Job Summary

Job Description

EveryMatrix seeks a passionate Security Officer in Lviv/Kyiv to contribute to their security program, focusing on application security for on-premise and SaaS services. Responsibilities include performing security assessments, identifying flaws in web applications, analyzing security reports, assisting developers with vulnerability remediation, conducting vulnerability assessments (PCI DSS, ISO/IEC 27001), managing application security analysis throughout the SDLC, integrating security mechanisms via automation, participating in incident response, and managing internal security training. The role requires expertise in application security, penetration testing, OWASP Top 10, web application vulnerabilities, Python/Bash scripting, vulnerability scanning tools (Nessus, Burp Suite, ZAP), SAST/IAST/DAST, cloud environments, and agile development.

Must have:

5+ years' experience in Application Security
Strong understanding of OWASP Top 10
Experience with vulnerability scanning tools
Proficiency in Python/Bash scripting
Knowledge of web application vulnerabilities

Good to have:

Experience with cloud environments (GPC, OpenStack)
Familiarity with Agile development, Git, Gitlab CI/CD

Perks:

22+ annual leave days
10 sick leave days
30 medical leave days with allowance
21 weeks paid maternity leave
4 weeks paternity leave
On-site massages
Team-building activities
Daily catered lunch or allowance
Private medical subscription
Access to online learning platforms
Gym allowance

15 skills required

15 skills required for this role

Add these skills to join the top 1% applicants for this job

gitlab

saas-business-models

bash

ci-cd

nessus

github

burp-suite

web-security

python

websockets

git

incident-response

openstack

testing

budget-management

Job Details

About us:

EveryMatrix is a leading B2B SaaS provider delivering iGaming software, content and services. We provide casino, sports betting, platform and payments, and affiliate management to 200 customers worldwide.

But that's not all! We're not just about numbers, we're about people. With a team of over 1000 passionate individuals spread across twelve countries in Europe, Asia, and the US, we're all united by our love for innovation and teamwork.

EveryMatrix is a member of the World Lottery Association (WLA) and European Lotteries Association. In September 2023 it became the first iGaming supplier to receive WLA Safer Gambling Certification. EveryMatrix is proud of its commitment to safer gambling and player protection whilst producing market leading gaming solutions.

Join us on this exciting journey as we continue to redefine the iGaming landscape, one groundbreaking solution at a time.

We are looking for a passionate and dedicated Security Officer to join our team in Lviv/Kyiv!

About the job:

You will be involved in a wide range of projects to create our security program, yet have a specific focus on application security, for both on-premise and SaaS services. As well, you will act as the Subject Matter Expert and work closely with the various teams on security engineering topics.

What you'll get to do:

Performing security assessments of the Company software products Identifying security flaws within running web-applications and services as part of infrastructure penetration testing and application security reviews.
Analysing internal and third-party security reports.
Assisting developers in understanding and remediating vulnerabilities.
Conducting and managing regular vulnerability assessments in accordance with compliance requirements (PCI DSS, ISO/IEC 27001, etc.).
Control over the execution of application security analysis through the entire Software Development Life Cycle.
Integrating security mechanisms through automation.
Being part of a Security Incident Response team Managing internal security training program.

What You need to know:

5+ years of experience as an Application Security Engineer, Penetration Tester, or similar role.
A passion for security, and the hacker mentality of doing whatever it takes to figure out and solve a problem.
Strong understanding of the OWASP Top Ten security risks and how to mitigate them.
Ability to manually find and exploit vulnerabilities in web-applications and services.
Experience with Python and Bash or other languages of your choice for tasks automation.
Knowledge of web security attacks in API, WebSockets, browsers etc..
Experience with common vulnerability scanning and reporting tools (Nessus, Burp Suite, ZAP).
Good understanding of application security verifications approaches (SAST, IAST, DAST).
Understanding of cloud environments (GPC, OpenStack).
Familiarity with agile development, bug tracking, git and Gitlab CI/CD.
Staying updated on industry trends, best practices, and emerging threats to proactively strengthen application security.

Here's what we offer:

Start with 22 days of annual leave, with 2 additional days added each year, up to 32 days by your fifth year with us.

Stay Healthy: 10 sick leave days per year, no doctor's note required; 30 medical leave days with medical allowance

Support for New Parents:

21 weeks of paid maternity leave, with the flexibility to work from home full-time until your child turns 1 year old.

4 weeks of paternity leave, plus the flexibility to work from home full-time until your child is 13 weeks old.

Our office perks include on-site massages and frequent team-building activities in various locations.

Benefits & Perks:

Daily catered lunch or monthly lunch allowance.

Private Medical Subscription.

Access online learning platforms like Udemy for Business, LinkedIn Learning or O’Reilly, and a budget for external training.

Gym allowance

At EveryMatrix, we're committed to creating a supportive and inclusive workplace where you can thrive both personally and professionally. Come join us and experience the difference!