Jobs Security

We`re rapidly growing and inviting an Information/System Security Engineer to our team.

You would be running such tasks as:

• Design and maintain the security architecture based on frameworks such as ISO 27001, NIST, CIS Controls, or other relevant standards;
• Develop and enforce security policies, standards, and procedures.
• Conduct cybersecurity risk assessments and develop mitigation measures.
• Integrate threat monitoring systems and implement/administer SOC tools.
• Secure macOS, Linux, and Windows endpoints.
• Ensure information and data protection across company systems and infrastructure.
• Manage access control, configure IAM in corporate systems in accordance with company policies, and conduct regular access reviews.
• Manage vulnerabilities, respond to security incidents, analyze their root causes, and implement remediation measures to prevent future attacks.

Required skills and expertise:

• Higher education in Information Security or related fields (Computer Science, Software Engineering, Information Systems, etc.).
• At least 3 years of experience in a similar role.
• Experience in gambling, betting, fintech, or other high-risk industries is a must.
• Knowledge of user authentication principles, access control, and understanding of MFA, SSO, and SAML; experience working with IAM systems such as Okta, MS Entra ID, or Ping Identity.
• Experience configuring and administering security tools such as SIEM, EDR, SOAR, MISP, IDS/IPS, WAF, DLP, ESG, and VPN.
• Experience securing server, network, and cloud infrastructure, including CSPM (Cloud Security Posture Management), IAM hardening, and conducting pentest or misconfiguration reviews.
• Experience working with monitoring and logging systems.
• Experience implementing or supporting DLP solutions.
• Experience writing scripts for automation.
• Experience responding to security incidents, with the ability to analyze and interpret data and prepare investigation reports.
• Experience with IT audits and risk management processes.
• Risk-oriented mindset with the ability to assess consequences and implement systemic improvements.
• English level: Intermediate or higher (ability to read technical documentation and correspond in English).

Will be a plus:

• Experience with OSINT tools (Credential & Data Leak Monitoring, Infrastructure Reconnaissance, Threat Actor Tracking).
• ZTNA/SSE knowledge.
• Security certifications and training.

Tech Stack: Google Workspace, Jamf, OpenVPN

We offer:
Care for your health and well-being
• 100 % paid sick leaves;
• 20 working days of paid vacation;
• Medical support;
• Benefits Cafeteria (budget for gym/stomatology/psychological service & etc.);
• Ability to work remotely or in the office (as you wish);
• Corporate gifts & events.

Professional growth & development
• Competitive salary with annual salary promotions;
• The annual budget for professional courses, conferences, workshops, and books;
• Internal training courses;
• Work with a team of professionals and have the opportunity to share knowledge.

Corporate Culture
• Dynamic and result-oriented work environment;
• The ability to influence product development at an early stage;
• Openness to new ideas and approaches, healthy team discussions;
• No “red tape” culture.

Candidate journey:
HR Interview — Technical Interview — Final Interview

Come build something true with us.

We’re True Sea Moss, a fast-growing wellness brand built on the healing powers of one of nature’s oldest superfoods, sea moss.

No powdered promises. No pretty lies. Our products move through a complex global supply chain — and behind that flow sits structure, discipline, and crystal-clear organization.

As we scale across marketplaces, systems, marketing platforms, data warehouses, and internal tools, security is no longer optional — it’s foundational.

We’re looking for a Cybersecurity Specialist — someone exceptionally structured, risk-aware, and confident owning company-wide security, access control, and infrastructure protection end-to-end.

Now — who are we looking for?

You’re the person who sees vulnerabilities before others even notice them.

You think in permissions, identity management, audit logs, and prevention frameworks. You don’t just react to incidents — you design systems that minimize the chance of them happening.

You’re calm under pressure, precise in execution, and serious about protecting company data, systems, and people.

What You’ll Be Doing

• Own company-wide access management (Google Workspace, Slack, AWS, Shopify, BI tools, internal systems, etc.)
• Create, modify, and revoke user access based on role and security policies
• Implement role-based access control (RBAC) and least-privilege principles
• Maintain secure credential and password management systems
• Implement and enforce multi-factor authentication (MFA) across all platforms
• Secure cloud environments and monitor infrastructure permissions
• Monitor logs, detect suspicious activity, and define response protocols
• Build and maintain internal security policies and documentation
• Conduct periodic security audits and vulnerability assessments
• Develop backup and disaster recovery strategies
• Lead incident response processes when needed
• Educate the team on security awareness and best practices

What You Bring

• Proven experience in cybersecurity or information security
• Strong understanding of identity & access management (IAM) principles
• Experience securing cloud environments (AWS preferred)
• Knowledge of endpoint protection and monitoring tools
• Understanding of encryption, authentication, and network security fundamentals
• Experience implementing MFA and access governance frameworks
• Ability to create clear security policies and enforce standards
• Strong sense of ownership and discretion when handling sensitive data
• English level B2+
• Comfortable working remotely

Nice-to-Haves

• Experience working with fast-growing e-commerce or digital-first companies
• Experience preparing companies for compliance audits
• Background in cloud infrastructure security automation

Why Work With Us

• A role with real responsibility and ownership from day one
• Direct impact on how safely and confidently we scale
• High trust and autonomy
• Opportunity to build security systems from the ground up
• A team that values structure, clarity, and calm execution

Here’s How We Back Our Words with Care

• Welcome Pack and custom TrueSeaMoss merch to make sure you arrive like you were always meant to be here
• Sports reimbursement to support your physical and mental health
• Additional vacation days beyond standard holidays
• Coaching & career consultations to support your personal and professional growth
• Access to corporate English lessons to sharpen your communication skills
• WHOOP membership to help you track your health, sleep, and recovery
• Coworking membership if you prefer a hybrid work lifestyle
• Sabbatical options after long-term contributions
• Travel grants to support work-related or wanderlust trips — we believe in leaving to come back better
• Project grants for side ideas, personal initiatives, or creative experiments

So — does this sound like you?

If you’re serious about protecting systems, building secure foundations, and owning cybersecurity end-to-end — we’d love to meet you.

Iterasec works with clients worldwide, helping them find vulnerabilities and secure their products. Our projects range from mobile/web applications to complex modern cloud and automotive stacks. We work with both small product companies as well as Fortune 500 enterprises.

We are looking for a Middle/Senior Security Consultant / Penetration tester to work on and lead penetration testing and vulnerability/cloud security assessment projects.

In this role, you will work on technically challenging projects and also spend some time leading/mentoring our junior pentesting colleagues.

Required skills

- 1.5+ years of intensive commercial experience

- OSCP, eWPTx2 or similar would be a plus

- Scripting/coding skills and being comfortable with advanced pentesting tooling

- Strong knowledge of mobile/web security

- Comfortable with cloud and container security

- Basic RE skills

- Ability to mentor/lead colleagues

- Strong ability and drive to learn and develop cybersecurity skills

- Technical English (Intermediate+)

We offer

- Good salary + bonus system

- Diverse project portfolio and technologies to work with

- Rewarding environment: brilliant team ready to share knowledge and collaborate

- Courses and conferences which are relevant to the position are sponsored by the company.

- We are a remote-first company with full WFH support and a flexible work schedule.

Responsibilities

- Participate in various pentesting projects

- Lead junior colleagues

- Perform threat modeling in pentesting and security assessment projects

- Create assessment documentation and reports, clearly identifying vulnerabilities and associated remediation steps

- Consult clients on efficient issues remediation

- Conduct security researches

- Develop tools and scripts to automate and improve current pentesting processes

Iterasec works with clients worldwide, helping them find vulnerabilities and secure their products. Our projects range from mobile/web applications to complex modern cloud and automotive stacks. We work with both small product companies as well as Fortune 500 enterprises.

We are looking for a talented and motivated Junior Pentester who will join our security team to work on penetration testing and vulnerability/cloud security assessment projects.

We expect a short motivation letter where you can explain your skills, achievements and motivation.

Required skills

- Solid non-commercial cybersecurity experience, such as HTB/THM

- Junior-level cybersecurity certifications would be a plus.

- Comfortable with basic application security testing and common vulnerabilities (like OWASP Top 10, CWE Top 25) and cybersecurity fundamentals

- Strong basic IT skills: Linux, networking (TCP/IP, DNS, HTTP etc.)

- Some experience in scripting/coding languages, such as Java, JS, Python, Shell, etc.

- Strong drive to learn and develop cybersecurity skills

- Technical English (Intermediate)

We offer

- Good salary + bonus system

- Rewarding environment: brilliant team ready to share knowledge and collaborate

- Support in obtaining professional certifications, such as BSCP, OSCP, eWPTX, cloud certifications, etc.

- Courses and conferences which are relevant to the position are sponsored by the company.

- We are a remote-first company with full WFH support and a flexible work schedule.

Responsibilities

- Execute penetration tests and security assessments as part of a team, including internal/external networks, web and mobile applications, Windows and Linux environments, cloud architectures, IoT devices, and more

- Create assessment documentation and reports, clearly identifying vulnerabilities and associated remediation steps

- Conduct security research

We are looking for a Cybersecurity Testing Team Lead to join our team!  

Requirements: 
- 5+ years in offensive security/penetration testing
- 2+ years in a technical leadership role (team lead/principal/tech lead)
Hands-on experience with:
- Web, API, Mobile (iOS/Android) pentesting
- Secure code review (at least one backend language)
- Cloud & infrastructure security testing
- Proven experience working with product teams, not only 'report delivery' 

Will be plus: 
- Advanced Offense
- Red Team/Purple Team experience
- Adversary emulation (MITRE ATT&CK)
- Threat modeling from an attacker’s perspective
- Experience with exploit development or advanced bypass techniques

- Cloud & Platform Security
- AWS (Preferred)
- Kubernetes security testing
- CI/CD attack vectors
- Secrets, identity, and supply chain attacks

Responsibilities:  
Leadership and Team Management:
- Lead and grow the Offensive Security team (pentest/red team)
- Define roles, expectations, and competency levels
- Mentor team members and conduct technical reviews
- Own capacity planning and prioritization 

Offensive Security Operations:
- Own the pentest intake process (Jira-based)
- Ensure consistent coverage:
- Web/API/Mobile
- Cloud/Infra
- Enforce quality standards for test depth, reports, risk assessment, and retesting
- Findings & Risk Management 

Ensure:
- Findings are exploitable, reproducible, and actionable
- False positives are minimized
- Risk is clearly communicated

Our benefits to you:
☘️An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance and more

🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed

🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided

🏖Paid vacations, sick leave, personal events days, days off

💵Referral program — enjoy cooperation with your colleagues and get the bonus

📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences

🎯Rewards program for mentoring and coaching colleagues

🗣Free internal English courses

✈️In-house Travel Service

🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more

🎳Other benefits could be added based on your location

Are you passionate about making the internet a safer place? We are looking for a Middle Security Operations Researcher to join our team and help protect enterprise clients from harmful bots and online threats. This is a remote, full-time role that offers the opportunity to work directly with global customers, analyzing traffic patterns and neutralizing malicious activity.

At Sigma Software, we value expertise, ownership, and proactive communication. You will collaborate with a diverse international team while enjoying the flexibility of working from anywhere.

Why join us? You will work on impactful cybersecurity projects, gain exposure to cutting-edge analytics tools, and contribute to safeguarding digital ecosystems worldwide.

CUSTOMER
Our customer is a global provider of comprehensive security solutions, protecting individuals, organizations, and communities from a wide range of risks, particularly in the digital space. Their enterprise-focused products specialize in bot defense and invalid traffic detection, helping clients safeguard critical systems and maintain operational integrity.

PROJECT
The project focuses on real-time threat detection and bot mitigation for enterprise-scale clients. Security Operations Researchers collaborate directly with customers, leveraging advanced analytics platforms to identify malicious traffic patterns and neutralize online threats. This dynamic environment requires both technical expertise and strong communication skills.

JOB DESCRIPTION:

• Provide Tier 2 technical support to customers in real time, delivering clear and professional responses
• Analyze logs, graphs, and dashboards, isolating and investigating data using tools like Kibana
• Manage and organize cases, tickets, and requests in Salesforce
• Perform back-office tasks, including writing and maintaining suspicious field expressions
• Write and optimize SQL queries for data retrieval, analysis, and manipulation in BigQuery
• Communicate with global customers, ensuring timely responses and effective issue resolution
• Work in a shift-based schedule, including weekend shifts

QUALIFICATION:

• 2+ years of experience in data analysis, including working with logs and dashboards
• Experience working with web traffic data, including HTTP traffic, logs, request analysis, and traffic pattern investigation
• Strong SQL skills: Common Table Expressions (CTE), aggregations, GROUP BY, ORDER BY, filters, window functions (e.g., RANK()), and subqueries
• Experience with SIEM systems. Nice to have: experience with the Elastic Stack
• Technical understanding of web technologies and client–server architecture (APIs, HTTP, basic HTML/JavaScript)
• Strong troubleshooting and problem-solving skills
• Experience in customer support, including direct communication with clients; professionalism and politeness are essential

• Strong English communication skills

   

WILL BE A PLUS:

• Experience in a Cybersecurity Analyst/Researcher role, ideally supporting external customers in threat detection and response
• Experience in web security and security research: web application security, bot management, fraud detection
• Basic Python skills
• Experience with Kibana

PERSONAL PROFILE:

• High level of responsibility and ownership
• Ability to work independently with minimal supervision
• Planning and decision-making skills with considerations for multiple integrated systems
• Proactive communicator who keeps stakeholders informed without being prompted

Work schedule: 40 hours per week, 5 days per week. Workdays can be adjusted to start earlier or later, including weekends if necessary.

Come Back Agency supports US software and technology companies by running their hiring process. We work with delivery and leadership teams to define roles, screen candidates, and manage interviews. Successful candidates are hired directly by the company and become part of its team.
 

This position is with a US-based software company providing custom development and AI implementation for North American clients. The team builds and maintains production software, including AI-enabled systems, and works in long-term client engagements. Team members operate as part of an internal, distributed team and collaborate directly with client stakeholders.
 

About the role:

The company is moving deeper into enterprise work. We need a DevOps leader who can harden our infrastructure, implement security best practices, and drive compliance readiness so we can pass enterprise vendor reviews and pursue certifications like SOC 2 and ISO 27001. You will work directly with engineering and leadership and own the technical program end to end.
 

What you will do

• Build and maintain secure cloud infrastructure and CI CD pipelines
• Implement access control, least privilege, and secrets management across environments
• Standardize logging, monitoring, alerting, and audit trails
• Create and maintain secure SDLC practices, including code scanning, dependency scanning, and change control
• Set up incident response basics, including runbooks, on call expectations, and post incident process
• Drive compliance readiness for SOC 2 and ISO 27001 by implementing required technical controls and gathering evidence
• Own vulnerability management and patching routines for infrastructure and dependencies
• Improve backup, disaster recovery, and business continuity practices
• Support client security questionnaires with clear technical answers and evidence
   

Requirements

• Strong DevOps experience with cloud infrastructure and deployment pipelines
• Hands on experience with AWS, including IAM, networking, compute, and logging services
• Experience with Infrastructure as Code such as Terraform
• Experience with containerization and orchestration, Docker and Kubernetes preferred
• Comfort setting up security tooling, SAST, DAST, dependency scanning, secret scanning
• Ability to document systems clearly and work with auditors or compliance tools when needed
   

Nice to have

• SOC 2 or ISO 27001 experience, even if you were the technical owner not the compliance PM
• Experience with Vanta, Drata, Secureframe, or similar evidence automation tools
• Experience working with HIPAA or other regulated client environments
• AWS certifications such as Solutions Architect or Security Specialty
   

What We Offer:

• Working hours aligned with US time zones, typically 16:00-23:59 Kyiv time.
• English lessons to support clear and confident communication.
• Paid vacation and sick days.
• Fully remote work.
• Opportunities for professional growth within the team.
• Structured, personalized onboarding to help you ramp up effectively.
   

Apply with your resume and a short note outlining your relevant experience. You can also submit it through our website at comeback.ua. Selected candidates will be contacted by Come Back Agency

We are the creators of a new fintech era!
Our mission is to revolutionize the world by making blockchain technology accessible to everyone in everyday life. WhiteBIT is a global team of more than 1,200 professionals united by a shared vision of shaping the Web3 future.
We are building our own blockchain ecosystem, ensuring maximum transparency and security for over 8 million users worldwide. Our cutting-edge solutions, rapid adaptation to market challenges, and technological excellence set us apart from traditional companies.
Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT, and VISA.

The future of Web3 starts with you — join us as a SOC Analyst L1!

 

Requirements:

— Basic understanding of cybersecurity principles, common attack vectors, and threat detection methods.
— Familiarity with key cybersecurity frameworks (MITRE ATT&CK, NIST, CIS etc.)
— Familiarity with EDR/XDR and SIEM platforms (e.g., CrowdStrike, SentinelOne, Splunk, QRadar, etc.).
— Strong analytical and problem-solving skills.
— Ability to work in a fast-paced, team-oriented environment.
— Good written and verbal communication skills in English (B1+).
— Willingness to work in a shift-based schedule, including nights and weekends. Shifts are distributed evenly across the department.

Responsibilities:

— Monitor and analyze alerts from EDR, SIEM platforms and other corporate tools.
— Perform initial triage to determine the severity, credibility, and urgency of security events, sorting out False Positives.
— Escalate incidents to Level 2 analysts or incident response teams when necessary.
— Document findings, actions taken, and outcomes in a ticketing system.
— Follow standard operating procedures (SOPs) and playbooks for alert handling.
— Assist in the continuous tuning of EDR/SIEM rules to reduce False Positives.
— Stay current with emerging threats and industry best practices.
— Participate in active learning and Purple Teaming of the SOC team.

Work conditions:

Immerse yourself in Crypto & Web3:
— Master cutting-edge technologies and become an expert in the most innovative industry.
Work with the Fintech of the Future:
— Develop your skills in digital finance and shape the global market.

Take Your Professionalism to the Next Level:
— Gain unique experience and be part of global transformations.
Drive Innovations:
— Influence the industry and contribute to groundbreaking solutions.

Join a Strong Team:
— Collaborate with top experts worldwide and grow alongside the best.
Work-Life Balance & Well-being:
— Modern equipment.
— Comfortable working conditions, and an inspiring environment to help you thrive.
— 24 calendar days of paid leave.
— 5 calendar days of sick leave.
— Additional days off for national holidays.

We are looking for a Senior Penetration Tester to join our team and help our clients build stronger, more resilient digital infrastructure. If you thrive on breaking things before the bad guys do — particularly in backend and API environments — we want to hear from you. The ideal candidate brings proven, hands-on expertise in neutralizing DDoS threats, fortifying system security, and stress-testing infrastructure through realistic attack simulations.
 

What you'll be doing

• Identify vulnerabilities and reinforce backend and API defenses against evolving cyber threats
• Design and deploy DDoS mitigation strategies to keep systems robust under pressure
• Execute controlled offensive security tests, including live DDoS simulations in safe environments
• Evaluate and improve security architecture, elevating overall standards and best practices
• Collaborate closely with DevOps and backend engineering teams to embed security at every layer
   

What we offer

• Lean, low-bureaucracy environment — minimum management overhead
• Bi-monthly payouts so you're never waiting long for your earnings
• A streamlined, no-nonsense hiring process
   

Hiring process

Candidates who pass the initial screening interview will be invited to complete a hands-on test assignment in our dedicated sandbox environment. You'll be tasked with cracking security algorithms — a practical way for us to evaluate your real penetration testing ability and your instincts around attack mitigation.

The role

As an Intern, you will assist in the development and implementation of our security controls, gaining hands-on experience in information security. In this role, you will support the security team in conducting security audits, risk assessments, and vulnerability testing. You will work closely with our security experts to learn about security best practices, threat analysis, and compliance regulations.

You will contribute to the protection of sensitive customer data and the development of secure solutions that meet global security standards.
 

Requirements

• Currently pursuing a degree in Computer Science, Information Assurance, or a related field
• Basic understanding of security principles, including threat analysis and vulnerability assessment
• Familiarity with security frameworks and regulations (e.g. HIPAA, GDPR)
• Excellent analytical and problem-solving skills
• Ability to work in a fast-paced environment and prioritize tasks effectively
• Passion for information security and protecting sensitive data
   

Responsibilities

• Assist in conducting security audits and risk assessments to identify vulnerabilities
• Support the development of security policies and procedures to ensure compliance with regulations
• Participate in vulnerability testing and penetration testing activities
• Collaborate with cross-functional teams to develop secure software development practices
• Assist in the development of incident response plans and disaster recovery procedures
• Participate in security awareness training and education activities
   

About HelloBiome

HelloBiome is an innovative B2B biotech startup at the forefront of AI-powered microbiome innovation. We are dedicated to revolutionizing consumer health by leveraging the microbiome. Through democratizing access to microbiome data, HelloBiome utilizes advanced AI technologies to develop targeted health solutions, transforming these insights into commercial applications for our business clients. Trusted by over 20 clients, including industry giants like Unilever, we are not just predicting the future of consumer health; we are actively shaping it. At HelloBiome, every step we take is towards a healthier future, optimizing well-being one microbiome at a time.
 

Our Culture

At HelloBiome, we thrive in a globally connected, remote work environment with team members distributed across Europe, the US, Canada, and Korea. Our headquarters are in San Francisco and Our dynamic and international team embodies a culture of kindness paired with a drive for innovation and excellence. We value proactive individuals who bring a self-starter mindset to their roles, always seeking new ways to advance our mission. Attention to detail is crucial in our work, as we are committed to delivering precise and impactful health solutions to our B2B clients.
 

This remote and flexible work structure not only fosters a diverse and inclusive atmosphere but also encourages a balance between personal growth and professional excellence. Join us and be part of a team that is shaping the future of consumer health through groundbreaking AI-powered microbiome innovation.

We are looking for a Security Coordinator who will help us keep our company’s data, infrastructure, and SaaS ecosystem secure and well-governed.

This role focuses on access control, SaaS security, and risk management, ensuring that our systems are used safely and only by the people who actually need access.

Responsibilities

• Maintain a complete inventory of company systems and assets, including:
  • Cloud infrastructure
  • Databases
  • Google Workspace / shared drives
  • Internal tools
  • Third-party SaaS applications
  • AI tools used by the team
• Ensure proper access management across all systems:
  • Apply the principle of least privilege
  • Review and revoke unnecessary permissions
  • Monitor shared accounts and external access
• Conduct periodic access audits for:
  • Cloud environments
  • Databases
  • Google Drive and internal documentation
  • SaaS tools and integrations
• Identify and mitigate security risks related to AI tools, including:
  • Preventing sensitive data from being uploaded to AI platforms
  • Managing access to AI tools
  • Creating safe usage policies
• Work with engineering and operations teams to:
  • Improve security practices
  • Document access processes
  • Maintain internal security guidelines
• Track and manage security risks from third-party services
• Assist with security documentation and compliance processes (e.g., SOC2 or internal security policies).

Requirements

• Experience with cloud platforms (AWS, GCP, Azure, or similar)
• Familiarity with identity and access management concepts
• Experience managing SaaS ecosystems (Google Workspace, Slack, etc.)
• Understanding of data security risks and access control
• Ability to analyze system permissions and identify unnecessary access
• Awareness of AI-related security risks (data leakage, prompt injection, uncontrolled usage)

Nice to Have

• Experience with SOC 2 / security compliance
• Familiarity with IAM tools or security monitoring platforms
• Background in DevOps, IT administration, or security operations

What Success Looks Like

• All company systems are properly inventoried and documented
• Access is granted strictly on a need-to-know basis
• No forgotten accounts, open shares, or unnecessary privileges
• AI tools are used safely and responsibly

• Kyiv, city center
• Office-based position
• Monday – Friday, 10:00 – 19:00
• Competitive salary
  
  About the Role
• We are looking for a Cyber Security Engineer who will be responsible for protecting the company’s infrastructure, securing data, and performing security audits.
• In this role, you will work with access control systems, encryption, security monitoring, and vulnerability analysis to ensure the reliability and safety of our systems.
  
  Responsibilities
• Ensure infrastructure security across company systems
• Manage access control systems:
  • IAM
  • RBAC
  • Zero Trust architecture
• Implement and monitor data encryption
  • TLS / HTTPS
  • Database encryption
• Identify and mitigate web security vulnerabilities
  • OWASP Top 10
  • XSS
  • CSRF
  • SQL Injection
• Configure and analyze system logging
• Work with SIEM systems
• Conduct security audits
• Participate in penetration testing
• Monitor and enforce data protection policies
• Ensure compliance with basic GDPR principles
  
  What We Offer
• Comfortable modern office in the center of Kyiv
• Great location with convenient transportation
• Office kitchen
• Corporate English courses and professional training
• Competitive salary
• Supportive and professional team
• Regular corporate events and team-building activities
• We believe that a strong team is built on respect, trust, and professional growth.
• We value and support our employees and strive to create a comfortable and motivating work environment.

📍 Kyiv | Office-only format
     Schedule: Monday–Friday
          10:00–19:00

We are looking for a Cybersecurity Specialist who will be responsible for protecting the company’s infrastructure, web applications, and data, implementing modern security standards, and ensuring compliance with security requirements.

Key Responsibilities

• Build and maintain access security models (IAM, RBAC)
• Implement Zero Trust principles across the infrastructure
• Configure and monitor encryption (TLS, HTTPS, database encryption)
• Identify and mitigate vulnerabilities according to OWASP Top 10
• Protect systems from XSS, CSRF, SQL Injection, and other web attacks
• Set up security logging and monitoring
• Conduct or coordinate penetration testing (pentests)
• Work with SIEM systems for threat detection and analysis

• Ensure compliance with personal data protection policies (GDPR)

   

Requirements

Must have:

• Experience with access management systems (IAM, RBAC)
• Understanding of Zero Trust architecture
• Hands-on experience configuring TLS / HTTPS
• Knowledge of database encryption principles
• Strong understanding of OWASP Top 10
• Experience detecting and preventing XSS, CSRF, and SQL Injection
• Experience organizing security logging and incident analysis

• Understanding of GDPR basics and data retention policies

   

What we offer

•  Competitive compensation
• Work in a modern office in Kyiv
• Opportunity to work with advanced security infrastructure
• A strong team of specialists and professional growth opportunities

• Stable monthly payments

   

📩 Join our team today!

Requirements:

• Experience as a System Administrator ( 2 years +) 
• Knowledge of MacOS at the administrator level
• Network Technologies
• Basic knowledge of remote desktops and the principles of the thin clients
• Knowledge of the basics of information security
• Knowledge of ISO27001, ISO27002 and similar documents and experience with ISO/IEC 27001 certification audits in information security
• Understanding the basic aspects of information security and network components (firewalls, switches, routers, VPNs)
• English: Intermediate (B1-В2). Fluent level is welcome

Would be a plus:

• Experience in supporting or taking part in corporate inventory checks

Responsibilities:

• Implementing and enforcing security policies
• Monitoring security events and incidents
• Conducting risk assessments and security audits
• Managing cybersecurity tools and protection systems
• Delivering information security awareness training for employees
• Ensuring compliance with standards and requirements (ISO 27001)
• Creating, reviewing, and regularly updating ISO 27001 documentation (Confluence)
• Collaborating with German colleagues on ISMS-related tasks (document preparation, reporting, participation in meetings)

This role is new to our company, and the specialist will be the first to establish and develop this area.

What you will get working with us:

- Full technical equipment (MacBook, 2K additional monitors, and a comfortable workplace)

- Remote working equipment provided if needed

- Work exclusively with cutting-edge technologies

- Friendly and professional team atmosphere

- 8-hour workday with no overtime

- Full tax compensation

- 18–24 days of paid vacation

- Paid sick leave:

10 days with a medical certificate

5 days without a certificate

Recruitment Process:

1. Online Call — detailed discussion of the vacancy with a Recruiter (up to 30 minutes)
2. Online Call — English level check (up to 10 minutes)
3. Technical Interview - (up to 60 minutes)

The order of the stages may vary during the process, but always with the goal of moving forward together.

Before sending your CV, please carefully review the vacancy details to save both your time and ours.
If your experience matches the requirements — you will definitely receive feedback.

About Us…

In 2005, brothers Dimitri and Steve Osler set out to reimagine how businesses communicate, and that vision became Wildix. Today, from our headquarters in Tallinn, Estonia, Wildix is one of the world’s fastest-growing UCaaS companies, with 300+ team members from 15+ nationalities, working across Europe, the UK, the Americas and beyond. We serve businesses in 135+ countries through a partner-first ecosystem, delivering secure, intuitive solutions that keep companies connected, productive and ready for what’s next.

At Wildix, we don’t just build technology, we live it. As a remote-first company, we rely on our own platform every day to collaborate globally and innovate fast. With steady growth and a strong foundation, we offer real opportunities to advance your career as we scale, making an impact in a global team that’s shaping the future of work.

At Wildix, our mission is clear: Empower companies worldwide with seamless communication solutions that drive productivity, efficiency, and growth.

About The Role…

We are looking for an experienced Infrastructure Security Engineer to strengthen and harden our AWS-based infrastructure. This role will focus on designing, implementing, and continuously improving our security posture, ensuring compliance with best practices, and proactively identifying and mitigating risks across our cloud environment.

What You Will Do…

• Drive continuous security improvements in AWS based on SIP findings.
• Maintain “100% Green” status in AWS Trusted Advisor and Security Hub.
• Own IAM security, enforcing MFA, auditing admin access, rotating keys, and implementing least-privilege roles.
• Manage temporary privileged access workflows to ensure secure, time-bound access.
• Lead the lifecycle of infrastructure security findings, from triage to remediation and verification.
• Build and operate centralized logging and SIEM for full visibility and threat response.
• Collaborate with DevOps/SRE teams to embed security into provisioning and deployments.
• Coordinate AWS security assessments and penetration testing, driving remediation.
• Provide security guidance for architecture and new services, ensuring best-practice implementation.
• Be available during working hours: 10:00–19:00 UA Time (09:00–18:00 CET).
  
   

What You Will Bring…

• 7+ years in Infrastructure Security, Cloud Security, or Cloud Engineering roles.
• Deep expertise in AWS security services (IAM, VPC, Control Tower, Security Groups, GuardDuty, Config, KMS, WAF).
• Hands-on with Infrastructure-as-Code security (Terraform, CloudFormation) and CI/CD pipeline hardening.
• Solid understanding of AWS network architecture and secure networking practices.
• Skilled in monitoring, logging, and incident response in cloud environments.
• Knowledge of cloud compliance frameworks (ISO 27001, SOC 2, CIS Benchmarks).
• Experienced in threat modeling, vulnerability management, and remediation.
• Practical implementation of zero-trust and least-privilege principles.
• Conduct security reviews of architecture and configurations.

Why You’ll Love It Here

👫 Work with a Supportive, High-Performing Team – We believe in trust, autonomy, and working with bright, passionate individuals who drive real impact.

🌍 A Truly International Workplace – Our diverse and inclusive team ensures you’ll always feel connected and supported, no matter where you are.

🚀 Shape the Future of Global Communication – Be part of a team transforming how businesses operate in an era of remote work and AI-powered collaboration.

💼 Join a Profitable & Stable Company – We’re not a startup experiment, we’re a two decade old success story with sustained profitability, meaning we can back your boldest ideas.

What We Offer

🏖️ Generous Time Off – Take the breaks you need to relax, recharge, and come back inspired.

💻 Top-Tier Tech – Love Mac? So do we! We equip our team with the best tools for success.

🚀 Career Growth & Development – We cover certifications and IT conferences to keep you at the top of your game.

🌱 Well-being Support – We offer access to psychology sessions to support your mental and emotional health

Happy with them? Our Benefits are country-specific. You can ask your recruiter for more information

Interview Process

🤝 Step 1: Initial Screening – A chat with our Talent Team to understand your background, experience, and motivations (30 mins).

🛠️ Step 2: Technical Interview – A deep dive with your potential manager to assess your skills and fit for the role (60 mins).

We Are Wildix

Wildix is an equal-opportunity employer. We value diversity and welcome all applicants regardless of race, gender, age, religion, or any other characteristic. Everyone is encouraged to apply and is welcome to join our Blue Ecosystem. 

Ready to join us? Apply Now!