Jobs Security

Шукаємо технічного спеціаліста з досвідом у DevSecOps, Security та ICT Compliance для регульованого fintech-проєкту.

📌 Основне завдання: Не писати документацію, а руками закривати виявлені вразливості, security gaps та audit findings в інфраструктурі.

📋 Що важливо:

Hands-on досвід у DevSecOps / Application Security / Infrastructure Security.
 

Обов'язкове: DORA, а також MiCA / ISO 27001 чи аналогічних стандартів.
 

Досвід роботи з IT/security-аудитами та remediation findings.

Розуміння специфіки regulated / fintech.

Досвід роботи з BCP, Disaster Recovery, Incident Management та Vendor Risk Management.

➕ Буде плюсом:

Fireblocks, MPC або інша custody-інфраструктура.

Досвід у crypto exchanges, custodians, fintech або payment-проєктах.

💼 Умови:

Формат: Гібрид (Варшава в пріоритеті) або Remote.

💸: $2 000 – $3 500 (обговорюється індивідуально).

Етап відбору: Перед наймом обов'язкове технічне завдання.

PrivatBank is the largest bank in Ukraine and one of the most innovative banks around the world. It holds a leading position for all the financial indicators in the area and comprises about a quarter of the whole banking system of our country.

We are looking for an Application Security Engineer. We are searching for the person who seeks to work in a dynamic environment and shares the values of initiative, openness and mutual trust.

We are striving to find a goal-oriented and multitask professional who would be focused on making good results and high quality.

Requirements:

• At least 3 years of experience in application security or related fields such as penetration testing and security architecture
• Proficiency in using security scanners such as SAST, DAST, SCA, Secret Detection, and Container scanning
• Experience integrating security scanners in CI/CD pipelines using Jenkins for GitLab
• Certifications such as CEH, OSCP, CSSLP, AWS Certified Security Specialty, etc. is preferred
• Background in software development, including roles such as Developer, Business Analyst, Architect, DevOps, etc
• Knowledge of Secure Software Development Life Cycle (S-SDLC) and frameworks like OWASP SAMM, BSIM, and Microsoft SDL
• Familiarity with the software development process and stages
• Basic understanding of software code
• Knowledge of key infrastructure components like databases, queues, application servers, load balancers, NoSQL, etc
• Understanding of major types of vulnerabilities
• Understanding of software architecture
• Knowledge of network protocols such as DNS, HTTP/S, SMTP, SSH, and FTP
• Ability to independently research information and solve complex problems
• Critical thinking skills

Responsibilities:

• Conduct security audits using the OWASP SAMM framework to assess current practices, identify gaps, and evaluate compliance levels within the organization
• Develop and implement strategic plans aimed at enhancing security maturity levels throughout the organization, with gradual improvements
• Application security governance and metrics
• Collaborate with various team members, including developers and top management, to advocate and implement application security best practices
• Improve our application security management platform
• Manage security architecture, focusing on integrating security at every stage of the software development lifecycle
• Integrate and oversee security automation tools to enhance security processes and reduce manual error
• Oversee security testing across various stages of software development to identify and mitigate potential security vulnerabilities
• Engage in threat modeling activities to predict and neutralize potential security threats before they impact the system
• Ensure compliance with relevant industry standards and regulations by regularly updating security policies and standards
• Track and manage software defects to ensure timely resolution of security-related issues
• Develop and conduct training and awareness programs to enhance security knowledge and practices across the organization
• Spearhead the secure integration of CI/CD practices into software development processes to ensure continuous security
• Use cloud services for application security

We offer:

• Work in the largest and most innovative bank of Ukraine
• Official employment and 24+4 calendar days of vacation
• Sick leave compensation
• Medical Insurance
• Competitive salary
• Bonuses, premium according to company policy
• Corporate training
• Modern comfortable office
• Interesting projects, ambitious tasks and dynamic growth
• Corporate financial assistance in critical situations
• A friendly professional and strong team
• Possibility of remote work format

PrivatBank is open to support and employ veterans and people with disabilities.

We believe that discrimination due to health conditions, physical abilities, age, race and ethnicity, gender or marital status is unacceptable.

We are ready to train veterans and candidates with disabilities without banking experience.

Job Description

Overall

4+ years in cybersecurity, security testing, or software engineering with a strong security focus
Structured, methodical approach to testing - able to plan and document, not just test ad-hoc
Good written English - reporting is a significant part of the role

Must have

Hands-on experience in vulnerability assessment and penetration testing (web, API, network, or infrastructure)
Secure code review experience
Solid coding skills (Python preferred) for automation, tooling and test scripts
Experience writing automated tests and building them into repeatable suites
Strong understanding of vulnerability classes (OWASP Top 10, CWE) and CVE/CVSS triage
Familiarity with standard security tooling (e.g. Burp Suite, Nmap, SAST/DAST scanners)

Nice to have

Experience applying AI/LLMs to security work - highly desirable
Vulnerability management processes and tooling
Cloud security (AWS/Azure/GCP) or OT/embedded/product security background
CI/CD security integration
Certifications: OSCP, CEH, CISSP, or similar

Job Responsibilities

Perform vulnerability assessments and penetration testing against applications, services and infrastructure
Conduct secure code and configuration reviews
Triage and validate findings; assess severity, eliminate false positives, support remediation
Write and maintain automated security tests and tooling
Design test plans, execute testing campaigns, document and report results
Evaluate AI-assisted approaches to security testing and help integrate what works into the workflow

Department/Project Description

An enterprise technology group is building a dedicated security validation team focused on vulnerability assessment and security testing across the group's products and systems. The team runs structured testing campaigns: penetration testing, vulnerability discovery and triage, secure code review, and building automated test suites to make the process repeatable at scale.

The team also gets early access to specialized AI models and evaluates how they can accelerate security testing - an area we're actively investing in, though the core of the work remains hands-on security engineering. Scope covers internal systems as well as business-unit products across the group, agreed campaign by campaign. The team starts small and scales into a permanent capability.

Skill Category

QA - Automation

Keyskills - Must Have

• Security
• Application Security
• Penetration Testing and Reporting

Founded in 1999, the company has a premium listing on the Main Market of the London Stock Exchange and is focused on regulated and regulating markets across its B2B business. By leveraging its proprietary technology, Playtech delivers innovative products and services to ensure a safe, engaging and entertaining gaming experience.

As the gaming industry's leading technology company, it combines business intelligence-driven software, services, content, and platform technology to drive excellence and innovation across the sector. Read more about who we are and what we do here: www.playtechpeople.com and www.playtech.com
 
Here at Playtech, we genuinely believe that people are our biggest asset. Diverse thoughts, experiences, and individual characteristics enrich our work environment and lead to better business decisions. Embracing differences and maintaining transparency in our processes is the core of Playtech's overall commitment to responsible business practices.

Ready to level up your career?

We are seeking an enthusiastic and experienced Cloud Security Engineer to help drive the security posture of Playtech and its subsidiaries.

This position ensures the proper security design and operation of cloud environments in Azure or GCP (primarily IaaS and PaaS) for different types of services and applications. The Cloud Security Engineer will work closely with product teams in the company to assist and audit in building and maintaining secure cloud environments

Job Description

Your influential mission. You will...

• Oversee cloud security governance and monitoring
• Maintain a Cloud Security Posture Management (CSPM) solution
• Collaborate with DevOps, IT, development and GRC teams to provide subject‑matter expertise in the Google Cloud domain
• Support and maintain cloud‑native security controls
• Conduct security reviews for cloud environments
• Develop documentation outlining security recommendations and best practices
• Identify weak spots, missing controls, vulnerabilities, providing clear recommendations for improvement and remediation
• Stay current on emerging security threats, vulnerabilities, and cloud security controls
• Participate in investigations and responses to potential security incidents
• Implement automation for security‑related tasks

Qualifications

Components for success. You...

• Bring at least 2 years of experience in a similar technical security role
• Demonstrate experience with Microsoft Azure Cloud or Google Cloud Platform (GCP) / Google Workspace
• Apply strong knowledge of CSPM and DSPM solutions
• Understand how cloud infrastructure works, including architecture best practices, managed services, typical vulnerabilities, mitigations, and security best practices
• Communicate clearly, positively, and persuasively on security topics to both technical and non‑technical stakeholders, building effective relationships
• Maintain a strong security mindset with a business‑enablement focus
• Leverage familiarity with modern application development approaches (infrastructure as code, CI/CD, containers, serverless, code/artifact repositories, etc.), with hands‑on experience considered a plus
• Possess broad IT and enterprise architecture knowledge (TCP/IP stack, relevant protocols/technologies—firewall, proxy, etc.; server OS like Windows/Linux; web/database servers, etc.)
• Use basic scripting skills (Python/Shell) to automate and streamline daily tasks
• Have a basic understanding of AI concepts and practical experience using AI tools to improve productivity, automation, and security workflows
• Communicate effectively in spoken and written English
• Operate effectively within an enterprise environment

You'll get extra points for...

• Knowledge of AWS cloud
• Relevant security, systems, networking certifications

Thrive in a culture that values...

• Collaborating with a true product company where your impact is visible
• Growing through a structured educational program designed to support your development
• Continuously learning in a collaborative environment where experienced colleagues help you expand your skills
• Working in a friendly, supportive, and inclusive atmosphere

Additional Information

SECURITY TEAM
A dynamic and innovative team that focuses on developing and maintaining networks across Playtech. If you’re looking for a challenging and rewarding work environment, the Security Unit at Playtech is a great place to be!

Playtech is an equal opportunities employer. Our mission is to welcome everyone and create inclusive teams. We celebrate differences and encourage everyone to join us and be themselves at work.

We are looking for a Senior Security Engineer with deep, hands-on Active Directory expertise to secure and harden enterprise identity infrastructure. You will own AD architecture, hybrid identity, and PKI across forests and domains, with a strong focus on security hardening and reducing attack surface. This is a senior, independent role — you should be comfortable owning identity security end-to-end with minimal ramp-up.

Details
Work setup: Remote/hybrid, with paid onsite visits to Baltic offices approximately once per month for 2–3 days
Location: Europe, strong preference for the Baltics
Duration: Long-term
Type of collaboration: Full-time employment
English: Upper-intermediate / fluent

About the role
You will be responsible for the design, hardening, and ongoing security of Active Directory environments — spanning forest and domain architecture, DNS, Group Policy, and replication. A core part of the role is reducing the identity attack surface: applying security hardening best practices, managing Kerberos configuration, and running Active Directory Certificate Services (PKI) securely. You will also work across hybrid identity, connecting on-prem AD with Microsoft Entra ID and ADFS, ensuring consistent security posture across both environments.

You have
Strong, hands-on experience with Active Directory architecture — forests, domains, trusts, and multi-domain environments
Deep knowledge of Windows Server, DNS, Group Policy, and AD replication
Proven experience with security hardening of AD environments and Kerberos
Hands-on experience with PKI and Active Directory Certificate Services (AD CS)
Experience with Microsoft Entra ID, hybrid identity, and ADFS
Upper-intermediate or fluent English

What to do
Design and maintain secure Active Directory forest and domain architecture
Harden AD environments against common attack paths (Kerberoasting, golden/silver ticket, DCSync, etc.)
Manage DNS, Group Policy, and AD replication across the environment
Administer and secure PKI infrastructure via Active Directory Certificate Services
Own hybrid identity integration between on-prem AD, Microsoft Entra ID, and ADFS
Audit and remediate security gaps across identity infrastructure

Ми — українська IT/marketing group із 4+ роками досвіду в iGaming та командою 250+ спеціалістів.

Зараз розвиваємо власний iGaming-продукт для Tier-1 ринків. Core-команда вже сформована, технічний roadmap визначений, продукт перебуває в активній розробці.

Шукаємо Platform Security Engineer / DevSecOps, який допоможе побудувати security-підхід платформи з нуля.

Це hands-on роль, а не pure compliance і не позиція standalone pentester. Ти працюватимеш на стику Platform Engineering, Cloud Security та DevSecOps, безпосередньо взаємодіючи з DevOps/SRE та engineering-командами.

Що буде у твоїй зоні відповідальності

Platform Engineering

• Проєктування та підтримка AWS/Kubernetes-платформи.
• Infrastructure as Code, CI/CD, environments, secrets, deployment workflows.
• Reliability, observability, scalability, backup/recovery та production readiness.
• Incident response, root-cause analysis та platform on-call.
• Створення reusable-рішень і стандартів для engineering-команд.

Security Engineering

• AWS та Kubernetes security baseline: IAM, network boundaries, secrets, audit logging, container security, privileged access.
• Інтеграція SAST, SCA, secret scanning, IaC scanning, container scanning та policy gates у CI/CD.
• Threat modelling для authentication, wallet/ledger, payments, game-provider integrations, callbacks та backoffice.
• Впровадження security-вимог на базі OWASP ASVS.
• Vulnerability management, remediation SLA та retesting.
• Security monitoring, detection logic та incident playbooks.
• Координація зовнішніх penetration tests і контроль remediation.

Purple Teaming & Automation

• ATT&CK-based adversary emulation та purple-team сценарії.
• Робота з MITRE CALDERA, Atomic Red Team та іншими security tools.
• Співпраця із Security Champions та engineering-командою.
• Участь у створенні внутрішньої AI-assisted security platform для threat modelling, control mapping, evidence collection та remediation tracking.

Що ми очікуємо

• 3+ роки комерційного досвіду в DevOps / Platform Engineering / SRE / Cloud Security / DevSecOps.
• Hands-on досвід з AWS, Kubernetes, Docker, Linux, networking, Infrastructure as Code.
• Практичний досвід із CI/CD, observability, IAM, secrets management та incident response.
• Розуміння cloud, container, API та application security.
• Досвід security scanning та vulnerability management.
• Вміння читати код і розуміти архітектуру сервісів.
• Досвід взаємодії з backend/frontend engineers.
• Прагматичний підхід до security: вмієш балансувати між безпекою, швидкістю delivery та бізнес-ризиками.
• Українська або російська — обов’язково, англійська — робоча.

Буде плюсом

• Досвід в iGaming, fintech, payments або regulated/high-risk environments.
• Wallet/ledger, payment providers, game providers, KYC/AML, backoffice security.
• OWASP ASVS, MITRE ATT&CK, threat modelling, CALDERA, Atomic Red Team.
• Purple teaming, detection engineering, incident simulations або pentest remediation.
• Kafka/RabbitMQ, PostgreSQL, Redis, microservices, Node.js/NestJS.
• Досвід із AI-assisted engineering/security tools.
• AWS, Kubernetes або security certifications.

Що пропонуємо

🏠 Relocation

• Повна допомога з релокацією до Братислави.

🚀 Розвиток

• Щорічний бюджет на курси, сертифікації та конференції.
• Топове обладнання на твій вибір.
• Сучасний engineering stack та AI-assisted workflow.
• Реальний ownership над security roadmap.
• Можливість створювати власні внутрішні security-рішення.

🌴 Wellbeing

• 28 календарних днів оплачуваної відпустки.
• Оплачуваний вихідний у день народження.
• 100% оплачуваний лікарняний.
• Гнучкий hybrid-формат.

🤝 Команда

• Senior engineering-команда з високим рівнем ownership.
• Мінімум бюрократії та мікроменеджменту.
• Пряма взаємодія з CTO, Tech Leads, DevOps/SRE та Product.
• Значні ресурси на розвиток платформи та security.

💰 Компенсація: конкурентна, за результатами переговорів.

Чому ця роль?

Тут security — не формальність і не пункт у checklist перед релізом.

Ти приєднаєшся до створення платформи ще до її запуску, матимеш реальний вплив на архітектуру та engineering-процеси й зможеш побудувати security-функцію так, щоб вона працювала в реальному продукті.

The Lead IAM Engineer (Tech Lead) is a key technical specialist responsible for driving the deployment and upgrade of the target Bravura Identity environment. This role requires deep Identity and Access Management (IAM) expertise to ensure a seamless transition to the new platform without disrupting the client's business operations. The engineer will collaborate closely with the Delivery Lead, Security Architect, and the rest of the engineering squad.

• Deep expertise in Identity and Access Management (IAM) systems, with direct experience configuring and upgrading Bravura Identity.
• Strong technical background in integrating and provisioning to Active Directory (AD) and Microsoft Exchange.
• Familiarity with enterprise authentication and integration protocols, including LDAP, APIs, SCIM, and Microsoft Entra ID.
• Proven experience acting as a Technical Lead in planning and executing rehearsed production cutovers and rollback strategies.
• Solid understanding of underlying infrastructure components (e.g., SQL Server, Windows environments) relevant to IAM platform upgrades.
• Experience and strong knowledge of Identity Governance and Identity Lifecycle Management

Job Responsibilities

• Lead the core upgrade build process and cutover support.
• Ensure the continuity of automated provisioning to Active Directory and Exchange during and after the migration.
• Provide technical support during the production cutover and hypercare phases.
• Ensure the existing architecture and operating model remain intact throughout the implementation of changes

Department/Project Description

The project involves upgrading the Bravura Identity platform to a supported version ahead of its End of Support for a major banking and financial institution. This is a "like-for-like" upgrade that preserves the current architecture and operating model. 

Skill Category

Engineering - Other

Keyskills - Must Have

• IAM
• Active Directory

We are the creators of a new fintech era!

Our mission is to change this world by making blockchain accessible to everyone in everyday life. WhiteBIT is a global team of over 1,200 professionals united by one mission — to shape the new world order in the Web3 era. Each of our employees is fully engaged in this transformative journey.

We work on our blockchain platform, providing maximum transparency and security for more than 8 million users worldwide. Our breakthrough solutions, incredible speed of adaptation to market challenges, and technological superiority are the strengths that take us beyond ordinary companies. Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT and VISA.

The future of Web3 starts with you: join us as an Application Security Engineer (AppSec)!

Requirements:

— 2+ years of experience in Application Security, Product Security, or a related security role.

— Strong knowledge of web application security, OWASP Top 10, common attack techniques, and secure coding practices.

— Hands-on experience with threat modeling, security architecture reviews, vulnerability assessment, and penetration testing.

— Ability to review source code and identify security vulnerabilities.

— Experience with SAST, DAST, SCA, secrets scanning, and vulnerability-management tools.

— Understanding of CI/CD pipelines and experience integrating security checks into the SDLC.

— Knowledge of API security, authentication, authorization, and common security protocols.

— Familiarity with cloud, container, or Kubernetes security.

— Basic knowledge of Web3 and smart contract security.

— Basic scripting or programming skills, preferably in Python or another relevant language.

— Ability to clearly communicate security risks and remediation guidance to technical and non-technical stakeholders.

Responsibilities:

— Perform application security assessments, source-code reviews, and penetration testing.

— Participate in threat modeling and security architecture reviews for new and existing products.

— Triage Bug Bounty submissions: validate and reproduce vulnerabilities, assess their severity and business impact, identify duplicates and false positives, communicate with researchers, and coordinate remediation with engineering teams.

— Identify, prioritize, and track vulnerabilities throughout the remediation process.

— Provide developers with clear remediation guidance and secure coding recommendations.

— Support the integration and operation of SAST, DAST, SCA, secrets scanning, and other security tools within CI/CD pipelines.

— Participate in defining and reviewing security requirements throughout the software development lifecycle.

— Validate security-tool findings and help reduce false positives.

— Support investigations and remediation of application-related security incidents.

— Contribute to application security standards, guidelines, and reusable security controls.

— Help deliver security training and promote secure development practices across engineering teams.

— Collaborate with developers, DevOps, QA, product teams, and other security specialists.

— Monitor emerging application security threats and contribute to improving AppSec processes.

Working terms:

Immerse yourself in Crypto & Web3:

— Master cutting-edge technologies and become an expert in the most innovative industry.

Work with the Fintech of the Future:

— Develop your skills in digital finance and shape the global market.

Take Your Professionalism to the Next Level:

— Gain unique experience and be part of global transformations.

Drive Innovations:

— Influence the industry and contribute to groundbreaking solutions.

Join a Strong Team:

— Collaborate with top experts worldwide and grow alongside the best.

Work-Life Balance & Well-being:

— Modern equipment.

— Comfortable working conditions, and an inspiring environment to help you thrive.

— 24 calendar days of paid leave.

— Additional days off for national holidays.

With us, you’ll dive into the world of unique blockchain technologies, reshape the crypto landscape, and become an innovator in your field. If you’re ready to take on challenges and join our dynamic team, apply now and start a new chapter in your career!

Let’s Build the Future Together!

WhiteBIT offers all candidates an equal opportunity to join the team. All hiring decisions are made without regard to race, national origin, gender identity or sexual orientation, age, religion, disability, medical condition, marital status, familial status, veteran status, or any other legally protected characteristic of an individual.

We are looking for a Cyber Defense Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection, investigation, containment, and exposure reduction. You will lead our security operations function, making the organization faster in responding to threats while continuously improving controls across the attack surface.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging
• Hands-on experience with at least one enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response
• Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences
• English - Upper-Intermediate or higher

Will be a plus

• Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes
• Hands-on background as a SOC analyst, incident responder, or detection engineer prior to moving into management
• Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one
• Familiarity with threat intelligence platforms and threat-informed defense methodologies
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH) or equivalent

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a Detection Engineering & Automation Lead to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a SOC Lead (Detection Engineering and Automation) to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.

This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
• Ensure critical detections have a clear owner, documentation, and validated testing evidence
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions

Requirements

• Higher education in Computer Science, Information Security, or a related technical field is preferred
• 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
• 2+ years of hands-on experience in Detection Engineering
• 1+ year of experience leading or mentoring a team of engineers
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
• Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
• Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
• Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
• English - Intermediate+

Will be a plus

• Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
• Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
• Experience with AI/LLM-assisted alert summarization or detection tooling
• Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
• Previous experience building a Detection Engineering function from an early maturity stage

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

We are looking for a Head of Security Operations Center to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection, investigation, containment, and exposure reduction. You will lead our security operations function, making the organization faster in responding to threats while continuously improving controls across the attack surface.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, IAM, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Requirements

• 10+ years of experience in Information Security
• 3+ years in a security management or team lead role with direct people management experience
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging
• Hands-on experience with at least one enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling
• Understanding of cloud-native security controls and monitoring in AWS, GCP, or Azure
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response
• Ability to define, track, and communicate security KPIs and operational dashboards to technical and executive audiences
• English - Upper-Intermediate or higher

Will be a plus

• Experience in fintech, e-commerce, or other high-risk industries with complex threat landscapes
• Hands-on background as a SOC analyst, incident responder, or detection engineer prior to moving into management
• Experience building a SOC or Cyber Defense function from scratch or significantly maturing an existing one
• Familiarity with threat intelligence platforms and threat-informed defense methodologies
• Relevant certifications: CISSP, CISM, GIAC (GSOM, GCED, GCIH) or equivalent

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Description

The overall project is designated for intelligent Fleet De-Carbonization based on an ambitious science-based idea targeting the achievement of net-zero emissions. The solution is planned to be a fully integrated software solution that can maximize efficiencies in both operational and energy supply management perspectives.

#LI-IN1

Requirements

Knowledge of secure architecture & secure design (e.g. Zero Trust)
Strong knowledge of cybersecurity processes – SSDF by NIST
Cross-team collaboration
Experience Azure cloud:
Azure Kubernetes security
Azure IdP (Entra & B2C)
Azure Pipelines
Experience with scanning tools : SonarCloud & Snyk
Vulnerabilities management
Secure architecture design best practices (e.g. Zero Trust)
Strong knowledge of secure design:
Data encryption
Data anonymization
Secure communication (HTTPS – TLS, PKI)
Identity and Access Management
Scripting experience (e.g. Bash, Python, PS)

Job responsibilities

Owning and maintaining security activities required by SSDF process
Reporting to stakeholders (Head of Engineering & CISO)
Collaboration with SOC, Development, architects team
Vulnerabilities management
Solution design and requirements creation
Supporting/advising development team in security challenges

We are inviting you, a highly motivated and results-oriented Security Manager (Hybrid Infrastructure) to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success.
 

Responsibilities

• Own and lead Hybrid Infrastructure Security across cloud, network, identity, endpoint, and data domains
• Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions
• Lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments
• Manage cloud IAM and security-group guardrails in close collaboration with Platform and SRE teams
• Operate and mature endpoint security (EDR/XDR/MDM) across managed devices, including hardening and telemetry health
• Own data security and cryptography controls: KMS, secrets management, PKI, and certificate lifecycle
• Lead, mentor, and develop a team of security engineers (4 direct reports — Cloud & Network, Endpoint, IAM, Data Security & Cryptography)

Track, analyze, and report enterprise security metrics

Requirements

• 5+ years of experience in managing and developing security teams
• Proven track record in hands-on cybersecurity engineering roles
• Enterprise-level background
• Practical experience with on-premises environments
• Solid experience with networking
• Hands-on experience with cloud platforms
• Broad experience across cloud posture, network, identity, endpoint, and data protection security domains
• Experience with CSPM/CNAPP/CWPP tooling and cloud guardrails (WAF, DNS security, IaC scanning)
• Experience with cloud IAM and security-group/IaC security patterns
• Experience operating EDR/XDR and MDM solutions
• Experience with KMS, secrets management, PKI, and certificate management
• Ability to enforce security controls without unnecessarily blocking delivery for Platform/SRE/DevOps teams
• Upper-Intermediate English and higher

Will be a plus

• Higher education in Computer Science, Information Security
• Background in fintech, brokerage, trading platforms, payments, or other regulated environments
• Track record of building or maturing an enterprise/cloud security function from an early stage
• Familiarity with tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk
• Knowledge of Kubernetes/container security and cloud-native architectures
• Exposure to SOC 2, ISO 27001, or DORA compliance frameworks
   

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Employment Type: Full-Time

Experience: 2–4 years

About the Role

We are looking for a GRC Analyst to join our Information Security and Compliance team. You will run day-to-day governance, risk and compliance activities — risk assessments, ISMS maintenance, audit evidence, and third-party security reviews — with senior support on the more complex work.

This is a hands-on delivery role rather than a first job in security. You should be comfortable running a vendor assessment or an evidence collection cycle without step-by-step direction.

Key Responsibilities

Governance & Policy

• Maintain the ISMS, control register and governance documentation.
• Draft and update security policies, standards and procedures.
• Coordinate security awareness activities and track governance actions.

Risk Management

• Run information security risk assessments and maintain the risk register.
• Track risk treatment plans and remediation through to closure.
• Manage the security exception process.

Compliance & Audit

• Support compliance activities across ISO/IEC 27001, SOC 2 and GDPR.
• Collect and organise audit evidence; act as a point of contact during internal and external audits.
• Track audit and assessment findings to closure.

Third-Party Risk

• Run vendor security assessments and review supplier questionnaires.
• Maintain supplier risk records and follow up on third-party remediation.

Reporting

• Produce monthly security and compliance reporting for management.
• Maintain compliance dashboards and documentation repositories.

What We’re Looking For

• 2–4 years in information security, risk, compliance, audit or IT governance.
• Practical working knowledge of at least one major framework (ISO 27001, SOC 2 or NIST CSF).
• Working understanding of GDPR and data protection obligations.
• Confident with Excel and structured documentation; able to produce reporting for a management audience.
• Strong written communication and attention to detail.
• Comfortable working with both technical and non-technical stakeholders.
• Degree in cyber security, computer science, IT or a related discipline — or equivalent practical experience.

Nice to Have

• Hands-on use of a GRC platform (Vanta, Drata, Hyperproof, OneTrust, ServiceNow GRC or Archer).
• Cloud security fundamentals (AWS or Azure), IAM and MFA concepts.
• Exposure to Cyber Essentials, CIS Controls or AI governance.
• Jira or Azure DevOps; Power BI or Excel dashboards.
• A certification such as ISC2 CC, CompTIA Security+, ISO 27001 Foundation / Lead Auditor or SC-900.
• German is a strong plus

What We Offer

• Ownership of real GRC workstreams across the full lifecycle.
• Mentorship from senior security professionals and support for certifications.
• Clear progression towards Senior GRC Analyst or Risk & Compliance Specialist.
• Collaborative and inclusive working environment.