Jobs Security

Про нас:

Odd Systems — українська defense-tech компанія, яка перетворює інженерні інновації на рішення для захисту держави. Наша місія — створювати зброю майбутнього, яка зберігає життя та відновлює справедливість. Наші продукти — тепловізійні камери Курбас та FPV-дрони Стус, Лупиніс, Горська названі на честь українських діячів Розстріляного відродження та шістдесятників. Їхні імена стали символами боротьби за українську ідентичність, а сьогодні захищають нашу країну на полі бою.

Місія ролі:
Побудувати та підтримувати комплексну систему інформаційної безпеки компанії — від захисту інфраструктури й endpoint-пристроїв до безпечної розробки та захисту коду, поєднуючи технічну експертизу, процесний підхід і розвиток культури кібербезпеки в команді.

Основні задачі:

• Постійний моніторинг мережевих подій і логів для виявлення аномалій та потенційних загроз.
• Розробка та впровадження політик і процедур інформаційної безпеки.
• Реагування на інциденти інформаційної безпеки, класифікація інцидентів та координація їх усунення.
• Проведення vulnerability scan для виявлення потенційних загроз та слабких місць в ІТ-інфраструктурі
• Участь у проведенні penetration testing.
• Аналіз даних із систем моніторингу та інших джерел для виявлення ризиків і підозрілої активності.

• Налаштування, впровадження та підтримка засобів захисту мережевої інфраструктури.

   

Досвід та навички, які ми шукаємо:

• 4+ років у ІБ, з них 2+ на позиції з відповідальністю за напрям / побудову процесів
• Практичне впровадження ISMS та підготовка до ISO 27001: розробка політик, оцінка ризиків і ведення risk register, побудова security awareness програми
• Побудова процесу incident response: класифікація, реагування, координація усунення; розробка playbooks і проведення tabletop-навчань
• Практичний досвід із SIEM і Threat Intelligence
• Identity & Access Management: MFA, SSO/SCIM, PAM, least privilege / zero trust (ZTNA)
• Розуміння захисту мережевої інфраструктури: NGFW, IDS/IPS, WAF; сегментація мереж
• Endpoint-захист: EDR, DLP, MDM, AV; примусові compliance-політики; Навички адміністрування Linux та Windows
• Vulnerability management: сканування, пріоритизація, контроль усунення + розуміння типів атак і методів виявлення/запобігання

• Безпека SaaS-середовищ

   

Буде перевагою:

• Досвід у defense / регульованих / ізольованих (on-prem, air-gapped) середовищах; знання КСЗІ / НД ТЗІ
• AppSec / DevSecOps: вбудовування безпеки в SDLC, secrets management
• Досвід побудови та розвитку команди безпеки, формування security-культури
• OPSEC / OSINT: аудит цифрового сліду, протидія деанонімізації

• Адміністрування macOS; хмарна безпека AWS; UEBA, Deception

   

Чому варто обрати нас:

• Можливості зростання, технічного та лідерського
• Офіційне оформлення трудових відносин в Дія.Сіті.
• Можливість бронювання військовозобов’язаних працівників згідно з вимогами чинного законодавства.
• Щорічна оплачувана відпустка — 24 календарні дні.
• Для ветеранів передбачена додаткова оплачувана відпустка — 14 календарних днів.
• Оплачувані лікарняні відповідно до законодавства.
• Добровільне медичне страхування після проходження випробувального терміну.
• Можливість компенсації витрат на навчання згідно з внутрішніми політиками компанії.

Ми шукаємо не виконавців, а однодумців, які поділяють наші цінності та готові будувати майбутнє українського MilTech.

Страхова компанія UNIVERSALNA — компанія всесвітньої фінансової групи Fairfax (Канада, Торонто) запрошує в свою команду Інженера з інформаційної безпеки

Ми розширюємо команду інформаційної безпеки та шукаємо інженерів з кібербезпеки для реалізації нових безпекових проєктів і посилення операційних спроможностей у сфері інформаційної безпеки.

Це роль для технічного спеціаліста, який розуміє інфраструктуру, вміє працювати руками з системами, логами, політиками доступу, безпековими тулами, документацією та доказами для аудиту. Нам потрібні не «теоретики кібербезпеки», а інженери, які можуть розібратися в корпоративному середовищі, налаштувати контроль, перевірити його роботу, виявити відхилення та отримати результат.

Основні задачі

• Адміністрування, перевірка та вдосконалення технічних контролів інформаційної безпеки.
• Участь у впровадженні та супроводі кібербезпекових рішень у корпоративній інфраструктурі.
• Контроль безпечної конфігурації серверів, робочих станцій, мережевих сервісів, хмарних ресурсів і корпоративного ПЗ.
• Робота з Active Directory / Entra ID, групами доступу, RBAC, MFA, SSO, VPN, PAM, NAC та процесами управління доступом.
• Перегляд прав доступу, контроль надмірних привілеїв, аналіз відхилень, підготовка доказів для аудиту.
• Моніторинг логів, подій безпеки, DLP/endpoint/network/security alerts, первинний аналіз інцидентів та ескалація.
• Підтримка політик endpoint security, MDM/UEM, host firewall, шифрування, hardening, browser/email security controls.
• Участь у впровадженні та супроводі контролів захисту даних: класифікація даних, DLP, шифрування, збереження, безпечне знищення, аудит доступу до конфіденційних даних.
• Формування регулярної звітності, доказів відповідності, контрольних чеклістів, технічної документації та результатів перевірок.
• Взаємодія з ІТ, розробниками, власниками систем, підрядниками та бізнес-користувачами для усунення безпекових недоліків.
• Підтримка відповідності внутрішнім політикам, CIS Controls, регуляторним і аудиторським вимогам.

Обов’язкові технічні навички

• Досвід системного адміністрування або технічної роботи в сфері кібербезпеки.
• Розуміння Windows Server, Windows endpoints, , Group Policy, DNS, DHCP, файлових ресурсів, прав доступу.
• Базове розуміння Linux, мереж TCP/IP, VLAN, VPN, правил брандмауера, маршрутизації, портів/протоколів.
• Практичний досвід з Microsoft 365 / Azure / Entra ID або аналогічними корпоративними платформами.
• Розуміння IAM-процесів: joiner/mover/leaver, access review, least privilege, RBAC, MFA, SSO.
• Досвід роботи з логами: Windows Event Logs, security logs, application logs, SIEM або log management-системи.
• Розуміння endpoint security: EDR/AV, MDM/UEM, host firewall, encryption, device compliance.
• Навички аналізу технічних відхилень, troubleshooting, root cause analysis.
• Вміння працювати з Service Desk / Jira.
• Вміння документувати технічні налаштування, результати перевірок, ризики та винятки.
• Базове розуміння принципів інформаційної безпеки: confidentiality, integrity, availability, least privilege, defense in depth, segmentation, secure configuration.

Буде плюсом

• Досвід з Microsoft Purview, DLP, Information Protection, sensitivity labels, retention policies.
• Досвід із Secure Configuration/Hardening для Windows, Linux, мережевого обладнання, хмарних сервісів або корпоративного ПЗ.
• Досвід з Microsoft Intune, Defender for Endpoint, Defender for Cloud, Sentinel, Azure Policy.
• Досвід з PAM, Keycloak.
• Досвід з BitLocker, encryption controls, removable media control, MDM/MAM.
• Досвід з SIEM / Elastic / Splunk, побудовою запитів, дашбордів та регулярної звітності.
• Досвід з backup/recovery security, immutable backups, контрольними перевірками відновлення.
• Розуміння CIS Controls v8 або інших безпекових фреймворків.
• Базові навички автоматизації: PowerShell, Bash, Python, Ansible або аналогічні інструменти.
• Досвід підготовки доказів для аудиту, проходження безпекових оцінок або внутрішніх перевірок.

Очікуваний профіль кандидата

Нам підійде кандидат із бекграундом системного адміністратора, інженера інфраструктури, endpoint/security engineer, IAM engineer, SOC/security analyst з технічною базою або cybersecurity specialist, який не обмежується політиками та звітами, а може працювати безпосередньо з системами.

Важливо, щоб кандидат:

• вмів самостійно розбиратися в технічному середовищі;
• не боявся логів, конфігурацій, доступів, політик і документації;
• розумів різницю між «налаштовано» і «контроль реально працює»;
• міг довести виконання контролю через звіти, evidence, скриншоти, логи та регулярні перевірки;
• мав дисципліну в операційній роботі та уважність до деталей;
• був здатний комунікувати з ІТ, бізнесом, аудиторами та зовнішніми підрядниками.

Технології, з якими доведеться працювати або інтегруватися

Microsoft Entra ID, Active Directory, Microsoft Purview, Microsoft Intune, Microsoft Defender/Symantec/Crowdstrike, Azure, SQL Server, BitLocker, SIEM / Elastic / Splunk, Jira Service Management, PAM/IGA/SSO/MFA-рішення, VPN, Cisco ISE / NAC, MDM/UEM, backup systems, корпоративні файлові сховища, мережеві пристрої, endpoint security tools.

Що буде в роботі

• Інженерна робота, а не лише моніторинг.
• Проєкти з підвищення зрілості кібербезпеки.
• Реальна робота з доступами, конфігураціями, логами, DLP, endpoint security, hardening та audit evidence.
• Вплив на побудову зрілої системи безпекових контролів в компанії.

Долучайтеся до команди UNIVERSALNA!

Company overview:
 

Graphio connects to your existing systems through APIs to analyze events, activities, fields, and metadata. No content across documents or communication is analyzed.

Zero Integration: Works with your existing systems via APIs.

Zero Disruption: No changes to your current team workflows.

Privacy by Design: We analyze only fields, events, activities and metadata and don't analyze sensitive content across files and communication.

Rapid Deployment: Fully operational in under 48 hours.

SOC 2 Type 2, HIPAA compliant, and ISO 27001 (pending).

We’ve built and scaled before: the team behind Graphio.ai previously built upSWOT, a B2B platform adopted by hundreds of financial institutions, which was later acquired by Uptiq.  We’re applying those lessons in execution, delivery, and scale to Graphio.ai.

Supported by senior leaders from Experian, Mastercard, Lattice, BambooHR, Altrata, SAP, JackHenry, FIS, Pfizer, Workday, and more (graphio.ai/investors).

Position Overview:
 

We are looking for a Strong SecOps Engineer to own security operations and compliance for Graphio.ai — our compliance programs (SOC 2 Type 2, HIPAA, ISO 27001), the security architecture of a multi-tenant, AI-driven platform, and the audits, penetration tests, and customer security reviews that keep enterprise customers confident in how we handle their data.

This is a hands-on role for someone who treats security and compliance as an engineering discipline — rigorous and evidence-based — rather than a documentation exercise. You will build and run the processes that keep our security posture accurate, defensible, and consistent across every system, contract, and customer conversation.

You will work closely with Engineering on platform and infrastructure security, with Customer Success and Sales on enterprise security reviews, and with Legal on the security and data-handling terms of our contracts.

You will report directly to the CTO.

Key Responsibilities:
 

• Own and continuously operate our compliance programs (SOC 2 Type 2, HIPAA, ISO 27001): design controls correctly, keep evidence current, and make sure they hold up to independent scrutiny across the full period, not only at the point of testing.
• Design and run our penetration testing and vulnerability management program: define scope, prioritize findings by risk, and track remediation through to closure.
• Own the security architecture of a multi-tenant, AI-driven platform: data isolation between tenants and at the inference/model layer, including third-party infrastructure and GPU providers.
• Harden authentication, authorization, and network-layer defenses across our APIs and integrations, and keep that posture current as the product evolves.
• Keep our security and compliance documentation internally consistent — audits, contracts, architecture records, and public-facing claims should tell the same accurate story and stand up to scrutiny from customers and auditors.
• Lead technical engagement with enterprise customers during security reviews and due-diligence processes, acting as the internal authority on what we can credibly claim about our security posture.
• Manage risk from infrastructure and sub-processor vendors, including reviewing their security posture and attestations before we rely on them.
• Partner with Legal on the security and data-handling terms of customer and vendor contracts (including data processing agreements), so operational practice and written commitments stay aligned.

Preferred Qualifications:

• Substantial experience in security engineering, SecOps, or compliance engineering, including real ownership of at least one SOC 2, HIPAA, or ISO 27001 program from the inside.
• Practical experience running or managing a penetration testing and vulnerability management program, including remediation tracking and reporting.
• Solid understanding of multi-tenant SaaS security models and the tradeoffs between shared and dedicated infrastructure.
• Practical knowledge of cloud infrastructure security (Azure preferred; AWS or GCP acceptable), API security (authentication, authorization, rate limiting, WAF), and secrets and token lifecycle management.
• Familiarity with data processing agreements and similar compliance-related contract language, and comfort partnering with Legal on it.
• Experience handling enterprise customer security questionnaires and vendor due-diligence processes.
• A rigorous, evidence-first approach: comfortable being the internal authority on whether a security or compliance claim is actually accurate.

• Excellent written English: able to produce documentation clear and precise enough to satisfy external auditors and enterprise customers.

  
  Nice to have:

• Experience with AI/LLM inference security — isolating tenant context at the model layer, GPU-provider risk.
• Exposure to AI-specific attestation frameworks (e.g., ISO/IEC 42001) or willingness to build toward one.
• Experience building or scaling a compliance program in a startup environment.
• Experience with compliance automation tooling (e.g., Vanta, Drata, Secureframe, or similar).

What we offer:

• Full ownership of the security and compliance function — you build and run the program, not just execute someone else's checklist.
• Direct access to the CTO and engineering leadership, with a clear mandate to shape how security and compliance work at Graphio.ai.
• A product built for compliance-conscious enterprise customers, so this work has direct, visible business impact.
• Direct collaboration with Product, Machine Learning and AI specialists, and Software Engineers in a low-bureaucracy startup environment.
• Clear success metrics tied to audit outcomes, customer trust, and reduced security risk.
• Competitive compensation and room to grow into a company-wide security leadership role as we scale.

Company Operating Requirements:

At Graphio.ai we run a high-ownership, mission-driven team with clear operating rules. Please read these carefully before applying:

• LinkedIn profile is required (company policy). Employees are required to keep a current LinkedIn profile that shows their Graphio.ai position and is linked to the official Graphio.ai company page (company logo visible on the profile). Profile standards are provided during onboarding.
• Synchronized team vacations. The team takes coordinated time off four times per year to keep planning aligned and reduce context switching. Dates are announced in advance.
• Startup constraints. Vacation timing may be restricted during critical company periods. We plan time off as a team and communicate constraints early.
• Non-standard schedule. The role requires flexibility to collaborate across time zones. This may occasionally include early/late meetings depending on customer and team needs.
• US Eastern Time (ET) collaboration. This role requires regular overlap with US East Coast (ET) working hours. You must be comfortable running meetings, follow-ups, and execution in that time zone.
• Zero slow offboarding. We run lean and fast. When the fit isn’t there, we act quickly: employment may be ended within a day and access is removed immediately.

Final note:
 

Graphio.ai is not a 9-to-5 corporate environment. We move fast, operate with high ownership, and expect proactive execution without micromanagement. Graphio.ai is a strong fit for people who actively seek challenges for personal growth - especially those who want to build their own company one day and see this as a place to learn how high-performing startups execute.

Because we work with US-based stakeholders, you should be comfortable aligning part of your schedule with US Eastern Time (ET).

English: B2

About us:

ARRISE sets the benchmark for service delivery and excellence in the iGaming industry. Playing a key role in the success of its clients, which include Pragmatic Play, a brand relied upon by the world’s biggest online casinos for its cutting-edge products, ARRISE helps to deliver exceptional gaming experiences to millions of players worldwide. 

Our global team of talented and driven professionals are shaping the future of iGaming. Headquartered in Gibraltar, we have offices spanning Canada, India, the Isle of Man, Latvia, Malta, Romania, Serbia, Bulgaria, and the UAE, and more exciting destinations on the horizon. 

At ARRISE, we take pride in creating growth opportunities at all levels, constantly investing in our people while welcoming new colleagues and forging strategic partnerships that open new opportunities for success. 

To achieve this, we bet on ourselves. We know that success is a collective effort, and our team is driven by ambition, collaboration, and a shared commitment to grow and succeed—while embracing every step of the journey. 

Be part of the future of iGaming with ARRISERS! See a job that excites you? Apply now, and our friendly recruitment   team   will   connect   with   you   soon.   Your   journey   starts   here! 

About the Role 

We are seeking an experienced IT Compliance Specialist to lead and manage our compliance programs across ISO 27001 and SOC 2, ensuring our gaming platform and related services meet the highest standards of security, privacy, and regulatory compliance. The role will serve as the primary liaison for both external and internal auditors for ISO 27001 certification and SOC 2 attestation, with a focus on addressing scope changes, corporate structure changes, and responding to client security questionnaires. 

 
Key Responsibilities 

ComplianceManagement 

• Lead and maintain the company’s ISO 27001 Information Security Management System (ISMS) and SOC 2 Trust Services Criteria certification programs. 
• Serve as the primary point of contact for engaging with external and internal auditors, facilitating ISO 27001 certification and SOC 2 attestation processes. 
• Own compliance audits: plan, coordinate with auditors, collect evidence, and provide comprehensive audit responses. 
• Manage risk assessments, control testing, and remediation activities to ensure ongoing compliance. 

Policy & Process Governance 

• Develop, maintain, and enforce IT security and compliance policies, procedures, and standards. 
• Ensure documentation aligns with ISO 27001 Annex A controls, SOC 2 requirements, and addresses evolving compliance needs due to scope or structural changes. 
• Respond to client security questionnaires with accurate and detailed information to demonstrate compliance. 

Control Implementation & Monitoring 

• Oversee access control, change management, incident management, and third-party/vendor risk management within the scope of ISO 27001 and SOC 2. 
• Ensure compliance across environments supporting software development, hosting platforms, and APIs. 
• Monitor the effectiveness of security controls and recommend improvements to mitigate emerging risks. 

Audit & Assurance 

• Act as the central liaison for external auditors, regulators, and certification bodies, ensuring clear communication and issue resolution. 
• Conduct internal compliance audits, gap assessments, and readiness reviews to maintain certification readiness. 
• Track and close compliance findings and audit issues, ensuring timely resolution and documentation. 
• Provide expert guidance on compliance implications of ISO 27001 scope changes and corporate structure changes. 

Training & Awareness 

• Build awareness of compliance requirements across development, operations, and support teams. 
• Deliver targeted training on compliance obligations, including secure software development, data handling, and gaming industry standards. 
• Vendor & Third-Party Risk Management 
• Assess compliance of key vendors, including cloud hosting providers, content partners (e.g., Pragmatic Play), and integration providers. 
• Ensure contractual and SLA alignment with ISO 27001 and SOC 2 requirements. 
• Reporting 
• Provide regular compliance updates, risk posture reports, and responses to client inquiries to senior management and stakeholders. 
• Support management with compliance performance metrics and KPIs. 

Qualifications & Experience 

• Bachelor's degree in Information Security, Computer Science, Risk Management, or a related field. 
• 5+ years’ experience in IT compliance, GRC, risk management, or information security, ideally in gaming, fintech, or other regulated industries. 
• Strong understanding of: 
• ISO 27001:2022 Information Security Management System (ISMS) 
• SOC 2 Trust Services Criteria (Security, Availability, Confidentiality, Processing Integrity, Privacy) 
• Proven track record of leading certification and audit processes, including direct engagement with auditors. 
• Experience responding to client security questionnaires and communicating compliance status effectively. 
• Experience with SaaS/PaaS environments, APIs, and cloud-based hosting services. 
• Knowledge of secure SDLC, DevOps, and CI/CD compliance integration. 
• Professional certifications preferred (e.g., CISA, CISM, ISO 27001 Lead Implementer/Auditor, CCSK, CRISC). 

Key Skills 

• Excellent knowledge of IT compliance, audit, and risk frameworks, with expertise in ISO 27001 and SOC 2. 
• Strong communication and stakeholder management skills, with the ability to represent the company to auditors and clients. 
• Ability to influence cross-functional teams (dev, ops, support) to adopt compliance practices. 
• Analytical thinker with a problem-solving approach to compliance challenges, including scope and structural changes. 
• Detail-oriented with strong documentation, evidence management, and client questionnaire response skills. 

What we offer: 

• We offer a highly competitive salary 
• A detailed company training on highest standards 
• A chance to work in friendly and supportive culture 
• Tremendous growth opportunities in a large fast moving international company. 

We are looking for a SOC Lead (Detection Engineering and Automation) to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a Detection Engineering & Automation Lead to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Reverse Engineer (Android / Windows)

About the Role

We’re looking for a highly skilled Reverse Engineer to analyze, understand, and modify complex software systems across Android and Windows platforms. You will work on low-level system components, proprietary protocols, and real-world production binaries—going far beyond basic static analysis.

This role requires deep technical expertise in native code, system internals, and runtime behavior, with a strong focus on practical reverse engineering and problem-solving.

Responsibilities

• Reverse engineer Android and Windows applications (Java/Kotlin + native C/C++)
• Analyze compiled binaries, obfuscated code, and packed applications
• Perform dynamic instrumentation, tracing, and runtime analysis
• Understand and modify system-level behavior (services, drivers, IPC, networking)
• Reverse proprietary protocols and data formats
• Identify security mechanisms, protections, and bypass techniques
• Develop tooling, scripts, and automation for analysis workflows
• Collaborate with engineering teams to integrate findings into products

Requirements

Core Skills

• Strong experience with reverse engineering tools:
  • IDA Pro / Ghidra / Binary Ninja
  • Frida, LLDB, WinDbg, x64dbg
• Solid understanding of:
  • Assembly (ARM, ARM64, x86/x64)
  • Native code (C/C++)
  • Memory management, calling conventions, binaries

Android

• Deep understanding of Android internals:
  • ART / Dalvik runtime
  • Binder IPC
  • System services & HALs
• Experience reversing APKs and native libraries (.so)
• Familiarity with AOSP structure and system components

Windows

• Understanding of Windows internals:
  • User-mode & kernel-mode architecture
  • Windows APIs, services, drivers
• Experience analyzing PE binaries, DLLs, and system behavior

Nice to Have

• Experience with iOS reversing (Objective-C / Swift, Mach-O)
• Knowledge of anti-debugging / anti-tampering techniques
• Experience with emulators, virtualization, or sandboxing
• Cryptography and protocol analysis experience
• Exploit development or vulnerability research background

What We Expect

• Ability to work with incomplete information and figure things out independently
• Strong debugging mindset and curiosity
• Focus on real-world results, not just theoretical analysis
• Clean and well-documented findings

Why we exist:

Swarmer develops software that makes drones autonomous and allows them to operate together, in large, coordinated teams — no pilots needed. Our technology has been battle-tested in Ukraine— the world’s most intense proving ground for drone warfare. 

In March 2026, we became the first Ukrainian defense startup to go public on NASDAQ, following a $15M Series A — the largest investment in a Ukrainian defense tech company since the start of the war. 

Working at Swarmer means operating at the intersection of engineering rigor and frontline reality. The problems and environments are complex, and the stakes are very real. We built this software to enable democratic nations to defend themselves.  

If you are motivated by building resilient systems that matter and by seeing the direct impact of your work, you’ll find purpose here.

What we’re looking for:

We are looking for an experienced Cybersecurity Engineer(Endpoint & Identity) to join our team. The role is focused on corporate IT infrastructure, not product infrastructure. Your day-to-day work will be related to laptops, software, SaaS, and user accounts security. Therefore, your peers will be the IT team members, collaborating closely with our DevOps engineers on shared areas of responsibility.

This hands-on engineering role requires a strong foundation in MDM, IAM, and networking. You will harden laptops, BYOD, SaaS, LANs, and cloud, and use MDM and IdP solutions to maintain the security standards of our infrastructure. Your work will be guided by established industry frameworks and aligned with security best practices.

What you’ll do:

• Maintain hardening and configuration baselines for endpoints and servers (encryption, security policies, benchmarks).
• Deploy and manage endpoint and server protection across the fleet (EDR/NGAV, antivirus, device management), including security policy enforcement and compliance configuration.
• Administer network security controls (firewalls, VPN, network segmentation, access controls) and monitor traffic for suspicious activity.
• Review infrastructure projects and architecture from a security perspective to ensure secure-by-default configurations.
• Run regular vulnerability scans across endpoints, servers, and cloud, with risk-based prioritization and remediation tracking.
• Enforce identity and access best practices (role-based access, least privilege, MFA, privileged access management) and run periodic access reviews.
• Monitor and analyze security events and logs to detect anomalies and potential threats.
• Detect, investigate, contain, and remediate security incidents, including documenting timelines, root causes, and lessons learned.
• Monitor cloud and SaaS security posture, remediate misconfigurations, and review third-party integrations and access scopes.
• Implement and document technical security controls (runbooks, hardening guides) and support internal and external audits.

What we need:

• 5+ years of hands-on experience in IT infrastructure or cybersecurity engineering with a clear security specialization.
• Hands-on experience administering and hardening Linux, Windows, and macOS systems using MDM solutions
• Experience with endpoint protection and device management platforms (EDR/NGAV, MDM, antivirus).
• Solid understanding of networking fundamentals (TCP/IP, DNS, DHCP, VPN) and practical experience with firewalls and network security controls.
• Hands-on experience with identity and access management / SSO platforms with a security-first approach.
• Experience with vulnerability management tools and SIEM/SOC monitoring and incident-response workflows.
• Understanding of common attack types and detection/prevention methods.
• Practical familiarity with recognized security frameworks and standards.
• Analytical mindset with the ability to assess risk and prioritize pragmatically.
• Clear communicator able to explain technical issues to non-technical colleagues.
• English proficiency (documentation, vendors, and external partners).

Would be an advantage:

• Ability to automate security and infrastructure tasks with scripting (Python, Bash, or PowerShell).
• Working knowledge of cloud security controls.
• Security certifications.
• Experience in enterprise or critical-infrastructure environments.

What you’ll get:

• Direct impact: your work protects systems that operate in real, high-stakes environments.
• Competitive salary, benefits package (insurance, paid sick leaves, 20 paid days off per year).
• Benefits of the defense sector (reservation, etc).
• A straightforward, no-bureaucracy culture. 

How’s the hiring process going:

 Recruiter Screen →  Technical Interview →  Skip-Level Interview →  Security check →  Offer

Interested? Let’s connect and discuss the details!