Jobs Security

Requirements:

• 3+ years in IT security and compliance
• Extensive, practice-based knowledge of security management frameworks, such as ISO 27k series, GDPR, SOC2 etc.;
• Proven track record of IT security audits/projects implementation
• Ability to develop information security policies, setup ISMS and guidelines, implement CIS20 and derive security requirements from them;
• Understanding access modelling. Ability to develop access models and assess them. Understanding of segregation of duties
• Experience in IAM & SSO solutions. Understanding of purpose and approaches of IAM. Knowledge of key tasks: identify, authenticate, and authorize
• Good knowledge of risk management, its purpose, and approaches. Ability to evaluate risks and create a risks management plan
• Understanding OWASP Top 10. Ability to describe vulnerabilities, ways of exploitations, and fix methods
• Understanding and implemented of vulnerability & patch management. Knowledge in vulnerability scanners. Ability to validate scan results and provide recommendations
• Ability to develop and conduct security trainings and workshops
• Good level of professional English
• Good communication skills, responsible, initiative, self-organized, eager to learn
• Experience in Secure SDLC or AWS Security would be a plus
   

Responsibilities:

• Conduct security audits and consulting projects,  create an action plan & practical roadmap based on the audit results
• Develop and enhance an information security management framework to ensure business sustainability
• Build and maintain compliance guidelines. Create policies and standards for IT security and compliance
• Conduct general IT security awareness training for the company staff
• Evaluate and manage corporate risks related to IT security
• Build and maintain application-specific threat models, explicitly apply security principles to design
• Participate in the corporate certification and compliance activities
• Design and implement security architecture and detailed cybersecurity designs together with IT and software development departments
• Prepare and document standard operating procedures and protocols
• Cooperation with Account Management, Sales & Marketing, Legal, Delivery and Clients for all security-related topics (audits, contractual compliance, reviews, risk assessments, etc.)
• Keeping up to date with developments in IT security standards and threats

✨ Welcome to WinMedia — Driving Innovation in iGaming Products! ✨
 

We build and develop product solutions in the iGaming industry 🎯. Our team works on in-house products, continuously improves internal processes, and uses data-driven approaches to make better decisions.

We are currently looking for an Anti-Fraud & Payments Manager who will take ownership of both the Anti-Fraud function and user payout operations. This is a hands-on role where you will build processes, develop risk and verification rules, oversee payout-related workflows, and ensure that user withdrawals are processed efficiently and safely.
 

📌 About the Role

We are looking for an experienced and proactive Anti-Fraud & Payments Manager to build and develop the Anti-Fraud and Payments function within our iGaming product company.

You will be responsible for user verification, fraud and risk assessment, payout checks, and the operational process of user withdrawals. You will decide when and how payouts should move forward, create and assign payout-related tasks, investigate suspicious cases, and continuously improve the rules and processes behind these operations.

This role combines Anti-Fraud expertise with ownership of the user payout process. You will work closely with Product, Customer Care, both VIP and Support teams, and other teams to make the verification and payout journey efficient, secure, and scalable.
 

🔨 Responsibilities

• Build and develop the Anti-Fraud & Payments function.
• Develop and implement rules, checks, and procedures for user verification, fraud detection, and payout processing.
• Review user activity and withdrawal requests, investigate suspicious cases, and make risk-based decisions.
• Take ownership of the user payout process, including creating, prioritizing, and assigning payout-related tasks.
• Identify fraud patterns, operational risks, and bottlenecks, and continuously improve related processes.
• Develop and maintain internal procedures, guidelines, and controls for Anti-Fraud and payouts.
• Monitor key metrics and ensure the verification and payout processes are efficient, secure, and scalable.
• Collaborate closely with Product, Support, VIP, and other teams to resolve cases and improve Anti-Fraud and payout workflows.
   

✅ Requirements

• 2+ years of experience in Anti-Fraud / Risk / Payments Operations, preferably in iGaming.
• Experience working with online casino / betting products is a strong advantage.
• Hands-on experience with user verification, fraud detection, and suspicious activity analysis.
• Strong understanding of common fraud scenarios, risk indicators, and detection methods.
• Practical experience with user withdrawals and payout processes.
• Understanding of how to assess and approve/reject payout requests based on risk and verification results.
• Experience building or significantly optimizing Anti-Fraud and/or payout processes.
• Experience working with tools such as Sumsub, KYCaid, Fingerprint.com, and similar solutions.
• Experience using AI tools in work processes is a strong advantage.
• Strong analytical and problem-solving skills with excellent attention to detail.
• Ability to make independent decisions and take ownership of operational processes.
• Ability to work with large amounts of information and prioritize cases effectively.
• Strong communication skills and the ability to collaborate with Product, Customer Care, VIP, and Support teams.
   

🎯 Ideal Candidate

• Has hands-on Anti-Fraud and/or Payments Operations experience in iGaming.
• Understands that the role is broader than traditional Anti-Fraud and is ready to own both risk and payout operations.
• Understands the specifics of users, deposits, withdrawals, and fraud risks in gambling products.
• Can independently develop a system of rules, checks, controls, and payout workflows.
• Is comfortable making decisions on individual cases while also thinking about the bigger process.
• Can build a structured and scalable process rather than simply following existing procedures.
• Takes full ownership of the Anti-Fraud & Payments function and is ready to develop it further.
   

🎁 What We Offer

💰 Competitive salary and financial incentives
🚀 The opportunity to build and develop the Anti-Fraud & Payments function
🎨 Freedom to make decisions and implement your ideas
📈 Professional and career growth opportunities
🌍 Flexible work setup
🤝 Work in a product-focused iGaming company alongside a professional team

Ajax Systems is an international technology company and the largest security systems manufacturer in Europe. Ajax products are trusted by more than 4.5 million end users and 330,000 PRO users across over 180 countries. The company offers comprehensive solutions for protecting residential and commercial properties of various sizes. Today, the Ajax portfolio includes 280 devices for intrusion protection, video surveillance, fire safety, and comfort and automation. Every year, we demonstrate exponential growth both in the size of our team and in the number of users worldwide.

Ajax Systems operates a full-cycle production model, from idea generation and prototyping to mass production and global sales. Each department fully covers a specific operational need of the business. The company’s specialists are involved at every stage — from the production line in Ukraine to the logistics center in Poland, from where products are shipped to distributors worldwide.

Now we are looking for a hands-on Cyber Security Specialist to strengthen our security posture and operational resilience. You will be at the forefront of our cybersecurity defense, responsible for incident monitoring and investigation, the deployment and improvement of security solutions, and ensuring our corporate processes and infrastructure meets compliance standards. If you are passionate about building secure systems, incidents investigation and translating technical findings into efficient mitigation actions, this role is for you.

Key Responsibilities:

• Security systems support and improvements: Participate in security architecture improvement, provide support for the full lifecycle of security systems — from design and deployment to enhancement and technical support.
• Security Monitoring & Incident Response: Improve security monitoring processes and practices, participate in security events monitoring and triaging detected events. Develop and refine SIEM detection rules, investigate anomalies and identify root-cause of incidents, develop and execute mitigation plans to neutralize threats.
• Conduction Security Assessments: Conduct technical security assessments of corporate IT systems to identify compliance deviations and vulnerabilities. Participate in risks assessments, mitigation measures design and implementation.
• Compliance & Governance: Participate in improvement of security procedures, policies, and operational instructions. Collaborate with stakeholders on security processes implementation and improvement to ensure readiness for external security audits (e.g., ISO 27001, SOC2).
• Consultancy & Support: Partner with internal teams to define security requirements for new systems and solutions, provide expert guidance on implementing security controls. Participate in security requests processing, security awareness trainings preparation and conduction.
• Reporting & Strategy: Participate in preparation of reports for management, definition and description of security strategy.

Required Technical Skills & Qualifications:

• Experience: 5+ years in CyberSecurity with a strong focus on SOC operations and security systems implementation.
• Core Proficiency: Hands-on experience with SIEM systems (Splunk/QRadar/Logsign/Wazuh), MDM solutions (Jamf/Crowdstrike/JumpCloud/Zoho), EDR/XDR solutions (SentinelOne/ESET/Defender), Cloud security monitoring (M365, GWS, AWS), and Firewall/WAF technologies (Cisco/PaloAlto/Fortinet/Ubiquiti).
• Domain Knowledge: Strong understanding of On-Premise and Cloud architectures, network security protocols, endpoint and application security. Practical experience in industry security best practices implementation (CIS, OWASP, NIST).
• Security assessment: Practical experience performing IT systems and application security assessments and reports preparation.
• Security governance: Experience in preparation of security reports, procedures and instructions for reporting. Practical knowledge of ISO 27001 technological controls implementation.
• Language Proficiency: Intermediate (B1-B2) English level required for working with technical documentation, cross-regional communication with colleagues and partners.

Preferred Skills & Certifications:

• Certifications: Vendor-specific security certifications (e.g., Google, MIcrosoft, Cisco, Palo Alto PCNSE, Fortinet NSE) are highly valued.
• Frameworks: Practical knowledge of ISO 27001 organizational controls implementation.

Why Join Us:

• Impact: Take ownership of security projects from concept to deployment.
• Culture: Work in a “zero bullshit” environment that values technical excellence and autonomy.
• Growth: Access to corporate English training and professional development/certification support.
• Health care: medical insurance.
• Beta Access: Get hands-on experience with new Ajax security systems before they reach the market.
• Innovation: Help shape the future of “Made in Ukraine” reliability.

The Defense Procurement Agency (DOT) is a national agency responsible for procuring ammunition, UAVs, military equipment, fuel, food, clothing, and other critical supplies for the Armed Forces of Ukraine and the Defense Forces.

Our mission: Strengthening Ukraine by ensuring reliable support for the Defense Forces while fostering the development of the national defense industry.

Our vision: To become the driving force behind the transformation of Ukraine's defense procurement ecosystem—not only operating the system, but continuously improving it.

We are looking for a Tech Lead / Senior DevSecOps to provide technical leadership to the Security Engineering team, develop information security architecture, implement security solutions across the Microsoft ecosystem, and integrate security requirements into infrastructure and software development processes.

Responsibilities

• Provide technical leadership to the Security Engineering team, including prioritizing and distributing tasks, mentoring team members, and ensuring the quality of implementation.
• Design and develop information security architecture and key cybersecurity capabilities, including Cloud Security, Identity & Access Management, Vulnerability Management, DevSecOps, and Incident Response.
• Implement, administer, and develop security services across the Microsoft security ecosystem.
• Conduct security reviews of infrastructure, CI/CD pipelines, and Infrastructure as Code (Terraform).
• Collaborate with Infrastructure, DevOps, and Software Engineering teams to integrate security requirements into architecture and development processes.
• Develop the AI Security function, including AI Security Proxy, AI Governance, DLP, monitoring, and auditing.
• Develop technical security standards, guidelines, recommendations, and information security documentation.

Requirements

• Bachelor's or Master's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 3+ years of experience in cybersecurity roles such as Security Engineer, Cloud Security Engineer, or DevSecOps Engineer, with hands-on experience in Azure Security and Microsoft Security.
• Hands-on experience securing cloud infrastructure in Microsoft Azure.
• Strong knowledge of Microsoft security services, including Defender XDR, Defender for Cloud, Sentinel, Intune, Entra ID, Purview, and related solutions.
• Experience building and developing Vulnerability Management processes.
• Strong understanding of modern DevSecOps practices, including CI/CD security, Infrastructure as Code (Terraform), SAST, DAST, Secret Scanning, and IaC Security.
• Hands-on experience securing containerized environments and Kubernetes.
• Experience with information security incident analysis and response.
• Previous technical leadership experience or strong Senior Security Engineer experience with the readiness to take on a Tech Lead role.

What We Offer

• Meaningful work that directly contributes to strengthening Ukraine's defense capabilities.
• Official employment with competitive salary and full social benefits.
• Professional development, learning opportunities, and career growth.
• Structured onboarding and dedicated mentorship.
• A collaborative, supportive, and mission-driven team.
• Modern office near the metro with reliable internet and equipped shelter.

By joining our team, you will contribute to one of Ukraine's largest digital transformation initiatives in the defense sector and help build the future of defense procurement.

Ready to make a real impact? We'd love to hear from you. Apply today!

* By submitting your CV, you consent to the processing of your personal data in accordance with applicable legislation.

** Due to the high volume of applications, only candidates whose qualifications best match the position will be contacted.

Who We Are 

PAR Retail, with its Open Commerce® product suite and patent pending Wallet Steering® System, empowers Convenience & Fuel Retailers to gain more share of wallet and customer lifetime value than possible with any other solution provider. PAR Retail’s unified Open Commerce product suite consists of: Activate for Intelligent 1:1 Loyalty, Transact for Contactless Commerce, and Experience for Cross-Channel Customer Experiences. PAR Retail’s solutions are supported by a set of subscription-based program management services and are contractually backed by its 1.5X Performance Guarantee. 

Requirements:  
- Operational knowledge of modern operating systems and networking; 

- Experience with common cloud services: AWS, GCP, and Azure; 

- Network Security and expertise in network pentesting; 

- Security testing of web applications, web services, mobile apps (hybrid and native), and IT infrastructure; 

- Understanding security certifications (PCI DSS / SOC2); 

- Ability to apply modern Application Security methodologies and frameworks; 

- Ability to use at least one modern programming language; 

- Practical experience with Burp Suite; 

- Experience with IDS, IPS, SIEM configuration; 

- Upper-intermediate English level. 

Responsibilities:  

- Requirements analysis, performing penetration testing and security audit; 

- BE, WEB, cloud and mobile clients testing; 

- Vulnerability reporting and remediation process; 

- Communication with development and project management teams; 

- Prepare security testing reports; 

- Prepare and support internal documentation for the project. 

PAR Retail Offers: 

- Long-term employment; 

- Competitive compensation with regular performance-based salary and career development reviews; 

- Paid vacations and sick leaves; 

- Health insurance program; 

- Flexible working hours; 

- Sponsored company educational program, corporate library; 

- Funny celebrations, team outings, and company events; 

- A unique and friendly environment where everyone can explore and learn new technologies. 

The Defense Procurement Agency (DOT) is a state-owned enterprise responsible for procuring military equipment, ammunition, UAVs, fuel, food, clothing, and other critical supplies for the Armed Forces of Ukraine and the Defense Forces.

Our mission: Strengthening Ukraine's defense capabilities by ensuring reliable procurement and supporting the development of the national defense industry.

Our vision: To become the driving force behind a modern defense procurement ecosystem built according to NATO standards.

We are looking for a Head of Information Security to lead and strengthen our Information Security function across governance, engineering, and security operations. This role combines strategic leadership with hands-on technical expertise, ensuring the continuous development of our Information Security Management System (ISMS), alignment with the NIST Cybersecurity Framework, and the organization's readiness to prevent, detect, and respond to cyber threats.

What You'll Accomplish (First 6–12 Months)

• Ensure continued NIST compliance for DOT Chain and define the roadmap for future security initiatives, including platforms such as Azure AI Foundry.
• Strengthen the security posture of IT Enterprise by implementing and maintaining NIST security controls, establishing regular risk assessments, exception management, and vulnerability remediation processes.
• Build a high-performing security organization with defined OKRs, KPIs, resource planning, and performance management.
• Enhance Azure-based Security Operations by improving monitoring, incident response, vulnerability management, identity governance, and RBAC.
• Lead Red Team and Purple Team exercises (including ransomware readiness and identity compromise scenarios) and translate findings into engineering improvements.
• Establish vendor security governance, including security assessments, NDA/SLA/DPA requirements, and third-party security audits.

Responsibilities

Leadership & Team Management

• Lead both Information Security Governance (ISMS, Risk & Compliance) and Cybersecurity Engineering & Operations.
• Manage, mentor, and develop the Information Security team through structured performance management, OKRs, and individual development plans.
• Collaborate closely with Engineering, IT, Product, and business stakeholders to prioritize security initiatives and protect critical services.

Governance, Risk & Compliance

• Develop and maintain security policies, standards, procedures, and risk registers.
• Lead internal and external security audits and coordinate remediation activities.
• Drive the organization's transition toward NIST-based security practices while maintaining alignment with ISO 27001 where required.
• Own Incident Response Plans (IRP), post-incident reviews, and continuous improvement.
• Ensure compliance with Ukrainian legislation related to information security and personal data protection.

Security Engineering & Operations

• Oversee enterprise security technologies, including:
• Microsoft Sentinel
• Microsoft Defender
• EDR/XDR
• SIEM
• DLP
• PAM
• IAM / Microsoft Entra ID
• MDM
• Lead incident monitoring and response activities.
• Manage vulnerability lifecycle from discovery through remediation.
• Improve identity security through MFA, PIM, Least Privilege, JML processes, Key Vault, secrets management, and centralized logging.
• Define and improve SOC processes, runbooks, SLAs, and operational metrics.

Application Security & Secure SDLC

• Strengthen application security throughout the software development lifecycle.
• Drive Threat Modeling, Security Architecture Reviews, DevSecOps practices, automated code scanning (SAST/DAST), SBOM generation, and CI/CD security.
• Integrate Red/Purple Team findings into engineering roadmaps and development practices.

Vendor Security

• Evaluate and audit third-party vendors integrated with DOT Chain.
• Establish and maintain supplier security requirements, including NDA, SLA, DPA, and third-party security assessments.

Strategy, Reporting & Budget

• Report regularly to executive leadership on security posture, KPIs, risks, vulnerability remediation, and incident readiness.
• Own the Information Security budget and define a 12–18 month security roadmap with prioritized initiatives and measurable business value.

Requirements

Experience

• 5+ years of experience in Information Security or Cybersecurity.
• 3+ years leading Information Security teams and security programs.
• Proven experience implementing enterprise Information Security strategies and governance.
• Hands-on experience with Red Team/Purple Team exercises, attack simulations, ransomware preparedness, and identity compromise scenarios.
• Strong experience implementing and maintaining NIST Cybersecurity Framework and/or ISO 27001.
• Experience building or managing Security Operations (SOC/SecOps), incident response, vulnerability management, and security monitoring.
• Strong Microsoft Azure security expertise, including:
• Microsoft Defender for Cloud
• Defender for Endpoint
• Defender for Identity
• Defender for Office 365
• Microsoft Sentinel
• Microsoft Entra ID
• Azure Key Vault
• Understanding of Secure SDLC, Application Security, DevSecOps, SAST/DAST, CI/CD security, Infrastructure as Code, and secret management.
• Experience securing .NET and PHP application environments is an advantage.

Technical Knowledge

• Strong practical knowledge of:
• NIST Cybersecurity Framework (CSF 2.0)
• NIST SP 800 Series
• ISO/IEC 27001
• Knowledge of Ukrainian regulations related to information security and personal data protection.

Leadership & Soft Skills

• Strong leadership, people management, and stakeholder management skills.
• Experience establishing KPIs, OKRs, and performance management frameworks.
• Ability to balance strategic governance with hands-on technical leadership.
• Excellent communication skills, including the ability to explain technical risks to executive stakeholders.
• Strong analytical thinking and decision-making skills.
• Zero tolerance for corruption.

Preferred Qualifications

• CISSP
• CISM
• ISO 27001 Lead Implementer or Lead Auditor
• Microsoft certifications such as SC-100, SC-200, SC-300, SC-400, or AZ-500.
• Experience working within government organizations or other highly regulated environments.

What We Offer

• Meaningful work that directly contributes to strengthening Ukraine's defense capabilities.
• Official employment with competitive salary and full social benefits.
• Professional development, learning opportunities, and career growth.
• Structured onboarding and dedicated mentorship.
• A collaborative, supportive, and mission-driven team.
• Modern office near the metro with reliable internet and equipped shelter.
• Opportunity to build and lead cybersecurity for one of Ukraine's most strategically important digital ecosystems.

By joining our team, you will contribute to one of Ukraine's largest digital transformation initiatives in the defense sector and help build the future of defense procurement.

Ready to make a real impact? We'd love to hear from you. Apply today!

* By submitting your CV, you consent to the processing of your personal data in accordance with applicable legislation.

** Due to the high volume of applications, only candidates whose qualifications best match the position will be contacted.

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies.

We are looking for a Middle SecOps Engineer!  

Requirements: 
- 2+ years of professional experience in Security Engineering, Infrastructure Security, Cloud Security, DevSecOps, or a related role.
- Strong understanding of infrastructure and network security principles, including network segmentation, firewalls, access control, TLS, secure network configuration, and service-to-service
communication.
- Practical experience with Linux systems security and hardening.
- Experience conducting security audits, configuration reviews, vulnerability assessments, or compliance assessments.
- Good understanding of CIS Benchmarks and security hardening principles.
- Experience with vulnerability management, including vulnerability validation, prioritization, remediation tracking, and risk-based decision making.
- Experience with security monitoring / SIEM / security analytics tools.
- Understanding of security incident response processes and basic incident investigation techniques.
- Understanding of patch management and operating system vulnerability remediation processes.
- Experience with cloud infrastructure security, preferably AWS.
- Understanding of Kubernetes security and container security principles.
- Ability to read and understand infrastructure configurations, logs, security findings, and network flows.
- Basic understanding of Infrastructure as Code and security implications of infrastructure changes.
- Good understanding of security controls and their practical implementation rather than purely theoretical knowledge.
- English sufficient for reading technical documentation and communicating with international teams. 

Will be a plus:
- Experience with OpenStack security.
- Experience automating security checks and operational processes using Python, Bash, or similar scripting languages.
- Experience integrating security controls into CI/CD pipelines. 

Responsibilities: 
- Infrastructure Security Monitoring — continuously monitor infrastructure for security events, anomalies, misconfigurations, and potential threats.
- Infrastructure Security Audits — plan and conduct regular security audits of infrastructure, cloud environments, operating systems, networks, and security controls.
- CIS Compliance & Hardening Assessment — assess infrastructure against CIS Benchmarks and internal security baselines, identify gaps, and drive remediation.
- Vulnerability Management — monitor infrastructure vulnerabilities, validate findings, prioritize remediation based on risk, and track remediation progress.
- Security Findings Triage & Escalation — triage findings from security tools, audits, and monitoring systems; validate their severity and escalate critical issues according to defined SLAs.
- Security Posture Management — continuously assess and improve the security posture of infrastructure and track security improvement initiatives.
- Security Standards & Baseline Compliance — ensure infrastructure complies with approved security standards, baselines, and security requirements.
- Security Control Validation — verify that implemented security controls are properly configured and effectively mitigate the intended risks. 
- Security Risk Identification & Reporting — identify infrastructure security risks, assess their potential impact, and provide clear reports and recommendations to stakeholders.
- Data Security — ensure appropriate infrastructure-level controls are implemented to protect sensitive and business-critical data.
- Patch Management Monitoring & Compliance — monitor patch management processes, identify overdue or missing security updates, and work with infrastructure teams to ensure
timely remediation.

Our benefits to you:

☘️An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance, and more

🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed

🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided

🏖Paid vacations, sick leave, personal events days, days off

💵Referral program — enjoy cooperation with your colleagues and get the bonus

📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences

🎯Rewards program for mentoring and coaching colleagues

✈️In-house Travel Service

🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more

🎳Other benefits could be added based on your location 

We are looking for a hands-on Endpoint & Security Platforms Engineer to build and operate the controls that protect our employee devices and server workloads, working across the full lifecycle from deployment and hardening to troubleshooting, automation, and authorized containment.

This is a chance to influence technical decisions that improve protection without disrupting critical services, and to broaden your engineering skills through hands-on work with security platforms and automation. You will work closely with IT, Infrastructure, Cyber Defense, and data security colleagues to make protection reliable and effective without creating unnecessary friction for users or critical systems.
 

Responsibilities

• Deploy and maintain EDR/XDR agents and endpoint protection policies across Windows, Linux, and macOS workstations and production servers, managing the full agent lifecycle: upgrades, policy tuning, exclusions, and controlled rollback
• Resolve agent failures, telemetry gaps, policy conflicts, and performance issues. Coordinate deployments with IT, which provides first-line support, and take ownership of complex security cases
• Implement risk-based OS hardening baselines together with application and infrastructure owners: test compatibility, prepare rollback steps, and deploy changes safely across production systems
• Operate endpoint DLP controls: maintain agents, implement policies agreed with data security colleagues, and reduce unnecessary blocking without weakening protection
• Maintain assigned security platforms (e.g. SIEM), including service health, access configuration, updates, storage, backups, and recovery
• Monitor telemetry and control health, investigating stale agents, coverage gaps, and unmanaged systems, and drive fixes through automation and improved runbooks
• Support Cyber Defense investigations with endpoint expertise and execute approved containment actions, escalating anything that could disrupt production
• Automate recurring administration, validation, and reporting tasks using scripts and APIs, and maintain clear documentation for configurations and procedures

Requirements

• 4+ years of hands-on experience in endpoint security, infrastructure security, system security, or a related security engineering role
• Practical experience deploying and operating an enterprise EDR/XDR or endpoint protection platform across a mixed workstation and server environment
• Strong Linux administration skills, plus the ability to support and troubleshoot protection on Windows workstations and servers using logs, services, permissions, network connections, and resource usage
• Experience introducing security controls into production, including testing, controlled deployment, and rollback
• Experience implementing OS hardening and working with native security controls
• Understanding of access-control models, least privilege, endpoint telemetry, file-integrity monitoring, and host-isolation techniques
• Ability to automate operational work using at least one scripting language such as Python, Bash, or PowerShell
• Clear communication with technical colleagues and system owners, reliable documentation, and the ability to follow issues through to a verified result
• Upper-Intermediate English

Will be a plus

• Experience administering a self-managed Elastic or another SIEM platform
• Experience with endpoint DLP solutions or Microsoft Defender
• macOS security and device-management tools such as Mosyle, ManageEngine, Ansible, or Puppet
• Experience with CIS Benchmarks, DISA STIG, or native OS security controls (SELinux, AppArmor, FileVault, BitLocker, etc.)
• Experience supporting a large, distributed fleet of endpoints or servers, ideally in fintech, trading, or another performance-critical environment
• Technical education in Information Security, Computer Science, or a related field

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays according to the company’s approved holiday calendar
• Medical budget
• Remote work
• Professional education budget
• Language-learning budget
• Wellness budget covering gym membership, sports equipment, and related expenses

We're hiring a Cybersecurity Risk Manager to join a large-scale IT security programme for a major EU agency, delivered through a specialist staffing partner. This is a fully on-site role at the agency's headquarters in Warsaw (100% intra-muros), with no travel foreseen.

The role sits within a highly regulated environment, protecting critical assets and infrastructure, and requires a Personal Security Clearance at CONFIDENTIEL UE/EU CONFIDENTIAL level (screening initiated within the first 45 days of assignment).

Logistics

• Location: Warsaw, Poland - fully on-site, 100% intra-muros, no travel foreseen
• Engagement: framework contract, 12-month initial term with up to 3 annual renewals (up to 48 months total)
• Clearance: Personal Security Clearance required (CONFIDENTIEL UE/EU CONFIDENTIAL), to be initiated within the first 45 days
• Selection process: written test and interview

You'll own the organisation's cybersecurity risk-management lifecycle end to end - from asset inventory and threat/vulnerability assessment through to control design, monitoring, and executive reporting - helping keep risk within acceptable levels across the organisation's assets.

What you'll do

• Develop and maintain the organisation's cybersecurity risk-management strategy
• Manage the asset inventory
• Identify and assess cybersecurity threats and vulnerabilities
• Profile the threat landscape and attacker capability
• Assess risks and propose treatment options (controls, mitigation, avoidance) aligned to strategy
• Monitor control effectiveness and risk levels
• Keep risk within acceptable levels for the organisation's assets
• Develop, maintain, report, and communicate the full risk-management cycle

What you bring

• Strong background in risk assessment, risk-management framework implementation, and stakeholder risk communication
• 9+ years overall IT experience, with 6+ years in a similar risk-management role
• Level 7 education (Master's degree or higher)
• English at C1 level
• At least four of: CISA, CISM, CRISC, CISSP, CGRC, CSSLP, CCSP, CISSP-ISSMP, GSNA, GCCC, GIAC Certified ISO-27000 Specialist, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, ISO 27005 Risk Manager (or internationally recognised equivalents)
• Experience producing Business Impact Assessments; ServiceNow GRC risk-assessment module experience a plus
• Experience with personal data protection documentation, threat modelling (graphical and programmatic tools, including for DevOps), Zero Trust Architecture design, Secure SDLC, and Directory Services defence controls
• Comfortable presenting risk-informed recommendations to executives and stakeholders, and building an organisation-wide risk-aware culture

Cyber Harbor is a fast-growing Ukraine-based company founded by engineers and researchers who helped defend critical infrastructure during the war. Our work is shaped by real-world experience, and we build AI-powered systems designed for complex, high-stakes environments.

We are currently looking for a Cybersecurity Engineer who will help us design, implement, and maintain the security foundations of our data processing platforms and the infrastructure around them. This role combines practical security engineering with hands-on research and testing. You will help define internal security standards, protect critical infrastructure, and proactively identify weaknesses in our systems before they can be exploited.

We build complex AI systems that operate on large datasets in sensitive environments. Because of that, security is not just a compliance requirement for us - it is a core engineering discipline.

What You Will Do

• Design and implement cybersecurity policies and internal security standards.
• Help maintain visibility and control over company devices, servers, and infrastructure assets.
• Build and improve systems that help prevent data leaks and unauthorized access.
• Perform internal security assessments of our products, infrastructure, and services.
• Conduct regular internal penetration testing and security audits.
• Use tools such as Nmap, Nuclei, Metasploit, and other scanning frameworks to identify vulnerabilities.
• Investigate potential attack surfaces across APIs, web applications, internal services, and infrastructure.
• Work closely with engineering teams to identify and address security issues early in the development process.
• Help implement monitoring, logging, and detection mechanisms for suspicious activity.
• Document findings, propose mitigation strategies, and support teams in implementing fixes.

What You Need to Join Us

• Strong practical understanding of cybersecurity principles and modern attack vectors.
• Hands-on experience with security testing tools such as Nmap, Nuclei, Metasploit, or similar frameworks.
• Strong understanding of network security, web application security, and infrastructure security.
• Experience conducting penetration tests or security research.
• Familiarity with Linux systems and common server environments.
• Ability to analyze systems and identify weaknesses in architecture or implementation.
• Curiosity, persistence, and a strong desire to understand how systems fail.
• Ability to configure and maintain system-level firewalls (for example, iptables, nftables, or ufw) and enforce network-level access policies.
• Experience configuring and operating Web Application Firewalls (WAFs) such as Cloudflare WAF, ModSecurity, or similar solutions to protect APIs and web services.
• Strong practical understanding of how the Internet works, including DNS, TLS, HTTP, and common attack vectors affecting networked systems.
• Solid knowledge of networking fundamentals, including TCP/IP, routing, NAT, VLANs, and the OSI model.
• Ability to analyze traffic flows, understand how packets move through networks, and diagnose connectivity or security issues across different layers of the network stack.

Relevant certifications such as OSCP, CEH, Security+, or similar are welcome, but real-world experience and demonstrated skills matter more.

Who We Are Looking For

Not looking for someone whose experience is centered primarily on managing large security teams or producing compliance documentation.

Instead, we are looking for highly motivated engineers and curious security-minded builders who enjoy exploring systems, testing assumptions, finding weaknesses in creative ways, and building stronger defenses as a result. Unusual backgrounds, unconventional experience, and self-driven experimentation can be a better fit for this role than a traditional career path.

Why Join Us

• Work on real-world systems operating in high-stakes environments.
• Help secure AI platforms and data infrastructure used in complex operational scenarios.
• Military deferment is available for full-time employees.
• Flexible work format in a results-driven environment.

–––––––––––––––––––––––––––––––Рідною–––––––––––––––––––––––––––––––

Cyber Harbor - українська компанія, заснована інженерами та дослідниками, які брали участь у захисті критичної інфраструктури під час війни. Ми спираємося на реальний практичний досвід і створюємо AI-powered системи для складних середовищ, де помилка може мати високу ціну.

Зараз ми шукаємо Cybersecurity Engineer, який допоможе нам будувати, впроваджувати та підтримувати базові елементи безпеки наших платформ для обробки даних і пов’язаної з ними інфраструктури. Ця роль поєднує практичну security engineering роботу з hands-on дослідженням і тестуванням. Ви допомагатимете формувати внутрішні стандарти безпеки, захищати критичну інфраструктуру та проактивно виявляти слабкі місця в наших системах до того, як ними зможуть скористатися.

Ми створюємо складні AI systems, що працюють із великими обсягами даних у чутливих середовищах. Саме тому для нас безпека - це не просто вимога комплаєнсу, а повноцінна інженерна дисципліна.

Що ви будете робити

• Проєктувати та впроваджувати політики кібербезпеки й внутрішні стандарти безпеки.
• Допомагати підтримувати контроль і прозорість щодо корпоративних пристроїв, серверів та інфраструктурних активів.
• Будувати та вдосконалювати рішення, що знижують ризик витоку даних і несанкціонованого доступу.
• Проводити внутрішні security assessments наших продуктів, інфраструктури та сервісів.
• Регулярно проводити внутрішні penetration tests і security audits.
• Використовувати такі інструменти, як Nmap, Nuclei, Metasploit та інші scanning frameworks, для виявлення вразливостей.
• Аналізувати потенційні attack surfaces на рівні APIs, web applications, внутрішніх сервісів та інфраструктури.
• Тісно взаємодіяти з engineering teams, щоб виявляти й закривати security issues ще на ранніх етапах розробки.
• Допомагати впроваджувати механізми моніторингу, логування та виявлення підозрілої активності.
• Документувати результати, пропонувати mitigation strategies і допомагати командам впроваджувати необхідні виправлення.

Що нам важливо

• Сильне практичне розуміння принципів кібербезпеки та сучасних attack vectors.
• Hands-on досвід роботи з інструментами security testing, такими як Nmap, Nuclei, Metasploit або подібними frameworks.
• Сильне розуміння network security, web application security та infrastructure security.
• Досвід проведення penetration tests або security research.
• Знайомство з Linux-системами та типовими серверними середовищами.
• Вміння аналізувати системи та виявляти слабкі місця в архітектурі або реалізації.
• Допитливість, наполегливість і сильна внутрішня мотивація розуміти, як саме системи дають збій.
• Вміння налаштовувати та підтримувати system-level firewalls (наприклад, iptables, nftables або ufw) і забезпечувати мережеві політики доступу.
• Досвід налаштування та експлуатації Web Application Firewalls (WAFs), таких як Cloudflare WAF, ModSecurity або подібних рішень, для захисту APIs і web services.
• Сильне практичне розуміння того, як у реальності працює Інтернет, зокрема DNS, TLS, HTTP та типові attack vectors, що впливають на мережеві системи.
• Ґрунтовні знання мережевих основ, зокрема TCP/IP, routing, NAT, VLANs і моделі OSI.
• Вміння аналізувати traffic flows, розуміти, як пакети проходять через мережу, та діагностувати проблеми зі з’єднанням або безпекою на різних рівнях network stack.

Профільні сертифікації, такі як OSCP, CEH, Security+ або подібні, будуть плюсом, але для нас важливішими є реальний практичний досвід і підтверджені навички.

Кого ми шукаємо

Не шукаємо людину, чий досвід зосереджений переважно на управлінні великими security teams або підготовці compliance documentation.

Натомість ми шукаємо сильних, мотивованих інженерів і допитливих security-minded фахівців, яким цікаво досліджувати системи, перевіряти припущення, нестандартно шукати слабкі місця й на цій основі будувати сильніший захист. Незвичний бекграунд, нетиповий досвід і self-driven експерименти можуть підійти для цієї ролі краще, ніж класичний кар’єрний шлях.

Чому варто приєднатися

• Працювати з реальними системами, що функціонують у середовищах із високою ціною помилки.
• Допомагати захищати AI platforms та data infrastructure, які використовуються в складних операційних сценаріях.
• Бронювання доступне для full-time працівників.
• Гнучкий формат роботи в середовищі з фокусом на результат.

We are looking for an Application Security Engineer to help build security into the software development lifecycle across our products and platforms.

In this role, you will work closely with Engineering, DevOps, Architecture, and Security teams to integrate security controls into development processes, identify risks early, and help teams build secure solutions without unnecessary bureaucracy.
 

Responsibilities

• Define and validate security requirements for applications, APIs, integrations, and new services.
• Participate in architecture and design reviews to identify security risks at early stages.
• Build and improve Secure Software Development Lifecycle (SSDLC) practices.
• Integrate security controls into CI/CD pipelines, including SAST, DAST, SCA, Secret Scanning, Container and IaC Scanning.
• Perform security assessments of web applications, APIs, backend services, and AI-driven solutions.
• Support development teams with remediation activities, secure coding practices, and security best practices.
• Develop security standards, baselines, templates, and engineering guidelines.
   

Requirements

• 2+ years of experience in Application Security, DevSecOps, Security Engineering, or a similar role.
• Strong understanding of SSDLC and secure development practices.
• Hands-on experience with SAST, DAST, SCA, threat modeling, and security reviews.
• Good knowledge of OWASP Top 10, OWASP ASVS, API Security, Authentication, Authorization, and Secure Design principles.
• Experience integrating security controls into CI/CD pipelines.
• Familiarity with container security and Kubernetes environments.
• Experience with Infrastructure as Code security (Terraform is a plus).
• Scripting skills in Python and/or PowerShell.
• Understanding of software supply chain security and dependency management.
• Strong communication skills and ability to work effectively with engineering teams.
   

Nice to Have

• Experience with Bug Bounty programs or CTFs.
• Experience securing AI/ML systems and services.
• Experience with Azure, AKS, GitHub Enterprise, Checkmarx, Trivy, or similar tooling.

Come Back Agency helps US software and technology companies run their hiring process. We work with delivery and leadership teams to define roles, screen candidates, and manage interviews. Successful candidates are hired directly by the company and become part of its team.

This position is with a US-based software company providing custom development and AI implementation for North American clients. The team builds and maintains production software, including AI-enabled systems, and works in long-term client engagements. Team members operate as part of an internal, distributed team and collaborate directly with client stakeholders.

About the Role

As we scale our operations to meet enterprise demands, we are looking for a driven DevSecOps Engineer who can help harden our cloud infrastructure, elevate our security posture, and drive compliance readiness. In this role, you’ll play a pivotal part in helping us pass enterprise vendor reviews and achieve key certifications like SOC 2 and ISO 27001. You will work closely with cross-functional engineering and leadership teams spanning infrastructure, security, and compliance.

What You Will Do

• Infrastructure & CI/CD: Build, scale, and maintain secure cloud infrastructure and automated CI/CD pipelines.
• Access & Security: Implement robust access controls, least privilege principles, secrets management, and security hardening across environments.
• Observability & Auditing: Standardize logging, monitoring, alerting, and comprehensive audit trails.
• Secure SDLC: Drive secure software development lifecycle practices, including code scanning, dependency scanning, and change control.
• Incident Response: Establish baseline incident response procedures, including runbooks, on-call expectations, and structured post-incident reviews.
• Compliance Readiness: Take ownership of technical controls and evidence gathering for SOC 2 and/or ISO 27001 frameworks.
• Vulnerability Management: Maintain proactive vulnerability patching routines for infrastructure and dependencies.
• Reliability & Recovery: Enhance backup, disaster recovery, and business continuity practices.
• Client Security Support: Respond to client security questionnaires and support audits with clear technical answers and evidence.

Requirements

• Experience: 2+ years of hands-on DevOps experience managing cloud infrastructure and deployment pipelines.
• Cloud & IaC: Strong practical experience with AWS (IAM, networking, compute, logging) and Terraform (Infrastructure as Code).
• Containers & GitOps: Hands-on experience with Kubernetes (Amazon EKS preferred), Helm, and GitOps workflows (ArgoCD or similar).
• CI/CD: Experience building and configuring CI/CD pipelines from scratch (e.g., Bitbucket Pipelines, GitLab CI, GitHub Actions).
• Security & Compliance: Familiarity with modern security tooling (SAST, DAST, dependency scanning, secret scanning), combined with hands-on experience in SOC 2 and/or ISO 27001 compliance preparation (controls implementation, gap analysis, and evidence collection using Security Hub or similar cloud security tooling).
• Documentation & Process: Strong ability to document systems clearly and collaborate effectively with auditors or compliance platforms.
• Communication: B2+ English level (upper-intermediate or higher) for seamless daily collaboration with US-based client stakeholders.

Nice to Have

• AWS certifications (e.g., DevOps Engineer - Professional or SysOps Administrator Associate).
• Experience with compliance automation tools such as Vanta, Drata, or Secureframe.
• Background working in regulated industries (e.g., HIPAA).

What We Offer

• Working hours aligned with US time zones, typically 16:00–23:59 Kyiv time.
• Company-sponsored English lessons to support clear and confident communication.
• Paid vacation and sick days.
• Fully remote work.
• Opportunities for professional growth within the team.
• Structured, personalized onboarding to help you ramp up effectively.

Apply with your resume and a short note outlining your relevant experience. You can also submit it through our website at comeback.ua. Selected candidates will be contacted by Come Back Agency.

RedCore is an international business group that creates technological solutions for digital markets. 

Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies.

Powering Growth from the Core — this is the key mission laid under RedCore’s strong foundation. This is how we consistently stay ahead: by evolving and creating scalable solutions, while remaining committed to open and transparent communication with our partners.

We’re looking for a sharp and driven Security specialist to join our team!

Requirements:

- Higher education in Law or Economics.
- At least 3 years of experience in HR/internal and economic security within private enterprises.
- Proven experience in background checks of individuals and legal entities.
- Previous experience in law enforcement is a strong advantage.
- Knowledge of security systems and protocols.
- Experience collaborating with polygraph specialists.
- Strong experience working with databases.
- Proficient PC user.
- Russian or Ukrainian language - C1 and above
- Fluent English, including spoken communication.
- Willingness to travel abroad to ensure security at exhibitions and conferences.

Responsibilities:

- Conduct regular risk assessments to identify vulnerabilities and threats affecting the holding’s assets.
- Respond promptly to security-related incidents, including investigation and corrective measures.
- Prepare security status reports, analyze incidents, and develop recommendations for improvement.
- Collaborate with other departments to integrate security considerations into business processes.
- Ensure protection of personal data (GDPR compliance) and trade secrets.
- Conduct background checks during recruitment and support exit processes.
- Organize security measures during corporate events, exhibitions, and conferences.

Our benefits to you:

- Modern corporate equipment based on macOS or Windows and additional equipment are provided;

- Paid vacations, sick leave, personal events days, days off;

- Referral program — enjoy cooperation with your colleagues and get the bonus;

- Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences;

- Rewards program for mentoring and coaching colleagues;

- In-house Travel Service;

- Multiple internal activities;

- Other benefits could be added based on your location.

Iterasec works with clients worldwide, helping them find vulnerabilities and secure their products. Our projects range from mobile/web applications to complex modern cloud and automotive stacks. We work with both small product companies as well as Fortune 500 enterprises.

We are looking for a Middle/Senior Security Consultant / Penetration tester to work on and lead penetration testing and vulnerability/cloud security assessment projects.

In this role, you will work on technically challenging projects and also spend some time leading/mentoring our junior pentesting colleagues.

Required skills

- 1.5+ years of intensive commercial experience

- OSCP, eWPTx2 or similar would be a plus

- Scripting/coding skills and being comfortable with advanced pentesting tooling

- Strong knowledge of mobile/web security

- Comfortable with cloud and container security

- Basic RE skills

- Ability to mentor/lead colleagues

- Strong ability and drive to learn and develop cybersecurity skills

- Technical English (Intermediate+)

We offer

- Good salary + bonus system

- Diverse project portfolio and technologies to work with

- Rewarding environment: brilliant team ready to share knowledge and collaborate

- Courses and conferences which are relevant to the position are sponsored by the company.

- We are a remote-first company with full WFH support and a flexible work schedule.

Responsibilities

- Participate in various pentesting projects

- Lead junior colleagues

- Perform threat modeling in pentesting and security assessment projects

- Create assessment documentation and reports, clearly identifying vulnerabilities and associated remediation steps

- Consult clients on efficient issues remediation

- Conduct security researches

- Develop tools and scripts to automate and improve current pentesting processes

Iterasec works with clients worldwide, helping them find vulnerabilities and secure their products. Our projects range from mobile/web applications to complex modern cloud and automotive stacks. We work with both small product companies as well as Fortune 500 enterprises.

We are looking for a talented and motivated Junior Pentester who will join our security team to work on penetration testing and vulnerability/cloud security assessment projects.

We expect a short motivation letter where you can explain your skills, achievements and motivation.

Required skills

- Solid non-commercial cybersecurity experience, such as HTB/THM

- Junior-level cybersecurity certifications would be a plus.

- Comfortable with basic application security testing and common vulnerabilities (like OWASP Top 10, CWE Top 25) and cybersecurity fundamentals

- Strong basic IT skills: Linux, networking (TCP/IP, DNS, HTTP etc.)

- Some experience in scripting/coding languages, such as Java, JS, Python, Shell, etc.

- Strong drive to learn and develop cybersecurity skills

- Technical English (Intermediate)

We offer

- Good salary + bonus system

- Rewarding environment: brilliant team ready to share knowledge and collaborate

- Support in obtaining professional certifications, such as BSCP, OSCP, eWPTX, cloud certifications, etc.

- Courses and conferences which are relevant to the position are sponsored by the company.

- We are a remote-first company with full WFH support and a flexible work schedule.

Responsibilities

- Execute penetration tests and security assessments as part of a team, including internal/external networks, web and mobile applications, Windows and Linux environments, cloud architectures, IoT devices, and more

- Create assessment documentation and reports, clearly identifying vulnerabilities and associated remediation steps

- Conduct security research