Jobs Security

PrivatBank is the largest bank in Ukraine and one of the most innovative banks around the world. It holds a leading position for all the financial indicators in the area and comprises about a quarter of the whole banking system of our country.

We are looking for an Application Security Engineer. We are searching for the person who seeks to work in a dynamic environment and shares the values of initiative, openness and mutual trust.

We are striving to find a goal-oriented and multitask professional who would be focused on making good results and high quality.

Requirements:

• At least 3 years of experience in application security or related fields such as penetration testing and security architecture
• Proficiency in using security scanners such as SAST, DAST, SCA, Secret Detection, and Container scanning
• Experience integrating security scanners in CI/CD pipelines using Jenkins for GitLab
• Certifications such as CEH, OSCP, CSSLP, AWS Certified Security Specialty, etc. is preferred
• Background in software development, including roles such as Developer, Business Analyst, Architect, DevOps, etc
• Knowledge of Secure Software Development Life Cycle (S-SDLC) and frameworks like OWASP SAMM, BSIM, and Microsoft SDL
• Familiarity with the software development process and stages
• Basic understanding of software code
• Knowledge of key infrastructure components like databases, queues, application servers, load balancers, NoSQL, etc
• Understanding of major types of vulnerabilities
• Understanding of software architecture
• Knowledge of network protocols such as DNS, HTTP/S, SMTP, SSH, and FTP
• Ability to independently research information and solve complex problems
• Critical thinking skills

Responsibilities:

• Conduct security audits using the OWASP SAMM framework to assess current practices, identify gaps, and evaluate compliance levels within the organization
• Develop and implement strategic plans aimed at enhancing security maturity levels throughout the organization, with gradual improvements
• Application security governance and metrics
• Collaborate with various team members, including developers and top management, to advocate and implement application security best practices
• Improve our application security management platform
• Manage security architecture, focusing on integrating security at every stage of the software development lifecycle
• Integrate and oversee security automation tools to enhance security processes and reduce manual error
• Oversee security testing across various stages of software development to identify and mitigate potential security vulnerabilities
• Engage in threat modeling activities to predict and neutralize potential security threats before they impact the system
• Ensure compliance with relevant industry standards and regulations by regularly updating security policies and standards
• Track and manage software defects to ensure timely resolution of security-related issues
• Develop and conduct training and awareness programs to enhance security knowledge and practices across the organization
• Spearhead the secure integration of CI/CD practices into software development processes to ensure continuous security
• Use cloud services for application security

We offer:

• Work in the largest and most innovative bank of Ukraine
• Official employment and 24+4 calendar days of vacation
• Sick leave compensation
• Medical Insurance
• Competitive salary
• Bonuses, premium according to company policy
• Corporate training
• Modern comfortable office
• Interesting projects, ambitious tasks and dynamic growth
• Corporate financial assistance in critical situations
• A friendly professional and strong team
• Possibility of remote work format

PrivatBank is open to support and employ veterans and people with disabilities.

We believe that discrimination due to health conditions, physical abilities, age, race and ethnicity, gender or marital status is unacceptable.

We are ready to train veterans and candidates with disabilities without banking experience.

For our client in Berlin we are looking for Penetration Tester / Security Tester (m/f/d)

We are looking for an experienced Penetration Tester to perform security assessments of AI and Agentic AI platforms. 

Responsibilities include penetration testing of LLMs, AI agents, multi-agent systems, AI workflows, MCP implementations, APIs, cloud and infrastructure. Conduct AI Red Teaming, threat modeling, vulnerability assessments, and evaluate Prompt Injection, Jailbreaking, Data Leakage, Model Poisoning, RAG security, Tool Abuse, and Agent Exploitation. Collaborate with Engineering and Security teams, deliver security reports, and support secure-by-design AI.

Requirements: 5+ years in Penetration Testing/Security, mandatory OSCP, strong experience with LLM Security, AI Security Engineering, Agentic AI, OWASP Top 10, offensive security tools, web/API/cloud security, and excellent English. Nice to have: MCP Security, AI Red Teaming, AWS/Azure/GCP, OSEP, OSWE, GPEN, CISSP, CEH, German.

Project: ASAP – end of 2027

100% Remote, Full-time

English mandatory.

Location: EU and country near EU

Important: after confirming your application on this platform, you’ll receive an email with the next step: completing your application on our internal site, LaunchPod. So keep an eye on your inbox and don’t miss this step — without it, the process can’t move forward.

Why join us

If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! :)

About the role

We are looking for a Senior Technical Writer to design and automate AI-driven software documentation for end users, developers, and system integrators.

The mandatory requirements are 4+ years of technical writing experience, prompt engineering and AI tools, APIs, systems and data models, Git, YAML, or Markdown, and an upper-intermediate English level.

Must haves

• 4+ years of technical writing experience, with demonstrated expertise in software documentation (SaaS, cloud platforms, or developer-focused content).
• Deep familiarity with prompt engineering and ability to design effective prompts, configure AI tools, and iterate based on output quality to achieve consistent documentation.
• Strong understanding of documentation architecture and information design. Ability to analyze different documentation types and design patterns that scale.
• Technical comfort with APIs, event streaming, batch processing, system architecture, and data models. Ability to understand complex concepts and write documentation that captures them accurately.
• Proficiency with Markdown, YAML, Git, and version-controlled workflows. Comfortable in code editors and command-line environments.
• Strong written and verbal communication skills, with an ability to write clear, user-centered documentation and communicate technical concepts to diverse audiences.
• Attention to detail and excellent organizational skills with the ability to manage multiple priorities and maintain consistency across documentation systems.
• Problem-solving mindset with ability to think critically about processes and advocate for improvements to documentation systems and workflows.
• Experience in fast-paced, cross-functional product environments with the ability to adapt to changing priorities.
• Bachelor's degree in computer science, English, or a related field, or equivalent work experience.
• Upper-intermediate English level.

Nice to haves

• Loyalty product, MarTech, or B2B SaaS experience preferred.
• Redocly documentation framework for API references.

What you will do

• Partner with product, engineering, and operations teams to understand documentation needs and user workflows, then design documentation architecture and automation patterns that serve multiple audiences – end users, developers, and system integrators.
• Establish documentation standards and build governance and quality gates directly into the automation system to ensure all generated documentation – user guides, API documentation, integration guides, in-product help, and release notes – maintains consistency and user value.
• Build and refine prompt templates, style guides, and content models that enable developers and writers to generate consistent, high-quality documentation at scale.
• Write, edit, and review documentation to model excellence, validate automation output quality, and identify patterns that strengthen prompts and templates.
• Measure documentation impact using analytics and user feedback to identify gaps and inform improvements to the automation system, content strategy, and documentation approach.
• Document all systems, configurations, prompts, and decision logic thoroughly so the team can maintain, evolve, and improve the automation system independently.

The benefits of joining us

• Professional growth: Accelerate your professional journey with mentorship, TechTalks, and personalized growth roadmaps
• Competitive compensation: We match your ever-growing skills, talent, and contributions with competitive USD-based compensation and budgets for education, fitness, and team activities
• A selection of exciting projects: Join projects with modern solutions development and top-tier clients that include Fortune 500 enterprises and leading product brands
• Flextime: Tailor your schedule for an optimal work-life balance, by having the options of working from home and going to the office – whatever makes you the happiest and most productive.

Meet Our Recruitment Process

Asynchronous stage – An automated, self-paced track that helps us move faster and give you quicker feedback:

• Short online form to confirm basic requirements
• 30–60 minute skills assessment via Codility – a platform founded in Poland that helps us provide quicker feedback and streamline this stage of the process.
• 5-minute introduction video

Synchronous stage – Live interviews

• Technical interview with our engineering team (scheduled at your convenience)
• Final interview with your future teammates

If it’s a match — you’ll get an offer!

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies.

We are looking for a Physical Security Specialist!

Requirements:

- At least 1 year of experience in physical security, security services, or law enforcement;
- Knowledge of physical security principles, facility protection, and access control;
- Experience working with CCTV, Access Control Systems (ACS), and intrusion alarm systems;
- Experience in incident response and emergency handling;
- Ability to maintain security documentation and prepare reports;
- Basic knowledge of fire safety and occupational health & safety requirements;
- Basic knowledge of the legislation of the Republic of Poland related to security services;
- English proficiency at B1 level or higher;
- Polish proficiency at B1/B2 level or higher;
- Proficiency in Russian or Ukrainian.

Will be plus:

- Experience in ensuring security at corporate events;
- Experience conducting onboarding briefings and training employees;
- Knowledge of GDPR requirements;
- Experience interacting with law enforcement agencies, fire departments, and other government authorities;
- Experience working with Ajax, UniFi Access, and CCTV systems;
- Experience participating in internal investigations;
- Valid security guard license;
- Valid Category B driver’s license.

Soft Skills:

- High level of responsibility and discipline;
- Stress resilience;
- Strong attention to detail;
- Excellent communication skills;
- Ability to make quick decisions in emergency situations;
- Customer-oriented mindset and professional communication skills;
- High level of confidentiality and professional ethics;
- Strong organizational skills and reliability;
- Initiative and a proactive approach to security matters.

Responsibilities:

- Ensure the physical security of employees, visitors, company assets, and Business Group facilities;
- Monitor compliance with access control and on-site security procedures;
- Oversee the operation of CCTV, Access Control Systems (ACS), and intrusion alarm systems;
- Conduct regular patrols and security inspections of the premises;
- Respond to incidents, security breaches, and emergency situations;
- Control access for visitors, contractors, and suppliers;
- Carry out initial response measures during incidents and promptly report them to management;
- Prepare security reports and maintain incident records;
- Monitor compliance with security requirements by employees and office visitors;
- Collaborate with HR, IT, Facility Management, and other departments on security-related matters;
- Support Business Group events and ensure security during their execution;
- Ensure compliance with GDPR requirements and internal information security policies;
- Participate in security drills, training sessions, and initiatives aimed at improving the overall level of security.

Our benefits to you:

☘️An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance, and more.

🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed.

🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided.

🏖Paid vacations, sick leave, personal events days, days off.

💵Referral program — enjoy cooperation with your colleagues and get the bonus.

📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences.

🎯Rewards program for mentoring and coaching colleagues.

✈️In-house Travel Service.

🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more.

🎳Other benefits could be added based on your location.

We are the creators of a new fintech era!

Our mission is to change this world by making blockchain accessible to everyone in everyday life. WhiteBIT is a global team of over 1,200 professionals united by one mission — to shape the new world order in the Web3 era. Each of our employees is fully engaged in this transformative journey.

We work on our blockchain platform, providing maximum transparency and security for more than 8 million users worldwide. Our breakthrough solutions, incredible speed of adaptation to market challenges, and technological superiority are the strengths that take us beyond ordinary companies. Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT, and VISA.

The future of Web3 starts with you: join us as an IAM/PAM Governance Specialist.
 

Requirements:

• 2+ years of experience in IAM, PAM, Identity Governance, Information Security, IT Controls, IT Audit, or a related area.
• Good understanding of Identity and Access Management concepts, including user lifecycle, role-based access control, least privilege, segregation of duties, and access recertification.
• Practical understanding of Privileged Access Management and risks associated with privileged, administrative, shared, and service accounts.
• Experience performing access reviews, privileged access reviews, or user entitlement assessments.
• Experience reviewing access controls and identifying excessive, outdated, or inappropriate permissions.
• Experience supporting internal or external audits, including evidence collection, control testing, findings follow-up, and remediation tracking.
• Ability to assess whether access controls are operating effectively and document identified gaps and recommendations.
• Experience working with system owners, administrators, Security, IT, and other stakeholders to investigate and remediate access-related issues.
• Understanding of security control frameworks and standards such as ISO 27001, NIST, SOC 2, or similar.
• Ability to work with IAM/PAM platforms, administrative consoles, access management systems, and related security tooling.
• Strong analytical and documentation skills, with attention to detail.
• Ability to independently manage assigned reviews, audits, and remediation activities.
• Good written and verbal communication skills and the ability to explain access control issues to both technical and non-technical stakeholders.

Responsibilities:

• Perform periodic reviews of privileged, administrative, shared, service, and other high-risk accounts across critical systems.
• Review user and administrative access to identify excessive, outdated, inappropriate, or conflicting permissions.
• Support and coordinate access recertification and entitlement review activities with system and business owners.
• Assess IAM/PAM-related security controls and verify that access management processes are operating effectively.
• Perform security and access control audits of internal systems and applications.
• Collect, validate, and maintain audit evidence related to identity, access management, and privileged access controls.
• Identify IAM/PAM control gaps, document findings, and track remediation actions through to closure.
• Monitor privileged access governance requirements, including least privilege, segregation of duties, and appropriate use of administrative accounts.
• Work with PAM and administrative consoles to review privileged access configurations, account usage, permissions, and control effectiveness.
• Support governance of service accounts, emergency/break-glass accounts, and other non-standard privileged identities.
• Collaborate with the IAM Cybersecurity team on access-related issues that require changes to IAM platforms, integrations, or technical controls.
• Work with system owners, administrators, IT, Security, and business stakeholders to investigate and remediate access-related risks.
• Support internal and external audits, compliance assessments, and security reviews related to IAM and PAM.
• Maintain and improve IAM/PAM governance documentation, procedures, control descriptions, and review records.
• Contribute to improving and automating access reviews, privileged access monitoring, evidence collection, and reporting processes.
• Provide regular reporting on access review status, identified risks, open findings, and remediation progress.

Would be a plus:

• Hands-on experience with PAM solutions such as CyberArk, BeyondTrust, Delinea, or similar.
• Experience with Identity Governance solutions such as SailPoint, Saviynt, Microsoft Entra ID Governance, or similar.
• Experience reviewing privileged access in cloud environments such as AWS, Azure, or GCP.
• Experience with joiner, mover, and leaver processes.
• Experience with service accounts, emergency/break-glass accounts, and privileged session controls.
• Familiarity with regulatory or compliance requirements related to access management.
• Relevant certifications in information security, IAM, audit, or risk management are a plus.

Working terms:

Immerse yourself in Crypto & Web3:

• Master cutting-edge technologies and become an expert in the most innovative industry.

Work with the Fintech of the Future:

• Develop your skills in digital finance and shape the global market.

Take Your Professionalism to the Next Level:

• Gain unique experience and be part of global transformations.

Drive Innovations:

• Influence the industry and contribute to groundbreaking solutions.

Join a Strong Team:

• Collaborate with top experts worldwide and grow alongside the best.

Work-Life Balance & Well-being:

• Modern equipment.
• Comfortable working conditions and an inspiring environment to help you thrive.
• 24 calendar days of paid leave.
• Additional days off for national holidays.

About the Company & Product

We are a rapidly growing product company entering the global gaming entertainment market. Our mission is to bring innovative business solutions to the iGaming industry by developing cutting-edge technology products.

Our core product is a SaaS gaming platform made up of over 200 microservices, delivering a seamless gaming experience to millions of users worldwide. It provides a full suite of iGaming solutions, including game management, payments, analytics, CRM, and more.

Ready for a career upgrade?

As we continue to scale our platform, expand into new markets, and strengthen our security governance function, we are looking for an Information Security GRC Analyst with a strong technical mindset to join our team.

This is not a purely documentation-focused role. You will work closely with engineering, infrastructure, and business teams to understand how our platform operates in practice and help translate technical risks into effective governance and compliance processes.

As a company operating in the iGaming industry, many aspects of our business are subject to regulatory and licensing requirements across different jurisdictions. You will be directly involved in these processes — from preparing documentation and collecting audit evidence to analyzing regulatory requirements and participating in audits and certification activities.

You will report to the Security Lead and collaborate with engineering, DevOps, legal, and business teams to help build a mature, scalable, security-driven governance function.

What you’ll be doing

• Maintain and improve security and compliance frameworks ISO 27001, GDPR, and jurisdiction-specific licensing requirements;
• Own security policies, procedures, and documentation lifecycle: creation, versioning, and periodic reviews;
• Support internal and external audits: collect evidence, track findings, coordinate remediation;
• Conduct security risk assessments across systems, infrastructure, and cloud environments; maintain risk registers and control matrices;
• Run vendor security assessments and handle security questionnaires;
• Work with engineering and DevOps teams on vulnerability management tracking, prioritization, and remediation coordination;
• Collaborate with engineering to translate compliance requirements into real technical controls;
• Use AI tools to automate GRC workflows and actively look for ways to reduce manual work across the team;
• Support security awareness initiatives and incident response activities when needed.

You have these superpowers

• 2+ years in Information Security, GRC, or Compliance;
• Solid hands-on understanding of ISO 27001 and audit support;
• Good grasp of GDPR and security governance processes;
• Experience with risk registers, control matrices, policies, and compliance documentation;
• Experience running vendor risk assessments and handling security questionnaires;
• Good understanding of networking basics, OS-level security, IAM, and common attack vectors;
• Comfortable discussing cloud infrastructure and modern application environments with engineering teams;
• Familiarity with at least one security tooling area: SIEM, vulnerability scanners, or similar;
• Can read architecture diagrams and technical docs — not just compliance checklists;
• Actively uses AI tools (ChatGPT, Claude, Copilot, or similar) in daily work;
• Strong written communication, structured thinking, and ability to drive things forward independently.

Nice to have

• Experience in iGaming or familiarity with industry standards such as GLI-19 and GLI-33;
• Knowledge of AML / KYC requirements;
• Experience with SOC 2 or other compliance frameworks beyond ISO 27001;
• Familiarity with GCP, containerized environments, or Kubernetes from a security angle;
• Exposure to OSINT or threat intelligence practices;
• Familiarity with DevSecOps or security in CI/CD pipelines;
• Experience building simple AI-assisted automations (LLM APIs, no-code tools);
• Awareness of ISO/IEC 42001 and the EU AI Act.

What we offer:

Flexible schedule—work from home, the office, or hybrid.

Extra day off for your birthday—take a break any day within the month.

Competitive compensation that matches your skills.

Medical insurance (in Ukraine) and health support.

20 paid vacation days + an additional 15 personal leave days.

22 sick leave days, including mental health days.

Gifts and support for life’s key moments (wedding, childbirth, kindergarten).

Professional development—conferences, training, courses, and learning opportunities. We care about your comfort and help you maintain work-life balance!

What’s next?

• HR interview with a recruiter
• Technical interview
• Final interview
• Background Check
• If it’s a match — Offer

Feel like this is the right fit? Send your resume—we’re waiting for you!

• Project Description:

  One of the world's largest providers of products and services to the energy industry has a need to develop, support and integrate software system in Oil & Gas domain.
  You will be a member of a cross functional team.
  Key project stakeholders are open for innovative ideas.
  Project is based on SCRUM methodology.
  This is a great opportunity to work in an international team, apply and learn modern IT technologies

• Responsibilities:

  Quickly learn new technologies and improve proficiency
  Follow up with Developer on open vulnerabilities
  Share reports of open, closed vulnerabilities
  Develop unique, effective security strategies for software systems, networks, and cloud provider
  Safeguards information system assets by
  identifying and solving potential and actual security problems
  Maintain quality service by following
  organization standards
  Contribute to team effort by accomplishing
  related results as needed

• Mandatory Skills Description:

  Understanding of definitions related to cyber security: Vulnerability, attack vector, threat , security risk, SAST, DAST, WAF ets
  Understanding of networking, Operating systems (Windows and Linux)
  Basic concepts in programming Ex: Python
  Very good English as team is multinational

• Nice-to-Have Skills Description:

  Willing to have a hacker mindset and methodology
  Familiar with agile methodologies

• Languages:
  • English: B2 Upper Intermediate

Performa is an international HR agency specializing in connecting top talent with leading companies across the iGaming, IT, and Marketing industries. We help businesses scale their teams and support professionals in finding opportunities where they can unlock their full potential.

Our client is a fast-growing international FinTech company developing innovative payment products for global markets. The team continuously explores new payment methods, automates financial processes, and builds proprietary technologies that integrate with banks, payment systems, and mobile applications.

As the company grows, they are looking for an R&D Specialist to research payment solutions, analyse mobile applications, and drive process automation.
 

Role Overview

This is a hybrid role combining Technical Research, FinTech R&D, Mobile Analysis, and Product Research. In this role, you'll go beyond identifying technical features or limitations — you'll explore how technologies can be leveraged to build new products, automate processes, and drive business growth.

If you're passionate about researching emerging technologies, analysing mobile applications, navigating complex integrations, and discovering innovative solutions, this role is for you.

Requirements:

• Strong understanding of HTTP/HTTPS, REST APIs, and client-server architecture.
• Experience using network traffic analysis tools such as Charles Proxy, Proxyman, Burp Suite, Fiddler, or similar.
• Good understanding of Android and iOS mobile applications.
• Experience with black-box analysis of applications and services.
• Ability to analyze APIs, network traffic, and client-server interactions.

Nice to Have

• Experience with Frida, Objection, or similar dynamic analysis tools.
• Experience with Appium or other test automation frameworks.
• Basic knowledge of JavaScript, Node.js, HTML, and CSS.
• Understanding of payment systems and FinTech products.
• Hands-on experience with reverse engineering mobile applications.
• Experience using Android Studio, ADB, and Android emulators.
• Experience leveraging AI tools (e.g., ChatGPT, Claude, Gemini, Cursor) for technical research and analysis.

Key Responsibilities

• Research emerging payment methods, financial technologies, and payment services.
• Analyse and reverse engineer mobile applications and web solutions to understand their architecture, logic, and integrations.
• Analyse APIs, network traffic, and data exchange mechanisms.
• Identify opportunities to automate payment-related processes.
• Identify technical limitations, bottlenecks, and potential risks.
• Prepare technical reports and recommendations for the Product and Engineering teams.

• Leverage AI-powered tools to accelerate research, analyse data, and improve technical documentation.

   

What we offer:

• Fully remote work.
• Flexible working hours.
• Competitive salary.
• The opportunity to work on innovative payment products.
• An AI-powered work environment with modern research and automation tools.
• A collaborative and experienced team.
• Opportunities for professional growth and career development.

Metamindz is a UK-based technical consultancy - CTO-led software development, fractional CTO services, and technical recruitment for startups and scaleups across the UK, US, and Middle East. Every project is run by real developers and CTOs rather than non-technical account managers, so engineers here work directly on real products and real technical problems.

We're looking for a Chief Information Security Officer (CISO) to own and lead our client's global information security strategy, organization, and execution. The CISO will report directly to the CTO and work closely with Engineering, Platform, SRE, IT, Product, Data, AI, Legal, Privacy and the wider executive team.

This is a highly technical and hands-on security leadership role. It's not primarily about policies, audits, or certifications. We're looking for someone who can understand how systems actually work, identify the risks that matter, and build the technology, processes, teams and culture needed to manage those risks while allowing the company to move quickly.

Who we're looking for:

• 10+ years of experience in security roles, ideally within global software product companies
• 5+ years of significant security leadership experience in a technology, SaaS, marketplace, fintech, HR-tech or similarly data-intensive environment
• 2+ years of experience as a CISO or VP of Security in a global software technology company
• Strong technical security background with the ability to go deep into architecture, infrastructure, identity, applications, cloud and security incidents when required
• Experience leading security across both product technology and corporate IT environments
• Strong cloud security experience, particularly with AWS and/or GCP
• Strong understanding of IAM, SSO, MFA, privileged access, device trust and Zero Trust principles
• Deep product and application security experience, including threat modelling, secure SDLC, vulnerability management, security testing and supply-chain security
• Experience building or operating mature security operations and incident response capabilities
• Experience protecting environments containing significant volumes of personal or otherwise sensitive data
• Strong understanding of SaaS, third-party and supply-chain security risks
• Experience with ISO 27001, SOC 2, GDPR and enterprise customer security requirements
• Familiarity with AI security and emerging risks around LLM-based applications and AI agents
• Strong communication skills and the ability to translate technical security risks into clear business context
• Pragmatic and risk-driven approach - security should enable the business rather than become an unnecessary blocker
• Strong leadership and organizational skills, with the ability to decide what should be built internally, automated, or outsourced

What you'll work on:

• Owning global information security strategy, roadmap and security organization
• Defining measurable security objectives, KPIs, KRIs and risk-acceptance processes
• Building security into the software development lifecycle alongside Engineering rather than creating external approval gates
• Leading product and application security across threat modelling, architecture reviews, secure coding, SAST/DAST, dependency and supply-chain security, secrets management, vulnerability management, penetration testing and bug bounty programs
• Owning the security architecture of cloud infrastructure, including the ongoing migration from AWS to GCP
• Working across IAM, privileged access, network security, containers, infrastructure-as-code, encryption, logging, detection, data security and cloud security posture management
• Building and improving security operations, detection engineering, SIEM, incident response, investigations and security incident playbooks
• Leading security across the corporate technology environment, including identity, SSO/MFA, endpoint security, SaaS and device trust
• Moving the organization towards a practical Zero Trust model
• Building a scalable third-party and supply-chain security program based on actual exposure and business impact
• Establishing security controls for AI-powered products and internal AI usage, including LLM access, AI agents, prompt injection, data exfiltration, model/provider risk, logging and shadow AI
• Working with Legal and Privacy on GDPR, EU AI Act and other regulatory requirements while maintaining ownership of the underlying technical security controls
• Maintaining and evolving security programs such as ISO 27001 and SOC 2 Type II
• Providing the CTO and executive team with a clear and measurable view of the company's security posture and material risks
•  

Nice to have:

• Experience in HR-tech, workforce technology, marketplace, fintech or another data-intensive technology environment
• Experience leading a major cloud migration or transformation, particularly AWS to GCP

What we offer:

• A global CISO role with direct reporting to the CTO and significant ownership of the company's security strategy
• The opportunity to shape security across product, engineering, cloud infrastructure, corporate IT, data and AI
• A genuinely technical leadership position where you can engage directly with architecture, engineering and security problems
• The opportunity to lead security during a major cloud transformation from AWS to GCP
• The chance to build and scale a security organization rather than simply maintain an established security program

Project Description:

One of the world's largest providers of products and services to the energy industry has a need to develop, support and integrate software system in Oil & Gas domain.
You will be a member of a cross functional team.
Key project stakeholders are open for innovative ideas.
Project is based on SCRUM methodology.
This is a great opportunity to work in an international team, apply and learn modern IT technologies

Responsibilities:

Quickly learn new technologies and improve proficiency
Follow up with Developer on open vulnerabilities
Share reports of open, closed vulnerabilities
Develop unique, effective security strategies for software systems, networks, and cloud provider
Safeguards information system assets by
identifying and solving potential and actual security problems
Maintain quality service by following
organization standards
Contribute to team effort by accomplishing
related results as needed

Mandatory Skills Description:

Understanding of definitions related to cyber security: Vulnerability, attack vector, threat , security risk, SAST, DAST, WAF ets
Understanding of networking, Operating systems (Windows and Linux)
Basic concepts in programming Ex: Python
Very good English as team is multinational

Nice-to-Have Skills Description:

Willing to have a hacker mindset and methodology
Familiar with agile methodologies

Languages:

English: B2 Upper Intermediate

We are inviting you, a highly motivated and results-oriented Security Operations Analyst to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success.

Responsibilities

• Monitor prioritized alert queues and validate whether alerts indicate real risk
• Enrich cases and correlate relevant endpoint, identity, authentication, network, service, asset, user, timeline, and business context
• Perform initial investigations, classify alerts, assess preliminary severity and scope, and document the evidence and reasoning in the case-management system
• Close false positives and execute approved low-risk actions only through defined runbooks
• Escalate suspected incidents, privileged-account issues, and high-impact or production-impact cases to L2, the manager, or Incident Response
• Maintain clear handover notes and support improvements to case quality and runbooks

Requirements

• 1+ year of commercial hands-on experience in security alert triage, utilizing at least one SIEM platform, with working knowledge of EDR/XDR and case-management workflows.
• Ability to build basic searches or queries, filter security events, and correlate related activity across more than one data source (Experience with basic SIEM query languages such as KQL, EQL)
• Ability to interpret common endpoint, identity, authentication, network, DNS, HTTP, and service or cloud audit telemetry at an initial-investigation level
• Working fundamentals of Windows and Linux, TCP/IP, DNS, HTTP, authentication, access control, and common attack patterns such as phishing, credential abuse, malware execution, and suspicious account activity
• Ability to distinguish true positives, false positives, and benign activity; assign a preliminary severity; identify affected users or assets; and recognize when scope or impact is uncertain
• Basic use of indicators of compromise, reputation sources, and threat-intelligence context, with awareness of the MITRE ATT&CK framework
• Ability to create a concise investigation timeline and document evidence, actions, conclusions, and handover or escalation notes in a case-management system
• Ability to follow approved runbooks, perform only authorized low-risk actions, recognize the limits of L1 authority, and escalate suspected incidents correctly

Will be a plus

• Simple Python or PowerShell scripts for investigation and enrichment
• Exposure to cloud, email-security, or SaaS audit logs and common phishing-investigation workflows
• Practical cybersecurity labs or an entry-level certification such as Security+ or CySA+
• Experience with MacOS

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company's approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a Junior Penetration Tester / Associate Security Engineer with 1-2 years of commercial experience in web and network penetration testing to join our security team and help embed security across the full delivery process.

JOB REQUIREMENTS:

Must have:

• 1–2 years of commercial experience in web/network penetration testing
• Cybersecurity certification: CEH, eJPT, BSCP, eWPT, PJPT or equivalent
• Familiarity with OWASP projects: API Security Top 10, Web Top 10, WSTG, ASVS, Cheat Sheet Series
• Knowledge of AI/LLM-specific attack vectors — prompt injection, indirect injection, jailbreaking, data leakage, excessive agency (OWASP Top 10 for GenAI Applications 2025)
• Hands-on experience with security tooling: Burp Suite, OWASP ZAP, SonarQube, Snyk, OpenVAS or similar
• Proven experience administrating Linux and Windows operating systems
• Solid understanding of how the web works: HTTP(S), HTML, CSS, AJAX
• Hands-on knowledge of at least two programming languages (JS, TS, Python, Java, Go) plus bash scripting
• Practical use of AI assistants (Claude, ChatGPT, Gemini) in testing workflows, payload generation and report drafting
• Strong self-management, attention to detail and report-writing skills
• English — at least Intermediate
• Strong motivation and a genuine drive to learn new technologies and techniques

Nice to have:

• AI red teaming tools — Garak, PyRIT
• Participation in AI-focused CTFs or bug bounty programmes
• Secure code review skills
• Cloud experience with AWS, GCP or Azure
• Mobile and cloud pentesting skills

KEY RESPONSIBILITIES:

• Conduct penetration tests of web applications, networks, AI-powered applications, mobile applications and cloud workloads
• Perform manual security testing of new and existing application functionality
• Write detailed penetration test reports based on testing results
• Maintain and run automated vulnerability scans of web applications and networks (Burp Suite, OWASP ZAP, Nuclei, SonarQube, Snyk, OpenVAS)
• Help project teams build a Secure SDLC and integrate security testing into their delivery process
• Drive and advocate security across the full SDLC
• Work closely with development teams so that detected vulnerabilities are correctly understood, prioritised and mitigated
• Ensure vulnerabilities are properly escalated and communicated between team members
• Raise security awareness through internal training and knowledge sharing

WORK SCHEDULE: Full-time working day, full remote is available (Lviv, remote in Lviv)

INTERVIEW STAGES:

1. Intro call with a recruiter
2. Technical interview with our security engineer
3. Final interview with Delivery Director

OUR BENEFITS:

• Work from anywhere (fully remotely or in our office)
• Paid vacations and sick-leaves, additional days-off, relocation bonus
• Wellness: Medical insurance/ sport compensation/ health check-up+flu vaccination at your choice
• Education: regular tech-talks, educational courses, paid certifications, English classes
• Fun: own football team, budget for team-lunches, branded gifts
• One of the best IT employers in Lviv (or IT service companies in Ukraine) based on DOU rating

*Some elements of our recruitment process are supported by AI tools, while all candidate evaluations remain the responsibility of our recruitment team.

Ajax Systems is an international technology company and the largest security systems manufacturer in Europe. Ajax products are trusted by more than 4.5 million end users and 330,000 PRO users across over 180 countries. The company offers comprehensive solutions for protecting residential and commercial properties of various sizes. Today, the Ajax portfolio includes 280 devices for intrusion protection, video surveillance, fire safety, and comfort and automation. Every year, we demonstrate exponential growth both in the size of our team and in the number of users worldwide.

Ajax Systems operates a full-cycle production model, from idea generation and prototyping to mass production and global sales. Each department fully covers a specific operational need of the business. The company’s specialists are involved at every stage — from the production line in Ukraine to the logistics center in Poland, from where products are shipped to distributors worldwide.

Now we are looking for a hands-on Cyber Security Specialist to strengthen our security posture and operational resilience. You will be at the forefront of our cybersecurity defense, responsible for incident monitoring and investigation, the deployment and improvement of security solutions, and ensuring our corporate processes and infrastructure meets compliance standards. If you are passionate about building secure systems, incidents investigation and translating technical findings into efficient mitigation actions, this role is for you.

Key Responsibilities:

• Security systems support and improvements: Participate in security architecture improvement, provide support for the full lifecycle of security systems — from design and deployment to enhancement and technical support.
• Security Monitoring & Incident Response: Improve security monitoring processes and practices, participate in security events monitoring and triaging detected events. Develop and refine SIEM detection rules, investigate anomalies and identify root-cause of incidents, develop and execute mitigation plans to neutralize threats.
• Conduction Security Assessments: Conduct technical security assessments of corporate IT systems to identify compliance deviations and vulnerabilities. Participate in risks assessments, mitigation measures design and implementation.
• Compliance & Governance: Participate in improvement of security procedures, policies, and operational instructions. Collaborate with stakeholders on security processes implementation and improvement to ensure readiness for external security audits (e.g., ISO 27001, SOC2).
• Consultancy & Support: Partner with internal teams to define security requirements for new systems and solutions, provide expert guidance on implementing security controls. Participate in security requests processing, security awareness trainings preparation and conduction.
• Reporting & Strategy: Participate in preparation of reports for management, definition and description of security strategy.

Required Technical Skills & Qualifications:

• Experience: 5+ years in CyberSecurity with a strong focus on SOC operations and security systems implementation.
• Core Proficiency: Hands-on experience with SIEM systems (Splunk/QRadar/Logsign/Wazuh), MDM solutions (Jamf/Crowdstrike/JumpCloud/Zoho), EDR/XDR solutions (SentinelOne/ESET/Defender), Cloud security monitoring (M365, GWS, AWS), and Firewall/WAF technologies (Cisco/PaloAlto/Fortinet/Ubiquiti).
• Domain Knowledge: Strong understanding of On-Premise and Cloud architectures, network security protocols, endpoint and application security. Practical experience in industry security best practices implementation (CIS, OWASP, NIST).
• Security assessment: Practical experience performing IT systems and application security assessments and reports preparation.
• Security governance: Experience in preparation of security reports, procedures and instructions for reporting. Practical knowledge of ISO 27001 technological controls implementation.
• Language Proficiency: Intermediate (B1-B2) English level required for working with technical documentation, cross-regional communication with colleagues and partners.

Preferred Skills & Certifications:

• Certifications: Vendor-specific security certifications (e.g., Google, MIcrosoft, Cisco, Palo Alto PCNSE, Fortinet NSE) are highly valued.
• Frameworks: Practical knowledge of ISO 27001 organizational controls implementation.

Why Join Us:

• Impact: Take ownership of security projects from concept to deployment.
• Culture: Work in a “zero bullshit” environment that values technical excellence and autonomy.
• Growth: Access to corporate English training and professional development/certification support.
• Health care: medical insurance.
• Beta Access: Get hands-on experience with new Ajax security systems before they reach the market.
• Innovation: Help shape the future of “Made in Ukraine” reliability.

• One of the world's largest providers of products and services to the energy industry has a need to develop, support and integrate software system in Oil & Gas domain.
  You will be a member of a cross functional team.
  Key project stakeholders are open for innovative ideas.
  Project is based on SCRUM methodology.
  This is a great opportunity to work in an international team, apply and learn modern IT technologies

   

• Responsibilities:

  Quickly learn new technologies and improve proficiency
  Follow up with Developer on open vulnerabilities
  Share reports of open, closed vulnerabilities
  Develop unique, effective security strategies for software systems, networks, and cloud provider
  Safeguards information system assets by
  identifying and solving potential and actual security problems
  Maintain quality service by following
  organization standards
  Contribute to team effort by accomplishing
  related results as needed

   

• Mandatory Skills Description:

  Understanding of definitions related to cyber security: Vulnerability, attack vector, threat , security risk, SAST, DAST, WAF ets
  Understanding of networking, Operating systems (Windows and Linux)
  Basic concepts in programming Ex: Python
  Very good English as team is multinational

   

• Nice-to-Have Skills Description:

  Willing to have a hacker mindset and methodology
  Familiar with agile methodologies

   

• Languages:

  • English: B2 Upper Intermediate

     

• Recruitment process:
  CV Review — the project team reviews your experience and its relevance to the position.
  Technical Interview — a technical discussion with our interviewer in English.
  Project Management Interview (PMI) — a discussion about your experience, communication, and project fit.
  Client Interview — the final interview with the client’s project team.

One of the world's largest providers of products and services to the energy industry has a need to develop, support and integrate software system in Oil & Gas domain.
You will be a member of a cross functional team.
Key project stakeholders are open for innovative ideas.
Project is based on SCRUM methodology.
This is a great opportunity to work in an international team, apply and learn modern IT technologies

• Responsibilities:

  Quickly learn new technologies and improve proficiency
  Follow up with Developer on open vulnerabilities
  Share reports of open, closed vulnerabilities
  Develop unique, effective security strategies for software systems, networks, and cloud provider
  Safeguards information system assets by
  identifying and solving potential and actual security problems
  Maintain quality service by following
  organization standards
  Contribute to team effort by accomplishing
  related results as needed

• Mandatory Skills Description:

  Understanding of definitions related to cyber security: Vulnerability, attack vector, threat , security risk, SAST, DAST, WAF ets
  Understanding of networking, Operating systems (Windows and Linux)
  Basic concepts in programming Ex: Python
  Very good English as team is multinational

• Nice-to-Have Skills Description:

  Willing to have a hacker mindset and methodology
  Familiar with agile methodologies