Jobs Security

We are looking for a strong Anti-Fraud specialist to join a new iGaming project at the pre-launch stage.
⭐ About BetVam

BetVam is a new licensed Ukrainian iGaming operator currently in the active launch phase and building its core business processes from the ground up.

We are creating a modern betting and casino platform focused on long-term growth, excellent customer experience, operational excellence, and full compliance within a regulated market.
♠️ Position Details

Location: Kyiv (Office / Hybrid)

Employment Type: Full-time

Start Date: ASAP

Project Stage: Pre-launch, Product Launch Phase
✅ Key Responsibilities

Monitor player activity, deposits, withdrawals, bonuses, payment transactions, and behavioral patterns to detect suspicious activity.
Investigate bonus abuse, multi-accounting, payment fraud, chargebacks, account takeovers, and other fraud cases.
Analyze user behavior, transaction history, device data, and payment patterns to identify risks.
Prepare case conclusions and recommendations: additional verification, payment holds, restrictions, or escalation.
Support the setup and improvement of fraud rules, alerts, monitoring workflows, and operational controls.
Work closely with Payments, AML, Compliance, Customer Support, Product, and Finance teams.
Track fraud trends, recurring abuse patterns, and emerging threats in iGaming.
Support fraud reporting, KPIs, and internal fraud awareness initiatives.

➡️ What Is Important to Us

2+ years of experience in Anti-Fraud, Fraud Prevention, Risk, Payment Risk, or a similar role, preferably in iGaming.
Understanding of sportsbook/casino fraud schemes, bonus abuse, multi-accounting, chargebacks, payment fraud, and account security risks.
Experience with fraud monitoring tools, anti-fraud systems, risk platforms, or transaction monitoring systems.
Strong analytical skills and ability to investigate complex cases using data.
Understanding of payments, PSPs, deposits, withdrawals, and chargeback processes.
Knowledge of AML, KYC, responsible gaming, and regulated gambling markets will be a plus.
Confident Excel / Google Sheets skills and experience with reporting tools.
Ability to make risk-based decisions in a fast-paced environment.
Strong communication skills and ability to work with cross-functional teams.

Who We Are Looking For

We are looking for a proactive and analytical Anti-Fraud Specialist who understands iGaming fraud risks and enjoys hands-on investigation work.

This role is a great fit for someone who wants to join a licensed Ukrainian iGaming project at the pre-launch stage, help shape anti-fraud processes from the beginning, and play a key role in building a secure and scalable product.

For our partner, we are looking for an Anti-Fraud  specialist 

Licensed iGaming Project | Pre-launch | Kyiv, Ukraine

About the Company

They are an international product company preparing to launch a licensed online casino for the Ukrainian market. Currently in the pre-launch phase, we are building a modern, technology-driven business focused on operational excellence, regulatory compliance, and long-term sustainable growth.

Our team brings together experienced professionals from the iGaming, IT, FinTech, Product, Compliance, and Operations domains, working collaboratively to build a scalable product that meets the highest industry standards.
✅ Key Responsibilities

Monitor player activity, deposits, withdrawals, bonuses, payment transactions, and behavioural patterns to detect suspicious activity.
Investigate bonus abuse, multi-accounting, payment fraud, chargebacks, account takeovers, and other fraud cases.
Analyze user behavior, transaction history, device data, and payment patterns to identify risks.
Prepare case conclusions and recommendations: additional verification, payment holds, restrictions, or escalation.
Support the setup and improvement of fraud rules, alerts, monitoring workflows, and operational controls.
Work closely with Payments, AML, Compliance, Customer Support, Product, and Finance teams.
Track fraud trends, recurring abuse patterns, and emerging threats in iGaming.
Support fraud reporting, KPIs, and internal fraud awareness initiatives.

➡️ What Is Important to Us

2+ years of experience in Anti-Fraud, Fraud Prevention, Risk, Payment Risk, or a similar role, preferably in iGaming.
Understanding of sportsbook/casino fraud schemes, bonus abuse, multi-accounting, chargebacks, payment fraud, and account security risks.
Experience with fraud monitoring tools, anti-fraud systems, risk platforms, or transaction monitoring systems.
Strong analytical skills and ability to investigate complex cases using data.
Understanding of payments, PSPs, deposits, withdrawals, and chargeback processes.
Knowledge of AML, KYC, responsible gaming, and regulated gambling markets will be a plus.
Confident Excel / Google Sheets skills and experience with reporting tools.
Ability to make risk-based decisions in a fast-paced environment.
Strong communication skills and ability to work with cross-functional teams.
English: Intermediate level is a bonus

Who We Are Looking For

We are looking for a proactive and analytical Anti-Fraud Specialist who understands iGaming fraud risks and enjoys hands-on investigation work.

This role is a great fit for someone who wants to join a licensed Ukrainian iGaming project at the pre-launch stage, help shape anti-fraud processes from the beginning, and play a key role in building a secure and scalable product.

We are looking for a  DevSecOps Engineer to join our team and help maintain and improve a secure cloud infrastructure on AWS. Our applications run on Kubernetes (EKS), Cloudflare is used for edge protection, and Wazuh serves as our SIEM / HIDS platform.
 

This role is suited for an engineer with hands-on experience who will work within an existing architecture and established best practices, rather than owning the full system design.

Requirements:
AWS / Cloud

• 2+ years of commercial experience with AWS;
• Hands-on experience with EKS or other managed Kubernetes platforms;
• Basic understanding of IAM, VPC, Security Groups, and CloudWatch.

Kubernetes / Containers

• Experience with Kubernetes (deployments, services, ingress);
• Understanding of Kubernetes RBAC (ability to apply and maintain existing policies);
• Experience with Docker (building and running containers).

Security / Monitoring

• Experience with Wazuh or other SIEM / security monitoring solutions;
• Understanding of logging, alerting, and basic HIDS principles;
• Hands-on experience with Cloudflare (DNS, basic WAF configuration).

DevOps / Automation

• Experience with CI/CD tools (GitLab CI, GitHub Actions);
• Infrastructure as Code: Terraform;
• Bash or Python for basic automation tasks.

Networking

• Understanding of HTTP/S, DNS, and TLS;
• Basic knowledge of cloud networking concepts.

Responsibilities:

• Maintain and enhance CI/CD pipelines with integrated security checks;
• Support and operate Kubernetes clusters (AWS EKS);
• Configure and maintain Wazuh (agents, basic rules, alerts, dashboards);
• Support and optimize Cloudflare services (DNS, basic WAF rules, rate limiting);
• Deploy and update infrastructure using IaC (Terraform / CloudFormation);
• Manage access controls (AWS IAM, Kubernetes RBAC);
• Monitor logs and security alerts and participate in incident response;
• Apply basic hardening practices for containers and EKS nodes;
• Collaborate with development teams to ensure secure application deployments;
• Configure infrastructure according to CIS benchmarks.

Nice to Have:

• Experience with security scanning tools (Burp, Snyk, kube-bench);
• Familiarity with AWS Security Hub or GuardDuty;
• Basic understanding of Zero Trust principles;
• Experience with multi-account AWS environments;
• Exposure to security policies or compliance controls;
• Experience with ELK Stack.
   

What We Offer:

• Work in a team with established processes and mentoring;
• Clear growth path toward a Senior DevSecOps Engineer role;
• Modern cloud-native technology stack (AWS, Kubernetes, Terraform);
• Flexible work format (remote / hybrid);
• Competitive compensation based on experience

We are looking for a Senior Security Engineer with deep, hands-on Active Directory expertise to secure and harden enterprise identity infrastructure. You will own AD architecture, hybrid identity, and PKI across forests and domains, with a strong focus on security hardening and reducing attack surface. This is a senior, independent role — you should be comfortable owning identity security end-to-end with minimal ramp-up.

Details
Work setup: Remote/hybrid, with paid onsite visits to Baltic offices approximately once per month for 2–3 days
Location: Europe, strong preference for the Baltics
Duration: Long-term
Type of collaboration: Full-time employment
English: Upper-intermediate / fluent

About the role
You will be responsible for the design, hardening, and ongoing security of Active Directory environments — spanning forest and domain architecture, DNS, Group Policy, and replication. A core part of the role is reducing the identity attack surface: applying security hardening best practices, managing Kerberos configuration, and running Active Directory Certificate Services (PKI) securely. You will also work across hybrid identity, connecting on-prem AD with Microsoft Entra ID and ADFS, ensuring consistent security posture across both environments.

You have
Strong, hands-on experience with Active Directory architecture — forests, domains, trusts, and multi-domain environments
Deep knowledge of Windows Server, DNS, Group Policy, and AD replication
Proven experience with security hardening of AD environments and Kerberos
Hands-on experience with PKI and Active Directory Certificate Services (AD CS)
Experience with Microsoft Entra ID, hybrid identity, and ADFS
Upper-intermediate or fluent English

What to do
Design and maintain secure Active Directory forest and domain architecture
Harden AD environments against common attack paths (Kerberoasting, golden/silver ticket, DCSync, etc.)
Manage DNS, Group Policy, and AD replication across the environment
Administer and secure PKI infrastructure via Active Directory Certificate Services
Own hybrid identity integration between on-prem AD, Microsoft Entra ID, and ADFS
Audit and remediate security gaps across identity infrastructure

## About Us

Smirnov Labs is a fast-growing engineering company founded by an ex-Googler. We help product teams launch and scale quickly by leveraging modern technology and AI-assisted development.

Our projects are diverse — we partner with clients at the earliest stages and own the technical delivery end-to-end.

We're a small, senior-heavy team where every engineer has real impact. No bureaucracy, no hand-holding — just sharp people shipping fast.

This is an outstaff role: you'll be embedded directly with a client's engineering team as part of our delivery group, securing AI-powered products in a modern, security-conscious, SOC 2-aligned environment.

## What You'll Do

- Own security across applications, databases, cloud infrastructure, and development pipelines — identify, prioritize, and remediate risks.

- Drive SOC 2 control implementation, evidence collection, documentation, testing, and audit preparation.

- Apply and enforce security principles across identity and access management, encryption, vulnerability management, logging, monitoring, incident response, and change management.

- Harden AWS environments (IAM, VPC, Secrets Manager, CloudWatch) and Linux servers (system hardening, patch management, monitoring).

- Implement repository security in GitHub — access controls, branch protections, secret management, and secure CI/CD workflows.

- Build safeguards for LLM usage — sensitive-data handling, prompt injection, hallucinations, and inappropriate model responses across Anthropic Claude, OpenAI, Google Gemini, and xAI Grok integrations.

- Review AI-generated code for security, maintainability, and compliance with organizational standards.

- Maintain technical documentation, policies, procedures, access reviews, and audit trails.

- Communicate directly with the client's software, infrastructure, and engineering teams, business stakeholders, and third-party vendors — no layers in between.

- Use AI-assisted development tools (Claude, Claude Code, Cursor, GitHub Copilot) as part of your daily workflow.

## What We're Looking For

- 5+ years in cybersecurity or security engineering

- Hands-on SOC 2 experience — control implementation, evidence collection, and audit preparation

- Strong grasp of IAM, encryption, vulnerability management, logging and monitoring, incident response, and change management

- Cloud security experience on AWS and Linux system hardening

- GitHub security practices — branch protection, secret management, and secure CI/CD

- Scripting for automation and tooling (Python, Bash, or similar)

- Familiarity with securing LLM/AI systems (prompt injection, data leakage, RAG safety) a strong plus

- Comfortable working in a codebase and infrastructure under active change, with strong code review and automated review gates

- Comfort working in the US timezone (overlapping working hours required)

- Upper-Intermediate or higher English

- Ability to own and drive work independently with minimal supervision

## What We Offer

- Competitive salary above market average

- Fully remote work

- Flat structure — work directly with the client's engineering team, no middle management

- Diverse and technically challenging projects

- Modern AI-powered development workflow

- Small team culture — your voice matters, your work ships

- Paid vacation and sick leave

- Flexible schedule within the US timezone overlap

- Professional and career growth through real ownership, not courses and certificates

## How to Apply

Send your CV with a brief note about a security program, audit, or remediation you're most proud of.

We are looking for an Endpoint Security Engineer to join our Security team. In this role, you will be responsible for implementing, operating, and improving endpoint security controls across corporate workstations, production servers, and critical infrastructure.

You will ensure reliable endpoint visibility, strong security baselines, effective telemetry collection, and containment capabilities across Windows, Linux, and macOS environments. You will work closely with IT, Cyber Defense, IAM, and Compliance teams to maintain measurable endpoint protection coverage and reduce security risks.

Responsibilities

• Deploy, operate, and tune endpoint security controls (EDR/XDR, EPP, MDM) across corporate endpoints, servers, and critical infrastructure
• Monitor endpoint telemetry health, investigate security events, and identify potential security incidents
• Implement and maintain OS security baselines and hardening standards across Windows, Linux, and macOS environments based on CIS Benchmarks, DISA STIG, and internal policies
• Support vulnerability remediation, patching activities, and endpoint security improvements in collaboration with IT and infrastructure teams
• Configure and maintain endpoint protection capabilities, including file integrity monitoring and endpoint isolation readiness for critical systems
• Support containment and response activities for compromised or non-compliant devices together with SOC and Cyber Defense teams
• Assist with tracking endpoint security gaps, remediation actions, and configuration improvements
• Document endpoint security configurations, operational procedures, and investigation findings

Requirements

• 3+ years of hands-on experience in Endpoint Security, Endpoint Protection, Infrastructure Security, System Security, or a similar cybersecurity role
• Higher education in Computer Science, Information Security, Software Engineering, or a related technical field is preferred
• Practical experience securing both desktop endpoints and server workloads in enterprise environments
• Experience supporting environments with 1,000+ managed endpoints is highly preferred
• Strong hands-on experience with EDR/XDR, Endpoint Protection Platforms (EPP), and Mobile Device Management (MDM) solutions
• Deep understanding of Windows, Linux, and macOS architecture, services, processes, logging, and security mechanisms
• Experience implementing OS hardening based on CIS Benchmarks, DISA STIG, or similar security standards
• Knowledge of operating system access control models, RBAC, and least-privilege principles
• Experience with native operating system security features such as Microsoft Defender, Attack Surface Reduction (ASR), BitLocker, SELinux, AppArmor, Gatekeeper, System Integrity Protection (SIP), and FileVault
• Understanding of endpoint telemetry, file integrity monitoring, and endpoint isolation techniques
• Scripting skills for automation using PowerShell and Python
• English — Intermediate\Upper-Intermediate level

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

At ZentixSoft, we live by the “People over processes” principle—and we actually mean it. We are expanding our cybersecurity and platform engineering direction for our strategic international partners and are looking for two highly mature Senior Security Engineers to join a long-term enterprise project in the banking sector.
 

Note: This is an Outstaffing role where you will join a high-impact infrastructure team. The initial contract runs until December 31, 2026, with a strong roadmap for extension based on performance.
 

💡 Why ZentixSoft?
 💸 Salary Review: A structured system of compensation reviews aligned with your expertise and engineering growth. 
⚖️ Work-Life Balance: No senseless overtime.
🦾 Trust and Transparency: Zero micromanagement and no invasive time-trackers—we fully trust your professional autonomy. 🎁 Gifts & Culture: Corporate gifts for holidays, birthdays, and a true team atmosphere where your voice always matters.
 

If you are ready to drive platform security for a massive financial ecosystem, here is what our perfect match looks like:

1️⃣ Your Experience: You are a senior-level specialist with 7–10+ years of hands-on experience in enterprise environments. 
2️⃣ Active Directory & Identity: Deep expertise in Active Directory architecture, AD tiering, ESAE/Red Forest, Microsoft Entra ID hybrid integration, PKI (AD CS), and Kerberos. 
3️⃣ Automation & Tech: Strong PowerShell scripting skills, disaster recovery, and robust networking/troubleshooting skills. 
4️⃣ Compliance & Soft Skills: Experience with security auditing (preferably NIST and/or DORA), fluent English, and excellent stakeholder management skills. 
5️⃣ Nice to Have: Microsoft Azure/AWS experience or a background in banking/financial services.
 

Project Details: 
📍 Location: Remote, but ONLY candidates currently located in Europe (CET/EET). 
✈️ Work Model: Occasional onsite visits to the Baltics (approx. once per month for 2–3 days, fully covered). 
⏳ Duration: Long-term (Until Dec 31, 2026, with extension potential). 
🚀 Start: ASAP.

Must-Have Skills

• 5+ years of experience as a Cybersecurity Researcher (supply-chain attacks, malware analysis)
• Familiarity with open-source registry ecosystems (npm, PyPI, Maven) and their respective attack surfaces
• Proven ability to ship software in a production environment
• Strong understanding of the SDLC and modern CI/CD pipelines
• Comfortable leveraging AI tools to optimize research and development processes
• Proactive and independent mindset, with the ability to take full ownership of projects

Nice to Have

• Active contributions to open-source security tools or research projects
• Hands-on experience with decompilers, debuggers, and network traffic analysis
• Advanced malware analysis experience (obfuscation, encryption, anti-analysis, and sandbox-evasion techniques)
• Web application penetration testing experience
• Published CVEs, coordinated disclosures, writeups, blogs, or research papers
• Experience public speaking at major industry conferences (e.g., Black Hat, DEFCON, RSAC)
• A genuine passion for cybersecurity, open-source communities, and solving complex ecosystem threats

The platform continuously gathers cryptography-related information and surrounding context from a wide range of external systems - cloud providers, EDRs, vulnerability scanners, and more. We currently maintain around 20 integrations, and this number is growing quickly. We're looking for a technically curious, highly motivated person to own the research and verification side of these integrations: understanding what data each service exposes, how to access it, and how to keep our coverage current as these services evolve. This role suits someone early-to-mid in their career who enjoys digging into APIs, testing hypotheses hands-on, and mapping out how systems connect - with scope and ownership that can scale to the right person's experience level.

What you'll do:

• Continuously monitor our integrated third-party services (cloud providers, EDRs, vulnerability scanners, etc.) to understand what information is available and how it can be accessed - via APIs, licensing tiers, permissions, and other access methods.
• Actively connect to and verify these APIs hands-on: test endpoints, confirm data availability, and validate that integrations behave as expected.
• Identify and suggest which data from each service is most relevant and valuable for our platform to consume.
• Track changes across these services - new endpoints, deprecated features, updated licensing, and newly released functionality - and flag anything that affects our integrations.
• Document findings clearly so engineering and product teams can act on them.

• Research and evaluate new potential integrations as our coverage expands.

   

What we're looking for:

• Technical mindset with genuine curiosity about how systems and APIs work.
• Hands-on comfort with API tools such as Postman (or similar - Insomnia, curl, etc.).
• Basic programming/scripting ability (e.g. Python or JavaScript) - enough to test, parse responses, and automate small checks.
• Comfort reading API documentation and translating it into practical understanding.
• High motivation, self-direction, and the persistence to chase down how a given system actually works.

• Good written communication for documenting findings.

   

Nice to have: 

• Exposure to or interest in cybersecurity concepts (cryptography, vulnerability management, endpoint security).
• Familiarity with cloud provider APIs (AWS, Azure, GCP), EDR platforms, or vulnerability scanners.
• Understanding of authentication schemes (OAuth, API keys, tokens) and REST/JSON.
• Any experience with API testing, monitoring, or integration work.

Why this role:

• Broad exposure to a large and growing ecosystem of security and cloud tools.
• A clear technical growth path - toward integration engineering or a deeper cybersecurity specialization.
• Real ownership from day one - your research directly shapes what the platform can do.

Performa is an international HR agency specializing in connecting top talent with leading companies across the iGaming, IT, and Marketing industries. We help businesses scale their teams and support professionals in finding opportunities where they can unlock their full potential.

Our client is a fast-growing international FinTech company developing innovative payment products for global markets. The team continuously explores new payment methods, automates financial processes, and builds proprietary technologies that integrate with banks, payment systems, and mobile applications.

As the company grows, they are looking for an R&D Specialist to research payment solutions, analyse mobile applications, and drive process automation.

 

Role Overview

This is a hybrid role combining Technical Research, FinTech R&D, Mobile Analysis, and Product Research. In this role, you'll go beyond identifying technical features or limitations — you'll explore how technologies can be leveraged to build new products, automate processes, and drive business growth.

If you're passionate about researching emerging technologies, analysing mobile applications, navigating complex integrations, and discovering innovative solutions, this role is for you.

Requirements:

• Strong understanding of HTTP/HTTPS, REST APIs, and client-server architecture.
• Experience using network traffic analysis tools such as Charles Proxy, Proxyman, Burp Suite, Fiddler, or similar.
• Good understanding of Android and iOS mobile applications.
• Experience with black-box analysis of applications and services.
• Ability to analyze APIs, network traffic, and client-server interactions.

Nice to Have

• Experience with Frida, Objection, or similar dynamic analysis tools.
• Experience with Appium or other test automation frameworks.
• Basic knowledge of JavaScript, Node.js, HTML, and CSS.
• Understanding of payment systems and FinTech products.
• Hands-on experience with reverse engineering mobile applications.
• Experience using Android Studio, ADB, and Android emulators.
• Experience leveraging AI tools (e.g., ChatGPT, Claude, Gemini, Cursor) for technical research and analysis.

Key Responsibilities

• Research emerging payment methods, financial technologies, and payment services.
• Analyse and reverse engineer mobile applications and web solutions to understand their architecture, logic, and integrations.
• Analyse APIs, network traffic, and data exchange mechanisms.
• Identify opportunities to automate payment-related processes.
• Identify technical limitations, bottlenecks, and potential risks.
• Prepare technical reports and recommendations for the Product and Engineering teams.

• Leverage AI-powered tools to accelerate research, analyse data, and improve technical documentation.

   

What we offer:

• Fully remote work.
• Flexible working hours.
• Competitive salary.
• The opportunity to work on innovative payment products.
• An AI-powered work environment with modern research and automation tools.
• A collaborative and experienced team.
• Opportunities for professional growth and career development.

GR8_TECH builds B2B iGaming platforms for operators who play to lead.

We deliver full-cycle, high-impact tech designed to scale — from seamless integrations and expert consulting to long-term operational support. Our platform powers millions of active players and drives real business growth. Call it what it is: the iGaming Platform for Champions.

With 1000+ GR8 people across locations and time zones, we don’t just ship technology — we help operators build success stories across brands, markets, and geos.

Our ambition drives us. Our people make it real.

If you’re a challenger in spirit and a champion in action — join us.
 

Why this role exists:

This role exists to protect our platform's ecosystem from financial and operational threat actors in real-time. You’ll help us maintain business integrity and user trust by owning the end-to-end evaluation of fraud signals and executing decisive risk mitigation across Sports, Casino, Payments, and KYC domains.
 

What you’ll drive:

Discovery & Decisions

• Interpret complex alerts, rule triggers, and risk model outputs to assess user context accurately.
• Apply internal logic and scoring rules independently to determine precise case outcomes.
• Identify, tag, and document unusual fraud patterns or edge cases to improve predictive logic.

Delivery & Execution

• Process high-volume risk signals in real-time, executing swift actions including limits, verification loops, or account blockings.
• Handle ticket queues related to fraud suspicions, validating bet, payout, and bonus behavior.
• Maintain structured, audit-ready case notes and documentation to support future retrospectives.
• Operate and stress-test the internal RAF toolset, reporting bugs, operational frictions, or logic gaps.

Stakeholder & Cross-Team Collaboration

• Communicate risk findings and critical case details to Payments, Trading, and Compliance teams clearly and constructively.
• Contribute regularly to the shared team knowledge base regarding new rules, tags, and fraud scenarios.
• Assist and mentor junior colleagues on operational nuances and daily queue management.
   

What makes you a GR8 fit:

Must-Have:

• 3+ years of experience in fraud detection, risk management, or investigations within the online casino/iGaming environment (experience with Casino products is a mandatory requirement).
• Readiness to work in a rotating shift schedule, including night shifts
• Strong foundational knowledge of fraud, bonus abuse, and risk patterns in online gaming.
• Proven autonomy in alert-based fraud detection systems—you can handle a wide queue independently.
• Proficiency with operational UI, API-based risk tools, and analytics systems.
• Upper-Intermediate English level for clear, structured cross-team communication and audit documentation.
• High psychological resilience and accountability when making high-stakes decisions under tight SLAs.

Nice-to-Have:

• Experience participating in User Acceptance Testing (UAT) or beta tool rollouts.
• Familiarity with online casino compliance standards and integrity frameworks.
• Basic understanding of data queries (e.g., SQL) to pull and analyze transactional patterns.
   

Why you’ll love working here: 

Benefits Cafeteria — annual budget you allocate to:

Sports • Medical • Mental health • Home office • Languages.

Work-life & support

• Paid maternity/paternity leave + monthly childcare allowance.
• 20+ vacation days, unlimited sick leave, emergency time off.
• Remote-first + tech support + coworking compensation.
• Team events (online/offline/offsite).
• Learning culture with internal courses + growth programs.
   

Our culture & core values:

GR8_TECH culture is how we win — through trust, ownership, and a growth mindset. We move fast, stay curious, and keep it real, with open feedback, room to experiment, and a team that’s got your back.

FUELLED BY TRUST: we’re open, honest, and have each other’s backs.

OWN YOUR GAME: we take initiative and own what we do.

ACCELER8: we move fast, focus smart, and keep it simple.

CHALLENGE ACCEPTED: we grow through challenges and stay curious.

BULLETPROOF: we’re resilient, ready, and always have a plan.

Responsibilities:

• Conduct regular analysis of affiliate traffic to identify fraud across CPA, Hybrid, RevShare, and Fixed models using both internal and third-party analytics tools.
• Analyze user behavior (FTD, retention, unusual patterns) to detect suspicious or incentivized traffic schemes.
• Prepare and update affiliate offer terms and Insertion Orders (IO) with clear anti-fraud conditions.
• Perform pre-checks of new affiliates and deal terms before campaign activation.
• Approve or reject affiliate payouts based on traffic quality evaluation (final compliance check before payment execution).
• Collaborate with affiliate managers to explain payout rejections and clarify reasons for non-payment.
• Suggest improvements to anti-fraud processes and contribute to the development of internal fraud prevention policies.
  
   

Requirements:

• Minimum 1 year of experience in iGaming or Betting as an Affiliate Analyst, Traffic Analyst, or Anti-Fraud Specialist.
• Solid understanding of CPA, Hybrid, and RevShare models and the fraud risks associated with each.
• Proficiency in traffic analysis using tools like Google Sheets and Power BI (user-level).
• Knowledge of common fraudulent patterns such as multi-accounting, bonus abuse, incentivized traffic, and geolocation manipulation.
• Experience in drafting clear and contract-compliant IO (Insertion Order) terms for affiliates.
• Strong attention to detail, high level of accountability, and ability to work with large datasets effectively.
• English B1
  
   

Hard Skills:

• Experience working with affiliate tracking platforms
• Knowledge of CPA, Hybrid, and RevShare models, including payout logic and traffic evaluation
• Proficient in Excel / Google Sheets: formulas, pivot tables, data filtering
• Basic experience with BI tools such as Power BI, Tableau, Looker (a plus)
• Understanding of tracking mechanics: link structure, SubID, S2S postbacks, tracking pixels
• Familiarity with common types of affiliate fraud: incentivized traffic, multi-accounting, bonus abuse, cloaking, proxy/VPN usage
• Experience drafting and reviewing Insertion Order (IO) terms and affiliate agreements
• Ability to analyze traffic anomalies using key metrics such as CR, EPC, Retention, LTV, and ROI
  
   

Soft Skills:

• Strong attention to detail
• Analytical and critical thinking skills
• Ability to clearly argue decisions, including payout rejections
• Flexible and diplomatic communication style
• High sense of responsibility and reliability when handling data and deadlines
• Comfortable working in cross-functional teams (finance, affiliate, legal)
• High ethical standards and respect for confidentiality
• Proactive mindset with a drive to identify issues and suggest improvements
  
   

What do we offer?

1. Remote work.
2. Flexible working hours.
3. Competitive salary paid on time.
4. Friendly and proactive team.
5. No bureaucracy, unnecessary reports, or calls.
6. 20 days of paid leave, 5 sick leave and holidays are days off.

Who We Are 

PAR Retail, with its Open Commerce® product suite and patent pending Wallet Steering® System, empowers Convenience & Fuel Retailers to gain more share of wallet and customer lifetime value than possible with any other solution provider. PAR Retail’s unified Open Commerce product suite consists of: Activate for Intelligent 1:1 Loyalty, Transact for Contactless Commerce, and Experience for Cross-Channel Customer Experiences. PAR Retail’s solutions are supported by a set of subscription-based program management services and are contractually backed by its 1.5X Performance Guarantee. 

Requirements:  
- Operational knowledge of modern operating systems and networking; 

- Experience with common cloud services: AWS, GCP, and Azure; 

- Network Security and expertise in network pentesting; 

- Security testing of web applications, web services, mobile apps (hybrid and native), and IT infrastructure; 

- Understanding security certifications (PCI DSS / SOC2); 

- Ability to apply modern Application Security methodologies and frameworks; 

- Ability to use at least one modern programming language; 

- Practical experience with Burp Suite; 

- Experience with IDS, IPS, SIEM configuration; 

- Upper-intermediate English level. 

Responsibilities:  

- Requirements analysis, performing penetration testing and security audit; 

- BE, WEB, cloud and mobile clients testing; 

- Vulnerability reporting and remediation process; 

- Communication with development and project management teams; 

- Prepare security testing reports; 

- Prepare and support internal documentation for the project. 

PAR Retail Offers: 

- Long-term employment; 

- Competitive compensation with regular performance-based salary and career development reviews; 

- Paid vacations and sick leaves; 

- Health insurance program; 

- Flexible working hours; 

- Sponsored company educational program, corporate library; 

- Funny celebrations, team outings, and company events; 

- A unique and friendly environment where everyone can explore and learn new technologies. 

SOFTSWISS is growing, and we are seeking a skilled Application Security Engineer to join our team. If you are driven by excellence and share our values, we would love to hear from you.
 

Purpose of the role:

Our goal is to make sure that we deploy secure software to production without unnecessary bottlenecks, that applications are properly hardened, and security vulnerabilities, once discovered, are fixed by the developers.

As an Application Security Engineer, you will play a crucial role in ensuring the security of our applications throughout the entire software development lifecycle (SDLC). You will partner closely with the product teams to identify, analyze, and mitigate security vulnerabilities, contributing to the creation of trustworthy and robust products.
 

Key responsibilities:

• Partner with product teams during the design phase to facilitate threat modeling and risk assessment sessions.
• Perform in-depth manual code reviews on critical applications to identify logical vulnerabilities as part of white-box security assessments.
• Tune and adjust rulesets for automated security scanning tools to reduce false positives and improve detection rates.
• Develop scripts and automation tools to streamline workflows and free up time for more complex analysis.
• Assist developers in understanding security risks and threats discovered during risk assessments, threat modeling, and dynamic testing.
• Triage vulnerabilities from the bug bounty program, collaborating with external researchers and internal engineering teams to resolve discovered flaws.
• Collaborate with Dev/QA teams throughout the development lifecycle to enhance the application's security posture by providing dedicated security consulting, continuous knowledge sharing, and actionable guidance.
• Develop and maintain the internal security knowledge base, including comprehensive secure coding guidelines and technical manuals for standard security features.

Required Experience:

• 3+ years of experience in application security, software development, or related technical roles.
• Solid understanding of web fundamentals (e.g., HTTP/HTTPS protocols, cookie storage mechanisms, and session management).
• Knowledge of web application security mechanisms and controls (e.g., SOP, CORS, CSP).
• Comprehensive understanding of common web vulnerabilities (e.g., OWASP Top 10) and their practical mitigation strategies.
• Knowledge of secure system and application architecture alongside secure-by-design principles.
• Practical, hands-on expertise in identifying vulnerabilities through manual security assessments and secure code reviews.
• Ability to clearly articulate and explain the business impact of identified threats and vulnerabilities to developers and product teams.
• A strong security-first mindset with a continuous drive to learn and achieve excellence in the cybersecurity field.
• University degree in Computer Science, Information Security, or a related field (or an equivalent combination of education and practical experience).
• High proficiency in English and Russian (B2 level or above) for effective technical communication.

Nice to have:

• Passion about programming.
• Technical knowledge of network and operating systems security.
• Hands-on DevSecOps experience.
• Practice of participation in bug bounty programs and/or CTFs.
• Knowledge of SAST/DAST tools, including customization.
• Relevant certifications (i.e., BSCP, eWPT, etc.).

We are looking for a Cyber Defense Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection, investigation, containment, and exposure reduction. You will lead our security operations function, making the organization faster in responding to threats while continuously improving controls across the attack surface.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging
• Hands-on experience with at least one enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response
• Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences
• English - Upper-Intermediate or higher

Will be a plus

• Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes
• Hands-on background as a SOC analyst, incident responder, or detection engineer prior to moving into management
• Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one
• Familiarity with threat intelligence platforms and threat-informed defense methodologies
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH) or equivalent

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)