Platform Security Engineer - Full remote

Social Discovery Group (SDG) is one of the world's largest groups of social discovery companies, uniting millions of users on dozens of products. SDG solves the problem of loneliness, isolation, and disconnection - transforming virtual intimacy into the new normal. SDG products redefine the way people interact and connect with each other. Our portfolio includes social entertainment platforms designed to connect people online across different cultures in different parts of the world. This includes globally recognized brands such as DateMyAge, Dating.com, EuroDate, Dil Mil and Cupid Media. SDG has a presence in more than 150 countries. We bring together a team of like-minded people and IT professionals specializing in the creation and development of globally impactful social discovery products. Our international team of 1000+ professionals and digital nomads works all over the world. Our teams of digital nomads work remotely from Cyprus, Malta, the USA, Armenia, Georgia, Kazakhstan, Montenegro, Poland, Latvia, Serbia, Spain, Portugal, UAE, Israel, Turkey, Thailand, Indonesia, Japan, Hong Kong, Australia and many other locations. We’re proud to be a two-time “Great Place to Work” winner (USA & Japan, 2024–2025) and a Top-5 Company for Work-From-Anywhere Jobs (FlexJobs, 2025). We are looking for a Platform Security Engineer. Your main tasks will be: Improve and maintain perimeter and network-layer defenses (WAF, Rate Limiting, Anti-bot ,DDoS mitigation) Secure product APIs against abuse and anomalous traffic Strengthen authentication, authorization, and access control at the product level, including IDOR-class issues Run the Vulnerability Management process: identification, prioritization, and remediation tracking Coordinate external pentests and drive remediation of findings Lead Incident Response for product security incidents Build detection and response processes together with the monitoring team Contribute to Fraud & Trust and Safety initiatives with relevant teams Protect customer data at the product level (access control, encryption, masking) Run the Security Champions program to train product teams on secure development Manage the Bug Bounty program We expect from you: 5+ years in information security, including 3+ years in product security Hands-on experience operating a WAF (Wallarm / Akamai / Cloudflare) API security (OWASP API Security Top 10, API gateway experience) Experience with anti-bot solutions (fingerprinting, behavioral detection) Practical understanding of DDoS mitigation (L3–L7) Experience running a Vulnerability Management process (CVSS, prioritization, remediation SLAs) Experience coordinating pentest projects and working with pentest reports Understanding of OAuth/OIDC, session management, JWT Practical SQL and Elasticsearch skills for querying logs and data during investigations, monitoring, and reporting Fluent Russian What do we offer: REMOTE OPPORTUNITY to work full-time; The initial pay level or pay range for this role will be shared with candidates during the recruitment process and before the commencement of employment; Vacation 28 calendar days per year; 7 wellness days per year (time off) that can be used to deal with household issues, to lie down and recover without taking sick leave; Bonuses up to $5000 for recommending successful applicants for positions in the company; 50% payment for professional training, international conferences, and meetings; Corporate discount for English lessons; Health benefits. According to the paychecks, if you are not eligible for corporate medical insurance, the company will compensate you with up to $ 1,000 gross per year per employee. This can be spent on self-purchase of health insurance or on doctor’s fees for yourself and close relatives (spouse, children); Workplace organization. The company provides all employees with an equipped workplace and all the necessary equipment (table, armchair, wifi, etc.) in our offices or co-working locations. In the other locations, the company provides reimbursement of workplace costs up to $ 1000 gross once every 3 years, according to the paychecks. This money can be spent on the rent of the co-working room, on equipping the working place at home (desk, chair, Internet, etc.) during those 3 years; Internal gamified gratitude system: receive bonuses from colleagues and exchange them for our merchandise, team building activities, massage certificates, etc. Sounds good? Join us now!