Offer summary

Qualifications:

Minimum 5 years of experience in information security or cloud security engineering., Proven expertise in designing and implementing security controls across cloud, network, and enterprise environments., Strong understanding of security frameworks like ISO 27001 and CIS, and technologies across network, endpoint, application, and cloud stacks., Deep knowledge of Google Cloud Platform (GCP) security best practices..

Key responsibilities:

Lead security reviews and architecture assessments for cloud, network, and enterprise systems.

Monitor network and cloud activity using SIEM and threat detection tools to identify and respond to threats.

Develop and update security policies and procedures to ensure compliance and operational effectiveness.

Support incident response activities, including investigation, root cause analysis, and remediation.

Job description

About YSI

Yellow Social Interactive is a dynamic and innovative leader in the social gaming industry, dedicated to creating engaging and interactive experiences across various platforms. Our commitment to excellence and creativity sets us apart in the market.

We seek exceptional, talented individuals who aim for excellence. With offices in Gibraltar, Antigua, and bases in Malta and the Philippines, plus a global remote team, we welcome motivated people capable of building and scaling business functions.

Job Purpose

As a Senior Information Security Engineer, you will lead the design, implementation, and optimisation of security controls across our cloud environments, network, and enterprise systems. Your work will directly impact how we protect our customers, systems, and IP, and ensure that our platform continues to meet high standards of resilience, confidentiality, and compliance.

You’ll drive security assessments, oversee threat detection tooling, guide architectural decisions, and play a central role in incident response and prevention. You will also contribute to compliance efforts (e.g., ISO 27001), collaborate with technical teams across the business, and help elevate security maturity across YSI’s tech stack.

Areas of Responsibility

Lead technical security reviews and architecture assessments across cloud, network, and enterprise platforms, ensuring scalable and secure design aligned to ISO 27001, GDPR, and business objectives.
Continuously monitor network and cloud activity using SIEM and threat detection tools (e.g., Splunk, Wazuh, Orca Security, Checkpoint) to detect anomalies and proactively respond to potential threats.
Co-author and continuously refine security policies and procedures, ensuring they remain technically sound and aligned with operational needs and compliance goals.
Support and participate in security incident response, including investigation, root cause analysis, remediation recommendations, and post-incident documentation.
Act as a subject matter expert during incident response and system changes, ensuring risk is clearly articulated to both technical and non-technical audiences.
Configure, manage, and optimise firewall solutions (e.g., Checkpoint, Palo Alto) and cloud security controls to protect network boundaries and enforce segmentation.
Implement, monitor, and manage endpoint security measures including patching, device hardening, and use of platforms like JumpCloud, OneLogin, or NinjaOne.
Develop and maintain security metrics, dashboards, and reports, providing insight into the effectiveness of controls, trends, and areas for improvement.
Collaborate cross-functionally with IT and business units, bringing a security lens to shared initiatives while enabling practical, well-communicated solutions.

Requirements

Minimum 5 years of hands-on experience in information security or cloud security engineering roles.
Proven experience designing and implementing security controls across cloud, network, and enterprise environments.
Strong understanding of security principles, frameworks (e.g., ISO 27001, CIS), and technologies across the network, endpoint, application, and cloud stack.
Deep knowledge of cloud security best practices in Google Cloud Platform (GCP).
Proven experience in configuring and managing SIEM platforms such as Splunk, ELK, or Wazuh for threat detection, correlation, and incident investigation.
Proven experience configuring and administering Zscaler platforms (ZIA/ZPA), including policy design, traffic routing, access control, and troubleshooting.
Experience managing firewall and threat protection platforms, such as Checkpoint and Palo Alto, including segmentation, IPS/IDS, and VPN configuration.
Working knowledge of vulnerability management and compliance tooling, such as Orca Security, Tenable, and asset inventory systems.
Proficient in Identity & Access Management (IAM) technologies including OneLogin or Okta.
Experience integrating IT endpoint and asset management tools for visibility and automation (e.g., JumpCloud, NinjaOne).
Excellent analytical and problem-solving skills, with strong attention to technical detail and operational context.
Effective communicator and collaborator. Comfortable engaging cross-functional teams, explaining risk, and driving consensus.

Benefits

Competitive salary
Private Health Insurance
Flexibility to work remotely
Training & Opportunities for professional development
Dynamic and collaborative work environment
Performance Bonus

Join our team and contribute to creating a vibrant and supportive social gaming community! If you are a proactive and player-focused professional, apply now and be part of our mission to provide exceptional player experiences.

Required profile