldwide. Our breakthrough solutions, incredible speed of adaptation to market challenges, and technological superiority are the strengths that take us beyond ordinary companies. Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT, and VISA.

The future of Web3 starts with you: join us as an IAM/PAM Governance Specialist.
 

Requirements:

• 2+ years of experience in IAM, PAM, Identity Governance, Information Security, IT Controls, IT Audit, or a related area.
• Good understanding of Identity and Access Management concepts, including user lifecycle, role-based access control, least privilege, segregation of duties, and access recertification.
• Practical understanding of Privileged Access Management and risks associated with privileged, administrative, shared, and service accounts.
• Experience performing access reviews, privileged access reviews, or user entitlement assessments.
• Experience reviewing access controls and identifying excessive, outdated, or inappropriate permissions.
• Experience supporting internal or external audits, including evidence collection, control testing, findings follow-up, and remediation tracking.
• Ability to assess whether access controls are operating effectively and document identified gaps and recommendations.
• Experience working with system owners, administrators, Security, IT, and other stakeholders to investigate and remediate access-related issues.
• Understanding of security control frameworks and standards such as ISO 27001, NIST, SOC 2, or similar.
• Ability to work with IAM/PAM platforms, administrative consoles, access management systems, and related security tooling.
• Strong analytical and documentation skills, with attention to detail.
• Ability to independently manage assigned reviews, audits, and remediation activities.
• Good written and verbal communication skills and the ability to explain access control issues to both technical and non-technical stakeholders.

Responsibilities:

• Perform periodic reviews of privileged, administrative, shared, service, and other high-risk accounts across critical systems.
• Review user and administrative access to identify excessive, outdated, inappropriate, or conflicting permissions.
• Support and coordinate access recertification and entitlement review activities with system and business owners.
• Assess IAM/PAM-related security controls and verify that access management processes are operating effectively.
• Perform security and access control audits of internal systems and applications.
• Collect, validate, and maintain audit evidence related to identity, access management, and privileged access controls.
• Identify IAM/PAM control gaps, document findings, and track remediation actions through to closure.
• Monitor privileged access governance requirements, including least privilege, segregation of duties, and appropriate use of administrative accounts.
• Work with PAM and administrative consoles to review privileged access configurations, account usage, permissions, and control effectiveness.
• Support governance of service accounts, emergency/break-glass accounts, and other non-standard privileged identities.
• Collaborate with the IAM Cybersecurity team on access-related issues that require changes to IAM platforms, integrations, or technical controls.
• Work with system owners, administrators, IT, Security, and business stakeholders to investigate and remediate access-related risks.
• Support internal and external audits, compliance assessments, and security reviews related to IAM and PAM.
• Maintain and improve IAM/PAM governance documentation, procedures, control descriptions, and review records.
• Contribute to improving and automating access reviews, privileged access monitoring, evidence collection, and reporting processes.
• Provide regular reporting on access review status, identified risks, open findings, and remediation progress.

Would be a plus:

• Hands-on experience with PAM solutions such as CyberArk, BeyondTrust, Delinea, or similar.
• Experience with Identity Governance solutions such as SailPoint, Saviynt, Microsoft Entra ID Governance, or similar.
• Experience reviewing privileged access in cloud environments such as AWS, Azure, or GCP.
• Experience with joiner, mover, and leaver processes.
• Experience with service accounts, emergency/break-glass accounts, and privileged session controls.
• Familiarity with regulatory or compliance requirements related to access management.
• Relevant certifications in information security, IAM, audit, or risk management are a plus.

Working terms:

Immerse yourself in Crypto & Web3:

• Master cutting-edge technologies and become an expert in the most innovative industry.

Work with the Fintech of the Future:

• Develop your skills in digital finance and shape the global market.

Take Your Professionalism to the Next Level:

• Gain unique experience and be part of global transformations.

Drive Innovations:

• Influence the industry and contribute to groundbreaking solutions.

Join a Strong Team:

• Collaborate with top experts worldwide and grow alongside the best.

Work-Life Balance & Well-being:

• Modern equipment.
• Comfortable working conditions and an inspiring environment to help you thrive.
• 24 calendar days of paid leave.
• Additional days off for national holidays.

Overview:

SOFTSWISS is looking for an Infrastructure Security Team Lead to lead the Infrastructure Security team within a high-load international iGaming company operating remotely across regulated markets.

Purpose of the role:

You will be responsible for leading and developing the Infrastructure Security Team, defining priorities, establishing scalable security processes, and driving infrastructure security outcomes across the organization. The role combines team leadership with strong technical guidance to support security decision-making across infrastructure domains.

Key responsibilities:

• Lead, coach, and develop the Infrastructure Security team, ensuring clear ownership, accountability, and strong execution
• Define and drive the Infrastructure Security strategy, roadmap, standards, and operating model.
• Prioritize team initiatives based on security risk, business impact, engineering capacity, and regulatory requirements
• Guide security across infrastructure environments, including cloud platforms, Kubernetes, endpoints, privileged access management, remote access, and vulnerability management
• Build scalable processes for risk prioritization, remediation tracking, and cross-functional collaboration
• Partner with Engineering, Product, Infrastructure, and Security teams to integrate security early and improve execution

• Communicate infrastructure security risks, priorities, trade-offs, and progress clearly to technical teams and leadership

   

Required Experience:

• 5+ years of experience in cybersecurity, including experience leading and managing technical security teams
• Strong background in Infrastructure Security, Cloud Security, or Platform Security
• Experience translating security goals into clear roadmaps, priorities, ownership models, and measurable outcomes
• Proven leadership skills with experience in coaching, delegation, feedback, and team development
• Ability to influence stakeholders and drive change across cross-functional teams
• Strong communication skills with the ability to engage both technical and non-technical audiences
• Upper-Intermediate or higher English level

• Upper-Intermediate or higher Russian level

   

Nice to have:

• Experience securing infrastructure in high-risk or regulated environments such as iGaming, Crypto, FinTech, or similar industries.
• Experience maturing a security function from reactive execution to a structured, scalable security program.
• Experience leading distributed or fully remote technical teams.
• Hands-on experience with Zero Trust models, secure remote access, AWS, OCI, and Google Workspace Security.

• Experience with digital asset or cryptocurrency infrastructure security

   

Our Benefits:

• Private health insurance
• Sports benefits
• Comprehensive Mental Health Program
• Free English lessons (online)
• Local language courses
• Paid time off
• Maternity leave support
• Referral program rewards
• Upskilling, internal workshops, and participation in professional conferences and corporate events

Important: after confirming your application on this platform, you’ll receive an email with the next step: completing your application on our internal site, LaunchPod. So keep an eye on your inbox and don’t miss this step — without it, the process can’t move forward.

Why join us

If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! :)

About the role

We are looking for a Python Application Security Engineer to automate security controls and integrate application and cloud security checks into software development workflows.

The mandatory requirements are 3+ years in software engineering and security, Python, Wiz or similar CSPM tools, IaC/Terraform deploy-time checks, runtime security checks, and independent execution; upper-intermediate English is required. SAST/DAST/SCA, AI security, threat modeling, and Java are a plus.

Must haves

• 3+ years of experience combining software engineering experience, security implementation and/or architecture experience.
• Strong coding and architectural proficiency in Python (for security automation and scripting).
• Hands-on experience or familiarity with Wiz, Prisma Cloud, or similar tools for cloud security posture management and threat detection.
• Implementation experience with deploy-time checks against Infrastructure as Code (IaC) / Terraform.
• Implementation experience with runtime checks through Cloud Security Posture Management (CSPM).
• Fully autonomous execution capability, requiring no daily supervision to map out and build automated security runbooks.

• Upper-intermediate English level.

   

Nice to haves

• Deep, hands-on expertise deploying and tuning modern application security testing tools (SAST, DAST, SCA) and integrating them into complex CI/CD orchestration ecosystems.
• Experience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging or secure code generation.
• Advanced application threat modeling experience.

• Ability to confidently read, review, and secure enterprise source Java code.

   

What you will do

• AppSec Engineering & Automation: Engineer and deploy AI-enabled secure code scanning capabilities and "Golden Images" to drive secure-from-the-start adoption.
• Technical Modernization: Automate the development of secure coding patterns and integrate them with traditional and Agentic SDLC workflows.
• Security Tooling Integration: Architect the integration of continuous security scanning tools (SAST, DAST, SCA) into enterprise CI/CD pipelines, tuning them to eliminate noise.
• Cloud & Runtime Security: Implement runtime security checks via CSPM to maintain continuous cloud visibility and threat posture management.
• Developer Experience (DevEx): Act as a senior technical SME, reading and reviewing complex application code (Java/Python) to provide software engineers with highly specific, code-level remediation guidance.

The benefits of joining us

• Professional growth: Accelerate your professional journey with mentorship, TechTalks, and personalized growth roadmaps
• Competitive compensation: We match your ever-growing skills, talent, and contributions with competitive USD-based compensation and budgets for education, fitness, and team activities
• A selection of exciting projects: Join projects with modern solutions development and top-tier clients that include Fortune 500 enterprises and leading product brands
• Flextime: Tailor your schedule for an optimal work-life balance, by having the options of working from home and going to the office – whatever makes you the happiest and most productive.

Meet Our Recruitment Process

Asynchronous stage – An automated, self-paced track that helps us move faster and give you quicker feedback:

• Short online form to confirm basic requirements
• 30–60 minute skills assessment via Codility – a platform founded in Poland that helps us provide quicker feedback and streamline this stage of the process.
• 5-minute introduction video

Synchronous stage – Live interviews

• Technical interview with our engineering team (scheduled at your convenience)
• Final interview with your future teammates

If it’s a match — you’ll get an offer!

Swarmer develops software that makes drones autonomous and allows them to operate together, in large, coordinated teams — no pilots needed. Our technology has been battle-tested in Ukraine— the world’s most intense proving ground for drone warfare.

In March 2026, we became the first Ukrainian defense startup to go public on NASDAQ, following a $15M Series A — the largest investment in a Ukrainian defense tech company since the start of the war.

Working at Swarmer means operating at the intersection of engineering rigor and frontline reality. The problems and environments are complex, and the stakes are very real. We built this software to enable democratic nations to defend themselves.

If you are motivated by building resilient systems that matter and by seeing the direct impact of your work, you’ll find purpose here.

What we’re looking for:

We're looking for an experienced Cybersecurity Engineer to join our team. You'll be responsible for defending our endpoints, identities, SaaS stack, networks, and cloud environment against the people actively trying to breach them. Product security lives with a separate team, so your focus stays sharp: keep the corporate perimeter tight.

This is a builder's role, not a maintainer's. You'll stand up and run our detection stack (SIEM/SOAR, EDR), lock down and manage the device fleet (MDM, hardening), and design identity controls built on ZeroTrust principles (SSO, MFA, ZTNA).

You won't be handed a mature security program to babysit. You'll design it, implement it, and operate it, with recognized frameworks as your guardrails and real-world attack patterns as your test cases.

What you’ll do:

• Own and continuously improve our SIEM/SOAR capabilities, including log source onboarding, detection rules and correlation logic, alert tuning, dashboards, automated response workflows, and integration across the security stack
• Monitor and analyze security events and logs to catch anomalies and potential threats; investigate, contain, and remediate incidents, documenting timelines, root causes, and lessons learned
• Deploy and manage endpoint and server protection across the fleet (EDR/NGAV, MDM), including policy enforcement, compliance configuration, and hardening baselines (encryption, security policies, benchmarks)
• Implement and operate identity and Zero Trust access controls, including SSO, MFA, conditional access, ZTNA, device posture checks, RBAC, least privilege, privileged access management, and periodic access reviews
• Manage vulnerabilities across endpoints, servers, and cloud, with risk-based prioritization and remediation tracking
• Monitor cloud and SaaS security posture, remediate misconfigurations, and review third-party integrations and access scopes
• Review infrastructure projects and architecture from a security lens, ensuring secure-by-default configurations
• Document technical security controls (runbooks, hardening guides) and support internal and external audits

What we need:

• 4+ years of hands-on experience in cybersecurity or IT infrastructure engineering, with a clear specialization in security
• Hands-on experience with SIEM/SOAR platforms, covering log source integration, detection engineering, alert investigation, and security automation
• Hands-on experience with EDR/NGAV platforms, covering endpoint policy management, detection, investigation, and response
• Experience hardening and managing endpoints across Windows, macOS, and Linux, including MDM platforms
• Experience with identity and Zero Trust access technologies, including SSO, MFA, conditional access, device posture, and ZTNA
• Solid grasp of networking fundamentals (TCP/IP, DNS, DHCP, VPN), with practical experience configuring firewalls and other network security controls
• Working knowledge of common attack techniques and how to detect and prevent them
• Practical familiarity with recognized security frameworks and standards (e.g., CIS, NIST, MITRE ATT&CK)
• Strong risk-assessment instincts, with the ability to prioritize pragmatically and explain technical issues clearly to non-technical colleagues
• English proficiency, for documentation, vendors, and external partners

Would be an advantage:

• Scripting ability for automating security and infrastructure tasks (Python, Bash, PowerShell, or SOAR playbooks)
• Experience with vulnerability management platforms
• Working knowledge of cloud and SaaS security controls (e.g., CSPM/SSPM)
• Relevant security certifications
• Experience working in enterprise or critical-infrastructure environments

What you’ll get:

• Professional growth through working with cutting-edge defense technologies and exposure to international security best practices.
• Direct impact: your work protects systems that operate in real, high-stakes environments.
• A fast-paced environment with minimal bureaucracy and no “process for the sake of process”.
• Competitive salary and a comprehensive benefits package (insurance, paid sick leave, 20 paid days off per year).
• Benefits of the defense sector (e.g., reservation, etc.).
• Flexible remote work options where possible.

How’s the hiring process going:

✔️ Recruiter Screen → ✔️ Technical Interview → ✔️ Final Interview → ✔️ Security check → ✔️ Offer

Ready to Apply?

Important: after confirming your application on this platform, you’ll receive an email with the next step: completing your application on our internal site, LaunchPod. So keep an eye on your inbox and don’t miss this step — without it, the process can’t move forward.

Why join us

If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! :)

About the role

We are looking for a Python Application Security Engineer to automate security controls and improve vulnerability management across CI/CD pipelines.

The mandatory requirements are 3–5 years in software engineering, Python, AppSec tooling or security architecture, CI/CD, vulnerability scoring frameworks, and upper-intermediate English. DevSecOps/AppSec experience, Java, CNAPP/ASPM tools, and threat modeling are a plus.

Must haves

• 3–5 years of commercial experience in software engineering.
• Solid coding proficiency in Python for automation and scripting.
• Working knowledge of modern CI/CD orchestration tools and practical experience interacting with vulnerability scoring frameworks.
• AppSec tooling expertise or security architecture.
• Ability to operate with minimal supervision on day-to-day execution, reliably completing complex scripting and integration tasks.

• Upper-intermediate English level.

   

Nice to haves

• Experience in DevSecOps/AppSec.
• Ability to comfortably read and navigate Java source code.
• Hands-on experience with specific CNAPP or ASPM platforms (e.g., Wiz).

• Basic understanding of application threat modeling.

   

What you will do

• Pipeline Integration: Write and maintain the scripts necessary to integrate security gates (SAST, DAST, SCA) seamlessly into the CI/CD pipeline.
• Security Data Triage: Continuously tune and configure existing security scanning tools to eliminate false positives and deliver high-confidence alerts.
• Baseline Automation: Assist in coding and deploying automated hardened baselines and secure coding patterns.
• Code-Level Remediation: Work directly with product development teams to provide actionable, code-level remediation guidance in Java and Python.

The benefits of joining us

• Professional growth: Accelerate your professional journey with mentorship, TechTalks, and personalized growth roadmaps
• Competitive compensation: We match your ever-growing skills, talent, and contributions with competitive USD-based compensation and budgets for education, fitness, and team activities
• A selection of exciting projects: Join projects with modern solutions development and top-tier clients that include Fortune 500 enterprises and leading product brands
• Flextime: Tailor your schedule for an optimal work-life balance, by having the options of working from home and going to the office – whatever makes you the happiest and most productive.

Meet Our Recruitment Process

Asynchronous stage – An automated, self-paced track that helps us move faster and give you quicker feedback:

• Short online form to confirm basic requirements
• 30–60 minute skills assessment via Codility – a platform founded in Poland that helps us provide quicker feedback and streamline this stage of the process.
• 5-minute introduction video

Synchronous stage – Live interviews

• Technical interview with our engineering team (scheduled at your convenience)
• Final interview with your future teammates

If it’s a match — you’ll get an offer!