Senior Security Engineer

About Scorewarrior

Scorewarrior is an independent game studio with a single mission: to excite and unite players all over the world. For over 10 years we've been pursuing it through Total Battle — a product we continue to actively and successfully grow. We're a team of 230 self-motivated professionals who know and love their craft, and we've recently begun an active company-wide adoption of AI tools.

Our home is a great office in Limassol, Cyprus. We offer a strong relocation package for you and your family, and we put real effort into making life on the island genuinely varied and interesting.

Location & format: Onsite - Limassol, Cyprus

Full relocation support provided

The mission of this role

This is a hands-on cloud and infrastructure security role.

You will design and implement security controls yourself, working closely with the Infrastructure and DevOps teams who run our systems, and with development teams where their services meet the cloud.

We are looking for an engineer who can take a security problem from identifying the risk and designing the solution through implementation and rollout.

What you’ll own

• Cloud identity and permissions in GCP. IAM and permission models, service accounts and workload identity, least privilege, and the access lifecycle.

• Secrets, keys and certificates across environments and workloads.

• Production access. How people and workloads reach production, what they can do there, and how that activity is recorded.

• Audit logging. Making sure the systems that matter produce the right audit trail and that it is retained appropriately.

• Infrastructure and Kubernetes hardening. Network design and segmentation, GKE and workload configuration, and infrastructure defined in Terraform.

• Security guardrails and automation. Turning security requirements into practical technical controls that can be consistently applied through infrastructure and engineering workflows.

• Risk prioritisation. Identifying the infrastructure security risks that matter most and driving them through to remediation.

What you'll work with

GCP - including IAM and workload identity, VPC and network controls, KMS and Secret Manager - Kubernetes and GKE, Terraform, Vault, Google Workspace, VPN, and production access infrastructure

Job requirements

• Hands-on platform or infrastructure security experience. You have personally designed and implemented security solutions, rather than only auditing, monitoring, or defining requirements for them.

• Cloud security as a core strength. Recent hands-on experience securing cloud environments: identity and permissions, network design, secrets management, audit logging, and production access.

• Strong infrastructure fundamentals. You may have grown entirely within security engineering or moved into security from DevOps, SRE, system administration, or network engineering. What matters is that you can reason about infrastructure architecture and turn security requirements into working technical controls.

• Experience working through other engineering teams. A large part of the role involves working with Infrastructure, DevOps, and development teams that own the systems you need to change.

• Infrastructure-as-Code in practice. You are comfortable reviewing and implementing infrastructure changes as code.

• Container and Kubernetes security experience.

• Scripting and automation as part of your normal workflow: Python, Go, or Bash

• English and Russian language at least B2 level or higher.

Our stack is GCP. If your deepest cloud experience is AWS or Azure, that’s fine - we hire for cloud security fundamentals and architecture, so tell us about that experience when you apply.

Nice to have

• Deep GCP experience. It will shorten your path to impact, although strong AWS or Azure security experience translates well.

• Experience securing AI tooling or AI-enabled engineering workflows, particularly around identity, data access, credentials, secrets, and tool permissions.

Who this role is NOT for

We believe in being upfront about fit. This role is probably not for you if:

• You want application security or CI/CD security to remain your primary discipline. That work exists here, but it is not the main focus of this role.

• Your current focus is primarily security monitoring, alert triage, or incident analysis.

• Your specialization is threat research, malware analysis, cryptography, or lab-style cybersecurity.

• Your recent experience has primarily been policies, compliance, audits, and assessments rather than implementing technical security controls.

Why join Scorewarrior?

• A Great Place to Work. 99% employee satisfaction, low turnover, and colleagues who genuinely enjoy collaborating.

• Live and work in sunny Cyprus. We’re an office-first team in Limassol with a modern seaside workspace, and full relocation and visa support for you and your family.

• Shape a global hit. We’re the only European studio with a 4X strategy title in the world’s top-10. Our top-50 mobile game has grown 25x in revenue and audience in the last five years.

• Grow fast in a company that’s already strong. We’re independent, financially rock-solid, and expanding at startup speed, and we have never had lay-offs.

• Work where ideas win. Flat structure, collective decision-making, and honest feedback create full transparency and help you grow fast.

• Earn industry-leading rewards. High salaries, a 13th month, performance bonuses, and extra rewards for long service, marriage, or welcoming a child, and lunch every day.

• Feel supported at every stage of life. Private family health insurance, plus a monthly allowance for children’s pre-school, school, and university education.

• Your growth is our priority. From specialized training and certifications to language courses and books, you’ll have everything you need to keep learning.