Principal IT Security Engineer

MY.GAMES is a leading European developer and publisher, driven by a singular goal: making great games that capture the hearts of players worldwide. Our community unites 1+ billion registered players.

We’ve developed or produced games, including War Robots, Hustle Castle, Rush Royale, Left to Survive, Tacticool, Grand Hotel Mania, War Robots: Frontiers – and many more.

Our internationally distributed team consists of top-tier gamedev professionals. We work remotely, and our hubs are located in the Netherlands, Cyprus, Armenia, UAE and Serbia.

Come join a universe of professional opportunities: develop and support large scale projects from PC/console/mobile, and create products across various genres – from casuals to shooters.

What you'll do:

Shape and evolve our risk-based security strategy and roadmap; own the risk register and drive risk-based prioritization

Develop and maintain security policies, standards, and procedures

Own and grow vulnerability management - detection, prioritization, remediation tracking, and regular scanning of infrastructure and applications

Build out security monitoring, detection, and event logging

Lead incident response: investigation, containment, post-mortems, and corrective actions

Secure our on-prem infrastructure (and cloud resources in hybrid setups) through hardening, network security, and endpoint protection

Manage access and account governance, including control over privileged access

Embed secure development practices into the SDLC and CI/CD; run threat modeling and advise teams on secure architecture for new services and features

Protect source code and intellectual property from leaks

Drive product security - player account protection, anti-fraud, and DDoS resilience

Ensure compliance with privacy requirements (GDPR and others) and operate within recognized frameworks (ISO 27001 / NIST CSF / CIS)

Assess risk from vendors, SaaS providers, and external teams

Run internal security trainings and phishing simulations, and help grow a strong security culture across engineering

Lead security's side of AI adoption - setting policy for AI tool usage and managing the risks that come with it

Manage security tooling, budget, and vendor relationships; coordinate external pentests and our bug bounty / VDP (Vulnerability Disclosure Program)

Report on security posture and metrics to leadership

What you need to succeed:

5+ years of hands-on infosec experience - this isn't a purely strategic role; you're comfortable configuring and running security tools, digging into incidents, and analyzing infrastructure and code

Strong command of Linux, networking, and infrastructure - enough to independently track down and fix problems

Scripting and automation skills (Python, Bash, or similar) - you automate the routine instead of doing it by hand

A solid grasp of attack patterns, and the ability to read what's happening from logs, traffic, and configs

Practical experience in vulnerability management, incident response, and monitoring

Experience with SIEM, vulnerability scanners, and endpoint protection at the category level (we'll talk specific stack in the interview)

Working knowledge of recognized security frameworks and privacy requirements - as practical tools, not checkbox exercises

Ability to work autonomously, prioritize ruthlessly, and close out risks without a team standing behind you

What we offer:

Work remotely from all around the world

Collaborative working atmosphere in an internal game dev community that unites more than a dozen of internal game studios, crafting innovative experiences across mobile, PC, and console platforms

A strong team of specialists across different areas - access unique expertise and professional knowledge

Possibility to experiment and work on interesting tasks with ambitious goals - we have all resources to implement new ideas

Create great games and win the hearts of players

Push the boundaries of the game industry and lead the way forward