Jobs Security

Our Mission and Vision

At Solidgate, our mission is clear: to empower outstanding entrepreneurs to build exceptional internet companies. We exist to fuel the builders — the ones shaping the digital economy — with the financial infrastructure they deserve. To achieve that, we’re on a bold path: to become the #1 payments orchestration platform in the world.

We believe the future of payments is shaped by people who think big, take ownership, and bring curiosity and drive to everything they do. That’s exactly the kind of teammates we want on board.
 

About the Role

Solidgate builds financial infrastructure for fast-growing internet businesses worldwide. Our platform processes millions of payments daily and operates in a highly regulated fintech environment, where security is a fundamental business requirement.

As our company scales, we are strengthening and expanding our Information Security team and are looking for an Information Security Engineer to support and develop our corporate and operational security practices.
 

The mission of this role is to reduce the risk of compromise of corporate accounts, devices, and SaaS systems by:

• maintaining compliance with international security standards
• ensuring controlled and auditable access
• strengthening security awareness across the company
• and supporting effective incident response

This role focuses on corporate security, access management, vulnerability management, and compliance, working closely with engineering, IT, and business teams to ensure Solidgate remains secure, resilient, and audit-ready at all times.
 

What You Will Own

As an Information Security Engineer, you will be responsible for corporate and operational security controls, including:

• Supporting and maintaining ISMS, PIMS, and BCMS frameworks
• Participating in external certifications and audits (PCI DSS, ISO 27001, ISO 27701, ISO 22301, GDPR, DORA)
• Managing access control processes: IAM / SSO / MFA, Joiner—Mover—Leaver processes, regular access reviews and privilege control
• Operating and tuning information security tools, including: vulnerability scanners, IAM and access control systems, anti-phishing tools and security awareness platforms
• Analyzing alerts and findings, including false positives, and driving remediation
• Maintaining and updating asset and information security risk registers
• Supporting incident response activities and post-incident analysis
• Conducting and tracking Disaster Recovery (DRP) and Business Continuity (BCP) tests, ensuring identified gaps are addressed
   

You are a great fit if you have

• 3+ years of experience in Information Security
• Knowledge of at least one security standard: ISO/IEC 27001, SOC 2, or PCI DSS
• Hands-on experience with building and operating an information security management framework, including policies, risk management, and incident response.
• Strong experience with access management (IAM): least privilege principles, RBAC / ABAC, MFA / SSO, Joiner—Mover—Leaver processes and regular access reviews
• Experience configuring and administering security tools such as: IAM solutions, vulnerability scanners, XDR / endpoint protection, anti-phishing and phishing simulation platforms
• Ability to communicate effectively with engineers, IT teams, and external auditors
   

Nice to Have

• Experience participating in or leading external security audits
• Hands-on experience with ISO 22301, ISO 27701, GDPR, or DORA
• Experience automating information security or compliance processes
• Background in security operations or security engineering within a regulated environment
   

Why Join Solidgate?

Build security that protects the business. Own and evolve corporate security controls that safeguard our people, systems, and data at scale.

Your expertise counts. Enjoy real autonomy to improve access management, compliance processes, and operational security tooling.

Room to experiment. Apply modern approaches to security operations, automation, and awareness with strong leadership support.

Impact & visibility. See the results of your work directly in successful audits, reduced risk exposure, and stronger organizational security.

Collaborative environment. Work alongside experienced security professionals, engineers, and stakeholders who value clarity, ownership, and partnership.

The Extras: 30+ days off, unlimited sick leave, free office meals, health coverage, and Apple gear to keep you productive. Courses, conferences, sports and wellness benefits — all designed for ideas, focus, and fun.

Tomorrow’s fintech needs your mindset. Come build it with us.

ВАКАНСІЯ: CI Resilience and Vulnerability Assessment Manager  for U.S. Cybersecurity for Critical Infrastructure in Ukraine (CCI) Activity

BACKGROUND:

The U.S. Cybersecurity for Critical Infrastructure in Ukraine (CCI) Activity began in May 2020. The purpose of the CCI Activity is to reduce, and ultimately eliminate, cybersecurity vulnerabilities in Ukraine’s critical infrastructure sectors. In the same way that cyberattacks drove Estonia to innovate cybersecurity practices, systems, and entrepreneurship as the backbone of its digital transformation. 

The CCI Activity continues to improve the cyber-resilience of Ukraine and its critical infrastructure sectors through three interlinked, mutually reinforcing objective areas that address legal, policy, institutional, workforce, and market gaps to strengthen long-term national resilience.

Building on progress achieved from 2020 to 2026, and under the Department of State, the Activity will continue implementation of these objectives while aligning them with U.S. foreign-policy priorities for trusted technology, supply-chain security, and transatlantic digital integration.

Objective 1: Create a safe, trusted environment to accelerate the development of people, processes, and technology to support cybersecurity across CI sectors and assets in Ukraine.

Objective 2: Strengthen Ukraine as a sovereign nation built on a secure, protected, and dynamic economy, supported by a talented pool of human capital.

Objective 3: Stimulate demand for and supply of Ukrainian cybersecurity solutions and service providers to empower, equip, and finance cybersecurity entrepreneurs and businesses

The CCI Activity consists of three complementary, mutually reinforcing, and integrated components:

Component 1: Strengthen the Cybersecurity Enabling Environment

This component enhances Ukraine’s ability to protect and modernize its civilian digital infrastructure by embedding U.S. and allied cybersecurity standards into the governance, architecture, and operational systems of critical infrastructure (CI). It prioritizes the divestment of high-risk digital assets and the adoption of secure-by-design technologies that advance trusted supply chains, secure communications, and resilient public services in line with U.S. strategic and commercial interests.

Component 2: Develop Ukraine’s Cybersecurity Workforce

This component builds the institutional and technical foundation for a civilian cyber workforce capable of securing Ukraine’s critical infrastructure during wartime and sustaining digital resilience throughout long-term recovery. It anchors that workforce in U.S.-backed standards, trusted technology principles, and interoperable training models aligned with allied strategic frameworks. All workforce development activities under this component shall be focused on applied operational capability and demonstrable use of skills, rather than academic, theoretical, or strategy-only training outcomes.

Component 3: Build a Resilient Cybersecurity Industry

This component strengthens Ukraine’s domestic cybersecurity and dual-use technology sector as a frontline contributor to national resilience and a trusted partner in U.S. and allied digital ecosystems. It aims to reduce Ukraine’s reliance on high-risk and adversary-origin platforms, and position select Ukrainian firms as interoperable contributors within U.S. and allied technology supply chains where this serves U.S. strategic, security, and commercial interests.

The secured digital infrastructure of the Operators of Critical Infrastructures (OCIs), including government agencies, is a crucial component of the CCI Activity’s efforts to bolster Ukraine’s cyber resilience. Maintaining the functionality of this infrastructure and protecting it from cyberattacks is essential for the uninterrupted delivery of public services and the core services of the OCIs.

The CCI Activity is seeking a CI Resilience and Vulnerability Assessment Manager is responsible for leading and coordinating technical interventions that strengthen the cyber resilience of Ukrainian critical-infrastructure operators

1. Role’s Purpose:     

The CI Resilience and Vulnerability Assessment Manager is responsible for leading and coordinating technical interventions that strengthen the cyber resilience of Ukrainian critical-infrastructure operators through telemetry-driven digital-twin capabilities and recurring vulnerability assessment and penetration-testing programs. The role ensures that supported activities result in operational, telemetry-enabled resilience capabilities and measurable improvements in security posture on live or representative systems, rather than conceptual demonstrations or advisory outputs only. In addition to the core digital-twin and vulnerability-assessment workstreams, the role provides surge capacity for urgent, ad-hoc resilience testing, risk assessment, and remediation-support tasks assigned by CCI Activity leadership in response to emerging threats or sectoral priorities.

The CI Resilience and Vulnerability Assessment Manager will be responsible for providing all the monitoring performance reports against the Monitoring, Evaluation, and Learning Plan (MELP) targets and supporting the successful completion of activities.

1. Task / Responsibilities:

• Lead end-to-end deployment of a telemetry-driven digital-twin infrastructure for designated critical-infrastructure sectors, ensuring integration of live or near–real time telemetry and operational application in resilience testing scenarios.
• Coordinate configuration of telemetry pipelines and trusted technology components in cooperation with designated Government of Ukraine institutions, ensuring alignment with approved architectures and security protocols.
• Ensure that digital-twin capabilities are activated in at least one priority CI sector and demonstrably used to analyse system behaviour, validate defensive configurations, or evaluate responses under simulated stress conditions without affecting live operations.
• Lead implementation of a recurring vulnerability-assessment and penetration-testing program building on CICIPA and NIST-aligned methodologies, targeting high-risk systems identified through structured assessment processes.
• Oversee execution of focused penetration-testing cycles on approved live or representative systems and ensure documented identification of vulnerabilities and recommended remediation actions.
• Support and document remediation efforts undertaken by operators within defined remediation windows, ensuring measurable improvements in participating entities’ security posture.
• Ensure that technical outputs are reliable, structured, and suitable for coordination with other donors, including burden-sharing and modernization follow-up actions.
• Provide rapid-response coordination for urgent resilience testing, vulnerability analysis, or remediation-support tasks assigned by CCI Activity leadership.

Qualifications and experiences

Qualifications:

• Master or higher educational degree in cybersecurity / information security or information technology
• Strong knowledges of international cybersecurity standards and frameworks (ISO, NIST, CAF, Cobit or similar)
• Strong knowledges of the cyber security solutions
• Solid presentation skills
• Solid communications skills
• Skills in developing technical project documentation
• Good command of English language is preferred

Experiences:

• At least 5 years of experience working with cybersecurity / information security or information technology
• At least 5 years of experience with cybersecurity / information security or information technology projects implementation
• Experience as an auditor or implementer would be an advantage

Equal Employment Opportunity

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or status as a protected veteran. 

DAI and its employees are committed to confronting discrimination in all forms, nurturing respect for our interpersonal relationships, and holding ourselves accountable for positive change within the company and in the communities, cultures, and countries in which we live and work.  DAI is committed to attracting and retaining the best employees from all races, ethnicities, and backgrounds in our continued effort to become a better development partner. 

DAI upholds the highest ethical standards. We are committed to the prevention of sexual exploitation, abuse, and harassment as well as other ethical breaches. All our positions are therefore subject to stringent vetting and reference checks.”

DAI promotes workforce diversity and encourages persons from excluded groups, including persons with disabilities, to apply.

It’s Kyiv-based position, long-term. 

Qualified candidates should send their CV and cover letter to UkraineCCI_Recruitment@dai.com. by April 24, 2026 6:00pm Kyiv time. Only short-listed candidates will receive notice requesting additional information. Interviews will be conducted on the rolling basis.

• Новини
• База знань
• У Фокусі
• Календар
• Колонки
• Конкурси
• Біржа праці
• Бібліотека
• База НУО
• Про портал
• Контакти

08.04.2026

Вакансія: Secure Technology Programs Manager for U.S. Cybersecurity for Critical Infrastructure in Ukraine (CCI) Activity

Актуально до: 24.04.26


 

Зафіксувати у Google календарі!

Додано:
Julia DAI

Вакансія: Secure Technology Programs Manager for U.S. Cybersecurity for Critical Infrastructure in Ukraine (CCI) Activity

BACKGROUND:

The U.S. Cybersecurity for Critical Infrastructure in Ukraine (CCI) Activity began in May 2020. The purpose of the CCI Activity is to reduce, and ultimately eliminate, cybersecurity vulnerabilities in Ukraine’s critical infrastructure sectors. In the same way that cyberattacks drove Estonia to innovate cybersecurity practices, systems, and entrepreneurship as the backbone of its digital transformation. 

The CCI Activity continues to improve the cyber-resilience of Ukraine and its critical infrastructure sectors through three interlinked, mutually reinforcing objective areas that address legal, policy, institutional, workforce, and market gaps to strengthen long-term national resilience.

Building on progress achieved from 2020 to 2026, and under the Department of State, the Activity will continue implementation of these objectives while aligning them with U.S. foreign-policy priorities for trusted technology, supply-chain security, and transatlantic digital integration.

Objective 1: Create a safe, trusted environment to accelerate the development of people, processes, and technology to support cybersecurity across CI sectors and assets in Ukraine.

Objective 2: Strengthen Ukraine as a sovereign nation built on a secure, protected, and dynamic economy, supported by a talented pool of human capital.

Objective 3: Stimulate demand for and supply of Ukrainian cybersecurity solutions and service providers to empower, equip, and finance cybersecurity entrepreneurs and businesses

The CCI Activity consists of three complementary, mutually reinforcing, and integrated components:

Component 1: Strengthen the Cybersecurity Enabling Environment

This component enhances Ukraine’s ability to protect and modernize its civilian digital infrastructure by embedding U.S. and allied cybersecurity standards into the governance, architecture, and operational systems of critical infrastructure (CI). It prioritizes the divestment of high-risk digital assets and the adoption of secure-by-design technologies that advance trusted supply chains, secure communications, and resilient public services in line with U.S. strategic and commercial interests.

Component 2: Develop Ukraine’s Cybersecurity Workforce

This component builds the institutional and technical foundation for a civilian cyber workforce capable of securing Ukraine’s critical infrastructure during wartime and sustaining digital resilience throughout long-term recovery. It anchors that workforce in U.S.-backed standards, trusted technology principles, and interoperable training models aligned with allied strategic frameworks. All workforce development activities under this component shall be focused on applied operational capability and demonstrable use of skills, rather than academic, theoretical, or strategy-only training outcomes.

Component 3: Build a Resilient Cybersecurity Industry

This component strengthens Ukraine’s domestic cybersecurity and dual-use technology sector as a frontline contributor to national resilience and a trusted partner in U.S. and allied digital ecosystems. It aims to reduce Ukraine’s reliance on high-risk and adversary-origin platforms, and position select Ukrainian firms as interoperable contributors within U.S. and allied technology supply chains where this serves U.S. strategic, security, and commercial interests.

1. Position Overview

Under the supervision of the Cybersecurity Workforce Development Lead, the Secure Technology Programs Manager is responsible for the end-to-end development, coordination, and delivery of specialized training programs focused on the secure integration and operational use of advanced technologies, including autonomous systems and artificial intelligence applications. This role involves leading the design of comprehensive curriculum frameworks in close collaboration with technical subject matter experts, ensuring that training content reflects current operational requirements, policy guidance, and industry best practices. The Manager oversees all aspects of program implementation, including partner engagement, logistics coordination, resource planning, and quality assurance, while maintaining a focus on continuous program improvement informed by participant feedback and evolving technology standards. This position requires the ability to engage effectively with a diverse range of stakeholders, including government partners, technology vendors, and international counterparts, to ensure training programs are responsive to emerging needs and aligned with broader organizational goals. The Manager is expected to demonstrate strong analytical and organizational capabilities, with a proactive approach to identifying gaps and opportunities within the secure technology training landscape.

1. Responsibilities:

The responsibilities of the Secure Technology Programs Manager include but are not limited to:

• Design, coordinate, and deliver training programs focused on the secure use and operation of emerging technologies, including autonomous systems and artificial intelligence
• Develop curriculum frameworks and training materials in collaboration with subject matter experts
• Manage program logistics, including scheduling, participant coordination, and resource planning
• Monitor and evaluate program effectiveness, incorporating feedback to continuously improve training outcomes
• Engage with partner organizations and vendors to support training delivery and technology integration
• Ensure training content reflects current best practices, policy guidance, and operational requirements

1. Qualifications:

• Master or higher educational degree in cybersecurity, information security management, public administration, or related field;
• At least 1 to 4 years of program management experience;
• At least 3 years of experience with international technical assistance projects (preferrable in USG-funded projects);
• Experience and proven ability to manage complex projects, including planning, budgeting, resource allocation, and stakeholder coordination, with a focus on achieving measurable outcomes and delivering results on time and within budget
• Strong interpersonal skills and the ability to build and maintain effective relationships with government agencies, private sector organizations, educational institutions, and other stakeholders involved in critical infrastructure cybersecurity
• Strong organizational skills and proven ability to set priorities and deal with multi-tasks
• Solid communications skills, including written and editing skills
• Strong computer skills (MS Office)
• Strong English-language speaking and writing skills

Equal Employment Opportunity

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or status as a protected veteran. 

DAI and its employees are committed to confronting discrimination in all forms, nurturing respect for our interpersonal relationships, and holding ourselves accountable for positive change within the company and in the communities, cultures, and countries in which we live and work.  DAI is committed to attracting and retaining the best employees from all races, ethnicities, and backgrounds in our continued effort to become a better development partner. 

DAI upholds the highest ethical standards. We are committed to the prevention of sexual exploitation, abuse, and harassment as well as other ethical breaches. All our positions are therefore subject to stringent vetting and reference checks.”

DAI promotes workforce diversity and encourages persons from excluded groups, including persons with disabilities, to apply.

It’s Kyiv-based position, long-term. 

Qualified candidates should send their CV and cover letter to UkraineCCI_Recruitment@dai.com. by April 24, 2026 6:00pm Kyiv time. Only short-listed candidates will receive notice requesting additional information. Interviews will be conducted on the rolling basis.

Our Mission and Vision

At Solidgate, our mission is clear: to empower outstanding entrepreneurs to build exceptional internet companies. We exist to fuel the builders — the ones shaping the digital economy — with the financial infrastructure they deserve. To achieve that, we’re on a bold path: to become the #1 payments orchestration platform in the world.
 

About the Role

Solidgate builds financial infrastructure for fast-growing internet businesses worldwide. Our platform processes millions of payments daily and operates in a highly regulated fintech environment, where security is a core product requirement — not an afterthought.
 

Our engineering organization builds and scales a complex cloud-native platform with over 120 microservices. As the company continues to grow, we are strengthening our security organization and introducing a dedicated Application Security Engineer role.
 

The mission of this role is to keep our business and revenue safe by building security into the way we develop software — from early design decisions to CI/CD pipelines and live production systems.
 

This is a hands-on Application Security role focused on embedding security into the software development lifecycle and reducing real product risks.
 

You will work closely with engineering teams to:

• design secure application architectures
• improve secure coding practices
• detect vulnerabilities early in the development lifecycle

• continuously improve application security as part of everyday engineering work

   

You will have a direct impact on how secure software is built across a large microservices ecosystem, influencing standards, tooling, and engineering culture.
 

Explore our technology stack ➡️ here (https://solidgate-tech.github.io/)

 

What You Will Own

As an Application Security Engineer, you will be responsible for application-level security across our fintech platform, including:
 

• Building and maintaining secure coding standards and supporting their adoptionl across development teams
• Conducting threat modeling during architecture and design stages
• Implementing and improving application security testing, including: SAST, DAST, Dependency and secrets scanning, CI/CD security checks
• Performing regular application security assessments and maturity evaluations (OWASP ASVS, OWASP SAMM)
• Managing the full vulnerability lifecycle: triage, prioritization, remediation support, and validation
• Supporting external penetration testing and Bug Bounty programs
• Identifying and mitigating security risks in cloud environments and CI/CD pipelines
   

You are a great fit if you have

• At least 2 years of experience in Application Security or Product Security
• Hands-on experience with OWASP Top 10 vulnerabilities
• Practical experience with: secure code reviews, threat modeling, SAST and DAST tools and their integration into CI/CD pipelines
• Strong understanding of web application and API security
• Ability to communicate clearly with engineers and work as a partner rather than a blocker
   

Nice to Have

• Experience with container security and cloud security tooling
• Familiarity with DevSecOps and shift-left security practices
• Experience automating application security processes
• Background as a software engineer or close collaboration with development teams
  
   

Why Join Solidgate?
 

Build security that matters. Lead initiatives that define how security is embedded into our software development lifecycle across multiple teams and products.

Your expertise counts. Enjoy real autonomy — propose, test, and implement security practices and tooling that directly improve product resilience and reduce risk.

Room to experiment. Apply modern AppSec, automation, and shift-left approaches with full support from engineering and security leadership.

Impact & visibility. See the results of your work directly in more secure products, fewer vulnerabilities, and stronger engineering practices.

Collaborative environment. Work side by side with experienced, curious engineers who treat security as a shared responsibility and value partnership over gatekeeping.

The Extras: 30+ days off, unlimited sick leave, free office meals, health coverage, and Apple gear to keep you productive. Courses, conferences, sports and wellness benefits — all designed for ideas, focus, and fun.
 

Tomorrow’s fintech needs your mindset. Come build it with us.
 

🫂 Know top talent? We’re always on the lookout. Recommend someone for our role, and if they get hired, there’s a bonus waiting for you — simple as that.

Summary

• Senior Security Engineer - penetration testing, threat modelling, 7+ years commercial experience.
• Python. Hands-on offensive and defensive security for web applications.
• Remote/Hybrid, UK, Chechia, Spain - employment contract, Poland, Romania, Slovakia, Bulgaria, Ukraine - B2B contract.

The role

This is a senior security engineering position with a strong emphasis on penetration testing and threat modeling. You'll work across the full security lifecycle: designing secure architectures, modeling threats, researching emerging attack vectors, and validating defenses through hands-on testing.

The focus is on long-term security improvements — identifying and addressing risks before they become incidents. You'll need both the attacker's mindset to find vulnerabilities and the engineering skills to help fix them properly.

What you'll work on

• Penetration testing and security assessments against web applications and internal systems
• Leading security design reviews and threat modeling for new products and infrastructure changes
• Researching emerging threats and attack techniques, then translating findings into practical defense strategies
• Building security automations and tools, and prototypes to support testing and detection
• Collaborating with engineering teams to remediate vulnerabilities and improve secure development practices
• Contributing to security architecture decisions and standards

What we're looking for

• 7+ years in security engineering with substantial experience in both offensive and defensive work
• Proven, hands-on web applications penetration testing experience
• Strong programming skills, preferably Python, with experience building security tools or automation
• Deep expertise in at least one core security domain: cryptography, authentication/authorisation, secure architecture, or network security
• Clear understanding of attack vectors and methods, and how to anticipate them
• Good communication skills in English

Useful additions

• Experience securing serverless architectures or AI/ML platforms
• Background in cloud-native security (AWS, GCP, Kubernetes)
• DevSecOps experience- integrating security into CI/CD pipelines
• Relevant certifications (OSCP, OSCE, CISSP, or similar)

Domain: SaaS
Project: AI strategy product
Client: Germany
Location: Remote (attending events once a quarter across the EU)
Time Zone: CET
Contract: B2B
 

About US
DevKit is more than just an IT company - we are a team of passionate professionals dedicated to creating cutting-edge solutions. Our employees work on exciting international startups, collaborating with highly skilled teams from around the world. With expertise in software development, design, and engineering, we help bring innovative ideas to life and drive success on a global scale!
Our mission is to connect exciting projects with top-tier professionals. We are committed to creating a dynamic space where innovation thrives, top talent excels, and global teams unite to develop cutting-edge solutions.

About PROJECT
The company is a trailblazing AI-powered SaaS platform, reshaping the landscape of procurement from a tactical function to a strategic business ally that orchestrates seamless value chains. The state-of-the-art solution empowers organizations to independently develop procurement strategies with a flexible framework adaptable to their specific needs and contexts.

Redefining traditional category management, the company’s all-encompassing solution takes it to new heights by harnessing the capabilities of AI, fostering extensive collaboration, and integrating data from diverse sources beyond conventional category taxonomy. At the product, they are driven by a purpose-centered ethos, dedicated to tackling ESG-related challenges, positioning procurement as a catalyst for positive change rather than merely a cost-cutting entity.

The multitude of prestigious awards and recognitions speaks to their leadership in the AI-driven procurement technology landscape, showcasing our unwavering commitment to innovation and excellence.

Main Tech Stack
IT Security, SecOps, CI/CD, cyber-security, etc

Requirements

• 2+ years of experience in information security, cybersecurity, IT security, DevSecOps, cloud security, or a related field
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field
• Good understanding of core security principles such as Ethical hacking, secure configuration, vulnerability management, and compliance
• Solid knowledge of one or more of the following: Application/cloud security; Infrastructure or platform security; Security operations
• At least good theoretical knowledge in emerging areas such as AI security, API security, etc
• Familiarity with modern development environments and engineering workflows
• Ability to understand technical issues, investigate problems, and communicate clearly with both technical and non-technical stakeholders
• Willingness to learn quickly, take ownership, and work in a collaborative environment
• A practical mindset: able to balance security, usability, and business needs

• Good English skills

   

Responsibilities

• Support the implementation and improvement of security controls across our cloud and SaaS environment
• Help identify, assess, and track security risks, vulnerabilities, and remediation actions
• Contribute to application, infrastructure, and cloud security reviews
• Assist with security testing activities such as vulnerability validation, configuration reviews, and basic threat analysis
• Help maintain security documentation, standards, and internal procedures
• Support compliance and audit-related activities by gathering evidence and helping track security requirements
• Partner with cross-functional teams to raise security awareness and encourage security-by-design thinking

• Continuously learn, improve, and contribute ideas to strengthen the overall security program

   

Would be a plus

• Exposure to AI SaaS, cloud-native, or modern web application environments
• Familiarity with security tooling such as penetration testing tools, cloud security tools, or CI/CD security checks
• Understanding of secure software development lifecycle concepts
• Exposure to compliance or security frameworks
• Scripting or automation skills in Python, Bash, or similar

• Relevant certifications such as CompTIA Security+, CEH, ISC2 CC/SSCP, Cloud security certifications, or ISO 27001-related certifications are an advantage.

   

Work conditions

• A long-term role in a stable, fast-growing company
• Flexible working hours with a results-oriented approach
• Competitive salary and benefits package (vacation, sick leave, national holidays)
• Comfortable workspace, corporate events, and team-building

• Continuous learning, professional growth, and skill development

   

If you're looking for a place to grow, innovate, and make an impact, we'd love to have you on board!

Description
As a Middle Anti-Fraud Specialist at an Electronic Money Institution (EMI), you will be responsible for detecting, investigating, and preventing fraudulent activities across digital financial services. This role involves monitoring transactional data, analysing suspicious behaviour, and working cross-functionally with compliance, risk, and tech teams to enhance fraud detection and mitigation systems. You will contribute to ensuring the safety and integrity of the company’s financial ecosystem while maintaining a balance between customer experience and fraud risk.

Requirements

• 1 year of experience in fraud prevention or detection, preferably in fintech, EMI, or banking
• Strong knowledge of financial fraud typologies including identity theft, account takeover, social engineering, phishing, and synthetic identities
• Familiarity with AML (Anti-Money Laundering) practices and regulatory frameworks
• Proficiency in working with fraud detection systems, case management tools, and transaction monitoring platforms
• Good analytical and critical thinking skills with the ability to assess patterns, data anomalies, and fraud indicators
• Strong communication skills for preparing reports and communicating with internal teams or external partners

Responsibilities

• Monitor transactions and user behaviour for signs of fraud using internal tools and third-party systems
• Investigate suspicious cases thoroughly, gather evidence, and recommend appropriate actions such as blocking transactions, freezing accounts, or escalating to senior staff
• Maintain and update internal fraud rules, thresholds, and alert systems in collaboration with the Risk and IT teams
• Analyse fraud trends and propose process improvements or system enhancements to reduce future risk
• Support customer support teams in resolving fraud-related inquiries and disputes
• Prepare regular and ad-hoc reports on fraud incidents, and trends for internal stakeholders

Nice to have

• Experience working in an EMI or payment service provider regulated in the EU or UK
• Familiarity with fraud detection platforms like SEON, Actimize, Sift, or similar
• Certification in fraud examination
• Experience with SQL, Python, or data visualization tools (e.g., Power BI, Tableau) for fraud data analysis
• Knowledge of card fraud mechanisms (3DS, chargebacks, BIN attacks) and tools used in card transaction monitoring
• Ability to handle incident response and support in case of major fraud events or system breaches

Security isn’t a state — it’s a process. And we’re looking for someone who knows how to drive it.

Softsich is a young and ambitious international product tech company that develops scalable B2B digital platforms. We combine strategic vision with deep tech expertise to build and scale high-performance products. Right now, we’re looking for a Security Engineer to strengthen our internal infrastructure and help automate key security workflows.

Your key responsibilities will include:
 – Monitor and analyze security alerts across multiple security platforms (SIEM, EDR, SOAR)
 – Lead Incident Response -  serve as primary responder to security alerts, perform initial triage, conduct investigations, and coordinate remediation
 – Enhance Detection Capabilities - design, implement, and fine-tune detection rules and alerts across cloud environments
 – Conduct endpoint, network, and application log analysis to identify suspicious activity
 – Collaborate with IT, DevOps, and Compliance teams to enforce security standards and best practices
 – Assist in improving incident response processes, playbooks, and operational practices
 – Stay informed about emerging cybersecurity threats, trends, and industry developments
 – Deploy and manage MDM/UEM solutions (Jamf, Jumpcloud) across all endpoints
 – Advocate for best practices in IT and change management to strengthen security posture
 – Define and enforce security policies for workstations (passwords, encryption, restrictions, app controls)
 – Perform regular audits and compliance checks aligned with corporate standards
 – Monitor device health and security compliance, respond to related alerts
 – Coordinate patching and updates on endpoints through MDM
 – Conduct inventory and asset tracking, including remote wipe and lock management
 – Provide endpoint security reporting and metrics to IT leadership and compliance
 – Collaborate with incident response teams on mobile endpoint incidents

It’s a match if you have:
 – 3+ years in IT Operations, System Administration, or related roles
 – Experience in security threat analysis or incident response, ideally within a SOC
 – Proven experience responding to and managing incidents in cloud environments (AWS, Azure, GCP) and SaaS services (Google Workspace, Atlassian)
 – Proficiency with SIEM platforms, including rule creation, tuning, and maintenance
 – Strong knowledge of cloud security monitoring tools and techniques
 – Understanding of network infrastructure
 – Experience analyzing endpoint, network, and application logs for anomalies
 – Practical understanding of common attack vectors and how to detect them
 – Experience with security automation and scripting for incident response workflows
 – Understanding of IT system architecture, network design, and IT/change management processes
 – Experience with virtualization technologies
 – Familiarity with identity management
 – Proficiency in platforms used for information security investigations and triage

Nice to have:
 – Experience with cloud-native security tools and services
 – Familiarity with scripting or automation (PowerShell, Bash, Python)
 – Experience with endpoint detection solutions and email security technologies
 – Knowledge of IT security audit techniques

What we offer:
 – A competitive salary
 – Remote work format or a modern office in Warsaw and/or Kyiv
 – Flexible working hours
 – An incredibly friendly team where everyone is ready to share knowledge, help, and support
 – 24 working days of paid annual vacation
 – Paid sick leave
 – Health insurance (available for specialists based in Ukraine; other countries — in progress)
 – Zero joules of energy to the aggressor state, its affiliated businesses, or partners
 – Conference and business travel expenses covered (where applicable)
 – Birthday greetings (because you matter!)
 – Online and offline teambuilding events
 – Corporate celebrations

Send over your CV now — we’d love to get to know you better!

We are looking for a senior Security & Risk Manager to take ownership of our company’s security, risk, and compliance domains.

This role goes beyond traditional security — you will be responsible for protecting financial operations, preventing fraud, managing partner risk, and building a strong security culture across the company.

What You’ll Do

• Build and drive a company-wide security and risk culture through training and awareness
• Develop and maintain security, risk, and compliance policies (IT security, data protection, internal controls)
• Strengthen and monitor access control, logging, and overall security practices
• Conduct financial and operational audits to detect fraud, conflicts of interest, and misuse
• Lead fraud prevention and transaction monitoring initiatives
• Manage partner due diligence processes, including KYC/AML and source-of-funds verification
• Identify and mitigate risks related to employees, partners, and internal tools
• Ensure access management follows the Least Privilege principle
• Prepare clear risk and security reports for leadership

What We’re Looking For

• Proven experience in security, risk management, compliance, anti-fraud, or fintech environments
• Strong understanding of internal controls, fraud detection, and transaction monitoring
• Hands-on experience with KYC/AML and partner due diligence
• Solid knowledge of security fundamentals (access control, logging, data protection)
• High level of ownership, integrity, and attention to detail
• Ability to work cross-functionally with technical and business teams
• Upper-intermediate+ English

Nice to Have

• Experience in fintech, payments, or crypto projects
• Experience building risk/security processes from scratch

What We Offer

• Fully remote work with flexible hours
• Unlimited paid vacation & sick leave
• Competitive compensation based on your experience
• Learning budget (50% reimbursement)
• Wellness support (sports, fitness, etc.)
• Referral bonuses & recognition perks
• Transparent and respectful culture
• Co-working compensation

We are looking for an endpoint/workstation support engineer to support multiple mixed MacOS/Windows/Lin remote working environments. You should maintain a high level of user satisfaction, as well as properly document your work.

Your primary tasks will include:

* Enduser remote support for agents installation

* AV alerts investigation

* Ensuring security compliance policies are in place (e.g. full disk encryption, firewall)

* Implementing updates on agent installation packages whenever new version arrives

* Testing of Windows/Win/Lin endpoint agent updates

The candidate should have a proof records of successful projects in the following areas:

* support of AV/EDR/VPN and other security agents on multiple platforms

* Intune MDM

* Apple Business Manager

* Windows, MacOS and Linux endpoint support

* Basic Unix shell and Powershell scripting

* MS Graph API and other REST API basic experience

* Windows and MacOS troubleshooting with the aid of Sysinternals tools and different set of MacOS tools (netstat, lsof, vmstat, top, dtruss, etc.)

* Fluent English

* Teamwork and problem solving mind

* Compliance framework basic awareness (ISO27001/PCI-DSS/HIPAA etc.)

* ITIL and IT service basic awareness and ability to write end-user documentation/procedures/instructions

A big plus if have all or any of the following:

* Microsoft Intune certification or other Microsoft Security/Endpoint certificationi

* Any AV vendor certification

* Any security related certification (e.g. ISO27001LA, CISSP, CISA)

QIT Software is looking for a scrappy, security-focused Infrastructure Engineer to join a fast-growing AI video platform. You'll be responsible for "Security by Design" across the core platform - ensuring AWS-based infrastructure, Kubernetes clusters, and data stores are resilient against evolving threats while maintaining the high performance required for real-time AI video generation at scale.

Details:
- Schedule: Full-time, remote
- Client: USA
- Duration: long-term
- Tech stack: Python, AWS, Kubernetes, Terraform or equivalent IaC tooling, etc.
- Timezone: 8 hours through PST

Requirements

- 3+ years of professional experience in infrastructure security, SRE, or DevOps
- Hands-on experience securing AWS services and managing containerized workloads in Kubernetes (EKS)
- Proficiency in Python for automation and tool development
- Strong experience with Terraform or equivalent IaC tooling
- Working knowledge of CI/CD pipeline security, container image scanning, and supply chain integrity
- Experience with monitoring and alerting tools (Prometheus, ELK Stack, Datadog, Grafana, or AWS CloudWatch)
- Strong written communication -- you'll need to document runbooks, findings, and remediation plans clearly
- Ability to thrive in a fast-paced, high-autonomy environment where priorities shift rapidly
- Business-level English (written and spoken)

Responsibilities

- Design and implement security controls across AWS cloud infrastructure (VPCs, IAM, Security Groups) and Kubernetes (EKS) environments. Enforce least-privilege access, network segmentation, and runtime security policies
- Own the end-to-end vulnerability management lifecycle -- scanning, prioritization, remediation, and verification. Upgrade dependencies across services and build automation to keep them current
- Embed security into the development lifecycle -- container image scanning, software composition analysis (SCA), and automated security gates in CI/CD pipelines. Ensure third-party dependencies and base images meet security standards before reaching production
- Use Terraform or equivalent IaC tooling to provision and manage infrastructure with security checks automated directly in the deployment pipeline. Reduce manual toil through scripting and tooling in Python
- Build and maintain detection rules, alerting pipelines, and monitoring dashboards for real-time visibility across infrastructure. Lead technical response to security incidents with root cause analysis, remediation, and documented runbooks
- Secure data pipelines handling user-uploaded media, AI model assets, and generated content -- access controls, encryption at rest/in transit, backup integrity, and audit logging
- Support and advance SOC 2, ISO 27001, and GDPR commitments by automating evidence collection, maintaining security policies, and preparing for audits
- Define and test backup and recovery procedures ensuring the platform meets defined RTO/RPO targets. Contribute to business continuity planning with a focus on security implications during failure and restoration scenarios--

Work conditions

- The ability to work remotely from anywhere in the world;
- Flexible work schedule, no micromanagement, no strict deadlines and free overtime work;
- Work in European and American products with a modern technology stack in different industries (Finance, Technology, Health, Construction, Media, etc.);
- Revision of wages every year or on an individual basis;
- Accounting support and full payment of taxes by the company;
- 100% compensation for remote English lessons;
- 15 paid leaves (PTO) and public holidays.

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications and regulatory technologies. 

We are looking for a Security Officer to join our team!

Requirements:

- Higher education in Law or Economics;

- At least 3 years of experience in HR/internal and economic security within private enterprises;

- Proven experience in background checks of individuals and legal entities;

- Previous experience in law enforcement is a strong advantage;

- Knowledge of security systems and protocols;

- Experience collaborating with polygraph specialists;

- Strong experience working with databases;

- Proficient PC user;

- Ukrainian or Russian language C1 and above;

- Fluent English, including spoken communication;

- Willingness to travel abroad to ensure security at exhibitions and conferences.

Responsibilities:

- Conduct regular risk assessments to identify vulnerabilities and threats affecting the holding’s assets;

- Respond promptly to security-related incidents, including investigation and corrective measures;

- Prepare security status reports, analyze incidents, and develop recommendations for improvement;

- Collaborate with other departments to integrate security considerations into business processes;

- Ensure protection of personal data (GDPR compliance) and trade secrets;

- Conduct background checks during recruitment and support exit processes;

- Organize security measures during corporate events, exhibitions, and conferences.

Benefits:
☘️An exciting and challenging job in a fast-growing product company, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance and other;

🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed;

📍Beautiful offices in Warsaw, Limassol work remotely or on-site with comfort and enjoy the opportunity to build a network of connections with professionals day by day;

🧑🏻‍💻Laptop & all necessary equipment for work according to the ecosystem standards;

🏖Paid vacations, personal events days, days off;

🫖Paid sick leave;

👨🏻‍⚕️Medical insurance;

💵Referral program enjoy cooperation with your colleagues and get the bonus;

📚Educational support by our L&D team: internal and external trainings and conferences, courses on Udemy;

🗣Free internal English courses;

🧘Sport benefit;

🦄Multiple internal activities: online platform for employees with quests, gamification and presents for collecting bonuses, RedCore talks club for movie and book lovers, board games cozy evenings, special office days dedicated to holidays;

🎳Company events, team buildings.

Playtech‘s Security unit is looking for an experienced Cloud Security Engineer with strong communication skills and security‑focused critical thinking to support business needs.

Job Description

Your influential mission. You will...

• Oversee cloud security governance and monitoring
• Maintain a Cloud Security Posture Management (CSPM) solution
• Collaborate with DevOps, IT, development and GRC teams to provide subject‑matter expertise in the Google Cloud domain
• Support and maintain cloud‑native security controls
• Conduct security reviews for cloud environments
• Develop documentation outlining security recommendations and best practices
• Identify weak spots, missing controls, vulnerabilities, providing clear recommendations for improvement and remediation
• Stay current on emerging security threats, vulnerabilities, and cloud security controls
• Participate in investigations and responses to potential security incidents

• Implement automation for security‑related tasks

   

Qualifications

Components for success. You...

• Bring at least 2 years of experience in a similar technical security role
• Demonstrate experience with Google Cloud Platform (GCP) and Google Workspace
• Apply strong knowledge of CSPM tools — preferably WIZ
• Understand how cloud infrastructure works, including architecture best practices, managed services, typical vulnerabilities, mitigations, and security best practices
• Communicate clearly, positively, and persuasively on security topics to both technical and non‑technical stakeholders, building effective relationships
• Maintain a strong security mindset with a business‑enablement focus
• Leverage familiarity with modern application development approaches (infrastructure as code, CI/CD, containers, serverless, code/artifact repositories, etc.), with hands‑on experience considered a plus
• Possess broad IT and enterprise architecture knowledge (TCP/IP stack, relevant protocols/technologies—firewall, proxy, etc.; server OS like Windows/Linux; web/database servers, etc.)
• Use basic scripting skills (Python/Shell) to automate and streamline daily tasks
• Communicate effectively in spoken and written English

• Operate effectively within an enterprise environment

   

You’ll get extra points for...

• Knowledge of AWS or Azure cloud

• Relevant security, systems, networking certifications

   

Thrive in a culture that values...

• Collaborating with a true product company where your impact is visible
• Growing through a structured educational program designed to support your development
• Continuously learning in a collaborative environment where experienced colleagues help you expand your skills

• Working in a friendly, supportive, and inclusive atmosphere

   

Additional Information

SECURITY TEAM
A dynamic and innovative team that focuses on developing and maintaining networks across Playtech. If you’re looking for a challenging and rewarding work environment, the Security Unit at Playtech is a great place to be!

Playtech is an equal opportunities employer. Our mission is to welcome everyone and create inclusive teams. We celebrate differences and encourage everyone to join us and be themselves at work.

Security isn’t a state — it’s a process. And we’re looking for someone who knows how to drive it.

Softsich is a young and ambitious international product tech company that develops scalable B2B digital platforms. We combine strategic vision with deep tech expertise to build and scale high-performance products. Right now, we’re looking for a Security Engineer to strengthen our internal infrastructure and help automate key security workflows.

Your key responsibilities will include:
– Monitor and analyze security alerts across multiple security platforms (SIEM, EDR, SOAR)
– Lead Incident Response -  serve as primary responder to security alerts, perform initial triage, conduct investigations, and coordinate remediation
– Enhance Detection Capabilities - design, implement, and fine-tune detection rules and alerts across cloud environments
– Conduct endpoint, network, and application log analysis to identify suspicious activity
– Collaborate with IT, DevOps, and Compliance teams to enforce security standards and best practices
– Assist in improving incident response processes, playbooks, and operational practices
– Stay informed about emerging cybersecurity threats, trends, and industry developments
– Deploy and manage MDM/UEM solutions (Jamf, Jumpcloud) across all endpoints
– Advocate for best practices in IT and change management to strengthen security posture
– Define and enforce security policies for workstations (passwords, encryption, restrictions, app controls)
– Perform regular audits and compliance checks aligned with corporate standards
– Monitor device health and security compliance, respond to related alerts
– Coordinate patching and updates on endpoints through MDM
– Conduct inventory and asset tracking, including remote wipe and lock management
– Provide endpoint security reporting and metrics to IT leadership and compliance
– Collaborate with incident response teams on mobile endpoint incidents
 

It’s a match if you have:
– 3+ years in IT Operations, System Administration, or related roles
– Experience in security threat analysis or incident response, ideally within a SOC
– Proven experience responding to and managing incidents in cloud environments (AWS, Azure, GCP) and SaaS services (Google Workspace, Atlassian)
– Proficiency with SIEM platforms, including rule creation, tuning, and maintenance
– Strong knowledge of cloud security monitoring tools and techniques
– Understanding of network infrastructure
– Experience analyzing endpoint, network, and application logs for anomalies
– Practical understanding of common attack vectors and how to detect them
– Experience with security automation and scripting for incident response workflows
– Understanding of IT system architecture, network design, and IT/change management processes
– Experience with virtualization technologies
– Familiarity with identity management
– Proficiency in platforms used for information security investigations and triage
 

Nice to have:
– Experience with cloud-native security tools and services
– Familiarity with scripting or automation (PowerShell, Bash, Python)
– Experience with endpoint detection solutions and email security technologies
– Knowledge of IT security audit techniques

What we offer:
– A competitive salary
– Remote work format or a modern office in Warsaw and/or Kyiv
– Flexible working hours
– An incredibly friendly team where everyone is ready to share knowledge, help, and support
– 24 working days of paid annual vacation
– Paid sick leave
– Health insurance (available for specialists based in Ukraine; other countries — in progress)
– Zero joules of energy to the aggressor state, its affiliated businesses, or partners
– Conference and business travel expenses covered (where applicable)
– Birthday greetings (because you matter!)
– Online and offline teambuilding events
– Corporate celebrations
 

Send over your CV now — we’d love to get to know you better!

Responsibilities:
•     Implement and maintain security best practices in cloud environments
•     Configure and monitor network security
•     Integrate security into CI/CD pipelines (SAST, DAST, dependency and secret scanning)
•     Manage secrets securely
•     Work with container security (image scanning, runtime protection)
•     Set up logging, auditing, and security monitoring
•     Collaborate with DevOps and backend teams on secure‑by‑design solutions
Requirements:
•     Experience working with cloud environments
•     Understanding of container security
•     Experience configuring CI/CD pipelines
•     Knowledge of networks and related concepts (TCP/IP, VPN, firewall)
•     Experience with IAM/RBAC
•     Hands‑on experience with security tools (Trivy, Snyk, etc.)
•     Experience with secret management tools
•     Basic understanding of incident management
We Offer:
•     Official reservation (бронювання) of employees
•     Relocation and accommodation compensation
•     Competitive salary and transparent conditions
•     Work in a modern technical environment
•     Opportunities for professional growth and continuous learning
•     A supportive team that values quality and results