{"id":2261395,"url":"https://alion.io/job/skywindgroup-holdings-ltd-senior-security-engineer","title":"Senior Security Engineer","company":{"id":2236552,"name":"SkywindGroup Holdings LTD","domain":"skywindgroup.com","url":"https://alion.io/company/skywindgroup","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Voluntari, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":2000,"max":3000,"currency":"EUR","period":"month","gross":null,"usd_annual":40344},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"VMWare","optional":false},{"name":"HashiCorp Vault","optional":true},{"name":"Kyverno","optional":true},{"name":"PKI","optional":true},{"name":"Service Mesh","optional":true},{"name":"SIEM","optional":true},{"name":"Wazuh","optional":true}],"status":"live","first_seen_at":"2026-10-11T05:17:35Z","employer_posted_date":null,"last_verified_at":"2026-10-11T05:17:35Z","board_verified":false,"closed_at":null,"days_open":8,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":8},"description":"Our environment \nTo give you a sense of what you would be working with, our setup includes: \nPublic cloud on GCP and AWS. \nWorkloads running on Kubernetes. \nInfrastructure managed with Terraform and Ansible. \nCI/CD built on Jenkins. \nOn-prem datacenters running VMware, KVM, and oVirt, along with our own network equipment and firewalls. \nMany third-party services, including CDNs and DNS providers. \nWhat you'll do \nHarden our infrastructure and cloud \nSecure our cloud environments (GCP, AWS) and on-prem datacenters: configuration, network segmentation, firewalls, encryption, and access. \nBuild guardrails so our cloud and compute platforms are safe by default, and set secure baselines and reusable patterns through Terraform and Ansible. \nHarden our Kubernetes clusters: RBAC, network policy, workload isolation, and image hygiene. \nImprove identity and access management across our systems: who can reach what, and why. \nManage secrets properly (e.g. keys, tokens, and certificates) so they are not scattered through code and pipelines. \nBuild security into how we ship software \nAdd security checks into our CI/CD pipelines, such as code scanning (SAST), dependency scanning (SCA), secret scanning, and container image scanning, with sensible gates rather than noise. \nHelp protect our software supply chain, from build integrity to the third-party components we depend on. \nGive engineers secure defaults, paved roads, and clear guidance, so the secure path is the easy path and security is built in rather than added later. \nDo threat modeling and design reviews on new services and significant changes, and turn the findings into fixes. \nWork alongside developers to fix issues, not just report them. \nFind and fix weaknesses \nRun vulnerability scanning and management, prioritise by real risk rather than raw severity, and drive fixes to completion with clear tracking. \nArrange penetration tests, and turn the findings into fixes. \nReview the security of our web platforms and APIs, with a focus on authorisation and abuse prevention. \nHelp protect the integrity of our games and platform, including the systems that must stay trustworthy for certification. \nDetect and respond \nBuild logging, monitoring, alerting, and detections so we can see what is happening across our systems, and tune them so alerts are worth acting on. \nDetect, investigate, and respond to security incidents end to end: triage, containment, root cause, and recovery. \nWrite clear runbooks and playbooks, and run the occasional tabletop exercises. \nDocument what you build. \nSupport compliance and certification \nProvide the technical controls and evidence that back our compliance work, including ISO 27001 and GDPR. \nSupport game and RNG certification from a technical and security standpoint. \nReview the security of our third-party services and suppliers. \nMake security easy for the rest of engineering \nAct as a trusted advisor to the DevOps and engineering teams, and help implement fixes rather than only handing over recommendations. \nAutomate security work wherever it removes toil and gives us consistent controls across environments. \nRaise the security awareness of the wider team through good defaults, documentation, and the occasional bit of training. \nWhat we're looking for\nStrong hands-on security engineering experience across several areas, for example cloud security, networks, identity, and application or pipeline security. \nPractical experience securing public cloud environments and working with infrastructure as code and CI/CD pipelines. \nScripting and automation skills (e.g. Python or Bash); you are comfortable solving problems with code and building small tools when you need them. \nWorking knowledge of networking, firewalls, TLS/DNS, and containerised environments (Kubernetes). \nSolid understanding of common web and application security risks (e.g. OWASP Top 10) and secure development practices. \nExperience with vulnerability management, system hardening, and handling security incidents from start to finish. \nA good understanding of at least one major security standard or framework, e.g. ISO 27001, NIST, CIS. \nThe judgement to prioritise: to tell a real risk from a theoretical one, and to focus effort where it counts. \nClear communication, and the ability to work well with engineers day to day and explain risk without drama. \nComfortable being an early security hire and building the foundations from scratch, and able to make progress without waiting for perfect information. \nFluent English (our working language, in a largely asynchronous team). \nNice to have \nExperience in iGaming, gambling, or another regulated industry such as payments or fintech. \nDetection engineering experience: writing and tuning alerts and detections, ideally detection-as-code. \nDeeper Kubernetes and container security experience (cluster hardening, admission control, service mesh, policy-as-code such as OPA/Gatekeeper or Kyverno). \nExperience securing on-prem or virtualised infrastructure (e.g. VMware or KVM) and network equipment such as firewalls. \nFamiliarity with cloud security services and posture tooling (e.g. GuardDuty, Security Hub) and with a SIEM (e.g. Wazuh). \nExperience with secrets management and PKI (e.g. HashiCorp Vault, certificates, mTLS). \nSecurity certifications are welcome but not required. Any of the following is a plus: OSCP, CISSP, CCSP, GIAC/SANS, or cloud and Kubernetes security certifications (for example AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, or CKS). Equivalent hands-on experience counts just as much. \nPLEASE NOTE THAT THIS IS A FULLY ON-SITE POSITION\nAddress: Swan Offices, Sos. Bucuresti Nord, nr. 15-25, Windsor Royal building.","description_format":"text","description_chars":5732,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Gaming","Brewing & Beer","iGaming & Gambling"],"lifecycle":[{"event":"open","at":"2026-10-11T05:17:35Z"}],"visa":[],"liveness":{"score":84,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.839,"p_room":1,"age_days":8,"expected_fill_days":35,"reasons":["seen:8","win:early"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":40344,"is_top_pay":false},"html_url":"https://alion.io/job/skywindgroup-holdings-ltd-senior-security-engineer","json_url":"https://alion.io/job/skywindgroup-holdings-ltd-senior-security-engineer.json","meta":{"generated_at":"2026-10-20T03:32:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3881,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2236552},"rest":"https://alion.io/mcp/rest/get_company?id=2236552"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fskywindgroup-holdings-ltd-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fskywindgroup-holdings-ltd-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fskywindgroup-holdings-ltd-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/skywindgroup-holdings-ltd-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fskywindgroup-holdings-ltd-senior-security-engineer"}]}