Qureos Mentor

Ideasoft

<div><div>Job Overview
</div><div><div><h2 class="jobSectionHeader"><b>Vacancy Description
</b></h2><p></p><div><p>As Security Architecture &amp; Engineering Lead (Cloud Focus), you will be the hands-on technical authority designing, implementing, and continuously evolving the cloud security architecture that protects billions in digital assets and ensures regulatory compliance. This is a deeply architectural and engineering role &mdash; 80-90% hands-on design, configuration, automation, and validation &mdash; where you will own the end-to-end security posture of the Azure estate while bridging it to blockchain-specific threats (key exposure, on-chain anomalies, bridge exploits, governance attacks). You will lead threat modeling, zero-trust controls, secure-by-design cloud patterns, incident response engineering, and coordination with the managed SOC partner.</p>
</div></div><p></p><div><h3 class="jobSectionHeader"><b>Requirements</b></h3>
<div><ul><li>8&ndash;15+ years in cloud security architecture &amp; engineering, with 6+ years deep hands-on with Microsoft Azure (security specialization).
</li></ul><ul><li>Expert-level proficiency in Azure security stack: Entra ID (Conditional Access, PIM, RBAC), Key Vault Managed HSM (FIPS 140-2 Level 3), Defender for Cloud/Sentinel (KQL analytics, playbooks), Azure Firewall/NSGs, Private Link, DDoS Protection, and Azure Policy-as-Code.
</li></ul><ul><li>Proven hands-on experience leading incident response in Azure environments &mdash; including containment, forensics, coordination with external SOC providers, and regulatory reporting.
</li></ul><ul><li>Strong understanding of zero-trust architecture, workload identity federation (OIDC), secrets management, network micro-segmentation, and cloud-native DevSecOps.
</li></ul><ul><li>Experience correlating cloud logs/alerts with blockchain-specific threats (on-chain anomalies, wallet activity, bridge exploits).
</li></ul><ul><li>Deep knowledge of UAE regulatory frameworks: CBUAE, ADGM FSRA.
</li></ul><ul><li>Experience integrating cloud SIEM with blockchain threat intelligence
</li></ul><ul><li>Excellent scripting &amp; automation skills (Terraform IAC, PowerShell, Azure CLI, Bicep/ARM, KQL).
</li></ul></div></div><div><h3 class="jobSectionHeader"><b>Would be a plus</b></h3>
<ul><li>Certifications: Microsoft Certified: Azure Security Engineer Associate (AZ-500), Certified Cloud Security Professional (CCSP), or equivalent.
</li></ul></div><div><h3 class="jobSectionHeader"><b>Responsibilities</b></h3>
<div><h4 class="jobSectionHeader"><b>Hands-on Azure Security Implementation &amp; Hardening:</b></h4>
</div><div><ul><li>Design, deploy, and maintain zero-trust controls across Azure: Entra ID Conditional Access, Private Link for all PaaS (Key Vault, Cosmos DB, Blob), Azure Firewall + NSGs (deny-by-default), DDoS Protection Standard, and workload identity federation (OIDC).
</li></ul><ul><li>Manage Microsoft Sentinel as central SIEM: ingest Azure logs, Defender alerts, on-chain events (via custom connectors), and endpoint telemetry; build and maintain custom analytics rules for cloud + blockchain threats (e.g., anomalous Key Vault access, large unauthorized transfers, admin console abuse).
</li></ul><ul><li>Implement and manage Azure Key Vault Managed HSM (FIPS 140-2 Level 3) for non-exportable keys, transaction signing, MPC roots &mdash; including private endpoints, rotation policies, and purge protection.
</li></ul><ul><li>Perform hands-on network micro-segmentation, CSPM remediation, and secrets scanning across AKS, VMs, and storage accounts.
</li></ul><ul><li>Perform quarterly Azure security assessments, configuration reviews, and regulatory mapping.
</li></ul><ul><li>Infrastructure as a code (IAC) automation &ndash; for terraform
</li></ul><ul><li>Advise Infrastructure team on the Cloudflare security (DDOS, bot)
</li></ul><ul><li>Implement any security tools that are necessary for the operation
</li></ul></div><div><h4 class="jobSectionHeader"><b>Incident Detection, Response &amp; SOC Coordination:</b></h4>
</div><div><ul><li>Act as primary hands-on responder for detected incidents: investigate alerts, contain threats (isolate resources, rotate keys, pause workloads), and coordinate with managed SOC analysts (24/7 escalation path).
</li></ul><ul><li>Develop, maintain, and execute Azure-specific incident playbooks (e.g., Key Vault compromise, suspicious IAM activity, data exfiltration, DDoS).
</li></ul><ul><li>Lead real-time containment during high-severity events (P1/P2
</li></ul><ul><li>Advise the SOC team on regularly tuning detection rules, reducing false positives, and validating the SOC partner's performance through joint drills.
</li></ul><ul><li>Correlate cloud alerts (e.g., Defender for Endpoint, Sentinel) with on-chain signals (large transfers, privileged calls, oracle manipulation) for hybrid threat detection.</li></ul></div></div></div></div><p></p>
<br><div><div><div><div>Why IdeaSoft
</div><div><div><h2 class="jobSectionHeader"><b>What We Offer
</b></h2></div><div><div><p>Competitive compensation
</p></div><div><p>Social package (24 working days of annual leave and 5 paid sick days)
</p></div><div><p>Flexible working hours
</p></div><div><p>Challenging projects in diverse business domains and a variety of tech stacks
</p></div><div><p>Personal development and professional growth opportunities
</p></div><div><p>Work with talented, ambitious and family-feel team
</p></div><div><p>Educational possibilities: corporate courses, knowledge hubs, and in-house English classes
</p></div><div><p>Compensation for your professional certification &amp; support for your learning activities
</p></div><div><p>Opportunity to choose IT equipment you like
</p></div><div><p>Corporate social responsibility
</p></div></div><div></div><div><div><div>Tamara Mitiagina
</div><div>Head of Recruitment</div></div></div></div></div></div></div>

Security Architecture & Engineering Specialist/ Lead

<div><div>Job Overview
</div><div><div><h2 class="jobSectionHeader"><b>Vacancy Description
</b></h2><p></p><div><p>Our client is a regulated blockchain infrastructure provider building secure, scalable Layer-2 solutions (powered by ZKsync Stack) for stablecoin issuance, tokenized real-world assets (RWAs), and institutional DeFi in the UAE.<br>
As Blockchain Security Lead, you will be a core member of the security team responsible for protecting our client&rsquo;s ecosystem &mdash; including on-chain assets, smart contracts, bridges, wallets, nodes, and off-chain infrastructure. This role combines deep Web3 security expertise with enterprise-grade controls, enabling secure scaling of our stablecoin and institutional products while maintaining full regulatory compliance.<br>
You will lead threat modeling, secure development practices, and on-chain monitoring &mdash; working closely with engineering and compliance to safeguard billions in digital assets.<br>
This is a high-impact, high-visibility role in one of the UAE&rsquo;s most trusted Web3 organizations.</p>
</div></div><p></p><div><h3 class="jobSectionHeader"><b>Requirements</b></h3>
<div><ul><li>5&ndash;10+ years in cybersecurity, with 3+ years focused on blockchain/Web3 security.
</li></ul><ul><li>Deep expertise in smart contract security (Solidity, Rust, Vyper), and common attack vectors (reentrancy, oracle manipulation, flash loans, governance attacks).
</li></ul><ul><li>Hands-on experience with private key management (MPC, HSM, multisig), wallet security, and custody-grade infrastructure.
</li></ul><ul><li>Proficiency in on-chain monitoring tools and incident response for blockchain incidents.
</li></ul><ul><li>Experience leading security audits, pen testing, red-teaming, bug bounties, and secure SDLC processes.
</li></ul><ul><li>Excellent communication skills &mdash; ability to translate technical risks into business/regulatory impact for executives and the board.
</li></ul><ul><li>Solid understanding of containerized infrastructure, Kubernetes
</li></ul><ul><li>Familiarity with common vulnerabilities and exploit patterns (e.g., SQLi, XSS, CSRF, SSRF, RCE);
</li></ul><ul><li>Proven track record securing production infrastructure (and SDLC as a whole). This also includes implementation and maintenance of the following:
</li></ul><ul><li>SAST/DAST tools;
</li></ul><ul><li>Infrastructure as Code (IaC) security scanning tools;
</li></ul><ul><li>Secrets management (any experience with highly secure HSM stores will be highly appreciated);
</li></ul></div></div><div><h3 class="jobSectionHeader"><b>Would be a plus</b></h3>
<ul><li>Expertise in blockchain solutions, VMs, and smart contracts, any prior Solidity experience will be a huge plus;
</li><li>Formal blockchain security certifications (e.g., Certified Blockchain Security Professional, Offensive Security Web Expert &ndash; OSWE, or equivalent).
</li><li>Hands-on with formal verification tools (Certora, Scribble) or fuzzing frameworks (Foundry, Echidna).
</li><li>Prior work in regulated financial institutions, VASPs, or stablecoin issuers.
</li><li>Knowledge of Solidity, Rust, Python or Go.
</li></ul></div><div><h3 class="jobSectionHeader"><b>Responsibilities</b></h3>
<div><ul><li>Perform static and dynamic analysis of codebases, including integrating SAST/DAST tools into CI/CD;
</li></ul><ul><li>Lead end-to-end security (ZKsync-based L2/L3) &mdash; including smart contract audits, node/sequencer/prover security, bridge/cross-chain protections, and wallet/custody infrastructure.
</li></ul><ul><li>Perform threat modeling and risk assessments for new features (e.g., stablecoin mint/burn, RWA tokenization, Shared Bridge migration, Elastic Chain integrations).
</li></ul><ul><li>Conduct and coordinate internal code reviews; remediate findings with engineering teams.
</li></ul><ul><li>Design and enforce secure SDLC processes: secure coding standards, pre-release verification (fuzzing, symbolic execution, formal verification where applicable), and work with CISO for security sign-off.
</li></ul><ul><li>Implement and maintain real-time on-chain monitoring (privileged calls, large transfers, anomalous behavior, oracle manipulation, governance attacks) using tools
</li></ul><ul><li>Develop and test incident response playbooks for Web3-specific scenarios (key compromise, bridge exploit, sequencer outage, malicious upgrade)
</li></ul><ul><li>Manage private key &amp; signing security: MPC/HSM-backed wallets, multisig governance (e.g., 3-of-5 or 5-of-7), transaction velocity caps, allowlists, and offline recovery procedures.
</li></ul><ul><li>Maintain SBOM/dependency scanning.
</li></ul><ul><li>Collaborate with Bugbounty researcher and mitigate the vulnerabilities resported
</li></ul><ul><li>Perform penetration testing on the products that we develop internally.
</li></ul><ul><li>Provide quarterly security posture reports to CISO/ executive leadership.</li></ul></div></div></div></div><p></p>
<br><div><div><div><div>Why IdeaSoft
</div><div><div><h2 class="jobSectionHeader"><b>What We Offer
</b></h2></div><div><div><p>Competitive compensation
</p></div><div><p>Social package (24 working days of annual leave and 5 paid sick days)
</p></div><div><p>Flexible working hours
</p></div><div><p>Challenging projects in diverse business domains and a variety of tech stacks
</p></div><div><p>Personal development and professional growth opportunities
</p></div><div><p>Work with talented, ambitious and family-feel team
</p></div><div><p>Educational possibilities: corporate courses, knowledge hubs, and in-house English classes
</p></div><div><p>Compensation for your professional certification &amp; support for your learning activities
</p></div><div><p>Opportunity to choose IT equipment you like
</p></div><div><p>Corporate social responsibility
</p></div></div><div></div><div><div><div>Tamara Mitiagina
</div><div>Head of Recruitment</div></div></div></div></div></div></div>

Blockchain Security Specialist

<div><div>Job Overview
</div><div><div><h2 class="jobSectionHeader"><b>Vacancy Description
</b></h2><p></p><div><p>We are looking for an onsite Senior Project Coordination Manager to support complex blockchain and Web3 initiatives within our business partners. This role will act as the primary onsite coordination point across internal stakeholders, external partners, and technical teams, ensuring that communication flows efficiently, priorities stay aligned, and action items are followed through consistently. Its primary purpose is to strengthen onsite communication, coordination, visibility, and escalation flow across multiple parallel workstreams, including technically complex initiatives involving integrations, partner dependencies, and cross-functional collaboration.</p>
</div></div><p></p><div><h3 class="jobSectionHeader"><b>Requirements</b></h3>
<div><ul><li>Proven experience in project coordination, stakeholder management, or communication-heavy roles within software delivery environments
</li></ul><ul><li>Solid experience in blockchain and Web3 projects
</li></ul><ul><li>Strong understanding of SDLC and software development processes in Agile and hybrid environments
</li></ul><ul><li>Ability to work effectively across technical and non-technical teams
</li></ul><ul><li>Strong communication, follow-up, and coordination skills in fast-paced, cross-functional environments
</li></ul><ul><li>Experience working with multiple stakeholders, external partners, and integration-heavy workstreams
</li></ul><ul><li>Strong organizational skills, with the ability to track parallel discussions, dependencies, and action items
</li></ul><ul><li>Good understanding of technical product environments, allowing effective communication with engineering and architecture teams
</li></ul><ul><li>Proactive approach to identifying risks related to misalignment, communication breakdowns, and delayed escalations
</li></ul><ul><li>Ability to operate onsite and serve as a reliable communication bridge between teams and stakeholders
</li></ul><ul><li>English: Upper-Intermediate or higher
</li></ul></div></div><div><h3 class="jobSectionHeader"><b>Would be a plus</b></h3>
<ul><li>Experience in fintech, digital assets, stablecoins, or regulated financial environments
</li><li>Understanding of integrations, partner-driven delivery models, and cross-company collaboration setups
</li><li>Experience in roles requiring strong onsite presence and high-frequency stakeholder communication
</li><li>Familiarity with project tracking and documentation tools such as Jira, Confluence, and similar platforms
</li><li>Background in PM, Delivery, BA, or Technical Coordination roles within complex product organizations
</li></ul></div><div><h3 class="jobSectionHeader"><b>Responsibilities</b></h3>
<div><ul><li>Act as the primary onsite coordination point across ADI stakeholders, partners, and technical teams
</li></ul><ul><li>Facilitate day-to-day communication across multiple technical tracks, ensuring alignment and timely follow-up
</li></ul><ul><li>Support structured communication between technical and non-technical stakeholders
</li></ul><ul><li>Track action items, key decisions, open dependencies, and escalations across ongoing initiatives
</li></ul><ul><li>Help identify communication gaps, misalignment risks, and cross-team blockers early
</li></ul><ul><li>Ensure discussions, decisions, and next steps are documented clearly and communicated to relevant parties
</li></ul><ul><li>Coordinate with delivery and project owners to maintain visibility into ongoing workstreams without taking direct ownership of delivery execution
</li></ul><ul><li>Support partner and integration-related communication, especially in cases where fast onsite follow-up is required
</li></ul><ul><li>Help maintain clarity and continuity across meetings, workshops, and stakeholder discussions
</li></ul><ul><li>Contribute to a more structured and transparent communication environment across ADI initiatives</li></ul></div></div></div></div><p></p>
<br><div><div><div><div>Why IdeaSoft
</div><div><div><h2 class="jobSectionHeader"><b>What We Offer
</b></h2></div><div><div><p>Competitive compensation
</p></div><div><p>Social package (24 working days of annual leave and 5 paid sick days)
</p></div><div><p>Flexible working hours
</p></div><div><p>Challenging projects in diverse business domains and a variety of tech stacks
</p></div><div><p>Personal development and professional growth opportunities
</p></div><div><p>Work with talented, ambitious and family-feel team
</p></div><div><p>Educational possibilities: corporate courses, knowledge hubs, and in-house English classes
</p></div><div><p>Compensation for your professional certification &amp; support for your learning activities
</p></div><div><p>Opportunity to choose IT equipment you like
</p></div><div><p>Corporate social responsibility
</p></div></div><div></div><div><div><div>Tamara Mitiagina
</div><div>Head of Recruitment</div></div></div></div></div></div></div>

Senior Project Coordination Manager (Blockchain/WEB3 experience)

Join Ideasoft and explore 3   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Ideasoft

About Company

Security Architecture & Engineering Specialist/ Lead

Blockchain Security Specialist

Senior Project Coordination Manager (Blockchain/WEB3 experience)