Jobs Security

The platform continuously gathers cryptography-related information and surrounding context from a wide range of external systems - cloud providers, EDRs, vulnerability scanners, and more. We currently maintain around 20 integrations, and this number is growing quickly. We're looking for a technically curious, highly motivated person to own the research and verification side of these integrations: understanding what data each service exposes, how to access it, and how to keep our coverage current as these services evolve. This role suits someone early-to-mid in their career who enjoys digging into APIs, testing hypotheses hands-on, and mapping out how systems connect - with scope and ownership that can scale to the right person's experience level.

What you'll do:

• Continuously monitor our integrated third-party services (cloud providers, EDRs, vulnerability scanners, etc.) to understand what information is available and how it can be accessed - via APIs, licensing tiers, permissions, and other access methods.
• Actively connect to and verify these APIs hands-on: test endpoints, confirm data availability, and validate that integrations behave as expected.
• Identify and suggest which data from each service is most relevant and valuable for our platform to consume.
• Track changes across these services - new endpoints, deprecated features, updated licensing, and newly released functionality - and flag anything that affects our integrations.
• Document findings clearly so engineering and product teams can act on them.

• Research and evaluate new potential integrations as our coverage expands.

   

What we're looking for:

• Technical mindset with genuine curiosity about how systems and APIs work.
• Hands-on comfort with API tools such as Postman (or similar - Insomnia, curl, etc.).
• Basic programming/scripting ability (e.g. Python or JavaScript) - enough to test, parse responses, and automate small checks.
• Comfort reading API documentation and translating it into practical understanding.
• High motivation, self-direction, and the persistence to chase down how a given system actually works.

• Good written communication for documenting findings.

   

Nice to have: 

• Exposure to or interest in cybersecurity concepts (cryptography, vulnerability management, endpoint security).
• Familiarity with cloud provider APIs (AWS, Azure, GCP), EDR platforms, or vulnerability scanners.
• Understanding of authentication schemes (OAuth, API keys, tokens) and REST/JSON.
• Any experience with API testing, monitoring, or integration work.

Why this role:

• Broad exposure to a large and growing ecosystem of security and cloud tools.
• A clear technical growth path - toward integration engineering or a deeper cybersecurity specialization.

• Real ownership from day one - your research directly shapes what the platform can do.

   

Recruitment process:

• Screening call  (30 min)
• Technical Interview with R&D Manager (45 min)

• Interview with Product Manager (60 min)

   

Ідеально для тих, хто прагне:

• Підтримувати функцію DevSecOps (в security команді), визначаючи стратегію, дорожню карту, пріоритети та показники успіху;
• Оцінювати поточний стан безпеки програм, інфраструктури, хмарних середовищ та процесів розробки;
• Проектувати та впроваджувати засоби контролю безпеки протягом усього життєвого циклу розробки програмного забезпечення;
• Встановлювати та підтримувати безпечні практики CI/CD, включаючи шлюзи безпеки та автоматизовані процеси перевірки;
• Інтегрувати перевірки безпеки в інженерні робочі процеси з особливим акцентом на автоматизацію та досвід розробників;
• Створювати та керувати процесами управління вразливостями, включаючи сортування, визначення пріоритетів, відстеження виправлень та звітність;
• Визначати та впроваджувати стандарти хмарної безпеки та найкращі практики в середовищах AWS, Azure або GCP;
• Проектувати та впроваджувати засоби контролю безпеки Kubernetes та контейнерів, включаючи RBAC, управління секретами, сегментацію мережі та захисту під час виконання;
• Розробляти стандарти безпеки «інфраструктура як код» та засоби контролю «політика як код»;
• Інтегрувати журнали та події безпеки в SIEM для підтримки моніторингу, виявлення загроз та реагування на інциденти;
• Створювати стандарти безпеки, технічних інструкцій та операційних процедур для команд інженерів та платформ;
• Підтримувати розслідування інцидентів безпеки, пов'язаних з хмарою, інфраструктурою, CI/CD, вразливостями додатків, розкритими обліковими даними та загрозами ланцюга поставок.

Досвід, який стане твоєю перевагою:

• 2+ роки практичного досвіду в DevSecOps, Cloud/Platform Security, або Security Engineering;
• Досвід керівництва ініціативами, проектами або програмами безпеки зі значним рівнем ownership та автономією;
• Підтверджений досвід побудови процесів безпеки, інструментів або програм безпеки з нуля;
• Практичний досвід інтеграції засобів контролю безпеки в конвеєри CI/CD без негативного впливу на продуктивність інженерії;
• Досвід роботи з контейнерними середовищами та безпекою Kubernetes;
• Досвід роботи з хмарними платформами (AWS);
• Практичний досвід роботи з інструментами Infrastructure as Code, такими як Terraform, Helm або Ansible;
• Досвід інтеграції журналів та подій безпеки з платформами SIEM та підтримки випадків використання виявлення, моніторингу та реагування на інциденти;
• Здатність балансувати вимоги безпеки з бізнес-цілями та швидкістю інженерії;
• Досвід з Python буде плюсом;
• Англійська мова - Intermediate або вище.

Ми цінуємо:

• Хороші комунікативні навички;
• Багатозадачність, швидке виконання завдань;
• Відповідальність, увага до деталей.

Наші клієнти пропонують конкурентні переваги для підтримки вашого професійного та особистого зростання, зокрема:

• Орієнтація на здоров’я та добробут;
• Глобальне медичне страхування;
• Можливості для зростання;
• Програми бенефітів (компенсація спорту / стоматології / психолога тощо);
• Бонуси за досягнення результатів;
• Динамічне робоче середовище.

English version:

Perfect for those who aim to:

• Own the DevSecOps function (in the security team), defining strategy, roadmap, priorities, and success metrics;
• Assess the current security posture of applications, infrastructure, cloud environments, and development processes;
• Design and implement security controls across the software development lifecycle;
• Establish and maintain secure CI/CD practices, including security gates and automated validation processes;
• Integrate security checks into engineering workflows with a strong focus on automation and developer experience;
• Build and operate vulnerability management processes, including triage, prioritization, remediation tracking, and reporting;
• Define and implement cloud security standards, guardrails, and best practices across AWS, Azure, or GCP environments;
• Design and enforce Kubernetes and container security controls, including RBAC, secrets management, network segmentation, and runtime protection;
• Develop Infrastructure-as-Code security standards and policy-as-code controls;
• Integrate security logs and events into SIEM to support monitoring, threat detection, and incident response;
• Create security standards, technical guidelines, and operational procedures for Engineering and Platform teams;
• Support security incident investigations related to cloud, infrastructure, CI/CD, application vulnerabilities, exposed credentials, and supply-chain threats.

Experience you’ll need to bring:

• 2+ years of hands-on experience in DevSecOps, Cloud Security, or Security Engineering;
• Experience leading security initiatives, projects, or programs with significant ownership and autonomy;
• Proven experience building security processes, tooling, or security programs from scratch;
• Hands-on experience integrating security controls into CI/CD pipelines without negatively impacting engineering productivity;
• Experience with containerized environments and Kubernetes security;
• Experience working with cloud platforms (AWS);
• Practical experience with Infrastructure as Code tools such as Terraform, Helm, or Ansible;
• Experience integrating security logs and events with SIEM platforms and supporting detection, monitoring, and incident response use cases;
• Ability to balance security requirements with business objectives and engineering velocity;
• Experience with Python will be a plus;
• English - Intermediate+ or higher.

It's a perfect match if you have those personal features:

• Good communication skills;
• Multitasking, quick task execution;
• Responsibility, attention to detail.

Our clients offer competitive benefits to support your professional and personal growth, including: 

• Health & Wellness Focus;
• Global Medical Coverage;
• Growth Opportunities;
• Benefits Programs (compensation for the gym/stomatology/psychological service & etc.);
• Performance-Driven Rewards;
• Dynamic Work Environment.

We are looking for a strong Anti-Fraud specialist to join a new iGaming project at the pre-launch stage.
⭐ About BetVam

BetVam is a new licensed Ukrainian iGaming operator currently in the active launch phase and building its core business processes from the ground up.

We are creating a modern betting and casino platform focused on long-term growth, excellent customer experience, operational excellence, and full compliance within a regulated market.
♠️ Position Details

Location: Kyiv (Office / Hybrid)

Employment Type: Full-time

Start Date: ASAP

Project Stage: Pre-launch, Product Launch Phase
✅ Key Responsibilities

Monitor player activity, deposits, withdrawals, bonuses, payment transactions, and behavioral patterns to detect suspicious activity.
Investigate bonus abuse, multi-accounting, payment fraud, chargebacks, account takeovers, and other fraud cases.
Analyze user behavior, transaction history, device data, and payment patterns to identify risks.
Prepare case conclusions and recommendations: additional verification, payment holds, restrictions, or escalation.
Support the setup and improvement of fraud rules, alerts, monitoring workflows, and operational controls.
Work closely with Payments, AML, Compliance, Customer Support, Product, and Finance teams.
Track fraud trends, recurring abuse patterns, and emerging threats in iGaming.
Support fraud reporting, KPIs, and internal fraud awareness initiatives.

➡️ What Is Important to Us

2+ years of experience in Anti-Fraud, Fraud Prevention, Risk, Payment Risk, or a similar role, preferably in iGaming.
Understanding of sportsbook/casino fraud schemes, bonus abuse, multi-accounting, chargebacks, payment fraud, and account security risks.
Experience with fraud monitoring tools, anti-fraud systems, risk platforms, or transaction monitoring systems.
Strong analytical skills and ability to investigate complex cases using data.
Understanding of payments, PSPs, deposits, withdrawals, and chargeback processes.
Knowledge of AML, KYC, responsible gaming, and regulated gambling markets will be a plus.
Confident Excel / Google Sheets skills and experience with reporting tools.
Ability to make risk-based decisions in a fast-paced environment.
Strong communication skills and ability to work with cross-functional teams.

Who We Are Looking For

We are looking for a proactive and analytical Anti-Fraud Specialist who understands iGaming fraud risks and enjoys hands-on investigation work.

This role is a great fit for someone who wants to join a licensed Ukrainian iGaming project at the pre-launch stage, help shape anti-fraud processes from the beginning, and play a key role in building a secure and scalable product.

For our partner, we are looking for an Anti-Fraud  specialist 

Licensed iGaming Project | Pre-launch | Kyiv, Ukraine

About the Company

They are an international product company preparing to launch a licensed online casino for the Ukrainian market. Currently in the pre-launch phase, we are building a modern, technology-driven business focused on operational excellence, regulatory compliance, and long-term sustainable growth.

Our team brings together experienced professionals from the iGaming, IT, FinTech, Product, Compliance, and Operations domains, working collaboratively to build a scalable product that meets the highest industry standards.
✅ Key Responsibilities

Monitor player activity, deposits, withdrawals, bonuses, payment transactions, and behavioural patterns to detect suspicious activity.
Investigate bonus abuse, multi-accounting, payment fraud, chargebacks, account takeovers, and other fraud cases.
Analyze user behavior, transaction history, device data, and payment patterns to identify risks.
Prepare case conclusions and recommendations: additional verification, payment holds, restrictions, or escalation.
Support the setup and improvement of fraud rules, alerts, monitoring workflows, and operational controls.
Work closely with Payments, AML, Compliance, Customer Support, Product, and Finance teams.
Track fraud trends, recurring abuse patterns, and emerging threats in iGaming.
Support fraud reporting, KPIs, and internal fraud awareness initiatives.

➡️ What Is Important to Us

2+ years of experience in Anti-Fraud, Fraud Prevention, Risk, Payment Risk, or a similar role, preferably in iGaming.
Understanding of sportsbook/casino fraud schemes, bonus abuse, multi-accounting, chargebacks, payment fraud, and account security risks.
Experience with fraud monitoring tools, anti-fraud systems, risk platforms, or transaction monitoring systems.
Strong analytical skills and ability to investigate complex cases using data.
Understanding of payments, PSPs, deposits, withdrawals, and chargeback processes.
Knowledge of AML, KYC, responsible gaming, and regulated gambling markets will be a plus.
Confident Excel / Google Sheets skills and experience with reporting tools.
Ability to make risk-based decisions in a fast-paced environment.
Strong communication skills and ability to work with cross-functional teams.
English: Intermediate level is a bonus

Who We Are Looking For

We are looking for a proactive and analytical Anti-Fraud Specialist who understands iGaming fraud risks and enjoys hands-on investigation work.

This role is a great fit for someone who wants to join a licensed Ukrainian iGaming project at the pre-launch stage, help shape anti-fraud processes from the beginning, and play a key role in building a secure and scalable product.

Who We Are 

PAR Retail, with its Open Commerce® product suite and patent pending Wallet Steering® System, empowers Convenience & Fuel Retailers to gain more share of wallet and customer lifetime value than possible with any other solution provider. PAR Retail’s unified Open Commerce product suite consists of: Activate for Intelligent 1:1 Loyalty, Transact for Contactless Commerce, and Experience for Cross-Channel Customer Experiences. PAR Retail’s solutions are supported by a set of subscription-based program management services and are contractually backed by its 1.5X Performance Guarantee. 

Requirements:  
- Operational knowledge of modern operating systems and networking; 

- Experience with common cloud services: AWS, GCP, and Azure; 

- Network Security and expertise in network pentesting; 

- Security testing of web applications, web services, mobile apps (hybrid and native), and IT infrastructure; 

- Understanding security certifications (PCI DSS / SOC2); 

- Ability to apply modern Application Security methodologies and frameworks; 

- Ability to use at least one modern programming language; 

- Practical experience with Burp Suite; 

- Experience with IDS, IPS, SIEM configuration; 

- Upper-intermediate English level. 

Responsibilities:  

- Requirements analysis, performing penetration testing and security audit; 

- BE, WEB, cloud and mobile clients testing; 

- Vulnerability reporting and remediation process; 

- Communication with development and project management teams; 

- Prepare security testing reports; 

- Prepare and support internal documentation for the project. 

PAR Retail Offers: 

- Long-term employment; 

- Competitive compensation with regular performance-based salary and career development reviews; 

- Paid vacations and sick leaves; 

- Health insurance program; 

- Flexible working hours; 

- Sponsored company educational program, corporate library; 

- Funny celebrations, team outings, and company events; 

- A unique and friendly environment where everyone can explore and learn new technologies. 

Cloudfresh ⛅️ is a Global Google Cloud Premier Partner, Zendesk Premier Partner, Asana Solutions Partner, GitLab Select Partner, Hubspot Platinum Partner, Okta Activate Partner, and Microsoft Partner.

Since 2017, we’ve been specializing in the implementation, migration, integration, audit, administration, support, and training for top-tier cloud solutions. Our products focus on cutting-edge cloud computing, advanced location and mapping, seamless collaboration from anywhere, unparalleled customer service, and innovative DevSecOps.

We’re looking for a Google Cloud Security Engineer to harden client environments across GCP. You’ll implement and help design security controls, automate guardrails, improve detection & response, and guide stakeholders through pragmatic, risk-based decisions across EMEA.

Requirements:

• 3+ years proven, hands-on experience in a Security Engineer, SecOps (or similar) role.
• Strong knowledge of building and operating Security Porture, Edge protection, WAF, Endpoint security.
• Technical certifications related to CyberSecurity Google Cloud Solutions, Cloudflare and JumpCloud are an advantage.
• Experience of presentation, documentation.
• Excellent communication and strategic planning abilities, able to explain trade-offs, influence remediation, and drive adoption of guardrails.
• Basic scripting experience (e.g., Python, Bash, or gcloud CLI).
• Fluency in English.

Responsibilities:

• Design, implement, and operate security controls for internal needs and clients across.
• Perform cybersecurity audits.
• Configure and monitor Security Command Center, audit logs, and threat protection.
• Establish logging, detection and incident response.
• Assist clients with implementation of Cybersecurity products (Google Cloud Security Center, Google Workspace Security, Cloudflare, JumpCloud) and compliance controls.
• Generate security assessment reports and provide actionable recommendations.
• Continuously assess the landscape: track new Vendors features and update baselines to improve posture, reliability, and cost efficiency.

Work conditions:

• Competitive Salary & Transparent Motivation: Receive a competitive base salary with performance-based bonuses, providing clear financial rewards for your success.
• Flexible Work Format: Work remotely with flexible hours, allowing you to balance your professional and personal life efficiently.
• Training with Leading Cloud Products: Access in-depth training on cutting-edge cloud solutions, enhancing your expertise and equipping you with the tools to succeed in an ever-evolving industry.
• International Collaboration: Work alongside A-players and seasoned professionals in the cloud industry. Expand your expertise by engaging with international markets across the EMEA and CEE regions.
• Vibrant Team Environment: Be part of an innovative, dynamic team that fosters both personal and professional growth, creating opportunities for you to advance in your career.

When applying to this position, you consent to the processing of your personal data by CLOUDFRESH for the purposes necessary to conduct the recruitment process, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
Additionally, you agree that CLOUDFRESH may process your personal data for future recruitment processes. You can withdraw this consetn at any time.

We are looking for an Application Security Engineer to help build security into the software development lifecycle across our products and platforms.

In this role, you will work closely with Engineering, DevOps, Architecture, and Security teams to integrate security controls into development processes, identify risks early, and help teams build secure solutions without unnecessary bureaucracy.
 

Responsibilities

• Define and validate security requirements for applications, APIs, integrations, and new services.
• Participate in architecture and design reviews to identify security risks at early stages.
• Build and improve Secure Software Development Lifecycle (SSDLC) practices.
• Integrate security controls into CI/CD pipelines, including SAST, DAST, SCA, Secret Scanning, Container and IaC Scanning.
• Perform security assessments of web applications, APIs, backend services, and AI-driven solutions.
• Support development teams with remediation activities, secure coding practices, and security best practices.
• Develop security standards, baselines, templates, and engineering guidelines.
   

Requirements

• 2+ years of experience in Application Security, DevSecOps, Security Engineering, or a similar role.
• Strong understanding of SSDLC and secure development practices.
• Hands-on experience with SAST, DAST, SCA, threat modeling, and security reviews.
• Good knowledge of OWASP Top 10, OWASP ASVS, API Security, Authentication, Authorization, and Secure Design principles.
• Experience integrating security controls into CI/CD pipelines.
• Familiarity with container security and Kubernetes environments.
• Experience with Infrastructure as Code security (Terraform is a plus).
• Scripting skills in Python and/or PowerShell.
• Understanding of software supply chain security and dependency management.
• Strong communication skills and ability to work effectively with engineering teams.
   

Nice to Have

• Experience with Bug Bounty programs or CTFs.
• Experience securing AI/ML systems and services.
• Experience with Azure, AKS, GitHub Enterprise, Checkmarx, Trivy, or similar tooling.

We are looking for a Threat Intelligence Analyst to join our cybersecurity team and strengthen the company’s proactive defense capabilities.

This role combines cyber threat intelligence, proactive investigations, and risk-oriented analysis. We are looking for a specialist who can identify emerging threats, analyze attacker behavior and TTPs, assess their relevance to the business environment, and help improve the organization’s detection and response capabilities.

You will work closely with SOC, IT, and Risk Management teams to transform threat intelligence into actionable security insights and recommendations.
 

Responsibilities

• Collect, analyze, enrich, and contextualize cyber threat intelligence from multiple sources, including OSINT, CERTs, vendors, and industry feeds
• Monitor emerging threats, attacker activity, vulnerabilities, and adversary TTPs relevant to the organization
• Conduct proactive threat hunting activities across SIEM, EDR/XDR, cloud environments, and other telemetry sources
• Develop and validate hypotheses based on threat intelligence and behavioral patterns
• Support investigations related to incidents, suspicious activity, and threat intelligence findings
• Identify gaps in detection and response capabilities and provide recommendations for improvement
• Assess potential business impact and risk associated with identified threats
• Prepare analytical reports, threat assessments, and actionable recommendations for technical and non-technical stakeholders
• Collaborate with SOC and IT teams to improve detection logic, monitoring, and security processes
   

Requirements

• 2+ years of experience in Threat Intelligence, Threat Hunting, SOC L2/L3, DFIR, or Incident Response
• Strong understanding of MITRE ATT&CK framework
• Hands-on experience with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, etc.)
• Experience working with EDR/XDR solutions
• Understanding of cyber threat intelligence processes and proactive threat hunting methodologies
• Strong analytical and investigative skills
• Ability to work with incomplete or ambiguous information
• Understanding of security risks and attack vectors
• Strong communication skills and ability to explain technical findings clearly
   

Nice to have

• Experience with Purple Team activities
• Understanding of cloud security (Azure / AWS / GCP)
• Experience with KQL, Python, Sigma, or detection engineering
• Experience with threat modeling or risk management processes
• Familiarity with automation and detection-as-code approaches

Наш клієнт, Growe — провідна група з бізнес-консалтингу та сервісів у сфері iGaming та Entertainment. Компанія створює стратегії, які працюють, і рішення, що масштабуються. Поєднуючи стратегічне бачення з практичною експертизою, Growe допомагає бізнесам орієнтуватися у швидкозмінній індустрії, знаходити нові можливості, виходити на нові ринки та досягати сталого зростання.

Ідеально для тих, хто прагне:

• Адмініструвати та супроводжувати кінцеві пристрої під керуванням Windows, Linux, macOS, iOS та Android;
• Адмініструвати та супроводжувати платформи EDR/XDR
• Керувати процесами встановлення оновлень і усунення вразливостей на кінцевих пристроях Windows, Linux та macOS;
• Адмініструвати політики безпеки кінцевих пристроїв і забезпечувати їх відповідність корпоративним стандартам інформаційної безпеки;
• Брати участь у реагуванні на інциденти, пов'язані з кінцевими пристроями;
• Виявляти, аналізувати та усувати вразливості програмного забезпечення;
• Аналізувати та опрацьовувати сповіщення й ескалації, пов'язані з кінцевими пристроями;
• Проводити проактивний пошук загроз (threat hunting) на кінцевих пристроях;
• Розробляти та підтримувати правила виявлення на основі індикаторів компрометації (IoC) і технік атак;
• Адмініструвати DLP-агенти, включаючи їх розгортання, контроль покриття активів, аналіз та усунення несправностей;

• Впроваджувати та підтримувати заходи з посилення захисту (hardening) кінцевих пристроїв.

   

Досвід, який стане твоєю перевагою:

• Розуміння принципів роботи SIEM-, EDR-, XDR-рішень та засобів захисту кінцевих пристроїв;
• Обізнаність щодо актуальних кіберзагроз і сучасних тактик, технік та процедур зловмисників;
• Розуміння принципів роботи операційних систем Windows, Linux і macOS та їх внутрішньої архітектури;
• Участь у процесах реагування на кіберінциденти;
• Розуміння процесів встановлення оновлень, усунення вразливостей кінцевих пристроїв та життєвого циклу управління вразливостями;
• Розуміння принципів роботи MDM-рішень та використання їх для управління пристроями;
• Володіння щонайменше однією мовою програмування для автоматизації та написання скриптів (Python, C/C++, Go, Rust або іншою);

• Володіння Bash і PowerShell на належному рівні.

   

Ми цінуємо:

• Аналітичне мислення;
• Уважність до деталей;
• Проактивність і допитливість;
• Прагнення до безперервного професійного розвитку;
• Високий рівень доброчесності та вміння працювати з конфіденційною інформацією;
• Відмінні комунікаційні та дипломатичні навички.

Наші клієнти пропонують конкурентні переваги для підтримки вашого професійного та особистого зростання, зокрема:

• Орієнтація на здоров’я та добробут;
• Медичне страхування;
• Можливості для кар’єрного зростання;
• Пакет бенефітів (відшкодування витрат на спортзал, стоматологічні та психологічні послуги тощо);
• Бонусну систему на основі OKR;

• Динамічне робоче середовище.

   

Долучайся — і нехай твоя історія зростання розпочнеться.

English version:

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe helps businesses navigate the fast-evolving industry, seize new opportunities, enter new markets, and achieve sustainable growth. 

Perfect for those who aim to:

• Administer and maintain endpoints running Windows, Linux, macOS, iOS, and Android;
• Administer and maintain EDR/XDR platforms;
• Manage endpoint patching and remediation across Windows, Linux, and macOS;
• Administer endpoint security policies and ensure compliance with corporate security standards;
• Support endpoint-related incident response activities;
• Identify, assess, and remediate software vulnerabilities;
• Investigate and resolve endpoint-related security alerts and escalations;
• Conduct proactive endpoint threat hunting activities;
• Develop and maintain detection rules based on indicators of compromise (IoCs) and attack techniques;
• Administer DLP agents, including deployment, asset coverage monitoring, troubleshooting, and issue resolution;

• Implement and maintain endpoint hardening measures.

   

Experience you’ll need to bring: 

• Understand how SIEM, EDR, XDR, and endpoint protection solutions work;
• Stay up to date with emerging threats and adversary techniques;
• Understand Windows, Linux, and macOS operating systems and their internal architecture;
• Participate actively in incident response activities;
• Understand endpoint patching, vulnerability remediation, and the vulnerability management lifecycle;
• Understand how MDM solutions work and use them to manage endpoint devices;
• Demonstrate proficiency in at least one programming language for automation and scripting (Python, C/C++, Go, Rust, or similar);
• Demonstrate good knowledge of Bash and PowerShell.

It's a perfect match if you have those personal features: 

• Analytical mindset;
• Strong attention to detail;
• Proactive attitude and curiosity;
• Commitment to continuous learning;
• High integrity and discretion;
• Excellent communication and diplomatic skills.

Our clients offer competitive benefits to support your professional and personal growth, including: 

• Health & Wellness Focus; Global Medical Coverage; 
• Growth Opportunities; 
• Benefits Programs (compensation for the gym/stomatology/psychological service & etc.); 
• Performance-Driven Rewards; Dynamic Work Environment. 

Apply, and let your growth journey begin.

About the Role

We are looking for a Senior AI & Cloud Security Consultant to help design and assess secure, scalable cloud and AI solutions for enterprise environments.

You will play a key role in evaluating security risks, defining security architectures, and enabling the secure adoption of modern cloud services, Microsoft 365, Power Platform, and enterprise AI technologies, including LLMs and agentic AI.

This is a consulting role requiring both strong technical expertise and the ability to communicate security recommendations to business and technical stakeholders.

What You’ll Do

• Lead security risk assessments, threat modeling (e.g., STRIDE), and security reviews for cloud workloads, Microsoft 365, Power Platform, and AI solutions
• Design security architectures, controls, and governance for enterprise AI services, including agentic and autonomous AI
• Assess Microsoft 365 and Power Platform environments, including Copilot, Power Apps, Power Automate, connectors, and data governance
• Evaluate security risks related to LLMs, RAG implementations, AI agents, and autonomous systems
• Define technical and procedural controls to mitigate AI and cloud security risks
• Translate business requirements into clear security requirements and recommendations
• Collaborate with architects, IT teams, and business stakeholders to ensure secure and compliant cloud and AI adoption
• Produce security documentation, including risk assessments, security requirements, residual risk evaluations, and approval documentation
• Work independently while collaborating effectively within cross-functional teams

Requirements

• 7+ years of professional experience in Cybersecurity
• 4+ years of hands-on experience in Cloud Security
• 1+ year of hands-on experience in AI Security
• Demonstrated experience securing enterprise AI, LLMs, and agentic/autonomous AI solutions (Azure preferred)
• Strong knowledge of Microsoft 365 security and compliance, including:
  • Entra ID
  • Microsoft Defender
  • Microsoft Purview
  • Conditional Access
  • Data Protection
• Experience with Power Platform governance, including:
  • Environment strategy
  • Data Loss Prevention (DLP)
  • Connectors
  • Copilot Studio security
• Experience conducting threat modeling (e.g., STRIDE) and enterprise risk assessments
• Familiarity with security standards and frameworks such as ISO 27001, NIST, and CIS
• Strong understanding of cloud security and compliance best practices
• Excellent English communication skills (B2+)

Nice to Have

• Experience securing Azure AI services
• Experience with enterprise governance for Generative AI
• Knowledge of AI governance and responsible AI principles
• Experience in consulting or enterprise advisory roles
• Relevant cloud or security certifications (Microsoft, Azure, CISSP, CCSP, etc.)

What We’re Looking For

• Strong analytical and problem-solving skills
• Ability to communicate complex security concepts clearly
• Independent, proactive, and detail-oriented
• Comfortable working with both technical and business stakeholders
• Passion for helping organizations securely adopt modern AI technologies

If you’re passionate about AI security, cloud security, and helping enterprises adopt emerging technologies safely and securely, we’d love to hear from you.

We are looking for a Head of Security Business Partnering to drive the execution of the cybersecurity strategy across a diverse technology ecosystem.

Purpose of the role:

• You will coordinate Security Business Partners assigned to individual business units and ensure that security priorities are translated into clear roadmaps, measurable targets and completed actions.
• You will own the Security Business Partnering operating model, planning cycle and performance framework.
• You will establish governance, drive continuous improvement of interaction processes, and track security posture, risks and delivery across the ecosystem.
• You will resolve dependencies and escalate issues that require executive decisions. Central security teams will remain responsible for their domains.
• Your role is to align priorities, clarify ownership and ensure that agreed actions are delivered.
   

Key responsibilities:

• Coordinate and develop Security Business Partners across the business units.
• Set common responsibilities, working practices and performance expectations.
• Review the performance against agreed KPIs, objectives and delivery commitments.
• Turn the cybersecurity strategy into business-unit roadmaps, targets and delivery plans.
• Manage the security portfolio across the ecosystem, including strategic programmes, remediation plans, KPIs, OKRs and SLAs.
• Track delivery, address delays and require recovery plans when work falls behind.
• Escalate material risks, missed commitments and unclear ownership.
• Coordinate initiatives involving several business units or central security teams.
• Match business demand with the priorities and capacity of central security functions.
• Explain technical risks in terms of revenue, operations, customers, regulation and market expansion.
• Identify recurring problems that should be solved through shared capabilities, common standards or secure-by-default solutions.
• Support the security integration of acquired and newly established business units.

Required Experience:

• Management experience in cybersecurity within a complex technology organisation.
• Experience coordinating or functionally leading senior security professionals.
• Experience working across several business units or products in a matrix structure.
• Strong skills in security planning, governance and delivery management.
• A record of turning security strategy into measurable business-unit results.
• Experience managing security KPIs, OKRs, SLAs, roadmaps and remediation programmers.
• The ability to influence executives, align stakeholders and hold owners accountable.
• Strong performance-management and stakeholder-management skills.
• The ability to create structure and transparency where ownership is distributed.
   

Nice to have:

• Experience in iGaming, FinTech, or another highly regulated digital industry is an advantage.
• Experience with federated security models, M&A integration or executive governance is also valuable.

Role Overview

We are seeking a Project Coordinator and Communication Specialist to streamline the delivery of our enterprise AWS/Azure cloud migrations and security modernization initiatives. In this role, you will act as the operational engine and structural "glue" across highly technical streams. You will manage project tracking (schedules, deliverables, resource alignment) while translating dense architectural and cybersecurity initiatives into clear, impactful change-management communications for business stakeholders, executive leadership, and internal engineering teams.

Key Responsibilities

·         Project Coordination & Tracking: Maintain and update project backlogs, timelines, sprint schedules, and milestone tracking across concurrent cloud, SIEM, EDR, and vulnerability management deployments using enterprise tools (e.g., Jira, Confluence, MS Project).

·         Cross-Functional Liaison: Serve as the central communication conduit between highly technical Cloud Architects/SecOps engineers, the Security Operations Center (SOC), compliance/audit units, and business product owners.

·         Technical Copywriting & Translation: Translate complex technical documentation, cloud governance frameworks, and security incident metrics into crisp, accessible summaries, roadmaps, and executive-ready presentations.

·         Organizational Change & Awareness: Design and execute internal communication plans to champion cloud transformation, announce maintenance windows/migrations with zero business friction, and promote modern DevSecOps security practices across development teams.

·         Risk & Resource Tracking: Monitor day-to-day project dependencies, flag scheduling conflicts or resource constraints early, and assist technical leads in preparing status reports and KPIs for steering committees.

Required Skills & Qualifications

·         IT Project Delivery: 3+ years of experience coordinating IT projects, with a strong preference for candidates who have supported cloud infrastructure transformations or cybersecurity operations.

·         Exceptional Communication: Outstanding written and verbal communication skills. You must excel at synthesizing engineering data into non-technical language and building scannable, visual documentation.

·         Framework Familiarity: A solid conceptual understanding of cloud computing (AWS/Azure) and fundamental security landscapes (e.g., understanding the business purpose of SIEM, vulnerability management, or identity governance).

·         Agile/Tool Proficiency: High proficiency in Jira, Confluence, or similar project tracking suites, along with presentation tools like PowerPoint or Miro.

·         Detail-Oriented & Adaptive: Highly organized with a natural knack for tracking multiple moving pieces without dropping the ball, combined with the resilience required for fast-paced technology environments

Preferred Qualifications

·         CAPM (Certified Associate in Project Management) or PRINCE2 Foundation certification.

·         Professional Scrum Master (PSM I) or Agile Project Management (AgilePM) certifications.

·         Baseline technical certifications (e.g., AWS Cloud Practitioner or Microsoft Azure Fundamentals) are a major plus.

Role Overview

We are seeking a Cloud Architect with a deep specialization in Multi-Cloud Security Operations and Governance to secure our enterprise AWS and Azure footprints. This role focuses on moving beyond basic infrastructure design to build a resilient defense-in-depth architecture. You will be responsible for implementing automated compliance guardrails, integrating advanced security products (SIEM, EDR), and managing cloud-native vulnerability lifecycles. You will bridge the gap between cloud engineering and the Security Operations Center (SOC) to ensure our platforms are continuously monitored, defended, and compliant.

Key Responsibilities

·         Cloud Security Guardrails & Governance: Design and enforce automated security baselines and preventative guardrails across AWS and Azure using tools like AWS Organizations, Service Control Policies (SCPs), Azure Policy, and landing zones.

·         SIEM & Logging Engineering: Architect and optimize multi-cloud log aggregation strategies. Engineer seamless telemetry pipelines from AWS (CloudTrail, GuardDuty) and Azure (Activity Logs, Defender) into centralized SIEM platforms (e.g., Microsoft Sentinel, Splunk) for real-time correlation and alerting.

·         EDR & Workload Protection: Strategy and deployment oversight for Endpoint Detection and Response (EDR) and Cloud Workload Protection Platforms (CWPP) across multi-cloud virtual machines, containers, and serverless environments.

·         Vulnerability & Posture Management: Implement and manage Cloud Security Posture Management (CSPM) and Vulnerability Management workflows. Operationalize continuous scanning for misconfigurations, OS-level vulnerabilities, and container images, establishing automated remediation playbooks.

·         Identity & Access Security: Architect strict Zero-Trust frameworks, implementing robust Identity and Access Management (IAM) governance, Just-In-Time (JIT) access, and Privileged Access Management (PAM) integrations.

·         Security Product Integration: Evaluate, deploy, and manage specialized third-party cloud security products (e.g., CyberArk, Wiz, Palo Alto Prisma, CrowdStrike) to augment native cloud security controls.

Required Skills & Qualifications

·         Multi-Cloud Architecture: Deep architectural knowledge of security services and infrastructure configurations within both AWS and Azure.

·         SecOps Toolkit Expertise: Direct experience engineering and tuning enterprise SIEM solutions, deploying EDR/XDR agents at scale, and managing enterprise vulnerability scanning suites.

·         Automated Policy-as-Code: Strong proficiency in implementing cloud governance tools (Azure Policy, AWS Control Tower) and secure Infrastructure as Code (Terraform) utilizing static security analysis.

·         Threat & Incident Context: Solid understanding of modern attack vectors, the MITRE ATT&CK framework, and how cloud misconfigurations translate into operational security risks.

·         Collaboration: Ability to serve as the core technical liaison between Cloud Infrastructure teams, Compliance/Audit units, and the SOC.

Preferred Certifications

·         AWS Certified Security – Specialty / Certified Solutions Architect – Professional

·         Microsoft Certified: Azure Security Engineer Associate / Cybersecurity Architect Expert

·         CISSP (Certified Information Systems Security Professional) or CCSP (Certified Cloud Security Professional)

We are looking for a  DevSecOps Engineer to join our team and help maintain and improve a secure cloud infrastructure on AWS. Our applications run on Kubernetes (EKS), Cloudflare is used for edge protection, and Wazuh serves as our SIEM / HIDS platform.
 

This role is suited for an engineer with hands-on experience who will work within an existing architecture and established best practices, rather than owning the full system design.

Requirements:
AWS / Cloud

• 2+ years of commercial experience with AWS;
• Hands-on experience with EKS or other managed Kubernetes platforms;
• Basic understanding of IAM, VPC, Security Groups, and CloudWatch.

Kubernetes / Containers

• Experience with Kubernetes (deployments, services, ingress);
• Understanding of Kubernetes RBAC (ability to apply and maintain existing policies);
• Experience with Docker (building and running containers).

Security / Monitoring

• Experience with Wazuh or other SIEM / security monitoring solutions;
• Understanding of logging, alerting, and basic HIDS principles;
• Hands-on experience with Cloudflare (DNS, basic WAF configuration).

DevOps / Automation

• Experience with CI/CD tools (GitLab CI, GitHub Actions);
• Infrastructure as Code: Terraform;
• Bash or Python for basic automation tasks.

Networking

• Understanding of HTTP/S, DNS, and TLS;
• Basic knowledge of cloud networking concepts.

Responsibilities:

• Maintain and enhance CI/CD pipelines with integrated security checks;
• Support and operate Kubernetes clusters (AWS EKS);
• Configure and maintain Wazuh (agents, basic rules, alerts, dashboards);
• Support and optimize Cloudflare services (DNS, basic WAF rules, rate limiting);
• Deploy and update infrastructure using IaC (Terraform / CloudFormation);
• Manage access controls (AWS IAM, Kubernetes RBAC);
• Monitor logs and security alerts and participate in incident response;
• Apply basic hardening practices for containers and EKS nodes;
• Collaborate with development teams to ensure secure application deployments;
• Configure infrastructure according to CIS benchmarks.

Nice to Have:

• Experience with security scanning tools (Burp, Snyk, kube-bench);
• Familiarity with AWS Security Hub or GuardDuty;
• Basic understanding of Zero Trust principles;
• Experience with multi-account AWS environments;
• Exposure to security policies or compliance controls;
• Experience with ELK Stack.
   

What We Offer:

• Work in a team with established processes and mentoring;
• Clear growth path toward a Senior DevSecOps Engineer role;
• Modern cloud-native technology stack (AWS, Kubernetes, Terraform);
• Flexible work format (remote / hybrid);
• Competitive compensation based on experience

We are looking for a Senior Security Engineer with deep, hands-on Active Directory expertise to secure and harden enterprise identity infrastructure. You will own AD architecture, hybrid identity, and PKI across forests and domains, with a strong focus on security hardening and reducing attack surface. This is a senior, independent role — you should be comfortable owning identity security end-to-end with minimal ramp-up.

Details
Work setup: Remote/hybrid, with paid onsite visits to Baltic offices approximately once per month for 2–3 days
Location: Europe, strong preference for the Baltics
Duration: Long-term
Type of collaboration: Full-time employment
English: Upper-intermediate / fluent

About the role
You will be responsible for the design, hardening, and ongoing security of Active Directory environments — spanning forest and domain architecture, DNS, Group Policy, and replication. A core part of the role is reducing the identity attack surface: applying security hardening best practices, managing Kerberos configuration, and running Active Directory Certificate Services (PKI) securely. You will also work across hybrid identity, connecting on-prem AD with Microsoft Entra ID and ADFS, ensuring consistent security posture across both environments.

You have
Strong, hands-on experience with Active Directory architecture — forests, domains, trusts, and multi-domain environments
Deep knowledge of Windows Server, DNS, Group Policy, and AD replication
Proven experience with security hardening of AD environments and Kerberos
Hands-on experience with PKI and Active Directory Certificate Services (AD CS)
Experience with Microsoft Entra ID, hybrid identity, and ADFS
Upper-intermediate or fluent English

What to do
Design and maintain secure Active Directory forest and domain architecture
Harden AD environments against common attack paths (Kerberoasting, golden/silver ticket, DCSync, etc.)
Manage DNS, Group Policy, and AD replication across the environment
Administer and secure PKI infrastructure via Active Directory Certificate Services
Own hybrid identity integration between on-prem AD, Microsoft Entra ID, and ADFS
Audit and remediate security gaps across identity infrastructure