Інженер безпеки платформних застосунків

About the Position

Mission: Integrates security into the platform so that the client's safest way of working is the simplest.

Responsibilities

• Integrates protection into standard platform routes so that the client receives it automatically without ordering separately: traffic encryption, password and key management, action logs, network restrictions.
• Writes automatic security rules that prevent the deployment of dangerous configurations - the system rejects it itself, without manual verification.
• Responsible for the security of what applications are built from: vulnerability scanning, signing, control of third-party components.
• Configures secret management (passwords, access keys) and access rights based on the principle of least privilege.
• Detects real-time attacks and writes incident response instructions.
• Translates regulator requirements (NBU, EU data protection, data storage requirements in Ukraine, KSU) into specific technical settings of the platform.
• Supports secure integration with government systems (Trembita, ACSK, id.gov.ua) for the relevant direction.

Requirements

• Experience in application security (common vulnerabilities, authentication, working with secrets) - OWASP level.
• Experience in Kubernetes / cloud security.
• Practical skills, not just auditing: the person must be able to configure protection, IAM, embed a scanner in the build process, write a rule, and fix it when it breaks.
• Working with secret management and scanning container images.
• Understanding of secure development process and risks of third-party components.
• Ability to assess risk thoughtfully: distinguish real threats from formalities.

Nice to Have

• Experience with automated policy tools (OPA/Gatekeeper, Kyverno).
• Knowledge of KSU, NBU, GDPR, or other regulatory regimes.
• Experience interacting with government systems (Trembita, ACSK, id.gov.ua).
• Experience integrating with HSM.
• Experience preparing a company for audit or certification.
• Experience responding to real security incidents.

We Offer

• Official employment according to the Labor Code of Ukraine.
• Official salary.
• Work schedule: from 09:00 to 18:00, weekends - Saturday and Sunday.
• Possibility of hybrid work: one day a week remotely by agreement with the manager.
• Medical insurance after successful completion of the probationary period.
• Corporate mobile communication.
• Ability to use corporate taxi for work purposes.
• Modern office equipped with everything necessary for comfortable and productive work.
• Professional and friendly team open to cooperation and exchange of expertise.
• Developed corporate culture and activities to maintain a balance between work and leisure:
  • Sweet Fridays;
  • Sports activities;
  • English Speaking Club with a native speaker;
  • Other corporate initiatives.

Safety and Continuity of Operations

• Bomb shelter directly in the building, equipped with full-fledged workplaces.
• Uninterruptible supply of office electricity and communication in 24/7 mode.