Кибербезопасность вакансии - удалённо

О проекте Международный проект в области AI Security, связанный с разработкой сред, которые помогают LLM-моделям проходить обучение с подкреплением для задач, связанных с кибербезопасностью. Эти среды содержат задания в различных областях кибербезопасности (пентестинг, реагирование на инциденты, эксплуатация, вредоносное ПО и т.д.), цель — создавать достаточно сложные задачи, чтобы модель допускала ошибки, но которые остаются решаемыми для профессиональных специалистов. Важно: это не классическая позиция Pentester или Red Team Engineer. Основная задача — создавать сложные, но реалистичные и проверяемые security-сценарии, в которых LLM-модели совершают ошибки именно из-за недостатков в рассуждении (reasoning), а не из-за неоднозначных инструкций или ограничений среды. Задачи: — Проектировать security-сценарии для оценки и обучения LLM-моделей — Создавать environments с использованием GitHub, Slack и других инструментов, встречающихся в реальной разработке — Разрабатывать задачи, требующие сложного многошагового reasoning — Моделировать реальные offensive security-сценарии (supply chain attacks, malicious pull requests, exploitation через GitHub Actions и другие техники) — Проверять разработанные сценарии на нескольких frontier-моделях и анализировать причины их ошибок — Формулировать ожидаемое поведение модели и описывать, почему конкретная ошибка считается reasoning failure — Автоматизировать создание и проверку задач с использованием Python и других инструментов Требования: — 5+ лет практического опыта в Offensive Security, Application Security или Web Penetration Testing — Практический опыт AI Red Teaming / LLM Security — Глубокое понимание современных техник атак и поверхности атаки веб-приложений, API, GitHub, CI/CD и связанных экосистем — Практический опыт проведения penetration testing и исследования безопасности приложений — Опыт разработки на Python и/или JavaScript — Навыки статического и динамического анализа кода (Python, JavaScript, Java) — Умение самостоятельно исследовать новые направления, проектировать сложные сценарии и объяснять результаты своей работы — Свободный английский язык (Upper-Intermediate / B2+) — Практический опыт работы с современными LLM-моделями — Понимание особенностей их работы, ограничений и типичных failure modes — Интерес к AI Security и исследованию поведения LLM — Опыт работы с Agentic AI, AI Agents или Model Evaluation Будет большим плюсом: — Опыт исследований безопасности GitHub Actions, CI/CD, Supply Chain Security — Сертификаты OSWE, eWPTXv2, OWEE, OSWA или аналогичные — Публикации, write-ups, участие в Bug Bounty, HackTheBox, TryHackMe, Pwn2Own или других исследовательских проектах — Способность придумывать новые, не похожие на существующие сценарии атак, которые сломают сильную модель, исследовательское мышление и креативность Условия: — B2B-контракт (с ИП) — Оплата в долларах США — Part-time/Full-time: почасовая оплата за выполненные задачи, 1 задача занимает около 10-12 часов — Локация — строго вне РФ/РБ

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. Threat Operations is part of 1Password’s Security organization, bringing together Cyber Threat Intelligence, Detection Engineering, and Security Incident Response. Together we study how threat actors operate, turn that into high-quality detections, and respond quickly when something goes wrong. Interns work across all three teams, with time and focus shaped by your interests and our needs, so you see how intelligence becomes real defense. We care about turning intelligence into action, and we value blameless learning and psychological safety. This is a remote opportunity within Canada/US. This position will be for 4 months - January to April 2027. What You Can Expect: - Analyze incoming threat intelligence, assess its credibility and relevance to 1Password, and run IOC sweeps across our environment. - Own pieces of work across the threat management lifecycle, turning intel into recommendations for detection, incident response, and vulnerability management. - Join the alert triage rotation and learn how signal quality, enrichment, and response fit together. - Develop and test detection rules and response agents, and contribute to our detection-as-code and response-as-code platforms. - Build orchestration workflows to automate triage, enrichment, and response, using AI tools to help design and build them. What we're looking for: - Confidence: A willingness to take on new challenges, and see them through to completion. - Humility: You're not afraid to ask "stupid" questions and make mistakes (as long as you learn from them). - Curiosity: You look for better ways of doing things, even if everyone seems happy with how they are. - Teamwork: We work together, and succeed as a team! Bonus points for: - Familiarity with Git and managing infrastructure or detections as code, including Terraform. - Scripting or programming experience, such as Python or Go, and comfort working with APIs. - Exposure to SIEM and SOAR tools, logs, or writing detection rules and queries, through coursework, labs, or projects. - Experience using AI tools to build or automate workflows, with a healthy skepticism about their output. - Familiarity with frameworks like MITRE ATT&CK, plus security coursework, CTFs, home labs, or a security club. Our culture  At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first.  You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results.  We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged at 1Password—it's an essential part of how we will be successful at 1Password. Our approach to remote work  We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of most roles. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.  How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:  🏝 Generous PTO policy - 2.08 days per month (1.5 work weeks per 4 month term) 💖 Company-wide wellness days (1 per quarter)  🌎 Employee-led inclusion and belonging programs and ERGs 🏠 Remote-first environment 🏆 Peer-to-peer recognition through Bonusly 💡 1Password University access and learning sessions 🥳 Monthly internship events and socials 1Password is part of  Team True North https://www.communitech.ca/how-we-help/team-true-north/ , a comprehensive group of Canadian tech firms with performance and growth rates that match the top 1% of companies worldwide – companies with the highest probability of reaching $1 billion in annual revenue. We believe in tech for good, and establishing Canada as a preferred destination for growing careers wherever we can! You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Location: Remote, Global Workplace: Remote ABOUT THE ROLE We’re looking for a GRC Analyst to join our Compliance & Security team and help make risk management, audit and compliance a continuous part of how Supabase runs. You’ll work closely with engineering, security, IT, and legal to help us define our risk tolerance, keep our compliance programs (including SOC 2 and ISO/IEC 27001:2022) current, test controls on a rolling basis, and answer customer and vendor security reviews quickly and accurately. This role is ideal for someone who thrives in async, fast-paced environments and is excited about building developer tools that scale to millions. WHAT YOU’LL BE RESPONSIBLE FOR - Run risk assessments across the company and major product changes. Score likelihood and impact, propose treatments, and bring the results to leadership to inform risk tolerance decisions. - Maintain the risk register, track remediation to closure, and report status to compliance and security leadership. - Monitor controls on a rolling basis, using automated tests where they exist and manual testing where they don’t. Triage failures, prioritize by the risk register, and align each finding with an owner and a due date. - Support internal audit, whether performed by an external partner or in-house: propose scope from the risk register, supply evidence, and track findings to closure. - Run day-to-day operations for our compliance programs: evidence collection, control owner follow-up, and readiness ahead of each audit period. - Extend continuous control validation beyond what our compliance platform covers. Build custom tests with AI coding tools, work with engineering and IT to pull evidence from source systems instead of collecting screenshots, and check that each test proves what the control requires. YOU MIGHT BE A GOOD FIT IF YOU - Have 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology company - Are comfortable working with SOC 2 and ISO 27001 controls, a compliance platform such as Drata, Vanta, and evidence from systems like AWS, GCP, Google Workspace, and Okta - Communicate clearly across both technical and non-technical audiences - Have experience in async or globally distributed teams - Are energized by solving real-world problems for developers - Are comfortable navigating ambiguity and moving quickly WHAT WE OFFER - Fully Remote We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world. - ESOP Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together. - Tech Allowance Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work. - Health Benefits Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us. - Annual Off-Sites Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year. - Flexible Work We operate asynchronously and trust you to manage your own time. You know what needs to be done and when. - Professional Development Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth. ABOUT THE TEAM Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love. - ~400 team members - 60+ countries - 20+ languages spoken - Over $1B raised (including our $500M Series F) - 540,000+ community members We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. We are excited to welcome a Junior Engineer to join our Application Security team at 1Password. Application Security helps enable 1Password to build and deliver secure products with confidence. We’re responsible for 1Password’s Secure Software Development Lifecycle and related security activities like design review and architecture guidance, threat modelling, software supply chain security, and a suite of automated security tooling. As part of the Application Security team, this Junior Engineer will focus primarily on building and maintaining new or existing security tooling, including static analysis, dynamic analysis, code scanning (sage) and emerging agentic AI solutions.   How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is a remote opportunity within Canada and the US. What we're looking for: - You have 0-2+ years of experience in software development - You have a passion and curiosity for security engineering, including but not limited to topics of secure coding, pentesting, vulnerability analysis, security design and architecture - You have strong experience, demonstrated through project work or real world experience, leveraging agentic AI capabilities to accelerate security workflows, automate repetitive tasks, or enhance detection and remediation efforts - You have experience with internal tool development and engineering enablement - You have a strong foundational understanding of software development principles, and are comfortable reading and writing code - You work well in a team environment with positive communications amongst a variety of technical and non-technical stakeholders - You’re adaptable and resilient, thriving in fast-paced environments with shifting priorities   Bonus points for: - Experience with Rust and/or Golang, or a demonstrated ability to pick up new languages quickly. - Experience conducting security code reviews, design architecture guidance, threat modelling - Practical or hands-on experience with web application security topics, including but not limited to topics in OWASP Top 10.   What you can expect: - Work within a small team of Application Security Engineers focused on minimizing security risk across our SSDLC - Work with cross functional partners across Security, Product Engineering, Marketing, CX and more on the security parameters of new features across 1Password’s product suite - Design, build, integrate and scale new agentic AI capabilities to enable secure product development activities - Enhance and maintain existing security tools in a variety of areas including static analysis, dynamic analysis, code scanning, and more. - Develop and maintain comprehensive dashboards and reporting metrics around our security risk program, tailored to different audiences (technical, non-technical, compliance, senior leadership, etc.)   USA-based roles only: The annual base salary for this role is between $100,000 USD and $140,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $85,000 CAD and $119,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. Our culture At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. How we work with AI We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password. This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing 👶 Maternity and parental leave top-up programs 🩺 Competitive health benefits 🏝 Generous PTO policy Growth and future 📈 RSU program for most employees 💸 Retirement matching program 🔑 Free 1Password account Community 🤝 Paid volunteer days 🏆 Peer-to-peer recognition through Bonusly 🌎 Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting. You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Задачи: — Сбор и анализ информации о физических и юридических лицах из открытых источников; — Выявление рисков и оценка достоверности данных; — Подготовка аналитических отчетов; — Участие в расследовании инцидентов по линии безопасности; — Контроль за соблюдением комплаенса. Требования: — Опыт работы от 2 лет (OSINT / безопасность); — Опыт в сфере iGaming будет преимуществом.

Own our detection coverage across Defender XDR, Entra ID, Sentinel, Microsoft Graph, Azure, and Microsoft 365 — from raw signal through to shipped, tuned detections. Build and maintain a living map of Microsoft security signal: what exists, known ingestion lag, where it lands, what gates it, how long it's kept, and how far you can trust it.

Location: Poland; Brazil; Peru; Sweden; Argentina; Romania; Cyprus; Czech Republic; Hungary; Mexico; Chile; Bulgaria Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM xStocks brings real-world assets on-chain as tokenized securities that are regulated, fully-backed, and tradable across multiple blockchains. Built within Payward, the xStocks team runs the infrastructure that issues, custodies, and settles these instruments across EVM, Solana, TON, Tron, and more. The platform moves real value, so security is not a feature bolted on at the end. It is a property of everything the team ships. This is a hybrid engineering and security seat built for someone who is genuinely both: you ship products alongside the engineering team when the security queue is quiet, and you own security work end to end when it lands. You report into engineering and partner closely with the Payward security, CISO, and compliance functions. THE OPPORTUNITY - Own security deliverables end to end. Coordinate and review smart-contract audits, respond to security questionnaires and due-diligence requests, support CISO and compliance initiatives, and turn findings into tracked, closed-out fixes. - Run offensive assessments against our own platforms. Pentest the web apps, APIs, backend services, and on-chain components, and build the tooling to do it repeatedly rather than once. - Continuously assess posture. Threat-model new and existing systems, review architecture and key-management flows, and maintain a living view of the risks and their mitigations. - Review code for security. Be a default reviewer on changes touching auth, cryptography, custody, signing, and fund movement across our chains. - Harden the platform. Improve secrets handling, IAM and least-privilege, dependency and supply-chain hygiene, and detection and logging for security-relevant events. - Secure custody and signing workflows. Review and harden transaction signing flows, MPC and HSM integrations, signer permissions, admin roles, approval policies, and break-glass procedures. - Contribute to product engineering. Pick up regular backlog work in TypeScript so you stay close to the codebase you are defending. - Support incidents. Help with detection, triage, response, and post-mortems, and feed the lessons back into the program. WHAT YOU BRING - An engineer first. You write and review production code comfortably, TypeScript and Node.js in our stack, and you understand systems deeply enough to break them. - Strong application and infrastructure security fundamentals. The OWASP-class vulnerability landscape, authn and authz, injection, SSRF, supply-chain risk, and secure design. You have done real offensive work in pentesting, vuln research, or red-team. - Applied cryptography and blockchain security. Symmetric and asymmetric primitives, hashing, signatures, and key management, plus the security model of EVM, Solana, and ideally TON or Tron. You can read a smart contract and reason about how it fails. - Ownership. You can take an ambiguous security item, an audit, a questionnaire, or an incident, and drive it to closure without being managed through it. - Clear communication. You can explain a risk to engineers, to a CISO, and to an auditor, and tailor the message to each. - An automation instinct. You do not want to catch the same issue manually twice, so you turn findings into tests, alerts, controls, documentation, or platform improvements. - Risk judgment. You can tell a theoretical issue from a material one, and communicate severity, likelihood, impact, and remediation tradeoffs clearly. NICE TO HAVE - Experience commissioning or remediating third-party smart-contract audits. - Familiarity with custody and signing infrastructure such as HSMs, MPC, and ForDefi-style providers, and with on-chain transaction security. - Cloud security depth in GCP or AWS, IAM, and container and runtime hardening. - Detection engineering and security observability, including SIEM and log-based detections. - Relevant certifications such as OSCP, OSWE, or GWAPT. - Prior work in a regulated fintech or tokenization/DeFi environment. Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Location: North America Workplace: Remote At Linear, we're building the product development system for teams and agents. AI is fundamentally changing how software gets built, and we’re shaping the tools this new era requires. Founded in 2019, Linear has become the platform of choice for more than 30,000 companies (including OpenAI, Coinbase, and Ramp) to plan, build, and ship their products. Today, our team is distributed across North America, Europe, and Australia, and we’re continuing to grow internationally. What unites us is relentless focus, fast execution, and a deep care for software craftsmanship. At Linear, we are committed to quality. Security is an essential part of that quality — not a layer that we add later, but something we build in from the start. We have a foundational security program we're proud of but, as Linear evolves our product and scales into enterprise, there's meaningful work ahead: staying ahead of vulnerabilities as our attack surface grows, responding fast and cleanly when incidents happen, and hardening our product and infrastructure. As Security Engineer at Linear, you'll be operating in a high-autonomy role with real scope, doing hands-on security work across the product and infrastructure we build. Location & work mode Linear is a remote-first company. This role is open to candidates based in North America. You can work from anywhere within this region. We value deep focus and async collaboration, with intentional moments to connect in person through team off-sites, optional co-working, and occasional travel. What you’ll do Depending on your experience / skillset and our broader priorities, you could: - Operate, automate, and extend vulnerability management end-to-end: triage, prioritize, and drive remediation across product, infrastructure, and dependencies, and keep the program’s SLAs meaningful rather than theoretical - Run our bug bounty program: triage incoming reports, validate severity, work with engineering on fixes, and keep researcher relationships professional and responsive - Lead product security testing: threat model new features (including AI/agent-facing surfaces), review designs and code for security-relevant risk, and do hands-on testing (manual and tool-assisted) rather than relying solely on scanners - Be a primary responder for security incidents: lead investigation and containment, drive postmortems, and turn lessons into concrete hardening work - Own meaningful chunks of our cloud/infra security posture on GCP/k8s/Postgres: harden configurations, close gaps surfaced by audits or scanning, and partner with infra engineering on secure defaults - Build and maintain security tooling and automation, including using AI/LLM tooling to speed up triage, code review, and repetitive investigation work, so the program scales without linear headcount growth - Partner with the GRC/Trust function: feed real findings into the risk register and control evidence, and help make sure compliance requirements reflect actual engineering practice What we’re looking for - A generalist, senior-level security engineer (5+ years across security engineering, with real depth in at least two of: vulnerability management, product/appsec testing, incident response, and cloud security). We need breadth, rather than a narrow specialist in any one of these. - Hands-on and technical: you can read and reason about code (we use a lot of TypeScript), you’re comfortable in cloud environments (GCP a plus), and you can go deep on a finding rather than just filing a ticket for someone else to fix. You’re comfortable using AI coding/security tools as force multipliers (Linear Agent, Claude, Codex, etc). - Calm under pressure: you can lead an incident from first alert through postmortem without needing to be told what to do next - A builder: you’d rather write a script or ship a tool than repeat a manual process a third time - A pragmatic risk-reducer: you optimize for actually reducing risk, not for checking a box or maximizing findings count - Autonomy-oriented: comfortable setting your own priorities, working with significant independence, and knowing when to escalate - A clear communicator: able to explain a technical finding to a non-technical stakeholder and write it up so it’s actually actionable Our tech This is a hands-on security engineering role. You'll be running tools, reading/writing code, building detections, working in our cloud environment, and partnering closely with the engineers who build our product. Our stack is fronted by Cloudflare and runs on Google Cloud with k8s, Postgres, and Node. For day-to-day work, we use: - Linear, GitHub, Slack, and Google Workspace for collaboration - Claude and ChatGPT for general & engineering-specific AI tasks - Vanta for compliance automation and evidence collection Our security-specific tooling includes: - GitHub Advanced Security - RunReveal - SentinelOne What we offer We're a small, focused team that cares deeply about the quality of our work and the people we do it with. Here's what you can expect: - Competitive salary and equity - Employee-friendly equity terms including early exercise in the US and extended exercise windows - Daily meal and coffee stipend on every workday - Paid co-working space or desk - Health coverage (based on country requirements) - 5 weeks paid vacation, plus local statutory holidays - 4 months paid parental leave - Paid month off after 4 years & every 2 years thereafter - Regular team events and off-sites - Remote-first with no required commute Learn how we think and work - Read Me https://linear.app/readme a story about our mission - Our hiring process: How we hire at Linear https://linear.app/now/how-we-hire-at-linear - How we work: Designing remote work at Linear https://linear.app/now/designing-remote-work-at-linear - Why and how we do work trials https://linear.app/blog/why-and-how-we-do-work-trials-at-linear Linear blog post - How we use AI in design https://designerfund.substack.com/p/ai-design-linear feature of Linear's design team - Scaling our real-time sync engine https://linear.app/blog/scaling-the-linear-sync-engine talk by our cofounder, Tuomas Artman, at Linear's 2023 offsite - Our recent tender offer: Sharing Linear’s growth with the people building it https://linear.app/now/sharing-growth-with-the-people-building-linear Linear is an equal opportunity employer. We do not discriminate based on race, color, religion, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic under applicable law.

Location: Gurgaon, India Workplace: remote About Welo Data Welo Data, a Welo Global brand, is the multilingual data and evaluation partner for foundation labs and enterprises deploying GenAI systems globally. They deliver the human judgment, data infrastructure, and evaluation systems that ensure AI models perform reliably across languages, cultures, and real-world contexts, at every stage from training through deployment.  Its global network of 500,000+ vetted experts spans 300+ languages and locales, enabling high-quality multilingual data creation and structured model evaluation across the full spectrum of modern AI applications — from large language models and voice and speech systems to agentic workflows and robotics and embodied AI. This breadth of linguistic, cultural, and domain expertise enables Welo Data to address critical AI development challenges, including safety, bias, inclusivity, and cross-lingual reliability. A unified global operating model, led by specialized program and quality experts and grounded in assessment-driven talent selection, localized rubrics, and continuous calibration, ensures consistent performance across languages, domains, and modalities. Underpinning all of this is NIMO™ (Network Identity Management and Operations), Welo Data's proprietary identity and fraud-prevention framework. Built to maintain data integrity and workforce trust across a global contributor base, NIMO combines advanced verification, continuous monitoring, and structured QA to ensure every dataset is accurate, traceable, and culturally grounded. welodata.ai    About the Team  Welo Data's Trust & Safety function protects the integrity of a global, distributed workforce that powers AI data and annotation work. We run a multi-layered fraud detection stack combining identity verification checks, in-house behavioral signals, and platform activity data, and are actively building out a Trust & Safety Committee spanning four core workstreams: identity verification, location verification, account integrity, and multi-accounting detection. This is a hands-on investigative role, not a policy-only seat — you'll be working live cases from day one.  About the Role  We're looking for a Trust & Safety Specialist, based in India, to join our investigations team, working active fraud cases and supporting the broader fraud strategy program. You'll come in with real T&S, fraud/risk, or identity-verification experience from another platform, marketplace, gaming company, fintech, IDV vendor, or crowdsourced-workforce environment, and be ready to run investigations, process removals, and spot fraud patterns from week one. What You Will Do Run investigations end-to-end: triage flagged accounts, review evidence (identity signals, behavioral flags, platform activity data), reach a disposition, and process removals in line with policy and SLA. Own IDV review: verify identity and location signals for flagged or high-risk accounts, distinguishing genuine edge cases from fraud. Conduct manual audits and reviews: prioritizing cases by risk and signal strength rather than intake order. Detect multi-accounting and account integrity abuse: recognize patterns across linked accounts, device/location overlap, and behavioral signals. Apply a hypothesis-driven investigation method: form a hypothesis, test it against the evidence, and reach a disposition that can be replicated and audited. Contribute to detection improvement: escalate emerging fraud vectors, false-positive/false-negative patterns, and rule gaps to the fraud strategy team. Handle sensitive data responsibly: apply GDPR-aligned data handling and deletion practices in every case. Collaborate cross-functionally: partner with Research Labs, Quality Strategy Architecture (QSA), and Forward Deployment Engineering on tooling gaps and process fixes surfaced by your casework What You Bring (Must Have-s) 4+ years in a T&S, fraud/risk, or identity-verification investigations role — from a platform/marketplace T&S team, a fintech/payments risk team, an identity-verification vendor, or a crowdsourced/gig-workforce trust function. Direct experience with identity/fraud signals — device fingerprinting, IP/geolocation checks, document verification, or behavioral fraud scoring. Multi-accounting / account integrity pattern recognition — you've dealt with linked-account abuse, farming, or account sharing before, not just single-account review. Case documentation discipline — you write clean, evidence-backed case notes that would survive an audit or an appeal. Comfort with ambiguity and volume — you can prioritize a queue by risk, not just clear it by count. Working knowledge of data privacy obligations (GDPR or equivalent) as they apply to case handling and data retention/deletion. Nice to Have Experience specifically in AI/ML data annotation, RLHF, or research operations workforce platforms. Exposure to rule-based fraud detection engines and an opinion on rule sprawl vs. signal quality. Familiarity with clustering/anomaly-detection approaches to fraud (even at a conceptual level). Case management system experience (any ticketing or knowledge-base tooling). Recommended Education Bachelor's degree in Criminology, Law, Criminal Justice, Cybersecurity, Information Security, Data/Computer Science, or a related field. Equivalent practical experience in T&S, fraud investigations, or identity verification will be considered in place of a degree. Relevant certifications are a plus: CFE (Certified Fraud Examiner), CAMS (Certified Anti-Money Laundering Specialist), or IDV/identity risk vendor certifications.

• Выполнять задачи, ставящиеся перед командой, включая исследование ядра iOS, реверс-инжиниринг компонентов с закрытым исходным кодом, отладку смартфонов, проверку имеющихся уязвимостей и proof-of-concepts на эксплуатируемость, написание рабочих эксплоитов, объединение эксплоитов в цепочки.

Location: Global Remote Workplace: remote Metabase is the easiest way for people to get insights from their data, from tiny startups who get up and running quickly to major corporations with tens of thousands of users. That's why people love us.   We bring data tools with the elegance and simplicity of consumer products to the crufty world of enterprise business intelligence. We provide an opinionated open source starting point for how companies should measure, analyze and share their data, which is used by tens of thousands of companies. About the Role We’re looking for a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them. Embedded in our core engineering team, you’ll help shape security decisions from early design through release and adoption. This is a hands-on engineering and research role: you’ll combine your security expertise with frontier AI tools to find vulnerabilities, develop fixes, and make Metabase secure by default across its product, dependencies, and runtime. Things you’ll do Partner with engineers throughout feature development, bringing security expertise to design, implementation, release, and adoption. Build security-focused features, lead security improvements across the codebase, and implement fixes that address root causes. Use and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices. Conduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities. Assess findings based on exploitability and real-world impact, define clear remediation criteria, and verify that fixes are effective. Turn individual findings into broader improvements that prevent entire classes of vulnerabilities. What you bring A demonstrated track record of finding and exploiting application vulnerabilities through source code analysis and hands-on research. The ability to independently navigate unfamiliar codebases, understand complex architectures, and reason about runtime behavior and trust boundaries. Experience with application security challenges, including authentication, authorization, injection, and unsafe handling of untrusted data. Sound judgment about exploitability and real-world impact, and the ability to communicate findings and remediation options clearly. Strong software engineering skills, including the ability to implement durable security fixes. Experience in Clojure, or a strong desire to learn. A thoughtful approach to AI-assisted security work, using these tools to extend your expertise while independently validating their output. Ownership and curiosity: you pursue difficult questions, collaborate closely with engineers, and follow findings through to resolution. Compensation The US base salary range for this role is $160K–$225K annually, plus equity and benefits. Compensation is determined by role, level, location, and individual qualifications, including skills, experience, and scope of responsibility. Pay may vary by geographic location and other job-related factors. Benefits We offer meaningful equity and a comprehensive US benefits package, including fully employer-covered medical, dental, and vision insurance (with 75% coverage for dependents), a 401(k) with employer match available to enroll after the first 30 days, flexible and unlimited paid time off including sick time, and an asynchronous, remote-first environment. We're a global team (50% outside the US), fully distributed (from Thailand to California), who get things done asynchronously, with plenty of uninterrupted time, supporting each other to do the best work of our careers. We offer flexibility (define your own schedule and work from wherever you want), autonomy, and an environment that fosters growth, learning, and development. We're relentlessly user-focused and believe in building long-term value, not short-term hacks. And we raised a $30M Series B to take our approach to the next level for years to come.   For U.S. applicants: Metabase participates in the federal E-Verify program, which confirms employment authorization of newly hired U.S. based employees. E-Verify is not used as a tool to pre-screen candidates and is only initiated upon hire.   E-Verify Participation Notice (English/Spanish) Right to Work Notice (English/Spanish)

-Встраивать и сопровождать процессы SSDLC / DevSecOps в CI/CD. -Настраивать и развивать инструменты SAST, DAST, SCA, Secret Detection, снижать количество ложных срабатываний.

-Programming experience in Python, Rust, C++, or Solidity. -Experience using Generative AI tooling such as Claude Code, Codex, Cursor, or similar Large Language Model (LLM) tools.

Задачи: — расследование нелегальных сетей — построение интеллектуальных конвейеров на базе искусственного интеллекта Требования: — опыт работы с расследованиями финансовых преступлений, отмыванием денег, нелегальными азартными играми, подпольным банкингом — знание OSINT и методов анализа угроз — опыт работы с блокчейн-интеллектом и крипторасследованиями — владение английским языком — знание китайского (мандарин) будет преимуществом Условия: — удалённая работа

Location: Berlin Office; Bosnia; Norway; Estonia; Latvia; Slovenia; Netherlands; Hungary; Kosovo; Portugal; Poland; Serbia; Germany; Austria; Finland; Montenegro; Albania; Lithuania; Slovakia; Ireland; Bulgaria; Denmark; Belgium; Czech Republic; United Kingdom; Croatia; Spain; Greece Workplace: Remote The AI orchestration of your wildest imagination. n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits. Backed by a fiercely inventive community and 500+ builder-approved integrations, we’re changing the way people bring systems together and scale ideas for impact. Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve: - Cultivated a community of more than 650,000 active developers and builders - Earned 190K+ GitHub stars, making us one of the world’s Top 40 most popular projects - Backed by top investors, from Sequoia’s first German seed to our SAP's recent strategic investment - bringing us to a $5.2bn valuation That’s the company we’ve built. Now we’d love to see what you can build. If you’re applying, try n8n out - whether you’re technical or not - and share a screenshot of your first workflow with us. The easiest place to start is here: app.n8n.cloud/register http://app.n8n.cloud/register. We’re in a defining moment of an incredible journey. Come and build with us. 🎯 Your main goal will be to identify and reduce security risks across n8n's product and internal systems, using threat modelling, hands-on security expertise, and cross-functional collaboration to help teams design, build, and operate more secure systems. You'll join our growing security team at a pivotal stage, acting as a trusted security partner to teams across the business. You'll help us build a move from reactive security management to a proactive, scalable security practice. Here's what you'll be driving: THREAT MODELLING, RISK ASSESSMENT & SECURITY DESIGN - Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems, identifying vulnerabilities and recommending practical mitigations. - Partner with Engineering, Cloud, IT, and Data teams to review security designs, define actionable security requirements, and influence the implementation of appropriate controls. - Help teams embed security into their development processes through secure coding guidance, design reviews, documentation, and security tooling that enables them to identify and address risks independently. VULNERABILITY MANAGEMENT & COORDINATED DISCLOSURE - Participate in the security triage rotation, assessing incoming vulnerability reports, validating findings, and prioritising remediation based on severity and business impact. - Collaborate with engineering teams to coordinate vulnerability remediation, verify fixes, and support secure patch and release processes. - Help manage our vulnerability disclosure and bug bounty programmes, including engagement with security researchers, coordinated disclosures, and GitHub Security Advisories. SECURITY OPERATIONS & INCIDENT READINESS - Help establish and improve logging, detection, and protective monitoring capabilities across our infrastructure, corporate systems, and internal applications. - Develop and improve incident response processes, runbooks, and exercises to strengthen our ability to detect, investigate, and respond to security incidents. - Work closely with system owners to identify security gaps, prioritise remediation, and verify that implemented controls effectively reduce risk. CUSTOMER TRUST & COMPLIANCE ENGINEERING - Support SOC 2 compliance by helping establish continuous control monitoring, automated evidence collection, and processes that make security assurance part of everyday operations. - Collaborate with Sales, Solutions Engineering, and Customer Success to respond to customer security assessments and build reusable resources that streamline future requests. - Partner with Legal, Finance, IT, and other stakeholders to assess security risks, improve security policies and controls, and strengthen trust with enterprise customers. We're hiring two Security Engineers with complementary strengths, so you don't need to be an expert in every security domain. REQUIREMENTS MUST-HAVES - 🔍 Threat Modelling & Risk Assessment: You have hands-on experience assessing real-world systems, identifying security risks, determining defensible severity levels, and recommending practical controls that teams can implement. - 🛠️ Technical Security Expertise: You can validate security findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation when needed to demonstrate risks or improve security processes. - 🔐 Security Engineering Experience: You've worked hands-on in infrastructure, product, or application security within a product-focused organisation, with a strong understanding of how modern systems are designed and secured. - 🤝 Cross-functional Influence: You're comfortable acting as an internal security consultant, advising teams, challenging technical decisions constructively, and influencing stakeholders without direct authority. - 🎯 Risk Remediation & Ownership: You've helped secure systems you don't directly own, translating security findings into actionable requirements and working with responsible teams to ensure effective remediation. - 🤖 AI & LLM Fluency: You're comfortable using LLM-assisted tooling and understand its limitations, security implications, and potential failure modes. - ✍️ Clear Communication: You can explain complex security risks, document technical findings, and provide practical guidance that engineers and non-technical stakeholders can confidently act on. You also bring deep expertise in at least two of the following areas: - 💻 Application Security: You've developed security checks, engineering guardrails, tooling, or guidance that helps product teams build and ship secure software. - ☁️ Platform Security: You have experience securing a major cloud provider and Kubernetes environments, including areas such as sandboxing, multi-tenancy, or identity. - 🔑 Corporate Security: You've worked on identity and access management, endpoint security, employee access lifecycles, or data access controls across corporate environments. - 🚨 Security Monitoring: You've implemented logging, protective monitoring, or security detection capabilities that support effective investigation and incident response. - 📋 Security Assurance & Compliance: You've supported SOC 2 or ISO 27001 from an engineering perspective, including implementing technical controls or automating compliance evidence collection. NICE-TO-HAVES - 🐛 Vulnerability Disclosure: You've helped operate bug bounty or coordinated vulnerability disclosure programmes, including publishing security advisories such as GHSAs or CVEs. - 🧠 AI & Agent Security: You have experience assessing or securing LLM-powered applications and AI agents, including risks related to permissions, tool access, prompt injection, or sensitive data. - 🏢 Corporate IT Tooling: You're familiar with platforms such as Okta, Azure, or Drata and their role in securing corporate systems and supporting compliance. - 🌍 Open-source Ecosystems: You've worked with open-source or source-available products, contributed to security communities, or are already familiar with n8n. - 🎯 Penetration Testing: You have practical penetration testing experience and can independently identify, demonstrate, and help remediate security vulnerabilities. - 🌱 Early-stage Security Experience: You've been an early security hire or helped establish security practices in a startup or rapidly scaling organisation. Why join us? At n8n, you'll help shape security at a defining stage of our growth. We're building a security practice that goes beyond reacting to vulnerabilities, and you'll play a key role in how we identify risks, influence engineering decisions, and establish security practices that scale with the business. You'll work across a broad range of challenges, from securing AI-powered product features and our source-available automation platform to improving corporate security, strengthening incident readiness, and making compliance more automated. You'll have direct exposure to teams across the company, the opportunity to influence important technical decisions, and the autonomy to turn your expertise into measurable security improvements. Sound like a challenge you're excited to take on? Apply now — and help us build the future of secure automation. n8n is an equal opportunity employer and does not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, gender identity, age, marital status, veteran status, or disability status. We can sponsor visas to Germany; for any other country, you need to have existing right to work. Our company language is English. You care about diversity and inclusion? We do too! Check out our Diversity, Inclusion and Belonging initiatives at n8n https://www.notion.so/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35?pvs=21 (https://www.notion.so/n8n/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35). Location disclaimer: If you see multiple job postings for the same role, it is most likely because we're hiring remotely for this role and posting in different locations to make sure every potential candidate can see the role. Please apply to the location you're the most likely to work from in the future. BENEFITS - Competitive compensation 💸 – We offer fair and attractive pay. - Ownership 💪 – Our core value is to “empower others,” and we mean it—you’ll get a slice of n8n with equity. - Work/life balance 🏖️ – We work hard but ensure you have time to recharge: - Europe: 30 days of vacation, plus public holidays wherever you are. - US: 20 vacation days, 8 sick days, plus public holidays wherever you are. - Health & wellness 🩺 – - Europe: We provide benefits according to local country norms.* - US: Multiple low-premium, low-deductible medical plans with coverage for individuals and families—plus a no-cost premium HDHP option with a pre-seeded HSA—along with dental and vision coverage. - Future planning 💰 – - Europe: We provide pension contributions according to local country norms.* - US: 401(k) retirement plan with a 4% employer match. - Financial security 🛡️ – - Europe: We provide benefits according to local country norms.* - US: Company-paid short-term and long-term disability insurance, plus life insurance to support you and your loved ones. - Career growth 📈 – We hire rising stars who grow with us! You’ll get €1K (or equivalent) per year to spend on courses, books, events, or coaching to level up your skills. - A passionate team 🤩 – We love our product, and we prove it with regular hackathons where we see who can build the coolest thing with it! - Remote-first 🌏 – Our team works remotely across Europe, with regular off-sites for team bonding. Some roles, like sales in the US, are hybrid—please check the job description. - Giving back 🤝 – We're big fans of open source, and you'll get $100 per month to support projects you care about. - Transparency 🙏 – We all know what everyone’s working on, how the company is doing—the whole shebang. *Country and/or State specific details provided in your employment agreement.

-Assist in developing secure software – write and optimise Rust code to build security-critical components and tools. -Code auditing & vulnerability analysis – perform deep manual and automated code reviews to identify and mitigate security vulnerabilities.

As a Cyber Defense Engineer on our Cyber Defense Operations team, you will serve as a front-line defender responsible for protecting both BeyondTrust’s enterprise infrastructure and the integrity of the products our customers depend on. 4+ years of experience in a SOC, security operations, or incident response role.

• Выполнять задачи по исследованию безопасности одного из популярных браузеров, проверять имеющиеся уязвимости и proof-of-concepts на эксплуатируемость, писать рабочие эксплоиты, объединять эксплоиты в цепочки. • Участвовать в процессе тестирования готовых эксплоитов, модифицировать и обновлять их при выходе новых версий ПО.