> Djinni

Security Engineer

awsaws iamkmsaws secrets managercloudwatchguarddutypci dsscryptographylinuxnetwork securitytlsiamowasp asvsapibashpythonany one ofbashterraform

cissp

domainiGaming

> full description

Who We Are:

An international iGaming company specializing in identifying and fostering the growth of high-potential entertainment markets. With 1000+ professionals in 20+ locations, we operate in 10 countries, serving over 300,000 customers.

Requirements:

Proven hands-on experience as a Security Engineer, Cloud Security Engineer, or DevSecOps Engineer;
Strong experience securing AWS environments, including IAM, VPC, KMS, Secrets Manager, CloudTrail, GuardDuty, and Security Hub;
Knowledge of PCI DSS requirements and practical experience implementing security controls or preparing payment infrastructure for compliance audits;
Understanding of payment system architecture, sensitive data flows, and security risks associated with third-party integrations;
Understanding of cryptocurrency wallet security, private key management, and transaction signing, including hot/cold wallets, multisig, and MPC;
Strong knowledge of Linux, network security, TLS, access management, and the principle of least privilege;
Understanding of OWASP Top 10 and API security, including authentication, authorization, webhook protection, and replay attack prevention;
Experience automating security tasks using Python or Bash and working with Infrastructure as Code (IaC);
Ability to independently identify security risks, implement solutions, and validate their effectiveness;
AWS Security, CISSP, CCSP, or similar security certifications will be considered a plus.

Responsibilities:

Design and implement security controls across AWS infrastructure, including access management, network segmentation, data protection, secrets management, and encryption key management;
Ensure the security of payment services, APIs, and integrations with payment providers, banks, and cryptocurrency services;
Implement and maintain PCI DSS technical requirements, including defining the cardholder data environment (CDE) scope, access controls, network segmentation, logging, and cardholder data protection;
Conduct security reviews of system architecture and infrastructure changes, perform threat modeling, and support engineering teams in mitigating risks before production deployment;
Integrate security checks into CI/CD pipelines, including vulnerability scanning, dependency analysis, secrets detection, configuration checks, and container image scanning;
Enhance security monitoring, threat detection capabilities, and incident response procedures;
Coordinate vulnerability remediation and system hardening activities, working closely with service owners to ensure security issues are effectively resolved.

Our Benefit Cafeteria is Packed with Goodies: