Jobs Security

We're hiring a Cybersecurity Risk Manager to join a large-scale IT security programme for a major EU agency, delivered through a specialist staffing partner. This is a fully on-site role at the agency's headquarters in Warsaw (100% intra-muros), with no travel foreseen.

The role sits within a highly regulated environment, protecting critical assets and infrastructure, and requires a Personal Security Clearance at CONFIDENTIEL UE/EU CONFIDENTIAL level (screening initiated within the first 45 days of assignment).

Logistics

• Location: Warsaw, Poland - fully on-site, 100% intra-muros, no travel foreseen
• Engagement: framework contract, 12-month initial term with up to 3 annual renewals (up to 48 months total)
• Clearance: Personal Security Clearance required (CONFIDENTIEL UE/EU CONFIDENTIAL), to be initiated within the first 45 days
• Selection process: written test and interview

You'll own the organisation's cybersecurity risk-management lifecycle end to end - from asset inventory and threat/vulnerability assessment through to control design, monitoring, and executive reporting - helping keep risk within acceptable levels across the organisation's assets.

What you'll do

• Develop and maintain the organisation's cybersecurity risk-management strategy
• Manage the asset inventory
• Identify and assess cybersecurity threats and vulnerabilities
• Profile the threat landscape and attacker capability
• Assess risks and propose treatment options (controls, mitigation, avoidance) aligned to strategy
• Monitor control effectiveness and risk levels
• Keep risk within acceptable levels for the organisation's assets
• Develop, maintain, report, and communicate the full risk-management cycle

What you bring

• Strong background in risk assessment, risk-management framework implementation, and stakeholder risk communication
• 9+ years overall IT experience, with 6+ years in a similar risk-management role
• Level 7 education (Master's degree or higher)
• English at C1 level
• At least four of: CISA, CISM, CRISC, CISSP, CGRC, CSSLP, CCSP, CISSP-ISSMP, GSNA, GCCC, GIAC Certified ISO-27000 Specialist, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, ISO 27005 Risk Manager (or internationally recognised equivalents)
• Experience producing Business Impact Assessments; ServiceNow GRC risk-assessment module experience a plus
• Experience with personal data protection documentation, threat modelling (graphical and programmatic tools, including for DevOps), Zero Trust Architecture design, Secure SDLC, and Directory Services defence controls
• Comfortable presenting risk-informed recommendations to executives and stakeholders, and building an organisation-wide risk-aware culture

Headway Inc is a global tech company, revolutionizing lifelong learning by creating digital products for over 150 million users worldwide. Our mission is to help people grow. We’re proud to be ranked 4th among the World’s Top EdTech Сompanies by TIME magazine. We believe lifelong learning should be accessible, personalized, and impactful to each individual. That’s how we change the world and why we bring together exceptional minds.
 

Our team is the core of our achievements. We believe in people and shared values SELECT. That’s why, together with Rostyslav Vasiukov, CTO at Headway Inc, we’re looking for a Security Engineer to own the security function for the company.
 

Why do we need you?
 

Security work already happens across Infrastructure and Engineering, but ownership is fragmented. As Headway Inc scales and our AI transformation accelerates, we need a single person who can see the complete risk picture, make clear trade-offs, and drive the most important issues to resolution.
 

We’re looking for someone who can turn separate security activities into a coherent company-wide function: setting priorities, creating clear accountability, and helping teams make secure decisions without slowing the business down.
 

How will you work?
 

This is our only dedicated security role today. You will report directly to the CTO and have the autonomy to shape how security operates across the company.
 

You will partner with IT Infrastructure, Core Platform, and teams driving AI adoption. Your role is not to execute every security task alone, but to set risk-based priorities, establish clear ownership, align teams, and ensure the most important risks are addressed.
 

You will build on an existing foundation across Google Workspace, GCP, and GitLab SecOps, turning existing tools and practices into a coherent and scalable security system.
 

What will you own?
 

Corporate Security. Your primary focus from day one:

• Own and continuously improve the company’s corporate security posture across identity, access, endpoints, cloud infrastructure, and employee security.
• Identify and prioritize the most important risks, balancing security needs with business impact.
• Strengthen incident detection, response, awareness, and operational readiness.
• Turn existing tools and initiatives into a coherent, repeatable security system.
   

Product Security. As you grow into the role:

• Partner with Core Platform and Engineering to integrate security into how products are designed, built, released, and monitored.
• Establish a clear approach to vulnerability management and security risks in code, dependencies, infrastructure, and critical product changes.
• Introduce practical controls that improve security without creating unnecessary delivery bottlenecks.
   

AI Security. As our AI transformation develops, you will:

• Define practical guardrails for using AI tools and building AI-enabled capabilities safely.
• Address risks related to sensitive data, access, third-party AI providers, and AI-enabled product features.
• Help teams understand what is allowed, what is restricted, and when security involvement is required.
• Enable fast AI adoption while keeping security built in by design.
   

Security ownership and visibility. Across all three areas:

• Maintain a company-wide view of security risks, priorities, owners, and progress.
• Coordinate security incidents and ensure corrective actions are completed.
• Communicate risks and trade-offs clearly to Engineering, Operations, and company leadership.
• Use automation and AI to make security operations more scalable and effective.
   

Who are you?
 

• You think like an owner, not an auditor. An over-permissioned IAM role, a GitLab pipeline with more access than it needs, a laptop that quietly fell out of compliance — you don’t wait for someone else to flag it or for it to show up on a report. You catch what the checklist misses.
• You’re hands-on by default. You read the logs, write the script, and configure the control yourself, without waiting for someone else to grant access or open a ticket.
• You can run a domain start to finish. Whether that’s an identity system, a cloud environment, or a fleet of endpoints — spotting the gap, prioritizing it against everything else competing for attention, closing it, and proving it stayed closed.
• You put AI and automation to real use — triaging alerts, monitoring for anomalies across cloud and endpoint logs, and clearing routine work fast, not just experimenting with it on the side.
• Your judgment is grounded in business impact, not just severity scores — you know an exposed admin credential matters more than a stale test account, and you act accordingly.
• You work as a partner to the business. You’re able to explain a risk to an engineer, the CTO, or a lawyer in language each of them relates to, and focused on finding a safe way forward rather than blocking progress.
• You drop your own assumptions fast. The moment the data tells you a risk isn’t what you thought, you adjust easily — and you’re just as quick to pick up a domain you’ve never owned before.
• You run autonomously across identity, cloud, and code — no ready backlog, no one setting your tasks — you build the plan, chase the priorities, and own the outcome.
   

What do we offer?

• Work within an ambitious team on a socially impactful education product.
• An office with a reliable shelter, generators, satellite internet, and other amenities.
• Access to our corporate knowledge base and professional communities.
• Personal development plan.
• Compensation for English language learning, external training, and courses.
• Medical insurance and full sick leave compensation.
• Company doctor and massage in the office.
• Sports activities: running, yoga, boxing, and more.
• Corporate holidays: we go on a week-long paid holiday to rest and recharge twice a year. Besides that, we provide 20 paid vacation days per year.
• Supporting initiatives that help Ukraine. 
   

Are you interested? Send your CV!

We are looking for an experienced Anti-Fraud Manager to take ownership of fraud prevention and risk management across our crypto gambling platform.

You will be responsible for identifying fraudulent behavior, investigating suspicious activity, developing risk rules, and building effective anti-fraud processes across the entire player journey — from acquisition and registration to deposits, gameplay, and withdrawals.

This is a hands-on role for someone who understands crypto gambling, player behavior, affiliate traffic, payments, and modern fraud schemes and is comfortable building and improving anti-fraud processes from the ground up.

Requirements & Experience

• 3+ years of experience in Anti-Fraud / Risk Management in the gambling industry
• Hands-on experience in crypto gambling
• Strong understanding of casino and/or sportsbook fraud risks
• Experience working with SoftSwiss, BetBy, or similar gambling platforms
• Strong analytical skills and ability to work with large volumes of user and transaction data
• Ability to identify abnormal user behavior and traffic patterns using metrics such as FTD, CR, Retention, LTV, ROI, and player activity
• Experience working with affiliate traffic and tracking systems: SubID, S2S postbacks, pixels, CPA, Hybrid, RevShare
• Strong understanding of fraud schemes, including:
  • Multi-accounting
  • Bonus abuse
  • Affiliate fraud
  • Incentivized traffic
  • Payment fraud
  • VPN / Proxy / device manipulation
  • Collusion and coordinated player activity
  • Withdrawal abuse
  • Game exploits
• Experience creating and optimizing risk rules, stop rules, fraud detection logic, and investigation processes
• Understanding of KYC / AML principles and suspicious transaction patterns

• Ability to make independent decisions based on data and risk assessment

   

Responsibilities

Anti-Fraud & Risk Management

• Build and continuously improve the anti-fraud system and risk management processes
• Create, maintain, and optimize risk rules and stop rules
• Monitor player activity and identify suspicious behavioral patterns
• Investigate multi-accounting, bonus abuse, collusion, payment fraud, and withdrawal abuse
• Analyze gameplay and betting activity to identify abnormal or fraudulent behavior
• Review player activity before withdrawals when additional verification is required
• Detect and investigate game exploits and abnormal gameplay patterns

• Analyze deposits, withdrawals, transactions, and payment behavior for suspicious activity

   

Affiliate & Traffic Fraud

• Monitor affiliate traffic and identify fraudulent acquisition patterns
• Analyze FTD, CR, Retention, LTV, ROI, EPC and other traffic metrics
• Investigate incentivized traffic, fake FTDs, multi-accounting, and other affiliate abuse
• Work with tracking data, including SubIDs, S2S postbacks, and pixel tracking

• Identify abnormal traffic sources and provide recommendations on traffic quality

   

KYC / AML

• Investigate suspicious accounts and transactions
• Review KYC documentation when required
• Analyze source of funds and other risk indicators
• Escalate potentially high-risk cases and coordinate appropriate actions
• Communicate with players when additional verification or clarification is required
•  

Process & Development

• Build investigation workflows and internal anti-fraud procedures
• Analyze existing fraud cases and identify opportunities to prevent similar incidents
• Work closely with Payments, KYC, Support, Affiliate, and Product teams
• Continuously improve fraud detection based on real cases, data, and emerging fraud patterns
• Prepare reports and insights on fraud trends, incidents, and risk metrics

Who We Are 

PAR Retail, with its Open Commerce® product suite and patent pending Wallet Steering® System, empowers Convenience & Fuel Retailers to gain more share of wallet and customer lifetime value than possible with any other solution provider. PAR Retail’s unified Open Commerce product suite consists of: Activate for Intelligent 1:1 Loyalty, Transact for Contactless Commerce, and Experience for Cross-Channel Customer Experiences. PAR Retail’s solutions are supported by a set of subscription-based program management services and are contractually backed by its 1.5X Performance Guarantee. 

Requirements:  
- Operational knowledge of modern operating systems and networking; 

- Experience with common cloud services: AWS, GCP, and Azure; 

- Network Security and expertise in network pentesting; 

- Security testing of web applications, web services, mobile apps (hybrid and native), and IT infrastructure; 

- Understanding security certifications (PCI DSS / SOC2); 

- Ability to apply modern Application Security methodologies and frameworks; 

- Ability to use at least one modern programming language; 

- Practical experience with Burp Suite; 

- Experience with IDS, IPS, SIEM configuration; 

- Upper-intermediate English level. 

Responsibilities:  

- Requirements analysis, performing penetration testing and security audit; 

- BE, WEB, cloud and mobile clients testing; 

- Vulnerability reporting and remediation process; 

- Communication with development and project management teams; 

- Prepare security testing reports; 

- Prepare and support internal documentation for the project. 

PAR Retail Offers: 

- Long-term employment; 

- Competitive compensation with regular performance-based salary and career development reviews; 

- Paid vacations and sick leaves; 

- Health insurance program; 

- Flexible working hours; 

- Sponsored company educational program, corporate library; 

- Funny celebrations, team outings, and company events; 

- A unique and friendly environment where everyone can explore and learn new technologies. 

At MacPaw, we craft software that makes everyday tech life simpler, cleaner, and more enjoyable. From globally loved products like CleanMyMac and Setapp to emerging cybersecurity tools like ClearVPN and Moonlock, we are building a product ecosystem that reaches millions of people worldwide.

We’re looking for a Senior Infrastructure Security Engineer to join our Information Security Team, supporting MacPaw’s product ecosystem as we transition to our next-generation setup.

Our Security and Infrastructure teams ensure that all MacPaw products run on a highly resilient, compliant, and rock-solid foundation, protecting user data and business operations at scale.

As a Senior Infrastructure Security Engineer, you will take dedicated ownership of securing our production infrastructure, establishing compliance control baselines, and maintaining a strong security posture. You’ll define, test, and coordinate security frameworks across bare-metal environments and GCP, working hand-in-hand with our SRE team as a technical peer and security partner.

If you’re excited to take ownership of MacPaw’s infrastructure security, reduce automated evidence coverage gaps, and collaborate on advanced CNAPP tools and agentic AI automation, we’d love to hear from you!

In this role, you will:

• Participate in Wiz CNAPP service adoption.
• Drive Kubernetes and cloud posture hardening across GCP, including RBAC reviews, admission control, network policies, and runtime threat detection.
• Take ownership of the infrastructure vulnerability backlog, driving remediation down against severity-based SLAs in close collaboration with SRE.
• Build and ship agentic AI security automation into code-reviewed repositories to streamline vulnerability management and operational security workflows. 
• Collaborate closely with the SRE team to embed security controls into CI/CD pipelines and Infrastructure-as-Code without adding unnecessary friction.

Skills you’ll need to bring:

• Strong expertise in Infrastructure-as-Code and automation using Terraform.
• Python or Go skills to build security tooling rather than just filing tickets.
• Hands-on experience with incident management, threat containment, and root cause analysis (RCA) for infrastructure security incidents.
• Demonstrated ability to work with Service Reliability Engineers (SRE) team as a technical peer, driving security engineering through influence and shared goals.
• Hands-on production cloud security experience at scale on GCP (IAM least privilege, network segmentation, runtime detection, and posture hardening).
• In-depth Kubernetes security experience in production: RBAC, admission control (OPA/Kyverno), network policies, runtime detection, and image provenance.
• Proven experience in bare-metal and self-hosted Linux infrastructure security (host-based controls, Linux hardening, and multi-tenancy risk mitigation outside managed cloud).
• Experience in infrastructure vulnerability management: triage, SLA management, and driving remediation through engineering teams.
• Ability to write and ship agentic AI automation into production repositories to enhance security operations.
• At least an Upper-Intermediate level of English and fluent Ukrainian.

As a plus:

• Experience securing agentic AI systems in production (prompt injection, tool poisoning across MCP, human-in-the-loop approval flows, and kill switches).
• Experience with CNAPP/CSPM platform migrations or ownership (Wiz, Sysdig, Orca, or Prisma Cloud).
• Experience with NixOS or other immutable Linux distributions.
• Familiarity with Cloudflare edge security controls.
• Experience operating within environments under active ISO 27001 or SOC 2 Type II compliance frameworks.
• Relevant security certifications as signal (CKS, OSCP, GCP Professional Cloud Security).

What we offer:

• We are a Ukrainian company, and we stand with Ukraine against the russian aggression
  We maintain workplaces for the mobilized Macpawians and provide financial support to colleagues or their families affected by the war. Here, you can also read about the MacPaw Foundation, which intends to help save the lives of Ukrainian defenders and provide relief to as many civilians as possible.
• We are committed to our veterans
  Our Veteran Career and Empowerment Program is designed to ensure our veterans and active military personnel receive the recognition, support, and opportunities they deserve.
• Hybrid work model
  Whether to work remotely or at the hub is entirely up to you. If you decide to mix it, our Kyiv office, which works as a coworking space, is open around the clock. The office is supplied with UPS and Starlink for an uninterrupted work process.
• Your health always comes first
  We guarantee medical insurance starting on your first working month. For those abroad, you can receive a yearly Medical insurance allowance as compensation for managing your medical expenses.
• Flexible working hours
  You can choose a schedule that is comfortable for you. No one here tracks your clock in/out because MacPaw is built on trust and cooperation.
• Space to grow both professionally and personally
  Education opportunities to grow both hard and soft skills, annual development reviews, and internal community.
• Teams we are proud of
  We build honest, transparent, and reliable relationships within teams. Every Macpawian can improve processes and implement their ideas. We encourage open and constructive feedback and provide training for Macpawians on giving and receiving feedback.
• Office designed for people (and pets)
  Our office has it all: a spacious workplace with enough room for sitting up, lying down, and running around; a gym for recreation; cozy kitchens; a sleeping/meditation room; and a terrace with a view where we throw summer parties. Also, we have two cats living in the office, and you are welcome to bring your pets to the office (we have separate floors for cats and dogs).
• Time-off policy that covers life’s needs
  Convenient personal time-off policy to help you take care of essential matters in your personal life, and parental leaves. On top of all that, sabbaticals are open after 5 years of being with MacPaw.
• Join social initiatives with MacPawCares
  MacPaw participates in numerous humanitarian aid and charity projects across many fields, and you are welcome to jump in to make the world a better place.
• We’re an equal-opportunity employer. Here is a safe place for applicants of all backgrounds
  We are hiring talented humans. Meaning with all our variety of backgrounds and identities, including service members and veterans, women, members of the LGBTQIA+ community, individuals with disabilities, and other often underrepresented groups. MacPaw does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.
  
  *Some benefits are under development, and new adjustments are possible.

We're looking for a highly skilled, driven Senior Security Researcher/Senior Application Security Researcher to join our research group to analyze supply chain attacks, dissect malware, and build open-source tools. This is a high-impact role: you'll work with cross-functional teams to scan and protect users and organizations worldwide from the hottest cyber threats, playing a key part in shaping the future of the team.

Must-Have Skills

• 5+ years of experience as a Cybersecurity Researcher (supply-chain attacks, malware analysis)
• Familiarity with open-source registry ecosystems (npm, PyPI, Maven) and their respective attack surfaces
• Proven ability to ship software in a production environment
• Strong understanding of the SDLC and modern CI/CD pipelines
• Comfortable leveraging AI tools to optimize research and development processes
• Proactive and independent mindset, with the ability to take full ownership of projects

Nice to Have

• Active contributions to open-source security tools or research projects
• Hands-on experience with decompilers, debuggers, and network traffic analysis
• Advanced malware analysis experience (obfuscation, encryption, anti-analysis, and sandbox-evasion techniques)
• Web application penetration testing experience
• Published CVEs, coordinated disclosures, writeups, blogs, or research papers
• Experience public speaking at major industry conferences (e.g., Black Hat, DEFCON, RSAC)
• A genuine passion for cybersecurity, open-source communities, and solving complex ecosystem threats

Role Summary

We're looking for a highly skilled, driven Senior Security Researcher/Senior Software Supply Chain Security Researcher to join our research group to analyze supply chain attacks, dissect malware, and build open-source tools. This is a high-impact role: you'll work with cross-functional teams to scan and protect users and organizations worldwide from the hottest cyber threats, playing a key part in shaping the future of the team.

Must-Have Skills

• 5+ years of experience as a Cybersecurity Researcher (supply-chain attacks, malware analysis)
• Familiarity with open-source registry ecosystems (npm, PyPI, Maven) and their respective attack surfaces
• Proven ability to ship software in a production environment
• Strong understanding of the SDLC and modern CI/CD pipelines
• Comfortable leveraging AI tools to optimize research and development processes
• Proactive and independent mindset, with the ability to take full ownership of projects

Nice to Have

• Active contributions to open-source security tools or research projects
• Hands-on experience with decompilers, debuggers, and network traffic analysis
• Advanced malware analysis experience (obfuscation, encryption, anti-analysis, and sandbox-evasion techniques)
• Web application penetration testing experience
• Published CVEs, coordinated disclosures, writeups, blogs, or research papers
• Experience public speaking at major industry conferences (e.g., Black Hat, DEFCON, RSAC)
• A genuine passion for cybersecurity, open-source communities, and solving complex ecosystem threats

Role Summary

We're looking for a highly skilled, driven Security Researcher/Security Research Engineer to join our research group to analyze supply chain attacks, dissect malware, and build open-source tools. This is a high-impact role: you'll work with cross-functional teams to scan and protect users and organizations worldwide from the hottest cyber threats, playing a key part in shaping the future of the team.

Must-Have Skills

• 5+ years of experience as a Cybersecurity Researcher (supply-chain attacks, malware analysis)
• Familiarity with open-source registry ecosystems (npm, PyPI, Maven) and their respective attack surfaces
• Proven ability to ship software in a production environment
• Strong understanding of the SDLC and modern CI/CD pipelines
• Comfortable leveraging AI tools to optimize research and development processes
• Proactive and independent mindset, with the ability to take full ownership of projects

Nice to Have

• Active contributions to open-source security tools or research projects
• Hands-on experience with decompilers, debuggers, and network traffic analysis
• Advanced malware analysis experience (obfuscation, encryption, anti-analysis, and sandbox-evasion techniques)
• Web application penetration testing experience
• Published CVEs, coordinated disclosures, writeups, blogs, or research papers
• Experience public speaking at major industry conferences (e.g., Black Hat, DEFCON, RSAC)
• A genuine passion for cybersecurity, open-source communities, and solving complex ecosystem threats

Who we are:
Selesa offers IT outsourcing, specialist out-staffing, and project management services to enhance business operations. We focus on providing skilled professionals for IT needs, including development, security consulting, and business development. Selesa also manages sales, account management, and human resources to support company growth. Our services are known for efficiency, quality, and strong communication, making us a trusted partner for businesses looking to streamline and secure their IT infrastructure. Originated in Vilnius, Lithuania, we cater to global clients.

Who we are looking for:

We’re looking for a Junior Security Operations Assistant, working alongside experienced professionals to protect our clients from cyber threats. In this role, you’ll be at the forefront of defending our clients’ networks, gaining hands-on experience, and contributing to a safer digital landscape. 

Responsibilities

• Assist with daily security monitoring and SOC activities
• Review security alerts and escalate issues when required
• Help with log collection and analysis
• Support incident documentation and reporting
• Assist with vulnerability tracking and follow-ups
• Help maintain security and ISO 27001 documentation
• Support internal audits, evidence collection, and basic security tests
• Follow security policies and procedures

Requirements

• Proficiency in English 
• Basic knowledge of Linux (command line, logs, permissions)
• Basic understanding of cybersecurity concepts (phishing, malware, attacks)
• Awareness of SOC operations and incident escalation
• Basic understanding of networking concepts (ports, protocols, firewalls)
• Willingness to learn security tools and processes
• Good attention to detail and documentation skills
• Junior / Entry-level
• 0–2 years of experience in IT, SOC, or cybersecurity-related roles
• Education, training, or internships in IT/security are acceptable
• Strong attention to detail and teamwork skills.

• Ability to meet deadlines in a fast-paced environment

   

Nice to Have 

• Basic scripting (Bash or Python)
• Exposure to SIEM or endpoint security tools
• Familiarity with security frameworks
• Entry-level security certifications (e.g., Security+)

What we offer:

• Fully remote position with a flexible schedule
• Long-term opportunity with potential for financial and career advancement

• Supportive and positive work culture, collaborating with like-minded teammates

   

When submitting your application, please make sure to include your responses to the following screening questions in your COVER LETTER:

1. Please explain to us your level of spoken/written English. Just rank it from 1 to 10, where 10 means a Native Speaker; 8-9 means a Near Native Speaker; 6-7 means Fluent Speaker; under 6 any further levels.
2. How would you approach assessing and mitigating the risks associated with a new software or system implementation?
3. What methods or tools do you use to stay updated with the latest cybersecurity threats and trends?
4. What are your Monthly salary expectations for a long-term, full-time position (if we consider 40 hours a week)?

• Job Description
  Minimum two years of experience administering Splunk in enterprise production environments.
• Official Splunk certification such as Enterprise Certified Admin, Architect or Core Certified Consultant (preferred)
• Practical experience integrating Splunk with AWS cloud infrastructure and services.
• Strong capabilities in Python or Shell scripting for system automation and REST API integration.
• Deep technical expertise in observability, metrics and log analytics.
• Hands on experience with data ingestion, sourcetype management and custom parsing configurations.

• Solid knowledge of indexer cluster maintenance and search head configuration.

  
  Nice to have skills:

• Experience implementing Model Context Protocol (MCP) solutions.
• Familiarity with AI developer tools such as Claude.
• Development experience using TypeScript.

• Exposure to Infrastructure as Code practices and continuous integration pipelines.
   

  Job Responsibilities

• Integrate Splunk with AWS cloud services including CloudWatch, S3, EC2, Kinesis and container logs.
• Execute regular component updates and lifecycle management across Indexers, Search Heads and Forwarders.
• Conduct routine platform health checks, indexer cluster maintenance and system performance tuning.
• Onboard new data sources and manage custom parsing configurations
• Automate routine maintenance, reporting and log parsing using Python or Shell scripts alongside Splunk REST APIs.
• Support deployment pipelines to enable seamless infrastructure provisioning with minimal manual intervention.
• Collaborate with stakeholders to optimize search query performance for both ad hoc and scheduled tasks.
• Design intuitive dashboards and telemetry visualizations for operational engineering and business teams.
   

Department/Project Description
We are seeking a Splunk Consultant to manage, maintain, and optimize a high-volume enterprise Splunk environment. Embedded within a modern cloud and DevOps ecosystem, you will support large-scale telemetry ingestion while pairing platform administration with automated scripting to ensure peak reliability. Joining a collaborative team focused on continuous performance tuning, you will help cross-functional partners translate complex system data into actionable insights, driving observability, log analytics, and application performance monitoring across both operational and business domains. Eager to know more? If you are proactive, bring new ideas and suggestions, don’t waste any second and apply!

We are looking for an Endpoint Security Engineer to join our Security team. In this role, you will be responsible for implementing, operating, and improving endpoint security controls across corporate workstations, production servers, and critical infrastructure.

You will ensure reliable endpoint visibility, strong security baselines, effective telemetry collection, and containment capabilities across Windows, Linux, and macOS environments. You will work closely with IT, Cyber Defense, IAM, and Compliance teams to maintain measurable endpoint protection coverage and reduce security risks.

Responsibilities

• Deploy, operate, and tune endpoint security controls (EDR/XDR, EPP, MDM) across corporate endpoints, servers, and critical infrastructure
• Monitor endpoint telemetry health, investigate security events, and identify potential security incidents
• Implement and maintain OS security baselines and hardening standards across Windows, Linux, and macOS environments based on CIS Benchmarks, DISA STIG, and internal policies
• Support vulnerability remediation, patching activities, and endpoint security improvements in collaboration with IT and infrastructure teams
• Configure and maintain endpoint protection capabilities, including file integrity monitoring and endpoint isolation readiness for critical systems
• Support containment and response activities for compromised or non-compliant devices together with SOC and Cyber Defense teams
• Assist with tracking endpoint security gaps, remediation actions, and configuration improvements
• Document endpoint security configurations, operational procedures, and investigation findings

Requirements

• 3+ years of hands-on experience in Endpoint Security, Endpoint Protection, Infrastructure Security, System Security, or a similar cybersecurity role
• Higher education in Computer Science, Information Security, Software Engineering, or a related technical field is preferred
• Practical experience securing both desktop endpoints and server workloads in enterprise environments
• Experience supporting environments with 1,000+ managed endpoints is highly preferred
• Strong hands-on experience with EDR/XDR, Endpoint Protection Platforms (EPP), and Mobile Device Management (MDM) solutions
• Deep understanding of Windows, Linux, and macOS architecture, services, processes, logging, and security mechanisms
• Experience implementing OS hardening based on CIS Benchmarks, DISA STIG, or similar security standards
• Knowledge of operating system access control models, RBAC, and least-privilege principles
• Experience with native operating system security features such as Microsoft Defender, Attack Surface Reduction (ASR), BitLocker, SELinux, AppArmor, Gatekeeper, System Integrity Protection (SIP), and FileVault
• Understanding of endpoint telemetry, file integrity monitoring, and endpoint isolation techniques
• Scripting skills for automation using PowerShell and Python
• English - Intermediate/Upper-Intermediate level

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

The Defense Procurement Agency (DOT) is a national agency responsible for procuring ammunition, UAVs, military equipment, fuel, food, clothing, and other critical supplies for the Armed Forces of Ukraine and the Defense Forces.

Our mission: Strengthening Ukraine by ensuring reliable support for the Defense Forces while fostering the development of the national defense industry.

Our vision: To become the driving force behind the transformation of Ukraine's defense procurement ecosystem—not only operating the system, but continuously improving it.

We are looking for a Tech Lead / Senior DevSecOps to provide technical leadership to the Security Engineering team, develop information security architecture, implement security solutions across the Microsoft ecosystem, and integrate security requirements into infrastructure and software development processes.

Responsibilities

• Provide technical leadership to the Security Engineering team, including prioritizing and distributing tasks, mentoring team members, and ensuring the quality of implementation.
• Design and develop information security architecture and key cybersecurity capabilities, including Cloud Security, Identity & Access Management, Vulnerability Management, DevSecOps, and Incident Response.
• Implement, administer, and develop security services across the Microsoft security ecosystem.
• Conduct security reviews of infrastructure, CI/CD pipelines, and Infrastructure as Code (Terraform).
• Collaborate with Infrastructure, DevOps, and Software Engineering teams to integrate security requirements into architecture and development processes.
• Develop the AI Security function, including AI Security Proxy, AI Governance, DLP, monitoring, and auditing.
• Develop technical security standards, guidelines, recommendations, and information security documentation.

Requirements

• Bachelor's or Master's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 3+ years of experience in cybersecurity roles such as Security Engineer, Cloud Security Engineer, or DevSecOps Engineer, with hands-on experience in Azure Security and Microsoft Security.
• Hands-on experience securing cloud infrastructure in Microsoft Azure.
• Strong knowledge of Microsoft security services, including Defender XDR, Defender for Cloud, Sentinel, Intune, Entra ID, Purview, and related solutions.
• Experience building and developing Vulnerability Management processes.
• Strong understanding of modern DevSecOps practices, including CI/CD security, Infrastructure as Code (Terraform), SAST, DAST, Secret Scanning, and IaC Security.
• Hands-on experience securing containerized environments and Kubernetes.
• Experience with information security incident analysis and response.
• Previous technical leadership experience or strong Senior Security Engineer experience with the readiness to take on a Tech Lead role.

What We Offer

• Meaningful work that directly contributes to strengthening Ukraine's defense capabilities.
• Official employment with competitive salary and full social benefits.
• Professional development, learning opportunities, and career growth.
• Structured onboarding and dedicated mentorship.
• A collaborative, supportive, and mission-driven team.
• Modern office near the metro with reliable internet and equipped shelter.

By joining our team, you will contribute to one of Ukraine's largest digital transformation initiatives in the defense sector and help build the future of defense procurement.

Ready to make a real impact? We'd love to hear from you. Apply today!

* By submitting your CV, you consent to the processing of your personal data in accordance with applicable legislation.

** Due to the high volume of applications, only candidates whose qualifications best match the position will be contacted.

We're looking for a highly skilled, driven Security Researcher to join our research group to analyze supply chain attacks, dissect malware, and build open-source tools. This is a high-impact role: you'll work with cross-functional teams to scan and protect users and organizations worldwide from the hottest cyber threats, playing a key part in shaping the future of the team.

Must-Have Skills

• 5+ years of experience as a Cybersecurity Researcher (supply-chain attacks, malware analysis)
• Familiarity with open-source registry ecosystems (npm, PyPI, Maven) and their respective attack surfaces
• Proven ability to ship software in a production environment
• Strong understanding of the SDLC and modern CI/CD pipelines
• Comfortable leveraging AI tools to optimize research and development processes
• Proactive and independent mindset, with the ability to take full ownership of projects

Nice to Have

• Active contributions to open-source security tools or research projects
• Hands-on experience with decompilers, debuggers, and network traffic analysis
• Advanced malware analysis experience (obfuscation, encryption, anti-analysis, and sandbox-evasion techniques)
• Web application penetration testing experience
• Published CVEs, coordinated disclosures, writeups, blogs, or research papers
• Experience public speaking at major industry conferences (e.g., Black Hat, DEFCON, RSAC)
• A genuine passion for cybersecurity, open-source communities, and solving complex ecosystem threats

Cloudfresh ⛅️ is a Global Google Cloud Premier Partner, Zendesk Premier Partner, Asana Solutions Partner, GitLab Select Partner, Hubspot Platinum Partner, Okta Activate Partner, and Microsoft Partner.

Since 2017, we’ve been specializing in the implementation, migration, integration, audit, administration, support, and training for top-tier cloud solutions. Our products focus on cutting-edge cloud computing, advanced location and mapping, seamless collaboration from anywhere, unparalleled customer service, and innovative DevSecOps.

We’re looking for a Google Cloud Security Engineer to harden client environments across GCP. You’ll implement and help design security controls, automate guardrails, improve detection & response, and guide stakeholders through pragmatic, risk-based decisions across EMEA.

Requirements:

• 3+ years proven, hands-on experience in a Security Engineer, SecOps (or similar) role.
• Strong knowledge of building and operating Security Porture, Edge protection, WAF, Endpoint security.
• Technical certifications related to CyberSecurity Google Cloud Solutions, Cloudflare and JumpCloud are an advantage.
• Experience of presentation, documentation.
• Excellent communication and strategic planning abilities, able to explain trade-offs, influence remediation, and drive adoption of guardrails.
• Basic scripting experience (e.g., Python, Bash, or gcloud CLI).
• Fluency in English.

Responsibilities:

• Design, implement, and operate security controls for internal needs and clients across.
• Perform cybersecurity audits.
• Configure and monitor Security Command Center, audit logs, and threat protection.
• Establish logging, detection and incident response.
• Assist clients with implementation of Cybersecurity products (Google Cloud Security Center, Google Workspace Security, Cloudflare, JumpCloud) and compliance controls.
• Generate security assessment reports and provide actionable recommendations.
• Continuously assess the landscape: track new Vendors features and update baselines to improve posture, reliability, and cost efficiency.

Work conditions:

• Competitive Salary & Transparent Motivation: Receive a competitive base salary with performance-based bonuses, providing clear financial rewards for your success.
• Flexible Work Format: Work remotely with flexible hours, allowing you to balance your professional and personal life efficiently.
• Training with Leading Cloud Products: Access in-depth training on cutting-edge cloud solutions, enhancing your expertise and equipping you with the tools to succeed in an ever-evolving industry.
• International Collaboration: Work alongside A-players and seasoned professionals in the cloud industry. Expand your expertise by engaging with international markets across the EMEA and CEE regions.
• Vibrant Team Environment: Be part of an innovative, dynamic team that fosters both personal and professional growth, creating opportunities for you to advance in your career.

When applying to this position, you consent to the processing of your personal data by CLOUDFRESH for the purposes necessary to conduct the recruitment process, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
Additionally, you agree that CLOUDFRESH may process your personal data for future recruitment processes. You can withdraw this consetn at any time.

Come Back Agency supports US software and technology companies by running their hiring process. We work with delivery and leadership teams to define roles, screen candidates, and manage interviews. Successful candidates are hired directly by the company and become part of its team.

This position is with a US-based software company providing custom development and AI implementation for North American clients. The team builds and maintains production software, including AI-enabled systems, and works in long-term client engagements. Team members operate as part of an internal, distributed team and collaborate directly with client stakeholders.

About the role

We are looking for an experienced DevSecOps / Security & Compliance Consultant for a 3–4 month contract.
 

The company already has two DevOps engineers responsible for the existing infrastructure. Your role will be to independently assess the company’s current security and compliance posture, create a practical SOC 2 and/or ISO 27001 readiness roadmap, coordinate the implementation of required controls, and prepare the company for an external audit.
 

What you will do:

• Conduct a security and compliance gap assessment
• Define a realistic SOC 2 and/or ISO 27001 readiness roadmap
• Map requirements to technical and organizational controls
• Configure and manage Vanta, Drata, Secureframe, or a similar compliance platform
• Define the required evidence and coordinate its collection
• Work with the existing DevOps engineers to implement AWS, IAM, logging, monitoring, backup, vulnerability management, and secure SDLC controls
• Prepare or improve security policies, risk registers, incident response procedures, access reviews, and business continuity documentation
• Support client security questionnaires and auditor requests
• Conduct a readiness review or mock audit
• Document remaining gaps and provide a clear handover plan
   

Requirements:

• Proven hands-on ownership of at least one SOC 2 or ISO 27001 readiness and audit cycle
• Experience implementing controls, collecting evidence, and working directly with auditors or external assessors
• Strong understanding of AWS infrastructure, IAM, logging, security, CI/CD, and vulnerability management
• Experience with Vanta, Drata, Secureframe, or similar compliance automation tools
• Ability to independently manage the compliance workstream and coordinate technical implementation with the internal DevOps team
• Strong documentation and stakeholder communication skills
• English at B2 level or higher

Apply with your resume and a short note outlining your relevant experience. You can also submit it through our website at comeback.ua. Selected candidates will be contacted by Come Back Agency.