Jobs

About the Role
 

We are looking for a Senior Backend Engineer (Go / Golang) to join our team for a long-term product development project.

The frontend team (3 developers) is already formed. We are now strengthening the backend side.

This is a hands-on development role focused on building scalable APIs and backend services.
 

Responsibilities

• Develop backend services using Go (Golang)
• Design and implement REST APIs
• Work with PostgreSQL databases (schema design, optimization)
• Integrate third-party services
• Implement authentication & authorization (JWT, OAuth)
• Optimize performance and improve system reliability
• Collaborate closely with the frontend team
• Participate in technical discussions and estimations

Requirements

• 4+ years of commercial experience
• 3+ years of experience with Go (Golang)
• Experience with Gin, Echo, Fiber or similar Go frameworks
• Strong experience building REST APIs
• Experience with PostgreSQL
• Understanding of concurrency (goroutines, channels)
• Experience with Docker
• Experience with AWS (EC2, RDS, S3)
• Experience with Git
• Understanding of CI/CD processes

Nice to Have

• Redis
• Kafka / RabbitMQ
• Microservices architecture
• Kubernetes
• Experience with SaaS or marketplace products
• Swagger / OpenAPI
• Unit testing in Go

What We Offer

• Long-term full-time engagement
• Stable workload
• Product development from early stages
• Direct communication, no bureaucracy
• Opportunity to grow within the project

We’re looking for an experienced Odoo Consultant to join our ERP implementation team. Whether you are looking for a stable full-time career move or a part-time project-based collaboration, we offer a flexible environment where your expertise will directly impact business growth.

In this role, you’ll be involved in projects from the very beginning — working directly with clients, understanding how their business actually operates, and helping turn that into a practical, scalable Odoo setup.

What you’ll actually be doing

- Analyzing how the client currently works and identifying what can be improved in Odoo
- Running workshops and gathering requirements
- Configuring standard Odoo modules based on real business needs
- Preparing clear functional specifications for developers when customization is required
- Coordinating with the dev team on integrations and custom features
- Supporting data migration (mapping, checking, validating data)
- Supporting UAT and go-live preparation
- Training users and helping them adopt the system
- Preparing functional instructions and documentation
- Participating in US-based project launches (short business trips)

We’re looking for someone who:

- Has 3+ years of real Odoo implementation experience (Odoo 16+ preferred)
- Understands core Odoo modules (Sales, Purchase, Inventory, Accounting, CRM)
- Knows how to talk to business users and translate their needs into system logic
-Has strong communication skills and can explain complex concepts in clear, simple language
-Is comfortable communicating with large stakeholder groups and cross-functional teams
-Is comfortable working with developers (tech understanding is a plus)
-Can work independently and take ownership
-Speaks English at an advanced level
-Can travel to the US 1–2 weeks per year
-Is ready for business trips, including travel in July this year

Nice to have: 
-Polish (Upper-Intermediate+)

Ready to try your hand? Send your CV without a doubt!

TRENDFORMER is an innovative product company because we don’t just make toys. At TRENDFORMER we’re changing the face of play.

Our professional and creative team has developed and successfully launched unique products internationally under the brands PIXIO (https://pixio.site/), HEY CLAY (https://hey-clay.com/) and VOXART (https://vox.art/). Today, our products are sold in more than 50 countries worldwide. These products are designed to spark creative potential, take children on a fantastic journey of discovery and crafting, and inspire learning through play.

We are currently searching for a Chief Growth Officer to join our team.

Your responsibilities:

• define and execute a strategic roadmap for growing HEY CLAY, PIXIO, and VOXART globally;
• lead and improve performance across 4 main commercial channels: distributors, direct retail accounts (e.g., Target, Walmart), online (Amazon, Shopify), loyalty & reward partnerships (e.g., with grocery chains);
• develop and lead a monetization strategy for licensing IP and creative content;
• build quarterly and annual growth strategies and turn them into actionable plans;
• analyze sales performance and continuously optimize commercial tactics;
• identify, validate, and prioritize key growth opportunities based on market research, user insights, and experimentation;
• test and implement new business models to scale the business;
• collaborate closely with product and marketing teams to align commercial initiatives with user behavior, positioning, and acquisition strategy;
• ensure achievement of turnover and profitability targets;
• participate in planning and evaluating trade marketing initiatives;

• monitor and manage contractual obligations and financial discipline.

   

Our ideal candidate has:

• 5+ years in strategic sales or growth leadership roles in consumer tech, toys, edtech, or hybrid digital-physical products;
• proven success scaling sales across diverse channels: distributors, retail (especially in the US/EU), e-commerce, loyalty or rewards programs, licensing partnerships;
• strong strategic thinking with a proven track record in building and executing go-to-market strategies;
• deep understanding of global consumer retail and licensing ecosystems;
• ability to work with large volumes of data and multitasking across functions;

• fluent in English (spoken and written).

   

We offer:

• the opportunity to shape globally recognized products that kids and families love;
• flexible work format (remote or hybrid);
• a supportive, creative, and forward-thinking team;
• open-door culture and direct communication;
• competitive salary (negotiable based on engagement format and experience).

Join us and be a part of something meaningful. Let’s build the future of play, together!

Gainway is looking for a Creative Producer who will be responsible for creating and developing advertising creatives in collaboration with designers and the marketing team.
 

Responsibilities:

- Create briefs for designers (video, motion, static)

- Assign tasks to the team and oversee their execution

- Generate ideas for advertising creatives (hooks, scripts, formats)

- Analyze creative performance (CTR, conversions, retention)

- Research competitors and advertising trends (Meta, TikTok)

- Improve creative strategy based on data

- Collaborate closely with the team
 

Requirements:

- Experience in creative production / marketing / performance advertising

- Understanding of how ad creatives and traffic work

- Ability to write clear briefs and task descriptions

- Strong sense of hooks and the first seconds of video

- Analytical mindset and results-oriented approach

- Understanding of trends in TikTok / Instagram / Meta Ads

- Experience working with designers or creative teams
 

Work format:

- Part-time or consulting basis

- Fully remote

- Flexible schedule
 

What the company offers:

- Flexible cooperation format

- Opportunity to influence creative strategy

- Work with a team open to ideas

- Dynamic environment with minimal bureaucracy

Come Back Agency supports US software and technology companies by running their hiring process. We work with delivery and leadership teams to define roles, screen candidates, and manage interviews. Successful candidates are hired directly by the company and become part of its team. This position is with a US-based software company providing custom development and AI implementation for North American clients. The team builds and maintains production software, including AI-enabled systems, and works in long-term client engagements.
 

Team members operate as part of an internal, distributed team and collaborate directly with client stakeholders.
 

What we’re looking for

• Fluent in spoken English (В2+, work with US customers);
• Experience from 0,5 year in a relevant position;
• Be flexible with the US schedule. Working hours from 16:00 pm to 00:00 Kyiv Time;
• Ability to prioritize tasks for the team and coordinate multiple projects in a changing environment.
   

What you’ll be doing

• Full cycle of project management: from participation in pre-sales preparation to the stage of successful implementation/support of the project;
• Prepares a daily, weekly, and monthly plan;
• Work with technical documentation;
• Provide reporting on the progress of tasks and the project;
• Tracking workload, deadlines, and progress on each project’s tasks.
   

What We Offer:

• Working hours aligned with US time zones, typically 16:00—00:00 Kyiv time.
• English lessons to support clear and confident communication.
• Paid vacation and sick days.
• Fully remote work.
• Opportunities for professional growth within the team.
• Structured, personalized onboarding to help you ramp up effectively.

Hiring stages: Recruiter screening → Skills assessment interview → Final culture fit interview.
 

Apply with your resume and a short note outlining your relevant experience. You can also submit it through our website at comeback.ua. Selected candidates will be contacted by Come Back Agency.

About the role

We are looking for a Senior Full-Stack Developer to join as the first dedicated engineering team member and work directly with the founding team.

This is a hands-on role with strong architectural ownership across multiple production SaaS products. You’ll be involved in shaping system design, building new features, and improving reliability across the stack.

• Workload: 20–30 hours/week initially, with potential to scale

Requirements

• Strong experience with TypeScript (strict mode)
• Solid expertise in React (preferably React 19) and Next.js (App Router)
• Hands-on experience with Supabase (PostgreSQL, RLS, Edge Functions)
• Experience building and maintaining full-stack applications
• Strong understanding of API design, validation, and error handling
• Experience with relational databases, migrations, and query optimization
• Experience working with background jobs / async workflows
• Ability to work in an async, documentation-heavy environment
• Strong ownership mindset and ability to make architectural decisions

Will be a plus

• Experience with multi-tenant SaaS architectures
• Familiarity with Inngest or similar workflow orchestration tools
• Experience with real-time systems, voice or AI integrations
• Experience with Supabase Auth and RLS policies
• Knowledge of Redis (Upstash)
• Experience with Sentry or similar monitoring tools
• Experience integrating third-party APIs (CRM, telephony, etc.)
• Understanding of HIPAA-compliant systems

• Experience with tools like Twilio, Telnyx, Vapi, GoHighLevel, EasyPost

   

Responsibilities

Product Development

• Build new product modules based on architectural specifications
• Implement UI features and fix bugs across dashboards and interfaces
• Develop internal tooling and test harnesses for feature validation

Integrations & Orchestration

• Integrate and manage multiple external providers (AI, voice, APIs)
• Build reliable webhook pipelines (ingest, deduplication, processing)
• Implement CRM and third-party service integrations
• Work on campaign management logic (retry handling, orchestration, etc.)

Backend & Data

• Develop API routes with proper validation and error handling
• Implement background jobs and durable workflows
• Work with database migrations, RLS policies, and RPC functions

Project description

You will work across multiple production SaaS products that share a unified technical stack:

• Primary product (~70%):
  A multi-tenant AI platform for sales intelligence and conversation analytics with active clients and ongoing feature development. This is the most complex system with heavy integration and backend logic.
• Secondary product (~30%):
  A B2B healthcare portal focused on clinic workflows and order routing. The system includes role-based access, audit logging, and integrations with external providers.
• Additional product (as needed):
  An audience intelligence platform that is stable in production, requiring occasional feature updates and maintenance.

Core stack across all projects:
Next.js (App Router), React 19, Supabase (PostgreSQL, RLS, Edge Functions), TypeScript (strict mode), Tailwind CSS.

About us

Syndicode is a value-driven software development partner with a globally distributed team of engineers, designers, architects, and IT managers. We are united by the mission to provide our clients with software products and services that perform, look, and work as designed.

We believe that our people and culture sustain Syndicode’s success. Our team is unified by shared principles like Accountability, Involvement, Excellence, Visibility, Integrity, Innovation, Win-Win, and Flexibility. Syndicoders are professionals who pursue self-improvement through continual learning, are eager to introduce improvements to work processes, and can analyze various sources to make sound and timely decisions.

If it sounds like you, apply for our vacancies and become a new Syndicoder!

About the role

As a Business Analyst, you will play an important role in aligning clients' business needs with our technology solutions. Your role involves analyzing data, understanding client requirements, and translating them into effective project specifications. Working collaboratively with diverse teams, you'll be pivotal in optimizing processes, fostering clear communication, and ensuring the successful delivery of outsourcing solutions.
 

What you’ll be doing

• Creating comprehensive and robust documentation and requirements that align with the Software Development Life Cycle (SDLC) phases and meet the customers' specific needs
• Conducting workshops and meetings to gather requirements, prioritize features, and resolve conflicts, fostering effective stakeholder collaboration
• Identifying the business needs and expectations of the customer and translating them into business change drivers and effective technical solutions
• Utilizing business analysis methods and techniques to establish and document functional, non-functional, and transition requirements with end-to-end traceability throughout the project life cycle
• Identifying potential risks and developing a strategy to mitigate them
• Reviewing, documenting, implementing, and maintaining business processes for both the internal team and customers
• Auditing project processes to improve results and customer satisfaction
• Contributing to sprint planning sessions by providing insights into the feasibility and effort required to implement features
• Facilitating clear, ongoing communication with all parties involved in a project to ensure a shared understanding is maintained

What you’ll need

• 4+ years of working experience as a Business Analyst
• Experience working on mobile-first or mobile product environments
• Proficiency in English (advanced level)
• Strong requirements elicitation skills using BA elicitation techniques (interview, document analysis, prototyping, observation, requirements workshops, brainstorming, etc.)
• Understanding of requirements' classification (business, stakeholder, solution) and ability to communicate them to stakeholders
• Ability to define design options and recommend the solution
• Experience in process analysis and modeling (as…is and to..be states) using graphical notations
• Strong knowledge of requirements management and project tracking tools (Jira, visualization tools)
• Understanding of SDLC
• Familiarity with Market Analysis and User Personas creation

Nice to have

• Business analysis certifications
• Be able to understand complex data structures and identify necessary changes
• Understanding of API integration principles

What you’ll get at Syndicode

• 15 days of vacation, 11 holidays, and 20 sick leave days per year
• Fully remote position
• Educational support and professional growth opportunities
• Continuous feedback and transparent communication
• Opportunity to influence processes and product decisions
• Self-management and flexible working approach
• Dynamic, fast-growing environment

DevSecOps Engineer (Short-Term Project, with potential ongoing advisory support)

We are looking for a DevSecOps Engineer with 3+ years of experience to help audit, strengthen, and improve the security posture of a small but growing SaaS platform serving nonprofit and corporate clients.

This role is security-first, with DevOps responsibilities as a secondary layer. The main goal is to assess the current infrastructure, identify security and compliance gaps, and implement a practical roadmap to improve the platform’s overall resilience, compliance readiness, and long-term sustainability.

Project scope:

- Initial security and infrastructure audit

- Identify risks, vulnerabilities, and operational gaps

- Build and prioritize a remediation roadmap

- Implement key improvements over a 2–3 month engagement

- Potential for ongoing periodic security reviews and advisory support afterward

Current stack / environment:

- Git

- GitHub Actions

- Docker

- AWS

- Render

What you will do:

- Audit the current cloud and application setup from a security and DevSecOps perspective

- Review infrastructure, deployment processes, DNS configuration, access controls, and backup/disaster recovery practices

- Identify gaps related to SOC 2 readiness and help prepare for stronger enterprise security expectations

- Assess security controls around CI/CD, secrets management, container images, user access, and production environments

- Review existing vulnerability scanning practices and recommend improvements, including dynamic scanning where needed

- Help define and implement practical controls such as firewalling, hardening, monitoring, least-privilege access, and security hygiene improvements

- Investigate risks related to DNS, exposed services, stale records, misconfigurations, and other overlooked infrastructure issues

- Support the team in creating a sustainable, right-sized security approach for a small organization without overengineering

- Translate findings into an actionable roadmap with clear priorities, balancing risk, cost, and implementation effort

- Help improve confidence in responding to enterprise security questionnaires from large corporate clients

What we are looking for:

- 3+ years of hands-on experience in DevSecOps, DevOps with a strong security focus, or cloud/infrastructure security

- Strong experience with AWS and cloud security best practices

- Experience with GitHub Actions, CI/CD security, Docker, and container/image scanning

- Experience reviewing and securing hosted platforms, including PaaS environments such as Render or similar

- Solid understanding of IAM/access control, secrets management, DNS security, backups, disaster recovery, and infrastructure hardening

- Experience identifying and remediating security gaps in small or mid-sized SaaS environments

- Familiarity with SOC 2 controls and general compliance-oriented security practices

- Ability to recommend pragmatic, cost-conscious solutions for a small team

- Strong communication skills and ability to explain risks, tradeoffs, and priorities clearly to non-security stakeholders

- English level: B2 minimum

Availability requirements:

- Must be available for overlap from 14:00 to 16:00 Mountain Time (MT)

- Outside of that window, the working schedule is flexible

Nice to have:

- Experience with GDPR readiness or compliance-related security improvements

- Experience supporting penetration testing remediation

- Experience with SSO/security controls for B2B or enterprise clients

- Experience working with lean startups, nonprofits, or small product teams

Ideal profile:

This role is a great fit for someone who can independently assess a relatively simple SaaS environment, uncover blind spots, and implement the highest-impact security improvements without creating unnecessary complexity. We are looking for someone practical, hands-on, and able to combine audit thinking with execution.

Engagement:

- Estimated initial duration: 2–3 months

- Potential for ongoing part-time or periodic audit/advisory support

We are Cacao Mobile. For over 10 years, we have been building mobile applications in Health & Wellness, Entertainment, and Utilities, reaching thousands of users worldwide.
 

We are currently looking for a Machine Learning Specialist for a part-time, project-based collaboration (4 hours per day).
 

About the project:
A mobile application that measures heart rate and heart rate variability (HRV) using PPG technology.
 

What you’ll be doing:
- Develop and improve models for blood pressure prediction based on PPG;
- Fine-tune and optimize models on limited and noisy data (~3k signals);
- Improve prediction quality (including for calibrated users);
- Signal processing (filtering, transformations, feature engineering);
- Work on tasks without explicit labels (clustering, PCA, pattern discovery);
- Solve additional tasks on the same signal (stress, energy, etc.);
- Develop algorithms and personalized user baselines;
- Conduct research and analyze new approaches.
 

What will help you succeed in this role:
- 1+ year of hands-on experience in Machine Learning;
- Strong background in signal processing;
- Experience working with noisy real-world data;
- Experience in supervised and unsupervised learning;
- Experience working with incomplete / imperfect labels;
- Ability to solve open-ended problems;
- Research mindset (working with papers, analyzing approaches);
- Nice to have: experience with PPG or understanding of blood pressure.
 

What you’ll get from us:
- Experience working in a product team focused on scaling;
- Opportunity to boost your professional skills within a like-minded team;
- Creative environment, transparent processes, minimal bureaucracy;
- Access to all necessary tools and services;
- Fully remote work.

Key requirements

• Upwork experience (mandatory)  real client communication
• 1+ year in IT sales (outstaffing / outsourcing)
• Experience progressing & closing deals
• Fluent English
• Flexible schedule
• Russian or Ukrainian (optional)

What you’ll do

• Own leads from Upwork and other sources, respond fast
• Run discovery calls & clarify staffing needs
• Qualify roles, seniority, skills, timelines, engagement model
• Work with recruiting team & candidate pool
• Drive deals: calls, follow-ups, negotiation, close
• Keep CRM (HubSpot) clean and up to date
• Prepare client materials (Google Docs/Sheets)
• Use AI tools (ChatGPT, meeting notes) daily

Must-have

• Hands-on Upwork sales experience
• Confident in negotiations & pricing
• Strong communication & relationship skills
• CRM discipline
• Google Docs/Sheets confidence

Not for you if

• No Upwork experience
• Avoid negotiations or talking about money
• Prefer slow sales cycles
• Dislike CRM discipline

Schedule

• Flexible hours
• Availability for occasional late/weekend calls (client timezones)

About us

Codemotion  IT services company (100+ people), part of Index.dev group
Outstaffing & outsourcing with strong recruiting capacity

What we offer

• Flexible schedule
• Support from Sales, Recruiting & Pre-sales
• International clients, daily English
• Compensation: base + performance bonus

We’re seeking a super-experienced Senior Fullstack Developer with deep expertise in JavaScript/TypeScript, particularly in Node.js, React, and Supabase, combined with practical experience in AI prompt engineering. You’ll architect, build, and optimize scalable applications that seamlessly integrate AI-assisted functionalities and modern cloud backends.

Requirements

Position name: Senior FS Developer (with AI agents experience)
Level: Senior

Hard skills:

• 8+ years of experience building fullstack web applications.
• Advanced proficiency in JavaScript/TypeScript, Node.js, React, and Supabase.
• Practical hands-on experience with AI prompt engineering, leveraging ArgumentCode, Cursor, or equivalent developer-AI tools.
• Experience with Figma MCP integrations to pull designs directly from Figma files
• Deep understanding of RESTful and GraphQL APIs, modern web performance, and security.
• Advanced experience with SQL databases, especially PostgreSQL
• Solid understanding of LLM context design, tool integration, and code-generation workflows.
• Experience with Docker, GitHub Actions, and cloud deployments (Vercel, AWS, or similar).

Nice-to-Have:

• Familiarity with Next.js, tRPC, or Edge functions.
• Exposure to RAG systems, vector databases, or LangChain/OpenDevin-style orchestration.

Responsibilities:

• Design and develop full-stack applications using Node.js (backend), React (frontend), and Supabase (database/auth/storage).
• Build scalable APIs and event-driven systems.
• Integrate and optimize AI/LLM workflows (e.g., OpenAI, Anthropic, or local models) through prompt design, argument-code, or Cursor-based pipelines.
• Collaborate closely with product and design teams to turn ideas into high-quality software.
• Write clean, maintainable, and testable code following best practices (CI/CD, unit/integration tests, performance monitoring).
• Review code, mentor team members, and participate in architecture discussions.

Office/Remote: Remote
English: Upper (must have)
Time zone: PDT

Hi

We’re looking for a Senior SMM Manager to scale and systematize our existing social media presence.
 

About us:

• Ohayu offers eSIMs in 190+ countries to keep travelers connected worldwide;
• We’re a remote-first team united by a strong love for travel;
• We’ve already reached millions of organic views on social media and built a solid presence across all major platforms.
   

About you:

• Senior SMM specialist with strong hands-on experience and successful cases;
• Demonstrated ability to grow accounts from zero to traction;
• Strong experience using AI to speed up ideation, scripting and visual production;
• Experience editing content independently using CapCut, Canva, Figma, etc;
• Advanced English required: all internal communication is in English, and our social media audience is fully English-speaking;
• Love for traveling.
   

Your responsibilities will be:

• Create SMM content in the travel category;
• Manage all our social media: Facebook, Instagram, TikTok, YouTube Shorts, X, Threads. Primary focus: TikTok & Instagram;
• Moderate comments and respond to DMs;
• Edit video content in CapCut or other tools to create engaging Reels and TikToks;
• Edit static content in Canva, Figma, Photoshop, etc., to create engaging static posts and carousels. Write briefs for a marketing designer when needed;
• Use AI tools for content generation when needed;
• Create travel video content (own footage is a plus, stock, AI- and team-generated content can also be used);
• Work with the user acquisition managers and analysts to report on views, engagement, and installs driven by social media.
   

Why to join us:

• Be the first SMM Manager on the team and fully own all social media channels;
• Access to all required AI tools, knowledge sharing, and direct contacts with social media platforms through the Genesis ecosystem;
• Create travel-focused content with full creative freedom.
   

Work format: Possibility to work fully remotely or from our offices in Warsaw, Kyiv or Lviv.
 

Benefits: health insurance, 20 paid vacation days, annual performance review with clear salary progression.

Join us in reshaping the future of connectivity.

On behalf of our client, we are looking for a Senior .NET Developer with EDI.

About the Project

The team is building a full in-house EDI platform to support logistics and transportation operations.

The system will handle EDI document exchange, transformation, validation, and integration with internal systems such as TMS, billing, and analytics.

This is a build-from-scratch system with strong architectural impact.

Responsibilities:

- Develop backend services using C# / .NET

- Build and extend functionality for EDI document processing (exchange, transformation, validation)

- Integrate the platform with internal systems (TMS, billing, analytics)

- Participate in system architecture and development of a new platform

Requirements:

- 5+ years of experience with C# / .NET

- 3+ years of experience with ASP.NET Core

- 1+ year of experience working with EDI systems

- Upper - Intermediate or higher level of English

Company offers:

- Long-term employment with possibilities for professional growth

- Fully remote work

- Reasonably flexible schedule

- 15 days of paid vacation

- Regular performance reviews

We are Cacao Mobile. For over 10 years, we have been building mobile applications in the Health & Wellness, Entertainment, and Utilities categories, attracting thousands of users worldwide.
 

We are currently strengthening our team and looking for a Senior User Acquisition Manager — a professional with strong expertise in traffic acquisition within Health, Utilities, or AI Chat applications.
 

Key responsibilities:
- Manage the full lifecycle of advertising campaigns: planning, launching, optimizing, and scaling;
- Analyze user acquisition funnels — from click to paying user;
- Continuously research the market and competitors to identify best practices.
 

What will help you succeed in this role:
- 3+ years of experience running Google, Meta, or ASA campaigns for Health & Wellness or Utilities apps with a subscription model;
- Experience launching apps from scratch and bringing them to profitability;
- Strong understanding of performance marketing metrics: CPI, ROAS, LTV, CR, CPT, etc.;
- Confident use of tools such as Applovin, Mintegral, Meta Ads, Google Ads, TikTok Ads, Unity Ads, AdJoe, and others;
- Strong self-management skills and readiness to take ownership of results.
 

What we offer:
- Experience working in a product team focused on scaling and growth;
- The opportunity to boost your professional skills in a team of like-minded specialists;
- Open and creative culture with transparent processes;
- Access to all the tools and services needed for effective work;
- Fully remote work format.
 

Our hiring process:

- HR interview
- Technical interview

Summary

• Senior Security Engineer - penetration testing, threat modelling, 7+ years commercial experience.
• Python. Hands-on offensive and defensive security for web applications.
• Remote/Hybrid, UK, Chechia, Spain - employment contract, Poland, Romania, Slovakia, Bulgaria, Ukraine - B2B contract.

The role

This is a senior security engineering position with a strong emphasis on penetration testing and threat modeling. You'll work across the full security lifecycle: designing secure architectures, modeling threats, researching emerging attack vectors, and validating defenses through hands-on testing.

The focus is on long-term security improvements — identifying and addressing risks before they become incidents. You'll need both the attacker's mindset to find vulnerabilities and the engineering skills to help fix them properly.

What you'll work on

• Penetration testing and security assessments against web applications and internal systems
• Leading security design reviews and threat modeling for new products and infrastructure changes
• Researching emerging threats and attack techniques, then translating findings into practical defense strategies
• Building security automations and tools, and prototypes to support testing and detection
• Collaborating with engineering teams to remediate vulnerabilities and improve secure development practices
• Contributing to security architecture decisions and standards

What we're looking for

• 7+ years in security engineering with substantial experience in both offensive and defensive work
• Proven, hands-on web applications penetration testing experience
• Strong programming skills, preferably Python, with experience building security tools or automation
• Deep expertise in at least one core security domain: cryptography, authentication/authorisation, secure architecture, or network security
• Clear understanding of attack vectors and methods, and how to anticipate them
• Good communication skills in English

Useful additions

• Experience securing serverless architectures or AI/ML platforms
• Background in cloud-native security (AWS, GCP, Kubernetes)
• DevSecOps experience- integrating security into CI/CD pipelines
• Relevant certifications (OSCP, OSCE, CISSP, or similar)