Location: Amsterdam, Netherlands; Berlin, Germany; Limassol, Cyprus; London, United Kingdom; Madrid, Spain; Munich, Germany; Paphos, Cyprus; Prague, Czech Republic; Warsaw, Poland; Yerevan, Armenia
JetBrains builds world-class developer tools trusted by 11 million users, including 88 Fortune Global Top 100 companies. As we accelerate our global growth, we’re expanding the Compliance department to keep revenue flowing smoothly and securely.
About the role:
Co-lead JetBrains’
global export controls
&
sanctions program
. Drive compliance with EU and U.S. export controls and manage risks with emerging AI-related controls. Enable secure global sales while protecting the company from regulatory and reputational risk.
What you’ll do:
Co-lead export controls & sanctions
program of the group.
Monitor and interpret EU/U.S. export controls, sanctions, and enforcement trends.
Own classification, licensing, and technology-transfer processes.
Advise on higher-risk transactions, strategic deals, M&A, market entry, and technology partner onboarding.
Build and refine workflows, documentation, and automation for trade compliance.
Act as an escalation point for restricted countries, entities, and high-risk reviews.
Collaborate with Legal, Sales, Product, Procurement, Finance, and Security on cross-border compliance matters.
Assist and drive sanctions & export control-related investigations & concern reviews.
What you bring
8+ years of on-hands EU & U.S.
trade compliance
experience in a tech or global software environment
Strong command of EU export control regulations (EUDU), EAR (including de minimis, FDPR, AI related) and sanctions regimes.
Ability to interpret technical software/AI features for export classification.
Pragmatic, business-oriented judgment; excellent communication skills; fluent English.
What we offer:
A competitive salary, annual bonus, and a wide range of benefits.
Flexible hybrid work.
Modern offices with ergonomic workspaces, massages, on-site parking, and snacks.
Annual wellness allowance and a professional development budget for conferences, certifications, and leadership coaching.
An open, engineering-driven culture where the Legal & Compliance team is viewed as a strategic business partner.
We welcome applicants with diverse backgrounds regardless of their gender, ethnicity, religion, disability, sexual orientation, or age.
Why join JetBrains?
Strong base salary. We offer competitive pay that reflects your skills and experience.
Flexible work location. Enjoy the freedom to work from home or from the office.
Remote work. Spend up to 30 days per year working remotely from abroad.
Extra time off. More days to relax, recharge, and do the things you love.
Medical insurance allowance. Enjoy peace of mind for you and your family.
Learning and development opportunities. Access to conferences, courses, and language classes.
Language classes. Pick up the local language or sharpen your English skills.
Fuel your day. Enjoy a hot meal or receive a lunch allowance on workdays.
Mental health support. To help you feel your best, we provide easy access to professional mental health services.
Sports benefit. Enjoy an on-site gym or sports club stipend.
Internal events. Join company-wide celebrations and team gatherings.
*Some benefits may vary depending on location.
#LI-HYBRID
#LI-MH2
We are an equal opportunity employer
We know great ideas can come from anyone, anywhere. That’s why we do our best to create an open and inclusive workplace – one that welcomes everyone regardless of their background, identity, religion, age, accessibility needs, or orientation.
We process the data provided in your job application in accordance with the
Recruitment Privacy Policy.
Location: Home based - Worldwide
We have opened several senior/staff Security Operations Engineer (SOC) positions, creating a new team reporting to the CISO. We are looking for a range of experience in these positions - at the high end we are looking for deep experience defending highly contested critical assets and high-value cyber targets against advanced persistent threats and state-level actors. We have more junior roles for exceptional individuals with a proven personal interest an engagement in cyber attack and defence, and outstanding academic and career performance even if experience is limited.
Our goal is to build an entirely new level of assurance and observable rigour into the open source supply chain. We have our own estate to monitor, but more broadly our goal is to raise the robustness of the entire global Ubuntu estate through the work of this team.
The Security Operations (SecOps) team is responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our own infrastructure and product deployments. They design and implement technical security controls that ensure security threats are automatically identified, contained and remediated. The team will also contribute ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attack.
The SecOps team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.
What you will do in this role:
Implement and evolve Canonical's SecOps security standards and playbooks
Analyse and improve Canonical's security architecture
Evaluate, select and implement new security tools and practices
Identify, contain and guide the remediation of security threats and cyber attacks
Grow the presence and thought leadership of Canonical SecOps practice
Contribute to open source threat intelligence initiatives
Drive threat modelling, table top exercises and other SecOps practices across Engineering, IS and Canonical
Develop Canonical SecOps learning and development materials
Publish blog posts, whitepapers and conference presentations
Identify, implement and track SecOps KPIs
Plan and deliver SecOps work in the framework of Canonical's agile engineering practice
Work with Security leadership to present information and influence change
What we are looking for
An exceptional academic track record
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
Deep personal motivation to be at the forefront of technology security
Expertise in threat modelling and risk management frameworks
Knowledge of security architecture and market-leading security tools
Experience contributing to, and consuming, threat intelligence feeds
Experience in security risk management frameworks such as NIST CSF
Experience with security standards such as ISO 27001
Optional things we value
Experience in a security operations team or a security operations centre (SOC)
Experience in offensive or defensive security teams with hands-on ability
Experience with state-actor and other advanced persistent threats
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
The Canonical Security Operations team is hiring for a Senior or Staff engineer. The Security Operations team is responsible for designing, building, and operating a world-class Security Operations Center, and the successful candidate will provide leadership, mentorship, expertise, and outstanding individual contributions towards those ends.
This role involves aspects of:
Traditional SOC duties - security monitoring, threat hunting, and response.
Security engineering - assessing and protecting Canonical platforms and products.
Software engineering - building custom tools and platforms.
Site reliability engineering - deploying, maintaining, and automating security tools.
We are looking for individuals with engineering and security experience, as well as a history of remarkable achievement. Senior security operations personnel with engineering experience and senior developers with security experience are equally well-suited to this role.
Beyond securing Canonical’s digital estate, this position represents a unique opportunity to contribute to the open source ecosystem. Team members may present at industry conferences, share threat intelligence with the wider community, or publish open source security software.
Junior positions are also available for less-experienced individuals with a compelling academic or professional background.
In this role, you will:
Provide operational and engineering leadership.
Implement and evolve Canonical’s Security Operations Center.
Design and develop security software and platforms.
Monitor for, identify, respond to, and remediate security incidents.
Assess and improve Canonical’s security controls.
Mentor early-career Security Operations engineers.
Plan and deliver work within Canonical's agile engineering framework.
Contribute to open source security.
Publish blog posts, whitepapers and conference presentations.
We are looking for:
An exceptional academic track record.
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path.
10+ years of relevant professional experience
Professional cybersecurity experience, preferably working or leading a Security Operations Center.
Professional engineering experience.
An eagerness to contribute to open source security.
Proficiency in common scripting languages, such as Python and Bash.
Knowledge of Git, GitOps, Infrastructure-as-Code, and common orchestration platforms (e.g., Kubernetes)
Though optional, we value:
Familiarity with security frameworks such as the NIST CSF, CIS CSC, and ISO 27001
Knowledge of security architecture and market-leading security tools.
Experience in a security operations team or a security operations center.
Experience in offensive or defensive security teams with hands-on ability.
Experience with advanced persistent threats.
Proficiency in additional programming languages, such as Golang.
What we offer you:
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
This global leadership role in cyber security is to manage the Security Operations (SecOps) team responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our own infrastructure and product deployments. They design and implement technical security controls that ensure security threats are automatically identified, contained and remediated. The team will also contribute ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attack.
As a leader on cyber security in the company, the SecOps team manager will collaborate with our Organisational Learning and Development team to develop playbooks and facilitate SecOps training across Canonical. They will operate in a wider security organisation, run a high performing security team and improve Canonical's security posture. They will lead initiatives to integrate the team's insights into Canonical's broader software development process.
While this is a management position, we expect managers to be expert practitioners, able to lead by example, contribute at the highest level, and assess work based on their own professional experience and skill. Candidates should have deep, hands-on expertise with a range of open source and proprietary security tooling and practices, which they can integrate into a holistic next generation security solution across the breadth of Canonical's interests.
The SecOps team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.
This role reports to the CISO.
What you will do in this role:
Hire and mentor a team of outstanding technical security professionals
Define Canonical's SecOps security standards and playbooks
Own and drive the architecture and design of the SOC
Analyse and improve Canonical's security architecture
Evaluate, select and implement new security tools and practices
Identify, contain and guide the remediation of security threats and cyber attacks
Grow the presence and thought leadership of Canonical SecOps practice
Contribute to open source threat intelligence initiatives
Drive threat modelling, table top exercises and other SecOps practices across Engineering, IS and Canonical
Develop Canonical SecOps learning and development materials
Publish blog posts, whitepapers and conference presentations
Identify, implement and track SecOps KPIs
Plan and deliver SecOps work in the framework of Canonical's agile engineering practice
Work with Security leadership to present information and influence change
What we are looking for
Proven track record of mitigating with advanced threat actors and nation state threats
Expert technical understanding of SOCs from the ground up
In depth knowledge of SOC architecture and design including strategies for logging, firewalls, network segmentation, honeypots etc
Someone who understands how the SOC works not just how to use it
Expert in Linux security
Ability to define, implement, automate and measure effective incident response playbooks
Knowledge of security architecture and market-leading security tools
Experience contributing to, and consuming, threat intelligence feeds
Experience in security risk management frameworks such as NIST CSF
An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
Deep personal motivation to be at the forefront of technology security
Leadership and management ability
Excellent business English writing and presentation skills
Confidence to report security performance metrics with accountability for accuracy and completeness
Optional things we value
Experience in offensive or defensive security teams with hands-on ability
Experience with open source security tools
Experience with security standards such as ISO 27001
Experience with security posture management of corporate endpoitns
Location: Athens; Thessaloniki
Workplace: onsite
The Role:
As a Junior Systems Monitoring Officer working within our team, you will be responsible for managing a variety of risks for the company, relating to our systems and the various products we offer to our clients and partners. Using in-house tools and reports, you will monitor and evaluate client behaviour, analyse and evaluate the products we offer, and take initiative to help improve on the current tools, reports and procedures used and followed by the department.
The main responsibilities of the position include:
Monitor the system used by the department and analyse various reports
Conduct reviews and investigations of client activity
Monitor and ensure swift actions are being taken to manage a range of risks
Identify, examine, and report any suspicious activities related to the violation of the Terms and Conditions or the company
Work with other departments to perform daily duties and to achieve common goals
Stay up to date with market and economic developments
Main requirements:
BSc/MSc in Mathematics, Statistics, Economics, or any other relevant field (first or upper second-class honours)
Strong analytical skills
Organised and methodical personality, high attention to detail
Excellent oral and written communication skills in English
Excellent working knowledge of Microsoft Office tools
Ability to work on a well-structured, rotating shift schedule, including weekends
Benefit from:
Attractive remuneration package
Private health insurance
Corporate pension fund
Intellectually stimulating work environment
Continuous personal development and international training opportunities
The Hiring Experience: What Awaits You
Let’s Connect – Intro Chat with Talent Acquisition
Deep Dive – First Interview with Your Future Team
Test your edge – Aptitude Assessment
Final Connection – Final Interview
All applications will be treated with strict confidentiality!
By submitting this application, I confirm that I have read and agree to the terms of the Privacy Policy and the Confidentiality Undertaking.
Location: Home based - Worldwide
This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and remain compliant to international information security standards such as FIPS 140-3 and Common Criteria. You will use your applied cryptography, Linux Security, and coding skills to enhance the Ubuntu distribution and work with organizations such as DISA and CIS to draft and implement security hardening benchmarks for Ubuntu.
As a member of the Security Hardening team you will work with and develop automation tooling to audit deployed systems for DISA-STIG and CIS benchmark compliance. You will interact with internal and external stakeholders to identify gaps in our frameworks, and develop new solutions to address these challenges. In this role you will have the opportunity to influence team and security culture, facilitate technical delivery, and help drive team direction and execution. You’ll collaborate closely with Canonical’s kernel team as well as the wider engineering organization to drive features impacting all Ubuntu users.
Day-to-day responsibilities
Collaborate with other engineers in the Security Hardening team to achieve and retain various Security certifications
Extend and enhance Linux cryptographic components (OpenSSL, Libgcrypt, GnuTLS, and others) with the features and functionality required for FIPS and CC certification
Collaborate with external security consultants to test and validate kernel and crypto module components
Work with external partners to develop security hardening benchmarks and audit + remediation automation for Ubuntu
Contribute to Ubuntu mainline and upstream projects to land solutions and benefit the community
Communication and collaboration within and outside Canonical to identify opportunities to improve our security posture, rapidly resolve issues, and deliver high-quality solutions on schedule
What we are looking for in you
Hands-on experience with low-level Linux cryptography APIs and debugging
Excellent software engineering fundamentals, including prior experience with C development, and the ability to demonstrate such
Hands-on experience with Linux system administration and shell scripting
Demonstrated knowledge of security and cryptography fundamentals + direct experience writing secure code and implementing best practices
Significant development experience working with open source libraries
Excellent verbal and written communications to enable efficient collaboration with internal and external partners in a remote-first environment
Additional skills that you might also bring
Prior experience working on FIPS/Common Criteria certified products and in-depth knowledge of the underlying standards
Prior experience working directly with DISA-STIG or CIS benchmarks, including related audit + remediation tooling (e.g. Compliance as Code)
Experience working directly with Linux Kernel
Prior experience with Python, OVAL (Open Vulnerability Assessment Language), and Ansible
History of contributions to open source projects
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person - we’ve been working remotely since 2004!
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues from your team and others
Priority Pass for travel and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm that is at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do.
Canonical has been a remote-first company since its inception in 2004. Work at Canonical is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical provides a unique window into the world of 21st-century digital business.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-Remote
Location: Home based - Worldwide
Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office-based roles. Teams meet two to four times yearly in person, in interesting locations around the world, to align on strategy and execution.
The company is founder-led, profitable, and growing.
Canonical is building a team dedicated to providing security coverage across a wide range of ecosystems and environments, working to make the world a better, safer place. We are hiring an Ubuntu Security Engineer to join an industry-leading security engineering team and help protect the open source community and Ubuntu users from emerging threats. We are looking for candidates across all levels of experience, from Graduate to Senior.
As part of the Ubuntu Security Team, you will work with some of the best and brightest people in technology to monitor, triage, respond to, and document new and existing vulnerabilities in open source software. You will collaborate with internal teams and external partners to identify issues, prioritize them, and coordinate remediation.
This is an engineering-focused role that may also involve activities such as producing security assessments, building features, conducting code reviews, developing internal tools, engaging with the open source community, and participating in industry initiatives and events.
This role requires international travel at least twice a year, usually for one week. It also requires the ability to be productive in a globally distributed team through self-discipline and self-motivation.
Location: Worldwide, this is a globally remote role
The role entails
Analyzing, fixing, and testing vulnerabilities in open source packages
Keeping track of vulnerabilities in the Ubuntu ecosystem as they are discovered, researched, and fixed, leveraging internal tools
Collaborating with other teams in the Ubuntu community and upstream developers, as needed, to exchange or develop vulnerability patches and ensure that Ubuntu includes the most robust security features
Auditing source code for vulnerabilities
Building features and tools to help teams strengthen the security of their products and contribute to the overall security of Ubuntu
What we are looking for in you
You have a thorough understanding of the common categories of security vulnerabilities and techniques for fixing them
You are familiar with coordinated disclosure practices
You are familiar with open source development tools and methodologies
You are skilled in one or more of C, Python, Go, Rust, Java, Ruby, PHP or JavaScript/TypeScript
You have excellent logic, problem-solving, troubleshooting, and decision-making skills
You can clearly and effectively communicate with the team and Ubuntu community members
Experience with Linux (Debian or Ubuntu preferred)
Excellent interpersonal skills, curiosity, flexibility, and accountability
Appreciative of diversity, polite, and effective in a multi-cultural, multi-national organization
Thoughtfulness and self-motivation
Result-oriented, with a personal drive to meet commitments
What we offer colleagues
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus or commission. We provide all team members with additional benefits which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Team Member Assistance Program & Wellness Platform
Opportunity to travel to new locations to meet colleagues
Priority Pass and travel upgrades for long-haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open-source projects and the platform for AI, IoT, and the cloud, we are changing the world of software. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence; in order to succeed, we need to be the best at what we do. Most colleagues at Canonical have worked from home since our inception in 2004. Working here is a step into the future and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Remote - Worldwide
About us
OpenZeppelin is the security standard onchain finance is built on. Founded in 2015, our mission is to accelerate the world's transition to an open financial system, built on open standards and secured by rigorous research.
Our open-source Contract Libraries have facilitated over $35 trillion in onchain value and are used by 10 of the top 10 tokenized money market funds and 9 of the top 10 stablecoins by market cap.
We combine AI-native security tooling with deep research and a decade of audit expertise to support leading institutions and crypto-native teams shaping the next generation of digital assets like DTCC, Fidelity, Coinbase, Uniswap, Aave, the Ethereum Foundation, and many more across the full secure development lifecycle.
Please note:
Always refer to OpenZeppelin's official job page for the most accurate information about our open roles, as we have seen multiple third party job sites posting inaccurate information.
The Security Services Team
OpenZeppelin's Security Services team is responsible for the security of the world's leading web3 protocols and top financial institutions building onchain. Our researchers partner with client teams across the full lifecycle of a protocol: working on architecture and design before any code is written, co-creating novel mechanisms and primitives with engineering teams, conducting deep audits of pre-launch codebases, and providing continuous coverage as production systems evolve. Our clients range from emerging projects shipping their first contracts to global financial institutions running production onchain systems at scale.
What you'll be doing
Review smart contracts for top decentralized applications, blockchain infrastructure and financial institutions before they launch. Find vulnerabilities, prioritize them, and present findings to the client.
Drive audits independently from start to finish, with AI as your primary collaborator. When useful, partner with another researcher to attack the code together and pressure-test findings.
Partner with client teams during the design phase of new protocols, analyzing architecture, trust assumptions, and operational constraints before any code is written (Design Reviews, Applied Research engagements).
Use AI efficiently throughout the audit process, and build skills, agents, and workflows that compound across the team.
Conduct open-ended research into cutting-edge blockchain technologies, vulnerability classes, and emerging attack vectors, and contribute findings back to OpenZeppelin's internal knowledge base and to the broader ecosystem.
You have
Hands-on and practical experience in one or more of the following: software development, cybersecurity, applied mathematics, distributed systems, cryptography, cryptoeconomics or game theory, or DeFi mechanisms.
Experience designing and developing smart contracts, not only auditing them.
Strong working knowledge of Solidity and the broader Ethereum / EVM ecosystem (common libraries, frameworks, smart contract patterns).
Modern AI tooling is central to how you work, not a novelty. You use it daily to expand audit coverage, reason about complex systems, and produce high-quality outputs faster. You evaluate AI-generated code with a critical eye.
Comfort building and extending your own tooling (skills, agents, prompts, scripts, or full workflows) that the rest of the team can adopt and build on.
An advanced English level and strong communication skills (oral and written).
Nice to have
Experience with non-EVM ecosystems and languages, such as Canton, Move (Sui, Aptos), Golang (Cosmos SDK), Cairo (Starknet), Rust-based blockchains (Solana, Stellar), or ZK circuits and cryptography-heavy systems.
Experience with risk assessment work in the crypto industry (smart contract risk assessment, threat modeling).
Working hand-in-hand with protocol teams on co-creative engagements, helping design, specify, and implement smart contracts alongside the research.
Web2 security expertise (penetration testing, web application security, infrastructure security, or appsec).
Experience with formal verification, invariant testing, or advanced fuzzing tools (Echidna, Foundry, Halmos, Certora).
A track record in audit contests (Code4rena, Sherlock, Cantina) or bug bounty platforms (Immunefi, HackerOne).
Public security research output, such as published findings, blog posts, conference talks, or contributions to open-source security tooling.
Logistics
Our interview process takes place on Google Meet and tends to consist of the following stages:
Recruiter call (30 minutes)
Manager interview (60 minutes)
Technical interview (60 minutes)
Paid work trial (paid code review assessment)
Reference checks
Please let us know if you require any accommodations for the interview process, and we’ll do our best to provide assistance.
Benefits
Meet your teammates at company gatherings around the world 😎
Enjoy the flexibility of fully remote work 🌎
Take the time you need with flexible time off 🏝
Grow your family with 8 weeks of paid leave for primary caregivers, 4 weeks for secondary caregivers, and a one-time $3,600 baby bonus 💙
Build your ideal home office with up to $500 in equipment support 🪑
Stay covered with medical insurance 🏥
Keep growing with learning and development opportunities 🧠
Get a monthly stipend for your preferred co-working space 💻
At
OpenZeppelin
, we are an equal opportunity employer and we value different perspectives. We are committed to building a diverse workforce. This includes but is not limited to gender, race, sexual orientation, religion, national origin and other characteristics that make each one of us unique. In this uniqueness, we find the most value. Come join us!
Use of AI as part of the recruiting process
As part of OpenZeppelin’s recruitment process, we may use automated tools, including artificial intelligence, to assist in reviewing applications and assessing candidate qualifications. These tools are used to support our People team by identifying relevant skills and experience, and are not used to make decisions solely by automated means. All hiring decisions involve human review. Any personal data provided as part of your application will be processed in accordance with OpenZeppelin’s
Data Privacy Notice
.
If you have questions about this recruitment process or would like to request human review of your application, please contact us at talent@openzeppelin.com.
УдалённоМожно работать из любой страны
УдалённоseniorМожно работать из любой страны
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.