IT Security Engineer

Parimatch is aglobal #1 Crypto Sportsbook and Casino company with over 30+ years in
betting and gaming industry. We create digital experiences where sports, technology, and
crypto meet, focusing on fast transactions, high limits, and premium user experience.
With 4,000+ professionals and operations across 15+ countries, Parimatch is a global
ecosystem driven by product innovation, advanced technology and customer experience.

Requirements:

• Proven hands-on experience as a Security Engineer, Cloud Security Engineer, or DevSecOps Engineer;

• Strong experience securing AWS environments, including IAM, VPC, KMS, Secrets Manager, CloudTrail, GuardDuty, and Security Hub;

• Knowledge of PCI DSS requirements and practical experience implementing security controls or preparing payment infrastructure for compliance audits;

• Understanding of payment system architecture, sensitive data flows, and security risks associated with third-party integrations;

• Understanding of cryptocurrency wallet security, private key management, and transaction signing, including hot/cold wallets, multisig, and MPC;

• Strong knowledge of Linux, network security, TLS, access management, and the principle of least privilege;

• Understanding of OWASP Top 10 and API security, including authentication, authorization, webhook protection, and replay attack prevention;

• Experience automating security tasks using Python or Bash and working with Infrastructure as Code (IaC);

• Ability to independently identify security risks, implement solutions, and validate their effectiveness;

• AWS Security, CISSP, CCSP, or similar security certifications will be considered a plus.

Responsibilities:

• Design and implement security controls across AWS infrastructure, including access management, network segmentation, data protection, secrets management, and encryption key management;

• Ensure the security of payment services, APIs, and integrations with payment providers, banks, and cryptocurrency services;

• Implement and maintain PCI DSS technical requirements, including defining the cardholder data environment (CDE) scope, access controls, network segmentation, logging, and cardholder data protection;

• Conduct security reviews of system architecture and infrastructure changes, perform threat modeling, and support engineering teams in mitigating risks before production deployment;

• Integrate security checks into CI/CD pipelines, including vulnerability scanning, dependency analysis, secrets detection, configuration checks, and container image scanning;

• Enhance security monitoring, threat detection capabilities, and incident response procedures;

• Coordinate vulnerability remediation and system hardening activities, working closely with service owners to ensure security issues are effectively resolved.

We care about you:

Vacation: Reset. Recharge. Come back stronger.

Sick Leave Allowance:Health is power. We designed the system to support you.

Benefits Model:Your budget, your rules – spend it where it counts. Day one, it’s yours. No waiting, no barriers.

Training Balance: Learn fast. Grow faster. Upskill, stay ahead, and keep your edge sharp.

Team Building:Stronger together. We connect, compete, and celebrate – great teams don’t happen by accident.

Generation Program: Focused on boosting the potential of children within our families.

Work & Fun Balance:Driven at work, alive beyond it. Events, surprises, and shared moments keep our spirit high and our energy unstoppable.

Taking care of our people is an integral part ofParimatchshared values, ensuring a supportive and positive workplace culture.

Originally posted on Himalayas