Jobs Security

The Lead IAM Engineer (Tech Lead) is a key technical specialist responsible for driving the deployment and upgrade of the target Bravura Identity environment. This role requires deep Identity and Access Management (IAM) expertise to ensure a seamless transition to the new platform without disrupting the client's business operations. The engineer will collaborate closely with the Delivery Lead, Security Architect, and the rest of the engineering squad.

• Deep expertise in Identity and Access Management (IAM) systems, with direct experience configuring and upgrading Bravura Identity.
• Strong technical background in integrating and provisioning to Active Directory (AD) and Microsoft Exchange.
• Familiarity with enterprise authentication and integration protocols, including LDAP, APIs, SCIM, and Microsoft Entra ID.
• Proven experience acting as a Technical Lead in planning and executing rehearsed production cutovers and rollback strategies.
• Solid understanding of underlying infrastructure components (e.g., SQL Server, Windows environments) relevant to IAM platform upgrades.
• Experience and strong knowledge of Identity Governance and Identity Lifecycle Management

Job Responsibilities

• Lead the core upgrade build process and cutover support.
• Ensure the continuity of automated provisioning to Active Directory and Exchange during and after the migration.
• Provide technical support during the production cutover and hypercare phases.
• Ensure the existing architecture and operating model remain intact throughout the implementation of changes

Department/Project Description

The project involves upgrading the Bravura Identity platform to a supported version ahead of its End of Support for a major banking and financial institution. This is a "like-for-like" upgrade that preserves the current architecture and operating model. 

Skill Category

Engineering - Other

Keyskills - Must Have

• IAM
• Active Directory

We are the creators of a new fintech era!

Our mission is to change this world by making blockchain accessible to everyone in everyday life. WhiteBIT is a global team of over 1,200 professionals united by one mission — to shape the new world order in the Web3 era. Each of our employees is fully engaged in this transformative journey.

We work on our blockchain platform, providing maximum transparency and security for more than 8 million users worldwide. Our breakthrough solutions, incredible speed of adaptation to market challenges, and technological superiority are the strengths that take us beyond ordinary companies. Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT and VISA.

The future of Web3 starts with you: join us as an Application Security Engineer (AppSec)!

Requirements:

— 2+ years of experience in Application Security, Product Security, or a related security role.

— Strong knowledge of web application security, OWASP Top 10, common attack techniques, and secure coding practices.

— Hands-on experience with threat modeling, security architecture reviews, vulnerability assessment, and penetration testing.

— Ability to review source code and identify security vulnerabilities.

— Experience with SAST, DAST, SCA, secrets scanning, and vulnerability-management tools.

— Understanding of CI/CD pipelines and experience integrating security checks into the SDLC.

— Knowledge of API security, authentication, authorization, and common security protocols.

— Familiarity with cloud, container, or Kubernetes security.

— Basic knowledge of Web3 and smart contract security.

— Basic scripting or programming skills, preferably in Python or another relevant language.

— Ability to clearly communicate security risks and remediation guidance to technical and non-technical stakeholders.

Responsibilities:

— Perform application security assessments, source-code reviews, and penetration testing.

— Participate in threat modeling and security architecture reviews for new and existing products.

— Triage Bug Bounty submissions: validate and reproduce vulnerabilities, assess their severity and business impact, identify duplicates and false positives, communicate with researchers, and coordinate remediation with engineering teams.

— Identify, prioritize, and track vulnerabilities throughout the remediation process.

— Provide developers with clear remediation guidance and secure coding recommendations.

— Support the integration and operation of SAST, DAST, SCA, secrets scanning, and other security tools within CI/CD pipelines.

— Participate in defining and reviewing security requirements throughout the software development lifecycle.

— Validate security-tool findings and help reduce false positives.

— Support investigations and remediation of application-related security incidents.

— Contribute to application security standards, guidelines, and reusable security controls.

— Help deliver security training and promote secure development practices across engineering teams.

— Collaborate with developers, DevOps, QA, product teams, and other security specialists.

— Monitor emerging application security threats and contribute to improving AppSec processes.

Working terms:

Immerse yourself in Crypto & Web3:

— Master cutting-edge technologies and become an expert in the most innovative industry.

Work with the Fintech of the Future:

— Develop your skills in digital finance and shape the global market.

Take Your Professionalism to the Next Level:

— Gain unique experience and be part of global transformations.

Drive Innovations:

— Influence the industry and contribute to groundbreaking solutions.

Join a Strong Team:

— Collaborate with top experts worldwide and grow alongside the best.

Work-Life Balance & Well-being:

— Modern equipment.

— Comfortable working conditions, and an inspiring environment to help you thrive.

— 24 calendar days of paid leave.

— Additional days off for national holidays.

With us, you’ll dive into the world of unique blockchain technologies, reshape the crypto landscape, and become an innovator in your field. If you’re ready to take on challenges and join our dynamic team, apply now and start a new chapter in your career!

Let’s Build the Future Together!

WhiteBIT offers all candidates an equal opportunity to join the team. All hiring decisions are made without regard to race, national origin, gender identity or sexual orientation, age, religion, disability, medical condition, marital status, familial status, veteran status, or any other legally protected characteristic of an individual.

Swarmer develops software that makes drones autonomous and allows them to operate together, in large, coordinated teams — no pilots needed. Our technology has been battle-tested in Ukraine— the world’s most intense proving ground for drone warfare.

In March 2026, we became the first Ukrainian defense startup to go public on NASDAQ, following a $15M Series A — the largest investment in a Ukrainian defense tech company since the start of the war.

Working at Swarmer means operating at the intersection of engineering rigor and frontline reality. The problems and environments are complex, and the stakes are very real. We built this software to enable democratic nations to defend themselves.

If you are motivated by building resilient systems that matter and by seeing the direct impact of your work, you’ll find purpose here.

What we’re looking for:

We're looking for an experienced Cybersecurity Engineer to join our team. You'll be responsible for defending our endpoints, identities, SaaS stack, networks, and cloud environment against the people actively trying to breach them. Product security lives with a separate team, so your focus stays sharp: keep the corporate perimeter tight.

This is a builder's role, not a maintainer's. You'll stand up and run our detection stack (SIEM/SOAR, EDR), lock down and manage the device fleet (MDM, hardening), and design identity controls built on ZeroTrust principles (SSO, MFA, ZTNA).

You won't be handed a mature security program to babysit. You'll design it, implement it, and operate it, with recognized frameworks as your guardrails and real-world attack patterns as your test cases.

What you’ll do:

• Own and continuously improve our SIEM/SOAR capabilities, including log source onboarding, detection rules and correlation logic, alert tuning, dashboards, automated response workflows, and integration across the security stack
• Monitor and analyze security events and logs to catch anomalies and potential threats; investigate, contain, and remediate incidents, documenting timelines, root causes, and lessons learned
• Deploy and manage endpoint and server protection across the fleet (EDR/NGAV, MDM), including policy enforcement, compliance configuration, and hardening baselines (encryption, security policies, benchmarks)
• Implement and operate identity and Zero Trust access controls, including SSO, MFA, conditional access, ZTNA, device posture checks, RBAC, least privilege, privileged access management, and periodic access reviews
• Manage vulnerabilities across endpoints, servers, and cloud, with risk-based prioritization and remediation tracking
• Monitor cloud and SaaS security posture, remediate misconfigurations, and review third-party integrations and access scopes
• Review infrastructure projects and architecture from a security lens, ensuring secure-by-default configurations
• Document technical security controls (runbooks, hardening guides) and support internal and external audits

What we need:

• 4+ years of hands-on experience in cybersecurity or IT infrastructure engineering, with a clear specialization in security
• Hands-on experience with SIEM/SOAR platforms, covering log source integration, detection engineering, alert investigation, and security automation
• Hands-on experience with EDR/NGAV platforms, covering endpoint policy management, detection, investigation, and response
• Experience hardening and managing endpoints across Windows, macOS, and Linux, including MDM platforms
• Experience with identity and Zero Trust access technologies, including SSO, MFA, conditional access, device posture, and ZTNA
• Solid grasp of networking fundamentals (TCP/IP, DNS, DHCP, VPN), with practical experience configuring firewalls and other network security controls
• Working knowledge of common attack techniques and how to detect and prevent them
• Practical familiarity with recognized security frameworks and standards (e.g., CIS, NIST, MITRE ATT&CK)
• Strong risk-assessment instincts, with the ability to prioritize pragmatically and explain technical issues clearly to non-technical colleagues
• English proficiency, for documentation, vendors, and external partners

Would be an advantage:

• Scripting ability for automating security and infrastructure tasks (Python, Bash, PowerShell, or SOAR playbooks)
• Experience with vulnerability management platforms
• Working knowledge of cloud and SaaS security controls (e.g., CSPM/SSPM)
• Relevant security certifications
• Experience working in enterprise or critical-infrastructure environments

What you’ll get:

• Professional growth through working with cutting-edge defense technologies and exposure to international security best practices.
• Direct impact: your work protects systems that operate in real, high-stakes environments.
• A fast-paced environment with minimal bureaucracy and no “process for the sake of process”.
• Competitive salary and a comprehensive benefits package (insurance, paid sick leave, 20 paid days off per year).
• Benefits of the defense sector (e.g., reservation, etc.).
• Flexible remote work options where possible.

How’s the hiring process going:

✔️ Recruiter Screen → ✔️ Technical Interview → ✔️ Final Interview → ✔️ Security check → ✔️ Offer

Ready to Apply?

✨ Welcome to WinMedia — Driving Innovation in iGaming Products! ✨
 

We build and develop product solutions in the iGaming industry 🎯. Our team works on in-house products, continuously improves internal processes, and uses data-driven approaches to make better decisions.

We are currently looking for an Anti-Fraud & Payments Manager who will take ownership of both the Anti-Fraud function and user payout operations. This is a hands-on role where you will build processes, develop risk and verification rules, oversee payout-related workflows, and ensure that user withdrawals are processed efficiently and safely.
 

📌 About the Role

We are looking for an experienced and proactive Anti-Fraud & Payments Manager to build and develop the Anti-Fraud and Payments function within our iGaming product company.

You will be responsible for user verification, fraud and risk assessment, payout checks, and the operational process of user withdrawals. You will decide when and how payouts should move forward, create and assign payout-related tasks, investigate suspicious cases, and continuously improve the rules and processes behind these operations.

This role combines Anti-Fraud expertise with ownership of the user payout process. You will work closely with Product, Customer Care, both VIP and Support teams, and other teams to make the verification and payout journey efficient, secure, and scalable.
 

🔨 Responsibilities

• Build and develop the Anti-Fraud & Payments function.
• Develop and implement rules, checks, and procedures for user verification, fraud detection, and payout processing.
• Review user activity and withdrawal requests, investigate suspicious cases, and make risk-based decisions.
• Take ownership of the user payout process, including creating, prioritizing, and assigning payout-related tasks.
• Identify fraud patterns, operational risks, and bottlenecks, and continuously improve related processes.
• Develop and maintain internal procedures, guidelines, and controls for Anti-Fraud and payouts.
• Monitor key metrics and ensure the verification and payout processes are efficient, secure, and scalable.
• Collaborate closely with Product, Support, VIP, and other teams to resolve cases and improve Anti-Fraud and payout workflows.
   

✅ Requirements

• 2+ years of experience in Anti-Fraud / Risk / Payments Operations, preferably in iGaming.
• Experience working with online casino / betting products is a strong advantage.
• Hands-on experience with user verification, fraud detection, and suspicious activity analysis.
• Strong understanding of common fraud scenarios, risk indicators, and detection methods.
• Practical experience with user withdrawals and payout processes.
• Understanding of how to assess and approve/reject payout requests based on risk and verification results.
• Experience building or significantly optimizing Anti-Fraud and/or payout processes.
• Experience working with tools such as Sumsub, KYCaid, Fingerprint.com, and similar solutions.
• Experience using AI tools in work processes is a strong advantage.
• Strong analytical and problem-solving skills with excellent attention to detail.
• Ability to make independent decisions and take ownership of operational processes.
• Ability to work with large amounts of information and prioritize cases effectively.
• Strong communication skills and the ability to collaborate with Product, Customer Care, VIP, and Support teams.
   

🎯 Ideal Candidate

• Has hands-on Anti-Fraud and/or Payments Operations experience in iGaming.
• Understands that the role is broader than traditional Anti-Fraud and is ready to own both risk and payout operations.
• Understands the specifics of users, deposits, withdrawals, and fraud risks in gambling products.
• Can independently develop a system of rules, checks, controls, and payout workflows.
• Is comfortable making decisions on individual cases while also thinking about the bigger process.
• Can build a structured and scalable process rather than simply following existing procedures.
• Takes full ownership of the Anti-Fraud & Payments function and is ready to develop it further.
   

🎁 What We Offer

💰 Competitive salary and financial incentives
🚀 The opportunity to build and develop the Anti-Fraud & Payments function
🎨 Freedom to make decisions and implement your ideas
📈 Professional and career growth opportunities
🌍 Flexible work setup
🤝 Work in a product-focused iGaming company alongside a professional team

We are looking for a Cyber Defense Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection, investigation, containment, and exposure reduction. You will lead our security operations function, making the organization faster in responding to threats while continuously improving controls across the attack surface.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging
• Hands-on experience with at least one enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response
• Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences
• English - Upper-Intermediate or higher

Will be a plus

• Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes
• Hands-on background as a SOC analyst, incident responder, or detection engineer prior to moving into management
• Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one
• Familiarity with threat intelligence platforms and threat-informed defense methodologies
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH) or equivalent

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Description
We are looking for an Antifraud Manager to monitor player activity, investigate suspicious behavior, and develop fraud prevention processes across our Casino products.
The role combines player risk analysis, bonus abuse prevention, payment fraud detection, behavioral analytics, and KYC verification.

Requirements
 

• 1+ year of experience in iGaming, Antifraud, Risk, Payments, or KYC
• Good understanding of online casino operations and player lifecycle
• Experience analyzing bets, bonuses, gaming behavior and player transactions
• Understanding of common iGaming fraud patterns:
  • Bonus Abuse
  • Multi-accounting
  • Payment Fraud
  • Chargebacks
  • Affiliate Fraud
• Understanding of KYC / AML principles and Source of Funds checks
• Strong analytical and investigative mindset
• Ability to identify suspicious patterns across multiple data points
• Confident user of Excel / Google Sheets
• Basic understanding of IP, Device ID / Fingerprinting, VPN / Proxy detection, payment method matching, and behavioral patterns
• Ability to make risk-based decisions independently
• High attention to detail
• English level: Intermediate or higher

Responsibilities
 

• Conduct player risk analysis before withdrawal approval
• Perform real-time monitoring and analysis of player activity, including:
  • Deposit and withdrawal transactions
  • Betting and gaming activity
  • Bonus usage
  • Behavioral patterns
• Investigate suspicious accounts and make decisions regarding withdrawals, additional verification, restrictions, or escalation
• Detect and investigate:
  • Bonus Abuse
  • Multi-accounting
  • Payment Fraud
  • Chargebacks
  • Suspicious betting/gaming patterns
  • Affiliate-related fraud
• Analyze connections between accounts using devices, IP addresses, payment methods, personal data, and behavioral patterns
• Review KYC documents and verify payment method ownership
• Perform or support Source of Funds / Source of Wealth checks when required
• Monitor potential chargeback risks and identify high-risk player behavior
• Work with Payment and Analytics teams to develop chargeback risk detection rules
• Analyze fraud incidents and identify recurring patterns
• Prepare regular reports on fraud cases, blocked activity, chargebacks, and prevented losses
• Collaborate with Payments, Bonus/Promo, CRM, Analytics, Product, Legal, and Customer Support teams
• Provide recommendations for improving internal antifraud tools and processes

📚 What We Offer

• The opportunity to work on an international product in the iGaming industry.
• Real impact on product development and product decision-making.
• Access to key product analytics and the opportunity to work with modern BI tools.
• A data-driven team that makes decisions based on insights and analytics.
• Minimal bureaucracy, fast implementation of ideas, and opportunities for professional growth.
• Gifts, paid vacation, and medical insurance.

🚀 Ready to take the next step in your career?

If you want to grow alongside a strong team, work with modern analytical tools, influence product development, and develop your expertise in a professional and healthy work environment — send us your CV!

We are looking for a Detection Engineering & Automation Lead to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a SOC Lead (Detection Engineering and Automation) to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a Head of Security Operations Center to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection, investigation, containment, and exposure reduction. You will lead our security operations function, making the organization faster in responding to threats while continuously improving controls across the attack surface.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging
• Hands-on experience with at least one enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response
• Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences
• English - Upper-Intermediate or higher

Will be a plus

• Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes
• Hands-on background as a SOC analyst, incident responder, or detection engineer prior to moving into management
• Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one
• Familiarity with threat intelligence platforms and threat-informed defense methodologies
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH) or equivalent

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Description

The overall project is designated for intelligent Fleet De-Carbonization based on an ambitious science-based idea targeting the achievement of net-zero emissions. The solution is planned to be a fully integrated software solution that can maximize efficiencies in both operational and energy supply management perspectives.

#LI-IN1

Requirements

Knowledge of secure architecture & secure design (e.g. Zero Trust)
Strong knowledge of cybersecurity processes – SSDF by NIST
Cross-team collaboration
Experience Azure cloud:
Azure Kubernetes security
Azure IdP (Entra & B2C)
Azure Pipelines
Experience with scanning tools : SonarCloud & Snyk
Vulnerabilities management
Secure architecture design best practices (e.g. Zero Trust)
Strong knowledge of secure design:
Data encryption
Data anonymization
Secure communication (HTTPS – TLS, PKI)
Identity and Access Management
Scripting experience (e.g. Bash, Python, PS)

Job responsibilities

Owning and maintaining security activities required by SSDF process
Reporting to stakeholders (Head of Engineering & CISO)
Collaboration with SOC, Development, architects team
Vulnerabilities management
Solution design and requirements creation
Supporting/advising development team in security challenges

We are inviting you, a highly motivated and results-oriented Security Manager (Hybrid Infrastructure) to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success.
 

Responsibilities

• Own and lead Hybrid Infrastructure Security across cloud, network, identity, endpoint, and data domains
• Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions
• Lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments
• Manage cloud IAM and security-group guardrails in close collaboration with Platform and SRE teams
• Operate and mature endpoint security (EDR/XDR/MDM) across managed devices, including hardening and telemetry health
• Own data security and cryptography controls: KMS, secrets management, PKI, and certificate lifecycle
• Lead, mentor, and develop a team of security engineers (4 direct reports — Cloud & Network, Endpoint, IAM, Data Security & Cryptography)

Track, analyze, and report enterprise security metrics

Requirements

• 5+ years of experience in managing and developing security teams
• Proven track record in hands-on cybersecurity engineering roles
• Enterprise-level background
• Practical experience with on-premises environments
• Solid experience with networking
• Hands-on experience with cloud platforms
• Broad experience across cloud posture, network, identity, endpoint, and data protection security domains
• Experience with CSPM/CNAPP/CWPP tooling and cloud guardrails (WAF, DNS security, IaC scanning)
• Experience with cloud IAM and security-group/IaC security patterns
• Experience operating EDR/XDR and MDM solutions
• Experience with KMS, secrets management, PKI, and certificate management
• Ability to enforce security controls without unnecessarily blocking delivery for Platform/SRE/DevOps teams
• Upper-Intermediate English and higher

Will be a plus

• Higher education in Computer Science, Information Security
• Background in fintech, brokerage, trading platforms, payments, or other regulated environments
• Track record of building or maturing an enterprise/cloud security function from an early stage
• Familiarity with tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk
• Knowledge of Kubernetes/container security and cloud-native architectures
• Exposure to SOC 2, ISO 27001, or DORA compliance frameworks
   

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Employment Type: Full-Time

Experience: 2–4 years

About the Role

We are looking for a GRC Analyst to join our Information Security and Compliance team. You will run day-to-day governance, risk and compliance activities — risk assessments, ISMS maintenance, audit evidence, and third-party security reviews — with senior support on the more complex work.

This is a hands-on delivery role rather than a first job in security. You should be comfortable running a vendor assessment or an evidence collection cycle without step-by-step direction.

Key Responsibilities

Governance & Policy

• Maintain the ISMS, control register and governance documentation.
• Draft and update security policies, standards and procedures.
• Coordinate security awareness activities and track governance actions.

Risk Management

• Run information security risk assessments and maintain the risk register.
• Track risk treatment plans and remediation through to closure.
• Manage the security exception process.

Compliance & Audit

• Support compliance activities across ISO/IEC 27001, SOC 2 and GDPR.
• Collect and organise audit evidence; act as a point of contact during internal and external audits.
• Track audit and assessment findings to closure.

Third-Party Risk

• Run vendor security assessments and review supplier questionnaires.
• Maintain supplier risk records and follow up on third-party remediation.

Reporting

• Produce monthly security and compliance reporting for management.
• Maintain compliance dashboards and documentation repositories.

What We’re Looking For

• 2–4 years in information security, risk, compliance, audit or IT governance.
• Practical working knowledge of at least one major framework (ISO 27001, SOC 2 or NIST CSF).
• Working understanding of GDPR and data protection obligations.
• Confident with Excel and structured documentation; able to produce reporting for a management audience.
• Strong written communication and attention to detail.
• Comfortable working with both technical and non-technical stakeholders.
• Degree in cyber security, computer science, IT or a related discipline — or equivalent practical experience.

Nice to Have

• Hands-on use of a GRC platform (Vanta, Drata, Hyperproof, OneTrust, ServiceNow GRC or Archer).
• Cloud security fundamentals (AWS or Azure), IAM and MFA concepts.
• Exposure to Cyber Essentials, CIS Controls or AI governance.
• Jira or Azure DevOps; Power BI or Excel dashboards.
• A certification such as ISC2 CC, CompTIA Security+, ISO 27001 Foundation / Lead Auditor or SC-900.
• German is a strong plus

What We Offer

• Ownership of real GRC workstreams across the full lifecycle.
• Mentorship from senior security professionals and support for certifications.
• Clear progression towards Senior GRC Analyst or Risk & Compliance Specialist.
• Collaborative and inclusive working environment.

Who We Are 

PAR Retail, with its Open Commerce® product suite and patent pending Wallet Steering® System, empowers Convenience & Fuel Retailers to gain more share of wallet and customer lifetime value than possible with any other solution provider. PAR Retail’s unified Open Commerce product suite consists of: Activate for Intelligent 1:1 Loyalty, Transact for Contactless Commerce, and Experience for Cross-Channel Customer Experiences. PAR Retail’s solutions are supported by a set of subscription-based program management services and are contractually backed by its 1.5X Performance Guarantee. 

Requirements:  
- Operational knowledge of modern operating systems and networking; 

- Experience with common cloud services: AWS, GCP, and Azure; 

- Network Security and expertise in network pentesting; 

- Security testing of web applications, web services, mobile apps (hybrid and native), and IT infrastructure; 

- Understanding security certifications (PCI DSS / SOC2); 

- Ability to apply modern Application Security methodologies and frameworks; 

- Ability to use at least one modern programming language; 

- Practical experience with Burp Suite; 

- Experience with IDS, IPS, SIEM configuration; 

- Upper-intermediate English level. 

Responsibilities:  

- Requirements analysis, performing penetration testing and security audit; 

- BE, WEB, cloud and mobile clients testing; 

- Vulnerability reporting and remediation process; 

- Communication with development and project management teams; 

- Prepare security testing reports; 

- Prepare and support internal documentation for the project. 

PAR Retail Offers: 

- Long-term employment; 

- Competitive compensation with regular performance-based salary and career development reviews; 

- Paid vacations and sick leaves; 

- Health insurance program; 

- Flexible working hours; 

- Sponsored company educational program, corporate library; 

- Funny celebrations, team outings, and company events; 

- A unique and friendly environment where everyone can explore and learn new technologies. 

About the Role

We are looking for a skilled and practical Cybersecurity Specialist to protect our company's digital infrastructure, internal systems, data assets, cloud tools, websites, email accounts, and operational workflows.

The ideal candidate should be able to assess risks, identify vulnerabilities, secure accounts and systems, improve access controls, monitor threats, support compliance, and create clear cybersecurity processes for a growing analytics and technology-driven organization.
 

Key Responsibilities

• Assess the company's cybersecurity risks across internal systems, websites, cloud platforms, email, file storage, databases, and third-party tools.
• Implement and manage security best practices for Google Workspace, Microsoft 365, cloud services, websites, CRM systems, databases, automation tools, and internal dashboards.
• Set up and maintain strong access control, role-based permissions, password policies, MFA, account recovery procedures, and offboarding processes.
• Conduct vulnerability assessments, security audits, and risk reviews.
• Monitor potential threats, suspicious activity, unauthorized access attempts, phishing risks, malware, and data exposure.
• Support website, application, and infrastructure security, including SSL, DNS security, firewall settings, backups, and server hardening.
• Review and improve security for AI tools, automation workflows, API connections, shared documents, and data pipelines.
• Create cybersecurity policies, incident response procedures, security checklists, and internal documentation.
• Train team members on cybersecurity basics, phishing prevention, password security, data handling, and secure use of AI tools.
• Investigate security incidents and prepare remediation plans.
• Coordinate with IT, development, operations, legal, compliance, and management teams.
• Support compliance with relevant standards such as GDPR, ISO 27001, SOC 2, NIST, CIS Controls, or other applicable frameworks.
   

Required Skills & Experience

• Experience in cybersecurity, information security, IT security, cloud security, security operations, or similar role.
• Experience with Microsoft Azure cloud security is required (e.g., Azure AD/Entra ID, Azure Security Center, role-based access control, network security groups, Azure compliance tools).
• Strong understanding of cybersecurity fundamentals, including access control, MFA, phishing prevention, endpoint security, network security, vulnerability management, and incident response.
• Experience securing business systems such as Google Workspace, Microsoft 365, Slack, Notion, Airtable, CRM platforms, cloud storage, and collaboration tools.
• Knowledge of website and application security, including OWASP risks, SSL/TLS, DNS, firewalls, backups, and secure configuration.
• Experience with vulnerability scanning, risk assessment, security audits, and remediation planning.
• Ability to review user permissions, shared drives, admin access, API keys, integrations, and third-party apps.
• Understanding of data protection, privacy, and secure handling of confidential business information.
• Ability to write clear security documentation, policies, checklists, and incident reports.
• Strong attention to detail and ability to work independently.
   

Nice to Have

• Experience with ISO 27001, SOC 2, GDPR, NIST, CIS Controls, or other security/compliance frameworks.
• Experience with endpoint detection and response tools, SIEM platforms, VPNs, firewalls, password managers, MDM tools, and cloud security platforms.
• Experience with AWS, Google Cloud, Cloudflare, GitHub, Docker, databases, APIs, and automation platforms.
• Experience with penetration testing, red-team/blue-team exercises, phishing simulations, or social engineering defense.
• Experience securing AI workflows, LLM tools, automation systems, data pipelines, and research platforms.
• Relevant certifications such as Security+, CySA+, CISSP, CISM, CEH, OSCP, ISO 27001 Lead Implementer, Azure Security Engineer Associate (AZ-500), or similar.
• Experience with remote teams and international organizations.
   

Ideal Candidate Profile

The ideal candidate is practical, proactive, and security-minded without being overly bureaucratic. They can quickly identify the biggest risks, prioritize fixes, and implement realistic cybersecurity improvements.

They should be able to protect sensitive data, secure internal operations, educate the team, and build a strong cybersecurity foundation for a company working with analytics, research, AI tools, financial information, and strategic business intelligence.

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies. 

We are looking for a Security Engineer!

Requirements:

- 3+ years of experience in security coordination, product security, project management, technical delivery, GRC, compliance, or similar roles
- Experience working with software development teams
- Understanding of SDLC, release management, product delivery, and engineering workflows
- Basic understanding of application security, penetration testing, vulnerability management and secure development practices
- Experience working with regulated products, preferably in fintech, payments, banking, crypto, cards or PSP environments
- Ability to coordinate multiple stakeholders across product, engineering, security, and compliance teams
- Experience with Jira, Confluence, or similar task management and documentation tools
- Ability to turn unclear security needs into structured tasks, owners, deadlines, and next steps
- Good understanding of risk-based prioritization

Will be a plus:

- Experience with PCI DSS, ISO 27001, SOC 2 or other security/compliance frameworks
- Experience with card payments, issuing, acquiring, crypto payments, wallets, payment gateways or transaction monitoring
- Basic knowledge of cloud security, API security, authentication, authorization and data protection
 

Responsibilities:

- Act as the main security point of contact for the FinTech department
- Work as a bridge between FinTech product and engineering teams and the central Cybersecurity team
- Understand FinTech products, payment flows, crypto-related features, card payment solutions, integrations, APIs, and release plans
- Participate in product, engineering and delivery meetings to identify security needs early
- Coordinate security activities required for new features, releases, integrations, and product changes
- Create and manage requests to internal security teams, including Application Security, Penetration Testing, Cloud Security, GRC and Compliance
- Track security tasks from request creation to closure
- Ensure that security reviews, threat modeling, code reviews, penetration tests, and compliance checks are planned and completed on time
- Help prioritize security requests based on product risk, business impact, regulatory requirements and release timelines
- Coordinate remediation of security findings with product and engineering teams
- Maintain visibility of open security risks, blockers, dependencies, and deadlines
- Support preparation for audits, partner due diligence, compliance reviews and regulatory assessments
- Help translate security requirements into clear and practical actions for product and engineering teams
- Improve the security request process between FinTech and Cybersecurity teams
- Maintain dashboards, trackers, or reports for security delivery status
Escalate delays, ownership issues, and critical risks when needed
- Support the central Cybersecurity team with operational, coordination, or documentation tasks when capacity allows

Our benefits to you:
🍀 An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance, and more
🤝🏻 A great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset, is guaranteed
🧑🏻‍💻 Modern corporate equipment based on macOS or Windows, and additional equipment is provided
🏖️ Paid vacations, sick leave, personal event days, days off
💵 Referral program — enjoy cooperation with your colleagues and get a bonus
📚 Educational programs: regular internal training sessions, compensation for external education, attendance at specialized global conferences
🎯 Rewards program for mentoring and coaching colleagues
✈️ In-house Travel Service
🦄 Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie/book/pets lovers, and more
🎳 Other benefits could be added based on your location