Jobs Security

Description

The overall project is designated for intelligent Fleet De-Carbonization based on an ambitious science-based idea targeting the achievement of net-zero emissions. The solution is planned to be a fully integrated software solution that can maximize efficiencies in both operational and energy supply management perspectives.

#LI-IN1

Requirements

Knowledge of secure architecture & secure design (e.g. Zero Trust)
Strong knowledge of cybersecurity processes – SSDF by NIST
Cross-team collaboration
Experience Azure cloud:
Azure Kubernetes security
Azure IdP (Entra & B2C)
Azure Pipelines
Experience with scanning tools : SonarCloud & Snyk
Vulnerabilities management
Secure architecture design best practices (e.g. Zero Trust)
Strong knowledge of secure design:
Data encryption
Data anonymization
Secure communication (HTTPS – TLS, PKI)
Identity and Access Management
Scripting experience (e.g. Bash, Python, PS)

Job responsibilities

Owning and maintaining security activities required by SSDF process
Reporting to stakeholders (Head of Engineering & CISO)
Collaboration with SOC, Development, architects team
Vulnerabilities management
Solution design and requirements creation
Supporting/advising development team in security challenges

RedCore is an international business group that creates technological solutions for digital markets. 

Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies.

Powering Growth from the Core — this is the key mission laid under RedCore’s strong foundation. This is how we consistently stay ahead: by evolving and creating scalable solutions, while remaining committed to open and transparent communication with our partners.

We’re looking for a sharp and driven Security specialist to join our team!

Requirements:

- Higher education in Law or Economics.
- At least 3 years of experience in HR/internal and economic security within private enterprises.
- Proven experience in background checks of individuals and legal entities.
- Previous experience in law enforcement is a strong advantage.
- Knowledge of security systems and protocols.
- Experience collaborating with polygraph specialists.
- Strong experience working with databases.
- Proficient PC user.
- Russian or Ukrainian language - C1 and above
- Fluent English, including spoken communication.
- Willingness to travel abroad to ensure security at exhibitions and conferences.

Responsibilities:

- Conduct regular risk assessments to identify vulnerabilities and threats affecting the holding’s assets.
- Respond promptly to security-related incidents, including investigation and corrective measures.
- Prepare security status reports, analyze incidents, and develop recommendations for improvement.
- Collaborate with other departments to integrate security considerations into business processes.
- Ensure protection of personal data (GDPR compliance) and trade secrets.
- Conduct background checks during recruitment and support exit processes.
- Organize security measures during corporate events, exhibitions, and conferences.

Our benefits to you:

- Modern corporate equipment based on macOS or Windows and additional equipment are provided;

- Paid vacations, sick leave, personal events days, days off;

- Referral program — enjoy cooperation with your colleagues and get the bonus;

- Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences;

- Rewards program for mentoring and coaching colleagues;

- In-house Travel Service;

- Multiple internal activities;

- Other benefits could be added based on your location.

We are inviting you, a highly motivated and results-oriented Security Manager (Hybrid Infrastructure) to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success.
 

Responsibilities

• Own and lead Hybrid Infrastructure Security across cloud, network, identity, endpoint, and data domains
• Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions
• Lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments
• Manage cloud IAM and security-group guardrails in close collaboration with Platform and SRE teams
• Operate and mature endpoint security (EDR/XDR/MDM) across managed devices, including hardening and telemetry health
• Own data security and cryptography controls: KMS, secrets management, PKI, and certificate lifecycle
• Lead, mentor, and develop a team of security engineers (4 direct reports — Cloud & Network, Endpoint, IAM, Data Security & Cryptography)

Track, analyze, and report enterprise security metrics

Requirements

• 5+ years of experience in managing and developing security teams
• Proven track record in hands-on cybersecurity engineering roles
• Enterprise-level background
• Practical experience with on-premises environments
• Solid experience with networking
• Hands-on experience with cloud platforms
• Broad experience across cloud posture, network, identity, endpoint, and data protection security domains
• Experience with CSPM/CNAPP/CWPP tooling and cloud guardrails (WAF, DNS security, IaC scanning)
• Experience with cloud IAM and security-group/IaC security patterns
• Experience operating EDR/XDR and MDM solutions
• Experience with KMS, secrets management, PKI, and certificate management
• Ability to enforce security controls without unnecessarily blocking delivery for Platform/SRE/DevOps teams
• Upper-Intermediate English and higher

Will be a plus

• Higher education in Computer Science, Information Security
• Background in fintech, brokerage, trading platforms, payments, or other regulated environments
• Track record of building or maturing an enterprise/cloud security function from an early stage
• Familiarity with tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk
• Knowledge of Kubernetes/container security and cloud-native architectures
• Exposure to SOC 2, ISO 27001, or DORA compliance frameworks
   

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Employment Type: Full-Time

Experience: 2–4 years

About the Role

We are looking for a GRC Analyst to join our Information Security and Compliance team. You will run day-to-day governance, risk and compliance activities — risk assessments, ISMS maintenance, audit evidence, and third-party security reviews — with senior support on the more complex work.

This is a hands-on delivery role rather than a first job in security. You should be comfortable running a vendor assessment or an evidence collection cycle without step-by-step direction.

Key Responsibilities

Governance & Policy

• Maintain the ISMS, control register and governance documentation.
• Draft and update security policies, standards and procedures.
• Coordinate security awareness activities and track governance actions.

Risk Management

• Run information security risk assessments and maintain the risk register.
• Track risk treatment plans and remediation through to closure.
• Manage the security exception process.

Compliance & Audit

• Support compliance activities across ISO/IEC 27001, SOC 2 and GDPR.
• Collect and organise audit evidence; act as a point of contact during internal and external audits.
• Track audit and assessment findings to closure.

Third-Party Risk

• Run vendor security assessments and review supplier questionnaires.
• Maintain supplier risk records and follow up on third-party remediation.

Reporting

• Produce monthly security and compliance reporting for management.
• Maintain compliance dashboards and documentation repositories.

What We’re Looking For

• 2–4 years in information security, risk, compliance, audit or IT governance.
• Practical working knowledge of at least one major framework (ISO 27001, SOC 2 or NIST CSF).
• Working understanding of GDPR and data protection obligations.
• Confident with Excel and structured documentation; able to produce reporting for a management audience.
• Strong written communication and attention to detail.
• Comfortable working with both technical and non-technical stakeholders.
• Degree in cyber security, computer science, IT or a related discipline — or equivalent practical experience.

Nice to Have

• Hands-on use of a GRC platform (Vanta, Drata, Hyperproof, OneTrust, ServiceNow GRC or Archer).
• Cloud security fundamentals (AWS or Azure), IAM and MFA concepts.
• Exposure to Cyber Essentials, CIS Controls or AI governance.
• Jira or Azure DevOps; Power BI or Excel dashboards.
• A certification such as ISC2 CC, CompTIA Security+, ISO 27001 Foundation / Lead Auditor or SC-900.
• German is a strong plus

What We Offer

• Ownership of real GRC workstreams across the full lifecycle.
• Mentorship from senior security professionals and support for certifications.
• Clear progression towards Senior GRC Analyst or Risk & Compliance Specialist.
• Collaborative and inclusive working environment.

Who We Are 

PAR Retail, with its Open Commerce® product suite and patent pending Wallet Steering® System, empowers Convenience & Fuel Retailers to gain more share of wallet and customer lifetime value than possible with any other solution provider. PAR Retail’s unified Open Commerce product suite consists of: Activate for Intelligent 1:1 Loyalty, Transact for Contactless Commerce, and Experience for Cross-Channel Customer Experiences. PAR Retail’s solutions are supported by a set of subscription-based program management services and are contractually backed by its 1.5X Performance Guarantee. 

Requirements:  
- Operational knowledge of modern operating systems and networking; 

- Experience with common cloud services: AWS, GCP, and Azure; 

- Network Security and expertise in network pentesting; 

- Security testing of web applications, web services, mobile apps (hybrid and native), and IT infrastructure; 

- Understanding security certifications (PCI DSS / SOC2); 

- Ability to apply modern Application Security methodologies and frameworks; 

- Ability to use at least one modern programming language; 

- Practical experience with Burp Suite; 

- Experience with IDS, IPS, SIEM configuration; 

- Upper-intermediate English level. 

Responsibilities:  

- Requirements analysis, performing penetration testing and security audit; 

- BE, WEB, cloud and mobile clients testing; 

- Vulnerability reporting and remediation process; 

- Communication with development and project management teams; 

- Prepare security testing reports; 

- Prepare and support internal documentation for the project. 

PAR Retail Offers: 

- Long-term employment; 

- Competitive compensation with regular performance-based salary and career development reviews; 

- Paid vacations and sick leaves; 

- Health insurance program; 

- Flexible working hours; 

- Sponsored company educational program, corporate library; 

- Funny celebrations, team outings, and company events; 

- A unique and friendly environment where everyone can explore and learn new technologies. 

Ajax Systems is an international technology company and the largest security systems manufacturer in Europe. Ajax products are trusted by more than 4.5 million end users and 330,000 PRO users across over 180 countries. The company offers comprehensive solutions for protecting residential and commercial properties of various sizes. Today, the Ajax portfolio includes 280 devices for intrusion protection, video surveillance, fire safety, and comfort and automation. Every year, we demonstrate exponential growth both in the size of our team and in the number of users worldwide.

Ajax Systems operates a full-cycle production model, from idea generation and prototyping to mass production and global sales. Each department fully covers a specific operational need of the business. The company’s specialists are involved at every stage — from the production line in Ukraine to the logistics center in Poland, from where products are shipped to distributors worldwide.

Now we are looking for a hands-on Cyber Security Specialist to strengthen our security posture and operational resilience. You will be at the forefront of our cybersecurity defense, responsible for incident monitoring and investigation, the deployment and improvement of security solutions, and ensuring our corporate processes and infrastructure meets compliance standards. If you are passionate about building secure systems, incidents investigation and translating technical findings into efficient mitigation actions, this role is for you.

Key Responsibilities:

• Security systems support and improvements: Participate in security architecture improvement, provide support for the full lifecycle of security systems — from design and deployment to enhancement and technical support.
• Security Monitoring & Incident Response: Improve security monitoring processes and practices, participate in security events monitoring and triaging detected events. Develop and refine SIEM detection rules, investigate anomalies and identify root-cause of incidents, develop and execute mitigation plans to neutralize threats.
• Conduction Security Assessments: Conduct technical security assessments of corporate IT systems to identify compliance deviations and vulnerabilities. Participate in risks assessments, mitigation measures design and implementation.
• Compliance & Governance: Participate in improvement of security procedures, policies, and operational instructions. Collaborate with stakeholders on security processes implementation and improvement to ensure readiness for external security audits (e.g., ISO 27001, SOC2).
• Consultancy & Support: Partner with internal teams to define security requirements for new systems and solutions, provide expert guidance on implementing security controls. Participate in security requests processing, security awareness trainings preparation and conduction.
• Reporting & Strategy: Participate in preparation of reports for management, definition and description of security strategy.

Required Technical Skills & Qualifications:

• Experience: 5+ years in CyberSecurity with a strong focus on SOC operations and security systems implementation.
• Core Proficiency: Hands-on experience with SIEM systems (Splunk/QRadar/Logsign/Wazuh), MDM solutions (Jamf/Crowdstrike/JumpCloud/Zoho), EDR/XDR solutions (SentinelOne/ESET/Defender), Cloud security monitoring (M365, GWS, AWS), and Firewall/WAF technologies (Cisco/PaloAlto/Fortinet/Ubiquiti).
• Domain Knowledge: Strong understanding of On-Premise and Cloud architectures, network security protocols, endpoint and application security. Practical experience in industry security best practices implementation (CIS, OWASP, NIST).
• Security assessment: Practical experience performing IT systems and application security assessments and reports preparation.
• Security governance: Experience in preparation of security reports, procedures and instructions for reporting. Practical knowledge of ISO 27001 technological controls implementation.
• Language Proficiency: Intermediate (B1-B2) English level required for working with technical documentation, cross-regional communication with colleagues and partners.

Preferred Skills & Certifications:

• Certifications: Vendor-specific security certifications (e.g., Google, MIcrosoft, Cisco, Palo Alto PCNSE, Fortinet NSE) are highly valued.
• Frameworks: Practical knowledge of ISO 27001 organizational controls implementation.

Why Join Us:

• Impact: Take ownership of security projects from concept to deployment.
• Culture: Work in a “zero bullshit” environment that values technical excellence and autonomy.
• Growth: Access to corporate English training and professional development/certification support.
• Health care: medical insurance.
• Beta Access: Get hands-on experience with new Ajax security systems before they reach the market.
• Innovation: Help shape the future of “Made in Ukraine” reliability.

Наш клієнт, Growe, провідна консалтингова компанія та група сервісів у сфері iGaming і розваг. Вони створюють стратегії, що працюють, та рішення, які масштабуються. 

Ідеально для тих, хто прагне:

• Розробляти та впроваджувати стандартизований процес аудиту доступів: методологію, частоту, збір доказів та шаблони звітності; 
• Визначати обсяг аудиту на основі ризиків та методологію вибірки, що підходять для великого, складного, багатосистемного ландшафту; 
• Проводити регулярні (планові/періодичні) та спеціальні аудити доступу в усьому середовищі, включаючи привілейовані та адміністративні облікові записи;
• Проводити аудит інструментів GCP IAM, LDAP та PAM на наявність застарілих облікових записів, надмірних дозволів, неправильних конфігурацій;
• Підготовлювати чіткі, готові до аудиту звіти та пакети доказів, придатні для внутрішнього перегляду та зовнішніх аудиторів;
• Відстежувати коригувальні дії разом з власниками систем та додатків до закриття, за потреби ескалюючи прострочені елементи; 
• Вести документацію та протоколи процесів для забезпечення повторюваності та безперервності; 
• Постійно вдосконалювати методологію аудиту на основі висновків, змін інструментів та вимог до відповідності.

Досвід, який стане твоєю перевагою:

• 2+ роки на посаді Access Specialist/IAM Auditor або аналогічній;
• Практичний досвід роботи з GCP/LDAP (ролі, дозволи, службові облікові записи, політики організації);
• Досвід роботи з інструментами керування привілейованим доступом (PAM) та аудитом привілейованих/адміністраторських облікових записів;
• Досвід проектування та побудови процесу аудиту доступу;
• Досвід роботи з інструментами IGA (наприклад, One Identity, Okta, Entra ID, Keycloak);
• Знання структур відповідності, таких як ISO 27001, SOC 2 та NIST;
• Середній рівень англійської або вище (розмовний та письмовий).

Ми цінуємо:

• Командну роботу та здатність підтримувати позитивну та конструктивну атмосферу в команді;
• Висока надійність та послідовність у виконанні роботи з високим стандартом точності та уваги до деталей;
• Самостійність, орієнтир на результат;
• Бажання зростати та лояльність до визнання помилок, навчання на них та впровадження коригувальних заходів для запобігання їх повторенню.

Наші клієнти пропонують конкурентні переваги для підтримки вашого професійного та особистого зростання, зокрема:

• Орієнтація на здоров’я та добробут;
• Глобальне медичне страхування;
• Можливості для зростання;
• Програми бенефітів (компенсація спорту / стоматології / психолога тощо);
• Бонуси за досягнення результатів;
• Динамічне робоче середовище.

English version:

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. 

Perfect for those who aim to:

• Design and establish a standardized access audit framework, including methodology, cadence, evidence collection, and reporting templates;
• Define risk-based audit scope and sampling methodology appropriate for a large, complex, multi-system landscape;
• Run regular (scheduled/periodic) and ad-hoc access audits across the environment, including privileged and administrative accounts;
• Audit GCP IAM, LDAP, and PAM tools for stale accounts, excessive permissions, orphaned access, and misconfigurations;
• Prepare clear, audit-ready reports and evidence packages suitable for internal review and external auditors;
• Track remediation actions with system and application owners through to closure, escalating overdue items as needed;
• Maintain audit documentation and process runbooks to ensure repeatability and continuity;
• Continuously refine the audit methodology based on findings, tooling changes, and evolving compliance requirements.
   

Experience you’ll need to bring:

• 2+ years in the position of Access Specialist/IAM Auditor or similar;
• Experience designing and building an access audit process from scratch;
• Experience with GCP/LDAP (roles, permissions, service accounts, org policies);
• Hands-on experience with Privileged Access Management (PAM) tools and privileged/admin account audits;
• Experience working across IGA tools (e.g., One Identity, Okta, Entra ID, Keycloak);
• Familiarity with compliance frameworks such as ISO 27001, SOC 2, and NIST;
• At least Intermediate level of English (written and spoken).

It's a perfect match if you have those personal features:

• Strong team-player orientation with the ability to maintain a positive and constructive atmosphere within the team;
• High reliability and consistency in delivering work to a high standard of accuracy and attention to detail;
• Self-dependent, result-oriented mindset; 
• A growth mindset - comfortable acknowledging mistakes, learning from them, and implementing corrective measures to prevent recurrence.

Our clients offer competitive benefits to support your professional and personal growth, including: 

• Health & Wellness Focus;
• Global Medical Coverage;
• Growth Opportunities;
• Benefits Programs (compensation for the gym/stomatology/psychological service & etc.);
• Performance-Driven Rewards;
• Dynamic Work Environment.

About the Role

We are looking for a skilled and practical Cybersecurity Specialist to protect our company's digital infrastructure, internal systems, data assets, cloud tools, websites, email accounts, and operational workflows.

The ideal candidate should be able to assess risks, identify vulnerabilities, secure accounts and systems, improve access controls, monitor threats, support compliance, and create clear cybersecurity processes for a growing analytics and technology-driven organization.
 

Key Responsibilities

• Assess the company's cybersecurity risks across internal systems, websites, cloud platforms, email, file storage, databases, and third-party tools.
• Implement and manage security best practices for Google Workspace, Microsoft 365, cloud services, websites, CRM systems, databases, automation tools, and internal dashboards.
• Set up and maintain strong access control, role-based permissions, password policies, MFA, account recovery procedures, and offboarding processes.
• Conduct vulnerability assessments, security audits, and risk reviews.
• Monitor potential threats, suspicious activity, unauthorized access attempts, phishing risks, malware, and data exposure.
• Support website, application, and infrastructure security, including SSL, DNS security, firewall settings, backups, and server hardening.
• Review and improve security for AI tools, automation workflows, API connections, shared documents, and data pipelines.
• Create cybersecurity policies, incident response procedures, security checklists, and internal documentation.
• Train team members on cybersecurity basics, phishing prevention, password security, data handling, and secure use of AI tools.
• Investigate security incidents and prepare remediation plans.
• Coordinate with IT, development, operations, legal, compliance, and management teams.
• Support compliance with relevant standards such as GDPR, ISO 27001, SOC 2, NIST, CIS Controls, or other applicable frameworks.
   

Required Skills & Experience

• Experience in cybersecurity, information security, IT security, cloud security, security operations, or similar role.
• Experience with Microsoft Azure cloud security is required (e.g., Azure AD/Entra ID, Azure Security Center, role-based access control, network security groups, Azure compliance tools).
• Strong understanding of cybersecurity fundamentals, including access control, MFA, phishing prevention, endpoint security, network security, vulnerability management, and incident response.
• Experience securing business systems such as Google Workspace, Microsoft 365, Slack, Notion, Airtable, CRM platforms, cloud storage, and collaboration tools.
• Knowledge of website and application security, including OWASP risks, SSL/TLS, DNS, firewalls, backups, and secure configuration.
• Experience with vulnerability scanning, risk assessment, security audits, and remediation planning.
• Ability to review user permissions, shared drives, admin access, API keys, integrations, and third-party apps.
• Understanding of data protection, privacy, and secure handling of confidential business information.
• Ability to write clear security documentation, policies, checklists, and incident reports.
• Strong attention to detail and ability to work independently.
   

Nice to Have

• Experience with ISO 27001, SOC 2, GDPR, NIST, CIS Controls, or other security/compliance frameworks.
• Experience with endpoint detection and response tools, SIEM platforms, VPNs, firewalls, password managers, MDM tools, and cloud security platforms.
• Experience with AWS, Google Cloud, Cloudflare, GitHub, Docker, databases, APIs, and automation platforms.
• Experience with penetration testing, red-team/blue-team exercises, phishing simulations, or social engineering defense.
• Experience securing AI workflows, LLM tools, automation systems, data pipelines, and research platforms.
• Relevant certifications such as Security+, CySA+, CISSP, CISM, CEH, OSCP, ISO 27001 Lead Implementer, Azure Security Engineer Associate (AZ-500), or similar.
• Experience with remote teams and international organizations.
   

Ideal Candidate Profile

The ideal candidate is practical, proactive, and security-minded without being overly bureaucratic. They can quickly identify the biggest risks, prioritize fixes, and implement realistic cybersecurity improvements.

They should be able to protect sensitive data, secure internal operations, educate the team, and build a strong cybersecurity foundation for a company working with analytics, research, AI tools, financial information, and strategic business intelligence.

Ми — українська IT/marketing group із 4+ роками досвіду в iGaming та командою 250+ спеціалістів.

Зараз розвиваємо власний iGaming-продукт для Tier-1 ринків. Core-команда вже сформована, технічний roadmap визначений, продукт перебуває в активній розробці.

Шукаємо Platform Security Engineer / DevSecOps, який допоможе побудувати security-підхід платформи з нуля.

Це hands-on роль, а не pure compliance і не позиція standalone pentester. Ти працюватимеш на стику Platform Engineering, Cloud Security та DevSecOps, безпосередньо взаємодіючи з DevOps/SRE та engineering-командами.

Що буде у твоїй зоні відповідальності

Platform Engineering

• Проєктування та підтримка AWS/Kubernetes-платформи.
• Infrastructure as Code, CI/CD, environments, secrets, deployment workflows.
• Reliability, observability, scalability, backup/recovery та production readiness.
• Incident response, root-cause analysis та platform on-call.
• Створення reusable-рішень і стандартів для engineering-команд.

Security Engineering

• AWS та Kubernetes security baseline: IAM, network boundaries, secrets, audit logging, container security, privileged access.
• Інтеграція SAST, SCA, secret scanning, IaC scanning, container scanning та policy gates у CI/CD.
• Threat modelling для authentication, wallet/ledger, payments, game-provider integrations, callbacks та backoffice.
• Впровадження security-вимог на базі OWASP ASVS.
• Vulnerability management, remediation SLA та retesting.
• Security monitoring, detection logic та incident playbooks.
• Координація зовнішніх penetration tests і контроль remediation.

Purple Teaming & Automation

• ATT&CK-based adversary emulation та purple-team сценарії.
• Робота з MITRE CALDERA, Atomic Red Team та іншими security tools.
• Співпраця із Security Champions та engineering-командою.
• Участь у створенні внутрішньої AI-assisted security platform для threat modelling, control mapping, evidence collection та remediation tracking.

Що ми очікуємо

• 3+ роки комерційного досвіду в DevOps / Platform Engineering / SRE / Cloud Security / DevSecOps.
• Hands-on досвід з AWS, Kubernetes, Docker, Linux, networking, Infrastructure as Code.
• Практичний досвід із CI/CD, observability, IAM, secrets management та incident response.
• Розуміння cloud, container, API та application security.
• Досвід security scanning та vulnerability management.
• Вміння читати код і розуміти архітектуру сервісів.
• Досвід взаємодії з backend/frontend engineers.
• Прагматичний підхід до security: вмієш балансувати між безпекою, швидкістю delivery та бізнес-ризиками.
• Українська або російська — обов’язково, англійська — робоча.

Буде плюсом

• Досвід в iGaming, fintech, payments або regulated/high-risk environments.
• Wallet/ledger, payment providers, game providers, KYC/AML, backoffice security.
• OWASP ASVS, MITRE ATT&CK, threat modelling, CALDERA, Atomic Red Team.
• Purple teaming, detection engineering, incident simulations або pentest remediation.
• Kafka/RabbitMQ, PostgreSQL, Redis, microservices, Node.js/NestJS.
• Досвід із AI-assisted engineering/security tools.
• AWS, Kubernetes або security certifications.

Що пропонуємо

🏠 Relocation

• Повна допомога з релокацією до Братислави.

🚀 Розвиток

• Щорічний бюджет на курси, сертифікації та конференції.
• Топове обладнання на твій вибір.
• Сучасний engineering stack та AI-assisted workflow.
• Реальний ownership над security roadmap.
• Можливість створювати власні внутрішні security-рішення.

🌴 Wellbeing

• 28 календарних днів оплачуваної відпустки.
• Оплачуваний вихідний у день народження.
• 100% оплачуваний лікарняний.
• Гнучкий hybrid-формат.

🤝 Команда

• Senior engineering-команда з високим рівнем ownership.
• Мінімум бюрократії та мікроменеджменту.
• Пряма взаємодія з CTO, Tech Leads, DevOps/SRE та Product.
• Значні ресурси на розвиток платформи та security.

💰 Компенсація: конкурентна, за результатами переговорів.

Чому ця роль?

Тут security — не формальність і не пункт у checklist перед релізом.

Ти приєднаєшся до створення платформи ще до її запуску, матимеш реальний вплив на архітектуру та engineering-процеси й зможеш побудувати security-функцію так, щоб вона працювала в реальному продукті.

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies. 

We are looking for a Security Engineer!

Requirements:

- 3+ years of experience in security coordination, product security, project management, technical delivery, GRC, compliance, or similar roles
- Experience working with software development teams
- Understanding of SDLC, release management, product delivery, and engineering workflows
- Basic understanding of application security, penetration testing, vulnerability management and secure development practices
- Experience working with regulated products, preferably in fintech, payments, banking, crypto, cards or PSP environments
- Ability to coordinate multiple stakeholders across product, engineering, security, and compliance teams
- Experience with Jira, Confluence, or similar task management and documentation tools
- Ability to turn unclear security needs into structured tasks, owners, deadlines, and next steps
- Good understanding of risk-based prioritization

Will be a plus:

- Experience with PCI DSS, ISO 27001, SOC 2 or other security/compliance frameworks
- Experience with card payments, issuing, acquiring, crypto payments, wallets, payment gateways or transaction monitoring
- Basic knowledge of cloud security, API security, authentication, authorization and data protection
 

Responsibilities:

- Act as the main security point of contact for the FinTech department
- Work as a bridge between FinTech product and engineering teams and the central Cybersecurity team
- Understand FinTech products, payment flows, crypto-related features, card payment solutions, integrations, APIs, and release plans
- Participate in product, engineering and delivery meetings to identify security needs early
- Coordinate security activities required for new features, releases, integrations, and product changes
- Create and manage requests to internal security teams, including Application Security, Penetration Testing, Cloud Security, GRC and Compliance
- Track security tasks from request creation to closure
- Ensure that security reviews, threat modeling, code reviews, penetration tests, and compliance checks are planned and completed on time
- Help prioritize security requests based on product risk, business impact, regulatory requirements and release timelines
- Coordinate remediation of security findings with product and engineering teams
- Maintain visibility of open security risks, blockers, dependencies, and deadlines
- Support preparation for audits, partner due diligence, compliance reviews and regulatory assessments
- Help translate security requirements into clear and practical actions for product and engineering teams
- Improve the security request process between FinTech and Cybersecurity teams
- Maintain dashboards, trackers, or reports for security delivery status
Escalate delays, ownership issues, and critical risks when needed
- Support the central Cybersecurity team with operational, coordination, or documentation tasks when capacity allows

Our benefits to you:
🍀 An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance, and more
🤝🏻 A great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset, is guaranteed
🧑🏻‍💻 Modern corporate equipment based on macOS or Windows, and additional equipment is provided
🏖️ Paid vacations, sick leave, personal event days, days off
💵 Referral program — enjoy cooperation with your colleagues and get a bonus
📚 Educational programs: regular internal training sessions, compensation for external education, attendance at specialized global conferences
🎯 Rewards program for mentoring and coaching colleagues
✈️ In-house Travel Service
🦄 Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie/book/pets lovers, and more
🎳 Other benefits could be added based on your location

We are looking for a Security Coordinator who will help us keep our company’s data, infrastructure, and SaaS ecosystem secure and well-governed.
 

This role focuses on access control, SaaS security, and risk management, ensuring that our systems are used safely and only by the people who actually need access.
 

Responsibilities

• Maintain a complete inventory of company systems and assets, including:
  • Cloud infrastructure
  • Databases
  • Google Workspace / shared drives
  • Internal tools
  • Third-party SaaS applications
  • AI tools used by the team
• Ensure proper access management across all systems:
  • Apply the principle of least privilege
  • Review and revoke unnecessary permissions
  • Monitor shared accounts and external access
• Conduct periodic access audits for:
  • Cloud environments
  • Databases
  • Google Drive and internal documentation
  • SaaS tools and integrations
• Identify and mitigate security risks related to AI tools, including:
  • Preventing sensitive data from being uploaded to AI platforms
  • Managing access to AI tools
  • Creating safe usage policies
• Work with engineering and operations teams to:
  • Improve security practices
  • Document access processes
  • Maintain internal security guidelines
• Track and manage security risks from third-party services
• Assist with security documentation and compliance processes (e.g., SOC2 or internal security policies).
   

Requirements

• Experience with cloud platforms (AWS, GCP, Azure, or similar)
• Familiarity with identity and access management concepts
• Experience managing SaaS ecosystems (Google Workspace, Slack, etc.)
• Understanding of data security risks and access control
• Ability to analyze system permissions and identify unnecessary access
• Awareness of AI-related security risks (data leakage, prompt injection, uncontrolled usage)
   

Nice to Have

• Experience with SOC 2 / security compliance
• Familiarity with IAM tools or security monitoring platforms
• Background in DevOps, IT administration, or security operations
   

What Success Looks Like

• All company systems are properly inventoried and documented
• Access is granted strictly on a need-to-know basis
• No forgotten accounts, open shares, or unnecessary privileges
• AI tools are used safely and responsibly

Job Description

Overall

4+ years in cybersecurity, security testing, or software engineering with a strong security focus
Structured, methodical approach to testing - able to plan and document, not just test ad-hoc
Good written English - reporting is a significant part of the role

Must have

Hands-on experience in vulnerability assessment and penetration testing (web, API, network, or infrastructure)
Secure code review experience
Solid coding skills (Python preferred) for automation, tooling and test scripts
Experience writing automated tests and building them into repeatable suites
Strong understanding of vulnerability classes (OWASP Top 10, CWE) and CVE/CVSS triage
Familiarity with standard security tooling (e.g. Burp Suite, Nmap, SAST/DAST scanners)

Nice to have

Experience applying AI/LLMs to security work - highly desirable
Vulnerability management processes and tooling
Cloud security (AWS/Azure/GCP) or OT/embedded/product security background
CI/CD security integration
Certifications: OSCP, CEH, CISSP, or similar

Job Responsibilities

Perform vulnerability assessments and penetration testing against applications, services and infrastructure
Conduct secure code and configuration reviews
Triage and validate findings; assess severity, eliminate false positives, support remediation
Write and maintain automated security tests and tooling
Design test plans, execute testing campaigns, document and report results
Evaluate AI-assisted approaches to security testing and help integrate what works into the workflow

Department/Project Description

An enterprise technology group is building a dedicated security validation team focused on vulnerability assessment and security testing across the group's products and systems. The team runs structured testing campaigns: penetration testing, vulnerability discovery and triage, secure code review, and building automated test suites to make the process repeatable at scale.

The team also gets early access to specialized AI models and evaluates how they can accelerate security testing - an area we're actively investing in, though the core of the work remains hands-on security engineering. Scope covers internal systems as well as business-unit products across the group, agreed campaign by campaign. The team starts small and scales into a permanent capability.

Skill Category

QA - Automation

Keyskills - Must Have

• Security
• Application Security
• Penetration Testing and Reporting

You will join a small, high-trust Cyber Security Engineering team responsible for strengthening the security posture of a modern, globally distributed technology environment.

This is a hands-on engineering role focused on application security, container security, and AI security. You will build automated security controls, guardrails, and real-time visibility that make the secure path the easiest path for engineering teams.

You’ll work closely with platform engineering, cloud infrastructure, identity, technology assurance, and security leadership teams. The role offers significant ownership and the opportunity to influence not only technical controls, but also security standards and governance decisions across the organization.

This is not a role focused on manually reviewing individual applications. You’ll be expected to build automated, scalable security solutions that enforce standards at the point of deployment and provide clear visibility into security risks across running environments.

What we’re looking for:

We need a technically strong security engineer who understands that security and developer experience should work together.

The ideal candidate:

• thinks in terms of automation, scalability, and enforceable controls rather than manual reviews;
• has strong hands-on experience with Kubernetes and container security;
• understands application security, software supply chain risks, and secure development practices;
• enjoys building security tooling, observability, and policy-as-code solutions;
• is actively using AI-assisted development tools in their own engineering workflow;
• has practical or growing experience with AI and LLM security;
• can communicate complex technical findings clearly to senior technical and security stakeholders;
• is comfortable working in a small, collaborative, high-trust environment;
• approaches security friction as an engineering problem to solve.

Responsibilities:

• Design and deploy automated security controls for Kubernetes and application deployments.
• Implement admission controllers, policy-as-code, and automated security scanning.
• Define and enforce container security standards, including image scanning, runtime baselines, and registry governance.
• Manage software supply chain security, including dependency scanning, SBOMs, build-time and runtime analysis.
• Build application security observability and dashboards that provide real-time visibility into deployed and running systems.
• Develop automated guardrails that enable teams to use AI coding tools securely without requiring manual security review for every use case.
• Own security configuration and controls for AI platforms, including access controls, data flows, hardening, and protection against prompt injection and data exfiltration.
• Assess security risks associated with AI tools, MCP connectors, APIs, and agentic systems.
• Define security and behavioural baselines for agentic execution environments.
• Collaborate with security and engineering teams on container runtime telemetry and monitoring.
• Work with identity and cloud security teams on workload access, service identity, and secrets management.
• Curate and automate internal security tooling with a focus on reliability, security, and operational efficiency.
• Contribute to security standards, technical controls, and governance decisions.
• Communicate security findings and recommendations to senior stakeholders.

Requirements:

• Proven hands-on experience with Kubernetes and container security.
• Experience with container image scanning, admission control, runtime protection, and policy-as-code.
• Experience building automated security controls that can scale across complex environments.
• Strong understanding of application security fundamentals, including OWASP Top 10 and secure software development practices.
• Experience with software supply chain security and dependency management.
• Experience building security visibility through instrumentation, runtime analysis, monitoring, or operational dashboards.
• Experience with CI/CD security and automated security checks.
• Active experience using AI-assisted development tools such as Claude Code, GitHub Copilot, or equivalent.
• Practical or growing knowledge of AI/LLM security, including prompt injection, data exfiltration, model/API security, or agentic system controls.
• Strong analytical and problem-solving skills.
• Ability to communicate complex technical security topics clearly and concisely to senior stakeholders.
• Advanced English.

Nice to have:

• Experience with security tools such as Aikido, CrowdStrike, Bold Security, Nightfall, Zscaler, or Lakera Guard.
• Experience with MCP (Model Context Protocol), agentic frameworks, or AI platform administration.
• Experience in private equity, FinTech, financial services, or other environments where protection of sensitive information is critical.
• Experience measuring and optimizing the operational cost of security controls.
• Experience working with local or open-source LLMs for automation and security use cases.
• Experience with Datadog or similar observability platforms.
• Experience with SBOM tooling and software composition analysis.
• Experience with cloud security and workload identity.
• Experience working with policy-as-code frameworks.

Tools you’ll work with:

Kubernetes, CI/CD platforms, SBOM tooling, Aikido, Claude Enterprise, Claude Code, MCP, CoWork, DTEX, Datadog, and policy-as-code frameworks.

The Defense Procurement Agency (DOT) is a national agency responsible for procuring ammunition, UAVs, military equipment, fuel, food, clothing, and other critical supplies for the Armed Forces of Ukraine and the Defense Forces.

Our mission: Strengthening Ukraine by ensuring reliable support for the Defense Forces while fostering the development of the national defense industry.

Our vision: To become the driving force behind the transformation of Ukraine's defense procurement ecosystem—not only operating the system, but continuously improving it.

We are looking for a Tech Lead / Senior DevSecOps to provide technical leadership to the Security Engineering team, develop information security architecture, implement security solutions across the Microsoft ecosystem, and integrate security requirements into infrastructure and software development processes.

Responsibilities

• Provide technical leadership to the Security Engineering team, including prioritizing and distributing tasks, mentoring team members, and ensuring the quality of implementation.
• Design and develop information security architecture and key cybersecurity capabilities, including Cloud Security, Identity & Access Management, Vulnerability Management, DevSecOps, and Incident Response.
• Implement, administer, and develop security services across the Microsoft security ecosystem.
• Conduct security reviews of infrastructure, CI/CD pipelines, and Infrastructure as Code (Terraform).
• Collaborate with Infrastructure, DevOps, and Software Engineering teams to integrate security requirements into architecture and development processes.
• Develop the AI Security function, including AI Security Proxy, AI Governance, DLP, monitoring, and auditing.
• Develop technical security standards, guidelines, recommendations, and information security documentation.

Requirements

• Bachelor's or Master's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 3+ years of experience in cybersecurity roles such as Security Engineer, Cloud Security Engineer, or DevSecOps Engineer, with hands-on experience in Azure Security and Microsoft Security.
• Hands-on experience securing cloud infrastructure in Microsoft Azure.
• Strong knowledge of Microsoft security services, including Defender XDR, Defender for Cloud, Sentinel, Intune, Entra ID, Purview, and related solutions.
• Experience building and developing Vulnerability Management processes.
• Strong understanding of modern DevSecOps practices, including CI/CD security, Infrastructure as Code (Terraform), SAST, DAST, Secret Scanning, and IaC Security.
• Hands-on experience securing containerized environments and Kubernetes.
• Experience with information security incident analysis and response.
• Previous technical leadership experience or strong Senior Security Engineer experience with the readiness to take on a Tech Lead role.

What We Offer

• Meaningful work that directly contributes to strengthening Ukraine's defense capabilities.
• Official employment with competitive salary and full social benefits.
• Professional development, learning opportunities, and career growth.
• Structured onboarding and dedicated mentorship.
• A collaborative, supportive, and mission-driven team.
• Modern office near the metro with reliable internet and equipped shelter.

By joining our team, you will contribute to one of Ukraine's largest digital transformation initiatives in the defense sector and help build the future of defense procurement.

Ready to make a real impact? We'd love to hear from you. Apply today!

* By submitting your CV, you consent to the processing of your personal data in accordance with applicable legislation.

** Due to the high volume of applications, only candidates whose qualifications best match the position will be contacted.

ABOUT FIRST CRYPTO EXCHANGE LLC

First Crypto Exchange LLC (FCE) is a digital asset trading platform enabling individuals and institutions to buy, sell, and manage cryptocurrencies securely and efficiently. FCE operates under a VARA license in Dubai, UAE.

FCE is building a trusted, well-governed exchange with strong market infrastructure, financial controls, regulatory compliance, and operational transparency.
 

JOB OVERVIEW

We are looking for a Platform & Security Operations Engineer to take ownership of FCE’s production infrastructure, Kubernetes environments, infrastructure automation, security monitoring, and incident response.

You will work closely with the CTO and a small, strong engineering team, with a high level of autonomy and direct influence on infrastructure and security architecture.

KEY RESPONSIBILITIES

• Own production infrastructure and Kubernetes clusters.
• Develop infrastructure using Terraform/Terragrunt, including network, data, and identity.
• Support and develop GitOps processes.
• Build and maintain security monitoring, including alerts, detection rules, and false-positive tuning.
• Develop incident runbooks and launch an on-call process.
• Respond to production and security incidents and conduct postmortems.
• Develop CI/CD and software supply-chain security.
• Set up scanning of dependencies and container images, as well as artifact signing.
• Formalize infrastructure standards, procedures, and processes.
• Prepare technical evidence for external audits.
   

QUALIFICATIONS & SKILLS

• Strong production experience with Kubernetes, including upgrades, workload identity, network policies, autoscaling, and incident investigation.
• Experience with Terraform and Terragrunt, Atlantis, or similar tools.
• Practical experience with GitOps, using Flux, Argo CD, or similar tools.
• Deep knowledge of AWS, including VPC, multi-AZ, KMS, OIDC federation, and DNS.
• Experience with external audits, such as ISO 27001, SOC 2, PCI DSS, HIPAA, or equivalent.
• Practical experience with security monitoring and detection engineering, including alerting, rule tuning, and reducing false positives.
• Experience working with production systems where failures or data leaks can have significant financial and regulatory consequences.
• Experience with AI development tools and understanding of the limitations of AI-generated code.
• English - C1 working proficiency; Russian - international team language.
   

WORKING CONDITIONS & BENEFITS

• Employment: Full-time, permanent contract
• Location: Dubai, UAE
• Work format: Hybrid, with regular presence in the office
• Reporting to: CTO
• Team: Small, strong engineering team
• Infrastructure: Modern cloud-native environment with no legacy
• Responsibility: High level of autonomy and influence on architectural decisions
• Compensation: Competitive compensation based on experience
• Vacation: 20 working days per year
• Sick Leave: 10 days per year
• Days Off: 5 days per year
• Public Holidays: 8-10 days per year, depending on the holiday calendar of different countries