Jobs Security

Cloudfresh ⛅️ is a Global Google Cloud Premier Partner, Zendesk Premier Partner, Asana Solutions Partner, GitLab Select Partner, Hubspot Platinum Partner, Okta Activate Partner, and Microsoft Partner.

Since 2017, we’ve been specializing in the implementation, migration, integration, audit, administration, support, and training for top-tier cloud solutions. Our products focus on cutting-edge cloud computing, advanced location and mapping, seamless collaboration from anywhere, unparalleled customer service, and innovative DevSecOps.

We’re looking for a Google Cloud Security Engineer to harden client environments across GCP. You’ll implement and help design security controls, automate guardrails, improve detection & response, and guide stakeholders through pragmatic, risk-based decisions across EMEA.

Requirements:

• 3+ years proven, hands-on experience in a Security Engineer, SecOps (or similar) role.
• Strong knowledge of building and operating Security Porture, Edge protection, WAF, Endpoint security.
• Technical certifications related to CyberSecurity Google Cloud Solutions, Cloudflare and JumpCloud are an advantage.
• Experience of presentation, documentation.
• Excellent communication and strategic planning abilities, able to explain trade-offs, influence remediation, and drive adoption of guardrails.
• Basic scripting experience (e.g., Python, Bash, or gcloud CLI).
• Fluency in English.

Responsibilities:

• Design, implement, and operate security controls for internal needs and clients across.
• Perform cybersecurity audits.
• Configure and monitor Security Command Center, audit logs, and threat protection.
• Establish logging, detection and incident response.
• Assist clients with implementation of Cybersecurity products (Google Cloud Security Center, Google Workspace Security, Cloudflare, JumpCloud) and compliance controls.
• Generate security assessment reports and provide actionable recommendations.
• Continuously assess the landscape: track new Vendors features and update baselines to improve posture, reliability, and cost efficiency.

Work conditions:

• Competitive Salary & Transparent Motivation: Receive a competitive base salary with performance-based bonuses, providing clear financial rewards for your success.
• Flexible Work Format: Work remotely with flexible hours, allowing you to balance your professional and personal life efficiently.
• Training with Leading Cloud Products: Access in-depth training on cutting-edge cloud solutions, enhancing your expertise and equipping you with the tools to succeed in an ever-evolving industry.
• International Collaboration: Work alongside A-players and seasoned professionals in the cloud industry. Expand your expertise by engaging with international markets across the EMEA and CEE regions.
• Vibrant Team Environment: Be part of an innovative, dynamic team that fosters both personal and professional growth, creating opportunities for you to advance in your career.

When applying to this position, you consent to the processing of your personal data by CLOUDFRESH for the purposes necessary to conduct the recruitment process, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
Additionally, you agree that CLOUDFRESH may process your personal data for future recruitment processes. You can withdraw this consetn at any time.

Ідеально для тих, хто прагне:

• Створювати та контролювати функцію DevSecOps з нуля, визначаючи стратегію, дорожню карту, пріоритети та показники успіху;
• Оцінювати поточний стан безпеки програм, інфраструктури, хмарних середовищ та процесів розробки;
• Проектувати та впроваджувати засоби контролю безпеки протягом усього життєвого циклу розробки програмного забезпечення;
• Встановлювати та підтримувати безпечні практики CI/CD, включаючи шлюзи безпеки та автоматизовані процеси перевірки;
• Інтегрувати перевірки безпеки в інженерні робочі процеси з особливим акцентом на автоматизацію та досвід розробників;
• Створювати та керувати процесами управління вразливостями, включаючи сортування, визначення пріоритетів, відстеження виправлень та звітність;
• Визначати та впроваджувати стандарти хмарної безпеки та найкращі практики в середовищах AWS, Azure або GCP;
• Проектувати та впроваджувати засоби контролю безпеки Kubernetes та контейнерів, включаючи RBAC, управління секретами, сегментацію мережі та захисту під час виконання;
• Розробляти стандарти безпеки «інфраструктура як код» та засоби контролю «політика як код»;
• Інтегрувати журнали та події безпеки в SIEM для підтримки моніторингу, виявлення загроз та реагування на інциденти;
• Створювати стандарти безпеки, технічних інструкцій та операційних процедур для команд інженерів та платформ;
• Підтримувати розслідування інцидентів безпеки, пов'язаних з хмарою, інфраструктурою, CI/CD, вразливостями додатків, розкритими обліковими даними та загрозами ланцюга поставок.

Досвід, який стане твоєю перевагою:

• 2+ роки практичного досвіду в DevSecOps, Cloud Security, або Security Engineering;
• Досвід керівництва ініціативами, проектами або програмами безпеки зі значним рівнем ownership та автономією;
• Підтверджений досвід побудови процесів безпеки, інструментів або програм безпеки з нуля;
• Практичний досвід інтеграції засобів контролю безпеки в конвеєри CI/CD без негативного впливу на продуктивність інженерії;
• Досвід роботи з контейнерними середовищами та безпекою Kubernetes;
• Досвід роботи з хмарними платформами, такими як AWS, Azure або GCP;
• Практичний досвід роботи з інструментами Infrastructure as Code, такими як Terraform, Helm або Ansible;
• Досвід інтеграції журналів та подій безпеки з платформами SIEM та підтримки випадків використання виявлення, моніторингу та реагування на інциденти;
• Здатність балансувати вимоги безпеки з бізнес-цілями та швидкістю інженерії;
• Англійська мова - Intermediate або вище.

Ми цінуємо:

• Хороші комунікативні навички;
• Багатозадачність, швидке виконання завдань;
• Відповідальність, увага до деталей.

Наші клієнти пропонують конкурентні переваги для підтримки вашого професійного та особистого зростання, зокрема:

• Орієнтація на здоров’я та добробут;
• Глобальне медичне страхування;
• Можливості для зростання;
• Програми бенефітів (компенсація спорту / стоматології / психолога тощо);
• Бонуси за досягнення результатів;
• Динамічне робоче середовище.

English version:

Perfect for those who aim to:

• Build and own the DevSecOps function from the ground up, defining strategy, roadmap, priorities, and success metrics;
• Assess the current security posture of applications, infrastructure, cloud environments, and development processes;
• Design and implement security controls across the software development lifecycle;
• Establish and maintain secure CI/CD practices, including security gates and automated validation processes;
• Integrate security checks into engineering workflows with a strong focus on automation and developer experience;
• Build and operate vulnerability management processes, including triage, prioritization, remediation tracking, and reporting;
• Define and implement cloud security standards, guardrails, and best practices across AWS, Azure, or GCP environments;
• Design and enforce Kubernetes and container security controls, including RBAC, secrets management, network segmentation, and runtime protection;
• Develop Infrastructure-as-Code security standards and policy-as-code controls;
• Integrate security logs and events into SIEM to support monitoring, threat detection, and incident response;
• Create security standards, technical guidelines, and operational procedures for Engineering and Platform teams;
• Support security incident investigations related to cloud, infrastructure, CI/CD, application vulnerabilities, exposed credentials, and supply-chain threats.

Experience you’ll need to bring:

• 2+ years of hands-on experience in DevSecOps, Cloud Security, or Security Engineering;
• Experience leading security initiatives, projects, or programs with significant ownership and autonomy;
• Proven experience building security processes, tooling, or security programs from scratch;
• Hands-on experience integrating security controls into CI/CD pipelines without negatively impacting engineering productivity;
• Experience with containerized environments and Kubernetes security;
• Experience working with cloud platforms such as AWS, Azure, or GCP;
• Practical experience with Infrastructure as Code tools such as Terraform, Helm, or Ansible;
• Experience integrating security logs and events with SIEM platforms and supporting detection, monitoring, and incident response use cases;
• Ability to balance security requirements with business objectives and engineering velocity;
• English - Intermediate+ or higher.

It's a perfect match if you have those personal features:

• Good communication skills;
• Multitasking, quick task execution;
• Responsibility, attention to detail.

Our clients offer competitive benefits to support your professional and personal growth, including: 

• Health & Wellness Focus;
• Global Medical Coverage;
• Growth Opportunities;
• Benefits Programs (compensation for the gym/stomatology/psychological service & etc.);
• Performance-Driven Rewards;
• Dynamic Work Environment.

About the Role

We are looking for a highly skilled and strategic Senior DevSecOps Engineer to lead our security operations and infrastructure automation initiatives. In this role, you will bridge the gap between development, security, and operations, ensuring our on-premise environment remains secure, resilient, and efficient.
You will act as a subject matter expert, leveraging cutting-edge tools like CrowdStrike to automate threat detection and response, while maintaining robust perimeter security via Cloudflare.

Key Responsibilities
Implementation and automation of security tools in the CI/CD process (SAST, DAST, SCA).
Analysis of vulnerabilities in code, infrastructure and containers.
Development and configuration of security monitoring systems, incident response.
Monitoring and improving the security level of on-prem infrastructures.
Interaction with developers, DevOps and security teams to implement secure practices.
Active participation in the processes of IAM configuration, management of certificates, secrets and access policies.
Conducting internal security audits, participation in external (e.g. penetration) tests.

Requirements

Must-have:
Experience: 5+ years of experience in DevSecOps, Security Engineering, or a related field, with at least 2 years in a Senior role.
Tooling Expertise: Deep hands-on experience with the following specific tools:
Baremetal/on-premise infrastructure
Docker (Docker Swarm is a strong plus)
Gitlab CI 
CrowdStrike
Cloudflare
ELK.
SIEM Proficiency: Proven experience deploying and tuning SIEM solutions (e.g., Splunk, Elastic Security, Datadog, or similar).
Infrastructure: Strong background in managing on-premise infrastructure (physical servers, data centers, virtualization, networking).
Scripting: Proficiency in Python, Go, or Bash for automation and tooling.

Nice-to-have:
Experience with Kubernetes and such tools as Wiz.io and Torq.
Previous involvement in high-load, regulated, or 24/7 production environments (e.g., iGaming, FinTech, telecom or similar).

We offer
Fully remote work opportunity
Enhanced leave benefits:
20 days of paid vacation
5 paid days off
14 paid sick leaves
Company clubs & communities
Celebration gifts for personal milestones
Corporate online events, raffles & challenges
Corporate English program
Corporate yoga classes
Team-building activities
Coworking compensation
Training and development programs (internal & external).

About the Role

Ready to shape the security posture of high-scale cloud environments from the ground up? We are seeking a talented DevSecOps Engineer to drive our security roadmap, automate pipelines, and embed a robust security culture directly within our engineering ecosystem. This is a fully on-site opportunity designed for a technical professional who thrives on real-time collaboration, immediate impact, and working side-by-side with world-class engineering teams.

About the Client

Our partner is a tech company building product engineering across Fintech, iGaming, and Marketing. They turn innovative ideas into high-performing engines and launch them at scale. As their exclusive recruitment partner, we manage their full-cycle talent acquisition.

Responsibilities:
✔️ Develop direction, create a roadmap and improve the DevSecOps culture in the company. 
✔️ Help DevOps with secure Istio and ServiceMesh setup, Kubernetes (EKS) security setup. 
✔️ Interaction with DevOps, transfer of services for their support and training in security principles. 
✔️ Implementation of OPA and virtualisation configuration security analysers. 
✔️ Setting up CI/CD security and improving the security of solutions that use DevOps - Terraform, Ansible, etc.
✔️ Implementing Security Scanners in Pipelines. 
✔️ Automation of security processes. 

Requirements:
✔️ Knowledge of the basic principles of DevOps approaches (CI /CD). 
✔️ Experience with Kubernetes or other orchestration tools. 
✔️ Experience with Ansible/Terraform/Chef configuration management systems, etc.
✔️ Experience in web server and database administration. 
✔️ Knowledge of the TCP/IP protocol stack and understanding of the OSI model. 
✔️ Understanding the principles of microservice application architecture. 
✔️ Experience with version control systems. 
✔️ Cloud experience (AWS, GCP) Security. 
✔️ Experience in infrastructure analysis for information security risks and their elimination / mitigation. 
✔️ Experience in automating management processes and access control. 
✔️ Experience in implementing Vault management systems and privileged user control systems. 
✔️ Experience with Security scanners and implementation of their pipelines. 
✔️ Understanding SSDLC (OSAMMv2) principles. 

Benefits: 

• Comprehensive Health: Full medical insurance for you and your partner, plus a dedicated sports package to support a healthy, active lifestyle.
• Work-Life Balance: 20 working days of paid annual vacation alongside 6 fully paid sick days.
• Continuous Learning: Partial financial compensation for language courses to help you continuously level up.
• Milestone Celebrations: Special company gifts to celebrate your major life events (birthdays, weddings, and newborns).
• Vibrant Culture: Unforgettable team-building activities, local corporate events, and exclusive international company parties.

Are you a cybersecurity champion who thrives on embedding "secure by design" principles into cutting-edge cloud infrastructure and microservices? We are looking for a Senior Application Security Engineer to act as a trusted advisor, driving the evolution of secure product engineering from legacy data centers to AWS. If you want to own threat modeling automation, champion supply chain security, and influence engineering roadmaps in a high-scale environment, this is your next big move.

✅ Responsibilities:
✔️ Demonstrated ability to collaborate with other teams to achieve complex objectives.
✔️ Responsible for security architecture design from cloud infrastructure to application through the implementation of "secure by design" principles.
✔️ Collaborate with product managers, architects, and developers on the implementation of the security controls platform ecosystem and products.
✔️ Proof security implementations within infrastructure and application deployment manifests and the CI/CD pipelines.
✔️ Define required policies, controls, and capabilities for the protection of products and environments.
✔️ Build and validate declarative threat models automation.
✔️ Participate in engineering teams’ product planning cycles and committees.
✔️ Oversee the product security aspects for migration of products and services from Data Center to public cloud, e.g., AWS.
✔️ Serve as a trusted cyber security advisor to product and application teams.

✅ Minimum Requirements:
✔️ Experience integrating security scanning/tooling into the development pipeline.
✔️ Experience in analyzing and securing microservices and applications developed using Javascript and Typescript.
✔️ Experience with CI/CD pipelines (such as Gitlab, Jenkins) and infrastructure-as-a-code models (such as Terraform, Helm, or CloudFormation).
✔️ Hands-on development experience in Python/shell scripting.
✔️ Strong understanding of supply chain security, software integrity, and secure software delivery.
✔️ Experience with docker and mesh technologies (such as ISTIO).
✔️ Experience with architecture and security reviews, threat modelling and application risk is highly desired.
✔️ Experience working with Agile methodologies.
✔️ Knowledge of privacy laws and regulations, such as GDPR desired.
✔️ Familiarity with industry regulations, frameworks, and practices. For example, PCI, ISO 27001, NIST, etc.

✅ PREFERRED QUALIFICATIONS:
✔️ In-depth experience with architecting secure services on Kubernetes.
✔️ Extensive experience with architecting secure services on AWS or on-prem data centres.
✔️ Security-related professional certifications e.g., CISSP, CISM, CCSK, CCSP, CEH is highly desirable.

✅ We offer excellent benefits, including but not limited to:
🧑🏻‍💻 Learning and development opportunities and interesting, challenging tasks.

📚 Opportunity to develop language skills, with partial compensation for the cost of English classes.

🏝 Time for proper rest, with 20 working days of annual vacation.

📈 Competitive remuneration level with annual review.

🤝 Teambuilding activities.

The platform continuously gathers cryptography-related information and surrounding context from a wide range of external systems - cloud providers, EDRs, vulnerability scanners, and more. We currently maintain around 20 integrations, and this number is growing quickly. We're looking for a technically curious, highly motivated person to own the research and verification side of these integrations: understanding what data each service exposes, how to access it, and how to keep our coverage current as these services evolve. This role suits someone early-to-mid in their career who enjoys digging into APIs, testing hypotheses hands-on, and mapping out how systems connect - with scope and ownership that can scale to the right person's experience level.

What you'll do:

• Continuously monitor our integrated third-party services (cloud providers, EDRs, vulnerability scanners, etc.) to understand what information is available and how it can be accessed - via APIs, licensing tiers, permissions, and other access methods.
• Actively connect to and verify these APIs hands-on: test endpoints, confirm data availability, and validate that integrations behave as expected.
• Identify and suggest which data from each service is most relevant and valuable for our platform to consume.
• Track changes across these services - new endpoints, deprecated features, updated licensing, and newly released functionality - and flag anything that affects our integrations.
• Document findings clearly so engineering and product teams can act on them.

• Research and evaluate new potential integrations as our coverage expands.

   

What we're looking for:

• Technical mindset with genuine curiosity about how systems and APIs work.
• Hands-on comfort with API tools such as Postman (or similar - Insomnia, curl, etc.).
• Basic programming/scripting ability (e.g. Python or JavaScript) - enough to test, parse responses, and automate small checks.
• Comfort reading API documentation and translating it into practical understanding.
• High motivation, self-direction, and the persistence to chase down how a given system actually works.

• Good written communication for documenting findings.

   

Nice to have: 

• Exposure to or interest in cybersecurity concepts (cryptography, vulnerability management, endpoint security).
• Familiarity with cloud provider APIs (AWS, Azure, GCP), EDR platforms, or vulnerability scanners.
• Understanding of authentication schemes (OAuth, API keys, tokens) and REST/JSON.
• Any experience with API testing, monitoring, or integration work.

Why this role:

• Broad exposure to a large and growing ecosystem of security and cloud tools.
• A clear technical growth path - toward integration engineering or a deeper cybersecurity specialization.
• Real ownership from day one - your research directly shapes what the platform can do.

Our client is a global leader in AI-powered IT Service Management (ITSM), developing intelligent platforms that automate IT support processes and help organizations operate more efficiently. Their solutions are trusted by thousands of companies worldwide, simplifying complex IT operations and enabling teams to focus on strategic initiatives.

We are looking for a Senior Application Security Engineer with a strong software engineering background who has designed, developed, deployed, and maintained production systems before transitioning into application security. This role will serve as the security backbone of the R&D organization, ensuring security is embedded throughout the software development lifecycle and partnering closely with Engineering, DevOps, Architecture, and Product teams.

This is a highly visible, hands-on position reporting directly to the CISO, offering a clear growth path toward an Application Security Lead role and exposure to cloud security, AI security, and governance initiatives.

Who We're Looking For

• 5+ years of hands-on experience as a Software Developer, Backend Developer, Full-Stack Developer, or similar engineering role, with a proven track record of designing, building, shipping, debugging, and maintaining production software.
• Strong understanding of software development processes, engineering best practices, architecture, and SDLC methodologies.
• 2+ years of experience in Application Security, Product Security, or Secure SDLC, with a demonstrated transition from software engineering into security.
• Experience partnering closely with R&D and development teams, acting as a trusted security advisor who enables innovation while improving security posture.
• Hands-on experience implementing Secure SDLC practices within modern CI/CD environments (GitHub, GitLab, Jenkins, ArgoCD, or similar).
• Solid understanding of common application vulnerabilities, secure coding principles, OWASP Top 10, CWE/SANS Top 25, threat modeling methodologies (e.g., STRIDE, PASTA), and security architecture reviews.
• Experience with application security tools and practices, including SAST, DAST, SCA, secret scanning, and secure code review.
• Strong knowledge of API security and experience securing and testing REST and/or GraphQL APIs.
• Understanding of software supply chain security, including third-party dependency risks, SBOM concepts, open-source risk management, dependency confusion, and related attack vectors.
• Knowledge of cloud security fundamentals, preferably AWS, including IAM, containers/Kubernetes security, and Infrastructure as Code (Terraform or similar).
• Familiarity with SaaS and product company environments and the security challenges associated with cloud-native applications.
• Understanding of AI/LLM security risks, including prompt injection, data leakage, model abuse, agentic risks, and secure adoption of AI assistants within engineering and security workflows.
• Experience performing security-focused design, architecture, and threat modeling reviews.
• Excellent communication and stakeholder management skills, with the ability to influence teams without direct authority.
• Strong written and verbal English communication skills.

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent practical experience).

   

Role Focus

The primary focus of this role is the application security of the product.

Key responsibilities:

• Working closely with R&D teams on a daily basis.
• Helping developers build more secure products and adopt security best practices.
• Reviewing application designs and architectures from a security perspective.
• Identifying security risks in APIs, integrations, third-party libraries, and development processes.
• Managing vulnerabilities by analyzing, prioritizing, and supporting remediation efforts.
• Promoting and maintaining secure development practices across CI/CD pipelines.

• Applying and advocating security standards, frameworks, and industry best practices.

   

Nice to Have

• Penetration testing experience.
• Experience with bug bounty programs and vulnerability management.
• Strong knowledge of OWASP frameworks and methodologies.
• Hands-on experience with SAST, DAST, IAST, SCA, and secret-scanning tools.
• Cloud security experience (AWS, Azure, or GCP).
• AI / LLM security knowledge and practical experience.
• Security certifications such as CISSP, CSSLP, OSCP, OSWE, GWAPT, GPEN, CEH, GIAC certifications, or similar.

About The Position

MWDN is an international recruitment and outstaffing company with 23+ years of experience connecting exceptional tech talent with leading companies across Israel, the USA, Great Britain, and Western Europe. In this role, MWDN acts as the recruitment partner, and the selected candidate will work directly with the client’s team on their product in an international environment.
 

Why does MWDN rock?

Here’s what you can expect when you join MWDN:

• Security: We carefully vet our clients to minimize risks and ensure reliability and timely payments—no fraud or unpleasant surprises.
• Career support: If a project isn’t the right fit, we support you and actively help find new opportunities that match your skills and career goals.
• Legal assistance: We provide guidance on legal matters, including opening and managing your independent contractor or sole proprietorship status, taxes, and related processes.
• Professional development: We offer English courses and professional growth opportunities, as well as team-building events.

Why choose us? MWDN is ranked among the top 5 IT employers in our region according to DOU. We take pride in our transparency and strong commitment to our team. Curious to learn more? See what our employees say about working with us on DOU.
 

What is your new project?

• Domain: Identity and Access Management (IAM) software
• Location: Israel
• Company size: 200-500 employees
• Founded in: 2014
   

What is your new project?

Are you ready to join a game-changing force in identity and access management?

Our client is revolutionizing the way enterprises protect user identities in a passwordless world. You’ll be working at the intersection of cutting-edge biometrics, behavioral analytics, and next-gen identity orchestration — helping the world’s leading brands safeguard millions of users. Backed by more than 100 M Series A — one of the largest in cybersecurity history — and trusted by major global enterprises, they offer the agility of an innovator with the strength and backing of an industry leader.

Ready to take part in redefining IAM for the modern era? Let’s talk.
 

What makes you a great fit

• 3+ years of hands-on experience in security research, mobile security, browser research, fraud research, detection research, reverse engineering, or a related technical role.
• Experience with web browsers, mobile browsers, WebViews, browser APIs, JavaScript runtime behavior, browser automation, fingerprinting, client-side web security, and low-level browser technologies.
• Familiarity with the architecture or codebase of modern open-source browsers and rendering engines, such as Chromium, WebKit, Blink, or Gecko, with the ability to reason about how browser internals can expose new security and fraud signals.
• Experience with native Android and/or iOS applications, mobile OS behavior, app instrumentation, emulators, device spoofing, mobile automation, mobile security, and low-level platform APIs.
• Attacker mindset and practical understanding of how malicious actors attempt to bypass detection using automation, AI agents, spoofing, and anti-detection techniques.
• Ability to identify subtle technical signals and turn them into practical detection or data collection opportunities.
• Experience designing technical experiments and validating research hypotheses.
• Experience with one or more SDK development languages and environments, such as TypeScript/JavaScript for web, Kotlin/Java for Android, or Swift/Objective-C for iOS, with the ability to understand implementation constraints and collaborate effectively with SDK engineering teams.
• Scripting ability, preferably in Python, for building research tools, automation, and analysis workflows.
• Ability to work independently on ambiguous problems and communicate findings clearly to engineering, product, and research stakeholders.
   

Advantages

• Experience with Web SDKs, Mobile SDKs, client-side telemetry, device intelligence, behavioral signals, AI agent detection, or fraud detection products.
• Experience researching bots, credential stuffing, scraping, headless browsers, AI-assisted automation, app cloning, SDK abuse, phishing kits, malware, or
• anti-detection frameworks.
• Experience with reverse engineering Android or iOS applications.
• Familiarity with detection quality measurement, feature evaluation, false-positive analysis, production monitoring, or machine learning concepts.
• Bachelor’s degree in Computer Science, Cybersecurity, Data Science, or a related field— or equivalent hands-on experience.
  
   

Your day-to-day in this position

• Research browser, WebView, Android, and iOS environments from an attacker’s perspective.
• Identify new security signals, behavioral indicators, and technical patterns that can improve fraud, abuse, automation, and AI agent detection.
• Investigate attacker techniques involving bots, browser automation, AI agents, emulators, device spoofing, hooking, instrumentation, remote access tools, and
• anti-detection methods.
• Design and run experiments to compare legitimate, automated, AI-assisted, and manipulated environments.
• Evaluate proposed signals for reliability, stability, spoofability, privacy sensitivity, performance impact, and production feasibility.
• Translate research findings into clear SDK feature requirements for web and mobile data collection.
• Build internal tools, scripts, and lab environments to support signal research and validation.
• Collaborate with SDK, engineering, product, and detection teams to move research from hypothesis to production.
  
   

Our next steps

✅ Intro call with a Recruiter — ✅ Intro call with client — ✅ Technical interview — ✅ CTO interview — ✅ HR interview — ✅ Reference check — ✅ Offer

• Project Description:

  We are embarking on a critical initiative to achieve ISO 81001 compliance for our esteemed client. ISO 81001 is a pivotal standard for health informatics, specifically focusing on the management and security of health information systems. This project aims to ensure Client's digital infrastructure aligns with the stringent requirements set forth by ISO 81001, safeguarding sensitive healthcare data and bolstering cyber resilience.

• Responsibilities:

  Conduct a thorough assessment of Client's existing IT infrastructure, policies, and procedures against ISO 81001 requirements.
  Identify gaps and vulnerabilities that need to be addressed to achieve compliance.
  Collaborate with cross-functional teams to design and implement robust security controls aligned with ISO 81001 standards.
  Deploy necessary security measures to protect Client's health information systems and data assets.
  Draft and enhance security policies, procedures, and guidelines tailored to ISO 81001 specifications.
  Ensure policies are communicated effectively and integrated into Client's operational framework.
  Perform risk assessments and develop risk management strategies to mitigate cyber threats and vulnerabilities.
  Implement proactive measures to enhance Client's cyber resilience in alignment with ISO 81001.
  Conduct training sessions and workshops to enhance cyber security awareness among Client staff.
  Foster a culture of security consciousness and best practices across the organization.
  Establish monitoring mechanisms to track ongoing compliance with ISO 81001 requirements.
  Conduct regular audits and assessments to ensure sustained adherence to security standards.
  Develop incident response protocols and procedures to swiftly address and mitigate security incidents.
  Continuously assess and refine security strategies based on emerging threats and industry developments.

• Mandatory Skills Description:

  Bachelor's degree in Cyber Security, Information Technology, or a related field.
  Proven experience in cyber security, particularly in compliance initiatives (ISO standards preferred).
  Strong understanding of health informatics and data security within healthcare environments.
  Excellent analytical skills with the ability to assess complex systems and processes.
  Effective communication skills to engage stakeholders and drive security initiatives forward.

• Nice-to-Have Skills Description:

  Agile

• Languages:
  • English: B2

Come Back Agency supports US software and technology companies by running their hiring process. We work with delivery and leadership teams to define roles, screen candidates, and manage interviews. Successful candidates are hired directly by the company and become part of its team.

This position is with a US-based software company providing custom development and AI implementation for North American clients. The team builds and maintains production software, including AI-enabled systems, and works in long-term client engagements. Team members operate as part of an internal, distributed team and collaborate directly with client stakeholders.

About the role

The company is moving deeper into enterprise work. We need a DevOps engineer who can help harden our infrastructure, implement security best practices, and drive compliance readiness so we can pass enterprise vendor reviews and pursue certifications like SOC 2 and ISO 27001. You will work closely with engineering and leadership across infrastructure, security, and compliance.

What you will do:

• Build and maintain secure cloud infrastructure and CI/CD pipelines
• Implement access control, least privilege, and secrets management across environments
• Standardize logging, monitoring, alerting, and audit trails
• Create and maintain secure SDLC practices, including code scanning, dependency scanning, and change control
• Set up incident response basics, including runbooks, on-call expectations, and post-incident process
• Compliance readiness for SOC 2 and ISO 27001 by implementing required technical controls and gathering evidence
• Vulnerability management and patching routines for infrastructure and dependencies
• Improve backup, disaster recovery, and business continuity practices
• Support client security questionnaires with clear technical answers and evidence

Requirements:

• Up to 2 years of DevOps experience with cloud infrastructure and deployment pipelines
• Hands-on experience with AWS, including IAM, networking, compute, and logging services
• Experience with Infrastructure as Code such as Terraform
• Experience with containerization and orchestration, Docker and Kubernetes preferred
• Comfort setting up security tooling, SAST, DAST, dependency scanning, secret scanning
• Ability to document systems clearly and work with auditors or compliance tools when needed
• English at B2 level or higher - you will collaborate directly with US client stakeholders

Nice to have:

• SOC 2 or ISO 27001 experience, even if you were the technical owner not the compliance PM
• Experience with Vanta, Drata, Secureframe, or similar evidence automation tools
• Experience working with HIPAA or other regulated client environments
• AWS certifications such as Solutions Architect or Security Specialty

What We Offer:

• Working hours aligned with US time zones, typically 16:00-23:59 Kyiv time
• English lessons to support clear and confident communication
• Paid vacation and sick days
• Fully remote work
• Opportunities for professional growth within the team
• Structured, personalized onboarding to help you ramp up effectively

Apply with your resume and a short note outlining your relevant experience. You can also submit it through our website at comeback.ua. Selected candidates will be contacted by Come Back Agency.

We are looking for a DevSecOps and Application Security Lead to join our team and build our application security from scratch. In this role, you will lead the security direction within our department, focusing on integrating security into the software development process. By balancing automation with practical DevSecOps practices, you will help our engineering teams find and fix vulnerabilities early, ensuring our products are safe and strong without slowing down development.

Responsibilities

• Build the DevSecOps/AppSec function from scratch, and create the roadmap, KPIs, and metrics for leadership
• Create secure development processes, including release security gates and vulnerability management
• Choose, configure, and integrate security scanners (SAST, SCA, secrets) with a focus on automation and AI-assisted workflows
• Integrate security checks into pipelines and development processes together with Engineering, DevOps, and Product teams
• Run threat modeling and security reviews for high-risk systems and major architecture changes
• Create clear security standards, checklists, and practical guidelines for developers (covering code, APIs, and secrets)
• Launch and grow a Security Champions program to involve engineers in security processes
• Help investigate incidents related to application vulnerabilities, leaked secrets, and supply-chain attacks

Requirements

• 5+ years of experience in DevOps, SRE, Platform Engineering, or related infrastructure/security roles
• 3+ years focused on DevSecOps and Application Security
• 1+ years in a lead/ownership role
• Deep understanding of modern software development, Git workflows, and hands-on experience integrating security checks into CI/CD pipelines without creating bottlenecks
• Practical experience with SAST, SCA, secrets scanning, and vulnerability management (triage, risk rating, remediation, and validation)
• Ability to select and scale security tools based on accuracy, false-positive rates, and developer experience
• Strong knowledge of web/API/mobile risks (OWASP Top 10, auth, supply-chain risks) and ability to run threat modeling and secure design reviews
• Good scripting skills (Python, Bash, or similar) and understanding of cloud-native/containerized environments
• Ability to write clear security requirements and guidelines for developers
• English — Intermediate+ or higher

Nice to Have

• Experience building AppSec/DevSecOps functions from scratch or early maturity stages
• Hands-on experience with tools like Snyk, Aikido, Semgrep, Trivy, Gitleaks, GitHub/GitLab Security, or SonarQube
• Experience with cloud/IaC security, Kubernetes, and mobile app security
• Knowledge of compliance standards (SOC 2, ISO 27001, PCI DSS, DORA) and experience with Bug Bounty or pentest coordination
• Experience with Security Champions programs and AI-assisted security tools

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Наш клієнт, Growe — провідна група з бізнес-консалтингу та сервісів у сфері iGaming та Entertainment. Компанія створює стратегії, які працюють, і рішення, що масштабуються. Поєднуючи стратегічне бачення з практичною експертизою, Growe допомагає бізнесам орієнтуватися у швидкозмінній індустрії, знаходити нові можливості, виходити на нові ринки та досягати сталого зростання.

Ідеально для тих, хто прагне:

• Адмініструвати та супроводжувати кінцеві пристрої під керуванням Windows, Linux, macOS, iOS та Android;
• Адмініструвати та супроводжувати платформи EDR/XDR
• Керувати процесами встановлення оновлень і усунення вразливостей на кінцевих пристроях Windows, Linux та macOS;
• Адмініструвати політики безпеки кінцевих пристроїв і забезпечувати їх відповідність корпоративним стандартам інформаційної безпеки;
• Брати участь у реагуванні на інциденти, пов'язані з кінцевими пристроями;
• Виявляти, аналізувати та усувати вразливості програмного забезпечення;
• Аналізувати та опрацьовувати сповіщення й ескалації, пов'язані з кінцевими пристроями;
• Проводити проактивний пошук загроз (threat hunting) на кінцевих пристроях;
• Розробляти та підтримувати правила виявлення на основі індикаторів компрометації (IoC) і технік атак;
• Адмініструвати DLP-агенти, включаючи їх розгортання, контроль покриття активів, аналіз та усунення несправностей;

• Впроваджувати та підтримувати заходи з посилення захисту (hardening) кінцевих пристроїв.

   

Досвід, який стане твоєю перевагою:

• Розуміння принципів роботи SIEM-, EDR-, XDR-рішень та засобів захисту кінцевих пристроїв;
• Обізнаність щодо актуальних кіберзагроз і сучасних тактик, технік та процедур зловмисників;
• Розуміння принципів роботи операційних систем Windows, Linux і macOS та їх внутрішньої архітектури;
• Участь у процесах реагування на кіберінциденти;
• Розуміння процесів встановлення оновлень, усунення вразливостей кінцевих пристроїв та життєвого циклу управління вразливостями;
• Розуміння принципів роботи MDM-рішень та використання їх для управління пристроями;
• Володіння щонайменше однією мовою програмування для автоматизації та написання скриптів (Python, C/C++, Go, Rust або іншою);

• Володіння Bash і PowerShell на належному рівні.

   

Ми цінуємо:

• Аналітичне мислення;
• Уважність до деталей;
• Проактивність і допитливість;
• Прагнення до безперервного професійного розвитку;
• Високий рівень доброчесності та вміння працювати з конфіденційною інформацією;
• Відмінні комунікаційні та дипломатичні навички.

Наші клієнти пропонують конкурентні переваги для підтримки вашого професійного та особистого зростання, зокрема:

• Орієнтація на здоров’я та добробут;
• Медичне страхування;
• Можливості для кар’єрного зростання;
• Пакет бенефітів (відшкодування витрат на спортзал, стоматологічні та психологічні послуги тощо);
• Бонусну систему на основі OKR;

• Динамічне робоче середовище.

   

Долучайся — і нехай твоя історія зростання розпочнеться.

English version:

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe helps businesses navigate the fast-evolving industry, seize new opportunities, enter new markets, and achieve sustainable growth. 

Perfect for those who aim to:

• Administer and maintain endpoints running Windows, Linux, macOS, iOS, and Android;
• Administer and maintain EDR/XDR platforms;
• Manage endpoint patching and remediation across Windows, Linux, and macOS;
• Administer endpoint security policies and ensure compliance with corporate security standards;
• Support endpoint-related incident response activities;
• Identify, assess, and remediate software vulnerabilities;
• Investigate and resolve endpoint-related security alerts and escalations;
• Conduct proactive endpoint threat hunting activities;
• Develop and maintain detection rules based on indicators of compromise (IoCs) and attack techniques;
• Administer DLP agents, including deployment, asset coverage monitoring, troubleshooting, and issue resolution;

• Implement and maintain endpoint hardening measures.

   

Experience you’ll need to bring: 

• Understand how SIEM, EDR, XDR, and endpoint protection solutions work;
• Stay up to date with emerging threats and adversary techniques;
• Understand Windows, Linux, and macOS operating systems and their internal architecture;
• Participate actively in incident response activities;
• Understand endpoint patching, vulnerability remediation, and the vulnerability management lifecycle;
• Understand how MDM solutions work and use them to manage endpoint devices;
• Demonstrate proficiency in at least one programming language for automation and scripting (Python, C/C++, Go, Rust, or similar);
• Demonstrate good knowledge of Bash and PowerShell.

It's a perfect match if you have those personal features: 

• Analytical mindset;
• Strong attention to detail;
• Proactive attitude and curiosity;
• Commitment to continuous learning;
• High integrity and discretion;
• Excellent communication and diplomatic skills.

Our clients offer competitive benefits to support your professional and personal growth, including: 

• Health & Wellness Focus; Global Medical Coverage; 
• Growth Opportunities; 
• Benefits Programs (compensation for the gym/stomatology/psychological service & etc.); 
• Performance-Driven Rewards; Dynamic Work Environment. 

Apply, and let your growth journey begin.

Are you passionate about making the internet a safer place? We are looking for a Middle Security Operations Researcher to join our team and help protect enterprise clients from harmful bots and online threats. This is a remote, full-time role that offers the opportunity to work directly with global customers, analyzing traffic patterns and neutralizing malicious activity.

At Sigma Software, we value expertise, ownership, and proactive communication. You will collaborate with a diverse international team while enjoying the flexibility of working from anywhere.

Why join us? You will work on impactful cybersecurity projects, gain exposure to cutting-edge analytics tools, and contribute to safeguarding digital ecosystems worldwide.

CUSTOMER
Our customer is a global provider of comprehensive security solutions, protecting individuals, organizations, and communities from a wide range of risks, particularly in the digital space. Their enterprise-focused products specialize in bot defense and invalid traffic detection, helping clients safeguard critical systems and maintain operational integrity.

PROJECT
The project focuses on real-time threat detection and bot mitigation for enterprise-scale clients. Security Operations Researchers collaborate directly with customers, leveraging advanced analytics platforms to identify malicious traffic patterns and neutralize online threats. This dynamic environment requires both technical expertise and strong communication skills.

JOB DESCRIPTION:

• Provide Tier 2 technical support to customers in real time, delivering clear and professional responses
• Analyze logs, graphs, and dashboards, isolating and investigating data using tools like Kibana
• Manage and organize cases, tickets, and requests in Salesforce
• Perform back-office tasks, including writing and maintaining suspicious field expressions
• Write and optimize SQL queries for data retrieval, analysis, and manipulation in BigQuery
• Communicate with global customers, ensuring timely responses and effective issue resolution
• Work in a shift-based schedule, including weekend shifts

QUALIFICATION:

• 3+ years of experience in data analysis, including working with logs and dashboards
• Experience working with web traffic data, including HTTP traffic, logs, request analysis, and traffic pattern investigation
• Strong SQL skills: Common Table Expressions (CTE), aggregations, GROUP BY, ORDER BY, filters, window functions (e.g., RANK()), and subqueries
• Experience with SIEM systems. Nice to have: experience with the Elastic Stack
• Technical understanding of web technologies and client–server architecture (APIs, HTTP, basic HTML/JavaScript)
• Strong troubleshooting and problem-solving skills
• Experience in customer support, including direct communication with clients; professionalism and politeness are essential

• Strong English communication skills

   

WILL BE A PLUS:

• Experience in a Cybersecurity Analyst/Researcher role, ideally supporting external customers in threat detection and response
• Experience in web security and security research: web application security, bot management, fraud detection
• Basic Python skills
• Experience with Kibana

PERSONAL PROFILE:

• High level of responsibility and ownership
• Ability to work independently with minimal supervision
• Planning and decision-making skills with considerations for multiple integrated systems
• Proactive communicator who keeps stakeholders informed without being prompted

Work schedule: 40 hours per week, 5 days per week. Workdays can be adjusted to start earlier or later, including weekends if necessary.

Important: after confirming your application on this platform, you’ll receive an email with the next step: completing your application on our internal site, LaunchPod. So keep an eye on your inbox and don’t miss this step — without it, the process can’t move forward.

Why join us

If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! :)

About the role

We are looking for a Senior Application Security Engineer to architect and build automated security layers within the SDLC, engineering AI-enabled secure code scanning, hardened baseline automation, and CI/CD security tooling integration across a large-scale financial services program. You will work in Python and Java to deploy and tune SAST, DAST, and SCA tools, provide code-level remediation guidance to development teams, and operate with full autonomy building automated security runbooks. The role requires 6+ years of software engineering experience with a strong AppSec and DevSecOps focus.

What you will do

• Engineer and deploy AI-enabled secure code scanning capabilities and Golden Images to drive secure-from-the-start adoption;
• Automate the development of secure coding patterns and integrate them with traditional and Agentic SDLC workflows;
• Architect the integration of continuous security scanning tools (SAST, DAST, SCA) into enterprise CI/CD pipelines, tuning them to eliminate noise;
• Act as a senior technical SME, reading and reviewing complex application code (Java/Python) to provide software engineers with highly specific, code-level remediation guidance.

Must haves

• 6+ years of software engineering experience with a strong subsequent focus on Application Security and DevSecOps;
• Strong coding and architectural proficiency in Python (for security automation and scripting) and/or Java (to confidently read, review, and secure enterprise source code);
• Deep, hands-on expertise deploying and tuning modern application security testing tools (SAST, DAST, SCA) and integrating them into complex CI/CD orchestration ecosystems;
• Fully autonomous execution capability, requiring no daily supervision to map out and build automated security runbooks;
• Upper-intermediate English level.

Nice to haves

• Experience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging or secure code generation;
• Advanced application threat modeling experience.

The benefits of joining us

• Professional growth: Accelerate your professional journey with mentorship, TechTalks, and personalized growth roadmaps
• Competitive compensation: We match your ever-growing skills, talent, and contributions with competitive USD-based compensation and budgets for education, fitness, and team activities
• A selection of exciting projects: Join projects with modern solutions development and top-tier clients that include Fortune 500 enterprises and leading product brands
• Flextime: Tailor your schedule for an optimal work-life balance, by having the options of working from home and going to the office – whatever makes you the happiest and most productive.

Meet Our Recruitment Process

Asynchronous stage – An automated, self-paced track that helps us move faster and give you quicker feedback:

• Short online form to confirm basic requirements
• 30–60 minute skills assessment via Codility – a platform founded in Poland that helps us provide quicker feedback and streamline this stage of the process.
• 5-minute introduction video

Synchronous stage – Live interviews

• Technical interview with our engineering team (scheduled at your convenience)
• Final interview with your future teammates

If it’s a match — you’ll get an offer!

Important: after confirming your application on this platform, you’ll receive an email with the next step: completing your application on our internal site, LaunchPod. So keep an eye on your inbox and don’t miss this step — without it, the process can’t move forward.

Why join us

If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! :)

About the role

We are looking for a Middle Application Security Engineer to execute hands-on DevSecOps work across CI/CD pipeline security integration, vulnerability management tooling, and automated hardened baseline deployment within a large-scale financial services security program. You will write Python scripts to integrate SAST, DAST, and SCA gates into CI/CD pipelines, tune scanning tools to reduce false positives, and provide code-level remediation guidance to Java and Python development teams. The role requires 3–5 years of combined software engineering and AppSec experience.

What you will do

• Write and maintain the scripts necessary to integrate security gates (SAST, DAST, SCA) seamlessly into the CI/CD pipeline;
• Continuously tune and configure existing security scanning tools to eliminate false positives and deliver high-confidence alerts;
• Assist in coding and deploying automated hardened baselines and secure coding patterns;
• Work directly with product development teams to provide actionable, code-level remediation guidance in Java and Python.

Must haves

• 3–5 years of commercial experience blending software engineering and DevSecOps/AppSec;
• Solid coding proficiency in Python (for automation/scripting), with the ability to comfortably read and navigate Java source code;
• Working knowledge of modern CI/CD orchestration tools and practical experience interacting with vulnerability scoring frameworks;
• Ability to operate with minimal supervision on day-to-day execution, reliably completing complex scripting and integration tasks;
• Upper-intermediate English level.

Nice to haves

• Hands-on experience with specific CNAPP or ASPM platforms (e.g., Wiz);
• Basic understanding of application threat modeling.

The benefits of joining us

• Professional growth: Accelerate your professional journey with mentorship, TechTalks, and personalized growth roadmaps
• Competitive compensation: We match your ever-growing skills, talent, and contributions with competitive USD-based compensation and budgets for education, fitness, and team activities
• A selection of exciting projects: Join projects with modern solutions development and top-tier clients that include Fortune 500 enterprises and leading product brands
• Flextime: Tailor your schedule for an optimal work-life balance, by having the options of working from home and going to the office – whatever makes you the happiest and most productive.

Meet Our Recruitment Process

Asynchronous stage – An automated, self-paced track that helps us move faster and give you quicker feedback:

• Short online form to confirm basic requirements
• 30–60 minute skills assessment via Codility – a platform founded in Poland that helps us provide quicker feedback and streamline this stage of the process.
• 5-minute introduction video

Synchronous stage – Live interviews

• Technical interview with our engineering team (scheduled at your convenience)
• Final interview with your future teammates

If it’s a match — you’ll get an offer!