Senior/Staff Security Engineer

Welltech is a global wellness technology company with Ukrainian roots. The company builds and scales wellness apps globally through tech-driven performance marketing. Their apps, including Muscle Booster, Yoga-Go, and WalkFit, are used by over 25.5 million people worldwide. Welltech has over 500 employees across hubs in Cyprus, Ukraine, Poland, Spain, and the UK.

• Minimum of 5 years in Security Engineering roles.
• Proven ability to lead large scale security projects and initiatives.
• Experience implementing data security initiatives meeting industry standards.
• Hands-on incident response experience with effective management and mitigation of security incidents.
• Experience with regulatory compliance standards such as GDPR, PCI-DSS, or ISO 27001.
• Strong coding skills focused on security development.
• Proficiency in Datadog and PagerDuty for detection and response operations.
• Deep understanding of AWS security frameworks, practices, and tools.
• Strong communication skills to articulate complex security issues to technical and non-technical audiences.

• Security Strategy Development: Design and implement mid and long-term security strategies aligned with business goals and technology roadmaps. Collaborate across functions to integrate security practices into the organizational strategy.
• Risk Management: Identify, assess, and manage security risks; develop mitigation strategies; communicate risks and recommendations to senior leadership.
• Security Observability: Lead transition from managed detection and response services to in-house capability; develop and implement security monitoring and alerting strategies using Datadog and PagerDuty.
• Incident Response: Establish and manage an on-call incident response protocol for swift and effective handling of security incidents.
• Data Security Innovation: Partner with the Privacy team to establish foundational data security practices and policies compliant with international standards.
• Certification & Compliance: Provide hands-on expertise to achieve and maintain PCI DSS certification; ensure compliance with industry regulations and best practices.