IT Security Engineer

Company Description:

RISK inc: An International iGaming Company Pushing the Boundaries of Entertainment

Who We Are:

An international iGaming company specializing in identifying and fostering the growth of high-potential entertainment markets. With 1000+ professionals in 20+ locations, we operate in 10 countries, serving over 300,000 customers.

Always Pushing the Boundaries? You Already Belong at RISK!

Our global-scale operations are based on strong internal expertise, analytics, and data research. We have expertise in iGaming operations (sports betting, online casino), digital and affiliate marketing, tech solutions, and data analytics.


Requirements:

• Proven hands-on experience as a Security Engineer, Cloud Security Engineer, or DevSecOps Engineer;

• Strong experience securing AWS environments, including IAM, VPC, KMS, Secrets Manager, CloudTrail, GuardDuty, and Security Hub;

• Knowledge of PCI DSS requirements and practical experience implementing security controls or preparing payment infrastructure for compliance audits;

• Understanding of payment system architecture, sensitive data flows, and security risks associated with third-party integrations;

• Understanding of cryptocurrency wallet security, private key management, and transaction signing, including hot/cold wallets, multisig, and MPC;

• Strong knowledge of Linux, network security, TLS, access management, and the principle of least privilege;

• Understanding of OWASP Top 10 and API security, including authentication, authorization, webhook protection, and replay attack prevention;

• Experience automating security tasks using Python or Bash and working with Infrastructure as Code (IaC);

• Ability to independently identify security risks, implement solutions, and validate their effectiveness;

• AWS Security, CISSP, CCSP, or similar security certifications will be considered a plus.

Responsibilities:

• Design and implement security controls across AWS infrastructure, including access management, network segmentation, data protection, secrets management, and encryption key management;

• Ensure the security of payment services, APIs, and integrations with payment providers, banks, and cryptocurrency services;

• Implement and maintain PCI DSS technical requirements, including defining the cardholder data environment (CDE) scope, access controls, network segmentation, logging, and cardholder data protection;

• Conduct security reviews of system architecture and infrastructure changes, perform threat modeling, and support engineering teams in mitigating risks before production deployment;

• Integrate security checks into CI/CD pipelines, including vulnerability scanning, dependency analysis, secrets detection, configuration checks, and container image scanning;

• Enhance security monitoring, threat detection capabilities, and incident response procedures;

• Coordinate vulnerability remediation and system hardening activities, working closely with service owners to ensure security issues are effectively resolved.

Additional Information

Our Benefit Cafeteria is Packed with Goodies:

• Children Allowance

• Mental Health Support

• Sport Activities

• Language Courses

• Automotive Services

• Veterinary Services

• Home Office Setup Assistance

• Dental Services

• Books and Stationery

• Training Compensation

• And yes, even Massage!

Ready to Take the Leap?

Join a team where every day is an opportunity to take a RISK and come out on top. Follow us on LinkedIn and Instagram, and let us be your hub for turning ambitious ideas and extraordinary solutions into reality.

At RISK, we believe that our people are the driving force behind our success. Together, we can achieve great things and push the boundaries of what's possible in the iGaming industry.

Originally posted on Himalayas