Senior Security Engineer

Scorewarrior is an independent game studio with a single mission: to excite and unite players all over the world. For over 10 years we've been pursuing it through Total Battle — a product we continue to actively and successfully grow. We're a team of 230 self-motivated professionals who know and love their craft, and we've recently begun an active company-wide adoption of AI tools.

Our home is a great office in Limassol, Cyprus. We offer a strong relocation package for you and your family, and we put real effort into making life on the island genuinely varied and interesting.

This is a hands-on engineering role: you design and implement solutions yourself, working side by side with Infrastructure, DevOps, and development teams. Leadership experience is not required here and not expected.

• Strengthen cloud and infrastructure security in practice: secrets management, audit logging and controlled production access.

• Close high-impact risks: start from an honest assessment of the current state and build a consistent picture of gaps and risks as you go.

• Work secure-by-default: wherever possible, remove the security burden from teams through automation and platform-level solutions rather than rules and manual procedures.

• Roll up your sleeves: dive into what Infrastructure, DevOps, and development teams are building right now, understand it from the inside, and make security part of it.

• Real experience building platform and infrastructure security — you have designed and implemented security solutions yourself: not audited or monitored them, and you can walk us through the architecture, the decisions, and what you'd do differently.

• Cloud security as your core strength: Recent hands-on experience securing cloud environments.

• A strong infrastructure background. You may have grown entirely within security engineering or moved into security from DevOps, SRE, system administration, or network engineering. What matters is that your thinking is an engineer's thinking: architecture first, building over prescribing.

• The ability to explain risks with facts. You have real cases where you make technical teams see why a risk matters and why a change is needed through evidence, architecture, and concrete scenarios.

• English and Russian language at least B2 level or higher.

AppSec, SIEM, and SOC experience are useful but secondary.

• Infrastructure-as-Code in practice.

• Container and Kubernetes security experience.

• Scripting and automation as a habit: Python, Go, or Bash — you'd rather automate a control than write a procedure for humans to follow.

• GCP specifically. Our stack is GCP; deep experience with it will shorten your path to impact, though strong AWS/Azure experience translates well.

• Experience with securing AI tool usage.

We believe in being upfront about fit. This role is probably not for you if:

• Your current focus is on monitoring, alert triage and incident analysis.

• Your specialization is threat research, malware analysis, cryptography, or lab-style cybersecurity.

• Your recent work is mostly paper security: policies, compliance documents, and audits.

• You are looking for a management track or ownership of a security function right now — strategy and team building belong to the security leadership role we're hiring separately.