IT Security Engineer

Who We Are: An international iGaming company specializing in identifying and fostering the growth of high-potential entertainment markets. With 1000+ professionals in 20+ locations, we operate in 10 countries, serving over 300,000 customers. Requirements: - Proven hands-on experience as a Security Engineer, Cloud Security Engineer, or DevSecOps Engineer; - Strong experience securing AWS environments, including IAM, VPC, KMS, Secrets Manager, CloudTrail, GuardDuty, and Security Hub; - Knowledge of PCI DSS requirements and practical experience implementing security controls or preparing payment infrastructure for compliance audits; - Understanding of payment system architecture, sensitive data flows, and security risks associated with third-party integrations; - Understanding of cryptocurrency wallet security, private key management, and transaction signing, including hot/cold wallets, multisig, and MPC; - Strong knowledge of Linux, network security, TLS, access management, and the principle of least privilege; - Understanding of OWASP Top 10 and API security, including authentication, authorization, webhook protection, and replay attack prevention; - Experience automating security tasks using Python or Bash and working with Infrastructure as Code (IaC); - Ability to independently identify security risks, implement solutions, and validate their effectiveness; - AWS Security, CISSP, CCSP, or similar security certifications will be considered a plus. Responsibilities: - Design and implement security controls across AWS infrastructure, including access management, network segmentation, data protection, secrets management, and encryption key management; - Ensure the security of payment services, APIs, and integrations with payment providers, banks, and cryptocurrency services; - Implement and maintain PCI DSS technical requirements, including defining the cardholder data environment (CDE) scope, access controls, network segmentation, logging, and cardholder data protection; - Conduct security reviews of system architecture and infrastructure changes, perform threat modeling, and support engineering teams in mitigating risks before production deployment; - Integrate security checks into CI/CD pipelines, including vulnerability scanning, dependency analysis, secrets detection, configuration checks, and container image scanning; - Enhance security monitoring, threat detection capabilities, and incident response procedures; - Coordinate vulnerability remediation and system hardening activities, working closely with service owners to ensure security issues are effectively resolved. Our Benefit Cafeteria is Packed with Goodies: - Children Allowance - Mental Health Support - Sport Activities - Language Courses - Automotive Services - Veterinary Services - Home Office Setup Assistance - Dental Services - Books and Stationery - Training Compensation - And yes, even Massage!