Jobs Security

Position Name: Information Security Analyst
Reports to: Chief Information Security Officer
Location/Type: Remote (UA Candidates only)

Atlas Technica's mission is to shoulder IT management, user support, and cybersecurity for our clients, who are hedge funds and other investment firms. Founded in 2016, we have grown year over year through our uncompromising focus on service.

We value ownership, execution, growth, intelligence, and camaraderie. We are looking for people who share our Core Values, thrive, and contribute to this environment while putting the customer first. At Atlas Technica, we offer a competitive salary, comprehensive benefits, and great perks to our global Team. We strive to maintain a professional yet friendly environment while promoting professional and career development for our Team Members. Join Atlas Technica now!

We seek a skilled Information Security Analyst to join our rapidly growing organization. This is a highly technical role providing excellent career development opportunities for the successful candidate. You will be work closely with the Chief Information Security Officer (CISO) and various teams to maintain and improve the security posture of Atlas and its clients. As a new position, this role will evolve, providing opportunities for growth and adaptation.

Responsibilities:

Vulnerability Management:

• Review vulnerability reports.
• Research scalable solutions for vulnerability remediation.
• Collaborate with Support/NOC to ensure remediations have minimal impact on clients and facilitate maintenance windows.
• Work with CS/Engineering to script and automate remediations.
• Track progress in ticketing system, including master tickets for multi-client initiatives and sub tickets for individual clients.
• Address vulnerabilities for clients' third-party vulnerability management, including overlap with Cavelo, and apply remedies to other clients.

Risk Management and Due Diligence:

• Provide accurate and timely responses to Due Diligence Questionnaires (DDQs).
• Review and analyze findings from risk assessments and penetration tests for Atlas and clients.
• Address identified vulnerabilities and recommend remediation strategies.
• Participate in Business Impact Analyses and tabletop exercises to enhance organizational resilience.

Industry Benchmark Alignment and Standards Updating:

• Start measuring alignment with Microsoft benchmarks in Intune and work on increasing the score.
• Address vulnerabilities and issues identified in workstation builds, cloud infrastructure configurations, and security configurations.
• Harden systems to enhance security across workstations, cloud infrastructure, and security configurations.

SOC 2 Maintenance and Additional Security Tasks:

• Perform test restores.
• Conduct reviews of our KnowBe4 phishing tests and training.
• Review SIEM logs.
• Assist in addressing cybersecurity incidents.
• Work with NOC and outsourced SOC on remediation runbooks.

• Perform additional tasks as assigned to support the security team and organization.

   

Requirements:

• Strong understanding of cybersecurity principles and practices.
• Experience with vulnerability management and remediation.
• Familiarity with Microsoft Intune and security benchmarks.
• Excellent analytical and problem-solving skills.
• Ability to work collaboratively with cross-functional teams.
• Strong communication skills, both written and verbal.
• Strong ability to work independently.
• Experience with security tools (SIEM, IDS/IPS, vulnerability scanners).
• Experience with RMM/SOAR and other automation platforms.
• Experience scripting.
• Experience writing runbooks.

Desirable Qualities:

• Experience working in an MSP environment (preferred, but not required).
• Relevant certifications (AZ-500, SC-900, SC-300, CompTIA Security+, etc.)

Role description:
We are looking for an Information Security Specialist responsible for administering and maintaining security solutions, monitoring security events, and ensuring compliance with security standards across the company.

Key Responsibilities:

• Administer all technical information security solutions used by the company.
• Monitor events in SIEM, DLP, and antivirus (AV) systems.
• Ensure compliance with information security policies in company offices.
• Participate in checking remote employees for compliance with security requirements.
• Respond to security incidents and participate in their handling.
• Manage access across various systems according to the access matrix.
• Maintain and update DLP, SIEM, and other security system rules.
• Analyze the effectiveness of technical solutions used by the company and suggest improvements.
• Participate in developing and implementing the company’s information security strategy.
•  

Requirements:

• Knowledge and experience with security technologies: SIEM, DLP, EDR/XDR, Firewall, etc.
• Experience with Microsoft 365 ecosystem: Active Directory, SharePoint, Exchange.
• Understanding of vulnerability management, IAM, PAM.
• English level B1 or higher (for reading/writing technical documentation and understanding standards).
•  

Preferred:

• Experience in penetration testing.
• Experience in system administration.
• Experience working in a SOC.
• Understanding of international security standards: ISO 27001, ISO 27701, NIST, HIPAA, CIS2.
•  

We Offer:

• Competitive salary
• Opportunities for professional development and certifications
• Work in an international team with a modern IT environment
• Full remote work options

We are looking for a Senior Compliance Manager with strong and seasoned hands-on experience in IT service companies to lead our compliance and data protection framework from a contractual, regulatory, and information security perspective.

This role is operational and execution-focused, not advisory only. You will be responsible for building, implementing, and maintaining a robust compliance program that is closely tailored to our software engineering services business model and complies with the data security and contractual requirements of our enterprise-level clients.

Day-to-day, you will practically translate client contractual obligations into actionable compliance controls, work closely with Legal, Delivery, IT, and Security Departments to evaluate and identify vulnerabilities, propose and implement workable solutions, and ensure continuous audit readiness (ISO 27001, SOC2, and client-driven audits). This role also involves supporting internal and external audits, client due diligence questionnaires, vendor risk activities, internal compliance onboarding, and ongoing training of Proxet personnel, and ongoing alignment with client security expectations across multiple jurisdictions (U.S., Europe, Latin America).

If you understand how compliance works inside a global IT services organization, this role is for you.

Responsibilities

• Reviewing and interpreting client contractual requirements with respect to security, compliance, and data privacy into actionable and deployable operational activities consistent with industry practice for a software engineering services business. 
• Build and maintain a compliance chart per client by mapping client requirements to internal controls. Identify gaps and coordinate remediation with IT, Security, Delivery, and Legal Departments.
• Conduct quarterly internal compliance audits across projects.
• Implement and maintain GDPR compliance, support DPA review and negotiation.
• Ensure new client pre-sales and onboarding align with the Company's compliance program.
• Ensure proper data classification and data handling controls.
• Contribute to the development and maintenance of internal policies, procedures, and controls related to security and compliance.
• Perform risk assessments and develop appropriate risk treatment plans.
• Support vendor and third-party risk management processes and assessments.
• Monitor changes in regulatory landscapes and translate them into actionable recommendations.
• Create and deliver Company-wide appropriate and tailored awareness training on data protection and regulatory compliance requirements for internal teams.
• Act as a point of contact for compliance-related topics during engagements and audits.
• Apply data retention and secure data disposal requirements in line with regulatory and contractual obligations.
• Follow and support the company’s established cybersecurity standards and roadmap, ensuring alignment with defined requirements, milestones, and priorities.
• Prepare compliance dashboards and reports for leadership.

Requirements

• 5+ years of experience in compliance, GRC, risk management.
• 4+ years of experience in compliance in an IT service/outsourcing company.
• Hands-on experience with security frameworks (e.g., ISO/IEC 27001, SOC 2) and standards implementation and remediation experience.
• Excellent English skills, including familiarity with and strong contractual review skills (MSA, SOW, DPA), and experience in collaborating with Legal Departments.
• Strong familiarity with global data protection laws (GDPR, CCPA/CPRA, UK GDPR) and practical GDPR, CCPA/CPRA, DPF implementation experience.
• Understanding of industry-specific compliance and regulatory standards across sectors, including funds, healthcare, and private equity.
• Ability to support Engineering (Delivery) by identifying and tracking compliance issues and coordinating timely mitigation actions with relevant stakeholders.
• Ability to translate regulatory and security requirements into practical, business-aligned, actionable controls.
• Ability to conduct risk assessments and define appropriate risk treatment measures.
• Understanding of data handling, intellectual property rights, and related contractual considerations.
• Experience with controls and governance for AI usage.
• Experience preparing and maintaining documentation for audits, regulators, and clients.
• Strong attention to detail and ability to manage multiple compliance initiatives in parallel.
• Strong communication and interpersonal skills.
• Strong documentation skills and high attention to detail.
• English: Upper intermediate or higher.
• Ability to work independently and as part of a team.
   

Would be a plus:

• Experience with regulatory requirements across multiple jurisdictions (e.g., U.S., Europe, Latin America).
• Practical experience with BCP/DRP implementation and maintenance.
• Hands-on experience with healthcare compliance frameworks (e.g., HIPAA).
• Experience with the investment fund clients and private equity vertical domain expertise, including PCI DSS.
• Professional certifications such as CCEP, CISA, CISM, CRISC, CISSP, or equivalent.
• Experience in data-intensive projects (DWH, BI, AI, analytics).

We are seeking a hands-on IT Security Specialist to design, implement, and operate effective security controls across our corporate IT and SaaS ecosystems. This role focuses on endpoint, identity, and SaaS security, building and maintaining secure baselines through effective use of MDM, EDR, and IAM, while ensuring controls are measurable, documented, and continuously improved.

You will work closely with Security and IT, Delivery, and Business stakeholders to reduce security risk, improve operational resilience, strengthen company-wide security awareness, and support audit readiness (SOC 2 / ISO/IEC 27001) through strong documentation, evidence collection, and continuous control improvement via GRC workflows.

Responsibilities

• Implement and administer MDM, EDR, and IAM controls (device enrollment & baselines, endpoint protection policies, hardening, SSO/MFA, conditional access, access reviews, etc.).
• Maintain and continuously improve the security baseline for endpoints and corporate SaaS services.
• Conduct regular security audits and assessments to ensure compliance with industry best practices and regulatory requirements (e.g., GDPR, ISO/IEC 27001, HIPAA).
• SIEM implementation, onboarding log sources, maintaining ingestion, and alerting.
• Perform risk assessments and recommend appropriate mitigation strategies.
• Prepare and maintain security awareness materials and support company-wide security awareness activities to improve employees’ cyber hygiene.
• Manage and respond to security incidents, including investigation, containment, eradication, recovery, and post-incident analysis.
• Support vulnerability and patch remediation workflows.
• Contribute to the development and maintenance of internal policies, procedures, and controls related to security and compliance.
• Support SOC 2 and ISO/IEC 27001 readiness by maintaining evidence, assisting with control implementation tracking, and operating via GRC workflows where applicable.
• Collaborate with other teams on secure onboarding of systems/vendors and ongoing security improvements.
• Monitor and mitigate phishing, malware, and other cyber threats.

• Maintain awareness of emerging threats and recommend improvements.

   

Requirements

• 3+ years of hands-on experience in an IT service/outsourcing company in the position of IT Security / SecOps with strong security ownership.
• Proven hands-on experience implementing and administering CrowdStrike Falcon (EDR/XDR), ManageEngine Endpoint Central (Zoho), and Okta IAM, in real environments (not just “familiarity”).
• Strong understanding of endpoint and identity security fundamentals (device hardening, patching, MFA/SSO, conditional access, access lifecycle, etc.).
• Hands-on experience with SIEM/log aggregation, including SIEM implementation, onboarding log sources, maintaining reliable log ingestion pipelines, and configuring alerting/use cases.
• Solid understanding of SaaS security.
• Experience with Google Workspace security administration at scale.
• Practical familiarity with SOC 2 and/or ISO/IEC 27001 concepts and operational routines.
• Experience in investigating security events and incidents, conducting root cause analysis, and producing post-incident reports.
• Basic scripting knowledge (Bash, Python, PowerShell) for automation.
• Strong analytical and troubleshooting skills, ability to work with logs, alerts, and system telemetry.
• Ability to write and maintain technical documentation (policies, standards, processes, playbooks).
• English: Upper intermediate or higher.
• Ability to work independently and as part of a team.
• Strong communication and interpersonal skills.

Would be a plus:

• Familiarity with data privacy and regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS).
• Experience in data-intensive projects (DWH, BI, AI, analytics).

Join Innoneers – Shaping the Future of Software Engineering!
 

At Innoneers, we don’t just build software; we engineer innovation. We are a dynamic software development company dedicated to transforming complex business challenges into seamless digital experiences. Specializing in Web, Mobile, and Cloud solutions, we pride ourselves on our technical agility and "Engineering Excellence" mindset.
 

As we scale our operations, we are looking for a passionate SoC Verification Engineer to join our team. If you thrive in an environment where clean code meets cutting-edge technology (Node.js, React, AWS, Python) and want to make a tangible impact on global projects in E-commerce, Fintech, and Logistics, Innoneers is the place for you.

We will trust you with:

• Develop and maintain SystemVerilog/UVM-based verification environments at both module and SoC level;
• Write test sequences, define functional coverage models, and ensure coverage closure;
• Debug simulation results using waveform tools and collaborate with design teams to resolve issues;
• Drive constrained-random stimulus generation and continuous improvements in our verification methodology;
• Apply modern EDA tools and automate verification flows to maximize speed and quality;
• Contribute to quality assurance, release-readiness, and design-test alignment for every chip.
   

What you’ll need to succeed:

• 8+ years of digital verification, including 4+ years of constrained-random verification with UVM.
• 2+ years of embedded C development for SoC verification.
• Experience designing verification architecture from design specifications and creating test plans.
• Ability to translate functional requirements into functional coverage models.
• Skilled in constrained-random stimulus generation and coverage analysis/closure.
• Strong expertise in root-cause analysis and debugging SystemVerilog RTL.
• Proficiency in scripting with Python or similar languages.
• Solid experience with Linux, bash, or equivalent environments.
• Proficient with commercial EDA tools.
• Experience collaborating effectively with cross-functional teams.
• Hands-on experience with UVM verification architecture and vertical reuse of lower-level UVCs/environments.
• Skilled in mixed-language simulation and system modeling.
• Experience with effort estimation, project planning, scheduling, and tracking.

• Proven ability to lead and mentor a small team.

   

Nice-to-haves:

• Experience with SystemC for modeling and simulation.
• Knowledge of UPF and low-power verification methodologies.
• Exposure to formal verification techniques.
• Hands-on experience with FPGA validation and bring-up.
• Experience with full-chip emulation and bring-up.
• Familiarity with OpenOCD/GDB for software-driven verification.
• Experience in SystemVerilog RTL design.

If you're ready to shape the future of technology with us, apply and let's talk!

We are looking for a Security Architect to join our teams!

Requirements:

- 7+ years of experience in Application Security, Security Architecture, or Product / Platform Security roles.
- Hands-on experience designing security architectures for complex, distributed systems.
- Strong understanding of secure SDLC, security-by-design principles, and architectural security patterns.
- Proven experience leading threat modeling and architectural security reviews for critical systems.

Deep expertise in:
- Application & API Security
- Cloud Security (AWS preferred)
- Identity & Access Management (IAM)
- Solid understanding of modern architectures: microservices, event-driven systems, Kubernetes.
- Ability to make sound security architecture decisions under uncertainty and business constraints.
- Experience collaborating with senior engineers, architects, and engineering leadership.

Will be plus:

- Experience working in regulated or security-sensitive industries.
- Practical experience implementing Zero Trust and Defense-in-Depth models.
- Experience with security governance across multiple products and teams.
- Experience building reusable security patterns and reference architectures.

Responsibilities:

- Define, own, and evolve the target-state security architecture for applications, APIs, and cloud platforms.
- Embed security-by-design principles into product development lifecycles and architectural standards.
- Lead threat modeling activities for key products and platforms.
- Act as a company-wide authority on application and cloud security architecture.
- Develop and maintain security architecture standards, guidelines, reference architectures, and patterns.
- Advise engineering leadership, product owners, and management on security risks and trade-offs.
- Collaborate with Legal, Compliance, and Risk teams to align security decisions with business priorities.

Our benefits to you:

☘️An exciting and challenging job in a fast-growing holding, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance and more
🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed
🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided
🏖Paid vacations, sick leave, personal events days, days off
💵Referral program — enjoy cooperation with your colleagues and get the bonus
📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences
🎯Rewards program for mentoring and coaching colleagues
🗣Free internal English courses
✈️In-house Travel Service 
🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, PIN-UP clubs for movie / book / pets lovers and more
🎳Other benefits could be added based on your location

We’re looking for an Anti-Fraud Specialist to build and own the company’s risk and fraud prevention system from scratch. This role combines strategic thinking and hands-on execution you’ll design the full fraud-contour, implement risk rules, and protect product economics without damaging conversion and retention.

You’ll work closely with the CEO, PSP Manager, Product, and Marketing teams to ensure sustainable growth and PSP stability on the US Sweepstakes market.

💪 Key Responsibilities:
✅ Build and own the full risk lifecycle:
✅ Develop and implement a unified fraud detection system integrating:
PSP risk signals, chargebacks, BIN & velocity checks, device fingerprinting, IP/proxy/geo data, KYC signals, affiliate sources, and in-product behavioral data.
✅ Create and manage risk-scoring models and fraud profiles for all users.
✅ Design and optimize:
- Auto-block rules
- Withdrawal holds
- Manual review flows
- Bonus eligibility logic
- Geo & device restrictions
✅ Monitor and improve fraud economics.
✅ Collaborate with PSP to maintain healthy processing metrics and reduce AML/chargeback risks.
✅ Work with Product to close UX and bonus exploitation gaps.

🔥 Skills & Competencies:
✔️ iGaming and US Market Experience 
✔️Experience working with antifraud tools, device/IP/geo systems, and PSP logs.
✔️ Ability to work with SQL/BI tools at analytical level.
✔️ Experience building risk rules, thresholds, and scoring models.
✔️ Ability to make tough decisions and challenge marketing/product when necessary.
✔️ English B2 or higher.

⭐ Nice to Have

Experience in US Sweepstakes or Social Casino products.
Experience building antifraud systems from zero in startups.
Knowledge of AML processes and PSP health metrics.
Experience working with affiliate-heavy traffic.

✨What We Offer:

• Full remote work
• Flexible working hours (start between 10:00 and 12:00)
• 8 hour work day + break
• Time Off 28 calendar days of paid vacation (after successfully passing the probationary period)
• 4 days of days off

About us

Ruby Labs is a leading tech company that creates and operates innovative consumer products. We offer a diverse range of opportunities across the health, education, and entertainment industries. Our innovative teams are driving the future of consumer-led products, and we're always looking for passionate individuals to join us. Learn more about our story at: https://rubylabs.com/about-us/

About the role

We are looking for an IT Security Lead to design, implement, and manage our corporate IAM and operations security infrastructure from the ground up. Our goal is to implement a high level of automation in IAM and create a seamless yet secure operations environment using the latest technologies, ensuring that security does not slow down our workforce while maintaining robust safeguards.

Key Responsibilities 
 

Security Infrastructure & Engineering

• Design and build operations security infrastructure and IAM from scratch.
• Develop, implement, and maintain comprehensive security policies, strategies, and protocols to safeguard the intellectual property, and prevent unauthorized access.
• Deploy and manage security tools and solutions, with preference for open-source technologies where appropriate.
• Utilize MDM software with other products to ensure organization-wide device security compliance and enforce consistent protection standards across all endpoints.
• Establish and enforce remote work security standards and best practices for company owned and BOYD devices.

Identity & Access Management

• Design and implement access structure using identity provider.
• Manage user provisioning and deprovisioning workflows across all company tools and services.
• Automate access lifecycle management, including onboarding and offboarding processes.
• Control and audit access permissions to ensure principle of least privilege.
• Implement and maintain identity federation technologies across multiple platforms.

Google Workspace & Cloud Security

• Administer Google Workspace with focus on security configurations and compliance.
• Configure policies like Context Aware Access, LDAP, SCIM, and other controls within Google Workspace.

Security Operations & Governance

• Establish IT security operations (SecOps) best practices and standard operating procedures.
• Conduct regular security assessments and vulnerability management.
• Define security metrics and KPIs; provide regular security posture reports.
• Advise leadership on security risks, compliance requirements, and remediation strategies.

Process & Documentation

• Develop and maintain comprehensive security documentation, runbooks, and policies.
• Streamline security-related processes for efficiency and effectiveness.
• Create and maintain disaster recovery and business continuity plans.
• Drive security awareness and training initiatives across the organization.

Qualifications

• At least 5 years of experience in IT security engineering or infrastructure security roles.
• Proven track record of building corporate security infrastructure from the ground up.
• Strong automation (for example n8n, getcakewalk, Slack workflows, jumpcloud,, etc) and basic REST API knowledge.
• Deep understanding of IT security operations (SecOps) best practices and frameworks.
• Strong engineering background with experience in infrastructure design and implementation.
• Hands-on experience with Google Workspace administration and security configuration.
• Expert knowledge of identity and access management, including user provisioning and deprovisioning workflows.
• Experience with SSO, SAML, OIDC, and identity federation technologies.
• Knowledge of Docker.
• Experience with IAM automation and orchestration.
• Understanding of compliance frameworks (SOC 2, ISO 27001, etc.).

Nice to have

• Experience with automated user provisioning from Google Workspace to other services.
• Knowledge of zero-trust architecture principles.
• Basic knowledge of Typescript.
• Previous experience in a startup or high-growth environment.

Location

Ruby Labs operates within the CET (Central European Time) zone. Applicants from any country are welcome to apply for the position as long as they are located within approximately ± 4 hours of CET. This ensures optimal collaboration and communication during working hours.

Benefits

Discover the perks of being part of our vibrant team! We offer:

• Remote Work Environment: Embrace the freedom to work from anywhere, anytime, promoting a healthy work-life balance.
• Unlimited PTO: Enjoy unlimited paid time off to recharge and prioritize your well-being, without counting days.
• Paid National Holidays: Celebrate and relax on national holidays with paid time off to unwind and recharge.
• Company-provided MacBook: Experience seamless productivity with top-notch Apple MacBooks provided to all employees who need them.
• Flexible Independent Contractor Agreement: Unlock the benefits of flexibility, autonomy, and entrepreneurial opportunities. Benefit from tax advantages, networking opportunities, reduced employment obligations, and the freedom to work from anywhere. Read more about it here: https://docs.google.com/document/d/1tzxGX4Uu7Ts_HCLFXESKLnKaaBfVCPf1f9AYZPrkjJM/preview?tab=t.0

Be part of our fast-growing team and seize this excellent opportunity for personal and professional growth!

Interview Process

After submitting your application, we conduct a thorough review which typically takes 3 to 5 days, but may occasionally take longer due to the volume of applications received. If we see a potential fit, we proceed with the following steps:

• Recruiter Screening (40 minutes)
• Technical Interview (40 minutes)
• Final Interview (40 minutes)

Life at Ruby Labs

At Ruby Labs, we move fast, aim high, and expect the same from our team. We’re not here to play small—we’re here to build, grow, and win. That means we look for people who are ambitious, driven, and ready to give their best every single day.

This is a place for individuals who thrive under pressure, embrace challenges, and see opportunity in every obstacle. If you’re hungry to achieve, motivated by impact, and want to grow at the speed of your own ambition, Ruby Labs offers the platform to make it happen.

Here, effort is matched with reward. We recognize those who go all in and deliver results, and we create space for people who want more—more responsibility, more growth, and more success.

Who we  are: 

RBI Retail Innovation is a product development company, a part of the group of Raiffeisen Bank International (Vienna, Austria). We are a stable company that works in the EU market. Now we have products in Poland. Our ambition will be widespread in EU countries in the next few years. Our projects include next-gen digital banking platforms’ design, delivery, and post-delivery activities. Our team is international but mainly consists of Ukrainian developers. We have offices in Kyiv and Rivne. Our mission is to provide seamless banking with ease and speed that’s built for people. Our values are People First, Product Passion, and Trust.

About you: 

• At least 3 years of experience in the information security field, including but not limited to: Web/Mobile Application Security, Cloud Security, Penetration Testing, Vulnerability Assessment, etc.
• Ability to manually find and exploit basic web vulnerabilities
• Familiarity with OWASP Security Testing Guides, OWASP Top 10
• Knowledge and understanding of Application Security, Cloud Security (AWS), Authentication and Security protocols
• Strong communication troubleshooting skills
• Good English skills (Intermediate+)
• Self-disciplined

Will be a plus:

• Experience in web/mobile development
• Relevance certifications such as AWS Cloud Security, EC-Council CEH, Offensive Security: OSCP, OSWE, OSCE
• Security related publications, blog posts, and/or participation in tools development
• BugBunty experience (please provide link to your profile)
• Experience with various penetration testing tools (e.g., BurpSuite, Metasploit, OWASP ZAP)

You will:

Drive company application security and product improvements:

• Performing security assessment and internal penetration testing
• Working closely with Developers and DevOps on promoting, clarification, and implementing leading security mechanisms in the products and infrastructure
• Provide guidance on secure system architecture (including cloud security) and software development processes aiming to achieve best in class security for our products
• Estimate application security risks and suggest mitigation strategies, maintain Threat Modeling
• Assess current application security posture against OWASP ASVS and MASVS

Drive vulnerability management including:

• Provide recommendation and best practice on vulnerability remediation
• Facilitate, communicate, and assess mitigation steps
• Help key stakeholders to understand the vulnerabilities

Participate as (SME) subject matter expert in security incidents assessment, analysis, and remediation.

What we offer: 

• You will be a part of global team of RBI Group — one of the leading banking groups in Central and Eastern Europe 
• An opportunity to work with some of the most talented and experienced people in the Fintech industry 
• The ability to drive change and innovation in the products we develop 
• Official employment, gig-contract 
• Remote-first work model 
• Competitive salary 
• Personal and professional growth, corporate English courses 
• Paid sick days-off and 20 working days of vacation per year 
• Medical insurance 

 As an Application Security Team Lead at JFrog, you will… 

• Build and lead a team of security researchers and penetration testers. • Help to reshape JFrog Product Security  

• Plan and execute advanced penetration testing campaigns. 

• Develop tools and frameworks for scalable security testing and fuzzing. 

• Lead Security innovation by building and managing penetration testing tools \ AI Agents 

• Analyze vulnerabilities, perform root cause analysis, and develop proofs of concept. 

• Identify systemic product weaknesses and help define long-term mitigations. 

• Collaborate with engineering teams to reproduce, triage, and fix vulnerabilities. 

• Contribute to security research publications, CVE submissions, and industry knowledge sharing. 

• Continuously evolve internal testing capabilities using modern tooling and AI-assisted approaches. 

To be an Application Security Team Lead at JFrog, you need… 

• Proven 2+ years of experience in leading application security research Teams (SAAS or software company). 

• 7+ year experience in Research and penetration testing. 

• Strong coding skills and deep technical understanding of web, API, cloud-native, and backend technologies. 

• AI and LLM Penetration testing knowldge and Experience  

• Experience with penetration testing tools (Burp Suite, Metasploit, etc.) and Custom Security Tools development. 

• Familiarity with modern architectures (e.g., Cloud, microservices, containers, Kubernetes). 

• Familiarity with secure software architecture and typical attack vectors. 

• Demonstrated ability to lead security testing engagements and report technical findings effectively. 

• Experience building or integrating automated PT or fuzzing pipelines is a strong advantage. 

• Knowledge and hands-on experience with SSDLC tools and  CI/CD pipelines,  

• Publications or open-source contributions in the security domain are a plus.

Hello guys,

we are looking for a experienced soc analyst who had already worked with Wazuh or Graylog and is experienced in working with alerts.

It is best if he is skilled with deep alert management and threat hunting.

We are using Wazuh Explore tab for threat hunting but need some guidance to work with alerts. 

Are you passionate about making the internet a safer place? We are looking for a Middle Security Operations Researcher to join our team and help protect enterprise clients from harmful bots and online threats. This is a remote, full-time role that offers the opportunity to work directly with global customers, analyzing traffic patterns and neutralizing malicious activity.

At Sigma Software, we value expertise, ownership, and proactive communication. You will collaborate with a diverse international team while enjoying the flexibility of working from anywhere.

Why join us? You will work on impactful cybersecurity projects, gain exposure to cutting-edge analytics tools, and contribute to safeguarding digital ecosystems worldwide.

CUSTOMER
Our customer is a global provider of comprehensive security solutions, protecting individuals, organizations, and communities from a wide range of risks, particularly in the digital space. Their enterprise-focused products specialize in bot defense and invalid traffic detection, helping clients safeguard critical systems and maintain operational integrity.

PROJECT
The project focuses on real-time threat detection and bot mitigation for enterprise-scale clients. Security Operations Researchers collaborate directly with customers, leveraging advanced analytics platforms to identify malicious traffic patterns and neutralize online threats. This dynamic environment requires both technical expertise and strong communication skills.

JOB DESCRIPTION:

• Provide Tier 2 technical support to customers in real time, delivering clear and professional responses
• Analyze logs, graphs, and dashboards, isolating and investigating data using tools like Kibana
• Manage and organize cases, tickets, and requests in Salesforce
• Perform back-office tasks, including writing and maintaining suspicious field expressions
• Write and optimize SQL queries for data retrieval, analysis, and manipulation in BigQuery
• Communicate with global customers, ensuring timely responses and effective issue resolution
• Work in a shift-based schedule, including weekend shifts

QUALIFICATION:

• 2+ years of experience with data analysis
• Strong understanding of log analysis, APIs, and client-server architecture
• Proficient in SQL, including BigQuery SQL
• Knowledge of HTML, JavaScript, and HTTP request methods
• Strong troubleshooting and problem-solving skills

• Experience in customer support, including direct communication with clients; professionalism and politeness are essential

   

WILL BE A PLUS:

• Experience in a Cybersecurity Analyst/Researcher role, ideally supporting external customers in threat detection and response
• Experience in web security and security research: web application security, bot management, fraud detection
• Basic Python skills
• Experience with Kibana

PERSONAL PROFILE:

• Good English (speaking/writing)
• High level of responsibility and ownership
• Ability to work independently with minimal supervision
• Planning and decision-making skills with considerations for multiple integrated systems
• Proactive communicator who keeps stakeholders informed without being prompted

Work schedule: 40 hours per week, 5 days per week. Workdays can be adjusted to start earlier or later, including weekends if necessary.

Additional info: There may be 1–2 business trips per year to Tel Aviv.

About Us

We’re a young startup, Lovat Compliance — a global tax & compliance technology provider specialising in EPR, VAT, sales tax and cross‑border compliance for e‑commerce businesses. We’re not yet a giant corporation, and much of what we will build is still ahead of us. We need someone who understands that things aren’t perfect yet, is comfortable being the one who owns the space, and who can help us build things from the ground up.

What You’ll Do

• Establish and maintain our data‑security and information‑security programme from scratch: policies, standards, procedures tailored to our platform and services.
• Perform regular risk assessments, vulnerability scans and data‑protection audits; identify gaps and lead remediation.
• Be the owner of incident response: detection, containment, investigation and reporting of security events.
• Collaborate closely with IT development and compliance teams so that data‑protection is embedded into product development and operations.
• Manage data‑handling and access controls across the organisation — ensuring our client and platform data are processed securely.
• Run training and awareness programmes for staff on data‑security, privacy regulation (e.g., GDPR) and secure behaviours.

• Keep an eye on emerging threats, security trends and regulatory developments relevant to e‑commerce, EPR/VAT/sales‑tax platforms, and advise on what changes we need to make.

   

What We Are Looking For

• Minimum 1.5 years of experience in a role related to data security, information security or risk management — ideally within SaaS, e‑commerce or cloud‑based platforms.
• Good knowledge of data‑protection laws (e.g., UK/EU GDPR), information‑security frameworks (e.g., ISO 27001, NIST) and data‑security best practices.
• Proven experience with risk assessments, incident response and security audits.
• Excellent communication skills — able to explain security concepts to both technical and non‑technical people.

• We’re looking for someone grounded and realistic — who understands that perfection isn’t necessary, who can work independently to build things, and who’ll sleep well at night knowing things are secure even if the system isn’t «perfect».

   

Will be an advantage:

• A bachelor’s degree (or equivalent experience) in Computer Science, Information Security, Cybersecurity or a related discipline.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor or similar.

• Familiarity with cloud platforms like Google Cloud (GCP) and/or Amazon Web Services (AWS).

   

What We Offer

• Competitive salary: €1,000 - €1,700 (remote contract)
• Opportunity to work in a fast‑growing startup with global ambitions.
• Fully remote working model — flexibility and autonomy.
• Professional development opportunities and support.

Who we are:
Selesa offers IT outsourcing, specialist out-staffing, and project management services to enhance business operations. We focus on providing skilled professionals for IT needs, including development, security consulting, and business development. Selesa also manages sales, account management, and human resources to support company growth. Our services are known for efficiency, quality, and strong communication, making us a trusted partner for businesses looking to streamline and secure their IT infrastructure. Originated in Vilnius, Lithuania, we cater to global clients.

Who we are looking for:

We’re looking for a Junior Security Operations Assistant, working alongside experienced professionals to protect our clients from cyber threats. In this role, you’ll be at the forefront of defending our clients’ networks, gaining hands-on experience, and contributing to a safer digital landscape. 

Responsibilities

• Assist with daily security monitoring and SOC activities
• Review security alerts and escalate issues when required
• Help with log collection and analysis
• Support incident documentation and reporting
• Assist with vulnerability tracking and follow-ups
• Help maintain security and ISO 27001 documentation
• Support internal audits, evidence collection, and basic security tests
• Follow security policies and procedures

Requirements

• Proficiency in English 
• Basic knowledge of Linux (command line, logs, permissions)
• Basic understanding of cybersecurity concepts (phishing, malware, attacks)
• Awareness of SOC operations and incident escalation
• Basic understanding of networking concepts (ports, protocols, firewalls)
• Willingness to learn security tools and processes
• Good attention to detail and documentation skills
• Junior / Entry-level
• 0–2 years of experience in IT, SOC, or cybersecurity-related roles
• Education, training, or internships in IT/security are acceptable
• Strong attention to detail and teamwork skills.

• Ability to meet deadlines in a fast-paced environment

   

Nice to Have 

• Basic scripting (Bash or Python)
• Exposure to SIEM or endpoint security tools
• Familiarity with security frameworks
• Entry-level security certifications (e.g., Security+)

What we offer:

• Fully remote position with a flexible schedule
• Long-term opportunity with potential for financial and career advancement

• Supportive and positive work culture, collaborating with like-minded teammates

   

When submitting your application, please make sure to include your responses to the following screening questions in your COVER LETTER:

1. Please explain to us your level of spoken/written English. Just rank it from 1 to 10, where 10 means a Native Speaker; 8-9 means a Near Native Speaker; 6-7 means Fluent Speaker; under 6 any further levels.
2. How would you approach assessing and mitigating the risks associated with a new software or system implementation?
3. What methods or tools do you use to stay updated with the latest cybersecurity threats and trends?
4. What are your Monthly salary expectations for a long-term, full-time position (if we consider 40 hours a week)?

This is us

At Avenga, we believe that human creativity empowers technology that matters. Operating globally, our 6000+ specialists provide a full spectrum of services, including business and tech advisory, enterprise solutions, CX, UX and Ul design, managed services, product development, and software development.
 

This is the job
 

We are looking for a DevSecOps Engineer to lead security-by-design practices across GitLab CI/CD. You will help enforce application security, compliance, and delivery reliability through automation, vulnerability management, and secure SDLC standards. This role includes transitioning legacy security tools to GitLab-native capabilities and working closely with InfoSec, Cloud Platform, and Product teams.

This is you

• Proven experience with GitLab Ultimate security features and CI/CD administration
• Hands-on with SAST, DAST, SCA, container scanning, and secret detection in automated pipelines
• Practical experience with SCA tools like BlackDuck, Nexus Lifecycle, Snyk
• Familiar with SonarQube for code quality
• Strong scripting/automation skills in Python, Bash, YAML
• Solid fundamentals in container and cloud security (Docker, Kubernetes, image scanning, registry hardening)
• Experience with threat modeling, risk assessment, and remediation planning

Nice-to-have skills:

• Relevant certifications: DevSecOps Professional, CKS, Security+, or equivalent
• IaC security tooling experience (Terraform + OPA, Conftest, Checkov)
• Knowledge of software supply chain security, including SBOM, Cosign, and SLSA
• Familiarity with DORA metrics and security KPI reporting

This is your role

• Drive secure-by-design guardrails across GitLab CI/CD
• Implement and maintain automated security scanning: SAST, DAST, SCA, container, and secret detection
• Enforce policy-as-code (branch protection, MR approvals, vulnerability gates, artifact signing)
• Manage vulnerability lifecycle: periodic assessments, triage, remediation planning, and tracking to closure
• Collaborate with engineering and product stakeholders to prioritize security fixes
• Align controls with CIS, NIST, and (if applicable) GDPR
• Enable audit-ready reporting, SBOM generation, and security KPIs in observability dashboards
• Implement secure IaC using Terraform/Ansible and apply least-privilege and zero-trust patterns
• Harden CI/CD infrastructure: build runners, container images, registries, and deployment targets
• Champion shift-left security via training, playbooks, and standardized toolchains
• Document security runbooks and contribute to SDLC harmonization standards