Jobs Security

We are looking for a Detection Engineering & Automation Lead to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a SOC Lead (Detection Engineering and Automation) to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a Head of Security Operations Center to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection, investigation, containment, and exposure reduction. You will lead our security operations function, making the organization faster in responding to threats while continuously improving controls across the attack surface.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging
• Hands-on experience with at least one enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response
• Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences
• English - Upper-Intermediate or higher

Will be a plus

• Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes
• Hands-on background as a SOC analyst, incident responder, or detection engineer prior to moving into management
• Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one
• Familiarity with threat intelligence platforms and threat-informed defense methodologies
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH) or equivalent

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Description

The overall project is designated for intelligent Fleet De-Carbonization based on an ambitious science-based idea targeting the achievement of net-zero emissions. The solution is planned to be a fully integrated software solution that can maximize efficiencies in both operational and energy supply management perspectives.

#LI-IN1

Requirements

Knowledge of secure architecture & secure design (e.g. Zero Trust)
Strong knowledge of cybersecurity processes – SSDF by NIST
Cross-team collaboration
Experience Azure cloud:
Azure Kubernetes security
Azure IdP (Entra & B2C)
Azure Pipelines
Experience with scanning tools : SonarCloud & Snyk
Vulnerabilities management
Secure architecture design best practices (e.g. Zero Trust)
Strong knowledge of secure design:
Data encryption
Data anonymization
Secure communication (HTTPS – TLS, PKI)
Identity and Access Management
Scripting experience (e.g. Bash, Python, PS)

Job responsibilities

Owning and maintaining security activities required by SSDF process
Reporting to stakeholders (Head of Engineering & CISO)
Collaboration with SOC, Development, architects team
Vulnerabilities management
Solution design and requirements creation
Supporting/advising development team in security challenges

RedCore is an international business group that creates technological solutions for digital markets. 

Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies.

Powering Growth from the Core — this is the key mission laid under RedCore’s strong foundation. This is how we consistently stay ahead: by evolving and creating scalable solutions, while remaining committed to open and transparent communication with our partners.

We’re looking for a sharp and driven Security specialist to join our team!

Requirements:

- Higher education in Law or Economics.
- At least 3 years of experience in HR/internal and economic security within private enterprises.
- Proven experience in background checks of individuals and legal entities.
- Previous experience in law enforcement is a strong advantage.
- Knowledge of security systems and protocols.
- Experience collaborating with polygraph specialists.
- Strong experience working with databases.
- Proficient PC user.
- Russian or Ukrainian language - C1 and above
- Fluent English, including spoken communication.
- Willingness to travel abroad to ensure security at exhibitions and conferences.

Responsibilities:

- Conduct regular risk assessments to identify vulnerabilities and threats affecting the holding’s assets.
- Respond promptly to security-related incidents, including investigation and corrective measures.
- Prepare security status reports, analyze incidents, and develop recommendations for improvement.
- Collaborate with other departments to integrate security considerations into business processes.
- Ensure protection of personal data (GDPR compliance) and trade secrets.
- Conduct background checks during recruitment and support exit processes.
- Organize security measures during corporate events, exhibitions, and conferences.

Our benefits to you:

- Modern corporate equipment based on macOS or Windows and additional equipment are provided;

- Paid vacations, sick leave, personal events days, days off;

- Referral program — enjoy cooperation with your colleagues and get the bonus;

- Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences;

- Rewards program for mentoring and coaching colleagues;

- In-house Travel Service;

- Multiple internal activities;

- Other benefits could be added based on your location.

We are inviting you, a highly motivated and results-oriented Security Manager (Hybrid Infrastructure) to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success.
 

Responsibilities

• Own and lead Hybrid Infrastructure Security across cloud, network, identity, endpoint, and data domains
• Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions
• Lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments
• Manage cloud IAM and security-group guardrails in close collaboration with Platform and SRE teams
• Operate and mature endpoint security (EDR/XDR/MDM) across managed devices, including hardening and telemetry health
• Own data security and cryptography controls: KMS, secrets management, PKI, and certificate lifecycle
• Lead, mentor, and develop a team of security engineers (4 direct reports — Cloud & Network, Endpoint, IAM, Data Security & Cryptography)

Track, analyze, and report enterprise security metrics

Requirements

• 5+ years of experience in managing and developing security teams
• Proven track record in hands-on cybersecurity engineering roles
• Enterprise-level background
• Practical experience with on-premises environments
• Solid experience with networking
• Hands-on experience with cloud platforms
• Broad experience across cloud posture, network, identity, endpoint, and data protection security domains
• Experience with CSPM/CNAPP/CWPP tooling and cloud guardrails (WAF, DNS security, IaC scanning)
• Experience with cloud IAM and security-group/IaC security patterns
• Experience operating EDR/XDR and MDM solutions
• Experience with KMS, secrets management, PKI, and certificate management
• Ability to enforce security controls without unnecessarily blocking delivery for Platform/SRE/DevOps teams
• Upper-Intermediate English and higher

Will be a plus

• Higher education in Computer Science, Information Security
• Background in fintech, brokerage, trading platforms, payments, or other regulated environments
• Track record of building or maturing an enterprise/cloud security function from an early stage
• Familiarity with tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk
• Knowledge of Kubernetes/container security and cloud-native architectures
• Exposure to SOC 2, ISO 27001, or DORA compliance frameworks
   

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Employment Type: Full-Time

Experience: 2–4 years

About the Role

We are looking for a GRC Analyst to join our Information Security and Compliance team. You will run day-to-day governance, risk and compliance activities — risk assessments, ISMS maintenance, audit evidence, and third-party security reviews — with senior support on the more complex work.

This is a hands-on delivery role rather than a first job in security. You should be comfortable running a vendor assessment or an evidence collection cycle without step-by-step direction.

Key Responsibilities

Governance & Policy

• Maintain the ISMS, control register and governance documentation.
• Draft and update security policies, standards and procedures.
• Coordinate security awareness activities and track governance actions.

Risk Management

• Run information security risk assessments and maintain the risk register.
• Track risk treatment plans and remediation through to closure.
• Manage the security exception process.

Compliance & Audit

• Support compliance activities across ISO/IEC 27001, SOC 2 and GDPR.
• Collect and organise audit evidence; act as a point of contact during internal and external audits.
• Track audit and assessment findings to closure.

Third-Party Risk

• Run vendor security assessments and review supplier questionnaires.
• Maintain supplier risk records and follow up on third-party remediation.

Reporting

• Produce monthly security and compliance reporting for management.
• Maintain compliance dashboards and documentation repositories.

What We’re Looking For

• 2–4 years in information security, risk, compliance, audit or IT governance.
• Practical working knowledge of at least one major framework (ISO 27001, SOC 2 or NIST CSF).
• Working understanding of GDPR and data protection obligations.
• Confident with Excel and structured documentation; able to produce reporting for a management audience.
• Strong written communication and attention to detail.
• Comfortable working with both technical and non-technical stakeholders.
• Degree in cyber security, computer science, IT or a related discipline — or equivalent practical experience.

Nice to Have

• Hands-on use of a GRC platform (Vanta, Drata, Hyperproof, OneTrust, ServiceNow GRC or Archer).
• Cloud security fundamentals (AWS or Azure), IAM and MFA concepts.
• Exposure to Cyber Essentials, CIS Controls or AI governance.
• Jira or Azure DevOps; Power BI or Excel dashboards.
• A certification such as ISC2 CC, CompTIA Security+, ISO 27001 Foundation / Lead Auditor or SC-900.
• German is a strong plus

What We Offer

• Ownership of real GRC workstreams across the full lifecycle.
• Mentorship from senior security professionals and support for certifications.
• Clear progression towards Senior GRC Analyst or Risk & Compliance Specialist.
• Collaborative and inclusive working environment.

Who We Are 

PAR Retail, with its Open Commerce® product suite and patent pending Wallet Steering® System, empowers Convenience & Fuel Retailers to gain more share of wallet and customer lifetime value than possible with any other solution provider. PAR Retail’s unified Open Commerce product suite consists of: Activate for Intelligent 1:1 Loyalty, Transact for Contactless Commerce, and Experience for Cross-Channel Customer Experiences. PAR Retail’s solutions are supported by a set of subscription-based program management services and are contractually backed by its 1.5X Performance Guarantee. 

Requirements:  
- Operational knowledge of modern operating systems and networking; 

- Experience with common cloud services: AWS, GCP, and Azure; 

- Network Security and expertise in network pentesting; 

- Security testing of web applications, web services, mobile apps (hybrid and native), and IT infrastructure; 

- Understanding security certifications (PCI DSS / SOC2); 

- Ability to apply modern Application Security methodologies and frameworks; 

- Ability to use at least one modern programming language; 

- Practical experience with Burp Suite; 

- Experience with IDS, IPS, SIEM configuration; 

- Upper-intermediate English level. 

Responsibilities:  

- Requirements analysis, performing penetration testing and security audit; 

- BE, WEB, cloud and mobile clients testing; 

- Vulnerability reporting and remediation process; 

- Communication with development and project management teams; 

- Prepare security testing reports; 

- Prepare and support internal documentation for the project. 

PAR Retail Offers: 

- Long-term employment; 

- Competitive compensation with regular performance-based salary and career development reviews; 

- Paid vacations and sick leaves; 

- Health insurance program; 

- Flexible working hours; 

- Sponsored company educational program, corporate library; 

- Funny celebrations, team outings, and company events; 

- A unique and friendly environment where everyone can explore and learn new technologies. 

Ajax Systems is an international technology company and the largest security systems manufacturer in Europe. Ajax products are trusted by more than 4.5 million end users and 330,000 PRO users across over 180 countries. The company offers comprehensive solutions for protecting residential and commercial properties of various sizes. Today, the Ajax portfolio includes 280 devices for intrusion protection, video surveillance, fire safety, and comfort and automation. Every year, we demonstrate exponential growth both in the size of our team and in the number of users worldwide.

Ajax Systems operates a full-cycle production model, from idea generation and prototyping to mass production and global sales. Each department fully covers a specific operational need of the business. The company’s specialists are involved at every stage — from the production line in Ukraine to the logistics center in Poland, from where products are shipped to distributors worldwide.

Now we are looking for a hands-on Cyber Security Specialist to strengthen our security posture and operational resilience. You will be at the forefront of our cybersecurity defense, responsible for incident monitoring and investigation, the deployment and improvement of security solutions, and ensuring our corporate processes and infrastructure meets compliance standards. If you are passionate about building secure systems, incidents investigation and translating technical findings into efficient mitigation actions, this role is for you.

Key Responsibilities:

• Security systems support and improvements: Participate in security architecture improvement, provide support for the full lifecycle of security systems — from design and deployment to enhancement and technical support.
• Security Monitoring & Incident Response: Improve security monitoring processes and practices, participate in security events monitoring and triaging detected events. Develop and refine SIEM detection rules, investigate anomalies and identify root-cause of incidents, develop and execute mitigation plans to neutralize threats.
• Conduction Security Assessments: Conduct technical security assessments of corporate IT systems to identify compliance deviations and vulnerabilities. Participate in risks assessments, mitigation measures design and implementation.
• Compliance & Governance: Participate in improvement of security procedures, policies, and operational instructions. Collaborate with stakeholders on security processes implementation and improvement to ensure readiness for external security audits (e.g., ISO 27001, SOC2).
• Consultancy & Support: Partner with internal teams to define security requirements for new systems and solutions, provide expert guidance on implementing security controls. Participate in security requests processing, security awareness trainings preparation and conduction.
• Reporting & Strategy: Participate in preparation of reports for management, definition and description of security strategy.

Required Technical Skills & Qualifications:

• Experience: 5+ years in CyberSecurity with a strong focus on SOC operations and security systems implementation.
• Core Proficiency: Hands-on experience with SIEM systems (Splunk/QRadar/Logsign/Wazuh), MDM solutions (Jamf/Crowdstrike/JumpCloud/Zoho), EDR/XDR solutions (SentinelOne/ESET/Defender), Cloud security monitoring (M365, GWS, AWS), and Firewall/WAF technologies (Cisco/PaloAlto/Fortinet/Ubiquiti).
• Domain Knowledge: Strong understanding of On-Premise and Cloud architectures, network security protocols, endpoint and application security. Practical experience in industry security best practices implementation (CIS, OWASP, NIST).
• Security assessment: Practical experience performing IT systems and application security assessments and reports preparation.
• Security governance: Experience in preparation of security reports, procedures and instructions for reporting. Practical knowledge of ISO 27001 technological controls implementation.
• Language Proficiency: Intermediate (B1-B2) English level required for working with technical documentation, cross-regional communication with colleagues and partners.

Preferred Skills & Certifications:

• Certifications: Vendor-specific security certifications (e.g., Google, MIcrosoft, Cisco, Palo Alto PCNSE, Fortinet NSE) are highly valued.
• Frameworks: Practical knowledge of ISO 27001 organizational controls implementation.

Why Join Us:

• Impact: Take ownership of security projects from concept to deployment.
• Culture: Work in a “zero bullshit” environment that values technical excellence and autonomy.
• Growth: Access to corporate English training and professional development/certification support.
• Health care: medical insurance.
• Beta Access: Get hands-on experience with new Ajax security systems before they reach the market.
• Innovation: Help shape the future of “Made in Ukraine” reliability.

Наш клієнт, Growe, провідна консалтингова компанія та група сервісів у сфері iGaming і розваг. Вони створюють стратегії, що працюють, та рішення, які масштабуються. 

Ідеально для тих, хто прагне:

• Розробляти та впроваджувати стандартизований процес аудиту доступів: методологію, частоту, збір доказів та шаблони звітності; 
• Визначати обсяг аудиту на основі ризиків та методологію вибірки, що підходять для великого, складного, багатосистемного ландшафту; 
• Проводити регулярні (планові/періодичні) та спеціальні аудити доступу в усьому середовищі, включаючи привілейовані та адміністративні облікові записи;
• Проводити аудит інструментів GCP IAM, LDAP та PAM на наявність застарілих облікових записів, надмірних дозволів, неправильних конфігурацій;
• Підготовлювати чіткі, готові до аудиту звіти та пакети доказів, придатні для внутрішнього перегляду та зовнішніх аудиторів;
• Відстежувати коригувальні дії разом з власниками систем та додатків до закриття, за потреби ескалюючи прострочені елементи; 
• Вести документацію та протоколи процесів для забезпечення повторюваності та безперервності; 
• Постійно вдосконалювати методологію аудиту на основі висновків, змін інструментів та вимог до відповідності.

Досвід, який стане твоєю перевагою:

• 2+ роки на посаді Access Specialist/IAM Auditor або аналогічній;
• Практичний досвід роботи з GCP/LDAP (ролі, дозволи, службові облікові записи, політики організації);
• Досвід роботи з інструментами керування привілейованим доступом (PAM) та аудитом привілейованих/адміністраторських облікових записів;
• Досвід проектування та побудови процесу аудиту доступу;
• Досвід роботи з інструментами IGA (наприклад, One Identity, Okta, Entra ID, Keycloak);
• Знання структур відповідності, таких як ISO 27001, SOC 2 та NIST;
• Середній рівень англійської або вище (розмовний та письмовий).

Ми цінуємо:

• Командну роботу та здатність підтримувати позитивну та конструктивну атмосферу в команді;
• Висока надійність та послідовність у виконанні роботи з високим стандартом точності та уваги до деталей;
• Самостійність, орієнтир на результат;
• Бажання зростати та лояльність до визнання помилок, навчання на них та впровадження коригувальних заходів для запобігання їх повторенню.

Наші клієнти пропонують конкурентні переваги для підтримки вашого професійного та особистого зростання, зокрема:

• Орієнтація на здоров’я та добробут;
• Глобальне медичне страхування;
• Можливості для зростання;
• Програми бенефітів (компенсація спорту / стоматології / психолога тощо);
• Бонуси за досягнення результатів;
• Динамічне робоче середовище.

English version:

Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. 

Perfect for those who aim to:

• Design and establish a standardized access audit framework, including methodology, cadence, evidence collection, and reporting templates;
• Define risk-based audit scope and sampling methodology appropriate for a large, complex, multi-system landscape;
• Run regular (scheduled/periodic) and ad-hoc access audits across the environment, including privileged and administrative accounts;
• Audit GCP IAM, LDAP, and PAM tools for stale accounts, excessive permissions, orphaned access, and misconfigurations;
• Prepare clear, audit-ready reports and evidence packages suitable for internal review and external auditors;
• Track remediation actions with system and application owners through to closure, escalating overdue items as needed;
• Maintain audit documentation and process runbooks to ensure repeatability and continuity;
• Continuously refine the audit methodology based on findings, tooling changes, and evolving compliance requirements.
   

Experience you’ll need to bring:

• 2+ years in the position of Access Specialist/IAM Auditor or similar;
• Experience designing and building an access audit process from scratch;
• Experience with GCP/LDAP (roles, permissions, service accounts, org policies);
• Hands-on experience with Privileged Access Management (PAM) tools and privileged/admin account audits;
• Experience working across IGA tools (e.g., One Identity, Okta, Entra ID, Keycloak);
• Familiarity with compliance frameworks such as ISO 27001, SOC 2, and NIST;
• At least Intermediate level of English (written and spoken).

It's a perfect match if you have those personal features:

• Strong team-player orientation with the ability to maintain a positive and constructive atmosphere within the team;
• High reliability and consistency in delivering work to a high standard of accuracy and attention to detail;
• Self-dependent, result-oriented mindset; 
• A growth mindset - comfortable acknowledging mistakes, learning from them, and implementing corrective measures to prevent recurrence.

Our clients offer competitive benefits to support your professional and personal growth, including: 

• Health & Wellness Focus;
• Global Medical Coverage;
• Growth Opportunities;
• Benefits Programs (compensation for the gym/stomatology/psychological service & etc.);
• Performance-Driven Rewards;
• Dynamic Work Environment.

About the Role

We are looking for a skilled and practical Cybersecurity Specialist to protect our company's digital infrastructure, internal systems, data assets, cloud tools, websites, email accounts, and operational workflows.

The ideal candidate should be able to assess risks, identify vulnerabilities, secure accounts and systems, improve access controls, monitor threats, support compliance, and create clear cybersecurity processes for a growing analytics and technology-driven organization.
 

Key Responsibilities

• Assess the company's cybersecurity risks across internal systems, websites, cloud platforms, email, file storage, databases, and third-party tools.
• Implement and manage security best practices for Google Workspace, Microsoft 365, cloud services, websites, CRM systems, databases, automation tools, and internal dashboards.
• Set up and maintain strong access control, role-based permissions, password policies, MFA, account recovery procedures, and offboarding processes.
• Conduct vulnerability assessments, security audits, and risk reviews.
• Monitor potential threats, suspicious activity, unauthorized access attempts, phishing risks, malware, and data exposure.
• Support website, application, and infrastructure security, including SSL, DNS security, firewall settings, backups, and server hardening.
• Review and improve security for AI tools, automation workflows, API connections, shared documents, and data pipelines.
• Create cybersecurity policies, incident response procedures, security checklists, and internal documentation.
• Train team members on cybersecurity basics, phishing prevention, password security, data handling, and secure use of AI tools.
• Investigate security incidents and prepare remediation plans.
• Coordinate with IT, development, operations, legal, compliance, and management teams.
• Support compliance with relevant standards such as GDPR, ISO 27001, SOC 2, NIST, CIS Controls, or other applicable frameworks.
   

Required Skills & Experience

• Experience in cybersecurity, information security, IT security, cloud security, security operations, or similar role.
• Experience with Microsoft Azure cloud security is required (e.g., Azure AD/Entra ID, Azure Security Center, role-based access control, network security groups, Azure compliance tools).
• Strong understanding of cybersecurity fundamentals, including access control, MFA, phishing prevention, endpoint security, network security, vulnerability management, and incident response.
• Experience securing business systems such as Google Workspace, Microsoft 365, Slack, Notion, Airtable, CRM platforms, cloud storage, and collaboration tools.
• Knowledge of website and application security, including OWASP risks, SSL/TLS, DNS, firewalls, backups, and secure configuration.
• Experience with vulnerability scanning, risk assessment, security audits, and remediation planning.
• Ability to review user permissions, shared drives, admin access, API keys, integrations, and third-party apps.
• Understanding of data protection, privacy, and secure handling of confidential business information.
• Ability to write clear security documentation, policies, checklists, and incident reports.
• Strong attention to detail and ability to work independently.
   

Nice to Have

• Experience with ISO 27001, SOC 2, GDPR, NIST, CIS Controls, or other security/compliance frameworks.
• Experience with endpoint detection and response tools, SIEM platforms, VPNs, firewalls, password managers, MDM tools, and cloud security platforms.
• Experience with AWS, Google Cloud, Cloudflare, GitHub, Docker, databases, APIs, and automation platforms.
• Experience with penetration testing, red-team/blue-team exercises, phishing simulations, or social engineering defense.
• Experience securing AI workflows, LLM tools, automation systems, data pipelines, and research platforms.
• Relevant certifications such as Security+, CySA+, CISSP, CISM, CEH, OSCP, ISO 27001 Lead Implementer, Azure Security Engineer Associate (AZ-500), or similar.
• Experience with remote teams and international organizations.
   

Ideal Candidate Profile

The ideal candidate is practical, proactive, and security-minded without being overly bureaucratic. They can quickly identify the biggest risks, prioritize fixes, and implement realistic cybersecurity improvements.

They should be able to protect sensitive data, secure internal operations, educate the team, and build a strong cybersecurity foundation for a company working with analytics, research, AI tools, financial information, and strategic business intelligence.

Ми — українська IT/marketing group із 4+ роками досвіду в iGaming та командою 250+ спеціалістів.

Зараз розвиваємо власний iGaming-продукт для Tier-1 ринків. Core-команда вже сформована, технічний roadmap визначений, продукт перебуває в активній розробці.

Шукаємо Platform Security Engineer / DevSecOps, який допоможе побудувати security-підхід платформи з нуля.

Це hands-on роль, а не pure compliance і не позиція standalone pentester. Ти працюватимеш на стику Platform Engineering, Cloud Security та DevSecOps, безпосередньо взаємодіючи з DevOps/SRE та engineering-командами.

Що буде у твоїй зоні відповідальності

Platform Engineering

• Проєктування та підтримка AWS/Kubernetes-платформи.
• Infrastructure as Code, CI/CD, environments, secrets, deployment workflows.
• Reliability, observability, scalability, backup/recovery та production readiness.
• Incident response, root-cause analysis та platform on-call.
• Створення reusable-рішень і стандартів для engineering-команд.

Security Engineering

• AWS та Kubernetes security baseline: IAM, network boundaries, secrets, audit logging, container security, privileged access.
• Інтеграція SAST, SCA, secret scanning, IaC scanning, container scanning та policy gates у CI/CD.
• Threat modelling для authentication, wallet/ledger, payments, game-provider integrations, callbacks та backoffice.
• Впровадження security-вимог на базі OWASP ASVS.
• Vulnerability management, remediation SLA та retesting.
• Security monitoring, detection logic та incident playbooks.
• Координація зовнішніх penetration tests і контроль remediation.

Purple Teaming & Automation

• ATT&CK-based adversary emulation та purple-team сценарії.
• Робота з MITRE CALDERA, Atomic Red Team та іншими security tools.
• Співпраця із Security Champions та engineering-командою.
• Участь у створенні внутрішньої AI-assisted security platform для threat modelling, control mapping, evidence collection та remediation tracking.

Що ми очікуємо

• 3+ роки комерційного досвіду в DevOps / Platform Engineering / SRE / Cloud Security / DevSecOps.
• Hands-on досвід з AWS, Kubernetes, Docker, Linux, networking, Infrastructure as Code.
• Практичний досвід із CI/CD, observability, IAM, secrets management та incident response.
• Розуміння cloud, container, API та application security.
• Досвід security scanning та vulnerability management.
• Вміння читати код і розуміти архітектуру сервісів.
• Досвід взаємодії з backend/frontend engineers.
• Прагматичний підхід до security: вмієш балансувати між безпекою, швидкістю delivery та бізнес-ризиками.
• Українська або російська — обов’язково, англійська — робоча.

Буде плюсом

• Досвід в iGaming, fintech, payments або regulated/high-risk environments.
• Wallet/ledger, payment providers, game providers, KYC/AML, backoffice security.
• OWASP ASVS, MITRE ATT&CK, threat modelling, CALDERA, Atomic Red Team.
• Purple teaming, detection engineering, incident simulations або pentest remediation.
• Kafka/RabbitMQ, PostgreSQL, Redis, microservices, Node.js/NestJS.
• Досвід із AI-assisted engineering/security tools.
• AWS, Kubernetes або security certifications.

Що пропонуємо

🏠 Relocation

• Повна допомога з релокацією до Братислави.

🚀 Розвиток

• Щорічний бюджет на курси, сертифікації та конференції.
• Топове обладнання на твій вибір.
• Сучасний engineering stack та AI-assisted workflow.
• Реальний ownership над security roadmap.
• Можливість створювати власні внутрішні security-рішення.

🌴 Wellbeing

• 28 календарних днів оплачуваної відпустки.
• Оплачуваний вихідний у день народження.
• 100% оплачуваний лікарняний.
• Гнучкий hybrid-формат.

🤝 Команда

• Senior engineering-команда з високим рівнем ownership.
• Мінімум бюрократії та мікроменеджменту.
• Пряма взаємодія з CTO, Tech Leads, DevOps/SRE та Product.
• Значні ресурси на розвиток платформи та security.

💰 Компенсація: конкурентна, за результатами переговорів.

Чому ця роль?

Тут security — не формальність і не пункт у checklist перед релізом.

Ти приєднаєшся до створення платформи ще до її запуску, матимеш реальний вплив на архітектуру та engineering-процеси й зможеш побудувати security-функцію так, щоб вона працювала в реальному продукті.

RedCore is an international business group that creates technological solutions for digital markets. Our products and services cover fintech, marketing, e-commerce, customer service, communications, and regulatory technologies. 

We are looking for a Security Engineer!

Requirements:

- 3+ years of experience in security coordination, product security, project management, technical delivery, GRC, compliance, or similar roles
- Experience working with software development teams
- Understanding of SDLC, release management, product delivery, and engineering workflows
- Basic understanding of application security, penetration testing, vulnerability management and secure development practices
- Experience working with regulated products, preferably in fintech, payments, banking, crypto, cards or PSP environments
- Ability to coordinate multiple stakeholders across product, engineering, security, and compliance teams
- Experience with Jira, Confluence, or similar task management and documentation tools
- Ability to turn unclear security needs into structured tasks, owners, deadlines, and next steps
- Good understanding of risk-based prioritization

Will be a plus:

- Experience with PCI DSS, ISO 27001, SOC 2 or other security/compliance frameworks
- Experience with card payments, issuing, acquiring, crypto payments, wallets, payment gateways or transaction monitoring
- Basic knowledge of cloud security, API security, authentication, authorization and data protection
 

Responsibilities:

- Act as the main security point of contact for the FinTech department
- Work as a bridge between FinTech product and engineering teams and the central Cybersecurity team
- Understand FinTech products, payment flows, crypto-related features, card payment solutions, integrations, APIs, and release plans
- Participate in product, engineering and delivery meetings to identify security needs early
- Coordinate security activities required for new features, releases, integrations, and product changes
- Create and manage requests to internal security teams, including Application Security, Penetration Testing, Cloud Security, GRC and Compliance
- Track security tasks from request creation to closure
- Ensure that security reviews, threat modeling, code reviews, penetration tests, and compliance checks are planned and completed on time
- Help prioritize security requests based on product risk, business impact, regulatory requirements and release timelines
- Coordinate remediation of security findings with product and engineering teams
- Maintain visibility of open security risks, blockers, dependencies, and deadlines
- Support preparation for audits, partner due diligence, compliance reviews and regulatory assessments
- Help translate security requirements into clear and practical actions for product and engineering teams
- Improve the security request process between FinTech and Cybersecurity teams
- Maintain dashboards, trackers, or reports for security delivery status
Escalate delays, ownership issues, and critical risks when needed
- Support the central Cybersecurity team with operational, coordination, or documentation tasks when capacity allows

Our benefits to you:
🍀 An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance, and more
🤝🏻 A great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset, is guaranteed
🧑🏻‍💻 Modern corporate equipment based on macOS or Windows, and additional equipment is provided
🏖️ Paid vacations, sick leave, personal event days, days off
💵 Referral program — enjoy cooperation with your colleagues and get a bonus
📚 Educational programs: regular internal training sessions, compensation for external education, attendance at specialized global conferences
🎯 Rewards program for mentoring and coaching colleagues
✈️ In-house Travel Service
🦄 Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie/book/pets lovers, and more
🎳 Other benefits could be added based on your location

We are looking for a Security Coordinator who will help us keep our company’s data, infrastructure, and SaaS ecosystem secure and well-governed.
 

This role focuses on access control, SaaS security, and risk management, ensuring that our systems are used safely and only by the people who actually need access.
 

Responsibilities

• Maintain a complete inventory of company systems and assets, including:
  • Cloud infrastructure
  • Databases
  • Google Workspace / shared drives
  • Internal tools
  • Third-party SaaS applications
  • AI tools used by the team
• Ensure proper access management across all systems:
  • Apply the principle of least privilege
  • Review and revoke unnecessary permissions
  • Monitor shared accounts and external access
• Conduct periodic access audits for:
  • Cloud environments
  • Databases
  • Google Drive and internal documentation
  • SaaS tools and integrations
• Identify and mitigate security risks related to AI tools, including:
  • Preventing sensitive data from being uploaded to AI platforms
  • Managing access to AI tools
  • Creating safe usage policies
• Work with engineering and operations teams to:
  • Improve security practices
  • Document access processes
  • Maintain internal security guidelines
• Track and manage security risks from third-party services
• Assist with security documentation and compliance processes (e.g., SOC2 or internal security policies).
   

Requirements

• Experience with cloud platforms (AWS, GCP, Azure, or similar)
• Familiarity with identity and access management concepts
• Experience managing SaaS ecosystems (Google Workspace, Slack, etc.)
• Understanding of data security risks and access control
• Ability to analyze system permissions and identify unnecessary access
• Awareness of AI-related security risks (data leakage, prompt injection, uncontrolled usage)
   

Nice to Have

• Experience with SOC 2 / security compliance
• Familiarity with IAM tools or security monitoring platforms
• Background in DevOps, IT administration, or security operations
   

What Success Looks Like

• All company systems are properly inventoried and documented
• Access is granted strictly on a need-to-know basis
• No forgotten accounts, open shares, or unnecessary privileges
• AI tools are used safely and responsibly

Job Description

Overall

4+ years in cybersecurity, security testing, or software engineering with a strong security focus
Structured, methodical approach to testing - able to plan and document, not just test ad-hoc
Good written English - reporting is a significant part of the role

Must have

Hands-on experience in vulnerability assessment and penetration testing (web, API, network, or infrastructure)
Secure code review experience
Solid coding skills (Python preferred) for automation, tooling and test scripts
Experience writing automated tests and building them into repeatable suites
Strong understanding of vulnerability classes (OWASP Top 10, CWE) and CVE/CVSS triage
Familiarity with standard security tooling (e.g. Burp Suite, Nmap, SAST/DAST scanners)

Nice to have

Experience applying AI/LLMs to security work - highly desirable
Vulnerability management processes and tooling
Cloud security (AWS/Azure/GCP) or OT/embedded/product security background
CI/CD security integration
Certifications: OSCP, CEH, CISSP, or similar

Job Responsibilities

Perform vulnerability assessments and penetration testing against applications, services and infrastructure
Conduct secure code and configuration reviews
Triage and validate findings; assess severity, eliminate false positives, support remediation
Write and maintain automated security tests and tooling
Design test plans, execute testing campaigns, document and report results
Evaluate AI-assisted approaches to security testing and help integrate what works into the workflow

Department/Project Description

An enterprise technology group is building a dedicated security validation team focused on vulnerability assessment and security testing across the group's products and systems. The team runs structured testing campaigns: penetration testing, vulnerability discovery and triage, secure code review, and building automated test suites to make the process repeatable at scale.

The team also gets early access to specialized AI models and evaluates how they can accelerate security testing - an area we're actively investing in, though the core of the work remains hands-on security engineering. Scope covers internal systems as well as business-unit products across the group, agreed campaign by campaign. The team starts small and scales into a permanent capability.

Skill Category

QA - Automation

Keyskills - Must Have

• Security
• Application Security
• Penetration Testing and Reporting