Тип вакансії: Повна зайнятість

Розташування:

Who We Are:
An international iGaming company specializing in identifying and fostering the growth of high-potential entertainment markets. With 1000+ professionals in 20+ locations, we operate in 10 countries, serving over 300,000 customers.

Requirements:
Proven hands-on experience as a Security Engineer, Cloud Security Engineer, or DevSecOps Engineer;
Strong experience securing AWS environments, including IAM, VPC, KMS, Secrets Manager, CloudTrail, GuardDuty, and Security Hub;
Knowledge of PCI DSS requirements and practical experience implementing security controls or preparing payment infrastructure for compliance audits;
Understanding of payment system architecture, sensitive data flows, and security risks associated with third-party integrations;
Understanding of cryptocurrency wallet security, private key management, and transaction signing, including hot/cold wallets, multisig, and MPC;
Strong knowledge of Linux, network security, TLS, access management, and the principle of least privilege;
Understanding of OWASP Top 10 and API security, including authentication, authorization, webhook protection, and replay attack prevention;
Experience automating security tasks using Python or Bash and working with Infrastructure as Code (IaC);
Ability to independently identify security risks, implement solutions, and validate their effectiveness;
AWS Security, CISSP, CCSP, or similar security certifications will be considered a plus.
Responsibilities:
Design and implement security controls across AWS infrastructure, including access management, network segmentation, data protection, secrets management, and encryption key management;
Ensure the security of payment services, APIs, and integrations with payment providers, banks, and cryptocurrency services;
Implement and maintain PCI DSS technical requirements, including defining the cardholder data environment (CDE) scope, access controls, network segmentation, logging, and cardholder data protection;
Conduct security reviews of system architecture and infrastructure changes, perform threat modeling, and support engineering teams in mitigating risks before production deployment;
Integrate security checks into CI/CD pipelines, including vulnerability scanning, dependency analysis, secrets detection, configuration checks, and container image scanning;
Enhance security monitoring, threat detection capabilities, and incident response procedures;
Coordinate vulnerability remediation and system hardening activities, working closely with service owners to ensure security issues are effectively resolved.

Our Benefit Cafeteria is Packed with Goodies:
Children Allowance
Mental Health Support
Sport Activities
Language Courses
Automotive Services
Veterinary Services
Home Office Setup Assistance
Dental Services
Books and Stationery
Training Compensation
And yes, even Massage!

The post IT Security Engineer appeared first on Remote Work Ukraine [Українське].