Technical Security Lead

About the role

In this role, you will be responsible for designing and establishing a unified security framework for GipsyTeam's diverse digital products and financial services. Your focus will be on practical implementation, ensuring that security measures are effective without adding unnecessary bureaucracy.

You will lead a distributed team, assigning security tasks to developers, DevOps, and IT staff, while also monitoring compliance and incident response. Your expertise in assessing technical risks and implementing security tools will be essential to safeguard the company's assets.

Skills that matter here

• management of technical teams: This role requires experience in overseeing technical teams to ensure security tasks are effectively executed.
• backend development understanding: A solid grasp of backend development and web application architecture is necessary for identifying security risks.
• security tools configuration: You will need practical experience in configuring security tools to protect corporate assets.
• risk assessment: The ability to assess technical risks is critical for prioritizing security measures.

Who this role suits

• A candidate with a strong technical background and experience in security management.
• Someone who can work independently and communicate effectively with remote teams.
• A proactive individual who thrives in a dynamic environment and values practical solutions.

From the employer

• Design the security system, write regulations and policies, determine access levels;
• Identify and assess technical risks, propose solutions and priorities;
• Implement and configure security tools, manage access, secrets, and corporate devices;
• Assign security tasks to developers, DevOps, and IT and monitor execution;
• Check compliance with rules, enforce corrections, train employees;
• Establish monitoring, incident response, and recovery.

• Experience managing technical teams and projects;
• Good understanding of backend development, web application architecture, APIs, databases, and integrations;
• Practical experience with production infrastructure, servers, DevOps, and CI/CD;
• Experience configuring security tools, monitoring, and backups;
• Understanding of secure development, corporate devices, and MDM;
• Ability to assess technical risks based on probability and potential business impact.

• Remote work;
• Working hours based on GMT+3 (Moscow), comfortable if your timezone differs by no more than 2-3 hours;
• Salary in USD, negotiable based on interview results — focused on your experience and market;
• Compensation for sports and English classes.