Jobs Security

Position Name: Senior SOC Analyst

Reports to: Team Lead, SOC

Location: Remote, Philippines

Role Overview

Atlas Technica's mission is to shoulder IT management, user support, and cybersecurity for our clients, who are hedge funds and other investment firms. Founded in 2016, we have grown year over year through our uncompromising focus on service.

We value ownership, execution, growth, intelligence, and camaraderie. We are looking for people who share our Core Values, thrive, and contribute to this environment while putting the customer first. At Atlas Technica, we offer a competitive salary, comprehensive benefits, and great perks to our global Team. We strive to maintain a professional yet friendly environment while promoting professional and career development for our Team Members. Join Atlas Technica now!

We are seeking a Senior SOC Analyst to support day-to-day security monitoring and alert triage.

Responsibilities

• Lead high-severity incident response
• Mentor junior analysts
• Improve detection logic and workflows
• Coordinate response across teams
• Conduct threat hunting
• Contribute to metrics and reporting
• Assist with documentation and training

Requirements

• Experience in SOC or incident response roles
• Strong analytical and investigative skills
• Experience with SIEM and EDR
• Ability to lead incidents effectively  

Desirable Qualities

• Experience in regulated or financial environments

• Threat hunting or detection engineering exposure

   

Atlas Technica is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

GR8_TECH builds B2B iGaming platforms for operators who play to lead.

We deliver full-cycle, high-impact tech designed to scale — from seamless integrations and expert consulting to long-term operational support. Our platform powers millions of active players and drives real business growth. Call it what it is: the iGaming Platform for Champions.

With 1000+ GR8 people across locations and time zones, we don’t just ship technology — we help operators build success stories across brands, markets, and geos.

Our ambition drives us. Our people make it real.

If you’re a challenger in spirit and a champion in action — join us.
 

Why this role exists:

This role exists to scale, secure, and automate our user access management infrastructure, ensuring zero-trust integrity at high velocity. You’ll help us protect our core IT ecosystem by eliminating manual access workflows, driving identity governance, and meeting strict operational SLAs.
 

What you’ll drive:

Strategy & outcomes

• Enhance information security measures by conducting regular access audits for compliance with PCI DSS and ISO 27001 requirements.
• Measure and track operational SLAs, proactively fixing bottlenecks in the request pipeline to ensure high internal customer satisfaction.
• Participate in the optimization of operational processes by driving automation.

Discovery & decisions

• Validate and define role models across corporate systems, continuously identifying and correcting access anomalies or inconsistencies.
• Map and translate complex compliance and technical requirements into clean, automated access workflows.
• Partner with cross-functional teams to onboard new corporate systems into the centralized Access Flow platform.

Delivery & execution

• Deploy automation scripts (PowerShell, Bash) to eliminate repetitive data analysis tasks.
• Work with large volumes of data and utilize complex formulas within Google Spreadsheet.
• Process complex, escalated access tickets swiftly and securely, serving as the ultimate gatekeeper for critical permissions.
• Build and update comprehensive internal documentation for procedures, role definitions, and access frameworks.
   

What makes you a GR8 fit:

Must-have:

• 2+ years of hands-on experience in IT Security, IAM, or related technical roles (QA/AQA, IT Operations/Systems Administration, L2/L3 Support with a similar scope of tasks).
• Strong technical mastery of enterprise identity tools (e.g., Okta, CyberArk, Active Directory, PAM, and SSO solutions).
• Basic scripting skills (Bash, PowerShell, or Python) explicitly used for automating identity workflows or security tasks.
• Basic understanding of the requirements of PCI DSS and ISO 27001.
• Deep understanding of core access control principles, RBAC structures, and authentication methods.
• SLA-driven mindset with a track record of handling high-volume operational tickets without compromising security or accuracy.
• Clear communication style—able to translate rigid technical security policies into clear, non-technical steps for internal users.
• Fluency in Ukrainian or Russian; Intermediate+ level of English.
   

Nice-to-have:

• Familiarity with cloud security concepts and identity governance within AWS, Azure, or GCP.
• Experience configuring or troubleshooting custom Access Flow / IAM orchestration platforms.
• Relevant industry certifications (e.g., CompTIA Security+, Okta Certified Professional, or Microsoft Identity and Access Administrator).
   

Why you’ll love working here: 

Benefits Cafeteria — annual budget you allocate to:

Sports • Medical • Mental health • Home office • Languages.

Work-life & support

• Paid maternity/paternity leave + monthly childcare allowance.
• 20+ vacation days, unlimited sick leave, emergency time off.
• Remote-first + tech support + coworking compensation.
• Team events (online/offline/offsite).
• Learning culture with internal courses + growth programs.
   

Our culture & core values:

GR8_TECH culture is how we win — through trust, ownership, and a growth mindset. We move fast, stay curious, and keep it real, with open feedback, room to experiment, and a team that’s got your back.

FUELLED BY TRUST: we’re open, honest, and have each other’s backs.

OWN YOUR GAME: we take initiative and own what we do.

ACCELER8: we move fast, focus smart, and keep it simple.

CHALLENGE ACCEPTED: we grow through challenges and stay curious.

BULLETPROOF: we’re resilient, ready, and always have a plan.

Job Description

Join the Wix security team as a SOC Analyst and help protect our global platform. This role focuses on incident analysis, threat hunting, and security automation within our large-scale, hybrid-cloud environment. You'll work alongside security experts to defend against modern threats.

Key Responsibilities

• Incident Management: Manage the full incident lifecycle from detection to resolution.
• Security Automation: Build and maintain SOAR playbooks to reduce manual work and improve detection.
• Threat Hunting: Proactively hunt for threats across our networks and endpoints using a hypothesis-driven approach.
• Team Collaboration: Partner with Incident Response and Engineering to enhance our security posture.

Requirements

• 1+ years of experience in the cyber security field (e.g., SOC, incident response, or similar security roles).
• Hands-on expertise with modern security tools like SIEM, EDR, and SOAR.
• Strong investigative skills with a deep understanding of core cybersecurity concepts.
• Experience securing complex hybrid-cloud environments (AWS, GCP, or Azure).
• Excellent analytical and communication skills.
• Willingness to cover occasional off-hours shifts as part of our 24/7 follow-the-sun team.
• Relevant security certifications (e.g., GIAC, HTB CDSA, THM SAL) are a plus.

About Wix

Wix makes it possible for anyone to succeed online. 

Since 2006, we've grown to around 4,400 employees in 22 countries, launched over 40 products, and serve over 299 million users and their visitors worldwide. 

At Wix, we push you to innovate and evolve in non-traditional ways. We operate in collaborative, high-performing teams, building cutting-edge products and leveraging AI to redefine how our users create, manage and grow their dreams online.

Although we're already industry leaders in web creation and business, our work is nowhere near done. Our goal is to become the main engine of the Internet so we can create a more open web for all.

We're proud to be an equal opportunity company. Wix was built around the idea that everyone has the right to be successful, online. This same vision defines us as an employer: creating a work environment where everyone is welcome, and anyone has the right to succeed.

We are looking for a Cyber Defense Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection, investigation, containment, and exposure reduction. You will lead our security operations function, making the organization faster in responding to threats while continuously improving controls across the attack surface.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging
• Hands-on experience with at least one enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response
• Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences
• English - Upper-Intermediate or higher

Will be a plus

• Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes
• Hands-on background as a SOC analyst, incident responder, or detection engineer prior to moving into management
• Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one
• Familiarity with threat intelligence platforms and threat-informed defense methodologies
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH) or equivalent

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a Security Operations Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection, investigation, containment, and exposure reduction. You will lead our security operations function, making the organization faster in responding to threats while continuously improving controls across the attack surface.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging
• Hands-on experience with at least one enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response
• Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences
• English - Upper-Intermediate or higher

Will be a plus

• Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes
• Hands-on background as a SOC analyst, incident responder, or detection engineer prior to moving into management
• Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one
• Familiarity with threat intelligence platforms and threat-informed defense methodologies
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH) or equivalent

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Cloudfresh ⛅️ is a Global Google Cloud Premier Partner, Zendesk Premier Partner, Asana Solutions Partner, GitLab Select Partner, Hubspot Platinum Partner, Okta Activate Partner, and Microsoft Partner.

Since 2017, we’ve been specializing in the implementation, migration, integration, audit, administration, support, and training for top-tier cloud solutions. Our products focus on cutting-edge cloud computing, advanced location and mapping, seamless collaboration from anywhere, unparalleled customer service, and innovative DevSecOps.

We’re looking for a Google Cloud Security Engineer to harden client environments across GCP. You’ll implement and help design security controls, automate guardrails, improve detection & response, and guide stakeholders through pragmatic, risk-based decisions across EMEA.

Requirements:

• 3+ years proven, hands-on experience in a Security Engineer, SecOps (or similar) role.
• Strong knowledge of building and operating Security Porture, Edge protection, WAF, Endpoint security.
• Technical certifications related to CyberSecurity Google Cloud Solutions, Cloudflare and JumpCloud are an advantage.
• Experience of presentation, documentation.
• Excellent communication and strategic planning abilities, able to explain trade-offs, influence remediation, and drive adoption of guardrails.
• Basic scripting experience (e.g., Python, Bash, or gcloud CLI).
• Fluency in English.

Responsibilities:

• Design, implement, and operate security controls for internal needs and clients across.
• Perform cybersecurity audits.
• Configure and monitor Security Command Center, audit logs, and threat protection.
• Establish logging, detection and incident response.
• Assist clients with implementation of Cybersecurity products (Google Cloud Security Center, Google Workspace Security, Cloudflare, JumpCloud) and compliance controls.
• Generate security assessment reports and provide actionable recommendations.
• Continuously assess the landscape: track new Vendors features and update baselines to improve posture, reliability, and cost efficiency.

Work conditions:

• Competitive Salary & Transparent Motivation: Receive a competitive base salary with performance-based bonuses, providing clear financial rewards for your success.
• Flexible Work Format: Work remotely with flexible hours, allowing you to balance your professional and personal life efficiently.
• Training with Leading Cloud Products: Access in-depth training on cutting-edge cloud solutions, enhancing your expertise and equipping you with the tools to succeed in an ever-evolving industry.
• International Collaboration: Work alongside A-players and seasoned professionals in the cloud industry. Expand your expertise by engaging with international markets across the EMEA and CEE regions.
• Vibrant Team Environment: Be part of an innovative, dynamic team that fosters both personal and professional growth, creating opportunities for you to advance in your career.

When applying to this position, you consent to the processing of your personal data by CLOUDFRESH for the purposes necessary to conduct the recruitment process, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
Additionally, you agree that CLOUDFRESH may process your personal data for future recruitment processes. You can withdraw this consetn at any time.

Ідеально для тих, хто прагне:

• Підтримувати функцію DevSecOps (в security команді), визначаючи стратегію, дорожню карту, пріоритети та показники успіху;
• Оцінювати поточний стан безпеки програм, інфраструктури, хмарних середовищ та процесів розробки;
• Проектувати та впроваджувати засоби контролю безпеки протягом усього життєвого циклу розробки програмного забезпечення;
• Встановлювати та підтримувати безпечні практики CI/CD, включаючи шлюзи безпеки та автоматизовані процеси перевірки;
• Інтегрувати перевірки безпеки в інженерні робочі процеси з особливим акцентом на автоматизацію та досвід розробників;
• Створювати та керувати процесами управління вразливостями, включаючи сортування, визначення пріоритетів, відстеження виправлень та звітність;
• Визначати та впроваджувати стандарти хмарної безпеки та найкращі практики в середовищах AWS, Azure або GCP;
• Проектувати та впроваджувати засоби контролю безпеки Kubernetes та контейнерів, включаючи RBAC, управління секретами, сегментацію мережі та захисту під час виконання;
• Розробляти стандарти безпеки «інфраструктура як код» та засоби контролю «політика як код»;
• Інтегрувати журнали та події безпеки в SIEM для підтримки моніторингу, виявлення загроз та реагування на інциденти;
• Створювати стандарти безпеки, технічних інструкцій та операційних процедур для команд інженерів та платформ;
• Підтримувати розслідування інцидентів безпеки, пов'язаних з хмарою, інфраструктурою, CI/CD, вразливостями додатків, розкритими обліковими даними та загрозами ланцюга поставок.

Досвід, який стане твоєю перевагою:

• 2+ роки практичного досвіду в DevSecOps, Cloud/Platform Security, або Security Engineering;
• Досвід керівництва ініціативами, проектами або програмами безпеки зі значним рівнем ownership та автономією;
• Підтверджений досвід побудови процесів безпеки, інструментів або програм безпеки з нуля;
• Практичний досвід інтеграції засобів контролю безпеки в конвеєри CI/CD без негативного впливу на продуктивність інженерії;
• Досвід роботи з контейнерними середовищами та безпекою Kubernetes;
• Досвід роботи з хмарними платформами (AWS);
• Практичний досвід роботи з інструментами Infrastructure as Code, такими як Terraform, Helm або Ansible;
• Досвід інтеграції журналів та подій безпеки з платформами SIEM та підтримки випадків використання виявлення, моніторингу та реагування на інциденти;
• Здатність балансувати вимоги безпеки з бізнес-цілями та швидкістю інженерії;
• Досвід з Python буде плюсом;
• Англійська мова - Intermediate або вище.

Ми цінуємо:

• Хороші комунікативні навички;
• Багатозадачність, швидке виконання завдань;
• Відповідальність, увага до деталей.

Наші клієнти пропонують конкурентні переваги для підтримки вашого професійного та особистого зростання, зокрема:

• Орієнтація на здоров’я та добробут;
• Глобальне медичне страхування;
• Можливості для зростання;
• Програми бенефітів (компенсація спорту / стоматології / психолога тощо);
• Бонуси за досягнення результатів;
• Динамічне робоче середовище.

English version:

Perfect for those who aim to:

• Own the DevSecOps function (in the security team), defining strategy, roadmap, priorities, and success metrics;
• Assess the current security posture of applications, infrastructure, cloud environments, and development processes;
• Design and implement security controls across the software development lifecycle;
• Establish and maintain secure CI/CD practices, including security gates and automated validation processes;
• Integrate security checks into engineering workflows with a strong focus on automation and developer experience;
• Build and operate vulnerability management processes, including triage, prioritization, remediation tracking, and reporting;
• Define and implement cloud security standards, guardrails, and best practices across AWS, Azure, or GCP environments;
• Design and enforce Kubernetes and container security controls, including RBAC, secrets management, network segmentation, and runtime protection;
• Develop Infrastructure-as-Code security standards and policy-as-code controls;
• Integrate security logs and events into SIEM to support monitoring, threat detection, and incident response;
• Create security standards, technical guidelines, and operational procedures for Engineering and Platform teams;
• Support security incident investigations related to cloud, infrastructure, CI/CD, application vulnerabilities, exposed credentials, and supply-chain threats.

Experience you’ll need to bring:

• 2+ years of hands-on experience in DevSecOps, Cloud Security, or Security Engineering;
• Experience leading security initiatives, projects, or programs with significant ownership and autonomy;
• Proven experience building security processes, tooling, or security programs from scratch;
• Hands-on experience integrating security controls into CI/CD pipelines without negatively impacting engineering productivity;
• Experience with containerized environments and Kubernetes security;
• Experience working with cloud platforms (AWS);
• Practical experience with Infrastructure as Code tools such as Terraform, Helm, or Ansible;
• Experience integrating security logs and events with SIEM platforms and supporting detection, monitoring, and incident response use cases;
• Ability to balance security requirements with business objectives and engineering velocity;
• Experience with Python will be a plus;
• English - Intermediate+ or higher.

It's a perfect match if you have those personal features:

• Good communication skills;
• Multitasking, quick task execution;
• Responsibility, attention to detail.

Our clients offer competitive benefits to support your professional and personal growth, including: 

• Health & Wellness Focus;
• Global Medical Coverage;
• Growth Opportunities;
• Benefits Programs (compensation for the gym/stomatology/psychological service & etc.);
• Performance-Driven Rewards;
• Dynamic Work Environment.

About the Role

We are looking for a highly skilled and strategic Senior DevSecOps Engineer to lead our security operations and infrastructure automation initiatives. In this role, you will bridge the gap between development, security, and operations, ensuring our on-premise environment remains secure, resilient, and efficient.
You will act as a subject matter expert, leveraging cutting-edge tools like CrowdStrike to automate threat detection and response, while maintaining robust perimeter security via Cloudflare.

Key Responsibilities
Implementation and automation of security tools in the CI/CD process (SAST, DAST, SCA).
Analysis of vulnerabilities in code, infrastructure and containers.
Development and configuration of security monitoring systems, incident response.
Monitoring and improving the security level of on-prem infrastructures.
Interaction with developers, DevOps and security teams to implement secure practices.
Active participation in the processes of IAM configuration, management of certificates, secrets and access policies.
Conducting internal security audits, participation in external (e.g. penetration) tests.

Requirements

Must-have:
Experience: 5+ years of experience in DevSecOps, Security Engineering, or a related field, with at least 2 years in a Senior role.
Tooling Expertise: Deep hands-on experience with the following specific tools:
Baremetal/on-premise infrastructure
Docker (Docker Swarm is a strong plus)
Gitlab CI 
CrowdStrike
Cloudflare
ELK.
SIEM Proficiency: Proven experience deploying and tuning SIEM solutions (e.g., Splunk, Elastic Security, Datadog, or similar).
Infrastructure: Strong background in managing on-premise infrastructure (physical servers, data centers, virtualization, networking).
Scripting: Proficiency in Python, Go, or Bash for automation and tooling.

Nice-to-have:
Experience with Kubernetes and such tools as Wiz.io and Torq.
Previous involvement in high-load, regulated, or 24/7 production environments (e.g., iGaming, FinTech, telecom or similar).

We offer
Fully remote work opportunity
Enhanced leave benefits:
20 days of paid vacation
5 paid days off
14 paid sick leaves
Company clubs & communities
Celebration gifts for personal milestones
Corporate online events, raffles & challenges
Corporate English program
Corporate yoga classes
Team-building activities
Coworking compensation
Training and development programs (internal & external).

About the Role

Ready to shape the security posture of high-scale cloud environments from the ground up? We are seeking a talented DevSecOps Engineer to drive our security roadmap, automate pipelines, and embed a robust security culture directly within our engineering ecosystem. This is a fully on-site opportunity designed for a technical professional who thrives on real-time collaboration, immediate impact, and working side-by-side with world-class engineering teams.

About the Client

Our partner is a tech company building product engineering across Fintech, iGaming, and Marketing. They turn innovative ideas into high-performing engines and launch them at scale. As their exclusive recruitment partner, we manage their full-cycle talent acquisition.

Responsibilities:
✔️ Develop direction, create a roadmap and improve the DevSecOps culture in the company. 
✔️ Help DevOps with secure Istio and ServiceMesh setup, Kubernetes (EKS) security setup. 
✔️ Interaction with DevOps, transfer of services for their support and training in security principles. 
✔️ Implementation of OPA and virtualisation configuration security analysers. 
✔️ Setting up CI/CD security and improving the security of solutions that use DevOps - Terraform, Ansible, etc.
✔️ Implementing Security Scanners in Pipelines. 
✔️ Automation of security processes. 

Requirements:
✔️ Knowledge of the basic principles of DevOps approaches (CI /CD). 
✔️ Experience with Kubernetes or other orchestration tools. 
✔️ Experience with Ansible/Terraform/Chef configuration management systems, etc.
✔️ Experience in web server and database administration. 
✔️ Knowledge of the TCP/IP protocol stack and understanding of the OSI model. 
✔️ Understanding the principles of microservice application architecture. 
✔️ Experience with version control systems. 
✔️ Cloud experience (AWS, GCP) Security. 
✔️ Experience in infrastructure analysis for information security risks and their elimination / mitigation. 
✔️ Experience in automating management processes and access control. 
✔️ Experience in implementing Vault management systems and privileged user control systems. 
✔️ Experience with Security scanners and implementation of their pipelines. 
✔️ Understanding SSDLC (OSAMMv2) principles. 

Benefits: 

• Comprehensive Health: Full medical insurance for you and your partner, plus a dedicated sports package to support a healthy, active lifestyle.
• Work-Life Balance: 20 working days of paid annual vacation alongside 6 fully paid sick days.
• Continuous Learning: Partial financial compensation for language courses to help you continuously level up.
• Milestone Celebrations: Special company gifts to celebrate your major life events (birthdays, weddings, and newborns).
• Vibrant Culture: Unforgettable team-building activities, local corporate events, and exclusive international company parties.

Are you a cybersecurity champion who thrives on embedding "secure by design" principles into cutting-edge cloud infrastructure and microservices? We are looking for a Senior Application Security Engineer to act as a trusted advisor, driving the evolution of secure product engineering from legacy data centers to AWS. If you want to own threat modeling automation, champion supply chain security, and influence engineering roadmaps in a high-scale environment, this is your next big move.

✅ Responsibilities:
✔️ Demonstrated ability to collaborate with other teams to achieve complex objectives.
✔️ Responsible for security architecture design from cloud infrastructure to application through the implementation of "secure by design" principles.
✔️ Collaborate with product managers, architects, and developers on the implementation of the security controls platform ecosystem and products.
✔️ Proof security implementations within infrastructure and application deployment manifests and the CI/CD pipelines.
✔️ Define required policies, controls, and capabilities for the protection of products and environments.
✔️ Build and validate declarative threat models automation.
✔️ Participate in engineering teams’ product planning cycles and committees.
✔️ Oversee the product security aspects for migration of products and services from Data Center to public cloud, e.g., AWS.
✔️ Serve as a trusted cyber security advisor to product and application teams.

✅ Minimum Requirements:
✔️ Experience integrating security scanning/tooling into the development pipeline.
✔️ Experience in analyzing and securing microservices and applications developed using Javascript and Typescript.
✔️ Experience with CI/CD pipelines (such as Gitlab, Jenkins) and infrastructure-as-a-code models (such as Terraform, Helm, or CloudFormation).
✔️ Hands-on development experience in Python/shell scripting.
✔️ Strong understanding of supply chain security, software integrity, and secure software delivery.
✔️ Experience with docker and mesh technologies (such as ISTIO).
✔️ Experience with architecture and security reviews, threat modelling and application risk is highly desired.
✔️ Experience working with Agile methodologies.
✔️ Knowledge of privacy laws and regulations, such as GDPR desired.
✔️ Familiarity with industry regulations, frameworks, and practices. For example, PCI, ISO 27001, NIST, etc.

✅ PREFERRED QUALIFICATIONS:
✔️ In-depth experience with architecting secure services on Kubernetes.
✔️ Extensive experience with architecting secure services on AWS or on-prem data centres.
✔️ Security-related professional certifications e.g., CISSP, CISM, CCSK, CCSP, CEH is highly desirable.

✅ We offer excellent benefits, including but not limited to:
🧑🏻‍💻 Learning and development opportunities and interesting, challenging tasks.

📚 Opportunity to develop language skills, with partial compensation for the cost of English classes.

🏝 Time for proper rest, with 20 working days of annual vacation.

📈 Competitive remuneration level with annual review.

🤝 Teambuilding activities.

We are embarking on a critical initiative to achieve ISO 81001 compliance for our esteemed client. ISO 81001 is a pivotal standard for health informatics, specifically focusing on the management and security of health information systems. This project aims to ensure Client's digital infrastructure aligns with the stringent requirements set forth by ISO 81001, safeguarding sensitive healthcare data and bolstering cyber resilience.

• Responsibilities:

  Conduct a thorough assessment of Client's existing IT infrastructure, policies, and procedures against ISO 81001 requirements.
  Identify gaps and vulnerabilities that need to be addressed to achieve compliance.
  Collaborate with cross-functional teams to design and implement robust security controls aligned with ISO 81001 standards.
  Deploy necessary security measures to protect Client's health information systems and data assets.
  Draft and enhance security policies, procedures, and guidelines tailored to ISO 81001 specifications.
  Ensure policies are communicated effectively and integrated into Client's operational framework.
  Perform risk assessments and develop risk management strategies to mitigate cyber threats and vulnerabilities.
  Implement proactive measures to enhance Client's cyber resilience in alignment with ISO 81001.
  Conduct training sessions and workshops to enhance cyber security awareness among Client staff.
  Foster a culture of security consciousness and best practices across the organization.
  Establish monitoring mechanisms to track ongoing compliance with ISO 81001 requirements.
  Conduct regular audits and assessments to ensure sustained adherence to security standards.
  Develop incident response protocols and procedures to swiftly address and mitigate security incidents.
  Continuously assess and refine security strategies based on emerging threats and industry developments.

• Mandatory Skills Description:

  Bachelor's degree in Cyber Security, Information Technology, or a related field.
  Proven experience in cyber security, particularly in compliance initiatives (ISO standards preferred).
  Strong understanding of health informatics and data security within healthcare environments.
  Excellent analytical skills with the ability to assess complex systems and processes.
  Effective communication skills to engage stakeholders and drive security initiatives forward.

The platform continuously gathers cryptography-related information and surrounding context from a wide range of external systems - cloud providers, EDRs, vulnerability scanners, and more. We currently maintain around 20 integrations, and this number is growing quickly. We're looking for a technically curious, highly motivated person to own the research and verification side of these integrations: understanding what data each service exposes, how to access it, and how to keep our coverage current as these services evolve. This role suits someone early-to-mid in their career who enjoys digging into APIs, testing hypotheses hands-on, and mapping out how systems connect - with scope and ownership that can scale to the right person's experience level.

What you'll do:

• Continuously monitor our integrated third-party services (cloud providers, EDRs, vulnerability scanners, etc.) to understand what information is available and how it can be accessed - via APIs, licensing tiers, permissions, and other access methods.
• Actively connect to and verify these APIs hands-on: test endpoints, confirm data availability, and validate that integrations behave as expected.
• Identify and suggest which data from each service is most relevant and valuable for our platform to consume.
• Track changes across these services - new endpoints, deprecated features, updated licensing, and newly released functionality - and flag anything that affects our integrations.
• Document findings clearly so engineering and product teams can act on them.

• Research and evaluate new potential integrations as our coverage expands.

   

What we're looking for:

• Technical mindset with genuine curiosity about how systems and APIs work.
• Hands-on comfort with API tools such as Postman (or similar - Insomnia, curl, etc.).
• Basic programming/scripting ability (e.g. Python or JavaScript) - enough to test, parse responses, and automate small checks.
• Comfort reading API documentation and translating it into practical understanding.
• High motivation, self-direction, and the persistence to chase down how a given system actually works.

• Good written communication for documenting findings.

   

Nice to have: 

• Exposure to or interest in cybersecurity concepts (cryptography, vulnerability management, endpoint security).
• Familiarity with cloud provider APIs (AWS, Azure, GCP), EDR platforms, or vulnerability scanners.
• Understanding of authentication schemes (OAuth, API keys, tokens) and REST/JSON.
• Any experience with API testing, monitoring, or integration work.

Why this role:

• Broad exposure to a large and growing ecosystem of security and cloud tools.
• A clear technical growth path - toward integration engineering or a deeper cybersecurity specialization.
• Real ownership from day one - your research directly shapes what the platform can do.

Our client is a global leader in AI-powered IT Service Management (ITSM), developing intelligent platforms that automate IT support processes and help organizations operate more efficiently. Their solutions are trusted by thousands of companies worldwide, simplifying complex IT operations and enabling teams to focus on strategic initiatives.

We are looking for a Senior Application Security Engineer with a strong software engineering background who has designed, developed, deployed, and maintained production systems before transitioning into application security. This role will serve as the security backbone of the R&D organization, ensuring security is embedded throughout the software development lifecycle and partnering closely with Engineering, DevOps, Architecture, and Product teams.

This is a highly visible, hands-on position reporting directly to the CISO, offering a clear growth path toward an Application Security Lead role and exposure to cloud security, AI security, and governance initiatives.

Who We're Looking For

• 5+ years of hands-on experience as a Software Developer, Backend Developer, Full-Stack Developer, or similar engineering role, with a proven track record of designing, building, shipping, debugging, and maintaining production software.
• Strong understanding of software development processes, engineering best practices, architecture, and SDLC methodologies.
• 2+ years of experience in Application Security, Product Security, or Secure SDLC, with a demonstrated transition from software engineering into security.
• Experience partnering closely with R&D and development teams, acting as a trusted security advisor who enables innovation while improving security posture.
• Hands-on experience implementing Secure SDLC practices within modern CI/CD environments (GitHub, GitLab, Jenkins, ArgoCD, or similar).
• Solid understanding of common application vulnerabilities, secure coding principles, OWASP Top 10, CWE/SANS Top 25, threat modeling methodologies (e.g., STRIDE, PASTA), and security architecture reviews.
• Experience with application security tools and practices, including SAST, DAST, SCA, secret scanning, and secure code review.
• Strong knowledge of API security and experience securing and testing REST and/or GraphQL APIs.
• Understanding of software supply chain security, including third-party dependency risks, SBOM concepts, open-source risk management, dependency confusion, and related attack vectors.
• Knowledge of cloud security fundamentals, preferably AWS, including IAM, containers/Kubernetes security, and Infrastructure as Code (Terraform or similar).
• Familiarity with SaaS and product company environments and the security challenges associated with cloud-native applications.
• Understanding of AI/LLM security risks, including prompt injection, data leakage, model abuse, agentic risks, and secure adoption of AI assistants within engineering and security workflows.
• Experience performing security-focused design, architecture, and threat modeling reviews.
• Excellent communication and stakeholder management skills, with the ability to influence teams without direct authority.
• Strong written and verbal English communication skills.

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent practical experience).

   

Role Focus

The primary focus of this role is the application security of the product.

Key responsibilities:

• Working closely with R&D teams on a daily basis.
• Helping developers build more secure products and adopt security best practices.
• Reviewing application designs and architectures from a security perspective.
• Identifying security risks in APIs, integrations, third-party libraries, and development processes.
• Managing vulnerabilities by analyzing, prioritizing, and supporting remediation efforts.
• Promoting and maintaining secure development practices across CI/CD pipelines.

• Applying and advocating security standards, frameworks, and industry best practices.

   

Nice to Have

• Penetration testing experience.
• Experience with bug bounty programs and vulnerability management.
• Strong knowledge of OWASP frameworks and methodologies.
• Hands-on experience with SAST, DAST, IAST, SCA, and secret-scanning tools.
• Cloud security experience (AWS, Azure, or GCP).
• AI / LLM security knowledge and practical experience.
• Security certifications such as CISSP, CSSLP, OSCP, OSWE, GWAPT, GPEN, CEH, GIAC certifications, or similar.

About The Position

MWDN is an international recruitment and outstaffing company with 23+ years of experience connecting exceptional tech talent with leading companies across Israel, the USA, Great Britain, and Western Europe. In this role, MWDN acts as the recruitment partner, and the selected candidate will work directly with the client’s team on their product in an international environment.
 

Why does MWDN rock?

Here’s what you can expect when you join MWDN:

• Security: We carefully vet our clients to minimize risks and ensure reliability and timely payments—no fraud or unpleasant surprises.
• Career support: If a project isn’t the right fit, we support you and actively help find new opportunities that match your skills and career goals.
• Legal assistance: We provide guidance on legal matters, including opening and managing your independent contractor or sole proprietorship status, taxes, and related processes.
• Professional development: We offer English courses and professional growth opportunities, as well as team-building events.

Why choose us? MWDN is ranked among the top 5 IT employers in our region according to DOU. We take pride in our transparency and strong commitment to our team. Curious to learn more? See what our employees say about working with us on DOU.
 

What is your new project?

• Domain: Identity and Access Management (IAM) software
• Location: Israel
• Company size: 200-500 employees
• Founded in: 2014
   

What is your new project?

Are you ready to join a game-changing force in identity and access management?

Our client is revolutionizing the way enterprises protect user identities in a passwordless world. You’ll be working at the intersection of cutting-edge biometrics, behavioral analytics, and next-gen identity orchestration — helping the world’s leading brands safeguard millions of users. Backed by more than 100 M Series A — one of the largest in cybersecurity history — and trusted by major global enterprises, they offer the agility of an innovator with the strength and backing of an industry leader.

Ready to take part in redefining IAM for the modern era? Let’s talk.
 

What makes you a great fit

• 3+ years of hands-on experience in security research, mobile security, browser research, fraud research, detection research, reverse engineering, or a related technical role.
• Experience with web browsers, mobile browsers, WebViews, browser APIs, JavaScript runtime behavior, browser automation, fingerprinting, client-side web security, and low-level browser technologies.
• Familiarity with the architecture or codebase of modern open-source browsers and rendering engines, such as Chromium, WebKit, Blink, or Gecko, with the ability to reason about how browser internals can expose new security and fraud signals.
• Experience with native Android and/or iOS applications, mobile OS behavior, app instrumentation, emulators, device spoofing, mobile automation, mobile security, and low-level platform APIs.
• Attacker mindset and practical understanding of how malicious actors attempt to bypass detection using automation, AI agents, spoofing, and anti-detection techniques.
• Ability to identify subtle technical signals and turn them into practical detection or data collection opportunities.
• Experience designing technical experiments and validating research hypotheses.
• Experience with one or more SDK development languages and environments, such as TypeScript/JavaScript for web, Kotlin/Java for Android, or Swift/Objective-C for iOS, with the ability to understand implementation constraints and collaborate effectively with SDK engineering teams.
• Scripting ability, preferably in Python, for building research tools, automation, and analysis workflows.
• Ability to work independently on ambiguous problems and communicate findings clearly to engineering, product, and research stakeholders.
   

Advantages

• Experience with Web SDKs, Mobile SDKs, client-side telemetry, device intelligence, behavioral signals, AI agent detection, or fraud detection products.
• Experience researching bots, credential stuffing, scraping, headless browsers, AI-assisted automation, app cloning, SDK abuse, phishing kits, malware, or
• anti-detection frameworks.
• Experience with reverse engineering Android or iOS applications.
• Familiarity with detection quality measurement, feature evaluation, false-positive analysis, production monitoring, or machine learning concepts.
• Bachelor’s degree in Computer Science, Cybersecurity, Data Science, or a related field— or equivalent hands-on experience.
  
   

Your day-to-day in this position

• Research browser, WebView, Android, and iOS environments from an attacker’s perspective.
• Identify new security signals, behavioral indicators, and technical patterns that can improve fraud, abuse, automation, and AI agent detection.
• Investigate attacker techniques involving bots, browser automation, AI agents, emulators, device spoofing, hooking, instrumentation, remote access tools, and
• anti-detection methods.
• Design and run experiments to compare legitimate, automated, AI-assisted, and manipulated environments.
• Evaluate proposed signals for reliability, stability, spoofability, privacy sensitivity, performance impact, and production feasibility.
• Translate research findings into clear SDK feature requirements for web and mobile data collection.
• Build internal tools, scripts, and lab environments to support signal research and validation.
• Collaborate with SDK, engineering, product, and detection teams to move research from hypothesis to production.
  
   

Our next steps

✅ Intro call with a Recruiter — ✅ Intro call with client — ✅ Technical interview — ✅ CTO interview — ✅ HR interview — ✅ Reference check — ✅ Offer

We are looking for a SOC Lead to lead and scale the company’s Security Operations Center, ensuring high-quality incident response, efficient security monitoring, and continuous improvement of detection and response capabilities.

This role is critical in bridging the gap between having security tools and operating a mature, scalable, and measurable security operations function.

You will work closely with the SOC team and technical stakeholders to improve alert quality, reduce operational inefficiencies, strengthen incident response workflows, and enhance the organization’s ability to detect and respond to modern cyber threats across infrastructure, cloud environments, and critical assets.

Responsibilities:

• Lead and coordinate the SOC analyst team, including task prioritization, mentoring, and quality control
• Oversee daily SOC operations: monitoring, alert triage, investigations, escalation handling, and incident coordination
• Support and drive complex/high-severity incident investigations through containment and remediation
• Improve SIEM detections, reduce false positives, and optimize alert quality and workflows
• Develop and maintain SOC playbooks, runbooks, and operational procedures
• Drive automation and process improvements to reduce analyst workload and improve SOC efficiency
• Track SOC KPIs (MTTD, MTTR, SLA, alert quality) and provide operational reporting
• Collaborate with Security & Risk and technical teams to strengthen overall security operations

Required Skills & Experience:

• 5+ years of experience in SOC, Incident Response, or Security Operations
• Experience leading SOC teams or acting as a technical lead
• Strong hands-on experience with SIEM, EDR/XDR, and incident management processes
• Experience handling complex security incidents and improving detection quality
• Understanding of MITRE ATT&CK, threat detection, and SOC best practices
• Strong analytical, communication, and stakeholder management skills

Nice to Have:

• Experience with cloud security (AWS, Azure, GCP)
• Experience with SOAR, automation, or scripting
• Security certifications such as CISSP, GCIH, GCIA, SC-200, Splunk, or similar

The company offers:

• Official employment with a competitive salary and clear, transparent terms of cooperation.
• Paid vacation (24 calendar days per year) and paid sick leave.
• Support for your professional growth — the company is actively expanding, and you’ll have the opportunity to grow together with it.
• An atmosphere of trust, open communication, and leadership — initiative is welcomed, ideas are brought to life, and the team supports your progress.