Jobs Security

We’re hiring a Lead IT Security Engineer for Limitless Labs — a crypto + AI company building one of the largest prediction markets on Base.

The platform has already processed $3B+ in trading volume, with strong user engagement and retention. Security is a critical part of scaling the system further.

What you’ll do

• Own and lead security operations across the company
• Build and improve threat detection, monitoring, and incident response systems
• Design SIEM, logging, and alerting pipelines
• Lead incident response and post-mortems
• Conduct risk assessments and threat modeling
• Manage vulnerabilities and remediation processes
• Ensure readiness against real-world attacks (DDoS, exploits, key compromise)
• Work with external security vendors and auditors

What we’re looking for

• 7+ years in Security Operations
• Experience owning security in production environments
• Strong knowledge of cloud security (GCP, Cloudflare)
• Solid understanding of infrastructure, network, and application security
• Hands-on experience with SIEM / EDR / SOAR systems
• Experience handling high-severity incidents
• Ability to operate under pressure and make critical decisions

Nice to have

• Web3 / blockchain security experience
• Experience securing financial or trading systems
• SOC2 / ISO 27001 experience
• Background in penetration testing or red teaming

Why this role

• Real impact on a live system with real users and funds
• High ownership and autonomy
• Fast-moving, high-risk environment
• Opportunity to build and shape security operations

Project Context

Our client is building and maintaining software systems where reliability, data protection, and secure user flows are critical. The QA function is not limited to checking whether features work as expected. The team also needs someone who can actively challenge the system, identify weak points, verify security assumptions, and help prevent vulnerabilities before they reach production.

We are looking for an Ethical Hacker / Penetration Tester who can work closely with QA (or as a part time QA), engineering, and product teams to test web applications, APIs, authentication flows, permissions, infrastructure exposure, and overall application security.

This is a hands-on role. The main expectation is to find real risks, reproduce them clearly, document them properly, and help the engineering team validate that fixes are effective.

Role

We are looking for a Security QA Engineer / Ethical Hacker / Penetration Tester who will take ownership of security testing across application, API, and platform layers.

This person should be comfortable working as part of a QA-oriented delivery process while bringing deeper security expertise into the team. The role requires practical knowledge of penetration testing, vulnerability assessment, secure testing methods, and clear communication with developers.

Key Responsibilities

• Perform manual security testing of web applications, APIs, user flows, and admin panels.
• Conduct penetration testing against staging and production-like environments.
• Identify, reproduce, document, and validate security vulnerabilities.
• Test authentication, authorization, permissions, session management, password flows, and access-control logic.
• Review API endpoints for broken access control, injection risks, data exposure, rate-limit issues, and insecure design.
• Validate security fixes and perform regression security testing.
• Work with QA engineers to include security checks in the regular testing process.
• Prepare clear reports with reproduction steps, evidence, severity, impact, and recommended remediation.
• Collaborate with developers to explain vulnerabilities and verify that fixes address the real issue.
• Support threat modeling and security review of new features when needed.
• Help improve security awareness and testing standards inside the team.

Required Experience

• 3+ years of experience in penetration testing, application security, security QA, or ethical hacking.
• Strong understanding of OWASP Top 10 and common web application vulnerabilities.
• Experience testing REST APIs and web-based systems.
• Practical experience with authentication and authorization testing.
• Ability to discover, reproduce, and explain vulnerabilities clearly.
• Experience using security testing tools such as Burp Suite, OWASP ZAP, Nmap, Wireshark, Metasploit, or similar.
• Understanding of HTTP, HTTPS, cookies, headers, sessions, JWT, OAuth2, MFA, and role-based access control.
• Ability to write simple scripts or proof-of-concept checks when needed, preferably in Python.
• Strong documentation skills and ability to produce actionable vulnerability reports.
• Good communication skills and ability to work directly with engineering and QA teams.
• Upper-intermediate or better English for written and spoken communication.

Nice to Have

• Experience with cloud security testing, especially AWS, Azure, or GCP.
• Experience with Docker, Kubernetes, CI/CD pipelines, and infrastructure security basics.
• Experience with mobile application security testing.
• Experience with secure code review.
• Experience with SAST, DAST, dependency scanning, and security automation.
• Bug bounty experience or responsible disclosure background.
• Security certifications such as OSCP, PNPT, eJPT, CEH, GWAPT, or similar.
• Experience working in product teams rather than only external consulting environments.

What Success Looks Like

• Security issues are found early and described clearly.
• Developers can reproduce and fix reported vulnerabilities without confusion.
• QA coverage becomes stronger because security checks are included in regular delivery.
• Authentication, authorization, and API risks are actively tested before release.
• Security findings are prioritized by real impact, not just tool output.
• The team gains practical confidence that critical user flows and sensitive data are protected.

We are looking for a Senior DevSecOps| AppSec Manager to join our team. This is a hands-on role for someone who knows how to work closely with engineering teams, embed security into the development lifecycle, and turn real vulnerabilities into practical fixes — not just reports. If you enjoy being in the middle of the action, collaborating with developers daily, and building a security culture from the inside out, we’d love to hear from you.

The Project
You will work embedded within delivery teams across multiple products, partnering with squad tech leads and vertical leads to integrate security practices into CI/CD pipelines, review cloud and application configurations, and drive a shift-left security mindset across the organization. The environment is cloud-native, GitHub-based, and AWS-powered — fast-moving and engineering-driven.

Tech requirements:

• 5+ years of hands-on Application Security / Product Security / DevSecOps experience working directly with engineering teams.
• Strong AppSec tooling experience: SAST, SCA, code scanning, GitHub / GitHub Advanced Security / SonarQube / Dependabot, and CI/CD integration.
• Ability to read code, assess real risk, and drive practical remediation (not just flag issues).
• SSDLC / shift-left skills: threat modeling, security design reviews, vulnerability management.
• Strong application and API security fundamentals: authN/authZ, secrets management, dependencies, injection, data protection.
• Experience with cloud-native delivery: containers, IaC, Git-based workflows, automation, and clear documentation.
• English — Upper-Intermediate (B2) or higher. Ukrainian — fluent.

Nice to have:

• IaC scanning, container/image security, software supply chain, and secrets management experience.
• AWS cloud security experience.
• Experience in regulated, audit-sensitive, or event-critical environments.

What you will do:

• Work directly with development teams to incorporate security scans into their CI/CD pipelines.
• Identify and assess vulnerabilities in the software supply chain, advising on risk priority and remediation.
• Review GitHub and AWS configurations in the context of application development and deployed environments.
• Conduct security design reviews and contribute to threat modeling sessions.
• Update and maintain vulnerability reporting, collaborating with squad tech leads and vertical leads to review and address findings.
• Champion shift-left security practices and help build a strong security culture across engineering teams.

Why join Empeek? ✨
Challenging & meaningful products — complex architectures, modern technologies, and solutions that truly make an impact.
Professional growth — personal development plan, mentorship, career maps, and opportunities to grow into new roles and responsibilities.
Strong team culture — we share the same mission, values, and passion for what we do.
Flexibility & ownership — freedom to choose your format and schedule, focus on results, and have a real impact on the company’s success.

What we offer
Access to learning opportunities — internal and external training, certification reimbursement.
18 paid vacation days, 10 public holidays compensated, and up to 10 paid sick days.
Partial compensation for English classes + free speaking club.
Up to $180/year for sports activities.
Mentorship and knowledge sharing — people you can really learn from.
Career maps and growth plans to support your professional development.
New equipment provision, and accounting support if needed.
Competitive market-level salary with regular reviews.
Additional perks and compensations such as insurance fund, gifts etc.
Psychological safety and supportive culture.
Company values that align with yours.
Social responsibility — support the Armed Forces

📌 If you believe this role could be a great match for you, please send us your resume via the link — we’ll be happy to get in touch with you.

📍 Location: EU-based

💼 Cooperation type: Full-time
🧭 Work format: Remote

We're looking for an experienced Security & Compliance Specialist to own our security and compliance program - managing automation, maintaining certifications, and keeping us audit-ready across SOC 2, ISO 27001, GDPR, HIPAA, CCPA, and DORA.

About us:

Stape is a global product-driven IT company and the #1 leader in the server-side tracking market. We’re building a powerful, technically complex product that simplifies server-side tracking for marketers and website owners. Our platform processes over 5 billion requests daily, helping improve tracking accuracy and data privacy for more than 200, 000 clients worldwide. We work closely with top partners, including Meta, Tiktok and Snapchat, to provide advanced tracking capabilities.

Key tasks:

• Own and manage Vanta - keeping controls, evidence, and policies up to date
• Maintain certification program across SOC 2, ISO 27001, GDPR, HIPAA, CCPA, and DORA
• Support audit readiness and coordinate with auditors
• Keep security policies and procedures documentation
• Fill up security questionnaires from clients
• Collaborate with sales team and support team in regards to any security related questions from clients
• Work with engineering on secure processes and issues

Your background:

• 2–3 years in security operations, GRC, or IT compliance
• Hands-on experience with Vanta, Drata, Secureframe, or similar compliance automation tool
• Practical knowledge of SOC 2, ISO 27001, GDPR
• Strong documentation and organizational skills

Will be a plus:

• Hands-on experience with Vanta specifically
• Prior experience working with any of our certification frameworks: SOC 2, ISO 27001, GDPR, HIPAA, CCPA, or DORA

We offer:

• Industry Leader: Make a meaningful contribution to a globally recognized solution that shapes the future of the server-side tracking market.
• Flexibility: Enjoy a flexible work schedule with the freedom to choose where you work.
• Extended remote workspace setup: Experience the benefits of a fully equipped remote workspace, designed to elevate your productivity and create a comfortable work atmosphere.
• Collaborative culture: Engage in a friendly and open team environment that encourages initiative, creativity, and collaboration.
• Educational support: Invest in your self-development through a dedicated training and professional growth budget.
• Well-Being: Take advantage of 30 days of paid time off (20 standard days + 10 more to cover public holidays), Parental Leave, Anniversary days off, and Study Leave to support your recharge and maintain a balance between work and personal life.
• Health support: Feel secure with full coverage for Sick Leave and a dedicated medical insurance budget that prioritizes your health.
  
   

Excited to join us? Submit your CV and let’s get started!

Project Description

We’re looking for a Senior Software Developer who understands Windows at a deep level and enjoys solving hard identity-security problems in elegant ways. We value clear thinking, clean code, and people who build things that last. You will have broad autonomy, minimal bureaucracy, and direct influence on the product architecture.

Client Description

Our client is a cybersecurity company from Germany which redefines authentication: removing passwords, unifying token types, and building a new foundation for enterprise identity. You will be shaping the platform that CIOs, CISOs, and engineers trust for critical access control. 
 

Position Requirements:

- Expert-level knowledge of Windows system architecture (Win32 APIs, security subsystems, identity stack)

- Strong experience in both C++ and in C#/.NET

- Solid understanding of cryptography, especially Windows crypto implementations (CNG, DPAPI, smartcard/PCSC, certificate handling)

- Ability to work on complex features independently and drive them from concept to stable production code

- Curiosity, creativity, and a willingness to challenge old assumptions

Nice to Have

- Experience with authentication technologies, identity protocols, SAML, FIDO, smart cards, secure design

- Background in building system-level security products or middleware

- Familiarity with cryptographic key management, or hardware-backed cryptography

Candidate Responsibilities

You will design and build native and managed Windows applications and services that form the backbone of a passwordless multifactor authentication platform. This includes secure desktop components, system-level integrations, and high-performance server modules that interact closely with Windows internals.

Position Name: Senior SOC Analyst

Reports to: Team Lead, SOC

Location: Remote, Philippines

Role Overview

Atlas Technica's mission is to shoulder IT management, user support, and cybersecurity for our clients, who are hedge funds and other investment firms. Founded in 2016, we have grown year over year through our uncompromising focus on service.

We value ownership, execution, growth, intelligence, and camaraderie. We are looking for people who share our Core Values, thrive, and contribute to this environment while putting the customer first. At Atlas Technica, we offer a competitive salary, comprehensive benefits, and great perks to our global Team. We strive to maintain a professional yet friendly environment while promoting professional and career development for our Team Members. Join Atlas Technica now!

We are seeking a Senior SOC Analyst to support day-to-day security monitoring and alert triage.

Responsibilities

• Lead high-severity incident response
• Mentor junior analysts
• Improve detection logic and workflows
• Coordinate response across teams
• Conduct threat hunting
• Contribute to metrics and reporting
• Assist with documentation and training

Requirements

• Experience in SOC or incident response roles
• Strong analytical and investigative skills
• Experience with SIEM and EDR
• Ability to lead incidents effectively  

Desirable Qualities

• Experience in regulated or financial environments

• Threat hunting or detection engineering exposure

   

Atlas Technica is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Who Are We?

Welltech is a global wellness technology company with Ukrainian roots. Our mission is to build and scale wellness apps globally through state-of-the-art, tech-driven performance marketing.

We are one of the most established players in the wellness app space, and we are accelerating. Over 25.5 million people across the world use our apps — Muscle Booster, Yoga-Go, and WalkFit — to build healthier habits, move more, and feel better every day. Every subscription represents a real person making a real change in their life, and we take that seriously.

With 500+ people across hubs in Cyprus, Ukraine, Poland, Spain, and the UK, we combine the scale of a market leader and the drive of a team that's just getting started.

What We're Looking For

We are seeking a talented and motivated Senior Security Engineer (x/f/m) to join our small but dedicated Security Team. In this role, you will play a crucial part in strengthening our overall security posture, collaborate across teams and domains, and own security initiatives company-wide.

Responsibilities:

• Own and drive execution of multiple key security initiatives, ensuring they are well-integrated, documented, and effectively support Welltech’s security goals.
• Collaborate with leadership to shape the team’s roadmap, providing your expertise.
• Mentor junior team members in the Security team to help them grow in their role.
• Collaborate with engineering, IT, and product teams to embed security best practices throughout the development lifecycle and operational processes.
• Champion continuous improvement in Security Engineering by regularly reviewing processes, implementing automation, and driving standardization to enhance team efficiency and organizational impact
• Lead PCI-DSS Compliance initiative with relevant stakeholders
• Design, implement, and maintain security controls and measures across Welltech’s systems, networks, and cloud environments.
• Contribute to threat modeling, risk assessments, and incident response, supporting a proactive and resilient security posture.
• Develop and refine internal security policies, standards, and tools to support company-wide security goals.
• Support and lead security awareness efforts, helping to foster a strong security culture throughout the organization.

Continuously evaluate emerging threats, technologies, and practices, driving improvements to Welltech’s overall security maturity.

Requirements:

• 5+ years of hands-on security engineering experience with proven expertise in implementing and managing security solutions
• Solid understanding of security principles, vulnerabilities, and common attack techniques.
• Proficiency with Python (especially writing Lambda functions).
• Experience with Kubernetes in production environments.
• Familiarity with CI/CD tooling and secure deployment practices.
• Very good knowledge of cloud platforms - AWS or Google Cloud.
• Big plus: Solid Experience with PCI.

• Nice to have: Experience with application security, DLP platforms, and observability.

   

  Soft Skills:

• Excellent written and verbal communication skills.
• A collaborative, proactive mindset and passion for continuous improvement.
• Ability to clearly communicate complex security concepts to technical and non-technical stakeholders.
• Strong organizational skills to effectively prioritize and manage multiple concurrent tasks and meet deadlines.

Location: Germany (Hybrid)

Engagement model: Near-shoring with limited onsite presence (~5–10% for onboarding and recurring alignment meetings) 

Languages: German (working proficiency required) = B1 · English Seniority: Open to mid-level through senior consultants

About the project

We are staffing a consulting engagement set in a German public-sector / governmental environment. Because of the official context, working German language skills are mandatory. The engagement runs primarily as a near-shore delivery model, with approximately 5–10% onsite work reserved for onboarding and regular coordination meetings.

Your role

As a network consultant, you will support the full delivery lifecycle — from requirements management through design, implementation support, and testing — operating across network, enterprise, and software architecture contexts.

Core skill (must-have)

• IPv6 networking expertise — hands-on experience with design, addressing and planning, migration, and operations.

Additional skills (highly valued)

• Cisco networking technologies
• NetBox — IPAM / DCIM, network source of truth
• NetBird — WireGuard-based overlay / zero-trust networking
• Ability to bridge network, enterprise, and software architecture

Responsibilities across the lifecycle

• Requirements engineering and management
• Network / enterprise / software architecture design and consulting
• Implementation support
• Testing and validation

Your profile

• Proven track record as a network / IT consultant in complex environments
• Comfortable operating in German-language, public-sector settings

• Combines deep network expertise with a broader enterprise and software architecture understanding

   

Availability

Immediate availability is not required. We welcome consultants who are available now, as well as those who can become fully or partially available in the foreseeable future.

BALTUM Bureau is an internationally operating accredited certification body and audit firm, headquartered in Tallinn, Estonia. Founded to serve the growing demand for independent ISO certification and compliance auditing, BALTUM Bureau has established itself as a trusted partner for technology companies, SaaS providers, financial institutions, and enterprises across the European Union, United Kingdom, and United States.

Our organisation is built on a foundation of technical expertise, professional independence, and a commitment to delivering rigorous, high-quality audit services. 

Our areas of expertise include:

Management System Certification - ISO/IEC 27001 (Information Security), ISO 9001 (Quality Management), ISO 22301 (Business Continuity), ISO 42001 (AI Management Systems), ISO 27701 (Privacy Information Management)

Regulatory Compliance Assessments - DORA (Digital Operational Resilience Act), NIS2 Directive, GDPR, EU AI Act

We are looking for a Threat Intelligence Analyst to join our cybersecurity team and strengthen the company’s proactive defense capabilities.

This role combines cyber threat intelligence, proactive investigations, and risk-oriented analysis. We are looking for a specialist who can identify emerging threats, analyze attacker behavior and TTPs, assess their relevance to the business environment, and help improve the organization’s detection and response capabilities.

You will work closely with SOC, IT, and Risk Management teams to transform threat intelligence into actionable security insights and recommendations.
 

Responsibilities

• Collect, analyze, enrich, and contextualize cyber threat intelligence from multiple sources, including OSINT, CERTs, vendors, and industry feeds
• Monitor emerging threats, attacker activity, vulnerabilities, and adversary TTPs relevant to the organization
• Conduct proactive threat hunting activities across SIEM, EDR/XDR, cloud environments, and other telemetry sources
• Develop and validate hypotheses based on threat intelligence and behavioral patterns
• Support investigations related to incidents, suspicious activity, and threat intelligence findings
• Identify gaps in detection and response capabilities and provide recommendations for improvement
• Assess potential business impact and risk associated with identified threats
• Prepare analytical reports, threat assessments, and actionable recommendations for technical and non-technical stakeholders
• Collaborate with SOC and IT teams to improve detection logic, monitoring, and security processes
   

Requirements

• 2+ years of experience in Threat Intelligence, Threat Hunting, SOC L2/L3, DFIR, or Incident Response
• Strong understanding of MITRE ATT&CK framework
• Hands-on experience with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, etc.)
• Experience working with EDR/XDR solutions
• Understanding of cyber threat intelligence processes and proactive threat hunting methodologies
• Strong analytical and investigative skills
• Ability to work with incomplete or ambiguous information
• Understanding of security risks and attack vectors
• Strong communication skills and ability to explain technical findings clearly
   

Nice to have

• Experience with Purple Team activities
• Understanding of cloud security (Azure / AWS / GCP)
• Experience with KQL, Python, Sigma, or detection engineering
• Experience with threat modeling or risk management processes
• Familiarity with automation and detection-as-code approaches

AppsFlyer builds technology at massive scale, powering measurement, analytics, and fraud prevention across billions of mobile events every day.

Join AppsFlyer’s Security SDK Team, responsible for protecting the integrity and authenticity of our mobile SDKs across Android and iOS. The team works on securing SDK communication, improving SDK resilience, and building trusted solutions that run on billions of devices worldwide.

This is a great opportunity for engineers who are passionate about mobile development and interested in security, low-level systems, and reverse engineering.

We work with Android and iOS platforms, native components (C/C++), and cloud-based infrastructure, while encouraging continuous learning, technical growth, and hands-on research.

What you’ll do

• Develop AppsFlyer SDK features end-to-end — from design to production.
• Build and improve protection mechanisms for Android SDKs (primary focus) and iOS SDKs.
• Help improve SDK resilience against tampering and abuse.
• Collaborate with Product Managers and Engineers across mobile and backend teams.
• Participate in research, debugging, and investigation of mobile security challenges.
• Learn and work with low-level mobile technologies, native code, and reverse engineering tools.
• Work in an Agile environment with engineers across mobile, backend, and product.

What you have (Must)

• B.Sc. in Computer Science or equivalent experience.
• 1–2 years of software development experience, preferably in Android development.
• Experience developing mobile applications or SDKs.
• Good understanding of Android fundamentals and application architecture.
• Strong debugging and problem-solving skills.
• Curiosity and motivation to learn security and low-level technologies.
• Very good English communication skills.
• Strong ownership mindset and willingness to learn and grow.

Bonus Points

• Experience with Kotlin, Java, or Android SDK development.
• Familiarity with C/C++ or mobile native development.
• Interest in mobile security, reverse engineering, or runtime internals.
• Familiarity with tools such as Frida, Ghidra, or IDA.
• Experience with Gradle, CMake, or CI/CD systems.
• Familiarity with AWS or backend services.
• Exposure to LLVM/Clang or build toolchains.

Benefits Package includes:

• Health Insurance
• Paid Unlimited Vacation Days + all national holidays + additional recharge days
• Meals Reimbursement
• Sport Reimbursement
• Breakfast in the office
• Mental health program
• Team building, happy hours, and other team activities
• Paid sick days
• Snacks, fruits & ice cold beer
• All new team members are provided with a brand-new Mac laptop with 2 monitors and a Starter package

As a global company operating from 25 offices across 19 countries, we reflect the human mosaic of the diverse and multicultural world in which we live. We ensure equal opportunities for all of our employees and promote the recruitment of diverse talents to our global teams without consideration of race, gender, culture, or sexual orientation. We value and encourage curiosity, diversity, and innovation from all our employees, customers, and partners.

“As a Customer Obsessed company, we must first be Employee Obsessed. We need to make sure that we provide the team with the tools and resources they need to go All-In.” Oren Kaniel, CEO

About the Project

The 303 Team is seeking a Level 1 SOC Analyst to join our growing Security Operations Center.

The L1 SOC Analyst is an operational role focused on qualifying real-time security alerts and assisting with incident investigations across client infrastructures. As the front line of our defense, you will be responsible for monitoring system health and data feeds, gathering key forensic data, and resolving cases within your scope. You will work closely with Level 2 and Level 3 Security Engineers, escalating complex cases as necessary for Incident Response.

Beyond core monitoring, you will have the opportunity to contribute to penetration testing, automation, using AI/Machine Learning workflows.

Requirements:

• Strong understanding of network and systems security, security testing, and software security.
• Hands-on experience with Windows and *nix (Linux/Unix) platforms.
• Familiarity with scripting languages such as Python, Bash, Ruby, Perl, or PowerShell.
• Strong analytical and observational skills with the ability to "think outside the box" while following established SOC procedures.
• Excellent communication skills; a team player capable of functioning independently when required.
• Team player, able to function independently and as part of a team
• Ability to prioritize tasks in a fast-paced environment and a relentless drive to learn.
• Endless will to learn something new

Languages:

• Upper-intermediate (B2+) verbal and written English communication skills.

Nice to have:

• Prior experience or knowledge in Penetration Testing.
• Relevant industry certifications.
• Experience with Machine Learning/AI applications in security.
• Experience with Security Orchestration, Automation, and Response (SOAR).

Duties and Responsibilities:

• Follow Standard Operating Procedures (SOPs) for the intake of real-time security events and alarms.
• Monitor customer SIEM platforms to identify and triage potential security incidents.
• Gather and process forensic data related to alarm conditions.
• Respond to security incidents and events in a timely manner.
• Resolve and close cases based on defined security criteria.
• Create and deliver comprehensive security reports.

We offer:

• A low-hierarchy environment with an open-door policy and direct client cooperation.
• Long-term employer-employee partnership with a competitive salary and benefits package.
• Support with Information Security certifications from globally recognized organizations.
• Rapidly growing company with paths for career progression and personal development.
• Endless opportunities to work with cutting-edge tech and learn something new.

Cloudfresh ⛅️ is a Global Google Cloud Premier Partner, Zendesk Premier Partner, Asana Solutions Partner, GitLab Select Partner, Hubspot Platinum Partner, Okta Activate Partner, and Microsoft Partner.

Since 2017, we’ve been specializing in the implementation, migration, integration, audit, administration, support, and training for top-tier cloud solutions. Our products focus on cutting-edge cloud computing, advanced location and mapping, seamless collaboration from anywhere, unparalleled customer service, and innovative DevSecOps.

We’re looking for a Google Cloud Security Engineer to harden client environments across GCP. You’ll implement and help design security controls, automate guardrails, improve detection & response, and guide stakeholders through pragmatic, risk-based decisions across EMEA.

Requirements:

• 3+ years proven, hands-on experience in a Security Engineer, SecOps (or similar) role.
• Strong knowledge of building and operating Security Porture, Edge protection, WAF, Endpoint security.
• Technical certifications related to CyberSecurity Google Cloud Solutions, Cloudflare and JumpCloud are an advantage.
• Experience of presentation, documentation.
• Excellent communication and strategic planning abilities, able to explain trade-offs, influence remediation, and drive adoption of guardrails.
• Basic scripting experience (e.g., Python, Bash, or gcloud CLI).
• Fluency in English.

Responsibilities:

• Design, implement, and operate security controls for internal needs and clients across.
• Perform cybersecurity audits.
• Configure and monitor Security Command Center, audit logs, and threat protection.
• Establish logging, detection and incident response.
• Assist clients with implementation of Cybersecurity products (Google Cloud Security Center, Google Workspace Security, Cloudflare, JumpCloud) and compliance controls.
• Generate security assessment reports and provide actionable recommendations.
• Continuously assess the landscape: track new Vendors features and update baselines to improve posture, reliability, and cost efficiency.

Work conditions:

• Competitive Salary & Transparent Motivation: Receive a competitive base salary with performance-based bonuses, providing clear financial rewards for your success.
• Flexible Work Format: Work remotely with flexible hours, allowing you to balance your professional and personal life efficiently.
• Training with Leading Cloud Products: Access in-depth training on cutting-edge cloud solutions, enhancing your expertise and equipping you with the tools to succeed in an ever-evolving industry.
• International Collaboration: Work alongside A-players and seasoned professionals in the cloud industry. Expand your expertise by engaging with international markets across the EMEA and CEE regions.
• Vibrant Team Environment: Be part of an innovative, dynamic team that fosters both personal and professional growth, creating opportunities for you to advance in your career.

When applying to this position, you consent to the processing of your personal data by CLOUDFRESH for the purposes necessary to conduct the recruitment process, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
Additionally, you agree that CLOUDFRESH may process your personal data for future recruitment processes. You can withdraw this consetn at any time.

Who Are We?

Welltech is a global wellness technology company with Ukrainian roots. Our mission is to build and scale wellness apps globally through state-of-the-art, tech-driven performance marketing.

We are one of the most established players in the wellness app space, and we are accelerating. Over 25.5 million people across the world use our apps — Muscle Booster, Yoga-Go, and WalkFit — to build healthier habits, move more, and feel better every day. Every subscription represents a real person making a real change in their life, and we take that seriously.

With 500+ people across hubs in Cyprus, Ukraine, Poland, Spain, and the UK, we combine the scale of a market leader and the drive of a team that's just getting started.

What We're Looking For

Welltech’s success and constant growth is increasingly introducing new challenges to the security of our products. We are looking for a dedicated and experienced Senior/Staff Security Engineer to lead our security initiatives and drive our security strategy forward.

Responsibilities:

• Security Strategy Development: Design and implement mid and long-term security strategies, aligning them with business goals and technology roadmaps to ensure robust protection of digital assets. Collaborate across functions to integrate security practices into the broader organizational strategy.
• Risk Management: Identify, assess, and manage security risks, developing strategies to mitigate potential threats and vulnerabilities. Communicate risks and recommendations to senior leadership.
• Security Observability: Lead the transition from managed detection and response services to an in-house capability, ensuring seamless operational change and continuity. Develop and implement security monitoring and alerting strategies using Datadog and PagerDuty.
• Incident Response: Establish and manage an on-call incident response protocol to ensure swift and effective response to security incidents.
• Data Security Innovation: Partner with the Privacy team to establish foundational data security practices and policies, driving data security initiatives that comply with international industry standards and regulations.

• Certification & Compliance: Provide hands-on expertise to achieve and maintain PCI DSS certification. Ensure that security standards comply with industry regulations and best practices.

   

Requirements:

• Experience:
  • A minimum of 5 years in Security Engineering roles.
  • Demonstrated ability to lead large scale security projects and initiatives effectively.
  • Proven track record in implementing data security initiatives that meet industry standards.
  • Hands-on incident response experience with a track record of managing and mitigating security incidents effectively.
  • Experience with regulatory compliance standards and frameworks such as GDPR, PCI-DSS, or ISO 27001.
• Technical Skills:
  • Strong coding skills, with a focus on security-focused development.
  • Proven proficiency in utilizing Datadog and PagerDuty for detection and response operations.
  • Deep understanding of AWS security frameworks, practices, and tools to protect cloud-hosted environments.
• Soft Skills:
  • Strong communication skills with the ability to articulate complex security issues to technical and non-technical audiences.

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications and regulatory technologies.

We are looking for a Security System Engineer to join our teams!

Requirements:
- 2–4 years of experience in Endpoint Security / SOC / IT Security
- Hands-on experience with EDR solutions (SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, or similar)
- Experience managing MDM solutions (ManageEngine, Intune, Jamf, or similar)
- Understanding of endpoint hardening principles and baseline configurations (CIS Benchmarks or similar)
- Experience with patch management processes and compliance tracking
- Hands-on experience in incident investigation
- Understanding of Incident Response processes and basic forensic practices
- Experience working with or integrating SIEM solutions (Splunk, ELK, Microsoft Sentinel, or similar)
- Understanding of the endpoint threat landscape (malware, phishing, privilege escalation, persistence techniques)
- Administrative-level experience with Windows and macOS

Will be plus:

- Experience with IdP solutions (JumpCloud, Okta, Azure AD)
- Basic scripting skills (Python, Bash, or PowerShell) for automation
- Experience participating in threat hunting activities
- Understanding of security standards and frameworks (ISO 27001, PCI DSS, SOC 2)
- Cybersecurity-related certifications

Soft Skills:

- Ability to independently investigate incidents and make decisions
- Ability to handle large volumes of alerts and effectively prioritize tasks
- Strong communication skills with SOC, IT, and cross-functional teams
- Attention to detail and a structured, analytical mindset

Responsibilities:
- Endpoint Security
- Ensure 100% endpoint coverage with security agents (EDR/AV, MDM, IdP)
- Manage and optimize EDR policies
- Implement and maintain secure baseline configurations for endpoint devices
- Manage device security policies via MDM
- Control software inventory on corporate devices
- Manage agent versions, ensuring timely updates and lifecycle (EOL) control
- Monitor patch compliance and prepare reporting across teams

Monitoring, Incident Response & Threat Hunting
- Integrate EDR, MDM, and IdP with SIEM, ensuring complete and reliable telemetry ingestion
- Participate in threat hunting activities to identify endpoint-level threats
- Investigate and respond to endpoint security incidents
- Collect and analyze forensic artifacts
- Participate in post-mortem analysis and define corrective actions

- Compliance & Audit
- Develop and maintain endpoint security policies
- Conduct regular audits and remediate out-of-compliance devices
- Ensure endpoint security posture aligns with current standards and regulatory requirements

Our benefits to you:

☘️An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance and more

🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed

🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided

🏖Paid vacations, sick leave, personal events days, days off

💵Referral program — enjoy cooperation with your colleagues and get the bonus

📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences

🎯Rewards program for mentoring and coaching colleagues

🗣Free internal English courses

✈️In-house Travel Service

🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more

🎳Other benefits could be added based on your location