Principal IT Security Engineer

• Shape and evolve our risk-based security strategy and roadmap; own the risk register and drive risk-based prioritization
• Develop and maintain security policies, standards, and procedures
• Own and grow vulnerability management - detection, prioritization, remediation tracking, and regular scanning of infrastructure and applications
• Build out security monitoring, detection, and event logging
• Lead incident response: investigation, containment, post-mortems, and corrective actions
• Secure our on-prem infrastructure (and cloud resources in hybrid setups) through hardening, network security, and endpoint protection
• Manage access and account governance, including control over privileged access
• Embed secure development practices into the SDLC and CI/CD; run threat modeling and advise teams on secure architecture for new services and features
• Protect source code and intellectual property from leaks
• Drive product security - player account protection, anti-fraud, and DDoS resilience
• Ensure compliance with privacy requirements (GDPR and others) and operate within recognized frameworks (ISO 27001 / NIST CSF / CIS)
• Assess risk from vendors, SaaS providers, and external teams
• Run internal security trainings and phishing simulations, and help grow a strong security culture across engineering
• Lead security’s side of AI adoption - setting policy for AI tool usage and managing the risks that come with it
• Manage security tooling, budget, and vendor relationships; coordinate external pentests and our bug bounty / VDP (Vulnerability Disclosure Program)
• Report on security posture and metrics to leadership

• 5+ years of hands-on infosec experience - this isn’t a purely strategic role; you’re comfortable configuring and running security tools, digging into incidents, and analyzing infrastructure and code
• Strong command of Linux, networking, and infrastructure - enough to independently track down and fix problems
• Scripting and automation skills (Python, Bash, or similar) - you automate the routine instead of doing it by hand
• A solid grasp of attack patterns, and the ability to read what’s happening from logs, traffic, and configs
• Practical experience in vulnerability management, incident response, and monitoring
• Experience with SIEM, vulnerability scanners, and endpoint protection at the category level (we’ll talk specific stack in the interview)
• Working knowledge of recognized security frameworks and privacy requirements - as practical tools, not checkbox exercises
• Ability to work autonomously, prioritize ruthlessly, and close out risks without a team standing behind you

MY.GAMES is a leading European developer and publisher, driven by a singular goal: making great games that capture the hearts of players worldwide. Our community unites 1+ billion registered players.

We’ve developed or produced games, including War Robots, Hustle Castle, Rush Royale, Left to Survive, Tacticool, Grand Hotel Mania, War Robots: Frontiers - and many more.

Our internationally distributed team consists of top-tier gamedev professionals. We work remotely, and our hubs are located in the Netherlands, Cyprus, Armenia, UAE and Serbia.

Come join a universe of professional opportunities: develop and support large scale projects from PC/console/mobile, and create products across various genres - from casuals to shooters., * Work remotely from all around the world

• Collaborative working atmosphere in an internal game dev community that unites more than a dozen of internal game studios, crafting innovative experiences across mobile, PC, and console platforms
• A strong team of specialists across different areas - access unique expertise and professional knowledge
• Possibility to experiment and work on interesting tasks with ambitious goals - we have all resources to implement new ideas
• Create great games and win the hearts of players
• Push the boundaries of the game industry and lead the way forward

You must create an Indeed account before continuing to the company website to apply