SecOps Engineer

Pin-Up Global is looking for a SecOps Engineer to join their team. This role focuses on maintaining the security of infrastructure, cloud environments, and internal systems through proactive monitoring, auditing, and vulnerability management.

The successful candidate will work within a collaborative environment, engaging with infrastructure and DevOps teams to ensure that security controls are effectively implemented and maintained. The position requires a process-oriented mindset and the ability to manage security incidents under pressure.

• Infrastructure Security Monitoring - continuously monitor infrastructure for security events, anomalies, misconfigurations, and potential threats.
• Infrastructure Security Audits - plan and conduct regular security audits of infrastructure, cloud environments, operating systems, networks, and security controls.
• CIS Compliance & Hardening Assessment - assess infrastructure against CIS Benchmarks and internal security baselines, identify gaps, and drive remediation.
• Vulnerability Management - monitor infrastructure vulnerabilities, validate findings, prioritize remediation based on risk, and track remediation progress.
• Security Findings Triage & Escalation - triage findings from security tools, audits, and monitoring systems; validate their severity and escalate critical issues according to defined SLAs.
• Security Posture Management - continuously assess and improve the security posture of infrastructure and track security improvement initiatives.
• Security Standards & Baseline Compliance - ensure infrastructure complies with approved security standards, baselines, and security requirements.
• Security Control Validation - verify that implemented security controls are properly configured and effectively mitigate the intended risks.
• Security Risk Identification & Reporting - identify infrastructure security risks, assess their potential impact, and provide clear reports and recommendations to stakeholders.
• Data Security - ensure appropriate infrastructure-level controls are implemented to protect sensitive and business-critical data.
• Patch Management Monitoring & Compliance - monitor patch management processes, identify overdue or missing security updates, and work with infrastructure teams to ensure timely remediation.

• 2+ years of professional experience in Security Engineering, Infrastructure Security, Cloud Security, DevSecOps, or a related role. (required)
• Strong understanding of infrastructure and network security principles, including network segmentation, firewalls, access control, TLS, secure network configuration, and service-to-service communication. (required)
• Practical experience with Linux systems security and hardening. (required)
• Experience conducting security audits, configuration reviews, vulnerability assessments, or compliance assessments. (required)
• Good understanding of CIS Benchmarks and security hardening principles. (required)
• Experience with vulnerability management, including vulnerability validation, prioritization, remediation tracking, and risk-based decision making. (required)
• Experience with security monitoring / SIEM / security analytics tools. (required)
• Understanding of security incident response processes and basic incident investigation techniques. (required)
• Understanding of patch management and operating system vulnerability remediation processes. (required)
• Experience with cloud infrastructure security, preferably AWS. (required)
• Understanding of Kubernetes security and container security principles. (required)
• Ability to read and understand infrastructure configurations, logs, security findings, and network flows. (required)
• Basic understanding of Infrastructure as Code and security implications of infrastructure changes. (required)
• Good understanding of security controls and their practical implementation rather than purely theoretical knowledge. (required)
• English sufficient for reading technical documentation and communicating with international teams. (required)
• Experience with Kubernetes security hardening and cluster security assessments. (nice-to-have)
• Experience with OpenStack security. (nice-to-have)
• Experience with AWS security and AWS security assessment frameworks. (nice-to-have)
• Experience automating security checks and operational processes using Python, Bash, or similar scripting languages. (nice-to-have)
• Experience integrating security controls into CI/CD pipelines. (nice-to-have)
• Analytical thinking and strong attention to detail. (required)
• Ability to distinguish between real security risks, false positives, and low-impact findings. (required)
• Ability to work independently and make reasonable decisions when requirements are incomplete. (required)
• Ability to communicate technical security risks clearly to Infrastructure, DevOps, Engineering, and management. (required)
• Comfortable working during security incidents and under time pressure. (required)
• Strong collaboration skills and ability to build effective working relationships with Infrastructure and DevOps teams. (required)
• Process-oriented mindset with a focus on continuous improvement. (required)

• An exciting and challenging role in a fast-growing group of companies
• A collaborative and inspiring work environment with passionate experts and leaders who foster a friendly culture and a success-driven mindset
• Modern offices in Warsaw, Limassol, Kyiv, Almaty, and Yerevan, with the flexibility to work remotely or on-site while building valuable professional connections
• Modern corporate equipment based on macOS or Windows, with additional equipment provided when needed
• Paid vacation, sick leave, personal days, and additional days off
• Corporate health insurance program to support your well-being
• Employee referral program with bonus opportunities
• Learning and development programs, including regular internal training, compensation for external education, and attendance at international professional conferences
• Mentoring and coaching rewards program
• In-house Travel Service
• A wide range of internal activities, including an employee platform with quests, gamification, gifts, and company news, as well as RedCore clubs for movie, book, and pet lovers, and themed office events
• Corporate events and team-building activities

PIN-UP Global is an international holding company that develops technologies, B2B solutions and products for the iGaming industry. Headquartered in Warsaw, the group brings together businesses spanning product development, technology and marketing services for online gaming. It supports a portfolio of companies and brands operating across multiple markets. PIN-UP Global focuses on building advanced technology and products for the gambling sector.

Read more about Pin-Up Global →