Jobs Security

We are looking for a Senior Compliance Manager with strong and seasoned hands-on experience in IT service companies to lead our compliance and data protection framework from a contractual, regulatory, and information security perspective.

This role is operational and execution-focused, not advisory only. You will be responsible for building, implementing, and maintaining a robust compliance program that is closely tailored to our software engineering services business model and complies with the data security and contractual requirements of our enterprise-level clients.

Day-to-day, you will practically translate client contractual obligations into actionable compliance controls, work closely with Legal, Delivery, IT, and Security Departments to evaluate and identify vulnerabilities, propose and implement workable solutions, and ensure continuous audit readiness (ISO 27001, SOC2, and client-driven audits). This role also involves supporting internal and external audits, client due diligence questionnaires, vendor risk activities, internal compliance onboarding, and ongoing training of Proxet personnel, and ongoing alignment with client security expectations across multiple jurisdictions (U.S., Europe, Latin America).

If you understand how compliance works inside a global IT services organization, this role is for you.

Responsibilities

• Reviewing and interpreting client contractual requirements with respect to security, compliance, and data privacy into actionable and deployable operational activities consistent with industry practice for a software engineering services business. 
• Build and maintain a compliance chart per client by mapping client requirements to internal controls. Identify gaps and coordinate remediation with IT, Security, Delivery, and Legal Departments.
• Conduct quarterly internal compliance audits across projects.
• Implement and maintain GDPR compliance, support DPA review and negotiation.
• Ensure new client pre-sales and onboarding align with the Company's compliance program.
• Ensure proper data classification and data handling controls.
• Contribute to the development and maintenance of internal policies, procedures, and controls related to security and compliance.
• Perform risk assessments and develop appropriate risk treatment plans.
• Support vendor and third-party risk management processes and assessments.
• Monitor changes in regulatory landscapes and translate them into actionable recommendations.
• Create and deliver Company-wide appropriate and tailored awareness training on data protection and regulatory compliance requirements for internal teams.
• Act as a point of contact for compliance-related topics during engagements and audits.
• Apply data retention and secure data disposal requirements in line with regulatory and contractual obligations.
• Follow and support the company’s established cybersecurity standards and roadmap, ensuring alignment with defined requirements, milestones, and priorities.
• Prepare compliance dashboards and reports for leadership.

Requirements

• 5+ years of experience in compliance, GRC, risk management.
• 4+ years of experience in compliance in an IT service/outsourcing company.
• Hands-on experience with security frameworks (e.g., ISO/IEC 27001, SOC 2) and standards implementation and remediation experience.
• Excellent English skills, including familiarity with and strong contractual review skills (MSA, SOW, DPA), and experience in collaborating with Legal Departments.
• Strong familiarity with global data protection laws (GDPR, CCPA/CPRA, UK GDPR) and practical GDPR, CCPA/CPRA, DPF implementation experience.
• Understanding of industry-specific compliance and regulatory standards across sectors, including funds, healthcare, and private equity.
• Ability to support Engineering (Delivery) by identifying and tracking compliance issues and coordinating timely mitigation actions with relevant stakeholders.
• Ability to translate regulatory and security requirements into practical, business-aligned, actionable controls.
• Ability to conduct risk assessments and define appropriate risk treatment measures.
• Understanding of data handling, intellectual property rights, and related contractual considerations.
• Experience with controls and governance for AI usage.
• Experience preparing and maintaining documentation for audits, regulators, and clients.
• Strong attention to detail and ability to manage multiple compliance initiatives in parallel.
• Strong communication and interpersonal skills.
• Strong documentation skills and high attention to detail.
• English: Upper intermediate or higher.
• Ability to work independently and as part of a team.
   

Would be a plus:

• Experience with regulatory requirements across multiple jurisdictions (e.g., U.S., Europe, Latin America).
• Practical experience with BCP/DRP implementation and maintenance.
• Hands-on experience with healthcare compliance frameworks (e.g., HIPAA).
• Experience with the investment fund clients and private equity vertical domain expertise, including PCI DSS.
• Professional certifications such as CCEP, CISA, CISM, CRISC, CISSP, or equivalent.
• Experience in data-intensive projects (DWH, BI, AI, analytics).

We are looking for an Access Manager to join our team!

 Requirements:

- Strong practical experience with IAM / Identity Access Management and provisioning systems.
- Hands-on experience with IDP solutions (JumpCloud or similar), including configuration and troubleshooting.
- Experience managing Google Workspace environment (users, groups, roles, admin controls).
- Deep understanding of SSO (SAML, OIDC), schema management, and identity federation.
- Experience with User Lifecycle Management (Joiner–Mover–Leaver process).
- Practical knowledge of Group Mapping and Role Mapping models.
- Experience integrating access with internal and third-party systems (Access Integration).
- Understanding and implementation of Just-In-Time (JIT) Access principles.
- Experience with backup and recovery strategies for identity systems (e.g., AirBack or similar tools).
- Understanding of access governance, audit processes, and least privilege principles.

Will be plus:

- Basic scripting/automation skills; strong plus: JavaScript, TypeScript, Python.

Responsibilities:
- Manage and optimize IAM infrastructure (JumpCloud, Google Workspace, SSO integrations).
- Configure and maintain SSO integrations with internal and external services.
- Own and improve the full user lifecycle process (provisioning, deprovisioning, role changes).
- Design and maintain role and group mapping models aligned with business structure.
- Implement and monitor JIT access workflows.
- Integrate new systems into the identity ecosystem following security standards.
- Participate in audits, access reviews, and compliance processes.
- Automate repetitive IAM tasks using scripting where applicable.
- Collaborate with Security, IT, and Engineering teams on access-related initiatives.

Our benefits to you:
☘️An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance and more

🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed

🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided

🏖Paid vacations, sick leave, personal events days, days off

💵Referral program — enjoy cooperation with your colleagues and get the bonus

📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences

🎯Rewards program for mentoring and coaching colleagues

🗣Free internal English courses

✈️In-house Travel Service

🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more

🎳Other benefits could be added based on your location

Our client is an international product-based IT company specializing in the iGaming industry. Born in 2014, they rocked the CIS region, and now take the success to the world. 

We are currently looking for a Anti-Fraud Specialist to strengthen our fraud prevention efforts in betting and casino products. This role involves analyzing user behavior, identifying suspicious activity, and improving anti-fraud processes. We value a proactive, detail-oriented mindset and strong analytical thinking.

📋 Key responsibilities and your contribution:

- Monitoring and analyzing betting and casino games to detect abnormal activity, fraudulent schemes.
- Developing and implementing anti-fraud systems: creating and optimizing algorithms designed to prevent fraud in games.
- Analyzing players and their behavior using statistical methods to identify suspicious patterns.
- Responding to incidents: conducting investigations into suspicious situations, identifying and blocking fraudsters.
- Preparing reports: creating reports on detected frauds and system vulnerabilities.

📚 Your qualifications:

- 1+ year of experience in anti-fraud and security in gambling or related industries (e.g., online casinos, sports betting, poker sites).
- Knowledge of poker and casino games, understanding of various types of fraud in these areas (e.g., bot usage, exploiting bonus offers, player collusion, etc.).
- Experience with Excel and analytical tools: Tableau/ PowerBI (will be a plus) for data analysis and anomaly detection.
- Knowledge and understanding of anti-fraud systems, such as real-time fraud prevention systems (e.g., session monitoring, transaction processing).
- Ability to perform detailed data analysis and identify unconventional user behavior patterns.
- Monitor and detect marketing-related fraud activities (bonus abuse, multi-accounting, affiliate fraud, CPA traffic manipulation), analyze user behavior and traffic patterns.

➕ Nice to have:

- Experience with machine learning systems for analyzing player behavior.
- Creating dashboards in Tableau or other analytical tools.

Benefits:

⭐ Days of recovery: 20 paid vacation day per year and unlimited sick leave days.
⭐ Health: corporate medical insurance, a company psychologist and a Cafeteria of Benefits for personal wellness choices.
⭐ Education: a variety of foreign languages course for you to choose from. Also we are open for your development and you can choose different courses /training for improving your skills.
⭐ Compensation: additional benefits that can be used according to company policy, e.g. paid business trips, international conference opportunities, lunch perks at our offices etc.
⭐ Work Environment: work remotely or from one of our offices in Cyprus, Portugal, Poland, equipped with the equipment you’ll need for success.

About Playson

Founded in 2012, Playson is a leading iGaming supplier recognized worldwide. We provide our partners with a high-end, microservice-based Platform-as-a-Service capable of processing billions of financial transactions daily. Our global infrastructure is designed for cross-regional performance, with a relentless focus on latency reduction and flawless player experience, regardless of bandwidth or connectivity.

We are now building a Platform & Cloud Security function and are looking for the first hire to launch and lead it. This is a rare opportunity to set the standards from scratch and shape how security is embedded into a modern, high-load, cloud-native environment.

Key Responsibilities

• Establish the DevSecOps function at Playson, defining best practices and security standards across the Platform Tribe.
• Integrate security into CI/CD pipelines (SAST, DAST, dependency scanning, container scanning).
• Harden infrastructure and runtime environments (Linux, Docker, Kubernetes/EKS, RBAC).
• Design and enforce cloud security controls in AWS (IAM least-privilege, GuardDuty, Security Hub, encryption at rest/in transit).
• Define and maintain IaC security policies (Terraform/Terragrunt, drift detection, policy-as-code).
• Implement and manage secrets management solutions (Vault, AWS Secrets Manager).
• Build centralized security monitoring & alerting (Datadog, ELK, CloudWatch, SIEM/SOAR).
• Lead vulnerability management and threat modeling practices.
• Automate workflows through scripting (Python, Bash).
• Partner with backend, infrastructure, and platform engineers to embed security in design & delivery.
• Contribute to compliance readiness (ISO 27001, GDPR, PCI-DSS).
• Act as a security subject-matter expert, mentoring engineers and raising awareness.
• Continuously evaluate and implement new security tools and approaches.

Requirements

• 5+ years in Security Engineering / DevSecOps roles, with proven success delivering secure infrastructure and applications.
• Strong skills in Python and Bash for building and automating security workflows.
• Cloud Security (AWS focus) - Deep knowledge of IAM least-privilege design, encryption at rest/in transit, GuardDuty, Security Hub, and best practices for securing multi-account environments.
• Implementation of security controls in pipelines (SAST, DAST, dependency scanning, container image scanning, policy-as-code).
• Hardening of Linux systems, Docker, Kubernetes/EKS; strong experience with RBAC, PodSecurity/OPA/Gatekeeper/Kyverno policies.
• Terraform/Terragrunt, including policy-as-code, drift detection, and compliance enforcement.
• Expertise with HashiCorp Vault, AWS Secrets Manager, or equivalent.
• Hands-on with centralized logging, SIEM/SOAR tools (Datadog Security, ELK, CloudWatch, etc.) and incident response workflows.
• In-depth understanding of secure network design, segmentation, and monitoring.
• Experience with tools enabling temporary, approval-based access (Teleport, AWS IAM Identity Center, Okta, etc.).
• Ability to design and enforce zero trust principles (continuous verification, microsegmentation, contextual access).
• Familiarity with SBOM generation (CycloneDX, Syft), artifact signing (Cosign, Sigstore), and applying SLSA/in-toto frameworks.
• Understanding of ISO 27001, GDPR, PCI-DSS (iGaming relevance), plus experience automating compliance checks with IaC and policy engines.

Nice to have:

• Exposure to Kafka or ClickHouse in security-sensitive environments.
• Familiarity with GitOps tooling (FluxCD/ArgoCD).
• Broader knowledge of SOC 2, HIPAA, or other regulatory frameworks.

What We Offer

• Compensation at top industry standards + quarterly bonuses based on transparent evaluation.
• Remote-first flexibility and adaptable working hours.
• Unlimited paid vacation & sick leave.
• Comprehensive medical insurance (for you and your partner).
• Financial support for major life events.
• Professional growth budget for courses, training, and certifications.

Recruitment Process

1. HR Interview – 45 min
2. Hiring Manager Interview – 60 min
3. Technical Interview – 90 min
4. Final Interview with Head of Platform & CTO – 60 min

About Us

We’re a young startup, Lovat Compliance — a global tax & compliance technology provider specialising in EPR, VAT, sales tax and cross‑border compliance for e‑commerce businesses. We’re not yet a giant corporation, and much of what we will build is still ahead of us. We need someone who understands that things aren’t perfect yet, is comfortable being the one who owns the space, and who can help us build things from the ground up.

What You’ll Do

• Establish and maintain our data‑security and information‑security programme from scratch: policies, standards, procedures tailored to our platform and services.
• Perform regular risk assessments, vulnerability scans and data‑protection audits; identify gaps and lead remediation.
• Be the owner of incident response: detection, containment, investigation and reporting of security events.
• Collaborate closely with IT development and compliance teams so that data‑protection is embedded into product development and operations.
• Manage data‑handling and access controls across the organisation — ensuring our client and platform data are processed securely.
• Run training and awareness programmes for staff on data‑security, privacy regulation (e.g., GDPR) and secure behaviours.

• Keep an eye on emerging threats, security trends and regulatory developments relevant to e‑commerce, EPR/VAT/sales‑tax platforms, and advise on what changes we need to make.

   

What We Are Looking For

• Minimum 1.5 years of experience in a role related to data security, information security or risk management — ideally within SaaS, e‑commerce or cloud‑based platforms.
• Good knowledge of data‑protection laws (e.g., UK/EU GDPR), information‑security frameworks (e.g., ISO 27001, NIST) and data‑security best practices.
• Proven experience with risk assessments, incident response and security audits.
• Excellent communication skills — able to explain security concepts to both technical and non‑technical people.

• We’re looking for someone grounded and realistic — who understands that perfection isn’t necessary, who can work independently to build things, and who’ll sleep well at night knowing things are secure even if the system isn’t «perfect».

   

Will be an advantage:

• A bachelor’s degree (or equivalent experience) in Computer Science, Information Security, Cybersecurity or a related discipline.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor or similar.

• Familiarity with cloud platforms like Google Cloud (GCP) and/or Amazon Web Services (AWS).

   

What We Offer

• Competitive salary: €1,000 - €1,700 (remote contract)
• Opportunity to work in a fast‑growing startup with global ambitions.
• Fully remote working model — flexibility and autonomy.
• Professional development opportunities and support.

We are looking for an IT Security Analyst with hands-on experience working with IT infrastructure and understanding cybersecurity compliance requirements.

The primary objective of the role is to conduct technical audits of security systems, infrastructure and processes, verify compliance with standards requirements and help departments implement secure practices. 
 

Main responsibilities:
 

• Conducting technical audits of IT infrastructure (servers, network, cloud services, access systems);
• Checking compliance with standards and regulatory requirements: ISO 27001,PCI DSS, NIST, internal security policies;
• Analysis of system configurations (Windows/Linux, network devices, IAM);
• Verification of: logging and monitoring, access management, network segmentation, backup, vulnerability management;
• Assessing the security architecture of IT systems;
• Preparing technical audit reports and recommendations;
• Interacting with IT teams to address identified risks;
• Participating in the implementation of security processes.
   

Main requirements:
 

• 4+ years in IT administration;
• 1–2 years in cybersecurity;
• Experience working in a company with formal security compliance requirements.
   

Technical knowledge:

• Windows Server / Linux, VMware;
• Networking (TCP/IP, VLAN, VPN, firewall);
• Active Directory / IAM;
• Logging and SIEM;
• Cloud infrastructure (AWS / Azure / GCP would be a plus);
• Basic knowledge of DevOps / containers would be a plus.
   

Security knowledge:

• System hardening;
• Access management;
• Vulnerability management;
• Security monitoring;
• Network security.
   

Standards:

• ISO 27001;
• PCI DSS;
• NIST.
   

Would be a big plus:
 

• Experience in technical audits;
• Work in a SOC;
• Experience in pentests or vulnerability scanning;
• Certifications: CISSP, CISA, CEH, ISO 27001.
   

What we offer:
 

• Having the capability to create something new and witness your own input;
• You can find confidence in the future here, but rest assured it won’t be dull;
• Join a dynamic and expanding community. Our company is experiencing growth and expanding into Europe. Currently, we have offices in Kyiv, and Warsaw and plan to open additional locations in other countries;
• Join our experienced team that values professional development and embraces new opportunities.
   

PwC is a global network of more than 370,000 professionals in 149 countries that turns challenges into opportunities. We create innovative solutions in audit, consulting, tax and technology, combining knowledge from all over the world.

PwC SDC Lviv, opened in 2018, is part of this global space. It is a place where technology is combined with team spirit, and ambitious ideas find their embodiment in real projects for Central and Eastern Europe.

What do we guarantee?

• Work format: Remote or in a comfortable office in Lviv - you choose.
• Development: Personal development plan, mentoring, English and Polish language courses.
• Stability: Official employment from day one, annual review of salary and career prospects.
• Corporate culture: Events that unite the team and a space where everyone can be themselves.

We are seeking a Security Engineer to provide deep technical expertise, tooling evaluations, and hands‑on engineering support across our security program. This role acts as a builder‑defender, driving practical security control implementation, assessing emerging technologies, and ensuring secure integration patterns for modern applications—including but not limited to AI systems. You will bridge high‑level security strategy with real engineering execution.

Key Responsibilities:
 

• Implement and operationalize security controls, translating policies and theoretical requirements into real, functioning technical solutions.
• Evaluate and integrate modern security tools, performing hands‑on testing and delivering data‑driven recommendations.
• Design and review secure architecture patterns for application and platform integrations (APIs, cloud services, third‑party tools, internal services).
• Conduct threat modeling for complex use cases, identifying risks such as data exposure, API abuse, system compromise, and emerging AI‑related attack vectors.
• Provide technical security guidance to engineering and product teams proposing new solutions or integrations.
• Partner closely with DevSecOps teams to embed security practices into CI/CD pipelines, container workflows, and cloud environments.

Requirements:
 

• 4+ years in Application Security, Cloud Security, Security Engineering, or DevSecOps.
• Strong knowledge of API security, OAuth/OIDC, containers, and cloud‑native services.
• Hands‑on experience with security tools (posture management, vulnerability scanners, SIEM/SOAR).
• Ability to assess third‑party vendors and modern security technologies.
• Proficiency in Python or another scripting language.
• Understanding of generative AI risks (prompt injection, data leakage) is a plus.
• Strong analytical thinking and clear communication skills.
• Self‑driven, adaptable, and proactive in a fast‑changing tech landscape.

Policy statements:
https://www.pwc.com/ua/uk/about/privacy.html

We are looking for a DevSecOps Engineer with 3+ years of experience to help audit, strengthen, and improve the security posture of a small but growing SaaS platform serving nonprofit and corporate clients. 

This role is security-first, with DevOps responsibilities as a secondary layer. The main goal is to assess the current infrastructure, identify security and compliance gaps, and implement a practical roadmap to improve the platform’s overall resilience, compliance readiness, and long-term sustainability. 

Project scope: 

- Initial security and infrastructure audit 

- Identify risks, vulnerabilities, and operational gaps 

- Build and prioritize a remediation roadmap 

- Implement key improvements over a 2–3 month engagement 

- Potential for ongoing periodic security reviews and advisory support afterward 

Current stack / environment: 

- Git 

- GitHub Actions 

- Docker 

- AWS 

- Render 

What you will do: 

- Audit the current cloud and application setup from a security and DevSecOps perspective 

- Review infrastructure, deployment processes, DNS configuration, access controls, and backup/disaster recovery practices 

- Identify gaps related to SOC 2 readiness and help prepare for stronger enterprise security expectations 

- Assess security controls around CI/CD, secrets management, container images, user access, and production environments 

- Review existing vulnerability scanning practices and recommend improvements, including dynamic scanning where needed 

- Help define and implement practical controls such as firewalling, hardening, monitoring, least-privilege access, and security hygiene improvements 

- Investigate risks related to DNS, exposed services, stale records, misconfigurations, and other overlooked infrastructure issues 

- Support the team in creating a sustainable, right-sized security approach for a small organization without overengineering 

- Translate findings into an actionable roadmap with clear priorities, balancing risk, cost, and implementation effort 

- Help improve confidence in responding to enterprise security questionnaires from large corporate clients 

What we are looking for: 

- 3+ years of hands-on experience in DevSecOps, DevOps with a strong security focus, or cloud/infrastructure security 

- Strong experience with AWS and cloud security best practices - Experience with GitHub Actions, CI/CD security, Docker, and container/image scanning 

- Experience reviewing and securing hosted platforms, including PaaS environments such as Render or similar 

- Solid understanding of IAM/access control, secrets management, DNS security, backups, disaster recovery, and infrastructure hardening 

- Experience identifying and remediating security gaps in small or mid-sized SaaS environments 

- Familiarity with SOC 2 controls and general compliance-oriented security practices 

- Ability to recommend pragmatic, cost-conscious solutions for a small team 

- Strong communication skills and ability to explain risks, tradeoffs, and priorities clearly to non-security stakeholders 

- English level: B2 minimum

Availability requirements: 

- Must be available for overlap from 14:00 to 16:00 Mountain Time (MT) 

- Outside of that window, the working schedule is flexible 

Nice to have: 

- Experience with GDPR readiness or compliance-related security improvements 

- Experience supporting penetration testing remediation 

- Experience with SSO/security controls for B2B or enterprise clients 

- Experience working with lean startups, nonprofits, or small product teams

We are looking for someone practical, hands-on, and able to combine audit thinking with execution. 

Engagement: 

- Estimated initial duration: 2–3 months 

- Potential for ongoing part-time or periodic audit/advisory support

Head of Cybersecurity Product Management 

Softprom

Europe / CEE | Hybrid or Remote
Full-time
IT Distributor / VAD (Cybersecurity & Enterprise IT)

About Softprom

Softprom is an international IT distributor and value-added partner operating across Central and Eastern Europe, CIS, and neighboring regions.
We work with leading global vendors in Cybersecurity, Cloud, Infrastructure, and Enterprise IT, helping partners and customers build secure, scalable solutions.

We are now looking for a Head of Cybersecurity Product Management to lead and develop our cybersecurity product portfolio and team.

About the role

This is a senior leadership role for an experienced B2B product professional who understands IT distribution and cybersecurity markets.

You will be responsible for product strategy, portfolio development, vendor management, and people leadership, acting as a key link between vendors, sales, marketing, pre-sales, and top management.

We are looking for a system-oriented leader who builds processes and teams — not someone who tries to do everything alone.

Key responsibilities

• Lead and develop a team of Product Managers (2–3+ people)
   
• Own and manage the cybersecurity product portfolio (multiple vendors and solutions)
   
• Build and optimize product management processes, including:
   
  • onboarding and launch of new vendors
     
  • product lifecycle management
     
  • cross-functional collaboration with Sales, Marketing, and Pre-Sales
     
• Act as the main point of contact for cybersecurity vendors (local and international)
   
• Define product strategy, positioning, and go-to-market approach
   
• Participate in:
   
  • pricing and margin strategy
     
  • sales forecasting and pipeline planning
     
  • product P&L ownership
     
• Set goals and KPIs for product managers, conduct performance reviews and mentoring
   
• Represent the product function in communication with top management
  
   

Requirements (Must-have)

Experience & Expertise

• 5+ years of experience in B2B IT product management
   
• 2+ years of experience managing product managers (team lead / head role)
   
• Hands-on experience working with:
   
  • IT vendors (local and/or international)
     
  • multi-product portfolios
     
• Strong understanding of the cybersecurity market, including:
   
  • solution categories (NGFW, EDR/XDR, IAM, SIEM, DLP, SASE, etc.)
     
  • competitive landscape
     
  • typical customer use cases
    
     

Management & Business Skills

• Ability to:
   
  • set goals and KPIs
     
  • prioritize products and initiatives
     
  • develop people through mentoring and performance management
     
• Proven experience building and improving product processes
   
• Solid business mindset with understanding of:
   
  • product P&L
     
  • go-to-market strategy
     
  • pricing and positioning
     
  • sales forecasting
     
• Confident working with numbers: pipeline, funnel, margins
  
   

Communication

• Strong negotiation and stakeholder management skills
   
• Ability to speak the same language with:
   
  • vendors
     
  • sales teams
     
  • technical experts
     
  • executive management
    
     
• English — Upper-Intermediate or higher (negotiations, presentations, documentation)
  
   

Nice to have

• Experience working in a distributor or VAD
   
• Exposure to regional markets (CEE, CIS, Baltics)
   
• Experience launching new vendors or products from scratch
   
• Understanding of partner ecosystem:
   
  • resellers
     
  • system integrators
     
  • MSPs
     
• Relevant certifications:
   
  • CISSP / CISM
     
  • vendor certifications
    
     

Personal qualities

• High level of ownership and accountability
• Ability to work effectively in ambiguous and changing environments
• Proactive, results-oriented mindset
• Natural authority without micromanagement
• Strong multitasking and prioritization skills
  
   

Why Softprom

• Strategic leadership role with real influence on business results
• Mature B2B environment and international vendor portfolio
• Opportunity to shape and scale cybersecurity business across regions
• Professional, experienced team
• Long-term growth and stability
   

We are seeking an experienced Security Manager to lead and continuously strengthen our company’s security framework. This role is critical in protecting our information, financial operations, and business partnerships. You will be responsible for building a strong security culture, preventing fraud, ensuring compliance, and managing cybersecurity and operational risks across the organization.

Key Responsibilities

• Build and maintain a strong company-wide security culture through training and awareness programs.
• Develop, implement, and update IT, cybersecurity, and data protection policies.
• Monitor and improve access control, encryption, logging, and overall security practices.
• Conduct audits of financial operations to prevent fraud, conflicts of interest, and unauthorized activities.
• Oversee partner verification, KYC/AML checks, and source-of-funds analysis.
• Monitor internal activities and assess risks related to employees, partners, and tools.
• Maintain access rights in line with the Least Privilege principle.
• Prepare regular security and risk reports for executive leadership.
  
  Qualifications
• Proven experience in security management, cybersecurity, compliance, risk management, or anti-fraud roles.
• Strong knowledge of IT security practices, internal controls, and access management.
• Experience with financial audits, fraud detection, and transaction monitoring.
• Familiarity with KYC/AML processes and partner due diligence.
• High level of integrity, analytical thinking, and attention to detail.
• Ability to communicate effectively with both technical and non-technical stakeholders.
• Professional working proficiency in English.
  
  What We Offer
• Flexible working hours and a fully remote work environment.
• Unlimited paid vacation and paid sick leave.
• Competitive compensation aligned with experience and expertise.
• Learning and professional development support (50% reimbursement).
• Wellness benefits, including sports and fitness support.
• Employee referral bonuses and recognition for special occasions.
• Team-building activities and a positive, respectful company culture.
• Co-working space reimbursement for comfortable remote work.

Who we  are: 

RBI Retail Innovation is a product development company, a part of the group of Raiffeisen Bank International (Vienna, Austria). We are a stable company that works in the EU market. Now we have products in Poland. Our ambition will be widespread in EU countries in the next few years. Our projects include next-gen digital banking platforms’ design, delivery, and post-delivery activities. Our team is international but mainly consists of Ukrainian developers. We have offices in Kyiv and Rivne. Our mission is to provide seamless banking with ease and speed that’s built for people. Our values are People First, Product Passion, and Trust.

About you: 

• At least 3 years of experience in the information security field, including but not limited to: Web/Mobile Application Security, Cloud Security, Penetration Testing, Vulnerability Assessment, etc.
• Ability to manually find and exploit basic web vulnerabilities
• Familiarity with OWASP Security Testing Guides, OWASP Top 10
• Knowledge and understanding of Application Security, Cloud Security (AWS), Authentication and Security protocols
• Strong communication troubleshooting skills
• Good English skills (Intermediate+)
• Self-disciplined

Will be a plus:

• Experience in web/mobile development
• Relevance certifications such as AWS Cloud Security, EC-Council CEH, Offensive Security: OSCP, OSWE, OSCE
• Security related publications, blog posts, and/or participation in tools development
• BugBunty experience (please provide link to your profile)
• Experience with various penetration testing tools (e.g., BurpSuite, Metasploit, OWASP ZAP)

You will:

Drive company application security and product improvements:

• Performing security assessment and internal penetration testing
• Working closely with Developers and DevOps on promoting, clarification, and implementing leading security mechanisms in the products and infrastructure
• Provide guidance on secure system architecture (including cloud security) and software development processes aiming to achieve best in class security for our products
• Estimate application security risks and suggest mitigation strategies, maintain Threat Modeling
• Assess current application security posture against OWASP ASVS and MASVS

Drive vulnerability management including:

• Provide recommendation and best practice on vulnerability remediation
• Facilitate, communicate, and assess mitigation steps
• Help key stakeholders to understand the vulnerabilities

Participate as (SME) subject matter expert in security incidents assessment, analysis, and remediation.

What we offer: 

• You will be a part of global team of RBI Group — one of the leading banking groups in Central and Eastern Europe 
• An opportunity to work with some of the most talented and experienced people in the Fintech industry 
• The ability to drive change and innovation in the products we develop 
• Official employment, gig-contract 
• Remote-first work model 
• Competitive salary 
• Personal and professional growth, corporate English courses 
• Paid sick days-off and 20 working days of vacation per year 
• Medical insurance 

PrivatBank is the largest bank in Ukraine and one of the most innovative banks around the world. It holds a leading position for all the financial indicators in the area and comprises about a quarter of the whole banking system of our country.

We are looking for an Application Security Engineer. We are searching for the person who seeks to work in a dynamic environment and shares the values of initiative, openness and mutual trust.

We are striving to find a goal-oriented and multitask professional who would be focused on making good results and high quality.

Requirements:

• At least 3 years of experience in application security or related fields such as penetration testing and security architecture
• Proficiency in using security scanners such as SAST, DAST, SCA, Secret Detection, and Container scanning
• Experience integrating security scanners in CI/CD pipelines using Jenkins for GitLab
• Certifications such as CEH, OSCP, CSSLP, AWS Certified Security Specialty, etc. is preferred
• Background in software development, including roles such as Developer, Business Analyst, Architect, DevOps, etc
• Knowledge of Secure Software Development Life Cycle (S-SDLC) and frameworks like OWASP SAMM, BSIM, and Microsoft SDL
• Familiarity with the software development process and stages
• Basic understanding of software code
• Knowledge of key infrastructure components like databases, queues, application servers, load balancers, NoSQL, etc
• Understanding of major types of vulnerabilities
• Understanding of software architecture
• Knowledge of network protocols such as DNS, HTTP/S, SMTP, SSH, and FTP
• Ability to independently research information and solve complex problems
• Critical thinking skills

Responsibilities:

• Conduct security audits using the OWASP SAMM framework to assess current practices, identify gaps, and evaluate compliance levels within the organization
• Develop and implement strategic plans aimed at enhancing security maturity levels throughout the organization, with gradual improvements
• Application security governance and metrics
• Collaborate with various team members, including developers and top management, to advocate and implement application security best practices
• Improve our application security management platform
• Manage security architecture, focusing on integrating security at every stage of the software development lifecycle
• Integrate and oversee security automation tools to enhance security processes and reduce manual error
• Oversee security testing across various stages of software development to identify and mitigate potential security vulnerabilities
• Engage in threat modeling activities to predict and neutralize potential security threats before they impact the system
• Ensure compliance with relevant industry standards and regulations by regularly updating security policies and standards
• Track and manage software defects to ensure timely resolution of security-related issues
• Develop and conduct training and awareness programs to enhance security knowledge and practices across the organization
• Spearhead the secure integration of CI/CD practices into software development processes to ensure continuous security
• Use cloud services for application security

We offer:

• Work in the largest and most innovative bank of Ukraine
• Official employment and 24+4 calendar days of vacation
• Sick leave compensation
• Medical Insurance
• Competitive salary
• Bonuses, premium according to company policy
• Corporate training
• Modern comfortable office
• Interesting projects, ambitious tasks and dynamic growth
• Corporate financial assistance in critical situations
• A friendly professional and strong team
• Possibility of remote work format

PrivatBank is open to support and employ veterans and people with disabilities.

We believe that discrimination due to health conditions, physical abilities, age, race and ethnicity, gender or marital status is unacceptable.

We are ready to train veterans and candidates with disabilities without banking experience.

Iterasec works with clients worldwide, helping them find vulnerabilities and secure their products. Our projects range from mobile/web applications to complex modern cloud and automotive stacks. We work with both small product companies as well as Fortune 500 enterprises.

We are looking for a Middle/Senior Security Consultant / Penetration tester to work on and lead penetration testing and vulnerability/cloud security assessment projects.

In this role, you will work on technically challenging projects and also spend some time leading/mentoring our junior pentesting colleagues.

Required skills

- 1.5+ years of intensive commercial experience

- OSCP, eWPTx2 or similar would be a plus

- Scripting/coding skills and being comfortable with advanced pentesting tooling

- Strong knowledge of mobile/web security

- Comfortable with cloud and container security

- Basic RE skills

- Ability to mentor/lead colleagues

- Strong ability and drive to learn and develop cybersecurity skills

- Technical English (Intermediate+)

We offer

- Good salary + bonus system

- Diverse project portfolio and technologies to work with

- Rewarding environment: brilliant team ready to share knowledge and collaborate

- Courses and conferences which are relevant to the position are sponsored by the company.

- We are a remote-first company with full WFH support and a flexible work schedule.

Responsibilities

- Participate in various pentesting projects

- Lead junior colleagues

- Perform threat modeling in pentesting and security assessment projects

- Create assessment documentation and reports, clearly identifying vulnerabilities and associated remediation steps

- Consult clients on efficient issues remediation

- Conduct security researches

- Develop tools and scripts to automate and improve current pentesting processes

Iterasec works with clients worldwide, helping them find vulnerabilities and secure their products. Our projects range from mobile/web applications to complex modern cloud and automotive stacks. We work with both small product companies as well as Fortune 500 enterprises.

We are looking for a talented and motivated Junior Pentester who will join our security team to work on penetration testing and vulnerability/cloud security assessment projects.

We expect a short motivation letter where you can explain your skills, achievements and motivation.

Required skills

- Solid non-commercial cybersecurity experience, such as HTB/THM

- Junior-level cybersecurity certifications would be a plus.

- Comfortable with basic application security testing and common vulnerabilities (like OWASP Top 10, CWE Top 25) and cybersecurity fundamentals

- Strong basic IT skills: Linux, networking (TCP/IP, DNS, HTTP etc.)

- Some experience in scripting/coding languages, such as Java, JS, Python, Shell, etc.

- Strong drive to learn and develop cybersecurity skills

- Technical English (Intermediate)

We offer

- Good salary + bonus system

- Rewarding environment: brilliant team ready to share knowledge and collaborate

- Support in obtaining professional certifications, such as BSCP, OSCP, eWPTX, cloud certifications, etc.

- Courses and conferences which are relevant to the position are sponsored by the company.

- We are a remote-first company with full WFH support and a flexible work schedule.

Responsibilities

- Execute penetration tests and security assessments as part of a team, including internal/external networks, web and mobile applications, Windows and Linux environments, cloud architectures, IoT devices, and more

- Create assessment documentation and reports, clearly identifying vulnerabilities and associated remediation steps

- Conduct security research

We are looking for a Cybersecurity Testing Team Lead to join our team!  

Requirements: 
- 5+ years in offensive security/penetration testing
- 2+ years in a technical leadership role (team lead/principal/tech lead)
Hands-on experience with:
- Web, API, Mobile (iOS/Android) pentesting
- Secure code review (at least one backend language)
- Cloud & infrastructure security testing
- Proven experience working with product teams, not only 'report delivery' 

Will be plus: 
- Advanced Offense
- Red Team/Purple Team experience
- Adversary emulation (MITRE ATT&CK)
- Threat modeling from an attacker’s perspective
- Experience with exploit development or advanced bypass techniques

- Cloud & Platform Security
- AWS (Preferred)
- Kubernetes security testing
- CI/CD attack vectors
- Secrets, identity, and supply chain attacks

Responsibilities:  
Leadership and Team Management:
- Lead and grow the Offensive Security team (pentest/red team)
- Define roles, expectations, and competency levels
- Mentor team members and conduct technical reviews
- Own capacity planning and prioritization 

Offensive Security Operations:
- Own the pentest intake process (Jira-based)
- Ensure consistent coverage:
- Web/API/Mobile
- Cloud/Infra
- Enforce quality standards for test depth, reports, risk assessment, and retesting
- Findings & Risk Management 

Ensure:
- Findings are exploitable, reproducible, and actionable
- False positives are minimized
- Risk is clearly communicated

Our benefits to you:
☘️An exciting and challenging job in a fast-growing business group, the opportunity to be part of a multicultural team of top professionals in Development, Architecture, Management, Operations, Marketing, Legal, Finance and more

🤝🏻Great working atmosphere with passionate experts and leaders, sharing a friendly culture and a success-driven mindset is guaranteed

🧑🏻‍💻Modern corporate equipment based on macOS or Windows and additional equipment are provided

🏖Paid vacations, sick leave, personal events days, days off

💵Referral program — enjoy cooperation with your colleagues and get the bonus

📚Educational programs: regular internal training sessions, compensation for external education, attendance of specialized global conferences

🎯Rewards program for mentoring and coaching colleagues

🗣Free internal English courses

✈️In-house Travel Service

🦄Multiple internal activities: online platform for employees with quests, gamification, presents and news, clubs for movie / book / pets lovers and more

🎳Other benefits could be added based on your location