Belgrade, Central Serbia, Serbia · Hybrid
Job Title: Senior Cyber Security Engineer Location: Belgrade (Hybrid) Department: Product & Technology — Cyber Security Reports to: Head of Cybersecurity Job type: Full time. On-call rotation. Role purpose The Security E…
Skills: Detection Engineering, Threat Hunting, Incident Response, SOAR, SIEM/XDR
Belgrade, Central Serbia, Serbia · Hybrid
Job title Principal Solution Architect Function/Dept Engineering Reporting To Chief Product & Technology Officer Location Belgrade (Hybrid 3 days on-site) Role type Full time, perm Why This Role We are in the middle of a…
Skills: AWS Migration, Microservices Architecture, Event-Driven Architecture, React, Micro-frontends
Belgrade, Central Serbia, Serbia · Hybrid
We are looking for an enthusiastic Business Analyst (Fixed-term) to join our IPfolio team, based in Belgrade. This is an exciting opportunity to work on a leading cloud-based intellectual property management platform, he…
Skills: Business Analysis, Intellectual Property Domain Knowledge, Requirements Gathering, User Story Documentation, Agile Methodology
Belgrade, Central Serbia, Serbia · On-site
About NCR VOYIX NCR Voyix Corporation (NYSE: VYX) is a global platform-powered leader in unified commerce for shopping and dining. Combining a flexible, intelligent platform with end-to-end payments capabilities and serv…
Skills: Technical Troubleshooting, Customer Service, Windows OS, Network Monitoring, MS Office
Belgrade, Central Serbia, Serbia · On-site
At Ball, integrity and trust are the foundation of who we are. Guided by our core values—"We Care. We Work. We Win.”—we create a culture where every voice matters and every idea drives progress. Further your career at Ba…
Skills: Cybersecurity Operations, Incident Response, Threat Detection, Attack Surface Management, Vulnerability Management
Belgrade, Central Serbia, Serbia · On-site
At Ball, integrity and trust are the foundation of who we are. Guided by our core values—"We Care. We Work. We Win.”—we create a culture where every voice matters and every idea drives progress. Further your career at Ba…
Skills: Identity And Access Management, Security Architecture, Privileged Access Management, Authentication, Authorization
TenstorrentBelgrade, Central Serbia, Serbia · On-site
Tenstorrent is leading the industry on cutting-edge AI technology, revolutionizing performance expectations, ease of use, and cost efficiency. With AI redefining the computing paradigm, solutions must evolve to unify inn…
Skills: C++, Python, System-level Programming, Linux, Shell Scripting
Belgrade, Central Serbia, Serbia · Remote Solely
$5k–$6k/mo
Nebius Academy is a B2B upskilling platform helping companies adopt AI and develop technical capabilities through tailored, end-to-end learning solutions. We combine structured programs, expert support, and AI-powered pe…
Skills: Enterprise B2B Sales, MEDDIC, MEDDPIC, Consultative Selling, Stakeholder Management
Belgrade, Central Serbia, Serbia · Remote Solely
$5k–$6k/mo
Nebius Academy is a B2B upskilling platform helping companies adopt AI and develop technical capabilities through tailored, end-to-end learning solutions. We combine structured programs, expert support, and AI-powered pe…
Skills: Enterprise B2B Sales, MEDDIC, MEDDPIC, Consultative Selling, Stakeholder Management
Belgrade, Central Serbia, Serbia · On-site
Hello there, thanks for paying attention to our vacancy and let us introduce ourselves. We are an IT company occupying a remarkable place in marketing, gaming, and financial segments of the iGaming industry. Our products…
Skills: Technical Writing, Documentation Standards, Confluence, Markdown, Git
Belgrade, Central Serbia, Serbia · On-site
Property acquisition officer - Investment & Residential Voliš dinamičan posao, izazove i komunikaciju sa ljudima? Imaš motivaciju da ostvariš važne ciljeve i doprineseš rastu kompanije? Ako se prepoznaješ, imamo pravo me…
Skills: Communication, Negotiation, Customer orientation, MS Office, Excel
Belgrade, Central Serbia, Serbia · Remote OK
Fliff unpacks sports gaming into social, free-to-play games for all types of sports fans. We've built a social sports gaming experience that allows users to compete for leaderboard positioning, to achieve badges and buil…
Skills: Python, Django, API Integration, System Architecture, Observability
Belgrade, Central Serbia, Serbia · Hybrid
About Us Rho is the modern banking platform built for startups. Open accounts in minutes, issue cards, manage expenses, pay bills, and close the books – all in one connected platform backed by real human support. Rho is …
Skills: Backend Engineering, System Design, API Development, Distributed Systems, Product Judgment
Belgrade, Central Serbia, Serbia · On-site
Overview: We are looking for a ServiceNow CSM Developer / Consultant to design, implement, and enhance Customer Service Management solutions on the ServiceNow platform. In this role, you will collaborate with cross-funct…
Skills: ServiceNow CSM, ServiceNow ITSM, Automated Test Framework (ATF), Quality Assurance, Test Automation
Belgrade, Central Serbia, Serbia · Remote OK
Fliff is building sports gaming and entertainment products for a fast-moving, highly engaged audience. Behind every market, event, contest, player prop, and in-app experience is a data platform that needs to be accurate,…
Skills: Python, Django, Asyncio, Apache Kafka, PostgreSQL
Belgrade, Central Serbia, Serbia · On-site
We are hiring an ambitious Google Analytics Specialist who can match the high expectations of our client - one of the most successful and fast-developing brands in the iGaming industry. The Google Analytics Specialist wi…
Skills: Google Analytics, GA4, Google Tag Manager, Web Analytics, Attribution Modeling
Belgrade, Central Serbia, Serbia · Remote Solely
Join Our Vision: We are building the next generation of Spatial Media - a new way people experience videos through interaction, multi-user presence, haptics, AI, and immersive storytelling. DeoVR is the leading immersive…
Skills: SQL, Python, Tableau, A/B Testing, Data Analytics
Belgrade, Central Serbia, Serbia · On-site
Job Description Why A365 Software Engineering? Build the cloud platform that’s transforming electronics design. Altium 365 for cloud lets design engineers communicate, collaborate and bring their ideas to market more eff…
Skills: HTML, CSS, JavaScript, Vue.js, Vuex
Belgrade, Central Serbia, Serbia · Remote OK
Company Description About us Solflare is one of the fastest-growing crypto wallets in the world. With around 4 million monthly active users and over $20 billion in digital assets secured through our platform, we’re build…
Skills: Node.js, Express.js, PostgreSQL, MongoDB, Redis
Belgrade, Central Serbia, Serbia · On-site
What you will be doing: Rearchitect performance critical functionality to eliminate bottlenecks and ensure strong scalability and performanceDrive performance testingInvestigate performance related limitations to fin…
Skills: Java, SQL, Performance Testing, Agile, TypeScript
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
The role focuses on building, tuning, and operating detection and response capabilities to protect the organization from active threats. Key duties include writing detections as code, leading deep-dive investigations, and managing incident response as a technical lead.
Candidates need demonstrable senior-level experience in SOC analysis, detection engineering, or incident response, with strong proficiency in SIEM/XDR platforms and AWS. Scripting competence in Python and a solid grounding in the MITRE ATT&CK framework are required.
Job Title: Senior Cyber Security Engineer
Location: Belgrade (Hybrid)
Department: Product & Technology — Cyber Security
Reports to: Head of Cybersecurity
Job type: Full time. On-call rotation.
Role purpose
The Security Engineer in the Cyber Defence team is the senior hands-on defender working alongside the Head of Cybersecurity. They build, tune and operate the detection and response capability that protects BOYLE Sports and Greencastle Digital against active threat. They write detections, run hunts, investigate alerts that the MSSP escalates, and stand on the bridge during incidents.
This is an engineering role inside the Cyber function. It is distinct from the Security Engineers in the CCoE, who build platform security capability. This role builds defensive capability — the rules, automations, integrations and tooling that let BOYLE Sports & GCD see and stop attacks.
Key responsibilities
Detection engineering
• Design, write, test and tune detections across Cortex XDR / XSIAM, cloud telemetry (AWS CloudTrail, GuardDuty, EKS audit logs), identity telemetry (Entra ID, on-premises AD), endpoint, network and application logs.
• Treat detections as code. Version-control rules, peer-review changes, write tests, measure coverage against MITRE ATT&CK, and retire detections that no longer earn their keep.
• Own log onboarding and parsing for new sources. Work with platform and application engineering teams to make sure new services produce useful telemetry on day one, not retro-fitted six months later.
Threat hunting and investigation
• Run structured threat hunts against hypotheses derived from threat intelligence, recent incidents and attacker tradecraft relevant to online gambling (account takeover, bonus abuse-adjacent fraud rings, payments-targeted intrusion, ransomware operator TTPs).
• Lead deep-dive investigations on alerts escalated from the Palo Alto MSSP. Determine root cause and full scope before handing back for containment.
• Document findings well enough that the next analyst, six months later, can pick up the trail.
Incident response
• Stand on the bridge during P1 and P2 incidents. Drive containment and eradication actions personally, in concert with platform, infrastructure and product engineering teams.
• Own the technical timeline, the indicators of compromise, the evidence trail and the artefacts needed for regulator notification and post-incident review.
• Deputise for the Head of Cybersecurity as Incident Commander when required.
Automation and SOAR
• Build and maintain SOAR playbooks. Automate the repetitive parts of triage, enrichment, containment and notification so the team’s attention goes to the parts that need a human.
• Integrate detection and response tooling with the wider stack — ticketing, chat, identity, cloud control planes — using clean, supportable code.
MSSP partnership
• Be the team’s primary technical interface to the Palo Alto managed SOC. Review their detections, challenge their analysis, give feedback that improves quality, and escalate when it doesn’t.
• Run regular detection and response exercises with the MSSP. Make sure playbooks survive contact with reality.
Purple teaming and validation
• Work with offensive security partners to run purple-team exercises. Translate red findings into hardened detections and tested response procedures.
• Use breach-and-attack-simulation tooling to continuously validate detection coverage.
Experience and qualifications
Required
• Demonstrable hands-on experience as a SOC analyst (senior / tier 3), detection engineer, threat hunter or incident responder. Candidates must be able to talk in concrete terms about detections they have written, hunts they have led, and incidents they have worked.
• Strong working knowledge of at least one major SIEM/XDR platform and the query language behind it. Palo Alto Cortex XDR / XSIAM and XQL are ideal. Splunk, Sentinel, Elastic or Chronicle backgrounds are entirely acceptable provided the candidate can clearly cross over.
• Practical experience investigating in AWS — CloudTrail, GuardDuty, VPC flow logs, EKS audit logs, IAM analysis. Comfortable reading JSON event data and reasoning about API-call chains.
• Scripting competence in Python or an equivalent — enough to parse evidence, write SOAR steps, and build small tools without waiting for someone else.
• Solid grounding in MITRE ATT&CK, the diamond model and a structured approach to investigation. Able to write a clear incident timeline.
• Calm under pressure. Comfortable on a bridge call at 03:00.
Strongly preferred
• Experience in online gambling, payments, financial services or another high-volume consumer environment with active fraud and account takeover pressure.
• Exposure to retail or distributed-endpoint estates (point-of-sale-like devices, SD-WAN, Intune-managed fleets).
• Experience working with or inside an outsourced SOC arrangement.
Certifications and education
• Practitioner certifications such as GCIA, GCIH, GCFA, GNFA, BTL1 or equivalent are valued. Vendor certifications in the relevant detection stack are a plus.
• A relevant degree is welcome but not required.
About Greencastle Digital
Welcome to Greencastle Digital – where technology meets innovation in the exciting world of betting and gaming. Based in Belgrade, Serbia, we bring together talented people from all areas of digital tech, product development, customer experience, and marketing to create cutting-edge solutions.
At Greencastle Digital, it’s not just about building great technology – it’s about shaping the future of gaming and creating unforgettable experiences for our global players and partners. Whether you’re working on ground breaking tech, designing immersive games, or crafting customer-first solutions, you’ll be part of a dynamic, collaborative team where creativity and fresh ideas are always welcome.
Join the digital powerhouse behind challenger betting and gaming brands!
Welcome to Greencastle Digital, the technology hub where exciting tech careers, betting and gaming meet. We bring together the brightest minds from digital tech and product development to customer experience and marketing – all under one roof.
Offices: Belgrade, RS
View all jobs at Greencastle DigitalThere are currently 400 open technology positions in Belgrade, Serbia listed on Clera. New openings are added daily as companies post roles.
Companies currently hiring include NCR Atleos, NCR Voyix, Wargaming, IGT, Nebius Group, among others. Browse the listings above to see every active employer.
Yes — 240 of the 400 open technology positions offer remote or hybrid work (91 remote, 149 hybrid).
Each listing links directly to the employer's application page. Apply early — fresh listings get the most recruiter attention in the first two weeks.
