Кибербезопасность вакансии

О проекте Международный проект в области AI Security, связанный с разработкой сред, которые помогают LLM-моделям проходить обучение с подкреплением для задач, связанных с кибербезопасностью. Эти среды содержат задания в различных областях кибербезопасности (пентестинг, реагирование на инциденты, эксплуатация, вредоносное ПО и т.д.), цель — создавать достаточно сложные задачи, чтобы модель допускала ошибки, но которые остаются решаемыми для профессиональных специалистов. Важно: это не классическая позиция Pentester или Red Team Engineer. Основная задача — создавать сложные, но реалистичные и проверяемые security-сценарии, в которых LLM-модели совершают ошибки именно из-за недостатков в рассуждении (reasoning), а не из-за неоднозначных инструкций или ограничений среды. Задачи: — Проектировать security-сценарии для оценки и обучения LLM-моделей — Создавать environments с использованием GitHub, Slack и других инструментов, встречающихся в реальной разработке — Разрабатывать задачи, требующие сложного многошагового reasoning — Моделировать реальные offensive security-сценарии (supply chain attacks, malicious pull requests, exploitation через GitHub Actions и другие техники) — Проверять разработанные сценарии на нескольких frontier-моделях и анализировать причины их ошибок — Формулировать ожидаемое поведение модели и описывать, почему конкретная ошибка считается reasoning failure — Автоматизировать создание и проверку задач с использованием Python и других инструментов Требования: — 5+ лет практического опыта в Offensive Security, Application Security или Web Penetration Testing — Практический опыт AI Red Teaming / LLM Security — Глубокое понимание современных техник атак и поверхности атаки веб-приложений, API, GitHub, CI/CD и связанных экосистем — Практический опыт проведения penetration testing и исследования безопасности приложений — Опыт разработки на Python и/или JavaScript — Навыки статического и динамического анализа кода (Python, JavaScript, Java) — Умение самостоятельно исследовать новые направления, проектировать сложные сценарии и объяснять результаты своей работы — Свободный английский язык (Upper-Intermediate / B2+) — Практический опыт работы с современными LLM-моделями — Понимание особенностей их работы, ограничений и типичных failure modes — Интерес к AI Security и исследованию поведения LLM — Опыт работы с Agentic AI, AI Agents или Model Evaluation Будет большим плюсом: — Опыт исследований безопасности GitHub Actions, CI/CD, Supply Chain Security — Сертификаты OSWE, eWPTXv2, OWEE, OSWA или аналогичные — Публикации, write-ups, участие в Bug Bounty, HackTheBox, TryHackMe, Pwn2Own или других исследовательских проектах — Способность придумывать новые, не похожие на существующие сценарии атак, которые сломают сильную модель, исследовательское мышление и креативность Условия: — B2B-контракт (с ИП) — Оплата в долларах США — Part-time/Full-time: почасовая оплата за выполненные задачи, 1 задача занимает около 10-12 часов — Локация — строго вне РФ/РБ

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. Threat Operations is part of 1Password’s Security organization, bringing together Cyber Threat Intelligence, Detection Engineering, and Security Incident Response. Together we study how threat actors operate, turn that into high-quality detections, and respond quickly when something goes wrong. Interns work across all three teams, with time and focus shaped by your interests and our needs, so you see how intelligence becomes real defense. We care about turning intelligence into action, and we value blameless learning and psychological safety. This is a remote opportunity within Canada/US. This position will be for 4 months - January to April 2027. What You Can Expect: - Analyze incoming threat intelligence, assess its credibility and relevance to 1Password, and run IOC sweeps across our environment. - Own pieces of work across the threat management lifecycle, turning intel into recommendations for detection, incident response, and vulnerability management. - Join the alert triage rotation and learn how signal quality, enrichment, and response fit together. - Develop and test detection rules and response agents, and contribute to our detection-as-code and response-as-code platforms. - Build orchestration workflows to automate triage, enrichment, and response, using AI tools to help design and build them. What we're looking for: - Confidence: A willingness to take on new challenges, and see them through to completion. - Humility: You're not afraid to ask "stupid" questions and make mistakes (as long as you learn from them). - Curiosity: You look for better ways of doing things, even if everyone seems happy with how they are. - Teamwork: We work together, and succeed as a team! Bonus points for: - Familiarity with Git and managing infrastructure or detections as code, including Terraform. - Scripting or programming experience, such as Python or Go, and comfort working with APIs. - Exposure to SIEM and SOAR tools, logs, or writing detection rules and queries, through coursework, labs, or projects. - Experience using AI tools to build or automate workflows, with a healthy skepticism about their output. - Familiarity with frameworks like MITRE ATT&CK, plus security coursework, CTFs, home labs, or a security club. Our culture  At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first.  You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results.  We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged at 1Password—it's an essential part of how we will be successful at 1Password. Our approach to remote work  We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of most roles. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.  How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:  🏝 Generous PTO policy - 2.08 days per month (1.5 work weeks per 4 month term) 💖 Company-wide wellness days (1 per quarter)  🌎 Employee-led inclusion and belonging programs and ERGs 🏠 Remote-first environment 🏆 Peer-to-peer recognition through Bonusly 💡 1Password University access and learning sessions 🥳 Monthly internship events and socials 1Password is part of  Team True North https://www.communitech.ca/how-we-help/team-true-north/ , a comprehensive group of Canadian tech firms with performance and growth rates that match the top 1% of companies worldwide – companies with the highest probability of reaching $1 billion in annual revenue. We believe in tech for good, and establishing Canada as a preferred destination for growing careers wherever we can! You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Задачи: — исследование устройств различного назначения, бинарного кода (без исходного кода), программного обеспечения и внутреннего программного обеспечения (ВПО); — исследование внутреннего ПО устройств на наличие уязвимостей и недокументированных возможностей; — анализ защищенности программного обеспечения устройств; — разработка PoC по результатам проведенного анализа; — модификация внутреннего ПО для устранения ошибок. Требования: — опыт работы в качестве Team lead/Ведущий Reverse engineer от 2 лет; — навыки управления командой, умение грамотно распределять задачи и нагрузку; — понимание принципов обратного проектирования (исследования) программного обеспечения; — владение инструментами обратной разработки (IDA Pro, Radare2 или др.); — языки программирования: Python, C/С++, Assembler; — понимание архитектуры ОС; — опыт использования ОС Linux; — знание английского языка на уровне чтения технической документации. Плюсом будет: — знакомство с аппаратной архитектурой и схемотехникой различных устройств; — опыт исследования программного обеспечения на безопасность, поиска уязвимостей; — опыт разработки низкоуровневого кода для x86, MIPS, ARM, RISC-V; — опыт автоматизации исследования при помощи мультиагентной среды (MML). Условия: — официальное трудоустройство в аккредитованной IT-компании и возможность пользоваться соответствующими льготами; — гибкое начало рабочего дня, гибридный график (офис + удаленка), полностью удаленный формат невозможен; — офис в пешей доступности от метро Электрозаводская, Семеновская; — полис ДМС с расширением ВЗР (страхование выезжающих за рубеж); — премирование за высокие производственные показатели и результаты труда по итогам успешной работы Общества за год; — предложение по заработной плате и условиям труда формируется по результатам собеседования, в зависимости от опыта и знаний.

Location: Remote, Global Workplace: Remote ABOUT THE ROLE We’re looking for a GRC Analyst to join our Compliance & Security team and help make risk management, audit and compliance a continuous part of how Supabase runs. You’ll work closely with engineering, security, IT, and legal to help us define our risk tolerance, keep our compliance programs (including SOC 2 and ISO/IEC 27001:2022) current, test controls on a rolling basis, and answer customer and vendor security reviews quickly and accurately. This role is ideal for someone who thrives in async, fast-paced environments and is excited about building developer tools that scale to millions. WHAT YOU’LL BE RESPONSIBLE FOR - Run risk assessments across the company and major product changes. Score likelihood and impact, propose treatments, and bring the results to leadership to inform risk tolerance decisions. - Maintain the risk register, track remediation to closure, and report status to compliance and security leadership. - Monitor controls on a rolling basis, using automated tests where they exist and manual testing where they don’t. Triage failures, prioritize by the risk register, and align each finding with an owner and a due date. - Support internal audit, whether performed by an external partner or in-house: propose scope from the risk register, supply evidence, and track findings to closure. - Run day-to-day operations for our compliance programs: evidence collection, control owner follow-up, and readiness ahead of each audit period. - Extend continuous control validation beyond what our compliance platform covers. Build custom tests with AI coding tools, work with engineering and IT to pull evidence from source systems instead of collecting screenshots, and check that each test proves what the control requires. YOU MIGHT BE A GOOD FIT IF YOU - Have 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology company - Are comfortable working with SOC 2 and ISO 27001 controls, a compliance platform such as Drata, Vanta, and evidence from systems like AWS, GCP, Google Workspace, and Okta - Communicate clearly across both technical and non-technical audiences - Have experience in async or globally distributed teams - Are energized by solving real-world problems for developers - Are comfortable navigating ambiguity and moving quickly WHAT WE OFFER - Fully Remote We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world. - ESOP Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together. - Tech Allowance Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work. - Health Benefits Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us. - Annual Off-Sites Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year. - Flexible Work We operate asynchronously and trust you to manage your own time. You know what needs to be done and when. - Professional Development Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth. ABOUT THE TEAM Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love. - ~400 team members - 60+ countries - 20+ languages spoken - Over $1B raised (including our $500M Series F) - 540,000+ community members We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.

Location: Global We are the creators of a new fintech era! Our mission is to change this world by making blockchain accessible to everyone in everyday life. WhiteBIT is a global team of over 1,200 professionals united by one mission — to shape the new world order in the Web3 era. Each of our employees is fully engaged in this transformative journey. We work on our blockchain platform, providing maximum transparency and security for more than 8 million users worldwide. Our breakthrough solutions, incredible speed of adaptation to market challenges, and technological superiority are the strengths that take us beyond ordinary companies. Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT and VISA. The future of Web3 starts with you: join us as an Application Security Engineer! Requirements 2+ years of experience in Application Security, Product Security, or a related security role. Strong knowledge of web application security, OWASP Top 10, common attack techniques, and secure coding practices. Hands-on experience with threat modeling, security architecture reviews, vulnerability assessment, and penetration testing. Ability to review source code and identify security vulnerabilities. Experience with SAST, DAST, SCA, secrets scanning, and vulnerability-management tools. Understanding of CI/CD pipelines and experience integrating security checks into the SDLC. Knowledge of API security, authentication, authorization, and common security protocols. Familiarity with cloud, container, or Kubernetes security. Basic knowledge of Web3 and smart contract security. Basic scripting or programming skills, preferably in Python or another relevant language. Ability to clearly communicate security risks and remediation guidance to technical and non-technical stakeholders. Responsibilities Perform application security assessments, source-code reviews, and penetration testing. Participate in threat modeling and security architecture reviews for new and existing products. Triage Bug Bounty submissions: validate and reproduce vulnerabilities, assess their severity and business impact, identify duplicates and false positives, communicate with researchers, and coordinate remediation with engineering teams. Identify, prioritize, and track vulnerabilities throughout the remediation process. Provide developers with clear remediation guidance and secure coding recommendations. Support the integration and operation of SAST, DAST, SCA, secrets scanning, and other security tools within CI/CD pipelines. Participate in defining and reviewing security requirements throughout the software development lifecycle. Validate security-tool findings and help reduce false positives. Support investigations and remediation of application-related security incidents. Contribute to application security standards, guidelines, and reusable security controls. Help deliver security training and promote secure development practices across engineering teams. Collaborate with developers, DevOps, QA, product teams, and other security specialists. Monitor emerging application security threats and contribute to improving AppSec processes. Ukrainian (Native) English (B1) Working terms Immerse yourself in Crypto & Web3: Master cutting-edge technologies and become an expert in the most innovative industry. Work with the Fintech of the Future: Develop your skills in digital finance and shape the global market. Take Your Professionalism to the Next Level: Gain unique experience and be part of global transformations. Drive Innovations: Influence the industry and contribute to groundbreaking solutions. Join a Strong Team: Collaborate with top experts worldwide and grow alongside the best. Work-Life Balance & Well-being: Modern equipment. Comfortable working conditions, and an inspiring environment to help you thrive. 24 calendar days of paid leave. Additional days off for national holidays. With us, you’ll dive into the world of unique blockchain technologies, reshape the crypto landscape, and become an innovator in your field. If you’re ready to take on challenges and join our dynamic team, apply now and start a new chapter in your career! Let’s Build the Future Together! WhiteBIT offers all candidates an equal opportunity to join the team. All hiring decisions are made without regard to race, national origin, gender identity or sexual orientation, age, religion, disability, medical condition, marital status, familial status, veteran status, or any other legally protected characteristic of an individual.

🔎 Maqsad: Kiberxavfsizlik sohasida professional jamoa shakllantirish hamda mas’uliyatli, intizomli va bilimga chanqoq shogirdlarni tayyorlash. Shogirdlik davomida nazariy bilimlar bilan birga amaliy ko‘nikmalar ham rivojlantiriladi.

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. We are excited to welcome a Junior Engineer to join our Application Security team at 1Password. Application Security helps enable 1Password to build and deliver secure products with confidence. We’re responsible for 1Password’s Secure Software Development Lifecycle and related security activities like design review and architecture guidance, threat modelling, software supply chain security, and a suite of automated security tooling. As part of the Application Security team, this Junior Engineer will focus primarily on building and maintaining new or existing security tooling, including static analysis, dynamic analysis, code scanning (sage) and emerging agentic AI solutions.   How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is a remote opportunity within Canada and the US. What we're looking for: - You have 0-2+ years of experience in software development - You have a passion and curiosity for security engineering, including but not limited to topics of secure coding, pentesting, vulnerability analysis, security design and architecture - You have strong experience, demonstrated through project work or real world experience, leveraging agentic AI capabilities to accelerate security workflows, automate repetitive tasks, or enhance detection and remediation efforts - You have experience with internal tool development and engineering enablement - You have a strong foundational understanding of software development principles, and are comfortable reading and writing code - You work well in a team environment with positive communications amongst a variety of technical and non-technical stakeholders - You’re adaptable and resilient, thriving in fast-paced environments with shifting priorities   Bonus points for: - Experience with Rust and/or Golang, or a demonstrated ability to pick up new languages quickly. - Experience conducting security code reviews, design architecture guidance, threat modelling - Practical or hands-on experience with web application security topics, including but not limited to topics in OWASP Top 10.   What you can expect: - Work within a small team of Application Security Engineers focused on minimizing security risk across our SSDLC - Work with cross functional partners across Security, Product Engineering, Marketing, CX and more on the security parameters of new features across 1Password’s product suite - Design, build, integrate and scale new agentic AI capabilities to enable secure product development activities - Enhance and maintain existing security tools in a variety of areas including static analysis, dynamic analysis, code scanning, and more. - Develop and maintain comprehensive dashboards and reporting metrics around our security risk program, tailored to different audiences (technical, non-technical, compliance, senior leadership, etc.)   USA-based roles only: The annual base salary for this role is between $100,000 USD and $140,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $85,000 CAD and $119,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. Our culture At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. How we work with AI We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password. This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing 👶 Maternity and parental leave top-up programs 🩺 Competitive health benefits 🏝 Generous PTO policy Growth and future 📈 RSU program for most employees 💸 Retirement matching program 🔑 Free 1Password account Community 🤝 Paid volunteer days 🏆 Peer-to-peer recognition through Bonusly 🌎 Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting. You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Location: Anywhere in France Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. 🛡️ THE ROLE Most GRC roles are about keeping auditors happy. This one is about earning our members' trust: every day, they share their diagnoses, their claims and their care with us. You'll own security governance and risk at Alan end to end. That means one clear framework across our certifications and regulations, which the whole company uses to decide what matters most. You set the direction, make the calls on risk, and help every team own its part. We just earned our HDS certification, and there's much more to build as we grow from 1M to many millions of members, across more countries and regulators. That includes how we govern AI, which Alan uses across its products and operations. This is a hands-on senior role. You do the work yourself, mentor the junior GRC engineer we're hiring alongside you, and grow the team over time.   🚀 WHAT YOU'LL DO - Make our security framework a tool for the whole company. You own the full certification cycle (ISO 27001, HDS and those to come), and turn it into something teams use every day to prioritise, not a binder for auditors. - Bring the security view on regulation. Legal and Risk own the regulatory relationships. You bring the security answer: what the rules mean for how we protect data, and which controls make it work in practice. - Run risk as an ongoing programme. You map and prioritise security risks, including AI risks, turn them into clear treatment plans, and feed them into company-wide risk decisions with the Risk team. - Help every team own its risks. You define the controls framework and the standards, while the teams who build and run our systems own the controls. You brief the board and audit committee, and you know which findings need an urgent call and which can wait for the quarterly report. - Own incident governance. You triage and escalate incidents, own business continuity and disaster recovery, and shape the security side of our regulatory incident reports. - Be a credible partner to engineering. You work with engineering teams early on new designs and spot control gaps (access, encryption, logging) before they ship. You don't need to be an architect, but you can hold the conversation.   🏗️ WHAT YOU'LL BUILD - One governance model: clear ownership of risks and controls across teams, so security decisions don't bottleneck on one person. - A living risk map: prioritised risks that actually drive company and engineering decisions. - One compliance backbone: a single control system across our countries and regulators, built to scale. - An automated evidence engine: evidence collected straight from engineering systems, so audits run continuously instead of as a quarterly rush. You'll work closely with Legal, the Data Protection Officer, Internal Audit and Risk, and day to day with engineering and operations teams.   ⭐ WHAT WE'RE LOOKING FOR Your team You'll join Alan's Corporate team, which brings together our control functions: Risk, Corporate Governance & Internal Control, Legal, Compliance and Security. They share one mission: building what lets Alan operate at scale, safely and responsibly. Within that group, you carry the security governance and risk dimension, working hand in hand with the security engineers who run our infrastructure and platform security, and with a junior GRC engineer we're hiring alongside you. You'll be hands-on every day, building and owning the work yourself. Along the way, you'll mentor the junior engineer and help shape how GRC grows at Alan. What you bring - You want to build and own things yourself, and you enjoy helping someone else grow while you do it. - 6+ years in security, with real GRC ownership. - You've run a GRC roadmap in a certified or strongly regulated environment (ISO 27001, HDS, SOC 2, or regulated sectors like health, insurance or finance). You're comfortable working with certification auditors, and you can explain what a framework requires and why it makes sense for business teams. - You take a stand on risks, and you'd rather close one real risk than write ten policies. - You're fluent in French and English.   A big plus - You've driven a certification or audit cycle end to end yourself. - You've automated compliance work, or you're eager to, and you have a view on where AI can help. - You've presented risk to senior leaders or a board. - You've mentored or onboarded someone before. 🌍 HOW WE WORK Location: You must be legally eligible to work from France, Belgium or Spain. Remote work: We offer remote work flexibility.   🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. Remember, this is just a guide, not a checklist. We'll be thrilled to receive your application!   🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info.   YOU WANT TO KNOW MORE ABOUT ALAN?   🙌 Perks & Benefits https://alan.com/en/careers/a/salary-equity: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. 🤘A strong culture https://alan.com/en/about/a/leadership-principles: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work

Location: Anywhere in France Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. 🛡️ THE ROLE Most GRC roles are about keeping auditors happy. This one is about earning our members' trust: every day, they share their diagnoses, their claims and their care with us. You'll join Alan's security team to help run our compliance and risk work across ISO 27001, HDS and DORA, across a growing number of countries and regulators. We just earned our HDS certification, and there's much more to build, including how we govern AI across our products: assessing AI risks, setting the controls, and keeping up with the AI Act. You'll learn alongside experienced security engineers, with a dedicated coach from day one. You'll take on real ownership early, and your scope grows as we scale from 1M to many millions of members. And you'll learn how we work at Alan: teams own their risks and controls, we automate wherever we can, and we focus on real outcomes, not paperwork. 🚀 WHAT YOU'LL DO - Keep our certifications on track. You run the day-to-day of the ISO 27001 and HDS audit cycles: collecting evidence, preparing internal audits, and following up on corrective actions until they're closed. - Turn regulations into practical actions. With Legal and the DPO, you help translate requirements like DORA, HDS, and GDPR into clear tasks for the teams, and track that they get done. - Learn the health sector rules. You build your knowledge of health-specific frameworks (ANS, HDS) and help apply them to how we handle health data. - Contribute to risk management. You help build and update our risk mapping, including AI risks, and follow up on the treatment plans with the teams who own them. - Support the teams who own the controls. You keep the controls framework up to date, answer teams' questions, and help explain security clearly to every stakeholder, from engineers to managers. - Support incident governance. You help classify and document incidents, keep Business continuity and Disaster recovery plans up to date, and prepare inputs for DORA incident reports. - Automate what slows us down. You spot repetitive compliance tasks and automate them with scripts, tools or AI. 🏗️ WHAT YOU'LL HELP BUILD - One compliance backbone: A single control system for several regulators in several countries, so Alan can scale without rebuilding compliance each time. - An automated evidence engine: evidence collected straight from engineering systems with scripts and AI, so audits run continuously instead of as a quarterly rush. You'll work closely with Legal, the DPO, Internal Audit and Risk, and day to day with engineering and operations teams. ⭐ WHAT WE'RE LOOKING FOR - You want to do the work yourself and grow with it: a permanent, hands-on role where you build things for the long run. - 2+ years in security, GRC or compliance (an audit background is fine if you want to move into building). - You've played a key part in a certification or audit cycle (ISO 27001, HDS, SOC 2 or similar). - You're curious about how things work technically, and you've automated at least one manual task (a script, a tool, an AI workflow). - You're fluent in French and English, and comfortable presenting in both. - You learn fast, ask for feedback, and go into the details when it matters. 🌍 HOW WE WORK Location: You must be legally eligible to work from France, Belgium or Spain. Remote work: We offer remote work flexibility. 🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. 🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info. YOU WANT TO KNOW MORE ABOUT ALAN? 🙌 Perks & Benefits https://alan.com/en/careers/a/salary-equity: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. 🤘A strong culture https://alan.com/en/about/a/leadership-principles: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work

- Обеспечение информационной безопасности информационных систем, сервисов и цифровой инфраструктуры Университета. - Мониторинг событий информационной безопасности и выявление потенциальных угроз и инцидентов.

Задачи: — Сбор и анализ информации о физических и юридических лицах из открытых источников; — Выявление рисков и оценка достоверности данных; — Подготовка аналитических отчетов; — Участие в расследовании инцидентов по линии безопасности; — Контроль за соблюдением комплаенса. Требования: — Опыт работы от 2 лет (OSINT / безопасность); — Опыт в сфере iGaming будет преимуществом.

Own our detection coverage across Defender XDR, Entra ID, Sentinel, Microsoft Graph, Azure, and Microsoft 365 — from raw signal through to shipped, tuned detections. Build and maintain a living map of Microsoft security signal: what exists, known ingestion lag, where it lands, what gates it, how long it's kept, and how far you can trust it.

Location: Poland; Brazil; Peru; Sweden; Argentina; Romania; Cyprus; Czech Republic; Hungary; Mexico; Chile; Bulgaria Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM xStocks brings real-world assets on-chain as tokenized securities that are regulated, fully-backed, and tradable across multiple blockchains. Built within Payward, the xStocks team runs the infrastructure that issues, custodies, and settles these instruments across EVM, Solana, TON, Tron, and more. The platform moves real value, so security is not a feature bolted on at the end. It is a property of everything the team ships. This is a hybrid engineering and security seat built for someone who is genuinely both: you ship products alongside the engineering team when the security queue is quiet, and you own security work end to end when it lands. You report into engineering and partner closely with the Payward security, CISO, and compliance functions. THE OPPORTUNITY - Own security deliverables end to end. Coordinate and review smart-contract audits, respond to security questionnaires and due-diligence requests, support CISO and compliance initiatives, and turn findings into tracked, closed-out fixes. - Run offensive assessments against our own platforms. Pentest the web apps, APIs, backend services, and on-chain components, and build the tooling to do it repeatedly rather than once. - Continuously assess posture. Threat-model new and existing systems, review architecture and key-management flows, and maintain a living view of the risks and their mitigations. - Review code for security. Be a default reviewer on changes touching auth, cryptography, custody, signing, and fund movement across our chains. - Harden the platform. Improve secrets handling, IAM and least-privilege, dependency and supply-chain hygiene, and detection and logging for security-relevant events. - Secure custody and signing workflows. Review and harden transaction signing flows, MPC and HSM integrations, signer permissions, admin roles, approval policies, and break-glass procedures. - Contribute to product engineering. Pick up regular backlog work in TypeScript so you stay close to the codebase you are defending. - Support incidents. Help with detection, triage, response, and post-mortems, and feed the lessons back into the program. WHAT YOU BRING - An engineer first. You write and review production code comfortably, TypeScript and Node.js in our stack, and you understand systems deeply enough to break them. - Strong application and infrastructure security fundamentals. The OWASP-class vulnerability landscape, authn and authz, injection, SSRF, supply-chain risk, and secure design. You have done real offensive work in pentesting, vuln research, or red-team. - Applied cryptography and blockchain security. Symmetric and asymmetric primitives, hashing, signatures, and key management, plus the security model of EVM, Solana, and ideally TON or Tron. You can read a smart contract and reason about how it fails. - Ownership. You can take an ambiguous security item, an audit, a questionnaire, or an incident, and drive it to closure without being managed through it. - Clear communication. You can explain a risk to engineers, to a CISO, and to an auditor, and tailor the message to each. - An automation instinct. You do not want to catch the same issue manually twice, so you turn findings into tests, alerts, controls, documentation, or platform improvements. - Risk judgment. You can tell a theoretical issue from a material one, and communicate severity, likelihood, impact, and remediation tradeoffs clearly. NICE TO HAVE - Experience commissioning or remediating third-party smart-contract audits. - Familiarity with custody and signing infrastructure such as HSMs, MPC, and ForDefi-style providers, and with on-chain transaction security. - Cloud security depth in GCP or AWS, IAM, and container and runtime hardening. - Detection engineering and security observability, including SIEM and log-based detections. - Relevant certifications such as OSCP, OSWE, or GWAPT. - Prior work in a regulated fintech or tokenization/DeFi environment. Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Анализ кода и поведения вредоносных программ под Windows и Linux, реверс‑инжиниринг; Отслеживание актуальных угроз, кампаний и техник атакующих (публичные отчёты, threat intelligence, свежие образцы);

Location: North America Workplace: Remote At Linear, we're building the product development system for teams and agents. AI is fundamentally changing how software gets built, and we’re shaping the tools this new era requires. Founded in 2019, Linear has become the platform of choice for more than 30,000 companies (including OpenAI, Coinbase, and Ramp) to plan, build, and ship their products. Today, our team is distributed across North America, Europe, and Australia, and we’re continuing to grow internationally. What unites us is relentless focus, fast execution, and a deep care for software craftsmanship. At Linear, we are committed to quality. Security is an essential part of that quality — not a layer that we add later, but something we build in from the start. We have a foundational security program we're proud of but, as Linear evolves our product and scales into enterprise, there's meaningful work ahead: staying ahead of vulnerabilities as our attack surface grows, responding fast and cleanly when incidents happen, and hardening our product and infrastructure. As Security Engineer at Linear, you'll be operating in a high-autonomy role with real scope, doing hands-on security work across the product and infrastructure we build. Location & work mode Linear is a remote-first company. This role is open to candidates based in North America. You can work from anywhere within this region. We value deep focus and async collaboration, with intentional moments to connect in person through team off-sites, optional co-working, and occasional travel. What you’ll do Depending on your experience / skillset and our broader priorities, you could: - Operate, automate, and extend vulnerability management end-to-end: triage, prioritize, and drive remediation across product, infrastructure, and dependencies, and keep the program’s SLAs meaningful rather than theoretical - Run our bug bounty program: triage incoming reports, validate severity, work with engineering on fixes, and keep researcher relationships professional and responsive - Lead product security testing: threat model new features (including AI/agent-facing surfaces), review designs and code for security-relevant risk, and do hands-on testing (manual and tool-assisted) rather than relying solely on scanners - Be a primary responder for security incidents: lead investigation and containment, drive postmortems, and turn lessons into concrete hardening work - Own meaningful chunks of our cloud/infra security posture on GCP/k8s/Postgres: harden configurations, close gaps surfaced by audits or scanning, and partner with infra engineering on secure defaults - Build and maintain security tooling and automation, including using AI/LLM tooling to speed up triage, code review, and repetitive investigation work, so the program scales without linear headcount growth - Partner with the GRC/Trust function: feed real findings into the risk register and control evidence, and help make sure compliance requirements reflect actual engineering practice What we’re looking for - A generalist, senior-level security engineer (5+ years across security engineering, with real depth in at least two of: vulnerability management, product/appsec testing, incident response, and cloud security). We need breadth, rather than a narrow specialist in any one of these. - Hands-on and technical: you can read and reason about code (we use a lot of TypeScript), you’re comfortable in cloud environments (GCP a plus), and you can go deep on a finding rather than just filing a ticket for someone else to fix. You’re comfortable using AI coding/security tools as force multipliers (Linear Agent, Claude, Codex, etc). - Calm under pressure: you can lead an incident from first alert through postmortem without needing to be told what to do next - A builder: you’d rather write a script or ship a tool than repeat a manual process a third time - A pragmatic risk-reducer: you optimize for actually reducing risk, not for checking a box or maximizing findings count - Autonomy-oriented: comfortable setting your own priorities, working with significant independence, and knowing when to escalate - A clear communicator: able to explain a technical finding to a non-technical stakeholder and write it up so it’s actually actionable Our tech This is a hands-on security engineering role. You'll be running tools, reading/writing code, building detections, working in our cloud environment, and partnering closely with the engineers who build our product. Our stack is fronted by Cloudflare and runs on Google Cloud with k8s, Postgres, and Node. For day-to-day work, we use: - Linear, GitHub, Slack, and Google Workspace for collaboration - Claude and ChatGPT for general & engineering-specific AI tasks - Vanta for compliance automation and evidence collection Our security-specific tooling includes: - GitHub Advanced Security - RunReveal - SentinelOne What we offer We're a small, focused team that cares deeply about the quality of our work and the people we do it with. Here's what you can expect: - Competitive salary and equity - Employee-friendly equity terms including early exercise in the US and extended exercise windows - Daily meal and coffee stipend on every workday - Paid co-working space or desk - Health coverage (based on country requirements) - 5 weeks paid vacation, plus local statutory holidays - 4 months paid parental leave - Paid month off after 4 years & every 2 years thereafter - Regular team events and off-sites - Remote-first with no required commute Learn how we think and work - Read Me https://linear.app/readme a story about our mission - Our hiring process: How we hire at Linear https://linear.app/now/how-we-hire-at-linear - How we work: Designing remote work at Linear https://linear.app/now/designing-remote-work-at-linear - Why and how we do work trials https://linear.app/blog/why-and-how-we-do-work-trials-at-linear Linear blog post - How we use AI in design https://designerfund.substack.com/p/ai-design-linear feature of Linear's design team - Scaling our real-time sync engine https://linear.app/blog/scaling-the-linear-sync-engine talk by our cofounder, Tuomas Artman, at Linear's 2023 offsite - Our recent tender offer: Sharing Linear’s growth with the people building it https://linear.app/now/sharing-growth-with-the-people-building-linear Linear is an equal opportunity employer. We do not discriminate based on race, color, religion, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic under applicable law.

Мы хотим создать закрытый клуб пентестеров с практикой каждую неделю. Задачи: — проведение уроков с лабораторными работами: полный курс по XSS и Bash для пентестера, а также другие именные курсы. — глубокие разборы обходов фильтров, CSP, IDOR, методологии. — разборы реальных отчётов bug bounty. — организация закрытого чата с «Вопросами недели», где автор темы отвечает в комментариях. — реализация других идей, обсуждаемых с участниками. Условия: — курс «JSON с нуля до профи» в подарок при вступлении. — «Карта пути пентестера» с рекомендациями по обучению и порядку изучения. — доступ через закрытый чат по ссылке. Присоединяйтесь к чату и участвуйте в обсуждениях, не выходите из чата до старта, чтобы не пропустить цену early bird.

Location: Gurgaon, India Workplace: remote About Welo Data Welo Data, a Welo Global brand, is the multilingual data and evaluation partner for foundation labs and enterprises deploying GenAI systems globally. They deliver the human judgment, data infrastructure, and evaluation systems that ensure AI models perform reliably across languages, cultures, and real-world contexts, at every stage from training through deployment.  Its global network of 500,000+ vetted experts spans 300+ languages and locales, enabling high-quality multilingual data creation and structured model evaluation across the full spectrum of modern AI applications — from large language models and voice and speech systems to agentic workflows and robotics and embodied AI. This breadth of linguistic, cultural, and domain expertise enables Welo Data to address critical AI development challenges, including safety, bias, inclusivity, and cross-lingual reliability. A unified global operating model, led by specialized program and quality experts and grounded in assessment-driven talent selection, localized rubrics, and continuous calibration, ensures consistent performance across languages, domains, and modalities. Underpinning all of this is NIMO™ (Network Identity Management and Operations), Welo Data's proprietary identity and fraud-prevention framework. Built to maintain data integrity and workforce trust across a global contributor base, NIMO combines advanced verification, continuous monitoring, and structured QA to ensure every dataset is accurate, traceable, and culturally grounded. welodata.ai    About the Team  Welo Data's Trust & Safety function protects the integrity of a global, distributed workforce that powers AI data and annotation work. We run a multi-layered fraud detection stack combining identity verification checks, in-house behavioral signals, and platform activity data, and are actively building out a Trust & Safety Committee spanning four core workstreams: identity verification, location verification, account integrity, and multi-accounting detection. This is a hands-on investigative role, not a policy-only seat — you'll be working live cases from day one.  About the Role  We're looking for a Trust & Safety Specialist, based in India, to join our investigations team, working active fraud cases and supporting the broader fraud strategy program. You'll come in with real T&S, fraud/risk, or identity-verification experience from another platform, marketplace, gaming company, fintech, IDV vendor, or crowdsourced-workforce environment, and be ready to run investigations, process removals, and spot fraud patterns from week one. What You Will Do Run investigations end-to-end: triage flagged accounts, review evidence (identity signals, behavioral flags, platform activity data), reach a disposition, and process removals in line with policy and SLA. Own IDV review: verify identity and location signals for flagged or high-risk accounts, distinguishing genuine edge cases from fraud. Conduct manual audits and reviews: prioritizing cases by risk and signal strength rather than intake order. Detect multi-accounting and account integrity abuse: recognize patterns across linked accounts, device/location overlap, and behavioral signals. Apply a hypothesis-driven investigation method: form a hypothesis, test it against the evidence, and reach a disposition that can be replicated and audited. Contribute to detection improvement: escalate emerging fraud vectors, false-positive/false-negative patterns, and rule gaps to the fraud strategy team. Handle sensitive data responsibly: apply GDPR-aligned data handling and deletion practices in every case. Collaborate cross-functionally: partner with Research Labs, Quality Strategy Architecture (QSA), and Forward Deployment Engineering on tooling gaps and process fixes surfaced by your casework What You Bring (Must Have-s) 4+ years in a T&S, fraud/risk, or identity-verification investigations role — from a platform/marketplace T&S team, a fintech/payments risk team, an identity-verification vendor, or a crowdsourced/gig-workforce trust function. Direct experience with identity/fraud signals — device fingerprinting, IP/geolocation checks, document verification, or behavioral fraud scoring. Multi-accounting / account integrity pattern recognition — you've dealt with linked-account abuse, farming, or account sharing before, not just single-account review. Case documentation discipline — you write clean, evidence-backed case notes that would survive an audit or an appeal. Comfort with ambiguity and volume — you can prioritize a queue by risk, not just clear it by count. Working knowledge of data privacy obligations (GDPR or equivalent) as they apply to case handling and data retention/deletion. Nice to Have Experience specifically in AI/ML data annotation, RLHF, or research operations workforce platforms. Exposure to rule-based fraud detection engines and an opinion on rule sprawl vs. signal quality. Familiarity with clustering/anomaly-detection approaches to fraud (even at a conceptual level). Case management system experience (any ticketing or knowledge-base tooling). Recommended Education Bachelor's degree in Criminology, Law, Criminal Justice, Cybersecurity, Information Security, Data/Computer Science, or a related field. Equivalent practical experience in T&S, fraud investigations, or identity verification will be considered in place of a degree. Relevant certifications are a plus: CFE (Certified Fraud Examiner), CAMS (Certified Anti-Money Laundering Specialist), or IDV/identity risk vendor certifications.

Location: Bulgaria Company Background Our client is a travel technology company developing cloud-native, AI-powered software for airlines and hospitality brands. Its products help customers improve commercial performance, reduce costs, and evolve their digital commerce capabilities. The company’s technology is designed to work alongside existing airline systems, allowing customers to introduce new capabilities without replacing their current technology landscape. Project Description You will contribute to a large-scale greenfield travel-technology initiative supporting the launch of a new airline operation. The project uses a modern commercial platform to enable flexible retailing, pricing, and digital shopping experiences across travel products and ancillary services. Technologies GCP, AWS Wiz Cloudflare WAF, Bot Management, DNS, TLS, DDoS Protection and Rate Limiting Terraform SonarCloud and Dependabot Jira, PagerDuty and Slack Python and Bash What You'll Do Own and continuously improve cloud security posture across GCP organizations and AWS accounts, including connector coverage, runtime sensor deployment on production clusters, custom policy development, finding-triage baselines, and integrations with Jira, PagerDuty, and Slack; Operate and evolve the edge security layer, centralizing internet-facing protection through Cloudflare WAF, bot management, rate limiting, DNS/TLS, and origin routing for customer-facing production zones; Tune security rules using real production traffic, manage allow-list requests, and enable other teams to use edge-security tooling effectively; Support and automate vulnerability management and secure configuration, maintaining the intake of Wiz, SAST, penetration-test, and customer-reported findings, defining remediation baselines, and driving owners to closure; Participate in security incident response for cloud events, including DDoS and bot attacks, supply-chain alerts, credential exposure, and data-handling incidents, while creating and maintaining detection, triage, and mitigation runbooks; Help secure the software supply chain by owning SAST reporting in SonarCloud, dependency scanning with Dependabot, container base-image hardening, and the selection of SBOM and SCA tooling, and publish release-level security reports for engineering teams; Produce technical evidence for SOC 2, PCI DSS, ISO 27001, and NIS2, including evidence of log-sink configuration and retention, access reviews, authenticated scanning, and IAM remediation, and map Wiz controls to relevant frameworks to make evidence collection repeatable; Enable security self-service by training Platform, CloudOps, and Product Engineering teams on the tools they use, including Wiz and Cloudflare administration, mapping service catalogues to owners, and automating recurring customer-security and issue-triage reporting through scripting and AI-assisted workflows; Advise and partner with engineering teams on the security of new platform integrations and AI/RAG services, contributing to the annual cloud-security roadmap and target-state architecture; Job Requirements 5+ years of experience in cloud security or platform engineering with a security focus, including hands-on experience with GCP or AWS across IAM, audit logging, log routing, network security, and workload protection; Production experience with a CNAPP/CSPM platform, such as Wiz (preferably) / Prisma Cloud / Orca / Google Security Command Center, including policy authoring, integrations, and runtime protection; Hands-on administration of a WAF, CDN, and bot-management stack at scale; Strong Terraform experience, including building modules for security tooling and WAF configuration, reviewing changes, and managing configuration drift and legacy infrastructure; Experience with vulnerability management across cloud infrastructure, containers, and code, including SAST, SCA/dependency scanning, container image hardening, and penetration-test remediation tracking; Experience routing cloud security signals to a SIEM or security-monitoring platform, such as Wazuh, Microsoft Sentinel, Google Security Operations, or Datadog Security Monitoring, and integrating actionable alerts with PagerDuty and Slack; Scripting skills in Python or Bash for automation and security reporting; Security incident-response experience in a production environment, including developing runbooks and managing vendor escalations; Clear written and verbal communication skills, with the ability to train engineering teams and document security decisions; Nice To Have Experience automating security workflows, such as report generation and issue triage, with AI-assisted or LLM-based tooling; Experience working across both GCP and AWS, experience with Azure; Familiarity with Rego, OPA, or other policy-as-code languages; Experience with identity and access-management tooling, including Okta SSO/SCIM, PAM solutions, and least-privilege reviews for cloud IAM; Experience facilitating OWASP SAMM assessments, threat-modelling sessions, or security-champions programs; Airline or travel-industry experience, including PCI-scoped payment flows, partner integrations, and customer-facing security reporting; Experience supporting compliance with PCI DSS, SOC 2, ISO 27001, or NIS2; Certifications such as Google Professional Cloud Security Engineer, CCSP, or AWS Certified Security – Specialty; What Do We Offer The global benefits package includes: Technical and non-technical training for professional and personal growth; Internal conferences and meetups to learn from industry experts; Support and mentorship from an experienced employee to help you professional grow and development; Health insurance; Sports activities to promote a healthy lifestyle; Flexible work options, including remote and hybrid opportunities; Referral program for bringing in new talent; Work anniversary program and additional vacation days.