Jobs Security

About the Company & Product

We are a rapidly growing product company entering the global gaming entertainment market. Our mission is to bring innovative business solutions to the iGaming industry by developing cutting-edge technology products.

Our core product is a SaaS gaming platform made up of over 200 microservices, delivering a seamless gaming experience to millions of users worldwide. It provides a full suite of iGaming solutions, including game management, payments, analytics, CRM, and more.

Ready for a career upgrade?

As we continue to scale our platform, expand into new markets, and strengthen our security governance function, we are looking for an Information Security GRC Analyst with a strong technical mindset to join our team.

This is not a purely documentation-focused role. You will work closely with engineering, infrastructure, and business teams to understand how our platform operates in practice and help translate technical risks into effective governance and compliance processes.

As a company operating in the iGaming industry, many aspects of our business are subject to regulatory and licensing requirements across different jurisdictions. You will be directly involved in these processes — from preparing documentation and collecting audit evidence to analyzing regulatory requirements and participating in audits and certification activities.

You will report to the Security Lead and collaborate with engineering, DevOps, legal, and business teams to help build a mature, scalable, security-driven governance function.

What you’ll be doing

• Maintain and improve security and compliance frameworks ISO 27001, GDPR, and jurisdiction-specific licensing requirements;
• Own security policies, procedures, and documentation lifecycle: creation, versioning, and periodic reviews;
• Support internal and external audits: collect evidence, track findings, coordinate remediation;
• Conduct security risk assessments across systems, infrastructure, and cloud environments; maintain risk registers and control matrices;
• Run vendor security assessments and handle security questionnaires;
• Work with engineering and DevOps teams on vulnerability management tracking, prioritization, and remediation coordination;
• Collaborate with engineering to translate compliance requirements into real technical controls;
• Use AI tools to automate GRC workflows and actively look for ways to reduce manual work across the team;
• Support security awareness initiatives and incident response activities when needed.

You have these superpowers

• 2+ years in Information Security, GRC, or Compliance;
• Solid hands-on understanding of ISO 27001 and audit support;
• Good grasp of GDPR and security governance processes;
• Experience with risk registers, control matrices, policies, and compliance documentation;
• Experience running vendor risk assessments and handling security questionnaires;
• Good understanding of networking basics, OS-level security, IAM, and common attack vectors;
• Comfortable discussing cloud infrastructure and modern application environments with engineering teams;
• Familiarity with at least one security tooling area: SIEM, vulnerability scanners, or similar;
• Can read architecture diagrams and technical docs — not just compliance checklists;
• Actively uses AI tools (ChatGPT, Claude, Copilot, or similar) in daily work;
• Strong written communication, structured thinking, and ability to drive things forward independently.

Nice to have

• Experience in iGaming or familiarity with industry standards such as GLI-19 and GLI-33;
• Knowledge of AML / KYC requirements;
• Experience with SOC 2 or other compliance frameworks beyond ISO 27001;
• Familiarity with GCP, containerized environments, or Kubernetes from a security angle;
• Exposure to OSINT or threat intelligence practices;
• Familiarity with DevSecOps or security in CI/CD pipelines;
• Experience building simple AI-assisted automations (LLM APIs, no-code tools);
• Awareness of ISO/IEC 42001 and the EU AI Act.

What we offer:

Flexible schedule—work from home, the office, or hybrid.

Extra day off for your birthday—take a break any day within the month.

Competitive compensation that matches your skills.

Medical insurance (in Ukraine) and health support.

20 paid vacation days + an additional 15 personal leave days.

22 sick leave days, including mental health days.

Gifts and support for life’s key moments (wedding, childbirth, kindergarten).

Professional development—conferences, training, courses, and learning opportunities. We care about your comfort and help you maintain work-life balance!

What’s next?

• HR interview with a recruiter
• Technical interview
• Final interview
• Background Check
• If it’s a match — Offer

Feel like this is the right fit? Send your resume—we’re waiting for you!

About Softprom

Softprom is a value-added IT distributor founded in 1999 and headquartered in Vienna. For 27 years, the company has operated across Central and Eastern Europe, the Caucasus, and Central Asia — today spanning 33 countries, with a team of 150+ professionals, 120+ global technology vendors, and 1,200+ IT solutions across five practices: cybersecurity, cloud services, IT infrastructure, security systems, and CAD & graphics.

About the Role

We are looking for an IT Security Systems Administrator to manage and continuously tune our security infrastructure — from WAF and EDR/XDR to firewalls and vulnerability management — and to keep our security monitoring, documentation, and incident response running smoothly.

Requirements

• University degree or equivalent experience in Information Technology and Security (Security+, CEH, or vendor certifications such as Imperva Certified or CrowdStrike CCFA/CCFR)
• 3+ years of hands-on experience administering security infrastructure (WAF, EDR/XDR, firewall, SIEM, DLP)
• Experience with vulnerability management / patch management
• Experience with IAM / access control
• Knowledge of GDPR

• English — B2/C1 level

   

Nice to Have

• AWS infrastructure management
• Forensic investigation experience
• SIEM query languages (SPL, KQL, etc.)
• Experience with vulnerability scanners (Nessus, Qualys, or similar) and scripting (Python, PowerShell, Bash)
• Experience implementing ISO 27000 procedures
• Knowledge of OWASP

• Penetration testing experience

   

Responsibilities

• Configure and tune WAF rules, EDR policies, and firewall rules
• Manage vulnerabilities: scanning, prioritization, and remediation tracking
• Perform security monitoring and log review — a core part of the role regardless of whether a SIEM is in place
• Coordinate patch management
• Document and maintain security policies
• Evaluate and onboard new vendors and tools as the company's toolset grows
• Investigate and respond to security incidents

• Deliver internal security trainings

   

Working Conditions

• Legal employment
• 3-month probationary period
• Remote work format
• Schedule: 9:00–18:00 Kyiv time
• Company-sponsored certification budget
• Reports to the IT Director

We are looking for a Cyber Defense Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection, investigation, containment, and exposure reduction. You will lead our security operations function, making the organization faster in responding to threats while continuously improving controls across the attack surface.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging
• Hands-on experience with at least one enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response
• Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences
• English - Upper-Intermediate or higher

Will be a plus

• Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes
• Hands-on background as a SOC analyst, incident responder, or detection engineer prior to moving into management
• Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one
• Familiarity with threat intelligence platforms and threat-informed defense methodologies
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH) or equivalent

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Job Description

Join the Wix security team as a SOC Analyst and help protect our global platform. This role focuses on incident analysis, threat hunting, and security automation within our large-scale, hybrid-cloud environment. You'll work alongside security experts to defend against modern threats.

Key Responsibilities

• Incident Management: Manage the full incident lifecycle from detection to resolution.
• Security Automation: Build and maintain SOAR playbooks to reduce manual work and improve detection.
• Threat Hunting: Proactively hunt for threats across our networks and endpoints using a hypothesis-driven approach.
• Team Collaboration: Partner with Incident Response and Engineering to enhance our security posture.

Requirements

• 1+ years of experience in the cyber security field (e.g., SOC, incident response, or similar security roles).
• Hands-on expertise with modern security tools like SIEM, EDR, and SOAR.
• Strong investigative skills with a deep understanding of core cybersecurity concepts.
• Experience securing complex hybrid-cloud environments (AWS, GCP, or Azure).
• Excellent analytical and communication skills.
• Willingness to cover occasional off-hours shifts as part of our 24/7 follow-the-sun team.
• Relevant security certifications (e.g., GIAC, HTB CDSA, THM SAL) are a plus.

About Wix

Wix makes it possible for anyone to succeed online. 

Since 2006, we've grown to around 4,400 employees in 22 countries, launched over 40 products, and serve over 299 million users and their visitors worldwide. 

At Wix, we push you to innovate and evolve in non-traditional ways. We operate in collaborative, high-performing teams, building cutting-edge products and leveraging AI to redefine how our users create, manage and grow their dreams online.

Although we're already industry leaders in web creation and business, our work is nowhere near done. Our goal is to become the main engine of the Internet so we can create a more open web for all.

We're proud to be an equal opportunity company. Wix was built around the idea that everyone has the right to be successful, online. This same vision defines us as an employer: creating a work environment where everyone is welcome, and anyone has the right to succeed.

Description
We are looking for an Antifraud Manager to monitor player activity, investigate suspicious behavior, and develop fraud prevention processes across our Casino products.
The role combines player risk analysis, bonus abuse prevention, payment fraud detection, behavioral analytics, and KYC verification.

Requirements
 

• 1+ year of experience in iGaming, Antifraud, Risk, Payments, or KYC
• Good understanding of online casino operations and player lifecycle
• Experience analyzing bets, bonuses, gaming behavior and player transactions
• Understanding of common iGaming fraud patterns:
  • Bonus Abuse
  • Multi-accounting
  • Payment Fraud
  • Chargebacks
  • Affiliate Fraud
• Understanding of KYC / AML principles and Source of Funds checks
• Strong analytical and investigative mindset
• Ability to identify suspicious patterns across multiple data points
• Confident user of Excel / Google Sheets
• Basic understanding of IP, Device ID / Fingerprinting, VPN / Proxy detection, payment method matching, and behavioral patterns
• Ability to make risk-based decisions independently
• High attention to detail
• English level: Intermediate or higher

Responsibilities
 

• Conduct player risk analysis before withdrawal approval
• Perform real-time monitoring and analysis of player activity, including:
  • Deposit and withdrawal transactions
  • Betting and gaming activity
  • Bonus usage
  • Behavioral patterns
• Investigate suspicious accounts and make decisions regarding withdrawals, additional verification, restrictions, or escalation
• Detect and investigate:
  • Bonus Abuse
  • Multi-accounting
  • Payment Fraud
  • Chargebacks
  • Suspicious betting/gaming patterns
  • Affiliate-related fraud
• Analyze connections between accounts using devices, IP addresses, payment methods, personal data, and behavioral patterns
• Review KYC documents and verify payment method ownership
• Perform or support Source of Funds / Source of Wealth checks when required
• Monitor potential chargeback risks and identify high-risk player behavior
• Work with Payment and Analytics teams to develop chargeback risk detection rules
• Analyze fraud incidents and identify recurring patterns
• Prepare regular reports on fraud cases, blocked activity, chargebacks, and prevented losses
• Collaborate with Payments, Bonus/Promo, CRM, Analytics, Product, Legal, and Customer Support teams
• Provide recommendations for improving internal antifraud tools and processes

📚 What We Offer

• The opportunity to work on an international product in the iGaming industry.
• Real impact on product development and product decision-making.
• Access to key product analytics and the opportunity to work with modern BI tools.
• A data-driven team that makes decisions based on insights and analytics.
• Minimal bureaucracy, fast implementation of ideas, and opportunities for professional growth.
• Gifts, paid vacation, and medical insurance.

🚀 Ready to take the next step in your career?

If you want to grow alongside a strong team, work with modern analytical tools, influence product development, and develop your expertise in a professional and healthy work environment — send us your CV!

We are looking for a Detection Engineering & Automation Lead to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a SOC Lead (Detection Engineering and Automation) to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a Head of Security Operations Center to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection, investigation, containment, and exposure reduction. You will lead our security operations function, making the organization faster in responding to threats while continuously improving controls across the attack surface.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging
• Hands-on experience with at least one enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response
• Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences
• English - Upper-Intermediate or higher

Will be a plus

• Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes
• Hands-on background as a SOC analyst, incident responder, or detection engineer prior to moving into management
• Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one
• Familiarity with threat intelligence platforms and threat-informed defense methodologies
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH) or equivalent

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Description

The overall project is designated for intelligent Fleet De-Carbonization based on an ambitious science-based idea targeting the achievement of net-zero emissions. The solution is planned to be a fully integrated software solution that can maximize efficiencies in both operational and energy supply management perspectives.

#LI-IN1

Requirements

Knowledge of secure architecture & secure design (e.g. Zero Trust)
Strong knowledge of cybersecurity processes – SSDF by NIST
Cross-team collaboration
Experience Azure cloud:
Azure Kubernetes security
Azure IdP (Entra & B2C)
Azure Pipelines
Experience with scanning tools : SonarCloud & Snyk
Vulnerabilities management
Secure architecture design best practices (e.g. Zero Trust)
Strong knowledge of secure design:
Data encryption
Data anonymization
Secure communication (HTTPS – TLS, PKI)
Identity and Access Management
Scripting experience (e.g. Bash, Python, PS)

Job responsibilities

Owning and maintaining security activities required by SSDF process
Reporting to stakeholders (Head of Engineering & CISO)
Collaboration with SOC, Development, architects team
Vulnerabilities management
Solution design and requirements creation
Supporting/advising development team in security challenges

Position Name: Information Security Analyst
Reports to: Chief Information Security Officer
Location/Type: Remote (UA Candidates only)

Atlas Technica's mission is to shoulder IT management, user support, and cybersecurity for our clients, who are hedge funds and other investment firms. Founded in 2016, we have grown year over year through our uncompromising focus on service.

We value ownership, execution, growth, intelligence, and camaraderie. We are looking for people who share our Core Values, thrive, and contribute to this environment while putting the customer first. At Atlas Technica, we offer a competitive salary, comprehensive benefits, and great perks to our global Team. We strive to maintain a professional yet friendly environment while promoting professional and career development for our Team Members. Join Atlas Technica now!

We seek a skilled Information Security Analyst to join our rapidly growing organization. This is a highly technical role providing excellent career development opportunities for the successful candidate. You will be work closely with the Chief Information Security Officer (CISO) and various teams to maintain and improve the security posture of Atlas and its clients. As a new position, this role will evolve, providing opportunities for growth and adaptation.

Responsibilities:

Vulnerability Management:

• Review vulnerability reports.
• Research scalable solutions for vulnerability remediation.
• Collaborate with Support/NOC to ensure remediations have minimal impact on clients and facilitate maintenance windows.
• Work with CS/Engineering to script and automate remediations.
• Track progress in ticketing system, including master tickets for multi-client initiatives and sub tickets for individual clients.
• Address vulnerabilities for clients' third-party vulnerability management, including overlap with Cavelo, and apply remedies to other clients.

Risk Management and Due Diligence:

• Provide accurate and timely responses to Due Diligence Questionnaires (DDQs).
• Review and analyze findings from risk assessments and penetration tests for Atlas and clients.
• Address identified vulnerabilities and recommend remediation strategies.
• Participate in Business Impact Analyses and tabletop exercises to enhance organizational resilience.

Industry Benchmark Alignment and Standards Updating:

• Start measuring alignment with Microsoft benchmarks in Intune and work on increasing the score.
• Address vulnerabilities and issues identified in workstation builds, cloud infrastructure configurations, and security configurations.
• Harden systems to enhance security across workstations, cloud infrastructure, and security configurations.

SOC 2 Maintenance and Additional Security Tasks:

• Perform test restores.
• Conduct reviews of our KnowBe4 phishing tests and training.
• Review SIEM logs.
• Assist in addressing cybersecurity incidents.
• Work with NOC and outsourced SOC on remediation runbooks.
• Perform additional tasks as assigned to support the security team and organization

Requirements:

• Strong understanding of cybersecurity principles and practices.
• Experience with vulnerability management and remediation.
• Familiarity with Microsoft Intune and security benchmarks.
• Excellent analytical and problem-solving skills.
• Ability to work collaboratively with cross-functional teams.
• Strong communication skills, both written and verbal.
• Strong ability to work independently
• Experience with security tools (SIEM, IDS/IPS, vulnerability scanners)
• Experience with RMM/SOAR and other automation platforms.
• Experience scripting
• Experience writing runbooks.

Desirable Qualities:

• Experience working in an MSP environment (preferred, but not required)
• Relevant certifications (AZ-500, SC-900, SC-300, CompTIA Security+, etc.)

RedCore is an international business group that creates technological solutions for digital markets. 

Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies.

Powering Growth from the Core — this is the key mission laid under RedCore’s strong foundation. This is how we consistently stay ahead: by evolving and creating scalable solutions, while remaining committed to open and transparent communication with our partners.

We’re looking for a sharp and driven Security specialist to join our team!

Requirements:

- Higher education in Law or Economics.
- At least 3 years of experience in HR/internal and economic security within private enterprises.
- Proven experience in background checks of individuals and legal entities.
- Previous experience in law enforcement is a strong advantage.
- Knowledge of security systems and protocols.
- Experience collaborating with polygraph specialists.
- Strong experience working with databases.
- Proficient PC user.
- Russian or Ukrainian language - C1 and above
- Fluent English, including spoken communication.
- Willingness to travel abroad to ensure security at exhibitions and conferences.

Responsibilities:

- Conduct regular risk assessments to identify vulnerabilities and threats affecting the holding’s assets.
- Respond promptly to security-related incidents, including investigation and corrective measures.
- Prepare security status reports, analyze incidents, and develop recommendations for improvement.
- Collaborate with other departments to integrate security considerations into business processes.
- Ensure protection of personal data (GDPR compliance) and trade secrets.
- Conduct background checks during recruitment and support exit processes.
- Organize security measures during corporate events, exhibitions, and conferences.

Our benefits to you:

- Modern corporate equipment based on macOS or Windows and additional equipment are provided;

- Paid vacations, sick leave, personal events days, days off;

- Referral program — enjoy cooperation with your colleagues and get the bonus;

- Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences;

- Rewards program for mentoring and coaching colleagues;

- In-house Travel Service;

- Multiple internal activities;

- Other benefits could be added based on your location.

We are inviting you, a highly motivated and results-oriented Security Manager (Hybrid Infrastructure) to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success.
 

Responsibilities

• Own and lead Hybrid Infrastructure Security across cloud, network, identity, endpoint, and data domains
• Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions
• Lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments
• Manage cloud IAM and security-group guardrails in close collaboration with Platform and SRE teams
• Operate and mature endpoint security (EDR/XDR/MDM) across managed devices, including hardening and telemetry health
• Own data security and cryptography controls: KMS, secrets management, PKI, and certificate lifecycle
• Lead, mentor, and develop a team of security engineers (4 direct reports — Cloud & Network, Endpoint, IAM, Data Security & Cryptography)

Track, analyze, and report enterprise security metrics

Requirements

• 5+ years of experience in managing and developing security teams
• Proven track record in hands-on cybersecurity engineering roles
• Enterprise-level background
• Practical experience with on-premises environments
• Solid experience with networking
• Hands-on experience with cloud platforms
• Broad experience across cloud posture, network, identity, endpoint, and data protection security domains
• Experience with CSPM/CNAPP/CWPP tooling and cloud guardrails (WAF, DNS security, IaC scanning)
• Experience with cloud IAM and security-group/IaC security patterns
• Experience operating EDR/XDR and MDM solutions
• Experience with KMS, secrets management, PKI, and certificate management
• Ability to enforce security controls without unnecessarily blocking delivery for Platform/SRE/DevOps teams
• Upper-Intermediate English and higher

Will be a plus

• Higher education in Computer Science, Information Security
• Background in fintech, brokerage, trading platforms, payments, or other regulated environments
• Track record of building or maturing an enterprise/cloud security function from an early stage
• Familiarity with tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk
• Knowledge of Kubernetes/container security and cloud-native architectures
• Exposure to SOC 2, ISO 27001, or DORA compliance frameworks
   

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Employment Type: Full-Time

Experience: 2–4 years

About the Role

We are looking for a GRC Analyst to join our Information Security and Compliance team. You will run day-to-day governance, risk and compliance activities — risk assessments, ISMS maintenance, audit evidence, and third-party security reviews — with senior support on the more complex work.

This is a hands-on delivery role rather than a first job in security. You should be comfortable running a vendor assessment or an evidence collection cycle without step-by-step direction.

Key Responsibilities

Governance & Policy

• Maintain the ISMS, control register and governance documentation.
• Draft and update security policies, standards and procedures.
• Coordinate security awareness activities and track governance actions.

Risk Management

• Run information security risk assessments and maintain the risk register.
• Track risk treatment plans and remediation through to closure.
• Manage the security exception process.

Compliance & Audit

• Support compliance activities across ISO/IEC 27001, SOC 2 and GDPR.
• Collect and organise audit evidence; act as a point of contact during internal and external audits.
• Track audit and assessment findings to closure.

Third-Party Risk

• Run vendor security assessments and review supplier questionnaires.
• Maintain supplier risk records and follow up on third-party remediation.

Reporting

• Produce monthly security and compliance reporting for management.
• Maintain compliance dashboards and documentation repositories.

What We’re Looking For

• 2–4 years in information security, risk, compliance, audit or IT governance.
• Practical working knowledge of at least one major framework (ISO 27001, SOC 2 or NIST CSF).
• Working understanding of GDPR and data protection obligations.
• Confident with Excel and structured documentation; able to produce reporting for a management audience.
• Strong written communication and attention to detail.
• Comfortable working with both technical and non-technical stakeholders.
• Degree in cyber security, computer science, IT or a related discipline — or equivalent practical experience.

Nice to Have

• Hands-on use of a GRC platform (Vanta, Drata, Hyperproof, OneTrust, ServiceNow GRC or Archer).
• Cloud security fundamentals (AWS or Azure), IAM and MFA concepts.
• Exposure to Cyber Essentials, CIS Controls or AI governance.
• Jira or Azure DevOps; Power BI or Excel dashboards.
• A certification such as ISC2 CC, CompTIA Security+, ISO 27001 Foundation / Lead Auditor or SC-900.
• German is a strong plus

What We Offer

• Ownership of real GRC workstreams across the full lifecycle.
• Mentorship from senior security professionals and support for certifications.
• Clear progression towards Senior GRC Analyst or Risk & Compliance Specialist.
• Collaborative and inclusive working environment.

Who We Are 

PAR Retail, with its Open Commerce® product suite and patent pending Wallet Steering® System, empowers Convenience & Fuel Retailers to gain more share of wallet and customer lifetime value than possible with any other solution provider. PAR Retail’s unified Open Commerce product suite consists of: Activate for Intelligent 1:1 Loyalty, Transact for Contactless Commerce, and Experience for Cross-Channel Customer Experiences. PAR Retail’s solutions are supported by a set of subscription-based program management services and are contractually backed by its 1.5X Performance Guarantee. 

Requirements:  
- Operational knowledge of modern operating systems and networking; 

- Experience with common cloud services: AWS, GCP, and Azure; 

- Network Security and expertise in network pentesting; 

- Security testing of web applications, web services, mobile apps (hybrid and native), and IT infrastructure; 

- Understanding security certifications (PCI DSS / SOC2); 

- Ability to apply modern Application Security methodologies and frameworks; 

- Ability to use at least one modern programming language; 

- Practical experience with Burp Suite; 

- Experience with IDS, IPS, SIEM configuration; 

- Upper-intermediate English level. 

Responsibilities:  

- Requirements analysis, performing penetration testing and security audit; 

- BE, WEB, cloud and mobile clients testing; 

- Vulnerability reporting and remediation process; 

- Communication with development and project management teams; 

- Prepare security testing reports; 

- Prepare and support internal documentation for the project. 

PAR Retail Offers: 

- Long-term employment; 

- Competitive compensation with regular performance-based salary and career development reviews; 

- Paid vacations and sick leaves; 

- Health insurance program; 

- Flexible working hours; 

- Sponsored company educational program, corporate library; 

- Funny celebrations, team outings, and company events; 

- A unique and friendly environment where everyone can explore and learn new technologies. 

Ajax Systems is an international technology company and the largest security systems manufacturer in Europe. Ajax products are trusted by more than 4.5 million end users and 330,000 PRO users across over 180 countries. The company offers comprehensive solutions for protecting residential and commercial properties of various sizes. Today, the Ajax portfolio includes 280 devices for intrusion protection, video surveillance, fire safety, and comfort and automation. Every year, we demonstrate exponential growth both in the size of our team and in the number of users worldwide.

Ajax Systems operates a full-cycle production model, from idea generation and prototyping to mass production and global sales. Each department fully covers a specific operational need of the business. The company’s specialists are involved at every stage — from the production line in Ukraine to the logistics center in Poland, from where products are shipped to distributors worldwide.

Now we are looking for a hands-on Cyber Security Specialist to strengthen our security posture and operational resilience. You will be at the forefront of our cybersecurity defense, responsible for incident monitoring and investigation, the deployment and improvement of security solutions, and ensuring our corporate processes and infrastructure meets compliance standards. If you are passionate about building secure systems, incidents investigation and translating technical findings into efficient mitigation actions, this role is for you.

Key Responsibilities:

• Security systems support and improvements: Participate in security architecture improvement, provide support for the full lifecycle of security systems — from design and deployment to enhancement and technical support.
• Security Monitoring & Incident Response: Improve security monitoring processes and practices, participate in security events monitoring and triaging detected events. Develop and refine SIEM detection rules, investigate anomalies and identify root-cause of incidents, develop and execute mitigation plans to neutralize threats.
• Conduction Security Assessments: Conduct technical security assessments of corporate IT systems to identify compliance deviations and vulnerabilities. Participate in risks assessments, mitigation measures design and implementation.
• Compliance & Governance: Participate in improvement of security procedures, policies, and operational instructions. Collaborate with stakeholders on security processes implementation and improvement to ensure readiness for external security audits (e.g., ISO 27001, SOC2).
• Consultancy & Support: Partner with internal teams to define security requirements for new systems and solutions, provide expert guidance on implementing security controls. Participate in security requests processing, security awareness trainings preparation and conduction.
• Reporting & Strategy: Participate in preparation of reports for management, definition and description of security strategy.

Required Technical Skills & Qualifications:

• Experience: 5+ years in CyberSecurity with a strong focus on SOC operations and security systems implementation.
• Core Proficiency: Hands-on experience with SIEM systems (Splunk/QRadar/Logsign/Wazuh), MDM solutions (Jamf/Crowdstrike/JumpCloud/Zoho), EDR/XDR solutions (SentinelOne/ESET/Defender), Cloud security monitoring (M365, GWS, AWS), and Firewall/WAF technologies (Cisco/PaloAlto/Fortinet/Ubiquiti).
• Domain Knowledge: Strong understanding of On-Premise and Cloud architectures, network security protocols, endpoint and application security. Practical experience in industry security best practices implementation (CIS, OWASP, NIST).
• Security assessment: Practical experience performing IT systems and application security assessments and reports preparation.
• Security governance: Experience in preparation of security reports, procedures and instructions for reporting. Practical knowledge of ISO 27001 technological controls implementation.
• Language Proficiency: Intermediate (B1-B2) English level required for working with technical documentation, cross-regional communication with colleagues and partners.

Preferred Skills & Certifications:

• Certifications: Vendor-specific security certifications (e.g., Google, MIcrosoft, Cisco, Palo Alto PCNSE, Fortinet NSE) are highly valued.
• Frameworks: Practical knowledge of ISO 27001 organizational controls implementation.

Why Join Us:

• Impact: Take ownership of security projects from concept to deployment.
• Culture: Work in a “zero bullshit” environment that values technical excellence and autonomy.
• Growth: Access to corporate English training and professional development/certification support.
• Health care: medical insurance.
• Beta Access: Get hands-on experience with new Ajax security systems before they reach the market.
• Innovation: Help shape the future of “Made in Ukraine” reliability.