Senior Security Engineer in ATLASLIVE

Senior Security Engineer

Київ, за кордоном, віддалено

We are a software development company. We develop our own iGaming platform and business solutions for all areas of Sportsbook operations worldwide.We’re expanding and looking for a skilled Senior Security Engineer to join our dynamic team.As a Security Engineer, your main role encompasses the configuration and implementation of various security controls tailored for cloud environments, enhancing the maturity of security operation processes, conducting security assessments, and ensuring compliance with web application security best practices.

Requirements
— At least 5 years of experience as an information security engineer.
— Experience with AWS Cloud (security monitoring, network security, vulnerability management).
— Experience with Incident management (handling SIEM incidents, onboarding data sources, managing rules, alerts, and developing dashboards).
— Understanding of authentication and authorization within web services (OAuth, OIDC, SAML)
— Proficiency in utilizing security solutions like WAF, VPN, Bastions, Firewalls, IDS/IPS.
— Understanding of containerization technologies like Docker or Kubernetes and CI/CD tools.
— Knowledge of various cyber attack types, tactics, and techniques, including detection, handling, and countermeasures (DDoS/DoS, Brute force, Injection, Phishing).
— Understanding of cybersecurity frameworks such as ISO 27001, PCI DSS, NIST, OWASP.
— English proficiency at the B2 level.

Responsibilities
— Developing security incident management processes and procedures.
— Responding to and mitigating security incidents, conducting root cause analysis, implementing corrective actions.
— Developing vulnerability management strategies, including tools implementation, assessments, audits, automation, remediation measures, patch management.
— Collaborating with cross-functional teams to integrate security best practices into development and deployment processes.
— Conducting security reviews of Platform components and cloud infrastructure.
— Managing Privileged Access Management, including implementing Single Sign-On (SSO) and adjusting system access control permissions.
— Modifying and maintaining Infrastructure as Code (IaC) using build provisioning tools such as Terraform, GitLab CI, etc.

Nice to have
— Security certifications

Perspectives:

• A real opportunity for professional growth and self-improvement in a team of professionals
• Challenging and exciting tasks, and all the needed tools to achieve them

Work Conditions:

• Vacation: 22 working days per year.
• Sick leave: 5 paid days per year.
• Sick lists: 100% paid with medical certificate up to 10 days per year
• Benefit cafeteria personal limit for health support