Jobs Security

We are the creators of a new fintech era!
Our mission is to revolutionize the world by making blockchain technology accessible to everyone in everyday life. WhiteBIT is a global team of more than 1,200 professionals united by a shared vision of shaping the Web3 future.
We are building our own blockchain ecosystem, ensuring maximum transparency and security for over 8 million users worldwide. Our cutting-edge solutions, rapid adaptation to market challenges, and technological excellence set us apart from traditional companies.
Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT, and VISA.

The future of Web3 starts with you — join us as a SOC Analyst L1!

Requirements:

— Basic understanding of cybersecurity principles, common attack vectors, and threat detection methods.
— Familiarity with key cybersecurity frameworks (MITRE ATT&CK, NIST, CIS etc.)
— Familiarity with EDR/XDR and SIEM platforms (e.g., SentinelOne, Splunk, QRadar, etc.).
— Strong analytical and problem-solving skills.
— Ability to work in a fast-paced, team-oriented environment.
— Good written and verbal communication skills in English (B1+).
— Willingness to work in a shift-based schedule, including nights and weekends. Shifts are distributed evenly across the department.

Preferred Qualifications:

— 6-12 months of experience in a SOC or security-related role.

— Knowledge of networking fundamentals and MacOS/Linux operating systems.

Responsibilities:

— Monitor and analyze alerts from EDR, SIEM platforms and other corporate tools.
— Perform initial triage to determine the severity, credibility, and urgency of security events, sorting out False Positives.
— Escalate incidents to Level 2 analysts or incident response teams when necessary.
— Document findings, actions taken, and outcomes in a ticketing system.
— Follow standard operating procedures (SOPs) and playbooks for alert handling.
— Assist in the continuous tuning of EDR/SIEM rules to reduce False Positives.
— Stay current with emerging threats and industry best practices.
— Participate in active learning and Purple Teaming of the SOC team.

Work conditions:

Immerse yourself in Crypto & Web3:
— Master cutting-edge technologies and become an expert in the most innovative industry.
Work with the Fintech of the Future:
— Develop your skills in digital finance and shape the global market.

Take Your Professionalism to the Next Level:
— Gain unique experience and be part of global transformations.
Drive Innovations:
— Influence the industry and contribute to groundbreaking solutions.

Join a Strong Team:
— Collaborate with top experts worldwide and grow alongside the best.
Work-Life Balance & Well-being:
— Modern equipment.
— Comfortable working conditions, and an inspiring environment to help you thrive.
— 24 calendar days of paid leave.
— 5 calendar days of sick leave.
— Additional days off for national holidays.

Job Description

Overall

4+ years in cybersecurity, security testing, or software engineering with a strong security focus
Structured, methodical approach to testing - able to plan and document, not just test ad-hoc
Good written English - reporting is a significant part of the role

Must have

Hands-on experience in vulnerability assessment and penetration testing (web, API, network, or infrastructure)
Secure code review experience
Solid coding skills (Python preferred) for automation, tooling and test scripts
Experience writing automated tests and building them into repeatable suites
Strong understanding of vulnerability classes (OWASP Top 10, CWE) and CVE/CVSS triage
Familiarity with standard security tooling (e.g. Burp Suite, Nmap, SAST/DAST scanners)

Nice to have

Experience applying AI/LLMs to security work - highly desirable
Vulnerability management processes and tooling
Cloud security (AWS/Azure/GCP) or OT/embedded/product security background
CI/CD security integration
Certifications: OSCP, CEH, CISSP, or similar

Job Responsibilities

Perform vulnerability assessments and penetration testing against applications, services and infrastructure
Conduct secure code and configuration reviews
Triage and validate findings; assess severity, eliminate false positives, support remediation
Write and maintain automated security tests and tooling
Design test plans, execute testing campaigns, document and report results
Evaluate AI-assisted approaches to security testing and help integrate what works into the workflow

Department/Project Description

An enterprise technology group is building a dedicated security validation team focused on vulnerability assessment and security testing across the group's products and systems. The team runs structured testing campaigns: penetration testing, vulnerability discovery and triage, secure code review, and building automated test suites to make the process repeatable at scale.

The team also gets early access to specialized AI models and evaluates how they can accelerate security testing - an area we're actively investing in, though the core of the work remains hands-on security engineering. Scope covers internal systems as well as business-unit products across the group, agreed campaign by campaign. The team starts small and scales into a permanent capability.

Skill Category

QA - Automation

Keyskills - Must Have

• Security
• Application Security
• Penetration Testing and Reporting

Cloudfresh ⛅️ is a Global Google Cloud Premier Partner, Zendesk Premier Partner, Asana Solutions Partner, GitLab Select Partner, Hubspot Platinum Partner, Okta Activate Partner, and Microsoft Partner.

Since 2017, we’ve been specializing in the implementation, migration, integration, audit, administration, support, and training for top-tier cloud solutions. Our products focus on cutting-edge cloud computing, advanced location and mapping, seamless collaboration from anywhere, unparalleled customer service, and innovative DevSecOps.

We’re looking for a Google Cloud Security Engineer to harden client environments across GCP. You’ll implement and help design security controls, automate guardrails, improve detection & response, and guide stakeholders through pragmatic, risk-based decisions across EMEA.

Requirements:

• 3+ years proven, hands-on experience in a Security Engineer, SecOps (or similar) role.
• Strong knowledge of building and operating Security Porture, Edge protection, WAF, Endpoint security.
• Technical certifications related to CyberSecurity Google Cloud Solutions, Cloudflare and JumpCloud are an advantage.
• Experience of presentation, documentation.
• Excellent communication and strategic planning abilities, able to explain trade-offs, influence remediation, and drive adoption of guardrails.
• Basic scripting experience (e.g., Python, Bash, or gcloud CLI).
• Fluency in English.

Responsibilities:

• Design, implement, and operate security controls for internal needs and clients across.
• Perform cybersecurity audits.
• Configure and monitor Security Command Center, audit logs, and threat protection.
• Establish logging, detection and incident response.
• Assist clients with implementation of Cybersecurity products (Google Cloud Security Center, Google Workspace Security, Cloudflare, JumpCloud) and compliance controls.
• Generate security assessment reports and provide actionable recommendations.
• Continuously assess the landscape: track new Vendors features and update baselines to improve posture, reliability, and cost efficiency.

Work conditions:

• Competitive Salary & Transparent Motivation: Receive a competitive base salary with performance-based bonuses, providing clear financial rewards for your success.
• Flexible Work Format: Work remotely with flexible hours, allowing you to balance your professional and personal life efficiently.
• Training with Leading Cloud Products: Access in-depth training on cutting-edge cloud solutions, enhancing your expertise and equipping you with the tools to succeed in an ever-evolving industry.
• International Collaboration: Work alongside A-players and seasoned professionals in the cloud industry. Expand your expertise by engaging with international markets across the EMEA and CEE regions.
• Vibrant Team Environment: Be part of an innovative, dynamic team that fosters both personal and professional growth, creating opportunities for you to advance in your career.

When applying to this position, you consent to the processing of your personal data by CLOUDFRESH for the purposes necessary to conduct the recruitment process, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
Additionally, you agree that CLOUDFRESH may process your personal data for future recruitment processes. You can withdraw this consetn at any time.

Performa is an international HR agency specializing in connecting top talent with leading companies across the iGaming, IT, and Marketing industries. We help businesses scale their teams and support professionals in finding opportunities where they can unlock their full potential.

Our client is a fast-growing international FinTech company developing innovative payment products for global markets. The team continuously explores new payment methods, automates financial processes, and builds proprietary technologies that integrate with banks, payment systems, and mobile applications.

As the company grows, they are looking for an R&D Specialist to research payment solutions, analyse mobile applications, and drive process automation.
 

Role Overview

This is a hybrid role combining Technical Research, FinTech R&D, Mobile Analysis, and Product Research. In this role, you'll go beyond identifying technical features or limitations — you'll explore how technologies can be leveraged to build new products, automate processes, and drive business growth.

If you're passionate about researching emerging technologies, analysing mobile applications, navigating complex integrations, and discovering innovative solutions, this role is for you.

Requirements:

• Strong understanding of HTTP/HTTPS, REST APIs, and client-server architecture.
• Experience using network traffic analysis tools such as Charles Proxy, Proxyman, Burp Suite, Fiddler, or similar.
• Good understanding of Android and iOS mobile applications.
• Experience with black-box analysis of applications and services.
• Ability to analyze APIs, network traffic, and client-server interactions.

Nice to Have

• Experience with Frida, Objection, or similar dynamic analysis tools.
• Experience with Appium or other test automation frameworks.
• Basic knowledge of JavaScript, Node.js, HTML, and CSS.
• Understanding of payment systems and FinTech products.
• Hands-on experience with reverse engineering mobile applications.
• Experience using Android Studio, ADB, and Android emulators.
• Experience leveraging AI tools (e.g., ChatGPT, Claude, Gemini, Cursor) for technical research and analysis.

Key Responsibilities

• Research emerging payment methods, financial technologies, and payment services.
• Analyse and reverse engineer mobile applications and web solutions to understand their architecture, logic, and integrations.
• Analyse APIs, network traffic, and data exchange mechanisms.
• Identify opportunities to automate payment-related processes.
• Identify technical limitations, bottlenecks, and potential risks.
• Prepare technical reports and recommendations for the Product and Engineering teams.

• Leverage AI-powered tools to accelerate research, analyse data, and improve technical documentation.

   

What we offer:

• Fully remote work.
• Flexible working hours.
• Competitive salary.
• The opportunity to work on innovative payment products.
• An AI-powered work environment with modern research and automation tools.
• A collaborative and experienced team.
• Opportunities for professional growth and career development.

The Defense Procurement Agency (DOT) is a state-owned enterprise responsible for procuring military equipment, ammunition, UAVs, fuel, food, clothing, and other critical supplies for the Armed Forces of Ukraine and the Defense Forces.

Our mission: Strengthening Ukraine's defense capabilities by ensuring reliable procurement and supporting the development of the national defense industry.

Our vision: To become the driving force behind a modern defense procurement ecosystem built according to NATO standards.

We are looking for a Head of Information Security to lead and strengthen our Information Security function across governance, engineering, and security operations. This role combines strategic leadership with hands-on technical expertise, ensuring the continuous development of our Information Security Management System (ISMS), alignment with the NIST Cybersecurity Framework, and the organization's readiness to prevent, detect, and respond to cyber threats.

What You'll Accomplish (First 6–12 Months)

• Ensure continued NIST compliance for DOT Chain and define the roadmap for future security initiatives, including platforms such as Azure AI Foundry.
• Strengthen the security posture of IT Enterprise by implementing and maintaining NIST security controls, establishing regular risk assessments, exception management, and vulnerability remediation processes.
• Build a high-performing security organization with defined OKRs, KPIs, resource planning, and performance management.
• Enhance Azure-based Security Operations by improving monitoring, incident response, vulnerability management, identity governance, and RBAC.
• Lead Red Team and Purple Team exercises (including ransomware readiness and identity compromise scenarios) and translate findings into engineering improvements.
• Establish vendor security governance, including security assessments, NDA/SLA/DPA requirements, and third-party security audits.

Responsibilities

Leadership & Team Management

• Lead both Information Security Governance (ISMS, Risk & Compliance) and Cybersecurity Engineering & Operations.
• Manage, mentor, and develop the Information Security team through structured performance management, OKRs, and individual development plans.
• Collaborate closely with Engineering, IT, Product, and business stakeholders to prioritize security initiatives and protect critical services.

Governance, Risk & Compliance

• Develop and maintain security policies, standards, procedures, and risk registers.
• Lead internal and external security audits and coordinate remediation activities.
• Drive the organization's transition toward NIST-based security practices while maintaining alignment with ISO 27001 where required.
• Own Incident Response Plans (IRP), post-incident reviews, and continuous improvement.
• Ensure compliance with Ukrainian legislation related to information security and personal data protection.

Security Engineering & Operations

• Oversee enterprise security technologies, including:
• Microsoft Sentinel
• Microsoft Defender
• EDR/XDR
• SIEM
• DLP
• PAM
• IAM / Microsoft Entra ID
• MDM
• Lead incident monitoring and response activities.
• Manage vulnerability lifecycle from discovery through remediation.
• Improve identity security through MFA, PIM, Least Privilege, JML processes, Key Vault, secrets management, and centralized logging.
• Define and improve SOC processes, runbooks, SLAs, and operational metrics.

Application Security & Secure SDLC

• Strengthen application security throughout the software development lifecycle.
• Drive Threat Modeling, Security Architecture Reviews, DevSecOps practices, automated code scanning (SAST/DAST), SBOM generation, and CI/CD security.
• Integrate Red/Purple Team findings into engineering roadmaps and development practices.

Vendor Security

• Evaluate and audit third-party vendors integrated with DOT Chain.
• Establish and maintain supplier security requirements, including NDA, SLA, DPA, and third-party security assessments.

Strategy, Reporting & Budget

• Report regularly to executive leadership on security posture, KPIs, risks, vulnerability remediation, and incident readiness.
• Own the Information Security budget and define a 12–18 month security roadmap with prioritized initiatives and measurable business value.

Requirements

Experience

• 5+ years of experience in Information Security or Cybersecurity.
• 3+ years leading Information Security teams and security programs.
• Proven experience implementing enterprise Information Security strategies and governance.
• Hands-on experience with Red Team/Purple Team exercises, attack simulations, ransomware preparedness, and identity compromise scenarios.
• Strong experience implementing and maintaining NIST Cybersecurity Framework and/or ISO 27001.
• Experience building or managing Security Operations (SOC/SecOps), incident response, vulnerability management, and security monitoring.
• Strong Microsoft Azure security expertise, including:
• Microsoft Defender for Cloud
• Defender for Endpoint
• Defender for Identity
• Defender for Office 365
• Microsoft Sentinel
• Microsoft Entra ID
• Azure Key Vault
• Understanding of Secure SDLC, Application Security, DevSecOps, SAST/DAST, CI/CD security, Infrastructure as Code, and secret management.
• Experience securing .NET and PHP application environments is an advantage.

Technical Knowledge

• Strong practical knowledge of:
• NIST Cybersecurity Framework (CSF 2.0)
• NIST SP 800 Series
• ISO/IEC 27001
• Knowledge of Ukrainian regulations related to information security and personal data protection.

Leadership & Soft Skills

• Strong leadership, people management, and stakeholder management skills.
• Experience establishing KPIs, OKRs, and performance management frameworks.
• Ability to balance strategic governance with hands-on technical leadership.
• Excellent communication skills, including the ability to explain technical risks to executive stakeholders.
• Strong analytical thinking and decision-making skills.
• Zero tolerance for corruption.

Preferred Qualifications

• CISSP
• CISM
• ISO 27001 Lead Implementer or Lead Auditor
• Microsoft certifications such as SC-100, SC-200, SC-300, SC-400, or AZ-500.
• Experience working within government organizations or other highly regulated environments.

What We Offer

• Meaningful work that directly contributes to strengthening Ukraine's defense capabilities.
• Official employment with competitive salary and full social benefits.
• Professional development, learning opportunities, and career growth.
• Structured onboarding and dedicated mentorship.
• A collaborative, supportive, and mission-driven team.
• Modern office near the metro with reliable internet and equipped shelter.
• Opportunity to build and lead cybersecurity for one of Ukraine's most strategically important digital ecosystems.

By joining our team, you will contribute to one of Ukraine's largest digital transformation initiatives in the defense sector and help build the future of defense procurement.

Ready to make a real impact? We'd love to hear from you. Apply today!

* By submitting your CV, you consent to the processing of your personal data in accordance with applicable legislation.

** Due to the high volume of applications, only candidates whose qualifications best match the position will be contacted.

The platform continuously gathers cryptography-related information and surrounding context from a wide range of external systems - cloud providers, EDRs, vulnerability scanners, and more. We currently maintain around 20 integrations, and this number is growing quickly. We're looking for a technically curious, highly motivated person to own the research and verification side of these integrations: understanding what data each service exposes, how to access it, and how to keep our coverage current as these services evolve. This role suits someone early-to-mid in their career who enjoys digging into APIs, testing hypotheses hands-on, and mapping out how systems connect - with scope and ownership that can scale to the right person's experience level.

What you'll do:

• Continuously monitor our integrated third-party services (cloud providers, EDRs, vulnerability scanners, etc.) to understand what information is available and how it can be accessed - via APIs, licensing tiers, permissions, and other access methods.
• Actively connect to and verify these APIs hands-on: test endpoints, confirm data availability, and validate that integrations behave as expected.
• Identify and suggest which data from each service is most relevant and valuable for our platform to consume.
• Track changes across these services - new endpoints, deprecated features, updated licensing, and newly released functionality - and flag anything that affects our integrations.
• Document findings clearly so engineering and product teams can act on them.

• Research and evaluate new potential integrations as our coverage expands.

   

What we're looking for:

• Technical mindset with genuine curiosity about how systems and APIs work.
• Hands-on comfort with API tools such as Postman (or similar - Insomnia, curl, etc.).
• Basic programming/scripting ability (e.g. Python or JavaScript) - enough to test, parse responses, and automate small checks.
• Comfort reading API documentation and translating it into practical understanding.
• High motivation, self-direction, and the persistence to chase down how a given system actually works.

• Good written communication for documenting findings.

   

Nice to have: 

• Exposure to or interest in cybersecurity concepts (cryptography, vulnerability management, endpoint security).
• Familiarity with cloud provider APIs (AWS, Azure, GCP), EDR platforms, or vulnerability scanners.
• Understanding of authentication schemes (OAuth, API keys, tokens) and REST/JSON.
• Any experience with API testing, monitoring, or integration work.

Why this role:

• Broad exposure to a large and growing ecosystem of security and cloud tools.
• A clear technical growth path - toward integration engineering or a deeper cybersecurity specialization.

• Real ownership from day one - your research directly shapes what the platform can do.

   

Recruitment process:

• Screening call  (30 min)
• Technical Interview with R&D Manager (45 min)

• Interview with Product Manager (60 min)

   

Ідеально для тих, хто прагне:

• Підтримувати функцію DevSecOps (в security команді), визначаючи стратегію, дорожню карту, пріоритети та показники успіху;
• Оцінювати поточний стан безпеки програм, інфраструктури, хмарних середовищ та процесів розробки;
• Проектувати та впроваджувати засоби контролю безпеки протягом усього життєвого циклу розробки програмного забезпечення;
• Встановлювати та підтримувати безпечні практики CI/CD, включаючи шлюзи безпеки та автоматизовані процеси перевірки;
• Інтегрувати перевірки безпеки в інженерні робочі процеси з особливим акцентом на автоматизацію та досвід розробників;
• Створювати та керувати процесами управління вразливостями, включаючи сортування, визначення пріоритетів, відстеження виправлень та звітність;
• Визначати та впроваджувати стандарти хмарної безпеки та найкращі практики в середовищах AWS, Azure або GCP;
• Проектувати та впроваджувати засоби контролю безпеки Kubernetes та контейнерів, включаючи RBAC, управління секретами, сегментацію мережі та захисту під час виконання;
• Розробляти стандарти безпеки «інфраструктура як код» та засоби контролю «політика як код»;
• Інтегрувати журнали та події безпеки в SIEM для підтримки моніторингу, виявлення загроз та реагування на інциденти;
• Створювати стандарти безпеки, технічних інструкцій та операційних процедур для команд інженерів та платформ;
• Підтримувати розслідування інцидентів безпеки, пов'язаних з хмарою, інфраструктурою, CI/CD, вразливостями додатків, розкритими обліковими даними та загрозами ланцюга поставок.

Досвід, який стане твоєю перевагою:

• 2+ роки практичного досвіду в DevSecOps, Cloud/Platform Security, або Security Engineering;
• Досвід керівництва ініціативами, проектами або програмами безпеки зі значним рівнем ownership та автономією;
• Підтверджений досвід побудови процесів безпеки, інструментів або програм безпеки з нуля;
• Практичний досвід інтеграції засобів контролю безпеки в конвеєри CI/CD без негативного впливу на продуктивність інженерії;
• Досвід роботи з контейнерними середовищами та безпекою Kubernetes;
• Досвід роботи з хмарними платформами (AWS);
• Практичний досвід роботи з інструментами Infrastructure as Code, такими як Terraform, Helm або Ansible;
• Досвід інтеграції журналів та подій безпеки з платформами SIEM та підтримки випадків використання виявлення, моніторингу та реагування на інциденти;
• Здатність балансувати вимоги безпеки з бізнес-цілями та швидкістю інженерії;
• Досвід з Python буде плюсом;
• Англійська мова - Intermediate або вище.

Ми цінуємо:

• Хороші комунікативні навички;
• Багатозадачність, швидке виконання завдань;
• Відповідальність, увага до деталей.

Наші клієнти пропонують конкурентні переваги для підтримки вашого професійного та особистого зростання, зокрема:

• Орієнтація на здоров’я та добробут;
• Глобальне медичне страхування;
• Можливості для зростання;
• Програми бенефітів (компенсація спорту / стоматології / психолога тощо);
• Бонуси за досягнення результатів;
• Динамічне робоче середовище.

English version:

Perfect for those who aim to:

• Own the DevSecOps function (in the security team), defining strategy, roadmap, priorities, and success metrics;
• Assess the current security posture of applications, infrastructure, cloud environments, and development processes;
• Design and implement security controls across the software development lifecycle;
• Establish and maintain secure CI/CD practices, including security gates and automated validation processes;
• Integrate security checks into engineering workflows with a strong focus on automation and developer experience;
• Build and operate vulnerability management processes, including triage, prioritization, remediation tracking, and reporting;
• Define and implement cloud security standards, guardrails, and best practices across AWS, Azure, or GCP environments;
• Design and enforce Kubernetes and container security controls, including RBAC, secrets management, network segmentation, and runtime protection;
• Develop Infrastructure-as-Code security standards and policy-as-code controls;
• Integrate security logs and events into SIEM to support monitoring, threat detection, and incident response;
• Create security standards, technical guidelines, and operational procedures for Engineering and Platform teams;
• Support security incident investigations related to cloud, infrastructure, CI/CD, application vulnerabilities, exposed credentials, and supply-chain threats.

Experience you’ll need to bring:

• 2+ years of hands-on experience in DevSecOps, Cloud Security, or Security Engineering;
• Experience leading security initiatives, projects, or programs with significant ownership and autonomy;
• Proven experience building security processes, tooling, or security programs from scratch;
• Hands-on experience integrating security controls into CI/CD pipelines without negatively impacting engineering productivity;
• Experience with containerized environments and Kubernetes security;
• Experience working with cloud platforms (AWS);
• Practical experience with Infrastructure as Code tools such as Terraform, Helm, or Ansible;
• Experience integrating security logs and events with SIEM platforms and supporting detection, monitoring, and incident response use cases;
• Ability to balance security requirements with business objectives and engineering velocity;
• Experience with Python will be a plus;
• English - Intermediate+ or higher.

It's a perfect match if you have those personal features:

• Good communication skills;
• Multitasking, quick task execution;
• Responsibility, attention to detail.

Our clients offer competitive benefits to support your professional and personal growth, including: 

• Health & Wellness Focus;
• Global Medical Coverage;
• Growth Opportunities;
• Benefits Programs (compensation for the gym/stomatology/psychological service & etc.);
• Performance-Driven Rewards;
• Dynamic Work Environment.

We are looking for a strong Anti-Fraud specialist to join a new iGaming project at the pre-launch stage.
⭐ About BetVam

BetVam is a new licensed Ukrainian iGaming operator currently in the active launch phase and building its core business processes from the ground up.

We are creating a modern betting and casino platform focused on long-term growth, excellent customer experience, operational excellence, and full compliance within a regulated market.
♠️ Position Details

Location: Kyiv (Office / Hybrid)

Employment Type: Full-time

Start Date: ASAP

Project Stage: Pre-launch, Product Launch Phase
✅ Key Responsibilities

Monitor player activity, deposits, withdrawals, bonuses, payment transactions, and behavioral patterns to detect suspicious activity.
Investigate bonus abuse, multi-accounting, payment fraud, chargebacks, account takeovers, and other fraud cases.
Analyze user behavior, transaction history, device data, and payment patterns to identify risks.
Prepare case conclusions and recommendations: additional verification, payment holds, restrictions, or escalation.
Support the setup and improvement of fraud rules, alerts, monitoring workflows, and operational controls.
Work closely with Payments, AML, Compliance, Customer Support, Product, and Finance teams.
Track fraud trends, recurring abuse patterns, and emerging threats in iGaming.
Support fraud reporting, KPIs, and internal fraud awareness initiatives.

➡️ What Is Important to Us

2+ years of experience in Anti-Fraud, Fraud Prevention, Risk, Payment Risk, or a similar role, preferably in iGaming.
Understanding of sportsbook/casino fraud schemes, bonus abuse, multi-accounting, chargebacks, payment fraud, and account security risks.
Experience with fraud monitoring tools, anti-fraud systems, risk platforms, or transaction monitoring systems.
Strong analytical skills and ability to investigate complex cases using data.
Understanding of payments, PSPs, deposits, withdrawals, and chargeback processes.
Knowledge of AML, KYC, responsible gaming, and regulated gambling markets will be a plus.
Confident Excel / Google Sheets skills and experience with reporting tools.
Ability to make risk-based decisions in a fast-paced environment.
Strong communication skills and ability to work with cross-functional teams.

Who We Are Looking For

We are looking for a proactive and analytical Anti-Fraud Specialist who understands iGaming fraud risks and enjoys hands-on investigation work.

This role is a great fit for someone who wants to join a licensed Ukrainian iGaming project at the pre-launch stage, help shape anti-fraud processes from the beginning, and play a key role in building a secure and scalable product.

For our partner, we are looking for an Anti-Fraud  specialist 

Licensed iGaming Project | Pre-launch | Kyiv, Ukraine

About the Company

They are an international product company preparing to launch a licensed online casino for the Ukrainian market. Currently in the pre-launch phase, we are building a modern, technology-driven business focused on operational excellence, regulatory compliance, and long-term sustainable growth.

Our team brings together experienced professionals from the iGaming, IT, FinTech, Product, Compliance, and Operations domains, working collaboratively to build a scalable product that meets the highest industry standards.
✅ Key Responsibilities

Monitor player activity, deposits, withdrawals, bonuses, payment transactions, and behavioural patterns to detect suspicious activity.
Investigate bonus abuse, multi-accounting, payment fraud, chargebacks, account takeovers, and other fraud cases.
Analyze user behavior, transaction history, device data, and payment patterns to identify risks.
Prepare case conclusions and recommendations: additional verification, payment holds, restrictions, or escalation.
Support the setup and improvement of fraud rules, alerts, monitoring workflows, and operational controls.
Work closely with Payments, AML, Compliance, Customer Support, Product, and Finance teams.
Track fraud trends, recurring abuse patterns, and emerging threats in iGaming.
Support fraud reporting, KPIs, and internal fraud awareness initiatives.

➡️ What Is Important to Us

2+ years of experience in Anti-Fraud, Fraud Prevention, Risk, Payment Risk, or a similar role, preferably in iGaming.
Understanding of sportsbook/casino fraud schemes, bonus abuse, multi-accounting, chargebacks, payment fraud, and account security risks.
Experience with fraud monitoring tools, anti-fraud systems, risk platforms, or transaction monitoring systems.
Strong analytical skills and ability to investigate complex cases using data.
Understanding of payments, PSPs, deposits, withdrawals, and chargeback processes.
Knowledge of AML, KYC, responsible gaming, and regulated gambling markets will be a plus.
Confident Excel / Google Sheets skills and experience with reporting tools.
Ability to make risk-based decisions in a fast-paced environment.
Strong communication skills and ability to work with cross-functional teams.
English: Intermediate level is a bonus

Who We Are Looking For

We are looking for a proactive and analytical Anti-Fraud Specialist who understands iGaming fraud risks and enjoys hands-on investigation work.

This role is a great fit for someone who wants to join a licensed Ukrainian iGaming project at the pre-launch stage, help shape anti-fraud processes from the beginning, and play a key role in building a secure and scalable product.

Join one of Europe’s fastest-growing certification and audit firms focused on information security, AI governance, and digital resilience.

At BALTUM Bureau, you will work with technology companies, fintechs, SaaS providers, cloud platforms, AI companies, and multinational organisations across Europe, the UK, and North America, delivering internationally recognised ISO certifications and regulatory compliance assessments.

Our organisation is built on a foundation of technical expertise, professional independence, and a commitment to delivering rigorous, high-quality audit services. 

Our areas of expertise include:

Management System Certification - ISO/IEC 27001 (Information Security), ISO 9001 (Quality Management), ISO 22301 (Business Continuity), ISO 42001 (AI Management Systems), ISO 27701 (Privacy Information Management)

Regulatory Compliance Assessments - DORA (Digital Operational Resilience Act), NIS2 Directive, GDPR, EU AI Act

Our clients include:

• SaaS companies
• Cloud service providers
• FinTech & Payment Institutions
• AI Companies
• Healthcare Technology
• Critical Infrastructure
• Enterprise organisations

Who We Are 

PAR Retail, with its Open Commerce® product suite and patent pending Wallet Steering® System, empowers Convenience & Fuel Retailers to gain more share of wallet and customer lifetime value than possible with any other solution provider. PAR Retail’s unified Open Commerce product suite consists of: Activate for Intelligent 1:1 Loyalty, Transact for Contactless Commerce, and Experience for Cross-Channel Customer Experiences. PAR Retail’s solutions are supported by a set of subscription-based program management services and are contractually backed by its 1.5X Performance Guarantee. 

Requirements:  
- Operational knowledge of modern operating systems and networking; 

- Experience with common cloud services: AWS, GCP, and Azure; 

- Network Security and expertise in network pentesting; 

- Security testing of web applications, web services, mobile apps (hybrid and native), and IT infrastructure; 

- Understanding security certifications (PCI DSS / SOC2); 

- Ability to apply modern Application Security methodologies and frameworks; 

- Ability to use at least one modern programming language; 

- Practical experience with Burp Suite; 

- Experience with IDS, IPS, SIEM configuration; 

- Upper-intermediate English level. 

Responsibilities:  

- Requirements analysis, performing penetration testing and security audit; 

- BE, WEB, cloud and mobile clients testing; 

- Vulnerability reporting and remediation process; 

- Communication with development and project management teams; 

- Prepare security testing reports; 

- Prepare and support internal documentation for the project. 

PAR Retail Offers: 

- Long-term employment; 

- Competitive compensation with regular performance-based salary and career development reviews; 

- Paid vacations and sick leaves; 

- Health insurance program; 

- Flexible working hours; 

- Sponsored company educational program, corporate library; 

- Funny celebrations, team outings, and company events; 

- A unique and friendly environment where everyone can explore and learn new technologies. 

Our client is a leading financial institution focused on digital innovation and customer-centric solutions. You will join a cross-functional Agile squad working on the development of a new, cutting-edge banking product aimed at redefining the digital experience for millions of users. The team collaborates closely to deliver secure, scalable, and intuitive financial solutions powered by modern technologies.

Responsibilities:

• Breaking down high-level business requirements into clear, actionable tasks for the development team
• Overseeing the implementation of tasks and maintaining quality control throughout the development lifecycle
• Facilitating communication between customers and the technical team at all stages
• Maintaining comprehensive project documentation within Confluence
• Analyzing existing business processes to identify opportunities for automation and increased operational efficiency
•  

Requirements:

• 5+ years of commercial experience as a System/Business Analyst, demonstrating a clear Senior-level proficiency
• Proven track record in the development and deployment of WEB and Mobile products
• Exceptional ability to gather, structure, and document complex business requirements
• Ability to lead and monitor tasks from the initial requirement phase through to final product launch.
• Hands-on experience with BPMN and UML notations to map business processes and identify bottlenecks
• Practical experience in REST API design and a solid understanding of microservices architecture
• Experience working closely with UI/UX designers, Backend/Frontend developers, QA, and DevOps engineers
• Experience working with non-functional requirements (scalability, security, performance)

Position Name: Senior SOC Analyst

Reports to: Team Lead, SOC

Location: Remote, Philippines

Role Overview

Atlas Technica's mission is to shoulder IT management, user support, and cybersecurity for our clients, who are hedge funds and other investment firms. Founded in 2016, we have grown year over year through our uncompromising focus on service.

We value ownership, execution, growth, intelligence, and camaraderie. We are looking for people who share our Core Values, thrive, and contribute to this environment while putting the customer first. At Atlas Technica, we offer a competitive salary, comprehensive benefits, and great perks to our global Team. We strive to maintain a professional yet friendly environment while promoting professional and career development for our Team Members. Join Atlas Technica now!

We are seeking a Senior SOC Analyst to support day-to-day security monitoring and alert triage.

Responsibilities

• Lead high-severity incident response
• Mentor junior analysts
• Improve detection logic and workflows
• Coordinate response across teams
• Conduct threat hunting
• Contribute to metrics and reporting
• Assist with documentation and training

Requirements

• Experience in SOC or incident response roles
• Strong analytical and investigative skills
• Experience with SIEM and EDR
• Ability to lead incidents effectively  

Desirable Qualities

• Experience in regulated or financial environments

• Threat hunting or detection engineering exposure

   

Atlas Technica is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

We are looking for an Application Security Engineer to help build security into the software development lifecycle across our products and platforms.

In this role, you will work closely with Engineering, DevOps, Architecture, and Security teams to integrate security controls into development processes, identify risks early, and help teams build secure solutions without unnecessary bureaucracy.
 

Responsibilities

• Define and validate security requirements for applications, APIs, integrations, and new services.
• Participate in architecture and design reviews to identify security risks at early stages.
• Build and improve Secure Software Development Lifecycle (SSDLC) practices.
• Integrate security controls into CI/CD pipelines, including SAST, DAST, SCA, Secret Scanning, Container and IaC Scanning.
• Perform security assessments of web applications, APIs, backend services, and AI-driven solutions.
• Support development teams with remediation activities, secure coding practices, and security best practices.
• Develop security standards, baselines, templates, and engineering guidelines.
   

Requirements

• 2+ years of experience in Application Security, DevSecOps, Security Engineering, or a similar role.
• Strong understanding of SSDLC and secure development practices.
• Hands-on experience with SAST, DAST, SCA, threat modeling, and security reviews.
• Good knowledge of OWASP Top 10, OWASP ASVS, API Security, Authentication, Authorization, and Secure Design principles.
• Experience integrating security controls into CI/CD pipelines.
• Familiarity with container security and Kubernetes environments.
• Experience with Infrastructure as Code security (Terraform is a plus).
• Scripting skills in Python and/or PowerShell.
• Understanding of software supply chain security and dependency management.
• Strong communication skills and ability to work effectively with engineering teams.
   

Nice to Have

• Experience with Bug Bounty programs or CTFs.
• Experience securing AI/ML systems and services.
• Experience with Azure, AKS, GitHub Enterprise, Checkmarx, Trivy, or similar tooling.

We are looking for a Threat Intelligence Analyst to join our cybersecurity team and strengthen the company’s proactive defense capabilities.

This role combines cyber threat intelligence, proactive investigations, and risk-oriented analysis. We are looking for a specialist who can identify emerging threats, analyze attacker behavior and TTPs, assess their relevance to the business environment, and help improve the organization’s detection and response capabilities.

You will work closely with SOC, IT, and Risk Management teams to transform threat intelligence into actionable security insights and recommendations.
 

Responsibilities

• Collect, analyze, enrich, and contextualize cyber threat intelligence from multiple sources, including OSINT, CERTs, vendors, and industry feeds
• Monitor emerging threats, attacker activity, vulnerabilities, and adversary TTPs relevant to the organization
• Conduct proactive threat hunting activities across SIEM, EDR/XDR, cloud environments, and other telemetry sources
• Develop and validate hypotheses based on threat intelligence and behavioral patterns
• Support investigations related to incidents, suspicious activity, and threat intelligence findings
• Identify gaps in detection and response capabilities and provide recommendations for improvement
• Assess potential business impact and risk associated with identified threats
• Prepare analytical reports, threat assessments, and actionable recommendations for technical and non-technical stakeholders
• Collaborate with SOC and IT teams to improve detection logic, monitoring, and security processes
   

Requirements

• 2+ years of experience in Threat Intelligence, Threat Hunting, SOC L2/L3, DFIR, or Incident Response
• Strong understanding of MITRE ATT&CK framework
• Hands-on experience with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, etc.)
• Experience working with EDR/XDR solutions
• Understanding of cyber threat intelligence processes and proactive threat hunting methodologies
• Strong analytical and investigative skills
• Ability to work with incomplete or ambiguous information
• Understanding of security risks and attack vectors
• Strong communication skills and ability to explain technical findings clearly
   

Nice to have

• Experience with Purple Team activities
• Understanding of cloud security (Azure / AWS / GCP)
• Experience with KQL, Python, Sigma, or detection engineering
• Experience with threat modeling or risk management processes
• Familiarity with automation and detection-as-code approaches