Jobs

We are looking for a Senior C++ Developer to join a team building a high-performance electronic trading platform used by professional traders in the U.S. equities market. You will work on latency-sensitive systems that process large volumes of real-time market data, support automated trading strategies, and power critical trading operations. This is an opportunity to solve complex engineering challenges in a performance-driven environment where reliability and speed are essential.

Responsibilities

• Design, develop, and maintain core components of a high-performance C++ trading platform.
• Build and optimize low-latency backend services processing high-volume real-time market data.
• Develop and improve order management, execution, and risk routing systems.
• Work with systems aggregating and distributing multiple real-time data streams.
• Profile and optimize system performance (latency, throughput, memory usage).
• Investigate and resolve production issues in a mission-critical environment.
• Ensure system stability, reliability, and high availability under heavy load.
• Collaborate with engineers and stakeholders on architecture, design, and delivery.
• Participate in code reviews and contribute to engineering best practices.
• Support platform scalability and long-term evolution initiatives.

Requirements

• 5+ years of professional C++ development experience.
• Strong expertise in modern C++ (C++17/20) and system-level programming.
• Proven experience building high-performance, multithreaded applications.
• Hands-on experience with high-volume data processing systems.
• Experience with low-latency and/or high-frequency systems (HFT, trading, telecom, gaming, ad-tech, or similar domains).
• Strong understanding of Linux environments and backend systems.
• Solid knowledge of data structures, algorithms, memory management, and performance optimization.
• Experience with distributed systems and network programming (TCP/IP fundamentals required).
• Strong debugging, profiling, and performance tuning skills.

Nice to Have

• Experience in electronic trading, capital markets, or real-time market data systems.
• Knowledge of OMS/EMS, risk systems, or trading infrastructure.
• Experience with multicast networking or high-throughput data feeds.
• Exposure to C# and/or Python.
• Understanding of U.S. equities trading workflows.
• Experience with colocated, low-latency environments.

What We Offer

• Work on a high-performance U.S. equities trading platform.
• Complex low-latency and high-volume data engineering challenges.
• Strong engineering ownership and long-term product impact.
• Experienced team focused on performance, reliability, and scale.

About the role: 

We are looking for an experienced .NET Engineer to join our team and work on a healthcare research portal, following best Agile practices (two-week sprints, code review, daily standups).

You'll design, build, and own backend services on a modern .NET 10 stack running in Azure, working across the full lifecycle — from architecture and design through implementation, deployment, and production support. This is a hands-on role: you'll spend most of your time writing and reviewing code, but you'll also shape technical decisions, drive best practices, mentor other engineers, and partner closely with product, architecture, and other engineering teams.

About the Project

The project we are working on is a web-based application with over 25,000 current users, developed for the entire research community to review, monitor, and manage research portfolios. The main goal of the project is to unite distributed and complex organizational processes into one application and help alleviate administrative burdens.

A key focus of this role is modernizing this complex enterprise system — updating its architecture, platform, and data foundations to make it AI-ready and enable future AI-driven capabilities.

Requirements:

• 5+ years of professional software engineering experience, with strong proficiency in C# and the .NET platform (.NET Core / .NET 5+; .NET 10 a plus).
• Deep experience building backend services with ASP.NET Core.
• Strong SQL Server skills: schema design, complex queries, and query performance tuning. Experience with Azure SQL Managed Instance is a strong plus.
• Hands-on experience deploying and operating applications on Microsoft Azure.
• Solid grasp of asynchronous programming (async/await), dependency injection, and the ASP.NET Core request pipeline.
• Experience with Entity Framework Core, including migrations and performance tuning.
• English — Upper Intermediate or above
  
   

Will be a plus:

• Frontend or full-stack experience with React (a strong plus); experience with Blazor or Angular is also welcome.
• Observability: structured logging, distributed tracing, and metrics.

Responsibilities:

 

• Design, architect, and implement high-performance, scalable, and secure enterprise applications using the modern .NET ecosystem (e.g., .NET 8/10, ASP.NET Core).
• Architect and optimize database schemas, write complex queries, and manage data persistence using SQL Server, alongside ORMs like Entity Framework Core
• Establish development patterns and standards that enable AI empowered development across the platform.
• Lead and participate in rigorous peer code reviews to ensure adherence to coding standards, security protocols, and best practices
• Coach, mentor, and guide junior and mid-level developers, fostering a culture of continuous learning and technical growth within the team.
• Collaborate closely with Product Owners, Business Analysts, Scrum Masters, and UI/UX designers to translate complex business requirements into clear technical specifications
• Serve as an escalation point for complex production issues; perform root-cause analysis and implement long-term stability fixes.
• Set up and monitor system health, logging, and observability metrics using tools like Application Insights, ELK stack, Datadog, or Prometheus.

We are looking for an experienced Revit BIM Automation Consultant to help us improve and automate our Revit workflows.

What you'll do 
Review our current Revit setup, templates, and standards.

• Develop Revit automation using Dynamo scripts and custom plugins.
• Improve BIM workflows and reduce manual design work.
• Support and advise the design team on Revit-related topics.
• Train and mentor internal engineers.
• Document standards, solutions, and best practices.
   

Requirements
 

Must-have

• Expert knowledge of Autodesk Revit.
• Experience with Revit API, custom plugin development, and Dynamo.
• Proven experience implementing Revit automation in large organizations.
• Strong understanding of BIM workflows and standards.
• Excellent English communication skills.
• Ability to train and support internal teams.

Nice-to-have

• Experience with Naviate or similar Revit add-ins.
• Knowledge of Navisworks and Autodesk Construction Cloud.
• Experience in retail/store design projects.
• Degree in Architecture, Civil Engineering, or a related field.

Contract Details

• Duration: 6 months
• Start: ASAP
• English-speaking environment
• Remote

We are an established iGaming company with 4+ years of experience and a team of 1600+ specialists, managing 10+ large-scale projects across Tier 1–3 markets.

As part of our strategic growth, we are partnering with a professional SEO company operating in highly competitive iGaming and casino niches. Their team builds and scales SEO strategies where results and a systematic approach truly matter.

We are supporting them in the search for a strong Team Lead of SEO who will scale the direction, build high-performing teams, and drive sustainable project growth.

Key Responsibilities

• Develop and implement SEO strategies for project portfolios and international brands
• Build and manage teams of SEO specialists and experts of various profiles
• Optimize processes to enable scaling of the SEO direction and increase overall efficiency
• Work with highly competitive geographies, continuously improving approaches and adapting to search engine algorithm changes
• Collaborate with all key departments of the company to ensure effective traffic monetization
   

Required Skills

• Hands-on SEO experience — from deep understanding of algorithms to technical aspects (redirects, canonicals, server responses, indexing)
• Experience in team or department management — ability to scale processes and effectively lead people
• Experience working with large website portfolios and multi-brand structures — ability to manage multiple projects and a complex SEO ecosystem
• Background in competitive niches, especially iGaming / casino / affiliate, where performance and results are critical
• Strong analytical and strategic mindset combined with a realistic assessment of team resources and capabilities
   

What We Offer

• A key role in developing the SEO direction of an international holding
• Autonomy in strategic decision-making and the opportunity to implement your own ideas
• Long-term cooperation with a stable company
• Support from owners and a senior team with deep SEO expertise
• Flexible cooperation format (in-house / contract), modern tools, and resources to execute ambitious plans
  
  📩 Ready to build a high-impact affiliate program from the ground up? Send us your CV — let’s talk!

Senior Angular (v18+) and TypeScript Developer needed. Join the team for a UK-based healthcare company that enables remote patient monitoring, clinical research, and personalized healthcare.

What You’ll Do:

• Design and develop front-end features using Angular and TypeScript
• Contribute to front-end architecture decisions, ensuring scalability, performance, maintainability, and long-term code quality
• Work closely with UX/UI designers, product owners, backend engineers, and other stakeholders to shape product solutions
• Review code, provide technical guidance, and support other engineers in improving solution quality
• Identify technical risks, propose improvements, and help reduce technical debt
• Contribute to frontend standards, reusable components, and engineering documentation

What We’re Looking For:

• 5+ years of experience in frontend development, with strong hands-on expertise in Angular and TypeScript
• Deep knowledge of Angular v18+ and modern Angular patterns
• Strong experience with RxJS and reactive programming patterns
• Solid understanding of scalable frontend architecture, modularization, reusable components, and maintainable code structure
• Experience with Angular Material, SCSS/CSS3, responsive design, and cross-browser compatibility
• Strong knowledge of RESTful APIs, HTTP, authentication flows, and web application security principles
• Experience with unit and integration testing using tools such as Karma, Jasmine, Jest, or similar frameworks
• Strong Git experience and confidence working in collaborative development workflows
• Ability to mentor other developers, provide thoughtful code reviews, and raise engineering quality across the team

Nice to Have:
• Experience with performance optimization tools and techniques such as Lighthouse, lazy loading, bundle optimization, and runtime performance profiling
• Familiarity with CI/CD pipelines and deployment automation
• Exposure to backend development or full-stack experience
• Knowledge of accessibility standards (WCAG) and testing frameworks like karma

• Experience working with design systems or shared component libraries

Format: Part-time (with option to increase to full-time) · Fully remote · Long-term (until 2027/2028, with option for extension) Location: EU · No citizenship restrictions Workload: 2–3 days per week (~120 person-days/year) · optionally up to 4–5 days per week (~240 person-days/year) Start: ASAP

About the Role

Testing activities across the NFHM and GLAS systems, covering test design, manual and automated execution, and test data management. The role operates in an agile environment using Jira xRay and Tricentis Tosca.

Responsibilities

• Creation and maintenance of test data using JSON and CSV
• Development and maintenance of scripts (PowerShell, Batch)
• Derivation of test cases based on user stories and requirements
• Structured test design using standard methods (equivalence class partitioning, boundary value analysis)
• Execution of manual test cases and structured documentation of results
• Use of Jira xRay as the test management tool
• Development and maintenance of automated test cases using Tricentis Tosca
• Integration of automated tests into existing processes

Requirements

• Several years of hands-on experience in test execution and documentation
• Experience with test automation (Tricentis Tosca)
• Experience in bug analysis and reporting
• Knowledge of Jira and xRay
• Scripting skills: PowerShell, Batch
• Basic understanding of API / interface testing
• Experience working in agile environments: Scrum, Kanban
• ISTQB Foundation Level or equivalent — a plus
• Solid understanding of retail processes, especially In & Out promotion planning
• English B2 · German B2 — nice to have

Format: Full-time · Fully remote · Long-term (until 2027/2028, with option for extension) Location: EU · No citizenship restrictions Workload: 4–5 days per week · ~120 person-days per year Start: ASAP

About the Role

Cross-system strategic consulting as part of a large-scale IT transformation initiative. The role covers replacing fragmented legacy solutions, migrating intermediate systems (Excel, GLAS, P360) into target platforms, and ensuring a consistent end-to-end system architecture.

Responsibilities

• Strategic consulting across systems, including stakeholder coordination
• Replacement of fragmented legacy solutions and transition into target systems
• Migration of intermediate solutions into target platforms
• Management of system implementation, integration, and migration activities
• Identification and evaluation of technical risks
• Analysis of business requirements and translation into technical solutions
• Cross-system issue analysis and solution design

Requirements

• Extensive experience in IT transformation and system integration
• Ability to design target architectures and transformation strategies
• Experience migrating legacy systems; knowledge of middleware, interfaces, and APIs
• Experience in heterogeneous system environments
• Requirements engineering: gathering, analyzing, and translating business needs into technical solutions
• Stakeholder management between business and IT
• Experience managing implementation and migration projects (classical and agile methodologies)
• Risk management, governance, and quality assurance
• Understanding of modern architectures: cloud, microservices, middleware
• Experience with SAP, P360, or integration platforms — a plus
• Solid understanding of retail processes, especially In & Out promotion planning
• English B2 · German B2 — nice to have

Format: Part-time · Fully remote · Long-term (until 2027/2028, with option for extension) Location: EU · No citizenship restrictions Workload: 2–3 days per week · ~96 person-days per year Start: ASAP

About the Role

Configuration, automation, operation, and continuous optimization of the GLAS system built on Jira. The role involves Atlassian architecture design, rollout support, and managing complex integrations across the Atlassian ecosystem.

Responsibilities

• Expansion, operation, and maintenance of Jira automation
• Scripting using ScriptRunner
• System maintenance and user support
• Creation and management of dashboards, reports, and filters
• Configuration of projects, workflows, permission schemes, and screen setups
• Participation in Atlassian architecture design
• Configuration and solution design in Jira and Confluence
• Support of rollout activities and documentation of configurations and processes

Requirements

• Strong experience in Jira Administration, with focus on Data Center (Cloud — a plus)
• Experience with plugins: ScriptRunner, SecureFields, IssueMatrix, Rich Filters, Better Excel Exporter, Apwide File Field, Xray
• Integration with Confluence and other Atlassian tools
• Experience with REST APIs and system integrations
• Development of metrics and KPIs for process and project steering
• Agile methodologies: Scrum, Kanban
• Solid understanding of retail processes, especially In & Out promotion planning
• English B2 · German B2 — nice to have

Format: Full-time · Fully remote · Long-term (until 2027/2028, with option for extension) Location: EU · No citizenship restrictions Workload: 4–5 days per week · ~320 person-days per year Start: ASAP

About the Role

Continuous maintenance, operation, and further development of a historically evolved web-based tool used for international promotion planning. The system operates in a retail environment and is built around an Atlassian-based infrastructure.

Responsibilities

• Ongoing maintenance, operation, and further development of the application and related middleware
• Analysis and understanding of the existing codebase and system architecture
• Development of new functionalities, including import/export features
• Design and implementation of solution approaches within the existing system
• Identification, analysis, and resolution of complex technical issues

Requirements

• Backend: ASP.NET Core MVC
• Frontend: JavaScript, jQuery, AJAX, API integrations
• REST API development
• PostgreSQL, SQL optimization
• IIS hosting and deployment, Windows Server administration
• Experience maintaining and enhancing legacy systems
• Integration within Atlassian-based environments (Jira/Confluence)
• Agile methodologies: Scrum, Kanban
• Solid understanding of retail processes, especially In & Out promotion planning
• English B2 · German B2 — nice to have

We are looking for an experienced Windows System Engineer with a strong background in embedded and industrial computing.

Format: Fully remote, full-time, long-term engagement Location: EU / CIS / Ukraine / Balkans Citizenship: No restrictions

About the Role

You will configure, harden, and customize Windows for a dedicated kiosk-mode industrial product — from initial setup through ongoing production support. The role involves preparing a locked-down Windows environment running a Unity-based application, managing custom DLLs, and orchestrating Python-based services on an industrial-grade single-board computer.

Key Responsibilities

• Own the full OS-level configuration pipeline from a clean Windows image to a production-ready, field-deployable system
• Configure Windows in kiosk / Shell Launcher mode so that the Unity application starts automatically as the sole interactive shell, with no access to desktop, taskbar, or system UI
• Manage registration, versioning, and dependency chain of custom DLLs, ensuring correct loading order and compatibility across updates
• Set up Python-based background services as proper Windows services (NSSM / pywin32): auto-start, watchdog recovery, logging, IPC with the Unity app
• Tune the system for the target industrial board: GPIO, serial peripherals, BIOS/UEFI settings, thermal management
• Provide ongoing support after initial deployment

Required Skills & Experience

Windows IoT & Lockdown Windows 10/11 IoT Enterprise, Shell Launcher v2, Assigned Access, Unified Write Filter (UWF), Group Policy–based lockdown

System Internals Registry, services architecture, WMI, COM/DCOM, DLL side-by-side loading

Scripting & Services PowerShell (essential), Python service deployment on Windows — pywin32, virtualenv packaging, dependency isolation

Unity & Display Unity runtime requirements on Windows: DirectX dependencies, resolution/display management, crash recovery

Industrial Hardware Bringing up and validating Windows images on industrial SBCs / embedded x86 boards (Advantech, Kontron, Beckhoff or similar)

Image Deployment DISM, WinPE, unattend.xml for reproducible automated provisioning

Nice to Have

Windows Autopilot / MDM-based fleet provisioning · CI/CD for OS image builds · Real-time / deterministic scheduling on Windows · Secure Boot, BitLocker, TPM on industrial hardware

What You Will Deliver

A fully documented, reproducible Windows image that boots directly into the Unity kiosk application — DLLs registered, Python services running and monitored, system hardened against unintended user interaction or OS updates — ready for volume deployment on the target industrial board.

Important: This role requires proven, hands-on experience. Candidates cannot prepare for the interview in advance — practical expertise must come from real projects. Please apply only if you have direct experience with the technologies listed above.

About The Position

MWDN is an international recruitment and outstaffing company with 23+ years of experience connecting exceptional tech talent with leading companies across Israel, the USA, Great Britain, and Western Europe. In this role, MWDN acts as the recruitment partner, and the selected candidate will work directly with the client’s team on their product in an international environment.
 

Why does MWDN rock?

Here’s what you can expect when you join MWDN:

• Security: We carefully vet our clients to minimize risks and ensure reliability and timely payments—no fraud or unpleasant surprises.
• Career support: If a project isn’t the right fit, we support you and actively help find new opportunities that match your skills and career goals.
• Legal assistance: We provide guidance on legal matters, including opening and managing your independent contractor or sole proprietorship status, taxes, and related processes.
• Professional development: We offer English courses and professional growth opportunities, as well as team-building events.

Why choose us? MWDN is ranked among the top 5 IT employers in our region according to DOU. We take pride in our transparency and strong commitment to our team. Curious to learn more? See what our employees say about working with us on DOU.
 

What is your new project?

• Domain: Identity and Access Management (IAM) software
• Location: Israel
• Company size: 200-500 employees
• Founded in: 2014
   

What is your new project?

Are you ready to join a game-changing force in identity and access management?

Our client is revolutionizing the way enterprises protect user identities in a passwordless world. You’ll be working at the intersection of cutting-edge biometrics, behavioral analytics, and next-gen identity orchestration — helping the world’s leading brands safeguard millions of users. Backed by more than 100 M Series A — one of the largest in cybersecurity history — and trusted by major global enterprises, they offer the agility of an innovator with the strength and backing of an industry leader.

Ready to take part in redefining IAM for the modern era? Let’s talk.
 

What makes you a great fit

• 3+ years of hands-on experience in security research, mobile security, browser research, fraud research, detection research, reverse engineering, or a related technical role.
• Experience with web browsers, mobile browsers, WebViews, browser APIs, JavaScript runtime behavior, browser automation, fingerprinting, client-side web security, and low-level browser technologies.
• Familiarity with the architecture or codebase of modern open-source browsers and rendering engines, such as Chromium, WebKit, Blink, or Gecko, with the ability to reason about how browser internals can expose new security and fraud signals.
• Experience with native Android and/or iOS applications, mobile OS behavior, app instrumentation, emulators, device spoofing, mobile automation, mobile security, and low-level platform APIs.
• Attacker mindset and practical understanding of how malicious actors attempt to bypass detection using automation, AI agents, spoofing, and anti-detection techniques.
• Ability to identify subtle technical signals and turn them into practical detection or data collection opportunities.
• Experience designing technical experiments and validating research hypotheses.
• Experience with one or more SDK development languages and environments, such as TypeScript/JavaScript for web, Kotlin/Java for Android, or Swift/Objective-C for iOS, with the ability to understand implementation constraints and collaborate effectively with SDK engineering teams.
• Scripting ability, preferably in Python, for building research tools, automation, and analysis workflows.
• Ability to work independently on ambiguous problems and communicate findings clearly to engineering, product, and research stakeholders.
   

Advantages

• Experience with Web SDKs, Mobile SDKs, client-side telemetry, device intelligence, behavioral signals, AI agent detection, or fraud detection products.
• Experience researching bots, credential stuffing, scraping, headless browsers, AI-assisted automation, app cloning, SDK abuse, phishing kits, malware, or
• anti-detection frameworks.
• Experience with reverse engineering Android or iOS applications.
• Familiarity with detection quality measurement, feature evaluation, false-positive analysis, production monitoring, or machine learning concepts.
• Bachelor’s degree in Computer Science, Cybersecurity, Data Science, or a related field— or equivalent hands-on experience.
  
   

Your day-to-day in this position

• Research browser, WebView, Android, and iOS environments from an attacker’s perspective.
• Identify new security signals, behavioral indicators, and technical patterns that can improve fraud, abuse, automation, and AI agent detection.
• Investigate attacker techniques involving bots, browser automation, AI agents, emulators, device spoofing, hooking, instrumentation, remote access tools, and
• anti-detection methods.
• Design and run experiments to compare legitimate, automated, AI-assisted, and manipulated environments.
• Evaluate proposed signals for reliability, stability, spoofability, privacy sensitivity, performance impact, and production feasibility.
• Translate research findings into clear SDK feature requirements for web and mobile data collection.
• Build internal tools, scripts, and lab environments to support signal research and validation.
• Collaborate with SDK, engineering, product, and detection teams to move research from hypothesis to production.
  
   

Our next steps

✅ Intro call with a Recruiter — ✅ Intro call with client — ✅ Technical interview — ✅ CTO interview — ✅ HR interview — ✅ Reference check — ✅ Offer

Film Director & Showrunner (AI-Tech Approach)

We are looking for a visionary Film Director & Showrunner to lead the creation of high-end short-drama series. This role is for a cinematic powerhouse who understands deep storytelling, blocking, and dramatic structure, but is also ready to embrace Generative AI as their primary production engine.

You don’t need to be a software engineer, but you must be digitally native and tech-curious. We need a storyteller who can translate a traditional director’s "eye" into the world of AI-assisted filmmaking, turning scripts into seamless, prestige-quality visuals.

The Role

As the lead creative, you will act as a "one-person studio." You’ll take a project from concept to final master, using AI tools to build worlds, maintain character consistency, and direct virtual "performances." You are the bridge between classic film theory and the future of automated production.

Responsibilities

* Showrunning & Vision: Lead the narrative strategy and maintain a cohesive "look and feel" across a complete short drama series.

* Directorial Leadership: Apply your mastery of lighting, composition, and performance to AI outputs, ensuring they mirror the quality of high-end television.

* Creative Asset Management: Use AI-assisted tools to build storyboards, shot lists, and backplates that align with your directorial vision.

* Technical Execution: Personally responsible for the final "director’s cut." While you’ll have support, you should be comfortable getting hands-on with generation, assembly, and refinement.

* VFX & Polish: Oversee (and perform) the cleanup of AI artifacts to ensure visual consistency and a seamless cinematic experience.

* Ethical Oversight: Ensure all content meets brand guidelines and respects intellectual property standards.

Requirements

* Professional Directing Background: Proven experience as a Film Director or Showrunner with a portfolio that demonstrates a deep grasp of "the language of film."

* Cinematic Mastery: An expert understanding of film theory, pacing, and how to evoke human emotion through a lens.

* Tech-Savvy Mindset: You should have a basic, functional understanding of AI tools (like Midjourney, Runway, or Luma) and a massive appetite to learn more. You aren't afraid of new interfaces or evolving workflows.

* NLE Proficiency: Expert-level skills in industry-standard software like Adobe Premiere Pro, DaVinci Resolve, or Avid.

* Post-Production Knowledge: High-level proficiency in After Effects or similar tools for masking, compositing, and "fixing it in post."

* Adaptability: The ability to find creative workarounds for the current limitations of AI technology.

Bonus Skills

* Experience with AI audio/music tools (e.g., ElevenLabs, Udio, Suno).

* A "hacker" mentality—someone who loves testing new tools the day they drop.

About the company

Our client is a leading autonomous vehicle technology company operating at the cutting edge of self-driving software development. 

Role overview

We are not looking for a traditional SOC analyst. This role is about building detection systems, not clicking through alerts. You will work with large volumes of logs (cloud, application, network), design detection logic, and improve it over time. That includes both rule-based detection (SIEM/XDR) and data-driven approaches (statistical models, anomaly detection, simple ML where it makes sense). You should be comfortable treating logs as a data problem, not just a monitoring stream.

Important! This is not a role where you:

• sit in SIEM all day clicking alerts
• blindly add rules
• overcomplicate things with ML

This is a role where you: build detection systems that work in practice.

What you'll be doing

Detection & analytics

• Build and maintain detections across:
• application logs (auth, APIs, business logic abuse)
• cloud activity (CloudTrail, IAM, infrastructure changes)
• network telemetry (DNS, proxy, firewall, NetFlow)
• Work directly with data in platforms like Elasticsearch / Splunk / similar
• Write and tune detection logic (queries, correlation rules)
• Reduce noise — expect to spend time fixing false positives, not just adding new rules.

Working with data (this is a big part of the job)

• Build pipelines for:
• log ingestion
• normalization
• feature extraction
• Work with streaming or batch pipelines (Kafka / queues / scheduled jobs)
• Turn raw logs (e.g. CloudTrail) into structured data usable for detection.

Anomaly detection / ML (practical, not theoretical)

• Apply simple models where they add value (e.g. One-Class SVM or similar approaches)
• Focus on:
• behavior baselining
• anomaly scoring
• Tune models based on real output (false positives matter more than theory) 
• If ML does not improve signal — don't use it.

Automation & response

• Build response playbooks for common cases
• Automate where it actually saves time (not for the sake of it)
• Integrate with SOAR or write lightweight orchestration
• Improve:
• detection speed
• response consistency.

AI usage (realistic expectations)

• Use LLMs for:
• alert enrichment
• investigation summaries
• internal tooling
• Not building an "AI security platform"
• Focus on practical gains, not hype.

Threat hunting

• Run targeted hunts based on hypotheses
• Use internal data + external signals
• Identify gaps in logging and detection.

Requirements

• Solid experience with SIEM (Elastic, Splunk, Sentinel, etc.)
• Strong understanding of:
• cloud activity (especially AWS logs and IAM)
• network basics
• modern application behavior (APIs, auth flows)
• Comfortable working with large datasets (not afraid of raw logs)
• Python or similar for data processing
• Experience with automation (SOAR or custom scripts).

Nice-to-have (but not critical)

• Experience applying ML to logs (even simple models is enough)
• Familiarity with LLMs in tooling (not research)
• Experience with data pipelines (Kafka, Spark, etc.)
• MITRE ATT&CK mapping

What will make you effective here

• You don't trust alerts blindly
• You care about signal quality, not number of detections
• You can debug why a detection is noisy or useless
• You understand systems, not just tools
• You prefer building something once instead of repeating manual work.

How success looks like

• Fewer false positives
• Better visibility across systems
• Faster investigations
• Less manual work in SOC
• Detections that actually catch real issues

We are looking for a practical security engineer who can improve detection quality, investigate real incidents, and help reduce manual SOC work.

This role is not about building an “AI security platform”. The focus is on better visibility, cleaner detections, faster investigations, and useful automation.

What You Will Work On

Threat Hunting

Run targeted hunts based on clear hypotheses, including:

• Suspicious cloud activity
• Abnormal IAM or API usage
• Unusual network or application behavior
• Weak or missing detection coverage
• Gaps in logging and telemetry

You will use internal data and external threat intelligence to validate risks and improve detection logic.

Security Incident Investigation

Investigate security alerts and incidents end-to-end:

• Understand what happened
• Validate whether the alert is real or noisy
• Identify affected users, systems, and data
• Collect evidence from logs and infrastructure
• Document findings clearly
• Recommend fixes or detection improvements

Expected experience: 2+ years of hands-on security incident investigation.

Detection Engineering

Improve existing detections and create new ones where needed:

• Reduce false positives
• Improve signal quality
• Tune alerts based on real data
• Validate whether detections catch meaningful activity
• Map useful detections to MITRE ATT&CK where appropriate

Automation and Internal Tooling

Build small but useful tools to reduce repetitive work:

• Scripts for log analysis
• Alert enrichment
• Investigation helpers
• Data normalization
• Tool integrations
• Basic SOAR-style automation

Practical AI / LLM Usage

Use LLMs only where they bring practical value:

• Alert enrichment
• Investigation summaries
• Internal tooling
• Analyst productivity

No hype. No AI-first positioning. AI is just one tool in the workflow.

Requirements

• Solid experience with SIEM tools, such as:   - Elastic   - Splunk   - Microsoft Sentinel   - Similar platforms
• 2+ years investigating real security incidents
• Strong understanding of:   - AWS logs and IAM activity   - Cloud security basics   - Network fundamentals   - APIs, authentication flows, and modern application behavior
• Comfortable working with:   - Large datasets   - Raw logs   - Noisy alerts   - Incomplete telemetry
• Python or similar language for data processing
• Experience with automation:   - SOAR   - Scripts   - Internal tools   - Custom workflows
• Basic DevOps knowledge:   - AWS   - Linux   - Docker   - Kubernetes basics   - CI/CD basics   - Cloud infrastructure concepts   - Logs, metrics, and monitoring

Nice to Have

• Experience applying simple ML or statistical methods to logs
• Familiarity with LLMs in internal tooling
• Experience with data pipelines:   - Kafka   - Spark   - Similar systems
• MITRE ATT&CK mapping
• Detection-as-code experience
• Understanding of infrastructure monitoring:   - Prometheus   - Grafana   - OpenTelemetry

What Will Make You Effective Here

You will be effective in this role if:

• You do not trust alerts blindly
• You care about signal quality, not the number of detections
• You can explain why a detection is noisy or useless
• You understand systems, not just security tools
• You are comfortable reading raw logs
• You prefer building automation once instead of repeating manual work
• You can work with engineers and explain security findings in practical terms

Project description

We are looking for a Senior AWS DevOps / Cloud Infrastructure Engineer to support AWS infrastructure automation, customer environment deployment, and GitOps-based delivery.

Responsibilities

Design and implement reusable Terraform modules for AWS infrastructure.

Deploy and configure AWS services: VPC, IAM, EKS, RDS, Secrets Manager, FSx, Redis/ElastiCache, Kafka/MSK, EMR, AppStream.

Configure CI/CD pipelines using GitLab CI/CD or Azure DevOps.

Support GitOps deployment with FluxCD or Argo CD.

Deploy Kubernetes platform components such as external-secrets, controllers, Istio, monitoring, and runners.

Adapt deployment to customer AWS environments with existing VPCs, restricted IAM, network limits, or custom artifact repositories.

Troubleshoot infrastructure, networking, access, and deployment issues.

Prepare technical documentation, deployment instructions, and runbooks.

Skills

Must have

Strong hands-on experience with AWS.

Strong experience with Terraform and infrastructure-as-code.

Good knowledge of AWS networking: VPC, subnets, routing, security groups, NAT, private endpoints.

Experience with IAM roles and policies.

Experience with EKS and Kubernetes infrastructure.

Experience with GitLab CI/CD or Azure DevOps Pipelines.

Experience with AWS services such as RDS, Secrets Manager, S3, FSx, Redis/ElastiCache, Kafka/MSK.

Ability to troubleshoot complex cloud deployments.

Good communication and documentation skills.

Nice to have

FluxCD or Argo CD.

Terragrunt.

AppStream image preparation.

AWX or Ansible.

Istio or service mesh.

k3s.

EMR.

Monitoring stack setup.

Experience with restricted enterprise/customer AWS environments.

Experience importing existing AWS resources into Terraform.

Languages

English: B2 Upper Intermediate