Jobs Security

About Project: Our client is a US payment facilitator in the dental space, on the market for 10+ years. Their platform runs on Azure and is being actively modernized.
About Role: We’re hiring a hands-on Security Analyst / Security Engineer to take ownership of security on a growing platform and shape how it’s done. You’ll investigate and resolve security events end-to-end and work closely with the engineering team.

Core Responsibilities

• Monitoring, investigating, and responding to security events directly, without handing off to separate escalation tiers
• Proactively hunt for threats across the Azure environment
• Support the engineering team day-to-day on security and infrastructure questions
• Handle Azure administration: configuration, access management, ongoing maintenance
• Manage identity & access (auth issues, access reviews, anomalous logins)
• Work through an existing backlog of security findings

Key Skills & Experience

• Strong hands-on Azure experience
• Solid systems administration background
• Generalist security analyst / threat-hunting experience
• Comfortable working inside a development environment — understands dev workflows, tooling, and how to support engineers
• Experience owning incidents from detection to resolution, without escalating to a higher tier
• English Upper-Intermediate Level

Nice to Have:

• Experience in healthcare, fintech, or other compliance-sensitive environments

What we offer:

• 18 working days of paid vacation a year
• Plus 3 days of additional vacation for childbirth and marriage
• 7 days of paid sick leave per year
• 7 public holidays off
• Corporate team-building events & celebrations
• English classes covered by the company
• Healthcare program
• Access to learning: internal/external, certification compensation
• Development roadmaps and plans to support your professional growth
• Regular performance reviews
• Full accounting support
• Participation in the IT Cluster

Playtech’s are seeking an enthusiastic and experienced Cloud Security Engineer to help drive the security posture of Playtech and its subsidiaries.

This position ensures the proper security design and operation of cloud environments in Azure or GCP (primarily IaaS and PaaS) for different types of services and applications. The Cloud Security Engineer will work closely with product teams in the company to assist and audit in building and maintaining secure cloud environments

Job Description

Your influential mission. You will...

• Oversee cloud security governance and monitoring
• Maintain a Cloud Security Posture Management (CSPM) solution
• Collaborate with DevOps, IT, development and GRC teams to provide subject‑matter expertise in the Google Cloud domain
• Support and maintain cloud‑native security controls
• Conduct security reviews for cloud environments
• Develop documentation outlining security recommendations and best practices
• Identify weak spots, missing controls, vulnerabilities, providing clear recommendations for improvement and remediation
• Stay current on emerging security threats, vulnerabilities, and cloud security controls
• Participate in investigations and responses to potential security incidents
• Implement automation for security‑related tasks

Qualifications

Components for success. You...

• Bring at least 2 years of experience in a similar technical security role
• Demonstrate experience with Microsoft Azure Cloud or Google Cloud Platform (GCP) / Google Workspace
• Apply strong knowledge of CSPM and DSPM solutions
• Understand how cloud infrastructure works, including architecture best practices, managed services, typical vulnerabilities, mitigations, and security best practices
• Communicate clearly, positively, and persuasively on security topics to both technical and non‑technical stakeholders, building effective relationships
• Maintain a strong security mindset with a business‑enablement focus
• Leverage familiarity with modern application development approaches (infrastructure as code, CI/CD, containers, serverless, code/artifact repositories, etc.), with hands‑on experience considered a plus
• Possess broad IT and enterprise architecture knowledge (TCP/IP stack, relevant protocols/technologies—firewall, proxy, etc.; server OS like Windows/Linux; web/database servers, etc.)
• Use basic scripting skills (Python/Shell) to automate and streamline daily tasks
• Have a basic understanding of AI concepts and practical experience using AI tools to improve productivity, automation, and security workflows
• Communicate effectively in spoken and written English
• Operate effectively within an enterprise environment

You'll get extra points for...

• Knowledge of AWS cloud
• Relevant security, systems, networking certifications

Thrive in a culture that values...

• Collaborating with a true product company where your impact is visible
• Growing through a structured educational program designed to support your development
• Continuously learning in a collaborative environment where experienced colleagues help you expand your skills
• Working in a friendly, supportive, and inclusive atmosphere

Additional Information

SECURITY TEAM
A dynamic and innovative team that focuses on developing and maintaining networks across Playtech. If you’re looking for a challenging and rewarding work environment, the Security Unit at Playtech is a great place to be!

Playtech is an equal opportunities employer. Our mission is to welcome everyone and create inclusive teams. We celebrate differences and encourage everyone to join us and be themselves at work.

We are seeking a highly analytical and detail-oriented Security Data Analyst to join our Information Security team. The successful candidate will be pivotal in safeguarding our digital assets by analyzing security data, identifying threats, and providing actionable insights to strengthen our security posture. This role combines expertise in data analysis with a deep understanding of cybersecurity principles.

Main Responsibilities

Data Loss Prevention (DLP) Management

– Manage Data Leakage Prevention tool and processes end-to-end

– Designing, implementing, and supporting new DLP rules

– Focus on reducing false positives from DLP tools to improve accuracy

– Monitor the DLP dismissal process and handle custom requests

– Conduct thorough DLP testing and validation

Security Control & Risk Management

– Design, implement, and support robust data security controls

– Manage data security projects from inception to deployment

– Performing security assessments (data security perspective) on systems and applications

– Analyze requests and approving data transfer or critical access based on security policies

– Create detailed security hardenings guides and provide system configuration requireme

Data Analysis & Reporting

– Investigate security alerts, logs, and data from SIEM and DLP systems

– Perform in-depth analysis of large security datasets

– Develop and maintain key security metrics, perform audits and report for management

Security Incident Analysis & Response

– Conducting analysis for data security incidents and providing support for L3 SOC activities

– Responding to urgent incidents outside working hours as part of an on-call rotation

– Contribute to incident response by providing rapid data analysis and forensics support

Mandatory Requirements

Technical Proficiency

– 3+ years of experience in a cybersecurity role, specifically in data analysis, SOC/incident response

– Hands-on experience with DLP technologies (e.g. Symantec)

– Strong knowledge of SIEM/Logging platforms (e.g. Elastic) and log aggregation principles

– Proficiency in scripting languages (e.g., Python, PowerShell) for data manipulation and automation

– Familiarity with network protocols, operating systems (Windows, Linux), and cloud environments (AWS, Azure)

– Knowledge of privacy and data protection regulations

Analytical Skills:

– Proven ability to collect, analyze, and interpret complex technical data to solve security problems

– Excellent problem-solving skills and attention to detail

English: intermediate or higher

Ukrainian/Russian: native or advanced

Education: Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience

We offer

Vacation: Reset. Recharge. Come back stronger.

Sick Leave Allowance: Health is power. We designed the system to support you

Benefits Model: Your budget, your rules – spend it where it counts. Day one, it’s yours. No waiting, no barriers

Motivation Bonus System: We see results. We reward drive. Our bonus system fuels performance and celebrates dedication – because excellence deserves recognition

Training Balance: Learn fast. Grow faster. Upskill, stay ahead, and keep your edge sharp

Team Building: Stronger together. We connect, compete, and celebrate – great teams don’t happen by accident

Generation Program: Focused on boosting the potential of children within our families

Work & Fun Balance: Driven at work, alive beyond it. Events, surprises, and shared moments keep our spirit high and our energy unstoppable

We are looking for a Detection Engineering & Automation Lead to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Location: Remote — Worldwide
Engagement: Full-time / Part-time
Duration: Long-term
Start: ASAP
Seniority: Senior / Architect / Consultant
English: B2+
Compensation: Negotiable, based on experience and availability

About the Project

We are looking for an experienced Senior Security / GRC Consultant to support an innovative healthcare technology company developing a robotic remote ultrasound solution for hospitals in the US and EU.

The product involves remote medical examinations, patient data processing, and healthcare software integrations.

The primary objective is to establish a robust security and compliance framework, prepare the company for SOC 2 certification readiness and a successful external audit, and address cybersecurity requirements from healthcare customers.

This is a hands-on consulting role requiring proven experience leading SOC 2 readiness and audit preparation, not simply working as an engineer in a SOC 2-compliant environment.

Key Responsibilities

SOC 2 Readiness & Audit Preparation

• Independently lead SOC 2 readiness and compliance initiatives.
• Conduct gap assessments and identify security and compliance risks.
• Develop and implement security policies, procedures, and controls.
• Organize evidence collection and audit documentation.
• Coordinate with external auditors and support the SOC 2 audit process.
• Provide actionable recommendations to engineering and management teams.

Healthcare Security & Compliance

• Ensure alignment with HIPAA, GDPR, and healthcare data protection requirements.
• Define security requirements for handling Protected Health Information (PHI).
• Assess cybersecurity risks associated with medical software and patient data.
• Support compliance with security expectations of US and EU hospitals.

Security Documentation & Customer Support

• Prepare comprehensive security white papers describing security architecture, controls, processes, and data protection practices.
• Independently complete and review customer security questionnaires.
• Participate in client calls and address technical security and compliance questions.
• Develop technical security specifications and implementation guidelines for the development team.

Medical Software Compliance

• Collaborate with the client's QA/RA Manager on IEC 62304-related processes and documentation.
• Contribute to Software Requirements Specifications (SRS), software architecture documentation, and Verification & Validation (V&V) processes.

Required Qualifications

• Senior-level experience in information security, GRC, security compliance, or security consulting.
• Proven hands-on experience independently preparing at least one organization for SOC 2 and supporting it through a successful external audit.
• Strong understanding of SOC 2 Trust Services Criteria, security controls, audit evidence, and compliance processes.
• Practical experience implementing security policies and compliance frameworks.
• Knowledge of HIPAA, GDPR, and PHI protection requirements.
• Experience creating security white papers and responding to enterprise customer security questionnaires.
• Ability to translate regulatory and compliance requirements into clear technical tasks for engineering teams.
• Strong communication and stakeholder management skills.
• English B2+ or higher, with the ability to independently lead client discussions.

Nice to Have

• Previous SOC 2 audit preparation experience in healthcare, MedTech, or digital health.
• Experience with medical devices or medical software.
• Familiarity with IEC 62304 and medical software lifecycle documentation.
• Knowledge of ISO 27001, ISO 13485, or other healthcare-related standards.
• Experience with cloud infrastructure, SaaS security, or security architecture.
• Experience supporting enterprise sales or technical presales.

Engagement Details

The engagement will begin with a technical presales phase, during which the consultant will independently assess the client's security and compliance needs, answer relevant questions, and help define the scope of work.

Following successful presales, the consultant will take ownership of SOC 2 readiness and security compliance activities.

The initial workload is expected to be substantial, potentially full-time, with the possibility of transitioning to part-time involvement as the project progresses.

Part-time consultants are also welcome to apply. The exact workload and engagement model will be determined together with the selected specialist.

The project is long-term, with potential team expansion and additional healthcare software initiatives, including ultrasound video streaming, robotic HMI, and urgent examination booking platforms.

Important

We are specifically looking for someone who has personally led SOC 2 preparation and successfully supported an external audit.

Experience developing software within a SOC 2-compliant organization alone is not sufficient.

Candidates should be ready to discuss concrete examples of previous SOC 2 projects, their responsibilities, implemented controls, evidence collection processes, and audit outcomes.

How to Apply

Please share your CV, expected hourly rate, availability, and a brief description of your hands-on SOC 2 audit preparation experience.

We are particularly interested in candidates who can demonstrate successful SOC 2 readiness projects and independently lead security compliance discussions with healthcare clients.

V-Spot Ltd is a cybersecurity firm working with regulated organisations across Switzerland and Europe. We are looking for an experienced Information Security Auditor to lead security audits and assessments for clients handling highly sensitive personal data.
 

What you'll do

• Plan and run information security and data protection audits, including on-site audits at client organisations (interviews, document reviews, sampling, process checks, physical security and access control inspections)
• Assess the effectiveness of security controls: access and role management, incident management, change and patch management, backup and recovery, monitoring and endpoint protection
• Scope, coordinate and review penetration tests of web applications, APIs and infrastructure, and turn technical findings into audit conclusions
• Carry out risk analyses and protection-needs assessments, and document residual risks
• Review and help develop ISMS and data protection concepts, security policies, minimum standards and business continuity / disaster recovery plans (BCM)
• Review annual security reports and follow up on remediation of audit and pentest findings, including re-audits
• Support data protection impact assessments (DPIA) and incident response, including lessons learned
• Advise clients on information security and data protection, and present findings clearly to management and technical teams
• Write audit reports and documentation in English
   

Must have

• A valid CISA, CISSP or CIA certification (mandatory)
• At least 5 years of experience in IT/information security auditing, IT risk management or security assessment
• Proven track record of planning and executing security audits in large, complex organisations
• Solid knowledge of ISO/IEC 27001/27002, NIST CSF or comparable frameworks, and of data protection requirements (Swiss FADP / GDPR)
• Good understanding of penetration testing methodologies (e.g. OWASP) and of common vulnerabilities in web applications and APIs
• Professional working proficiency in English, spoken and written; German is a plus

• Ability to travel to Switzerland on request for on-site audits and client meetings (a few times per year)

   

Nice to have

• Knowledge of structured project methods (e.g. PRINCE2, SAFe)
• Additional certifications such as ISO 27001 Lead Auditor, CISM or CRISC
• French language skills
   

What we offer

• Part-time employment (approx. 20–30%), long-term from January 2027, with potential to grow
• Varied audit and advisory work for highly renowned organisations
  Fully remote work, with occasional on-site assignments in Switzerland
• A small, senior and technically strong team
   

We are the creators of a new fintech era!

Our mission is to revolutionize the world by making blockchain technology accessible to everyone in everyday life. WhiteBIT is a global team of more than 1,500 professionals united by a shared vision of shaping the future.

We are building our own blockchain ecosystem to ensure maximum transparency and security for over 8 million users worldwide. Our cutting-edge solutions, rapid adaptation to market challenges, and technological excellence set us apart from traditional companies.

Our official partners include Juventus, FC Barcelona, Lifecell, FACEIT, and VISA.

Join us as an Quantitative Researcher. 

Requirements:

• 4–6+ years of experience in Information Security, GRC, Risk Management, Compliance, IT Audit, or a related field.
• Strong practical knowledge of information security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, CCSS or similar.
• Experience working with applicable regulatory requirements such as NIS2, DORA, GDPR, or other relevant regulations.
• Hands-on experience conducting information security risk assessments, control assessments, gap analyses, and compliance reviews.
• Experience supporting or coordinating internal and external audits, certifications, and regulatory assessments.
• Ability to independently manage compliance initiatives, track remediation activities, and follow up with control owners.
• Experience developing, reviewing, and maintaining security policies, standards, procedures, controls, and related documentation.
• Understanding of common information security domains, including access management, vulnerability management, incident management, third-party risk, business continuity, cloud security, and data protection.
• Experience working with third-party/vendor risk assessments and security due diligence.
• Experience responding to customer security questionnaires, RFIs/RFPs, or customer compliance requests.
• Ability to translate regulatory, contractual, and security requirements into clear and actionable controls for technical and business teams.
• Strong stakeholder management skills and experience collaborating with Security, IT, Engineering, Legal, Privacy, Procurement, and business teams.
• Strong analytical skills and ability to identify, assess, document, and communicate security and compliance risks.
• Excellent written and verbal communication skills, including the ability to explain GRC topics to both technical and non-technical stakeholders.
• Strong organizational skills and ability to manage several compliance, risk, and audit activities in parallel.
• Ability to work independently, prioritize effectively, and take ownership of GRC activities from identification through remediation and closure.
• Professional working proficiency in English.

Nice to have:

• Experience in SaaS, cloud-based, technology, or other highly regulated environments.
• Experience with GRC platforms or compliance automation tools such as ServiceNow GRC, OneTrust, Vanta, Drata, AuditBoard, or similar.
• Familiarity with cloud platforms such as AWS, Azure, or GCP from a governance and compliance perspective.
• Relevant professional certifications such as CISA, CISM, CRISC, CISSP, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor.
• Experience participating in or leading compliance improvement and control maturity initiatives.

Responsibilities:

• Own and coordinate day-to-day GRC activities across information security, risk management, compliance, and assurance.
• Conduct information security risk assessments, identify control gaps, document risks, and track remediation actions with relevant owners.
• Support the implementation, maintenance, and continuous improvement of security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, and other applicable standards.
• Monitor relevant regulatory and contractual requirements and help translate them into practical security controls and compliance activities.
• Coordinate and support internal and external audits, certification activities, customer assessments, and regulatory reviews.
• Maintain and improve security policies, standards, procedures, control documentation, risk registers, and other GRC documentation.
• Perform control assessments and periodically evaluate the effectiveness of implemented security controls.
• Track audit findings, compliance gaps, risks, and remediation plans through to closure.
• Support third-party and vendor security risk assessments, including due diligence and ongoing risk reviews.
• Manage and respond to customer security questionnaires, security reviews, and compliance-related requests in collaboration with relevant teams.
• Partner with Security, IT, Engineering, Legal, Privacy, Procurement, and business stakeholders to ensure security and compliance requirements are understood and implemented.
• Provide guidance to control owners on compliance requirements, risk treatment, evidence collection, and remediation activities.
• Identify opportunities to improve and automate GRC processes, evidence collection, reporting, and compliance monitoring.
• Develop and maintain GRC metrics, dashboards, and reporting to provide visibility into risks, compliance status, audit findings, and remediation progress.
• Support security awareness and compliance initiatives where relevant.
• Stay informed about changes in security standards, regulations, and industry practices and assess their potential impact on the organization.

Working terms

Immerse yourself in Crypto & Web3:Master cutting-edge technologies and become an expert in the most innovative industry.

Work with the Fintech of the Future:

• Develop your skills in digital finance and shape the global market.

Take Your Professionalism to the Next Level:

• Gain unique experience and be part of global transformations.

Drive Innovations:

• Influence the industry and contribute to groundbreaking solutions.

Join a Strong Team:

• Collaborate with top experts worldwide and grow alongside the best.

Work-Life Balance & Well-being:

• Modern equipment.
• Comfortable working conditions, and an inspiring environment to help you thrive.
• 24 calendar days of paid leave.
• Additional days off for national holidays.

With us, you’ll dive into the world of unique blockchain technologies, reshape the crypto landscape, and become an innovator in your field. If you’re ready to take on challenges and join our dynamic team, apply now and start a new chapter in your career!

Let’s Build the Future Together!

As a Senior Cyber Security Analyst, you will join a team focused on identifying, investigating, and mitigating malicious web activity across large-scale digital environments. The role combines threat analysis, traffic investigation, detection engineering, and collaboration with customers and internal engineering teams to improve protection mechanisms and threat visibility.

You will work with high-volume traffic datasets, analyze suspicious behavior patterns, and contribute to the continuous improvement of security detections related to bots, fraud attempts, and other web-based threats.

Customer

Our client delivers advanced cybersecurity solutions designed to protect organizations, users, and digital ecosystems from evolving online threats. The company specializes in bot defense and anti-malvertising technologies for the AdTech industry, supporting SSPs, DSPs, agencies, and publishers through scalable protection platforms, customizable reporting tools, and API integrations.

Project

The project focuses on real-time threat detection and bot mitigation for enterprise-scale clients. Cyber Security Analysts collaborate directly with customers, leveraging advanced analytics platforms to identify malicious traffic patterns and neutralize online threats. This dynamic environment requires both technical expertise and strong communication skills.

Requirements

• 3–5 years of experience in Cybersecurity, Threat Research, or Threat Intelligence
• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field
• Strong understanding of web technologies and networking fundamentals, including HTTP/HTTPS, TCP/IP, DNS, authentication, cookies, and browser-server interactions
• Experience in web security research, bot management, fraud detection, or related domains
• Hands-on experience with threat investigations, IOC analysis, and threat intelligence research
• Experience with log analysis and investigation platforms such as Kibana/OpenSearch, Snowflake, Datadog, or similar tools
• Strong SQL skills, including working with large datasets and UDFs
• Basic knowledge of JavaScript for web and client-side analysis
• Strong analytical and problem-solving skills
• Ability to work independently and manage investigations with minimal supervision
• Strong communication and collaboration skills
• Passion for cybersecurity and continuous learning

NICE TO HAVE:

• Knowledge of MITRE ATT&CK, malware analysis, vulnerabilities, and adversary TTPs
• OSINT and cyber threat intelligence research experience
• Python and Jupyter Notebook experience for investigations and automation

• Experience with GitHub and version control workflows

  Responsibilities

• Monitor and investigate potential security threats using tools such as Kibana/OpenSearch and Snowflake.
• Analyze security logs and investigate suspicious or unusual activity, including spikes in traffic, unexpected changes in attack patterns, and new or disappearing attack signals.
• Determine whether detected activity is malicious or benign and identify the appropriate response, including detection engineering to block malicious activity when needed.
• Develop, tune, and deploy detection rules based on traffic behavior, HTTP request attributes, headers, device fingerprints, and other indicators to mitigate malicious activity.
• Monitor existing detections and known attack patterns to make sure they continue to work as expected and identify any unusual changes in volume, sources, IPs, domains, or other indicators.
• Support customer onboarding by analyzing web application traffic flows and configuring baseline detection and protection rules.
• Investigate customer-reported incidents and missed detections, analyze attack traffic, and implement mitigations to improve protection coverage.
• Document newly discovered threats and attacks, including evidence, findings, and indicators.
• Communicate findings to Engineering and other stakeholders and provide the necessary technical details to support remediation and improvements to detection and protection mechanisms.
• Partner directly with counterparts through a ticketing system and support portal to investigate issues, provide updates, and resolve security-related requests.

Description

Our client is innovative manufacturer of medical devices in the United States which produces a devices and software applications. At this project, you will have a great opportunity to be involved into the full development life cycle of medical software which is intended to help individuals by processing certain information taken from medical devices to identify health trends and to track daily activities.

Requirements

– Knowledge of secure architecture & secure design (e.g. Zero Trust)

– Strong knowledge of cybersecurity processes – SSDF by NIST

– Cross-team collaboration

– Strong understanding of SAST tools management. Veracode experience will be an advantage.

– Vulnerabilities evaluation and management

– Secure IoT architecture design best practices (e.g. Zero Trust, firmware security)

Strong knowledge of secure design in healthcare solutions:

• Data encryption
• Data anonymization
• Secure communication (HTTPS – TLS/ mTLS, PKI)
• Identity and Access Management

– Scripting experience (e.g. Bash, Python, PS)

– Strong knowledge of the latest FDA requirements

– NHI and medical devices security

Job responsibilities

• Owning and maintaining security activities required by SSDF process
• Reporting to stakeholders
• Collaboration with Development and architects team
• Cybersecurity documentation management
• Solution design and security requirements creation
• Supporting/advising development team in security challenges

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies.

We are looking for an Antifraud Analyst Middle

Requirements

• Experience in security, anti-fraud management, or in the casino/gaming industry – from 1+ years;
• Knowledge of the specifics of online casinos, traffic acquisition (understanding the process), KYC, payment systems, and mechanisms related to gaming transactions;
• Experience with analytical tools and dashboards;
• Experience working with anti-fraud systems (e.g., betting monitoring, suspicious transactions);
• Ability to identify fake accounts, bonus abuse, and money laundering schemes;
• Knowledge in combating multi-accounting, bot attacks, and card fraud.

Will be plus

• English (not necessary at the moment as there is no interaction with English-speaking regions);
• Experience in support, payments

Responsibilities

• Monitoring transactions and accounts: Analysis of gaming and financial transactions for liability purposes (fraud, multi-accounting, money laundering, bonus hunting, etc.);
• Use anti-fraud systems to detect anomalies, such as bonus manipulation, fake bets, or fraudulent identification data;
• Preparation of reports and analysis of data on identified risks and incidents;
• Analysis of bonus offers;
• In-depth analysis of gaming behavior for fraud (search for syndicates, potential collusion in poker/live games, use of bots/software);
• Identification of complex bonus hunting schemes (Bonus Abuse) and development of countermeasures;
• Independent setup, testing, and optimization of triggers/rules in anti-fraud systems;
• Data export and analysis using product reports, as well as export from an anti-fraud tool;
• Working with BI tools (Tableau) to identify anomalies in player behavior;
• Conducting comprehensive investigations of major fraud incidents;
• Basic understanding of AML (anti-money laundering) requirements and regulatory licenses;
• Analysis of the causes of changes in risk metrics.

 Our benefits to you:

☘️An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance, and more

🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed

🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided

🏖Paid vacations, sick leave, personal events days, days off

💵Referral program — enjoy cooperation with your colleagues and get the bonus

📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences

🎯Rewards program for mentoring and coaching colleagues

✈️In-house Travel Service

🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more

🎳Other benefits could be added based on your location

We are looking for an Information Security Operations Lead to own the company’s day-to-day security operations — from incident response and SOC performance to vulnerability management, access governance, and ISO 27001 readiness. The role reports to the CISO, sits within the Security & Risk Department, and is the main point of contact for operational security across IT and other business units.

Responsibilities

• Act as the single point of contact for IT, R&D, Manufacturing, and other departments on operational security matters, including reviews for new services, integrations, and vendor access
• Lead and coordinate the SOC analyst team: prioritization, quality control, mentoring, performance management
• Own incident response end-to-end: coordinating participants, timeline and communication, containment, remediation, and reporting with lessons learned for the CISO
• Maintain SOC playbooks, runbooks, and triage/response procedures; run regular case reviews and turn findings into process improvements
• Improve SIEM detections, reduce false positives, and drive automation
• Drive vulnerability remediation together with IT: prioritization, timelines, tracking, and overdue reporting
• Organize regular access reviews together with IT and system owners
• Own SOC-related ISMS controls under ISO 27001 (incident, vulnerability, and log management per Annex A); prepare audit evidence for internal and certification audits
• Maintain the security incident register per ISMS requirements and close related corrective actions within agreed timelines
• Contribute operational incident and threat data to risk assessment reviews
• Track and report security operations metrics (MTTD, MTTR, SLA, overdue vulnerabilities) to the CISO and leadership

Required Skills & Experience

• 5+ years of experience in SOC, Incident Response, or Security Operations
• Experience leading a SOC team or acting as a technical lead
• Hands-on experience with SIEM, EDR/XDR, and incident management
• Experience coordinating vulnerability management and access reviews with IT
• Hands-on experience with ISO 27001 or a similar security framework
• Strong stakeholder management and communication skills, including with non-technical audiences

Nice to Have

• Cloud security experience (AWS, Azure, GCP)
• SOAR, automation, or scripting experience
• Experience supporting ISO 27001 certification audits
• Certifications: CISSP, GCIH, GCIA, SC-200, Splunk, or similar

The company offers:

• Official employment with a competitive salary and clear, transparent terms of cooperation.
• Paid vacation (24 calendar days per year) and paid sick leave.
• Support for your professional growth — the company is actively expanding, and you’ll have the opportunity to grow together with it.
• An atmosphere of trust, open communication, and leadership — initiative is welcomed, ideas are brought to life, and the team supports your progress.

Smarter is a management company responsible for defining the overall strategy of investment activities and ensuring optimal management and development strategies for each business unit within the group. The main areas of activity and focus of our company include the international fintech community SFORS (https://sfors.com), the brokerage company Statok (https://statok.global), and the product company Pine Software (https://pinesoftware.com.cy)

The Head of Security is responsible for the comprehensive protection of the Group’s and the Owner’s assets, information, and interests by establishing an integrated security system—encompassing financial-economic, information, internal, and physical security—that minimizes the risks of loss, fraud, and external threats while supporting the stability and value growth of the asset portfolio.

Responsibilities

1. Corporate & Enterprise Security

• Developing, updating and implementing the company’s global security strategy in line with business objectives.
• Establishing an effective security governance framework and developing corporate security policies.
• Assessing, structuring and managing corporate risks (Enterprise Risk Management).
• Protecting the company’s physical, information, financial and reputational assets.
• Transforming and developing the security culture within the company.
• Advising the Executive Team and the Board on strategic security and risk-related decisions.

2. Physical Security & Crisis Management

• Organising comprehensive physical security for offices, sites, facilities and personnel.
• Monitoring and modernising access control systems, CCTV, security and emergency response systems.
• Developing and regularly testing crisis response scenarios (including those specific to martial law, relocation and blackouts).
• Management of travel security and executive protection processes (where required).

3. Personnel Security & Background Checks

• Organisation and automation of background verification processes for candidates, employees and third-party vendors.
• Assessment of potential reputational, compliance and fraud risks.
• Development and implementation of employee screening and insider risk management procedures (to prevent internal leaks and sabotage).
• Effective collaboration with the HR and Legal departments when resolving sensitive cases.

4. Fraud Prevention & Internal Investigations

• Designing and auditing systems to prevent fraud, corruption and internal misconduct.
•  Organising and conducting independent internal investigations.
•  Identifying conflicts of interest, industrial espionage, financial fraud and leaks of trade secrets.
•  Developing preventive controls and tools for monitoring operational risks.
•  Leading the Incident Response process (responding to security incidents).

5. Information Protection & Insider Risk Management

•  Ensuring the security aspects of processes involving the handling of confidential information and trade secrets.
• Developing and implementing measures to prevent insider threats.
• Monitoring compliance with internal requirements for handling sensitive information.
•  Participating in the investigation of information leaks, breaches of NDAs and other incidents related to human error.
•  Assessing security risks associated with counterparties, partners and third-party contractors.

6. Risk Management & Business Continuity

•  Developing and maintaining procedures for responding to security incidents.
•  Preparing and conducting training sessions, drills and crisis simulations.
• Coordinating actions during incidents relating to physical, personnel or corporate security.
• Participating in post-incident analysis and the development of corrective measures.
• Preparing recommendations to enhance the company’s preparedness for security threats.

7. Compliance & Governance

• Monitoring compliance with internal security policies and external compliance requirements.
• Fostering constructive collaboration with the Legal and Audit functions, government and law enforcement agencies, as well as external stakeholders.
• Participating in the development and oversight of policies relating to data protection, confidentiality (NDAs) and acceptable use.

• Preparing regular security reports and dashboards for executive leadership.

   

Job requirements

• Experience: At least 5 years in roles such as Head of Security, Director of Corporate Security or Enterprise Risk Manager within established organisations (mature mid-market or enterprise-level).
• Expertise: A deep understanding of how physical, operational, personnel and financial security function within a modern business.
• Management skills: Experience of building security processes, regulations and policies ‘from scratch’ or completely transforming them to suit the new scale of the business.
• Crisis management: Practical experience of incident handling and coordinating actions in stressful, uncertain situations.
• Business focus: Skills in engaging with executive stakeholders. The ability to defend budgets and decisions using the language of figures, risk analysis and business opportunities, rather than the language of ‘restrictions’.
• Technical literacy: An understanding of the basic principles of information security and modern digital risks. The ability to interact effectively with IT and other technical functions within the company.
• Personal qualities: An impeccable reputation, high ethical standards, emotional intelligence, well-developed strategic thinking and absolute discretion.

Nice to have

•  Experience of working in international companies or matrix organisations.
•  Experience of managing security in high-risk environments or geographically dispersed teams/branches.
•  Professional certifications (e.g. ASIS CPP, CISM, risk management or audit certifications).
•  Knowledge of international practices and standards in the field of corporate security, risk management and internal controls (ISO 31000, ISO 22301, ISO 27001 would be an advantage).
•  Experience of professional and effective interaction with law enforcement or military organisations.

Company offers

• Care from Day One — medical insurance from your first day, including dental care, massage, and professional psychological support.
• Work-Life Balance — 21 days of paid vacation + 30 days of paid sick leave.
• Knowledge Library — office books and access to the Kuka online library. 
• Investment in Your Energy — partial reimbursement for sports and fitness activities.
• Modern Workspaces with full power-backup infrastructure in Larnaca, Cyprus.
• Island Relaxation — up to 14 days per year at the company villa in Cyprus. 

‍

Join the Smarter team, where your talents and aspirations will be recognized! We offer a dynamic work environment, opportunities for professional growth, and support at every step of your career path. Start your journey to success with us—apply today and take the first step towards your bright future.

Smarter is an equal opportunity employer. We encourage applications from candidates of all backgrounds and experiences. Please note that only shortlisted candidates will be contacted. Thank you for considering Smarter as your next career move!!

About us
 

ARRISE is a global leader in software development and services for the iGaming industry, bringing together more than 2,500 professionals operating across more than 12 locations worldwide.

From concept through to delivery, we combine technical expertise, creativity and industry knowledge to develop products, platforms and services that shape player experiences and support some of the industry's leading brands.

We are best known for the work we deliver for Pragmatic Play, creating and supporting technology, products and specialists services enjoyed by millions of players worldwide.

About the role

We are seeking an experienced IT Compliance Specialist to lead and manage our compliance programs across ISO 27001 and SOC 2, ensuring our gaming platform and related services meet the highest standards of security, privacy, and regulatory compliance. The role will serve as the primary liaison for both external and internal auditors for ISO 27001 certification and SOC 2 attestation, with a focus on addressing scope changes, corporate structure changes, and responding to client security questionnaires.

What you will do

• Compliance Management
  • Lead and maintain the company’s ISO 27001 Information Security Management System (ISMS) and SOC 2 Trust Services Criteria certification programs.
  • Serve as the primary point of contact for engaging with external and internal auditors, facilitating ISO 27001 certification and SOC 2 attestation processes.
  • Own compliance audits: plan, coordinate with auditors, collect evidence, and provide comprehensive audit responses.
  • Manage risk assessments, control testing, and remediation activities to ensure ongoing compliance.
• Policy & Process Governance
  • Develop, maintain, and enforce IT security and compliance policies, procedures, and standards.
  • Ensure documentation aligns with ISO 27001 Annex A controls, SOC 2 requirements, and addresses evolving compliance needs due to scope or structural changes.
  • Respond to client security questionnaires with accurate and detailed information to demonstrate compliance
• Control Implementation & Monitoring
  • Oversee access control, change management, incident management, and third-party/vendor risk management within the scope of ISO 27001 and SOC 2.
  • Ensure compliance across environments supporting software development, hosting platforms, and APIs.
  • Monitor the effectiveness of security controls and recommend improvements to mitigate emerging risks.
• Audit & Assurance
  • Act as the central liaison for external auditors, regulators, and certification bodies, ensuring clear communication and issue resolution.
  • Conduct internal compliance audits, gap assessments, and readiness reviews to maintain certification readiness.
  • Track and close compliance findings and audit issues, ensuring timely resolution and documentation.
  • Provide expert guidance on compliance implications of ISO 27001 scope changes and corporate structure changes.
• Training & Awareness
  • Build awareness of compliance requirements across development, operations, and support teams.
  • Deliver targeted training on compliance obligations, including secure software development, data handling, and gaming industry standards.
  • Vendor & Third-Party Risk Management
  • Assess compliance of key vendors, including cloud hosting providers, content partners (e.g., Pragmatic Play), and integration providers.
  • Ensure contractual and SLA alignment with ISO 27001 and SOC 2 requirements.
• Reporting
  • Provide regular compliance updates, risk posture reports, and responses to client inquiries to senior management and stakeholders.

  • Support management with compliance performance metrics and KPIs.

     

What you bring

• Bachelor's degree in information security, Computer Science, Risk Management, or a related field.
• 5+ years’ experience in IT compliance, GRC, risk management, or information security, ideally in gaming, fintech, or other regulated industries.
• Strong understanding of:
• ISO 27001:2022 Information Security Management System (ISMS)
• SOC 2 Trust Services Criteria (Security, Availability, Confidentiality, Processing Integrity, Privacy)
• Proven track record of leading certification and audit processes, including direct engagement with auditors.
• Experience responding to client security questionnaires and communicating compliance status effectively.
• Experience with SaaS/PaaS environments, APIs, and cloud-based hosting services.
• Knowledge of secure SDLC, DevOps, and CI/CD compliance integration.
• Professional certifications preferred (e.g., CISA, CISM, ISO 27001 Lead Implementer/Auditor, CCSK, CRISC).
• Excellent knowledge of IT compliance, audit, and risk frameworks, with expertise in ISO 27001 and SOC 2.
• Strong communication and stakeholder management skills, with the ability to represent the company to auditors and clients.
• Ability to influence cross-functional teams (dev, ops, support) to adopt compliance practices.
• Analytical thinker with a problem-solving approach to compliance challenges, including scope and structural changes.
• Detail-oriented with strong documentation, evidence management, and client questionnaire response skills.

What we offer

• Competitive compensation
  • A competitive salary that reflects your skills and experience.
• Annual leave
  • In accordance with the applicable legislation (20 or 26 days annual leave).
• Private medical cover
  • Private medical insurance to help you look after your health and wellbeing, available after successfully passing the probation period.
• Learning Hub
  • Access to our online learning platform, with courses and resources to help you build your skills and grow your career.
• Gym & fitness membership
  • Multisport membership, after successfully passing probation.

We are looking for an experienced Application Security Engineer or Penetration Tester to help strengthen the security of our web and mobile applications.
This is a hands-on role that combines penetration testing, secure code review, security engineering, and collaboration with development teams. You will identify real security risks, recommend practical solutions, and help integrate security throughout the software development lifecycle.
 

Main responsibilities

• Plan, coordinate, and perform penetration tests of web and mobile applications;
• Conduct infrastructure security assessments and security audits.
• Identify vulnerabilities, threats, and security risks affecting web and mobile applications;
• Clearly communicate identified vulnerabilities, their business impact, and recommended remediation actions;
• Evaluate, recommend, and implement security solutions for web and mobile applications;
• Perform secure code reviews and provide practical guidance to development teams;
• Analyze security events and monitor the security posture of applications;
• Implement and maintain security standards and controls within the Secure Software Development Life Cycle;
• Integrate application security tools and security testing into CI/CD pipelines;
• Investigate security incidents and recommend remediation and preventive measures;
• Deliver training and awareness sessions on secure software development practices;
• Work closely with developers, engineering teams, and other stakeholders to improve application security.

Must-have requirements

• At least three years of professional experience as a Penetration Tester, Application Security Engineer, or Security Engineer;
• Hands-on experience conducting penetration tests of web and mobile applications;
• Experience identifying, validating, and assessing the impact of application security vulnerabilities;
• Ability to explain vulnerabilities, risks, and remediation recommendations to both technical and non-technical stakeholders;
• Practical experience performing secure code reviews;
• Basic proficiency in at least one programming language, such as C#, Python, or JavaScript;
• Strong understanding of the Software Development Life Cycle;
• Hands-on experience implementing or maintaining application security tools, including:
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Software Composition Analysis (SCA)
• Familiarity with integrating security controls and testing tools into CI/CD pipelines and Secure SDLC processes;
• Professional proficiency in Ukrainian and English at B2 level or higher.
• Strong analytical, communication, and problem-solving skills.

Nice to have

• Knowledge of security risks related to artificial intelligence and large language models;
• Hands-on experience testing or securing AI- and LLM-based solutions;
• Knowledge of Polish.

This role gives you the opportunity to combine offensive security skills with practical security engineering. You will not only identify vulnerabilities but also help teams fix them, improve development processes, and build more secure products from the start.
 

You will work across penetration testing, secure code review, security tooling, CI/CD, and Secure SDLC. If you enjoy solving complex security challenges and working closely with development teams, we would be happy to hear from you.

Important: after confirming your application on this platform, you’ll receive an email with the next step: completing your application on our internal site, LaunchPod. So keep an eye on your inbox and don’t miss this step — without it, the process can’t move forward.

Why join us

If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! :)

About the role

We are looking for a Python Application Security Engineer to automate application security controls and integrate secure coding practices into software development and cloud workflows.

The mandatory requirements are 3+ years of experience in software engineering and security, Python, AppSec tool APIs, CSPM, IaC/Terraform checks and independent execution; upper-intermediate English is required. SAST/DAST/SCA, AI security, threat modeling and Java are a plus.

Must haves

• 3+ years of experience combining software engineering experience, security implementation and/or architecture experience.
• Strong coding and architectural proficiency in Python (for security automation and scripting).
• Hands-on experience or familiarity with Wiz, Prisma Cloud, or similar tools for cloud security posture management and threat detection.
• Implementation experience with deploy-time checks against Infrastructure as Code (IaC) / Terraform.
• Implementation experience with runtime checks through Cloud Security Posture Management (CSPM).
• Fully autonomous execution capability, requiring no daily supervision to map out and build automated security runbooks.
• Upper-intermediate English level.

Nice to haves

• Deep, hands-on expertise deploying and tuning modern application security testing tools (SAST, DAST, SCA) and integrating them into complex CI/CD orchestration ecosystems.
• Experience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging or secure code generation.
• Advanced application threat modeling experience.
• Ability to confidently read, review and secure enterprise source Java code.

What you will do

• AppSec Engineering & Automation: Engineer and deploy AI-enabled secure code scanning capabilities and "Golden Images" to drive secure-from-the-start adoption.
• Technical Modernization: Automate the development of secure coding patterns and integrate them with traditional and Agentic SDLC workflows.
• Security Tooling Integration: Architect the integration of continuous security scanning tools (SAST, DAST, SCA) into enterprise CI/CD pipelines, tuning them to eliminate noise.
• Cloud & Runtime Security: Implement runtime security checks via CSPM to maintain continuous cloud visibility and threat posture management.
• Developer Experience (DevEx): Act as a senior technical SME, reading and reviewing complex application code (Java/Python) to provide software engineers with highly specific, code-level remediation guidance.

The benefits of joining us

• Professional growth

Accelerate your professional journey with mentorship, TechTalks, and personalized growth roadmaps

• Competitive compensation

We match your ever-growing skills, talent, and contributions with competitive USD-based compensation and budgets for education, fitness, and team activities

• A selection of exciting projects

Join projects with modern solutions development and top-tier clients that include Fortune 500 enterprises and leading product brands

• Flextime

Tailor your schedule for an optimal work-life balance, by having the options of working from home and going to the office – whatever makes you the happiest and most productive.

Meet Our Recruitment Process

Asynchronous stage – An automated, self-paced track that helps us move faster and give you quicker feedback:

• Short online form to confirm basic requirements
• 30–60 minute skills assessment via Codility – a platform founded in Poland that helps us provide quicker feedback and streamline this stage of the process.
• 5-minute introduction video

Synchronous stage – Live interviews

• Technical interview with our engineering team (scheduled at your convenience)
• Final interview with your future teammates

If it’s a match — you’ll get an offer!