Jobs Security

The Role

The Security Engineer starts primarily in managed detection and response (MDR). On a normal day, the focus is detecting, investigating, and responding to security events. When project work requires additional engineering capacity, the engineer may be moved to support project work. When a significant cybersecurity incident occurs - whether for a client or internally - incident response becomes the priority and the broader security team participates as needed, regardless of normal schedules.

What You Will Do

• Investigate security alerts and events and determine whether activity is benign, suspicious, or requires escalation.
• Participate in detection and response operations, including guided containment and remediation decisions.
• Analyze security issues and recommend remediation or configuration changes; early in the role, changes are performed under guidance rather than independently.
• Work with logs and telemetry from endpoints, operating systems, networks, identity systems, cloud environments, and security platforms.
• Participate in client and internal cybersecurity incidents as part of the incident response team.
• Contribute to cybersecurity projects when assigned, learning the required technology as part of the project.
• Analyze internal and client security environments and make practical security recommendations under guidance.
• Grow into broader engineering responsibilities as your technical capability and interests develop.

Core Technical Foundation

We do not expect one person to know every security product. We care more about a strong technical foundation and the ability to understand how technologies fit together.

• Strong understanding of TCP/IP and computer networking. Networking knowledge is fundamental to this role.
• Intermediate knowledge of Windows and Linux administration and security, including how systems are secured and hardened without relying only on security tools.
• Solid understanding of core cybersecurity concepts, threats, controls, detection, and response.
• Working understanding of firewalls, network perimeter security, and modern security architecture concepts such as Zero Trust.
• Ability to reason through unfamiliar technical problems and learn new technologies quickly.
• Prior security operations, systems administration, network administration, or security engineering experience.
• Experience with any SIEM, EDR/XDR, log collection, or security monitoring platform.
• Active Directory, Microsoft Entra ID, identity management, or identity security experience.
• Cloud infrastructure or cloud security experience.
• Communication is in English – B1+ English level is required

Experience That Is a Plus

• Scripting or automation experience, such as PowerShell, Python, or similar technologies.
• Relevant technical certifications. Strong certifications in foundational technologies are valuable; we do not require a specific cybersecurity certification.

What Matters Most

• Responsibility and ownership – you take ownership of assigned work, follow it through to completion, communicate when something is blocked or unclear, and make sure important issues do not fall through the cracks.
• Curiosity - when something looks unusual, you want to understand why.
• Creativity - you can think beyond a checklist when an investigation does not follow an obvious path.
• Investigative mindset - you keep digging until the situation is understood and you are comfortable that the environment is secure.
• Attention to detail - small technical details can change the meaning of a security event.
• Learning ability - how quickly you comprehend new technologies and apply what you learn will directly influence how quickly you grow.
• Initiative and engagement - you are interested in the technology and the problem, not simply completing a queue of assigned tasks.

Training and Career Growth

This is a growth-oriented position. The initial concentration is detection and response. From there, the career path is not predetermined. We want to develop each engineer around both capability and passion. Someone with strength in scripting and automation may grow in that direction; another engineer may become stronger in infrastructure, cloud, incident response, security engineering, projects, or client-facing work. With sufficient growth, the path can lead to senior engineering, project leadership, client management, and potentially virtual CISO responsibilities.

Working Model

• Fully remote position.
• Aligned with U.S. working core hours (9 am to 5 pm EST/EDT).
• Detection and response is a 24x7 company function; over time, shifts may become more flexible based on team coverage and what works for the engineer.
• Significant cybersecurity incidents are treated as team events and may require participation outside the normal schedule.
• Client communication is not expected from day one; it can become part of the role as the engineer develops.
• No travel requirement.

Domain: Waste Management
Client: UK-based client
Location: Remote
Employment Type: Contract
Project: Dashboard Development & Data Analytics

About the Role

We are looking for a DBT & QuickSight Analyst to help turn existing beta dashboards into a polished, production-ready reporting product for a client in the Waste Management domain.

You will work with existing Amazon QuickSight dashboards, improving their functionality, fixing reported issues, and developing a standardized suite of dashboards with Basic and Premium tiers. The dashboards will provide business insights into revenue and costs, work types, customer performance, tonnage moved, and operational processes.

Most of the data is already modeled in Snowflake, so your main focus will be on building aggregated reporting tables in dbt and ensuring the dashboards deliver accurate, reliable, and meaningful insights.

Responsibilities

• Develop and maintain Amazon QuickSight dashboards for production release.
• Create standardized dashboard packages for Basic and Premium offerings.
• Build aggregated reporting tables in dbt on top of existing Snowflake models.
• Develop datasets, calculated fields, and SPICE configurations in QuickSight.
• Implement and maintain row-level security to ensure appropriate data access.
• Analyze and fix bugs reported by clients in existing dashboards.
• Aggregate and transform data to support business reporting and analytics.

• Collaborate with the team using Git/GitHub and follow established development workflows.

   

Requirements

• Strong hands-on experience with Amazon QuickSight, including datasets, SPICE, calculated fields, and row-level security.
• Solid SQL skills and experience writing queries for analytical reporting.
• Practical experience with dbt for data transformation and modeling.
• Experience building aggregated datasets or reporting tables for BI dashboards.
• Familiarity with Git/GitHub and version control workflows.

• Ability to troubleshoot existing dashboards and ensure data accuracy.

   

Nice to Have

• Experience working with Snowflake.
• Experience developing business intelligence solutions focused on financial and operational metrics.

• Understanding of dashboard productization, including standardized reporting packages and tiered feature offerings.

   

Project Scope

The project focuses on improving and productizing existing dashboards for a UK-based client in the Waste Management domain, using data already available in the current data platform. No integration of additional external data sources is required.

We are looking for a Threat Intelligence Analyst to join our cybersecurity team and strengthen the company’s proactive defense capabilities.

This role combines cyber threat intelligence, proactive investigations, and risk-oriented analysis. We are looking for a specialist who can identify emerging threats, analyze attacker behavior and TTPs, assess their relevance to the business environment, and help improve the organization’s detection and response capabilities.

You will work closely with SOC, IT, and Risk Management teams to transform threat intelligence into actionable security insights and recommendations.
 

Responsibilities

• Collect, analyze, enrich, and contextualize cyber threat intelligence from multiple sources, including OSINT, CERTs, vendors, and industry feeds
• Monitor emerging threats, attacker activity, vulnerabilities, and adversary TTPs relevant to the organization
• Conduct proactive threat hunting activities across SIEM, EDR/XDR, cloud environments, and other telemetry sources
• Develop and validate hypotheses based on threat intelligence and behavioral patterns
• Support investigations related to incidents, suspicious activity, and threat intelligence findings
• Identify gaps in detection and response capabilities and provide recommendations for improvement
• Assess potential business impact and risk associated with identified threats
• Prepare analytical reports, threat assessments, and actionable recommendations for technical and non-technical stakeholders
• Collaborate with SOC and IT teams to improve detection logic, monitoring, and security processes
   

Requirements

• 2+ years of experience in Threat Intelligence, Threat Hunting, SOC L2/L3, DFIR, or Incident Response
• Strong understanding of MITRE ATT&CK framework
• Hands-on experience with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, etc.)
• Experience working with EDR/XDR solutions
• Understanding of cyber threat intelligence processes and proactive threat hunting methodologies
• Strong analytical and investigative skills
• Ability to work with incomplete or ambiguous information
• Understanding of security risks and attack vectors
• Strong communication skills and ability to explain technical findings clearly
   

Nice to have

• Experience with Purple Team activities
• Understanding of cloud security (Azure / AWS / GCP)
• Experience with KQL, Python, Sigma, or detection engineering
• Experience with threat modeling or risk management processes
• Familiarity with automation and detection-as-code approaches

ABOUT FIRST CRYPTO EXCHANGE 

First Crypto is a VARA-licensed OTC broker-dealer in Dubai serving individual and institutional clients. We are building our own platform for digital assets and fiat payments, including an OTC desk, web client, and mobile app.

FCE is committed to building a trusted, well-governed exchange, combining robust market infrastructure with strong financial controls, regulatory compliance, and operational transparency.
 

JOB OVERVIEW

We are looking for a Platform & Security Operations Engineer (DevSecOps) to own and develop our production infrastructure, cloud-native platform, and security operations.

The key objective of this role is to ensure the reliability, scalability, and security of FCE's production environment while strengthening infrastructure automation, security monitoring, incident response, and compliance readiness.

You will work closely with the CTO and a small, experienced engineering team, taking ownership of critical infrastructure and security initiatives in a regulated digital asset environment where reliability and security are essential.
 

KEY RESPONSIBILITIES

• Own and maintain production infrastructure and Kubernetes clusters, ensuring reliability, availability, scalability, and security.
• Develop and maintain infrastructure as code using Terraform and Terragrunt, covering networking, data infrastructure, and identity management.
• Build, maintain, and improve GitOps workflows and infrastructure delivery processes.
• Design and implement security monitoring, including alerts, detection rules, and tuning to reduce false positives.
• Develop incident response runbooks and establish on-call procedures.
• Respond to production and security incidents, investigate root causes, coordinate remediation, and conduct postmortems.
• Improve CI/CD pipelines and strengthen software supply chain security.
• Implement security scanning for dependencies and container images, as well as artifact signing and verification.
• Establish and maintain infrastructure standards, technical documentation, operational procedures, and security guidelines.
• Prepare technical evidence and documentation to support external audits and demonstrate the effectiveness of infrastructure and security controls.
• Continuously improve platform security, operational resilience, and incident detection and response capabilities.
• Leverage AI-assisted development tools where appropriate, critically reviewing generated code and configurations before deployment.
   

QUALIFICATIONS & SKILLS

• Strong hands-on production experience with Kubernetes, including cluster upgrades, workload identity, network policies, autoscaling, and incident investigation.
• Practical experience with Terraform and Terragrunt for infrastructure provisioning and management.
• Experience with Atlantis or similar tools for managing and reviewing infrastructure changes.
• Hands-on experience implementing GitOps workflows using Flux, Argo CD, or equivalent tools.
• Deep knowledge of AWS, including VPC, multi-AZ architecture, KMS, OIDC federation, and DNS.
• Practical experience with security monitoring and detection engineering, including alerting, detection rule development, and false-positive reduction.
• Experience designing and maintaining secure CI/CD pipelines and implementing software supply chain security controls.
• Experience with dependency and container image scanning, artifact signing, and verification.
• Experience supporting external security and compliance audits, such as ISO 27001, SOC 2, PCI DSS, HIPAA, or equivalent frameworks.
• Proven experience operating production systems where failures or security breaches can result in significant financial losses or regulatory consequences.
• Experience developing incident response procedures, conducting root-cause analysis, and documenting postmortems.
• Experience using AI-assisted development tools and the ability to critically evaluate AI-generated code and configurations.
• Strong problem-solving skills, ownership mentality, and the ability to work independently on critical infrastructure.
• English proficiency at C1 level or above.
   

WOULD BE A PLUS

• Experience in cryptocurrency, digital assets, fintech, banking, payments, or other regulated financial services.
• Familiarity with virtual asset regulatory requirements and the compliance expectations of regulated financial institutions.
• Experience operating security-critical infrastructure for financial platforms or systems handling sensitive financial data.
• Experience implementing security controls aligned with multiple compliance frameworks.
• Experience with workload security, cloud security posture management, secrets management, and identity and access management.
• Experience building security operations processes and establishing on-call rotations in a growing engineering team.
   

WORKING CONDITIONS & BENEFITS

1. Location: Dubai, UAE, with a hybrid working arrangement and regular office presence. Relocation could be considered.
2. Employment Type: Full-time, permanent contract.
3. Reporting Line: Direct reporting to the CTO.
4. Compensation: Competitive compensation based on experience.
5. Vacation: 20 working days per year.
6. Sick Leave: 10 days per year.
7. Days Off: 5 days per year.
8. Public Holidays: 8–10 days per year, depending on the holiday calendar of different countries.
9. Engineering Environment: Work with a small, highly skilled engineering team and modern cloud-native infrastructure without legacy systems.
10. Ownership & Impact: High autonomy and direct influence on infrastructure architecture, security standards, and engineering decisions.

Our partner is a fast-growing algorithmic trading and fintech company with a proven track record of exceptional results. They delivered annual returns of 60–100%. Current AUM stands at $15M, with an additional $20M from a prominent Hong Kong-based fund in advanced discussions. Their proprietary platform processes up to 12,000 messages per second via WebSocket, generates ~4,000 trading signals annually (75% profitable), and operates across Binance and Bybit futures markets — with active plans to scale further.
 

Main Responsibilities

– Develop and implement sophisticated algorithms for automated trading across financial markets
– Research and backtest new trading strategies using historical and real-time data
– Build mathematical and statistical models for risk assessment and market movement prediction
– Analyze and optimize existing strategies to improve performance and cost-effectiveness
– Collaborate closely with developers and engineers to integrate trading algorithms into the production system
– Conduct stress testing of strategies and adapt them to rapidly changing market conditions
– Monitor live trading performance, debug issues, and ensure strategy resilience
– Contribute to the development of a scalable, high-performance system architecture
 

Mandatory Requirements

Must have:

– 5+ years of experience in algorithmic trading, financial analysis, or quantitative modeling
– Deep understanding of financial markets, trading theories, and algo trading principles
– Strong expertise in probability theory, statistics, and mathematical modeling
– Proficiency in Python and/or Go; familiarity with Pandas, NumPy, scikit-learn
– Hands-on experience with live data feeds, exchange APIs, and financial platforms
– Proven ability to develop and test trading strategies using statistical methods

Nice to have:

– Experience with Binance, Bybit, or similar crypto exchanges
– Knowledge of HFT techniques and algorithm optimization
– Familiarity with ML methods for forecasting and classification
– Experience with distributed systems or high-performance computing; knowledge of Rust or C++
 

We offer

– Performance bonuses — percentage of profits generated by your strategies + milestone incentives for development and optimization
– Professional development — sponsorship for CFA/FRM/CQF certifications, access to industry conferences and internal training programs
– Cutting-edge tools — high-performance servers, GPU clusters, proprietary backtesting infrastructure, premium datasets and APIs
– Flexible remote work — fully remote to start, with a future office in Europe; flexible hours aligned with global markets
– Growth opportunity — join at a pivotal stage of expansion: five major exchanges, U.S. market entry, $35–40M capital raise in progress, and a sub-fund being established under a leading Hong Kong partner

N-iX is a global software development service company that helps businesses across the globe create next-generation software products. Founded in 2002, we unite 2,400+ tech-savvy professionals across 40+ countries, working on impactful projects for industry leaders and Fortune 500 companies. Our expertise spans cloud, data, AI/ML, embedded software, IoT, and more, driving digital transformation across finance, manufacturing, telecom, healthcare, and other industries. Join N-iX and become part of a team where your ideas make a real impact.

We are looking for a Junior Cybersecurity Administrator to join our team and contribute to maintaining and improving our information security processes.

Responsibilities

• Assist in maintaining and improving the company's information security processes.
• Monitor security events, perform initial alert triage, and support security incident investigations.
• Support the development and improvement of security detection rules and monitoring capabilities.
• Assist with vulnerability management, including vulnerability analysis and tracking.
• Support endpoint security processes and related activities.
• Participate in security assessments, configuration reviews, and compliance activities.

• Document security findings, identified issues, and remediation recommendations.

   

Requirements

• Basic understanding of information security principles, including the CIA Triad, least privilege, defense in depth, and Multi-Factor Authentication (MFA).
• Basic knowledge of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, VPNs, and firewalls.
• Knowledge of Windows, macOS, and Linux operating systems, including user permissions, processes, services, and system logs.
• Understanding of authentication, authorization, Identity and Access Management (IAM), and access control principles.
• Understanding of common cybersecurity threats, including phishing, malware, credential theft, brute-force attacks, and privilege escalation.
• Basic understanding of security logging, monitoring, SIEM solutions, and incident response processes.
• Basic knowledge of web application security and common vulnerabilities covered by the OWASP Top 10.
• Intermediate level of English.
• Strong analytical and problem-solving skills, with attention to detail and a willingness to learn new technologies.

• Ability to independently research technical issues and clearly document findings.

   

We offer*:

• Flexible working format - remote, office-based or flexible
• A competitive salary and good compensation package
• Personalized career growth
• Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
• Active tech communities with regular knowledge sharing
• Education reimbursement
• Memorable anniversary presents
• Corporate events and team buildings
• Other location-specific benefits

*not applicable for freelancers

Who We Are 

PAR Retail, with its Open Commerce® product suite and patent pending Wallet Steering® System, empowers Convenience & Fuel Retailers to gain more share of wallet and customer lifetime value than possible with any other solution provider. PAR Retail’s unified Open Commerce product suite consists of: Activate for Intelligent 1:1 Loyalty, Transact for Contactless Commerce, and Experience for Cross-Channel Customer Experiences. PAR Retail’s solutions are supported by a set of subscription-based program management services and are contractually backed by its 1.5X Performance Guarantee. 

Requirements:  
- Operational knowledge of modern operating systems and networking; 

- Experience with common cloud services: AWS, GCP, and Azure; 

- Network Security and expertise in network pentesting; 

- Security testing of web applications, web services, mobile apps (hybrid and native), and IT infrastructure; 

- Understanding security certifications (PCI DSS / SOC2); 

- Ability to apply modern Application Security methodologies and frameworks; 

- Ability to use at least one modern programming language; 

- Practical experience with Burp Suite; 

- Experience with IDS, IPS, SIEM configuration; 

- Upper-intermediate English level. 

Responsibilities:  

- Requirements analysis, performing penetration testing and security audit; 

- BE, WEB, cloud and mobile clients testing; 

- Vulnerability reporting and remediation process; 

- Communication with development and project management teams; 

- Prepare security testing reports; 

- Prepare and support internal documentation for the project. 

PAR Retail Offers: 

- Long-term employment; 

- Competitive compensation with regular performance-based salary and career development reviews; 

- Paid vacations and sick leaves; 

- Health insurance program; 

- Flexible working hours; 

- Sponsored company educational program, corporate library; 

- Funny celebrations, team outings, and company events; 

- A unique and friendly environment where everyone can explore and learn new technologies. 

We are looking for a Head of Security Operations Center to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection, investigation, containment, and exposure reduction. You will lead our security operations function, making the organization faster in responding to threats while continuously improving controls across the attack surface.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging
• Hands-on experience with at least one enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response
• Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences
• English - Upper-Intermediate or higher

Will be a plus

• Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes
• Hands-on background as a SOC analyst, incident responder, or detection engineer prior to moving into management
• Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one
• Familiarity with threat intelligence platforms and threat-informed defense methodologies
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH) or equivalent

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for an experienced CSO (Chief Security Officer) to oversee the development of protective operations and threat mitigation practices within an international business environment.

This role is focused on anticipating potential disruptions, evaluating organizational exposure, coordinating responses to complex situations, and ensuring that protective measures evolve alongside business needs.

The position requires a combination of strategic judgment, operational leadership, investigative thinking, and the ability to navigate sensitive matters involving multiple stakeholders.

To join the team you need:

• 5+ years of experience in security, protective operations, threat assessment, risk consulting, or related disciplines.
• Background in international organizations with complex operational structures.
• Strong analytical judgment, discretion, and decision-making capabilities.
• English proficiency at B1 level or above.
• Experience developing operational methodologies and implementing new organizational practices.
• Strong ability to assess ambiguous situations, evaluate evidence, and formulate practical recommendations.
• Familiarity with incident coordination, protective procedures, and confidential case handling.

• Experience working with external specialists and coordinating cross-functional initiatives.

   

Your role will be:

• Develop and implement protective strategies, operational procedures, and risk assessment methodologies.
• Evaluate potential threats, identify vulnerabilities, and introduce preventive measures.
• Coordinate incident reviews, assess findings, and oversee appropriate follow-up actions.
• Strengthen safeguards for critical resources, confidential materials, and sensitive business processes.
• Assess external exposure and evaluate potential risks associated with business partners.
• Collaborate with internal teams to improve operational preparedness and protective standards.
• Manage external specialists and coordinate support for complex situations.
• Build the team, define performance indicators, and establish long-term development priorities.
• Prepare assessments and recommendations for senior leadership.
• Develop a structured roadmap for improving operational resilience

Perks & Benefits:

• Competitive salary and benefits package
• Opportunity to work in a dynamic, innovative, and growing industry
• Remote work flexibility
• A collaborative and inclusive work environment
• Professional growth opportunities in a rapidly evolving sector
• Paid vacation and sick leaves

About the product

Our client is a US-based healthcare technology company that develops medical-device technology and provides remote cardiac monitoring services. Its environment combines connected medical devices, cloud software, and clinical workflows, with a strong focus on service reliability, patient-data security, and regulatory compliance.

Technology stack

AWS: IAM, Identity Center, EC2, VPC, S3, RDS/Aurora, CloudWatch, CloudTrail, GuardDuty, Inspector, KMS, Systems Manager, Secrets Manager

Microsoft: Microsoft 365, Entra ID, Intune, Windows Autopilot, Microsoft Defender

Systems: Windows and Linux administration

IaC and automation: Terraform and/or CloudFormation, PowerShell, Python or Bash, Microsoft Graph and AWS APIs

Security platforms: Cloudflare Zero Trust, Purview, MDR platforms

Fundamentals: networking, DNS, TLS, identity, logging, cloud security

Your team

You will be part of the security function of a US-based company and will report directly to the CISO. On a daily basis, you will work with the DevOps team and with colleagues from software engineering, Corporate IT, Clinical Operations, and Quality/Regulatory. Your shift covers the hours when the US team is offline, so you will own your coverage window and hand over to the US Central team with clear, written updates.

Culture

We are committed to implementing high standards in the technology industry, and it is the fundamental mission of our work. To achieve this goal, the company and all its members are constantly evolving.

Each of us has the opportunity to contribute to the product, the company, the team, the industry, and our personal development. At Techstack, you have the option to choose from various growth opportunities that align with your interests:

- meetups, where you can share your knowledge and develop simultaneously by sharing your experiences within the company and local technical communities;

- roles such as a mentor or a technical lead. In any of these roles, you will assist junior professionals and share your knowledge and experiences with them.

- participation in our technical Guilds, where you can discuss technical solutions, approaches, and industry trends.

All of these elements contribute to shaping the culture and expertise within both our team and the company as a whole.

Your responsibilities

• Operate, secure, and troubleshoot AWS infrastructure across multiple accounts.
• Administer Microsoft 365, Entra ID, Intune, Defender, Exchange Online, Teams, SharePoint, and OneDrive.
• Manage identity, access, endpoint compliance, and secure SaaS integrations.
• Monitor security and service health, investigate alerts, and coordinate incident response.
• Support backup, recovery, patching, capacity management, and infrastructure as code.
• Maintain controls and audit-ready evidence for HIPAA, SOC 2, HITRUST, and other regulatory requirements.
• Create automation, operational documentation, and runbooks.
• Prepare clear handoffs to the US team at the end of each shift.
• Participate in planned maintenance.

It's about you

• Experience working in a SOC 2-compliant organization, including at least one audit or assessment cycle.
• Hands-on experience with MDR/SIEM tools.
• Experience with tools similar to Cloudflare Zero Trust.
• Hands-on AWS administration (AWS should be your strongest platform).
• 5+ years of experience in infrastructure engineering, systems administration, cloud operations, or security operations, with independent ownership of production systems.
• Working-level experience with Microsoft 365 and Entra ID, plus a basic understanding of Intune.
• Experience with Windows endpoints and Windows/Linux servers.
• Strong troubleshooting skills across cloud infrastructure, networking, identity, and security.
• Experience with incident response, endpoint security, vulnerability management, and patching.
• Strong PowerShell and practical Python or Bash skills.
• Good written English, independent ownership, and effective remote collaboration.
• Ability to learn fast and fill knowledge gaps on your own.
• Will be a plus:
• Knowledge of HIPAA and HITRUST practices.
• Hands-on experience with Cloudflare Zero Trust and Purview.
• Deeper Intune and Windows Autopilot experience.
• Terraform and/or CloudFormation.
• Experience in healthcare, medical devices, or another regulated industry.

What we have for you

Stable and long-term position in an experienced team.

Broad opportunities for professional and career growth, including professional challenges that encourage personal development, meetups, hackathons, professional communities, and more.

Horizontal connections and the absence of micromanagement foster a collaborative environment in which all team members are accessible to one another for any concerns.

Hubs in Kharkiv, Kyiv, Lviv, and Wrocław (Poland), or everything necessary for remote work.

Up to 50% compensation for the cost of educational courses and conferences to support professional development.

Free English language and business English courses.

20 days off and 7 sick days to support your health and well-being.

Legal and accounting support.

Appreciation gifts for significant events and occasions.

How to join Techstack

• Pre-screening with a recruiter.
• Review of your resume by experts.
• English check.
• Interview with our experts.
• Interview with our client.
• Technical test task (optional).

About us

Techstack is a technology product engineering company that sets an example for high development standards in the IT industry. We empower each team member to influence the development of the product, company, and processes.

Learn more about Techstack

We are inviting you, a highly motivated and results-oriented Security Operations Analyst to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success.

Responsibilities

• Monitor prioritized alert queues and validate whether alerts indicate real risk
• Enrich cases and correlate relevant endpoint, identity, authentication, network, service, asset, user, timeline, and business context
• Perform initial investigations, classify alerts, assess preliminary severity and scope, and document the evidence and reasoning in the case-management system
• Close false positives and execute approved low-risk actions only through defined runbooks
• Escalate suspected incidents, privileged-account issues, and high-impact or production-impact cases to L2, the manager, or Incident Response
• Maintain clear handover notes and support improvements to case quality and runbooks

Requirements

• At least 1+ year hands-on experience with security alert triage through work, including use of at least one SIEM and exposure to EDR or XDR and case-management workflows
• Ability to build basic searches or queries, filter security events, and correlate related activity across more than one data source (Experience with basic SIEM query languages such as KQL, EQL)
• Ability to interpret common endpoint, identity, authentication, network, DNS, HTTP, and service or cloud audit telemetry at an initial-investigation level
• Working fundamentals of Windows and Linux, TCP/IP, DNS, HTTP, authentication, access control, and common attack patterns such as phishing, credential abuse, malware execution, and suspicious account activity
• Ability to distinguish true positives, false positives, and benign activity; assign a preliminary severity; identify affected users or assets; and recognize when scope or impact is uncertain
• Basic use of indicators of compromise, reputation sources, and threat-intelligence context, with awareness of the MITRE ATT&CK framework
• Ability to create a concise investigation timeline and document evidence, actions, conclusions, and handover or escalation notes in a case-management system

Will be a plus

• Simple Python or PowerShell scripts for investigation and enrichment
• Exposure to cloud, email-security, or SaaS audit logs and common phishing-investigation workflows
• Practical cybersecurity labs or an entry-level certification such as Security+ or CySA+
• Experience with MacOS

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company's approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies.

We are looking for a Middle SecOps Engineer!  

Requirements: 
- 2+ years of professional experience in Security Engineering, Infrastructure Security, Cloud Security, DevSecOps, or a related role.
- Strong understanding of infrastructure and network security principles, including network segmentation, firewalls, access control, TLS, secure network configuration, and service-to-service
communication.
- Practical experience with Linux systems security and hardening.
- Experience conducting security audits, configuration reviews, vulnerability assessments, or compliance assessments.
- Good understanding of CIS Benchmarks and security hardening principles.
- Experience with vulnerability management, including vulnerability validation, prioritization, remediation tracking, and risk-based decision making.
- Experience with security monitoring / SIEM / security analytics tools.
- Understanding of security incident response processes and basic incident investigation techniques.
- Understanding of patch management and operating system vulnerability remediation processes.
- Experience with cloud infrastructure security, preferably AWS.
- Understanding of Kubernetes security and container security principles.
- Ability to read and understand infrastructure configurations, logs, security findings, and network flows.
- Basic understanding of Infrastructure as Code and security implications of infrastructure changes.
- Good understanding of security controls and their practical implementation rather than purely theoretical knowledge.
- English sufficient for reading technical documentation and communicating with international teams. 

Will be a plus:
- Experience with OpenStack security.
- Experience automating security checks and operational processes using Python, Bash, or similar scripting languages.
- Experience integrating security controls into CI/CD pipelines. 

Responsibilities: 
- Infrastructure Security Monitoring — continuously monitor infrastructure for security events, anomalies, misconfigurations, and potential threats.
- Infrastructure Security Audits — plan and conduct regular security audits of infrastructure, cloud environments, operating systems, networks, and security controls.
- CIS Compliance & Hardening Assessment — assess infrastructure against CIS Benchmarks and internal security baselines, identify gaps, and drive remediation.
- Vulnerability Management — monitor infrastructure vulnerabilities, validate findings, prioritize remediation based on risk, and track remediation progress.
- Security Findings Triage & Escalation — triage findings from security tools, audits, and monitoring systems; validate their severity and escalate critical issues according to defined SLAs.
- Security Posture Management — continuously assess and improve the security posture of infrastructure and track security improvement initiatives.
- Security Standards & Baseline Compliance — ensure infrastructure complies with approved security standards, baselines, and security requirements.
- Security Control Validation — verify that implemented security controls are properly configured and effectively mitigate the intended risks. 
- Security Risk Identification & Reporting — identify infrastructure security risks, assess their potential impact, and provide clear reports and recommendations to stakeholders.
- Data Security — ensure appropriate infrastructure-level controls are implemented to protect sensitive and business-critical data.
- Patch Management Monitoring & Compliance — monitor patch management processes, identify overdue or missing security updates, and work with infrastructure teams to ensure
timely remediation.

Our benefits to you:

☘️An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance, and more

🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed

🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided

🏖Paid vacations, sick leave, personal events days, days off

💵Referral program — enjoy cooperation with your colleagues and get the bonus

📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences

🎯Rewards program for mentoring and coaching colleagues

✈️In-house Travel Service

🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more

🎳Other benefits could be added based on your location 

About the project:
Build the core data engineering capability that enables AI agents, analytics products, and business workflows to securely discover, access, combine, govern, and activate data across enterprise systems, client environments, media platforms, and third-party providers.

We are seeking a senior engineering specialists who will be responsible for implementation and delivery of key platform capabilities. While architecture leadership is provided by the platform architecture team, this specialist is  expected to bring deep expertise, contribute to solution design, challenge assumptions, and guide implementation decisions based on industry experience.

Job Description

• Implement governance, security, compliance, and commercial control capabilities across the platform.
• Strong experience with SQL, Python, and cloud-based platforms like AWS, GCP, or Azure.
• Solid understanding of data modelling, pipelines and orchestration tools (Airflow, dbt, or similar).
• Familiarity with modern data ecosystems — e.g. Spark, Databricks, Snowflake, BigQuery or Redshift.
• Experience working with CI/CD, version control and testing best practices.
• A proactive approach to solving problems and improving systems.
• Excellent communication skills — you can translate technical concepts into language anyone can understand.
• A passion for data and how it can drive better decisions in media, marketing and beyond. 
• Experience with technologies and platforms such as
• Purview, Collibra, Alation, Immuta, Unity Catalog, Apache Ranger
  Enterprise identity and access management solutions
  Data lineage, audit, privacy, and compliance frameworks
  Governance and policy enforcement platforms
   

Job Responsibilities

• Implementing access controls and entitlement services
  Building policy enforcement capabilities
  Delivering lineage, audit, and monitoring solutions
  Supporting compliance, privacy, and commercial governance requirements
  Enabling secure data sharing across platforms and partners
  Providing governance expertise during platform implementation

About Come Back Agency & Client Position

Come Back Agency supports US software and technology companies by running their hiring process. We work with delivery and leadership teams to define roles, screen candidates, and manage interviews. Successful candidates are hired directly by the company and become part of its team.

This position is with a US-based software company providing custom development and AI implementation for North American clients. The team builds and maintains production software, including AI-enabled systems, and works in long-term client engagements. Team members operate as part of an internal, distributed team and collaborate directly with client stakeholders.

About the Role

As we scale our operations and infrastructure, we are looking for a hands-on DevOps / Platform Engineer who can design robust cloud environments, standardize infrastructure templates, and support our compliance readiness.

In this role, you will build automated end-to-end cloud infrastructure, manage multi-account AWS environments, support Kubernetes clusters, and collaborate on security hardening. You will also play a key role in supporting upcoming enterprise vendor reviews and compliance readiness (SOC 2 / ISO 27001) by gathering evidence, addressing security gaps, and utilizing cloud security mechanisms.

What You Will Do

• Cloud Architecture & Multi-Account Setup: Design, build, and maintain AWS infrastructure from scratch; standardize multi-account environments (AWS Organizations) and repeatable landing zones.
• Infrastructure & CI/CD: Manage Infrastructure as Code using Terraform and maintain scalable automated CI/CD pipelines (primarily GitHub Actions).
• Container Orchestration: Support and maintain production Kubernetes clusters (Amazon EKS).
• System Migration: Assist with migrating internal and client services/applications to AWS in alignment with security best practices.
• Security Hardening & Access Control: Implement least privilege access (IAM), secrets management, network isolation, and standard security practices across cloud environments.
• Compliance Readiness & Evidence Gathering: Support SOC 2 and/or ISO 27001 readiness by identifying security gaps, collecting audit evidence, and providing technical artifacts (using AWS Artifact, Security Hub, or integrated compliance tools).
• Observability & Incident Support: Standardize logging, monitoring, and alerting across environments to ensure full auditability and infrastructure reliability.
   

Requirements

• Experience: 2.5+ years of practical DevOps / Platform / Cloud Engineering experience managing cloud infrastructure.
• AWS & Infrastructure Design: Strong experience with AWS (IAM, VPC networking, compute, logging) and hands-on experience or familiarity with AWS Organizations and multi-account structures.
• Containers & Kubernetes: Hands-on experience managing and supporting production Kubernetes clusters (Amazon EKS).
• Infrastructure as Code (IaC): Solid experience writing and maintaining Terraform scripts.
• CI/CD: Practical experience configuring deployment pipelines from scratch (GitHub Actions preferred, or GitLab CI / Bitbucket Pipelines).
• Practical Security & Compliance: Familiarity with cloud security controls (IAM, encryption, vulnerability scanning) and practical experience with evidence collection and gap remediation for SOC 2 or ISO 27001 audits.
• Communication: B2+ English level (upper-intermediate or higher) for effective daily communication with US-based stakeholders and auditors.

Nice to Have

• Experience or familiarity with compliance automation platforms (e.g., Vanta, Drata, Secureframe, or AWS Security Hub).
• AWS Certifications (e.g., AWS Certified Solutions Architect, SysOps Administrator, or AWS Certified Security - Specialty).
• Experience with cloud application migrations.
   

What We Offer

• Working hours aligned with US time zones, typically 16:00–23:59 Kyiv time.
• Company-sponsored English lessons to support clear and confident communication.
• Paid vacation and sick days.
• Fully remote work model.
• Opportunities for professional growth and support with professional certifications.
• Structured, personalized onboarding to help you ramp up effectively.

Apply with your resume and a short note outlining your relevant experience. You can also submit it through our website at comeback.ua. Selected candidates will be contacted by Come Back Agency.

Ми — українська IT/marketing group із 4+ роками досвіду в iGaming та командою 250+ спеціалістів.

Зараз розвиваємо власний iGaming-продукт для Tier-1 ринків. Core-команда вже сформована, технічний roadmap визначений, продукт перебуває в активній розробці.

Шукаємо Platform Security Engineer / DevSecOps, який допоможе побудувати security-підхід платформи з нуля.

Це hands-on роль, а не pure compliance і не позиція standalone pentester. Ти працюватимеш на стику Platform Engineering, Cloud Security та DevSecOps, безпосередньо взаємодіючи з DevOps/SRE та engineering-командами.

Що буде у твоїй зоні відповідальності

Platform Engineering

• Проєктування та підтримка AWS/Kubernetes-платформи.
• Infrastructure as Code, CI/CD, environments, secrets, deployment workflows.
• Reliability, observability, scalability, backup/recovery та production readiness.
• Incident response, root-cause analysis та platform on-call.
• Створення reusable-рішень і стандартів для engineering-команд.

Security Engineering

• AWS та Kubernetes security baseline: IAM, network boundaries, secrets, audit logging, container security, privileged access.
• Інтеграція SAST, SCA, secret scanning, IaC scanning, container scanning та policy gates у CI/CD.
• Threat modelling для authentication, wallet/ledger, payments, game-provider integrations, callbacks та backoffice.
• Впровадження security-вимог на базі OWASP ASVS.
• Vulnerability management, remediation SLA та retesting.
• Security monitoring, detection logic та incident playbooks.
• Координація зовнішніх penetration tests і контроль remediation.

Purple Teaming & Automation

• ATT&CK-based adversary emulation та purple-team сценарії.
• Робота з MITRE CALDERA, Atomic Red Team та іншими security tools.
• Співпраця із Security Champions та engineering-командою.
• Участь у створенні внутрішньої AI-assisted security platform для threat modelling, control mapping, evidence collection та remediation tracking.

Що ми очікуємо

• 3+ роки комерційного досвіду в DevOps / Platform Engineering / SRE / Cloud Security / DevSecOps.
• Hands-on досвід з AWS, Kubernetes, Docker, Linux, networking, Infrastructure as Code.
• Практичний досвід із CI/CD, observability, IAM, secrets management та incident response.
• Розуміння cloud, container, API та application security.
• Досвід security scanning та vulnerability management.
• Вміння читати код і розуміти архітектуру сервісів.
• Досвід взаємодії з backend/frontend engineers.
• Прагматичний підхід до security: вмієш балансувати між безпекою, швидкістю delivery та бізнес-ризиками.
• Українська або російська — обов’язково, англійська — робоча.

Буде плюсом

• Досвід в iGaming, fintech, payments або regulated/high-risk environments.
• Wallet/ledger, payment providers, game providers, KYC/AML, backoffice security.
• OWASP ASVS, MITRE ATT&CK, threat modelling, CALDERA, Atomic Red Team.
• Purple teaming, detection engineering, incident simulations або pentest remediation.
• Kafka/RabbitMQ, PostgreSQL, Redis, microservices, Node.js/NestJS.
• Досвід із AI-assisted engineering/security tools.
• AWS, Kubernetes або security certifications.

Що пропонуємо

🏠 Relocation

• Повна допомога з релокацією до Братислави.

🚀 Розвиток

• Щорічний бюджет на курси, сертифікації та конференції.
• Топове обладнання на твій вибір.
• Сучасний engineering stack та AI-assisted workflow.
• Реальний ownership над security roadmap.
• Можливість створювати власні внутрішні security-рішення.

🌴 Wellbeing

• 28 календарних днів оплачуваної відпустки.
• Оплачуваний вихідний у день народження.
• 100% оплачуваний лікарняний.
• Гнучкий hybrid-формат.

🤝 Команда

• Senior engineering-команда з високим рівнем ownership.
• Мінімум бюрократії та мікроменеджменту.
• Пряма взаємодія з CTO, Tech Leads, DevOps/SRE та Product.
• Значні ресурси на розвиток платформи та security.

💰 Компенсація: конкурентна, за результатами переговорів.

Чому ця роль?

Тут security — не формальність і не пункт у checklist перед релізом.

Ти приєднаєшся до створення платформи ще до її запуску, матимеш реальний вплив на архітектуру та engineering-процеси й зможеш побудувати security-функцію так, щоб вона працювала в реальному продукті.