Кибербезопасность вакансии

• Выполнять задачи, ставящиеся перед командой, включая исследование ядра iOS, реверс-инжиниринг компонентов с закрытым исходным кодом, отладку смартфонов, проверку имеющихся уязвимостей и proof-of-concepts на эксплуатируемость, написание рабочих эксплоитов, объединение эксплоитов в цепочки.

Самостоятельное выявление угроз, анализ рисков, расследование инцидентов и внедрение технических мер защиты. • Опыт в Cybersecurity / Information Security от 3 лет.

Location: Global Remote Workplace: remote Metabase is the easiest way for people to get insights from their data, from tiny startups who get up and running quickly to major corporations with tens of thousands of users. That's why people love us.   We bring data tools with the elegance and simplicity of consumer products to the crufty world of enterprise business intelligence. We provide an opinionated open source starting point for how companies should measure, analyze and share their data, which is used by tens of thousands of companies. About the Role We’re looking for a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them. Embedded in our core engineering team, you’ll help shape security decisions from early design through release and adoption. This is a hands-on engineering and research role: you’ll combine your security expertise with frontier AI tools to find vulnerabilities, develop fixes, and make Metabase secure by default across its product, dependencies, and runtime. Things you’ll do Partner with engineers throughout feature development, bringing security expertise to design, implementation, release, and adoption. Build security-focused features, lead security improvements across the codebase, and implement fixes that address root causes. Use and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices. Conduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities. Assess findings based on exploitability and real-world impact, define clear remediation criteria, and verify that fixes are effective. Turn individual findings into broader improvements that prevent entire classes of vulnerabilities. What you bring A demonstrated track record of finding and exploiting application vulnerabilities through source code analysis and hands-on research. The ability to independently navigate unfamiliar codebases, understand complex architectures, and reason about runtime behavior and trust boundaries. Experience with application security challenges, including authentication, authorization, injection, and unsafe handling of untrusted data. Sound judgment about exploitability and real-world impact, and the ability to communicate findings and remediation options clearly. Strong software engineering skills, including the ability to implement durable security fixes. Experience in Clojure, or a strong desire to learn. A thoughtful approach to AI-assisted security work, using these tools to extend your expertise while independently validating their output. Ownership and curiosity: you pursue difficult questions, collaborate closely with engineers, and follow findings through to resolution. Compensation The US base salary range for this role is $160K–$225K annually, plus equity and benefits. Compensation is determined by role, level, location, and individual qualifications, including skills, experience, and scope of responsibility. Pay may vary by geographic location and other job-related factors. Benefits We offer meaningful equity and a comprehensive US benefits package, including fully employer-covered medical, dental, and vision insurance (with 75% coverage for dependents), a 401(k) with employer match available to enroll after the first 30 days, flexible and unlimited paid time off including sick time, and an asynchronous, remote-first environment. We're a global team (50% outside the US), fully distributed (from Thailand to California), who get things done asynchronously, with plenty of uninterrupted time, supporting each other to do the best work of our careers. We offer flexibility (define your own schedule and work from wherever you want), autonomy, and an environment that fosters growth, learning, and development. We're relentlessly user-focused and believe in building long-term value, not short-term hacks. And we raised a $30M Series B to take our approach to the next level for years to come.   For U.S. applicants: Metabase participates in the federal E-Verify program, which confirms employment authorization of newly hired U.S. based employees. E-Verify is not used as a tool to pre-screen candidates and is only initiated upon hire.   E-Verify Participation Notice (English/Spanish) Right to Work Notice (English/Spanish)

🔎 Maqsad: Maqsadim kursni bemalol real ish praktikasiga tayyor boʻlib tugatish uzi biror nimaga erishgan ustoz bilan birga ishlash.

Ищем сильного Security Engineer с практическим опытом защиты инфраструктуры, расследования инцидентов и проектирования архитектуры безопасности. • Опыт в Cybersecurity / Information Security от 3 лет.

-Встраивать и сопровождать процессы SSDLC / DevSecOps в CI/CD. -Настраивать и развивать инструменты SAST, DAST, SCA, Secret Detection, снижать количество ложных срабатываний.

-Programming experience in Python, Rust, C++, or Solidity. -Experience using Generative AI tooling such as Claude Code, Codex, Cursor, or similar Large Language Model (LLM) tools.

We’re looking for an experienced Cybersecurity Specialist to protect and strengthen the company’s infrastructure, networks, cloud services, and web applications. We’re looking for a hands-on professional who can independently assess risks, investigate security incidents, implement Zero Trust solutions, and ensure the security of critical infrastructure.

Задачи: — расследование нелегальных сетей — построение интеллектуальных конвейеров на базе искусственного интеллекта Требования: — опыт работы с расследованиями финансовых преступлений, отмыванием денег, нелегальными азартными играми, подпольным банкингом — знание OSINT и методов анализа угроз — опыт работы с блокчейн-интеллектом и крипторасследованиями — владение английским языком — знание китайского (мандарин) будет преимуществом Условия: — удалённая работа

Location: Berlin Office; Bosnia; Norway; Estonia; Latvia; Slovenia; Netherlands; Hungary; Kosovo; Portugal; Poland; Serbia; Germany; Austria; Finland; Montenegro; Albania; Lithuania; Slovakia; Ireland; Bulgaria; Denmark; Belgium; Czech Republic; United Kingdom; Croatia; Spain; Greece Workplace: Remote The AI orchestration of your wildest imagination. n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits. Backed by a fiercely inventive community and 500+ builder-approved integrations, we’re changing the way people bring systems together and scale ideas for impact. Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve: - Cultivated a community of more than 650,000 active developers and builders - Earned 190K+ GitHub stars, making us one of the world’s Top 40 most popular projects - Backed by top investors, from Sequoia’s first German seed to our SAP's recent strategic investment - bringing us to a $5.2bn valuation That’s the company we’ve built. Now we’d love to see what you can build. If you’re applying, try n8n out - whether you’re technical or not - and share a screenshot of your first workflow with us. The easiest place to start is here: app.n8n.cloud/register http://app.n8n.cloud/register. We’re in a defining moment of an incredible journey. Come and build with us. 🎯 Your main goal will be to identify and reduce security risks across n8n's product and internal systems, using threat modelling, hands-on security expertise, and cross-functional collaboration to help teams design, build, and operate more secure systems. You'll join our growing security team at a pivotal stage, acting as a trusted security partner to teams across the business. You'll help us build a move from reactive security management to a proactive, scalable security practice. Here's what you'll be driving: THREAT MODELLING, RISK ASSESSMENT & SECURITY DESIGN - Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems, identifying vulnerabilities and recommending practical mitigations. - Partner with Engineering, Cloud, IT, and Data teams to review security designs, define actionable security requirements, and influence the implementation of appropriate controls. - Help teams embed security into their development processes through secure coding guidance, design reviews, documentation, and security tooling that enables them to identify and address risks independently. VULNERABILITY MANAGEMENT & COORDINATED DISCLOSURE - Participate in the security triage rotation, assessing incoming vulnerability reports, validating findings, and prioritising remediation based on severity and business impact. - Collaborate with engineering teams to coordinate vulnerability remediation, verify fixes, and support secure patch and release processes. - Help manage our vulnerability disclosure and bug bounty programmes, including engagement with security researchers, coordinated disclosures, and GitHub Security Advisories. SECURITY OPERATIONS & INCIDENT READINESS - Help establish and improve logging, detection, and protective monitoring capabilities across our infrastructure, corporate systems, and internal applications. - Develop and improve incident response processes, runbooks, and exercises to strengthen our ability to detect, investigate, and respond to security incidents. - Work closely with system owners to identify security gaps, prioritise remediation, and verify that implemented controls effectively reduce risk. CUSTOMER TRUST & COMPLIANCE ENGINEERING - Support SOC 2 compliance by helping establish continuous control monitoring, automated evidence collection, and processes that make security assurance part of everyday operations. - Collaborate with Sales, Solutions Engineering, and Customer Success to respond to customer security assessments and build reusable resources that streamline future requests. - Partner with Legal, Finance, IT, and other stakeholders to assess security risks, improve security policies and controls, and strengthen trust with enterprise customers. We're hiring two Security Engineers with complementary strengths, so you don't need to be an expert in every security domain. REQUIREMENTS MUST-HAVES - 🔍 Threat Modelling & Risk Assessment: You have hands-on experience assessing real-world systems, identifying security risks, determining defensible severity levels, and recommending practical controls that teams can implement. - 🛠️ Technical Security Expertise: You can validate security findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation when needed to demonstrate risks or improve security processes. - 🔐 Security Engineering Experience: You've worked hands-on in infrastructure, product, or application security within a product-focused organisation, with a strong understanding of how modern systems are designed and secured. - 🤝 Cross-functional Influence: You're comfortable acting as an internal security consultant, advising teams, challenging technical decisions constructively, and influencing stakeholders without direct authority. - 🎯 Risk Remediation & Ownership: You've helped secure systems you don't directly own, translating security findings into actionable requirements and working with responsible teams to ensure effective remediation. - 🤖 AI & LLM Fluency: You're comfortable using LLM-assisted tooling and understand its limitations, security implications, and potential failure modes. - ✍️ Clear Communication: You can explain complex security risks, document technical findings, and provide practical guidance that engineers and non-technical stakeholders can confidently act on. You also bring deep expertise in at least two of the following areas: - 💻 Application Security: You've developed security checks, engineering guardrails, tooling, or guidance that helps product teams build and ship secure software. - ☁️ Platform Security: You have experience securing a major cloud provider and Kubernetes environments, including areas such as sandboxing, multi-tenancy, or identity. - 🔑 Corporate Security: You've worked on identity and access management, endpoint security, employee access lifecycles, or data access controls across corporate environments. - 🚨 Security Monitoring: You've implemented logging, protective monitoring, or security detection capabilities that support effective investigation and incident response. - 📋 Security Assurance & Compliance: You've supported SOC 2 or ISO 27001 from an engineering perspective, including implementing technical controls or automating compliance evidence collection. NICE-TO-HAVES - 🐛 Vulnerability Disclosure: You've helped operate bug bounty or coordinated vulnerability disclosure programmes, including publishing security advisories such as GHSAs or CVEs. - 🧠 AI & Agent Security: You have experience assessing or securing LLM-powered applications and AI agents, including risks related to permissions, tool access, prompt injection, or sensitive data. - 🏢 Corporate IT Tooling: You're familiar with platforms such as Okta, Azure, or Drata and their role in securing corporate systems and supporting compliance. - 🌍 Open-source Ecosystems: You've worked with open-source or source-available products, contributed to security communities, or are already familiar with n8n. - 🎯 Penetration Testing: You have practical penetration testing experience and can independently identify, demonstrate, and help remediate security vulnerabilities. - 🌱 Early-stage Security Experience: You've been an early security hire or helped establish security practices in a startup or rapidly scaling organisation. Why join us? At n8n, you'll help shape security at a defining stage of our growth. We're building a security practice that goes beyond reacting to vulnerabilities, and you'll play a key role in how we identify risks, influence engineering decisions, and establish security practices that scale with the business. You'll work across a broad range of challenges, from securing AI-powered product features and our source-available automation platform to improving corporate security, strengthening incident readiness, and making compliance more automated. You'll have direct exposure to teams across the company, the opportunity to influence important technical decisions, and the autonomy to turn your expertise into measurable security improvements. Sound like a challenge you're excited to take on? Apply now — and help us build the future of secure automation. n8n is an equal opportunity employer and does not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, gender identity, age, marital status, veteran status, or disability status. We can sponsor visas to Germany; for any other country, you need to have existing right to work. Our company language is English. You care about diversity and inclusion? We do too! Check out our Diversity, Inclusion and Belonging initiatives at n8n https://www.notion.so/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35?pvs=21 (https://www.notion.so/n8n/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35). Location disclaimer: If you see multiple job postings for the same role, it is most likely because we're hiring remotely for this role and posting in different locations to make sure every potential candidate can see the role. Please apply to the location you're the most likely to work from in the future. BENEFITS - Competitive compensation 💸 – We offer fair and attractive pay. - Ownership 💪 – Our core value is to “empower others,” and we mean it—you’ll get a slice of n8n with equity. - Work/life balance 🏖️ – We work hard but ensure you have time to recharge: - Europe: 30 days of vacation, plus public holidays wherever you are. - US: 20 vacation days, 8 sick days, plus public holidays wherever you are. - Health & wellness 🩺 – - Europe: We provide benefits according to local country norms.* - US: Multiple low-premium, low-deductible medical plans with coverage for individuals and families—plus a no-cost premium HDHP option with a pre-seeded HSA—along with dental and vision coverage. - Future planning 💰 – - Europe: We provide pension contributions according to local country norms.* - US: 401(k) retirement plan with a 4% employer match. - Financial security 🛡️ – - Europe: We provide benefits according to local country norms.* - US: Company-paid short-term and long-term disability insurance, plus life insurance to support you and your loved ones. - Career growth 📈 – We hire rising stars who grow with us! You’ll get €1K (or equivalent) per year to spend on courses, books, events, or coaching to level up your skills. - A passionate team 🤩 – We love our product, and we prove it with regular hackathons where we see who can build the coolest thing with it! - Remote-first 🌏 – Our team works remotely across Europe, with regular off-sites for team bonding. Some roles, like sales in the US, are hybrid—please check the job description. - Giving back 🤝 – We're big fans of open source, and you'll get $100 per month to support projects you care about. - Transparency 🙏 – We all know what everyone’s working on, how the company is doing—the whole shebang. *Country and/or State specific details provided in your employment agreement.

Location: Budapest WorldQuant develops and deploys systematic financial strategies across a broad range of asset classes and global markets. We seek to produce high-quality predictive signals (alphas) through our proprietary research platform to employ financial strategies focused on market inefficiencies. Our teams work collaboratively to drive the production of alphas and financial strategies – the foundation of a balanced, global investment platform. WorldQuant is built on a culture that pairs academic sensibility with accountability for results. Employees are encouraged to think openly about problems, balancing intellectualism and practicality. Excellent ideas come from anyone, anywhere. Employees are encouraged to challenge conventional thinking and possess an attitude of continuous improvement. Our goal is to hire the best and the brightest. We value intellectual horsepower first and foremost, and people who demonstrate an outstanding talent. There is no roadmap to future success, so we need people who can help us build it. Technologists at WorldQuant research, design, code, test and deploy firmwide platforms and tooling while working collaboratively with researchers and portfolio managers. Our environment is relaxed yet intellectually driven. We seek people who think in code and are motivated by being around like-minded people. The Role : We are seeking a diligent and driven security operations specialist with strong hands-on technical skills, proven problem solving ability and excellent communication skills. As an security operations specialist at WorldQuant you will work closely with our technologists, researchers and portfolio managers to ensure systems are following best practices, perform incident response, provide patch and vulnerability remediation guidance, and support the identity and authorization infrastructure of the firm. Responsibilities (including but limited to): Research CVEs and other threat intelligence to formulate and deploy a response Operate and manage WorldQuant’s secrets and authentication management tool instances Develop tooling for continuous audit, code analysis and other security analysis activities Monitor and operate detection tools and respond to identified security issues in the environment Provide operational support for Authentication, Identity and other security infrastructure. Operate and improve the firms security monitoring and detection and infrastructure Provide customers support for foundational components such as Kerberos, SSH, SSL and more. Requirements : Degree in a technical or quantitative discipline from a top tier University Solid understanding of UNIX security. Knowledge of industry standard tools beneficial - (eg gitlab, nix, redhat linux, claude, jira, etc) Scripting experience, preferably in python. Experience operating security infrastructure, developing integrations of security products. Ability to communicate and design solutions related to security from first principles. Experience with Linux, Kerberos, SSL, SSH and  Active Directory Experience with agentic development Strong verbal and written communication skills in English What We Offer: Competitive compensation package Core benefits include: premium private health insurance and life insurance with savings plan Support for every aspect of life through Employee Assistance Program and fully covered sick leave Strong culture of learning and development: training courses, library, guest speakers, share and learn events, global conferences Regular offsite team buildings, annual conferences and occasional global summits – opportunity to travel and connect with our local and global teams Employee resources groups with strong diversity and inclusion culture #LI-DN1 By submitting this application, you acknowledge and consent to terms of the WorldQuant Privacy Policy. The privacy policy offers an explanation of how and why your data will be collected, how it will be used and disclosed, how it will be retained and secured, and what legal rights are associated with that data (including the rights of access, correction, and deletion). The policy also describes legal and contractual limitations on these rights. The specific rights and obligations of individuals living and working in different areas may vary by jurisdiction. Copyright © 2025 WorldQuant, LLC. All Rights Reserved. WorldQuant is an equal opportunity employer and does not discriminate in hiring on the basis of race, color, creed, religion, sex, sexual orientation or preference, age, marital status, citizenship, national origin, disability, military status, genetic predisposition or carrier status, or any other protected characteristic as established by applicable law.

-Assist in developing secure software – write and optimise Rust code to build security-critical components and tools. -Code auditing & vulnerability analysis – perform deep manual and automated code reviews to identify and mitigate security vulnerabilities.

🔎 Maqsad: Kiberxavfsizlikka qiziqqan boshlovchilarga linux, windows, networking va cybersecurity fundamentals bo‘yicha amaliy bilim berish. nazariyani emas, real laboratoriya va amaliy mashg‘ulotlar orqali o‘rgatib, shogirdni mustaqil ishlay oladigan darajaga olib chiqish.

Figure is looking for a Security Engineer Intern to assess systems and build security and privacy controls.

Applied Intuition is looking for a Cybersecurity Software Engineer to help secure vehicle platforms through assessments, secure boot, HSM integration, and cross-functional security work.

Задачи: — Ручное тестирование веб-приложений на наличие уязвимостей (Black box, Grey box) — Поиск и эксплуатация SQLi, LFI/RFI, SSRF, SSTI, Command Injection и других классических веб-уязвимостей — Работа с Burp Suite: перехват и модификация запросов, Intruder, Repeater, расширения — Обход WAF: ручной тамперинг, подбор и написание tamper-скриптов — Работа с автоматизированными инструментами: sqlmap, ghauri — с пониманием того, что происходит под капотом — Написание понятных отчётов с PoC, оценкой критичности и рекомендациями по устранению Требования: — Уверенное понимание веб-уязвимостей: SQL Injection (включая blind boolean/time-based), LFI/RFI, SSRF, SSTI, CMDi — как возникают и как ищутся на практике — Знание специфики основных СУБД: MySQL, PostgreSQL, MSSQL — Опыт работы с Burp Suite (Intercept, Repeater, Intruder, расширения) — Базовые навыки Linux: навигация, права, процессы, сеть — Понимание принципов работы sqlmap и ghauri — Базовый опыт с шеллами и реверс-шеллами Будет плюсом: — Прохождение PortSwigger Web Security Academy — Активность на HackTheBox / TryHackMe — Опыт написания tamper-скриптов или расширений для Burp — Понимание работы WAF и механизмов их обхода Условия: — Офис рядом с м. Новочеркасская — Обеды за счёт компании — Зарплата без потолка — обсуждаем под ваш реальный уровень — Молодой и дружный коллектив — Работа с реальными коммерческими проектами Как откликнуться: — Напишите в Telegram: @danilov_danil03 — Расскажите коротко о себе: над чем работали, что проходили — Приложите GitHub, writeup'ы, статьи или разборы ВПО — всё это будет плюсом.

As a Cyber Defense Engineer on our Cyber Defense Operations team, you will serve as a front-line defender responsible for protecting both BeyondTrust’s enterprise infrastructure and the integrity of the products our customers depend on. 4+ years of experience in a SOC, security operations, or incident response role.

• Выполнять задачи по исследованию безопасности одного из популярных браузеров, проверять имеющиеся уязвимости и proof-of-concepts на эксплуатируемость, писать рабочие эксплоиты, объединять эксплоиты в цепочки. • Участвовать в процессе тестирования готовых эксплоитов, модифицировать и обновлять их при выходе новых версий ПО.