Jobs Security

We are looking for an IT Compliance Analyst/Information Security GRC Analyst to join our Security team and help strengthen the effectiveness and transparency of our security controls.

In this role, you will work across security compliance, control assurance, third-party risk, and security awareness. You will collaborate with Security, Legal, Procurement, technical and business teams to ensure controls are supported by reliable evidence, risks are identified and tracked, and the organization remains ready for audits and regulatory requirements.

This is a great opportunity for someone who enjoys hands-on GRC work, wants to take ownership of processes, and is interested in developing expertise across multiple areas of information security compliance.
 

Responsibilities

• Collect, validate, organize, and maintain audit and security-control evidence
• Test assigned security controls, identify gaps, and prepare clear and traceable evidence packages
• Support internal and external audits, including SOC 2, DORA, and CySEC-related assurance activities
• Maintain control records, evidence repositories, findings, remediation actions, owners, and deadlines
• Perform third-party security assessments, including supplier tiering, due diligence, questionnaire reviews, and analysis of assurance evidence
• Assess security risks related to SaaS providers, ICT providers, outsourced services, and critical vendors
• Track supplier findings, treatment plans, reassessment dates, and remediation progress
• Collaborate with Security, Procurement, Legal, technical teams, and business stakeholders
• Support security-awareness campaigns, employee onboarding, phishing simulations, and role-based training
• Maintain awareness and training completion data and follow up on outstanding actions
• Prepare clear, evidence-based compliance and security-risk reporting
• Escalate control gaps, overdue evidence, critical supplier findings, and other significant risks through established processes
   

Requirements

• Experience in IT compliance, Information Security GRC, IT risk, IT audit, third-party security risk, or a related field
• Hands-on experience collecting, validating, and maintaining audit and control evidence
• Understanding of security controls and experience with control testing, gap identification, and remediation tracking
• Knowledge of information security and assurance frameworks such as SOC 2, ISO 27001, NIST, CIS Controls, or similar
• Understanding of risk assessment and risk treatment principles
• Ability to maintain accurate control records, findings, remediation actions, owners, and deadlines
• Strong attention to detail and ability to work with sensitive information
• Clear written and verbal communication skills with both technical and non-technical stakeholders
• Good English communication skills
   

Will be a plus

• Experience with SOC 2, DORA, CySEC, or other financial-services regulatory requirements
• Experience with third-party/vendor security risk management, including supplier assessments, security questionnaires, and due diligence
• Experience with GRC platforms such as ServiceNow GRC, OneTrust, Archer, Vanta, Drata, Hyperproof, or similar
• Experience preparing or delivering security awareness activities, phishing simulations, onboarding, or role-based security training
• Relevant certifications such as CISA, CRISC, CISM, ISO 27001 Lead Auditor/Implementer, or similar
• Experience supporting internal or external audits
• Experience working in FinTech, financial services, SaaS, or another regulated environment
   

We offer

• 20 paid vacation days per year 
• 10 paid sick leave days per year 
• Public holidays as per the company's approved Public holiday list 
• Medical budget 
• Opportunity to work remotely 
• Professional education budget 
• Language learning budget 
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for an experienced Information Security GRC Manager to lead and develop our Information Security Governance, Risk & Compliance function.

This is a hands-on leadership role with the opportunity to shape the GRC operating model, roadmap, team, and core processes in a growing international FinTech environment.

You will work directly with the CISO and collaborate closely with Security, Legal, Risk, Procurement, IT, Engineering, Product, Platform, HR, and business teams.

The role combines security governance, cyber risk, regulatory assurance, third-party risk, policy management, and security awareness, with a strong focus on building practical controls and processes that support business growth.
 

Responsibilities

• Own and develop the Information Security GRC strategy, roadmap, operating model, and governance cadence
• Lead security governance, regulatory assurance, cyber risk, third-party security risk, policy lifecycle, and security-awareness oversight
• Establish clear ownership for security controls, risks, exceptions, evidence, and remediation actions
• Coordinate SOC 2, DORA/CySEC-related assurance, internal and external audits, and regulatory requests
• Maintain cyber-risk and exception registers and ensure material risks are treated, accepted, or escalated
• Lead security aspects of ICT supplier tiering, due diligence, reassessment, and high-risk supplier decisions
• Develop practical security policies, standards, controls, and guidance
• Ensure audit and assurance evidence is reliable, traceable, and reusable
• Track control gaps, findings, and remediation commitments and escalate material risks
• Partner with Security, IT, Engineering, Product, Platform, Legal, and business teams on control design and risk-based decisions
• Prepare concise GRC and risk reporting for the CISO and executive stakeholders
• Build, develop, and manage the GRC team, including responsibilities, goals, and performance expectations
• Improve GRC efficiency through automation, reusable evidence, better data quality, and responsible AI-assisted workflows
   

Requirements

• Strong practical experience in Information Security GRC, cyber/technology risk, security compliance, or assurance
• Hands-on experience with recognized frameworks such as SOC 2, ISO 27001, DORA, PCI DSS, NIST CSF, COBIT, or similar
• Experience establishing or operating security controls, risk registers, exception processes, and assurance programs
• Strong understanding of control design, operating effectiveness, evidence quality, findings, and remediation
• Experience coordinating internal or external audits and regulatory or assurance activities
• Practical experience with cyber risk assessment, risk treatment, risk acceptance, and escalation
• Understanding of third-party and ICT supplier security risk
• Ability to translate regulatory and security requirements into practical controls and processes
• Strong stakeholder management skills and ability to work effectively with technical, business, and executive audiences
• Sufficient technical understanding of cloud, infrastructure, identity, IT operations, and product development to work effectively with technical teams
• Experience leading a team, function, program, or complex cross-functional initiatives
• Strong ownership, prioritization, and decision-making skills
   

We Offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays according to company policy
• Medical budget
• Remote work opportunity
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear, etc.)

Job Description

• 4+ years in DevOps / DevSecOps or software engineering with a strong security focus.
• Hands-on with CI/CD tooling (e.g. GitLab CI, GitHub Actions, Jenkins, Azure DevOps).
• Security scanning in pipelines: SAST, DAST, SCA, secrets scanning (e.g. Semgrep, Snyk, Trivy, OWASP ZAP).
• Infrastructure-as-Code (e.g. Terraform) and IaC security.
• Containers and Kubernetes security (Docker, K8s, image scanning, hardening).
• Cloud platforms (AWS / Azure / GCP) and cloud security fundamentals.
• Secrets management (e.g. HashiCorp Vault, cloud KMS) and IAM basics.
• Scripting and automation (Python, Bash) and Git.
• Familiarity with standards and frameworks: OWASP, NIST, CIS Benchmarks, ISO 27001.
• Understanding of and hands-on experience with different LLMs; ability to build AI agents; and knowledge of embedding LLMs into the SDLC and pipelines.
• Strong Linux skills (administration, hardening, command line, shell scripting).

• Nice to have: certifications (e.g. CKA/CKS, AWS/Azure Security, CISSP); pentesting or vulnerability-management exposure.

   

Job Responsibilities

• Build and maintain secure CI/CD pipelines; embed security gates (SAST, DAST, SCA, secrets scanning) into the build.
• Automate security testing and policy checks across the SDLC (shift-left).
• Implement Infrastructure-as-Code (IaC) security and secure baseline configuration.
• Manage secrets, keys and credentials (vaulting, rotation) across environments.
• Secure containers and Kubernetes (image scanning, hardening, runtime policies).
• Set up security tooling and route findings into developer workflows and dashboards.
• Define and enforce policy-as-code guardrails; track exceptions and drift.
• Support vulnerability management: triage, prioritize and follow remediation through pipelines.
• Work with developers and architects to embed security by design.
• Monitor, log and respond to pipeline and cloud security events; support incident response.
• Contribute to AI-assisted automation (LLMs/agents) for security tasks in the pipeline.
   

Department/Project Description

An enterprise technology group is building a dedicated security validation team focused on vulnerability assessment and security testing across the group's products and systems. The team runs structured testing campaigns: penetration testing, vulnerability discovery and triage, secure code review, and building automated test suites to make the process repeatable at scale.
The team also gets early access to specialized AI models and evaluates how they can accelerate security testing - an area we're actively investing in, though the core of the work remains hands-on security engineering. Scope covers internal systems as well as business-unit products across the group, agreed campaign by campaign. The team starts small and scales into a permanent capability.

We are inviting you, a highly motivated and results-oriented Incident Response & DFIR Lead to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success.
 

Responsibilities

• Lead incident response, containment and forensic coordination for confirmed security incidents.
• Act as Incident Commander for major security incidents within the defined authority model.
• Assign incident roles and maintain clear ownership of investigation, containment and recovery actions.
• Maintain incident timelines, evidence logs, decision logs and action tracking.
• Coordinate investigation across endpoints, servers, identities, cloud platforms, SaaS environments and relevant network telemetry.
• Direct forensic collection and analysis required to determine attack path, scope, persistence and impact.
• Coordinate containment actions with IAM, Platform, IT, Security Engineering, Product and other technical owners.
• Recommend high-impact containment decisions to the Group Manager of Cyber Defense and CISO where required.
• Coordinate eradication and recovery activities and ensure systems return to a sufficiently trusted state.
• Ensure relevant evidence is preserved for Legal, HR, regulatory, disciplinary and post-incident requirements.
• Maintain practical forensic and evidence-handling standards.
• Develop and maintain incident playbooks, forensic checklists and containment procedures.
• Lead post-incident reviews and root-cause analysis.
• Ensure post-incident remediation actions have accountable owners, due dates and follow-up.
• Identify telemetry, detection and forensic-readiness gaps exposed during investigations.
• Convert investigation findings into recommendations for Detection Engineering, IAM, Security Engineering, Product Security and other control owners.
• Support incident exercises and readiness testing.
• Develop and mentor Incident Response / DFIR Specialists.
• Coordinate with external forensic, incident-response or specialist providers where required.
• Provide concise incident updates to Cyber Defense leadership, CISO and relevant stakeholders.
   

Requirements

• Strong hands-on knowledge of the incident response lifecycle: investigation, containment, eradication, recovery and lessons learned.
• Experience leading complex security incidents and coordinating multiple technical teams during active response.
• Practical experience investigating endpoint, identity, server, cloud or network compromise using EDR/XDR, SIEM and relevant audit logs.
• Ability to reconstruct attacker activity, including initial access, credential abuse, persistence, privilege escalation, lateral movement, data access and exfiltration.
• Working knowledge of digital forensics, evidence preservation, forensic timelines and chain-of-custody principles.
• Experience designing and validating containment actions such as endpoint isolation, account/session revocation, credential rotation, blocking indicators, network restrictions and service isolation.
• Experience with Microsoft Entra ID / Active Directory incident investigation.
• Understanding of common incident scenarios including ransomware, malware, phishing/BEC, account takeover, cloud/SaaS compromise, data exfiltration and insider misuse.
• Strong understanding of Windows, Linux, identity and enterprise networking from an investigation perspective.
• Ability to document technical findings, timelines, evidence, assumptions and containment recommendations clearly.
   

Will be a plus

• Hands-on experience with Cortex XDR, Elastic Security or equivalent enterprise platforms.
• Experience investigating AWS or other cloud environments.
• Experience with forensic tools such as Velociraptor, KAPE, Volatility, Autopsy, Magnet, EnCase, FTK or equivalent.
• Experience investigating ransomware, BEC, insider-threat or cloud-account-compromise cases.
• Experience developing or improving incident response playbooks and containment procedures.
• Experience running tabletop or cyber incident exercises.
• Experience working with Legal, Privacy, HR or regulators during security incidents.
• Experience managing external DFIR or incident-response retainers.
• Python, PowerShell or other scripting experience useful for investigation and evidence processing.
• Experience in fintech, payments, brokerage, trading, banking or another regulated environment.
• Relevant certifications such as GCIH, GCFA, GCFE, GNFA, OSCP, CISSP or equivalent (preferred, not mandatory).
   

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company's approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a Senior Compliance Manager who has personally built a compliance system, taken certifications through a successful audit, and kept them valid year after year. You will own the compliance and certification function across our healthcare products and our service organization — from certification strategy and policies to audits, corrective actions, and annual renewals. 

About the role: 

Langate is focused on the healthcare domain and develops its own healthcare products alongside its software development services. The company already holds ISO/IEC 27001 certification, confirmed at this year’s audit, and ISO 9001 certification is in progress — so you will not be starting from zero. We are now building a dedicated compliance function: about 70% of your time will go to certifying our healthcare products and about 30% to the company’s ongoing compliance processes and existing certificates. You will work closely with the manager who owns the compliance direction, with internal product owners, and with an experienced external audit partner the company has worked with for two years. 

Requirements:  

• Proven end-to-end experience building a compliance system and personally obtaining and maintaining certifications 
• Practical knowledge of ISO/IEC 27001 and ISO 9001, and a solid understanding of SOC 2, HIPAA, and GDPR 
• Strong expertise in policies, procedures, evidence and document control: approvals, signatures, versioning and review cycles 
• Systemic thinking: you define the right sequence, priorities, and dependencies and turn them into a realistic plan 
• Senior-level ownership and proactivity, strong attention to detail and confidence working with large volumes of documentation 

Will be a plus:  

• Experience in both product and service companies 
• Product certification experience 
• Exposure to the healthcare domain 
• Experience working with external auditors or certification partners 
• Practical use of AI tools or agents to automate compliance documentation work 

 
Responsibilities: 

• Assess the current state of compliance, identify gaps, and build a prioritized certification roadmap 
• Define the certification strategy and sequence for the company’s healthcare products and service organization 
• Write, update, and maintain policies and procedures; control document flow, approvals, signatures and versioning 
• Plan and run internal audits and prepare the company for external certification and surveillance audits 
• Manage audit findings and corrective actions through to verified closure 
• Keep existing certificates valid through annual audit cycles and renewals 
• Build a repeatable compliance approach that can be scaled across several products 
• Use AI tools and agents to analyze how new requirements affect policies, find documents that need updating or re-signing, and reduce manual work 
• Work with the external audit and certification partner 

We offer:  

• 20 working days of paid vacation per year 
• 7 paid sick days per year 
• Official Ukrainian public holidays are non-working days 
• Paid courses (50% compensation for an individual course once a year) and certifications 
• Corporate English lessons, including classes with a native speaker 
• Workshops and master classes 
• Coach and psychologist support 
• Online yoga classes with an instructor 
• Paid team-building events every two months 
• Mentoring programs 
• Medical insurance for employees in Ukraine 

Schedule: full-time, 5/2, 40 hours per week, working hours aligned with the Kyiv time zone (EEST). No dependency on US client hours. 

Why Choose Us? What Do We Offer that's Exceptional?    

1. Ownership and Real Impact: You will own the compliance and certification function end-to-end, with room to build and improve processes rather than only maintain paperwork. 
2. A Clear Healthcare Focus: The company concentrates on the healthcare domain instead of spreading across many industries, and your approach can be scaled across several products. 
3. AI-First Compliance: The company actively supports AI and agent automation to make compliance work faster and more reliable. 
4. Work-Life Balance with Benefits: We value work-life balance and offer paid vacation, paid sick leave, and official public holidays off. 
5. Investment in Your Growth: We're committed to your professional development. You can expect training programs, courses, and opportunities to enhance your English language skills.    
6. Team Building and Unity: We know that a happy team is a productive team. That's why we organize team-building events and group activities to foster strong bonds and a sense of belonging.    

When you choose us, you're choosing a company that values innovation, invests in its employees, and provides a supportive and engaging work environment. Join us in shaping the future of technology!  

Requirements:

• 3+ years in IT security and compliance
• Extensive, practice-based knowledge of security management frameworks, such as ISO 27k series, GDPR, SOC2 etc.;
• Proven track record of IT security audits/projects implementation
• Ability to develop information security policies, setup ISMS and guidelines, implement CIS20 and derive security requirements from them;
• Understanding access modelling. Ability to develop access models and assess them. Understanding of segregation of duties
• Experience in IAM & SSO solutions. Understanding of purpose and approaches of IAM. Knowledge of key tasks: identify, authenticate, and authorize
• Good knowledge of risk management, its purpose, and approaches. Ability to evaluate risks and create a risks management plan
• Understanding OWASP Top 10. Ability to describe vulnerabilities, ways of exploitations, and fix methods
• Understanding and implemented of vulnerability & patch management. Knowledge in vulnerability scanners. Ability to validate scan results and provide recommendations
• Ability to develop and conduct security trainings and workshops
• Good level of professional English
• Good communication skills, responsible, initiative, self-organized, eager to learn
• Experience in Secure SDLC or AWS Security would be a plus
   

Responsibilities:

• Conduct security audits and consulting projects,  create an action plan & practical roadmap based on the audit results
• Develop and enhance an information security management framework to ensure business sustainability
• Build and maintain compliance guidelines. Create policies and standards for IT security and compliance
• Conduct general IT security awareness training for the company staff
• Evaluate and manage corporate risks related to IT security
• Build and maintain application-specific threat models, explicitly apply security principles to design
• Participate in the corporate certification and compliance activities
• Design and implement security architecture and detailed cybersecurity designs together with IT and software development departments
• Prepare and document standard operating procedures and protocols
• Cooperation with Account Management, Sales & Marketing, Legal, Delivery and Clients for all security-related topics (audits, contractual compliance, reviews, risk assessments, etc.)
• Keeping up to date with developments in IT security standards and threats

We are looking for an experienced Information Security Specialist to join our team. This is a hands-on position for someone who enjoys investigating security events, improving security tools, and working closely with both technical teams and business users.
 

You will contribute to the full security lifecycle—from prevention and detection to incident response and vulnerability management. The role offers a broad range of responsibilities, opportunities to work with modern security technologies, and the possibility to influence how security services and processes develop within the organization.
 

Main responsibilities

• Operate, configure, maintain, and optimize security platforms used for prevention, detection, incident response, and vulnerability management;
• Provide day-to-day security support to IT teams and business users;
• Analyze email threats, investigate phishing attempts, and manage email security controls and quarantine processes;
• Monitor security events, analyze logs, and correlate information from different sources to identify and respond to threats;
• Investigate security incidents, alerts, and security-related requests reported by users;
• Develop and improve security policies, standards, procedures, and operational documentation;
• Create security awareness materials and deliver information security training sessions;
• Review technical solutions, system architectures, and third-party agreements to ensure they meet security, regulatory, and compliance requirements;
• Work with vendors, service providers, IT teams, and other stakeholders to support and improve security services and technologies;
• Support security assessments, audits, risk management activities, and compliance initiatives;
• Identify and recommend new technologies and improvements that can strengthen the organization’s security posture.

Must-have requirements

• At least three years of hands-on experience in information security or cybersecurity;
• Experience implementing, administering, or maintaining security solutions in production environments;
• Practical knowledge of Windows and Linux operating systems, TCP/IP networking, and common security technologies and protocols;
• Experience with enterprise security platforms in areas such as:
  • Security monitoring
  • Identity and access management
  • Endpoint protection
  • Data protection
  • Vulnerability management
• Experience supporting security services and working with IT teams and business users;
• Good understanding of cybersecurity threats, attack techniques, security controls, and security operations;
• Ability to analyze security events and support incident investigation and remediation;
• Ability to analyze logs, investigate alerts, and correlate events from multiple sources;
• Basic scripting skills in PowerShell and/or Bash;
• Working knowledge of SQL and willingness to learn technologies such as Kusto Query Language (KQL);
• Professional proficiency in Ukrainian and English at B2 level or higher;
• Strong communication, analytical, and problem-solving skills.

Nice to have

• A degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Industry certifications such as CompTIA Security+, CEH, CISSP, Microsoft SC-200, or Microsoft SC-300.
• Experience with Kusto Query Language and Python.
• Familiarity with cloud security, especially Microsoft Azure security services.
• Knowledge of Polish.

This position gives you the opportunity to work across several areas of cybersecurity instead of focusing on only one tool or process. You will take part in real security operations, collaborate with different teams, and help improve the organization’s overall security maturity.
 

If you are proactive, curious, and ready to take ownership of security topics, we would be happy to hear from you.

 

HighCraft is looking for an Application Security Engineer to assess a healthcare platform for practitioners and patients.

This is an ongoing remote, part-time contract, starting with a security assessment estimated at 40–60 hours. You will then provide security reviews and support as new features and integrations are developed.

What you will do

• Perform manual security assessments of web applications and APIs.
• Identify and validate vulnerabilities in authentication, access controls, business logic and data handling.
• Review security-sensitive changes and third-party integrations.
• Document findings with clear evidence, reproduction steps and practical remediation guidance.
• Work with developers to resolve security issues and retest fixes.

What we are looking for

• Hands-on experience independently testing authenticated web applications and APIs.
• Practical understanding of OWASP web and API security, authentication, authorization and multi-tenant applications.
• Ability to investigate and validate findings manually using HTTP requests and application behavior.
• Clear technical reporting and practical remediation guidance.
• Upper-Intermediate English (B2), with the ability to discuss findings with developers.

Experience with Burp Suite, .NET, Azure or healthcare systems is a plus.

To apply

Please include:

• Your relevant web/API security testing experience.
• Your expected hourly rate.
• Your weekly availability and earliest start date.
• A brief, anonymized example of a security issue you identified and how you documented it.

Our client is a leading financial institution focused on digital innovation and customer-centric solutions. You will join a cross-functional Agile squad working on the development of a new, cutting-edge banking product aimed at redefining the digital experience for millions of users. The team collaborates closely to deliver secure, scalable, and intuitive financial solutions powered by modern technologies.

Responsibilities:

• Breaking down high-level business requirements into clear, actionable tasks for the development team
• Overseeing the implementation of tasks and maintaining quality control throughout the development lifecycle
• Facilitating communication between customers and the technical team at all stages
• Maintaining comprehensive project documentation within Confluence
• Analyzing existing business processes to identify opportunities for automation and increased operational efficiency
•  

Requirements:

• 5+ years of commercial experience as a System/Business Analyst, demonstrating a clear Senior-level proficiency
• Proven track record in the development and deployment of WEB and Mobile products
• Exceptional ability to gather, structure, and document complex business requirements
• Ability to lead and monitor tasks from the initial requirement phase through to final product launch.
• Hands-on experience with BPMN and UML notations to map business processes and identify bottlenecks
• Practical experience in REST API design and a solid understanding of microservices architecture
• Experience working closely with UI/UX designers, Backend/Frontend developers, QA, and DevOps engineers
• Experience working with non-functional requirements (scalability, security, performance)

Requirements:

• Strong senior-level QA experience with a broad software testing background.
• Substantial hands-on penetration testing experience in real customer or production environments.
• Experience testing web applications and APIs, including common OWASP vulnerabilities.
• Ability to independently plan, execute, and document penetration tests.
• Ability to provide detailed reports with testing methodology, logs, evidence, reproduction steps, severity, and remediation recommendations.
• OSCP, OSCE, or a similar security certification is highly preferred.

We offer:

• Attractive financial package

• Challenging projects

• Professional & career growth

• Great atmosphere in a friendly small team

• Flexible working hours

We are looking for a hands-on Endpoint & Security Platforms Engineer to build and operate the controls that protect our employee devices and server workloads, working across the full lifecycle from deployment and hardening to troubleshooting, automation, and authorized containment.

This is a chance to influence technical decisions that improve protection without disrupting critical services, and to broaden your engineering skills through hands-on work with security platforms and automation. You will work closely with IT, Infrastructure, Cyber Defense, and data security colleagues to make protection reliable and effective without creating unnecessary friction for users or critical systems.
 

Responsibilities

• Deploy and maintain EDR/XDR agents and endpoint protection policies across Windows, Linux, and macOS workstations and production servers, managing the full agent lifecycle: upgrades, policy tuning, exclusions, and controlled rollback
• Resolve agent failures, telemetry gaps, policy conflicts, and performance issues. Coordinate deployments with IT, which provides first-line support, and take ownership of complex security cases
• Implement risk-based OS hardening baselines together with application and infrastructure owners: test compatibility, prepare rollback steps, and deploy changes safely across production systems
• Operate endpoint DLP controls: maintain agents, implement policies agreed with data security colleagues, and reduce unnecessary blocking without weakening protection
• Maintain assigned security platforms (e.g. SIEM), including service health, access configuration, updates, storage, backups, and recovery
• Monitor telemetry and control health, investigating stale agents, coverage gaps, and unmanaged systems, and drive fixes through automation and improved runbooks
• Support Cyber Defense investigations with endpoint expertise and execute approved containment actions, escalating anything that could disrupt production
• Automate recurring administration, validation, and reporting tasks using scripts and APIs, and maintain clear documentation for configurations and procedures

Requirements

• 4+ years of hands-on experience in endpoint security, infrastructure security, system security, or a related security engineering role
• Practical experience deploying and operating an enterprise EDR/XDR or endpoint protection platform across a mixed workstation and server environment
• Strong Linux administration skills, plus the ability to support and troubleshoot protection on Windows workstations and servers using logs, services, permissions, network connections, and resource usage
• Experience introducing security controls into production, including testing, controlled deployment, and rollback
• Experience implementing OS hardening and working with native security controls
• Understanding of access-control models, least privilege, endpoint telemetry, file-integrity monitoring, and host-isolation techniques
• Ability to automate operational work using at least one scripting language such as Python, Bash, or PowerShell
• Clear communication with technical colleagues and system owners, reliable documentation, and the ability to follow issues through to a verified result
• Upper-Intermediate English

Will be a plus

• Experience administering a self-managed Elastic or another SIEM platform
• Experience with endpoint DLP solutions or Microsoft Defender
• macOS security and device-management tools such as Mosyle, ManageEngine, Ansible, or Puppet
• Experience with CIS Benchmarks, DISA STIG, or native OS security controls (SELinux, AppArmor, FileVault, BitLocker, etc.)
• Experience supporting a large, distributed fleet of endpoints or servers, ideally in fintech, trading, or another performance-critical environment
• Technical education in Information Security, Computer Science, or a related field

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays according to the company’s approved holiday calendar
• Medical budget
• Remote work
• Professional education budget
• Language-learning budget
• Wellness budget covering gym membership, sports equipment, and related expenses

We're hiring a Cybersecurity Risk Manager to join a large-scale IT security programme for a major EU agency, delivered through a specialist staffing partner. This is a fully on-site role at the agency's headquarters in Warsaw (100% intra-muros), with no travel foreseen.

The role sits within a highly regulated environment, protecting critical assets and infrastructure, and requires a Personal Security Clearance at CONFIDENTIEL UE/EU CONFIDENTIAL level (screening initiated within the first 45 days of assignment).

Logistics

• Location: Warsaw, Poland - fully on-site, 100% intra-muros, no travel foreseen
• Engagement: framework contract, 12-month initial term with up to 3 annual renewals (up to 48 months total)
• Clearance: Personal Security Clearance required (CONFIDENTIEL UE/EU CONFIDENTIAL), to be initiated within the first 45 days
• Selection process: written test and interview

You'll own the organisation's cybersecurity risk-management lifecycle end to end - from asset inventory and threat/vulnerability assessment through to control design, monitoring, and executive reporting - helping keep risk within acceptable levels across the organisation's assets.

What you'll do

• Develop and maintain the organisation's cybersecurity risk-management strategy
• Manage the asset inventory
• Identify and assess cybersecurity threats and vulnerabilities
• Profile the threat landscape and attacker capability
• Assess risks and propose treatment options (controls, mitigation, avoidance) aligned to strategy
• Monitor control effectiveness and risk levels
• Keep risk within acceptable levels for the organisation's assets
• Develop, maintain, report, and communicate the full risk-management cycle

What you bring

• Strong background in risk assessment, risk-management framework implementation, and stakeholder risk communication
• 9+ years overall IT experience, with 6+ years in a similar risk-management role
• Level 7 education (Master's degree or higher)
• English at C1 level
• At least four of: CISA, CISM, CRISC, CISSP, CGRC, CSSLP, CCSP, CISSP-ISSMP, GSNA, GCCC, GIAC Certified ISO-27000 Specialist, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, ISO 27005 Risk Manager (or internationally recognised equivalents)
• Experience producing Business Impact Assessments; ServiceNow GRC risk-assessment module experience a plus
• Experience with personal data protection documentation, threat modelling (graphical and programmatic tools, including for DevOps), Zero Trust Architecture design, Secure SDLC, and Directory Services defence controls
• Comfortable presenting risk-informed recommendations to executives and stakeholders, and building an organisation-wide risk-aware culture

Cyber Harbor is a fast-growing Ukraine-based company founded by engineers and researchers who helped defend critical infrastructure during the war. Our work is shaped by real-world experience, and we build AI-powered systems designed for complex, high-stakes environments.

We are currently looking for a Cybersecurity Engineer who will help us design, implement, and maintain the security foundations of our data processing platforms and the infrastructure around them. This role combines practical security engineering with hands-on research and testing. You will help define internal security standards, protect critical infrastructure, and proactively identify weaknesses in our systems before they can be exploited.

We build complex AI systems that operate on large datasets in sensitive environments. Because of that, security is not just a compliance requirement for us - it is a core engineering discipline.

What You Will Do

• Design and implement cybersecurity policies and internal security standards.
• Help maintain visibility and control over company devices, servers, and infrastructure assets.
• Build and improve systems that help prevent data leaks and unauthorized access.
• Perform internal security assessments of our products, infrastructure, and services.
• Conduct regular internal penetration testing and security audits.
• Use tools such as Nmap, Nuclei, Metasploit, and other scanning frameworks to identify vulnerabilities.
• Investigate potential attack surfaces across APIs, web applications, internal services, and infrastructure.
• Work closely with engineering teams to identify and address security issues early in the development process.
• Help implement monitoring, logging, and detection mechanisms for suspicious activity.
• Document findings, propose mitigation strategies, and support teams in implementing fixes.

What You Need to Join Us

• Strong practical understanding of cybersecurity principles and modern attack vectors.
• Hands-on experience with security testing tools such as Nmap, Nuclei, Metasploit, or similar frameworks.
• Strong understanding of network security, web application security, and infrastructure security.
• Experience conducting penetration tests or security research.
• Familiarity with Linux systems and common server environments.
• Ability to analyze systems and identify weaknesses in architecture or implementation.
• Curiosity, persistence, and a strong desire to understand how systems fail.
• Ability to configure and maintain system-level firewalls (for example, iptables, nftables, or ufw) and enforce network-level access policies.
• Experience configuring and operating Web Application Firewalls (WAFs) such as Cloudflare WAF, ModSecurity, or similar solutions to protect APIs and web services.
• Strong practical understanding of how the Internet works, including DNS, TLS, HTTP, and common attack vectors affecting networked systems.
• Solid knowledge of networking fundamentals, including TCP/IP, routing, NAT, VLANs, and the OSI model.
• Ability to analyze traffic flows, understand how packets move through networks, and diagnose connectivity or security issues across different layers of the network stack.

Relevant certifications such as OSCP, CEH, Security+, or similar are welcome, but real-world experience and demonstrated skills matter more.

Who We Are Looking For

Not looking for someone whose experience is centered primarily on managing large security teams or producing compliance documentation.

Instead, we are looking for highly motivated engineers and curious security-minded builders who enjoy exploring systems, testing assumptions, finding weaknesses in creative ways, and building stronger defenses as a result. Unusual backgrounds, unconventional experience, and self-driven experimentation can be a better fit for this role than a traditional career path.

Why Join Us

• Work on real-world systems operating in high-stakes environments.
• Help secure AI platforms and data infrastructure used in complex operational scenarios.
• Military deferment is available for full-time employees.
• Flexible work format in a results-driven environment.

–––––––––––––––––––––––––––––––Рідною–––––––––––––––––––––––––––––––

Cyber Harbor - українська компанія, заснована інженерами та дослідниками, які брали участь у захисті критичної інфраструктури під час війни. Ми спираємося на реальний практичний досвід і створюємо AI-powered системи для складних середовищ, де помилка може мати високу ціну.

Зараз ми шукаємо Cybersecurity Engineer, який допоможе нам будувати, впроваджувати та підтримувати базові елементи безпеки наших платформ для обробки даних і пов’язаної з ними інфраструктури. Ця роль поєднує практичну security engineering роботу з hands-on дослідженням і тестуванням. Ви допомагатимете формувати внутрішні стандарти безпеки, захищати критичну інфраструктуру та проактивно виявляти слабкі місця в наших системах до того, як ними зможуть скористатися.

Ми створюємо складні AI systems, що працюють із великими обсягами даних у чутливих середовищах. Саме тому для нас безпека - це не просто вимога комплаєнсу, а повноцінна інженерна дисципліна.

Що ви будете робити

• Проєктувати та впроваджувати політики кібербезпеки й внутрішні стандарти безпеки.
• Допомагати підтримувати контроль і прозорість щодо корпоративних пристроїв, серверів та інфраструктурних активів.
• Будувати та вдосконалювати рішення, що знижують ризик витоку даних і несанкціонованого доступу.
• Проводити внутрішні security assessments наших продуктів, інфраструктури та сервісів.
• Регулярно проводити внутрішні penetration tests і security audits.
• Використовувати такі інструменти, як Nmap, Nuclei, Metasploit та інші scanning frameworks, для виявлення вразливостей.
• Аналізувати потенційні attack surfaces на рівні APIs, web applications, внутрішніх сервісів та інфраструктури.
• Тісно взаємодіяти з engineering teams, щоб виявляти й закривати security issues ще на ранніх етапах розробки.
• Допомагати впроваджувати механізми моніторингу, логування та виявлення підозрілої активності.
• Документувати результати, пропонувати mitigation strategies і допомагати командам впроваджувати необхідні виправлення.

Що нам важливо

• Сильне практичне розуміння принципів кібербезпеки та сучасних attack vectors.
• Hands-on досвід роботи з інструментами security testing, такими як Nmap, Nuclei, Metasploit або подібними frameworks.
• Сильне розуміння network security, web application security та infrastructure security.
• Досвід проведення penetration tests або security research.
• Знайомство з Linux-системами та типовими серверними середовищами.
• Вміння аналізувати системи та виявляти слабкі місця в архітектурі або реалізації.
• Допитливість, наполегливість і сильна внутрішня мотивація розуміти, як саме системи дають збій.
• Вміння налаштовувати та підтримувати system-level firewalls (наприклад, iptables, nftables або ufw) і забезпечувати мережеві політики доступу.
• Досвід налаштування та експлуатації Web Application Firewalls (WAFs), таких як Cloudflare WAF, ModSecurity або подібних рішень, для захисту APIs і web services.
• Сильне практичне розуміння того, як у реальності працює Інтернет, зокрема DNS, TLS, HTTP та типові attack vectors, що впливають на мережеві системи.
• Ґрунтовні знання мережевих основ, зокрема TCP/IP, routing, NAT, VLANs і моделі OSI.
• Вміння аналізувати traffic flows, розуміти, як пакети проходять через мережу, та діагностувати проблеми зі з’єднанням або безпекою на різних рівнях network stack.

Профільні сертифікації, такі як OSCP, CEH, Security+ або подібні, будуть плюсом, але для нас важливішими є реальний практичний досвід і підтверджені навички.

Кого ми шукаємо

Не шукаємо людину, чий досвід зосереджений переважно на управлінні великими security teams або підготовці compliance documentation.

Натомість ми шукаємо сильних, мотивованих інженерів і допитливих security-minded фахівців, яким цікаво досліджувати системи, перевіряти припущення, нестандартно шукати слабкі місця й на цій основі будувати сильніший захист. Незвичний бекграунд, нетиповий досвід і self-driven експерименти можуть підійти для цієї ролі краще, ніж класичний кар’єрний шлях.

Чому варто приєднатися

• Працювати з реальними системами, що функціонують у середовищах із високою ціною помилки.
• Допомагати захищати AI platforms та data infrastructure, які використовуються в складних операційних сценаріях.
• Бронювання доступне для full-time працівників.
• Гнучкий формат роботи в середовищі з фокусом на результат.

We’re hiring a hands-on Security Analyst for a payment-facilitator platform running on Microsoft Azure. This is a full-time role. You’ll own security operations and threat hunting end-to-end — no tiered SOC hand-offs — while working closely with the engineering team inside an active dev environment.

Core Responsibilities

• Monitoring, investigating, and responding to security events directly, without handing off to separate escalation tiers
• Threat hunt proactively across the environment
• Support the dev team day-to-day from a security/infra angle
• Handle Azure administration: configuration, access management, ongoing maintenance
• Manage identity & access (auth issues, access reviews, anomalous logins)
• Work through an existing backlog of security findings

Key Skills & Experience

• Strong hands-on Azure experience
• Solid systems administration background
• Generalist security analyst / threat-hunting experience
• Comfortable working inside a development environment — understands dev workflows, tooling, and how to support engineers
• A track record of owning incidents end-to-end

Nice to Have:

• Experience in healthcare, fintech, or other compliance-sensitive environments

What we offer:

• 18 working days of paid vacation a year
• Plus 3 days of additional vacation for childbirth and marriage
• 7 days of paid sick leave per year
• 7 public holidays off
• Corporate team-building events & celebrations
• English classes covered by the company
• Healthcare program
• Access to learning: internal/external, certification compensation
• Development roadmaps and plans to support your professional growth
• Regular performance reviews
• Full accounting support
• Participation in the IT Cluster

Iterasec works with clients worldwide, helping them find vulnerabilities and secure their products. Our projects range from mobile/web applications to complex modern cloud and automotive stacks. We work with both small product companies as well as Fortune 500 enterprises.

We are looking for a Middle/Senior Security Consultant / Penetration tester to work on and lead penetration testing and vulnerability/cloud security assessment projects.

In this role, you will work on technically challenging projects and also spend some time leading/mentoring our junior pentesting colleagues.

Required skills

- 1.5+ years of intensive commercial experience

- OSCP, eWPTx2 or similar would be a plus

- Scripting/coding skills and being comfortable with advanced pentesting tooling

- Strong knowledge of mobile/web security

- Comfortable with cloud and container security

- Basic RE skills

- Ability to mentor/lead colleagues

- Strong ability and drive to learn and develop cybersecurity skills

- Technical English (Intermediate+)

We offer

- Good salary + bonus system

- Diverse project portfolio and technologies to work with

- Rewarding environment: brilliant team ready to share knowledge and collaborate

- Courses and conferences which are relevant to the position are sponsored by the company.

- We are a remote-first company with full WFH support and a flexible work schedule.

Responsibilities

- Participate in various pentesting projects

- Lead junior colleagues

- Perform threat modeling in pentesting and security assessment projects

- Create assessment documentation and reports, clearly identifying vulnerabilities and associated remediation steps

- Consult clients on efficient issues remediation

- Conduct security researches

- Develop tools and scripts to automate and improve current pentesting processes