Кибербезопасность вакансии

Задачи: — Обучать основам кибербезопасности. — Помогать работать с крупными проектами. — Содействовать становлению ученика как квалифицированного специалиста в будущем. Требования: — Начальный уровень знаний в Python, PostgreSQL, Linux и сетевых технологиях. Условия: — Бесплатное наставничество. — Гибкий график, возможность обращаться 24/7. Контакт для отклика: +998 95 571 28 29 Ссылка для отклика: https://t.me/UstozShogird

Анализ кода и функциональности вредоносных объектов под Windows, Linux и macOS; Добавление записей о вредоносных объектах в антивирусные базы;

Location: Georgia; Belarus; Moldova; Serbia; Armenia; Kyrgyzstan; Montenegro; Uzbekistan; Bulgaria; Czech Republic; Estonia; Finland; Portugal; Romania; Azerbaijan Workplace: remote About the Team We are Quadcode, a fintech company excelling in financial brokerage activities and delivering advanced financial products to our global clientele. Our flagship product, an internal trading platform, is offered as a Software-as-a-Service (SaaS) solution to other brokers. We're looking for a Junior Cybersecurity Specialist to join our Security Team. This role sits within the engineering direction of our cross-functional Security team, focused on identifying and helping mitigate security issues, misconfigurations, and vulnerabilities related to corporate infrastructure. In this role, you'll work closely with infrastructure teams (Admins, NOC, OPS, IT Compliance) and business employees who require security-related help. We work in Agile (2-week sprints, grooming, planning, retro) and use Google Meet, Slack, TargetProcess and Confluence for teamwork. Working hours: Business hours, EET/EEST time zone. You'll work with a modern stack and grow within the company - including cloud and hybrid infrastructure, and AI applied to real security work. Tech Stack: Splunk, CheckPoint, Rapid7, AWS, OpenStack, Gitlab, K8s, Terraform, Ansible, Python, Linux, Windows, macOS. Tasks Proceed with requests and notifications related to the security (access management, security tool notifications, vulnerability assessment, etc.); Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to corporate infrastructure; Develop, implement new, and update existing security measures for the protection of corporate infrastructure; Support the identity and access management process; Formation of a knowledge base for the operation of products and services; Assist the security analytics with the incident response process; Collaboration with the Ops and Infrastructure teams in terms of asset security. Requirements 1+ year of experience in server administration, network engineering, site reliability engineering, infrastructure security, cloud security, or systems engineering; Knowledge of the Linux, Windows, and Mac operating systems and common OS hardening practices; Technical knowledge of network protection and network Device Hardening; Automation skills (Bash, Python); Understanding how computer attacks occur; Passion for developing in cybersecurity; Ability to work in a team, listen, and learn independently; Competent written and verbal communication skills (Russian C1 and English B1); Have a good analytical mindset for problem-solving. Nice to have Background in cybersecurity; Experience using AI tooling for technical/cybersecurity tasks; Experience in vulnerability analysis; Experience with infrastructure-as-code (Terraform, Ansible, Chef, etc.); Understanding the tactics and techniques of intruders and how to defend against them. We offer Full-time remote work (service provider contract). Competitive compensation (EUR). Flexible working hours. Corporate AI subscriptions (Claude, Gemini, GPT, etc.). Access to a rewards marketplace offering products and language courses, redeemable using the company’s internal currency. A strong team of engineers. Positive and friendly atmosphere. With a team of 500+ creative and tech-driven people across the globe, Quadcode is the place where ideas turn into impact, where every project is a chance to grow, innovate, and make your mark. Join us today, and let's shape the future of fintech together! Note: All applications will be treated with strict confidence. We thank all applicants for their interest, however, only those candidates selected for interviews will be contacted. #LI-JM1

- Manage the end-to-end transaction dispute lifecycle, including chargebacks. - Handle disputes through card network platforms, including Mastercom and Visa Resolve Online (VROL).

Own the full IAM strategy. for corporate, production, and product environments end to end, and own the bridge between corp IAM and product/prod IAM rather than treating them as separate problems.

Location: San Francisco; Remote; Toronto; New York; Montreal; Seattle Workplace: Hybrid ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F https://www.baseten.co/blog/announcing-our-series-f/, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE We are seeking an experienced and detail-oriented GRC (Governance, Risk, and Compliance) Manager to build, support, and continuously enhance Baseten’s security governance, compliance, and privacy programs. As one of the early members of our security organization, you will play a key role in ensuring our platform meets and exceeds the highest standards for privacy, trust, and regulatory compliance. You’ll work closely with Engineering, Product, Security, and Legal to define compliance requirements, assess platform capabilities, and drive implementation from initial scoping through validation. You will also lead customer assurance efforts, helping customers understand our security architecture and compliance posture while bringing their requirements back into product planning. Alongside this product focus, you’ll contribute to Baseten’s broader GRC program, including governance, risk management, audits, vendor assessments, and security awareness. RESPONSIBILITIES - Product Compliance: Translate regulatory, framework, and customer requirements into clear product requirements and technical controls, partnering with Engineering and Product to build compliance into platform design and development. - Governance & Policy Development: Design, implement, and maintain security governance frameworks, policies, and procedures that align with Baseten’s risk posture and industry best practices. - Risk Management: Build and manage the company-wide risk assessment program, identifying, tracking, and mitigating key security and compliance risks. - Compliance Operations: Support efforts to achieve and maintain compliance with SOC 2, ISO 27001/27701, HIPAA, FedRAMP and other applicable standards and regulations. - Audit & Certification Management: Coordinate external audits and certification processes, ensuring evidence collection, control validation, and remediation plans are executed efficiently. - Third-Party Risk Management: Oversee vendor security assessments and ensure third-party providers meet Baseten’s security and compliance standards. - Cross-Functional Collaboration: Partner with Engineering, Product, and Operations teams to embed compliance and risk management into day-to-day operations and technical processes. - Customer Trust & Assurance: Support customer security questionnaires, due diligence efforts, and documentation requests from prospective and existing clients. - Training & Awareness: Develop and deliver security and compliance training to ensure company-wide understanding of key policies and responsibilities. - Continuous Improvement: Stay current on evolving regulatory requirements and lead initiatives to mature our compliance and risk management programs. REQUIREMENTS - BS Degree in CS, CE, MIS or equivalent field - 5+ years of experience in GRC, Security Compliance, or Information Security roles, ideally in a SaaS or cloud-native environment. - Strong understanding of security frameworks and standards such as SOC 2, ISO 27001, NIST, and GDPR. - Proven track record managing compliance audits and certification programs end-to-end. - Experience working directly with leaders and executives within Enterprise organizations - Experience working cross-functionally with technical and non-technical stakeholders to implement compliance and security controls. - Proven experience driving product compliance by translating regulatory and customer requirements into actionable product controls with Engineering and Product - Experience defining project requirements and driving implementation by translating compliance objectives into clear deliverables, coordinating cross-functional stakeholders, and managing execution through completion. - Experience responding to customer security questionnaires and leading customer security interviews, with the ability to clearly communicate security controls, compliance posture, and risk management practices to technical and nontechnical audiences. - Ability to thrive in a fast-paced, high-growth startup environment while maintaining structure and process discipline. NICE TO HAVE - Experience with cloud security compliance in AWS or GCP environments. - Hands-on experience using GRC tools (e.g., Vanta, Drata, Secureframe, Anecdotes). - Understanding of AI/ML security considerations, data privacy, and model governance. - Previous experience building and implementing security controls in an early-stage or rapidly growing startup. - Relevant certifications (e.g., CISA, CISSP, CISM, ISO 27001 Lead Implementer). BENEFITS - Competitive compensation, including meaningful equity - (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents - Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!) - Paid parental leave - Fertility and family-building stipend through Carrot - (U.S. only) Company-facilitated 401(k) - Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities. Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you. At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).

Location: Remote Who we are Our mission is to bring clarity and control to the world's most complex codebases. AI is accelerating code creation, but the infrastructure to understand, oversee, and evolve that code hasn't kept pace. Sourcegraph gives engineering organizations full visibility across their systems, precise context for their agents, and the ability to execute coordinated code changes at scale. As agentic development becomes the dominant engineering paradigm, we provide the context layer teams need to take control of their codebase. With Code Search, Deep Search, MCP, and Agentic Batch Changes, we deliver on that mission today - giving engineering teams and their AI tools the cross-repo context to navigate massive codebases with confidence, and the ability to make changes across hundreds of repositories at once. Companies like Stripe, Reddit, and Leidos rely on Sourcegraph to ship faster and with higher quality. We're backed by a16z, Sequoia, and Redpoint, and proud to operate as a globally distributed team that values high agency, direct communication, and customer love. If you want to build the infrastructure that lets every engineering team - and every agent they deploy - operate on their codebase with confidence, join us. Hours & location 🌎 While we hire almost anywhere in the world, we have a preference for someone to reside in the following locations for this role. However, if you feel qualified, we welcome you to apply regardless of location. No matter what, working hours must overlap with GMT-3 for at least 20 hours/week. Preferred locations: USA Why this job is exciting As our Compliance Manager, you will own and drive Sourcegraph’s governance, risk, and compliance program, with a primary focus on compliance. This is a highly cross-functional role that works closely with Security, Engineering, IT, Legal, People, Sales, and other teams across the company. You will be responsible for maintaining and evolving our compliance program, including owning certifications such as SOC 2 and ISO 27001 and preparing Sourcegraph for additional frameworks as the business grows. This is not a role where you will simply coordinate work across a large compliance organization. We are looking for someone who has personally owned audit and certification programs end to end: designing and tailoring controls, collecting evidence, training internal teams, working directly with auditors, managing remediation, and driving follow-up work through completion. 📅 Within one month, you will… You will build strong working relationships across Security, Engineering, IT, Legal, People, Sales, and other key stakeholders. You will develop a clear understanding of Sourcegraph’s existing governance, risk, and compliance program, including our ISMS, risk register, controls, certifications, audit processes, and current areas of focus. You will understand how our SOC 2 and ISO 27001 programs operate today, including key owners, evidence requirements, open risks, and upcoming milestones. You will begin participating directly in day-to-day compliance activities and identify opportunities to improve or simplify existing processes. 📅 Within three months, you will… You will have taken ownership of Sourcegraph’s ongoing SOC 2 and ISO 27001 compliance programs. You will independently manage key audit activities, including control testing, evidence collection, stakeholder coordination, auditor requests, findings, and remediation. You will evaluate existing controls and tailor them to Sourcegraph’s environment rather than relying on overly prescriptive or generic auditor recommendations. You will actively maintain Sourcegraph’s risk register, ISMS processes, policies, and compliance documentation. You will help internal teams understand their compliance responsibilities and provide practical guidance that allows them to meet requirements without creating unnecessary process. You will support customer-facing compliance activities, including security questionnaires and compliance-related questions from prospective and existing customers. 📅 Within six months, you will… You will have successfully led Sourcegraph through an audit or major certification milestone. You will own the operating rhythm of the GRC program, including ISMS meetings, risk management activities, control reviews, documentation updates, and audit preparation. You will have established a forward-looking compliance roadmap covering renewals, upcoming audits, new frameworks, regulatory requirements, and opportunities to improve how the program operates. You will be able to independently identify control gaps or deficiencies, assess their risk, recommend practical solutions, and drive remediation with both technical and non-technical stakeholders. You will have introduced automation, AI, or other process improvements that reduce manual compliance work while maintaining or improving program quality. About you You have built or operated compliance programs in a fast-moving technology environment and have personally owned major compliance initiatives from beginning to end. You are comfortable operating independently, getting into the details, and doing the work yourself while coordinating with stakeholders across the organization. You understand that frameworks such as SOC 2 and ISO 27001 define requirements but often leave significant flexibility in how an organization satisfies them, and you know how to translate those requirements into controls that fit the business. You are also comfortable working with technical teams and modern cloud environments. You can understand enough about infrastructure, systems, access controls, software development, and security processes to ask the right questions and effectively translate between auditors and technical teams. 5+ years of experience in governance, risk, compliance, information security compliance, or a related role. Demonstrated end-to-end ownership of SOC 2 and ISO 27001 programs, ideally within a SaaS, technology startup, or similarly fast-moving environment. Experience personally managing external audits and certification processes, including audit preparation, evidence collection, control testing, stakeholder training, auditor interaction, remediation, and follow-up. Strong understanding of risk management, control design, ISMS governance, and compliance program operations. Experience adapting compliance controls to an organization's actual environment rather than applying generic or overly prescriptive requirements. Familiarity with cloud-based technology environments and the security and compliance considerations associated with a distributed or remote workforce. Strong project management and organizational skills with the ability to drive cross-functional initiatives from inception through completion. Excellent written and verbal communication skills and the ability to explain compliance requirements clearly to both technical and non-technical audiences. A hands-on mindset and willingness to personally execute the work required to keep the compliance program operating effectively. Curiosity about AI, automation, and emerging technology, with an interest in using new tools to improve compliance workflows. Nice-to-haves: Experience with additional security, privacy, or compliance frameworks such as GDPR, HIPAA, HITRUST, FedRAMP, FISMA, PCI DSS, or related standards. Experience supporting security questionnaires, customer assurance processes, or sales-related compliance activities. Experience with GRC platforms, compliance automation tools, or building internal automation for evidence collection and control monitoring. Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer or Lead Auditor, CRISC, or similar credentials. Level 📊 This job is an IC3. You can read more about our job leveling philosophy in our Handbook. Compensation We pay above-market salaries because we want to hire exceptional people who can focus on building great products, not worrying about paying bills. As an open and transparent company, our compensation philosophy and pay bands are visible to every Sourcegraph teammate, and we strive to make our approach equitable, explainable, and competitive. Your base salary is determined by the IC3 pay band for your location zone (1-4). Our pay bands are informed by market data and designed to ensure competitive compensation wherever you live. During the recruiting process, we'll discuss the range applicable to you based on job level, relevant skills, experience, qualifications, and location zone. The starting salary for the IC3 pay band in each zone is: Zone 2: $137,718 USD Zone 3: $102,899 USD In addition to competitive cash compensation, we offer meaningful equity (because when Sourcegraph succeeds, we want you to succeed, too) and generous perks & benefits . Interview process Below is the interview process you can expect for this role (you can read more about the types of interviews in our Handbook). It may look like a lot of steps, but rest assured that we move quickly and the steps are designed to help you get the information needed to determine if we’re the right fit for you… Interviewing is a two-way street, after all! We expect the interview process to take 5 hours in total. 👋 Introduction Stage - we have initial conversations to get to know you better… [30m] Recruiter Screen [30m] Hiring Manager Screen 🧑‍💻 Team Interview Stage - we then delve into your experience in more depth and introduce you to members of the team, including cross-functional partners… [Async] Working assignment [60m] Assignment Walkthrough + Review [60m] Resume Deep Dive [60m] Technical Interview 🎉 Final Interview Stage - we move you to our final round, where you gain a better understanding of our business and values holistically… [30m] Values [30m] Leadership We check references and conduct your background check Please note - you are welcome to request additional conversations with anyone you would like to meet, but didn’t get to meet during the interview process. Learn more about us You can learn more about what it is like to work at Sourcegraph by reading our handbook . We are an ambitious team who are collectively working hard to build the most influential company in the world. You can read more about our culture , competitive compensation and benefits here. Sourcegraph is an equal opportunity workplace; we welcome people from all backgrounds. Sourcegraph participates in E-Verify for U.S. Employees.

• Выполнять задачи, ставящиеся перед командой, включая исследование ядра Android, реверс-инжиниринг компонентов с закрытым исходным кодом, отладку смартфонов, проверку имеющихся уязвимостей и proof-of-concepts на эксплуатируемость, написание рабочих эксплоитов, объединение эксплоитов в цепочки.

🔎 Maqsad: Kiberxavfsizlikka qiziqqan boshlovchilarga linux, windows, networking va cybersecurity fundamentals bo‘yicha amaliy bilim berish.

Location: USA - Remote Workplace: Remote About Us Since 2013, we’ve been building a CRM that gets out of your way and helps your team sell more, faster. Now we’re building AI into every part of it, so Close does the busywork and your team does the selling. No manual data entry, no 10-click workflows. Just communication-first, AI-powered sales software designed to help you succeed and scale. We're bootstrapped and profitable which means we answer to our customers and play by our rules. We're proud of our 130-person, 100% remote team, focused on building Close so that no small, scaling business fails because it can't figure out sales. ABOUT THE ROLE Close is a CRM built around the communication tools sales teams use every day: email, calling, SMS, workflows, reporting, and AI. Underneath that product is a broad technical surface — Python services and a large application backend, a TypeScript and React frontend, public APIs, Docker and Kubernetes, AWS infrastructure, and integrations with providers that handle sensitive customer data. Security work happens across it all today, but the ownership is spread across Engineering, Infrastructure, and Security & Trust. We’re hiring our first dedicated Product Security Engineer to make that work systematic. You’ll report to the Backend Platform team manager within EPD (Engineering, Product, and Design), while working across the entire product and infrastructure surface. You’ll find vulnerabilities, determine which findings matter most, and drive them through remediation. Often you’ll fix the problem yourself. Other times you’ll give the owning team a clear reproduction, a practical path forward, and enough context to prioritize correctly. You’ll analyze code, build proof-of-concepts, test running applications, tune or replace noisy tools, and automate the repetitive parts of vulnerability management. This is not a role where you forward scanner alerts and call the queue managed. Product and application security will be your responsibility. You’ll partner closely with our Infrastructure team on cloud security, access, and secrets, and with our Security & Trust Lead on GRC Engineering https://grc.engineering/, compliance (SOC 2) goals, audits, and corporate security. This role is a new one at Close. You’ll have significant room to decide where better tooling, clearer ownership, and a small amount of code can reduce the most risk. OUR STACK Our backend is primarily Python, with Flask and FastAPI services and TaskTiger https://github.com/closeio/tasktiger and Temporal handling much of our asynchronous work. We expose REST https://developer.close.com/ and GraphQL APIs and store data in MongoDB, PostgreSQL, Elasticsearch, and Redis. Our frontend is a large single-page TypeScript application built primarily with React. We bundle with Vite, target modern browsers, and test with Vitest, React Testing Library, Playwright, and Chromatic. The product updates in near real time and uses technologies including WebSockets and WebRTC. Our mobile application is built with React Native. We build and test Docker images in CI/CD and continuously deploy them to Kubernetes on AWS. Our infrastructure uses managed services including EKS, MSK, and ElastiCache, alongside services running on EC2. Terraform and Ansible automate much of the underlying infrastructure, and our containerized local development environment lets engineers run the full system on their own machines. For this role, our stack extends beyond simply backend or frontend: browser behavior, frontend state, API authorization, asynchronous processing, data access, third-party integrations, containers, and cloud configuration can all be part of the same attack path. We love open sourcing our code and ideas on our GitHub https://github.com/closeio and on The Making of Close https://making.close.com/, our behind-the-scenes Product & Engineering blog. Check out our open source projects like SocketShark https://github.com/closeio/socketshark, TaskTiger https://github.com/closeio/tasktiger, LimitLion https://github.com/closeio/limitlion and ciso8601 https://github.com/closeio/ciso8601. AI is both how we build and what we ship, and that's reshaped what engineering looks like. This is a transformation we’re embracing and find deeply exciting. YOU ARE - An application security engineer who writes code. You can move from reading an unfamiliar code path, to reproducing an exploit, to proposing or shipping a production-quality fix. Strong Python or TypeScript experience would be especially useful; fluency across both backend and frontend systems is even better. - Skilled at finding vulnerabilities conventional scanners may miss. You use modern AI-assisted review pipelines, guided by expert judgment, to uncover subtle flaws in web apps and APIs—from authentication, authorization, and tenant isolation to injection, SSRF, unsafe data flows, and business logic. You can threat-model designs, white-box review code, and test running systems. - Offensive-minded and operationally responsible. You know how to test like an attacker without being careless with customer data or production systems. You can turn a finding into a safe reproduction, assess exploitability and business impact, and retest the eventual fix. - An automation builder. You have worked with some mix of SAST, DAST, software composition analysis, container scanning, secrets scanning, or cloud posture tooling. More importantly, you know how to tune tools, connect them to engineering workflows, and remove noise. - AI-native and accountable. You use coding agents and LLMs to accelerate investigation, code review, and repetitive engineering work, but you verify their output. You think carefully about what happens when agents clone untrusted code, install dependencies, or receive access to credentials. - Able to separate severity from priority. A score is an input, not a foregone conclusion. You consider reachability, existing controls, customer impact, and attack chains, then explain the risk in language that is legible to an engineer or business owner. - Comfortable working across the business. You’ll collaborate with product engineers, Site Reliability Engineers, Security & Trust Lead, auditors, and external researchers without confusing partnership for pass-off ownership. You will follow findings to closure even when another team is responsible for the fix. - Self-directed in a remote environment. You can take an ambiguous surface (say, secret rotation or dependency remediation) and learn how it works across multiple systems then turn it into a practical plan with measurable progress. You do not need to arrive as the deepest expert in every part of this scope. You do need to be able to investigate an unfamiliar system, determine what matters, and bring the right people with you. YOU WILL The work spans hands-on application security, security automation, vulnerability management, and infrastructure partnership. Depending on where you find the greatest risk and leverage, projects could include: - Build a recurring product security review program. Threat model new features, audit high-risk areas, review code, and build safe proof-of-concepts in isolated development environments. Work across our backend, frontend, APIs, and customer-facing integrations. - Improve application security testing. Combine static analysis, dependency and secrets scanning, dynamic testing in development, and carefully scoped production testing. Use existing tools where they fit and build focused automation where they don’t. - Own vulnerability intake and remediation. Triage findings from HackerOne, scanners, penetration tests, audits, customers, and internal research. Reproduce issues, assess exploitability and impact, track remediation, and verify fixes. Serve as technical lead for our bug bounty program while contract and budget ownership remain elsewhere. - Turn security alerts into useful engineering work. Verify scanner coverage and automate ingestion, deduplication, enrichment, prioritization, and routing—so teams spend less time interpreting alerts and more time fixing important issues. - Make dependency remediation safer and less manual. Improve scanning across our Python and TypeScript codebases, then build workflows to assess upgrades, stage pull requests, run checks, and route work without exposing credentials to untrusted packages or build steps. - Make secrets routinely rotatable. Partner with service owners and Infrastructure to inventory application secrets, add graceful rotation paths, document provider-specific runbooks, and automate rotation where the provider and risk justify it. Expand our use of Vault-backed dynamic credentials and reduce the number of rotations that require a coordinated fire drill. - Strengthen AWS security with Infrastructure. Evaluate and improve automated detection of risky configuration across identity, networking, compute, storage, containers, and registries. Turn findings into secure defaults, just-in-time access patterns, infrastructure guardrails, and actionable remediation—not build a second Infrastructure team. - Support audits and raising the security floor. Partner with Security & Trust on external assessments, provide technical context, and ensure findings are fixed rather than rediscovered. Along the way, create documentation, paved roads, and lightweight training that helps engineers make safer choices without waiting for a security review. - Take a key technical role in security incident response. Partner with Engineering and Infrastructure to coordinate investigation, containment, and remediation. Contribute to root-cause analysis and follow-up improvements, translating lessons learned into stronger controls and reduced recurrence. Tech you’ll touch: Python, TypeScript, React, Flask, FastAPI, GraphQL, Docker, Kubernetes, AWS, Vault, GitHub Actions, MongoDB, PostgreSQL, Redis, Kafka, Elasticsearch and the security tooling you help us choose. BENEFITS - Compensation: Competitive pay plus an organization-wide goal-based bonus - Paid Time Off: ~5 weeks of PTO to start. Plus a 1-week all-company Winter Holiday Break and paid US holidays. You'll earn 2 extra days for every year you're with Close. - 80% Work Option: Work with your manager to choose between a standard 5-day week or a 4-day week at 80% pay - Parental Leave: Paid leave for primary and secondary caregivers - Sabbatical: A 1-month paid sabbatical every 5 years with the team - Healthcare (US residents): Two medical plans with Close covering the majority of your premium, plus Dental, Vision, HSA, FSA, and company-paid Long-Term Disability - 401k (US residents): We match your contributions up to 6%, vested immediately OUR VALUES Build a house you want to live in - Examine long-term thinking and action No BS - Practice transparency and honesty, especially when it’s hard Invest in each other - Build successful relationships with your coworkers and customers Discipline equals freedom - Keep your word to yourself and others Strive for greatness - Constantly challenge yourself and others LEARN MORE Listen to our CEO and Founder, Steli Efti, tell the story of Close’s journey in the $0-30m Blueprint https://www.close.com/blueprint.  Watch our culture video https://www.youtube.com/watch?v=maXKi1GN2MI from our 2023 team retreat in Milan. Every year our entire team gathers in person to build connection, foster cross-functional collaboration, and have fun. In 2027, we're headed to Dusseldorf, Germany! Explore our product. Check out a demo https://www.close.com/demo-site! OUR HIRING PROCESS We ask a few role-specific questions as part of our application process. These questions are designed to help us learn more about you from the start, so please answer each one thoughtfully. We see this as an opportunity to get to know you beyond your resume. We use AI tools daily at Close and expect candidates to do the same. In evaluating your application, we aim to get a sense for you - the way you think, how you communicate, the work you've done. Applications that read as fully AI-generated will not be considered. Regardless of fit, you can expect to hear back from our team with an update on the status of your candidacy. If you progress to the interview process, you'll receive a full outline of the role-specific steps in your first touchpoint with us. We do our best to make the hiring process clear and human.

Yunusobod tumanidagi oquv markazimizga kiberhavsizlik boyicha ustoz mentorlarni ishga qabul qilamiz. Talablar: — Tajribasi bor — Mas'uliyatli Ish vaqti: Erkin grafik Murojaat vaqti: 09:00 - 18:00

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. ABOUT THE ROLE We're looking for a Security Engineer with deep incident response experience to help defend Replit, a fast-moving, cloud-native AI vibe-coding platform. You'll be the person who takes charge when something goes wrong. You'll lead investigations from first signal to root cause, coordinate containment across Security, SRE, and Engineering, and keep stakeholders informed while the incident is moving fast. This isn't a pure responder role. We want a well-rounded security engineer who has run real incidents and wants to make the next one faster. You'll write the scripts, automations, and tooling that take manual work out of triage, evidence collection, and containment. You'll also turn lessons from each incident into better detections, playbooks, and platform hardening.   RESPONSIBILITIES Incident Response - Serve as incident commander or technical lead for security incidents, from detection and triage through containment, eradication, recovery, and post-incident review. - Coordinate response across Security, SRE, Engineering, Legal, and leadership. Drive decisions under pressure and keep a clear record of actions taken. - Communicate incident status, impact, and risk clearly to technical and executive audiences. - Participate in and help shape the security on-call rotation. Investigation & Forensics - Investigate suspicious activity across cloud infrastructure, containers, identity systems, and application layers using SIEM, Cloud Logging, telemetry, and host and container artifacts. - Determine scope, root cause, attacker behavior, and blast radius for confirmed incidents. - Quickly assess whether emerging threats (0-days, active exploitation campaigns, bug bounty findings, customer reports) apply to Replit, and whether we're already affected. IR Automation & Tooling - Build scripts, automations, and tools (Python, Go, Bash, or directly on Replit) that speed up response, such as automated enrichment, evidence collection, credential and session revocation, workload isolation, and alert triage. - Develop and maintain response playbooks and runbooks, and automate them where possible. - Integrate response workflows with SIEM, SOAR, ticketing, and chat tooling to cut time-to-contain. Detection & Continuous Improvement - Turn incident findings into new or improved detections, logging coverage, and visibility. - Lead blameless post-incident reviews and drive remediation items to completion. - Run tabletop exercises and simulations to test readiness and find gaps.   REQUIRED SKILLS & EXPERIENCE - Proven experience leading or serving as technical lead on security incidents in a cloud or SaaS environment. - Strong hands-on investigation skills with SIEM, cloud audit logs, and log-based analysis. Comfortable working through large datasets under time pressure. - Proficiency writing production-quality scripts or tools in Python, Go, or Bash for investigation and automation. - Solid knowledge of cloud architecture and security, especially Google Cloud Platform (IAM, audit logging, GKE, networking). - Working knowledge of Kubernetes and containers, including how to investigate and contain compromised workloads. - Understanding of identity systems, SaaS architectures, and common cloud attack paths (credential theft, privilege escalation, supply chain, token abuse). - Familiarity with software engineering fundamentals, CI/CD pipelines, and package ecosystems, so you can work effectively with Engineering on code-level fixes. - Understanding of IR frameworks and lifecycle (for example NIST 800-61), plus the vulnerability lifecycle and exploitability analysis.   PREFERRED QUALIFICATIONS - Experience building or operating SOAR or other response automation platforms. - Digital forensics experience with cloud, Linux hosts, or containers. - Experience with threat intelligence, threat hunting, or security research. - Experience with bug bounty programs or coordinated vulnerability disclosure. - Familiarity with detection-as-code practices and writing detection rules. - Experience in fast-paced, cloud-native, or AI/ML-driven environments. - Relevant certifications (such as GCIH, GCFA, GCFR), or equivalent hands-on experience. WHAT WE VALUE - Curiosity & initiative: Strong desire to understand attacker behaviors, emerging threats, and how they apply to real-world systems. - Speed & analytical rigor: Ability to quickly assess high-risk vulnerabilities with clear, evidence-based reasoning. - Collaboration: Comfort working across cross-functional teams spanning Security, SRE, Engineering, and Infrastructure. - Clear communication: Ability to explain findings, risks, and mitigation strategies to stakeholders at all levels. - Ownership mindset: Takes initiative to drive investigations, improvements, and remediations to completion. - Continuous learning: Passion for staying up to date on new vulnerabilities, exploit trends, and cloud-native security best practices. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

• Проведение пентестов web-приложений и API (black-box, grey-box, white-box), включая REST, GraphQL, gRPC и WebSocket. • Тестирование безопасности AI/LLM-функциональности (Prompt Injection, Data Leakage, RAG, MCP, Agentic AI и другие сценарии по OWASP Top 10 for LLM).

-Анализ двоичного и/или исходного кода с целью поиска ошибок реализации, уязвимостей и/или восстановления логики работы программ. -Анализ защищенности и поиск уязвимостей в устройствах и компонентах.

As an Abuse Research Engineer in the Abuse Research Group, you will play a critical role in safeguarding Stripe’s financial ecosystem by proactively hunting for advanced threats, dissecting complex fraud vectors, and extracting actionable adversary intelligence.

Location: Sofia, Bulgaria Workplace: hybrid Are you ready to join our digital revolution journey?    At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.   Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.   With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career. Role Purpose As Audit & Compliance Manager, Europe, you will be the primary owner of audit readiness and tax regulatory compliance across all Europe entities. You will set the standard, structure and cadence for how the region prepares for and manages statutory audits, global group audits, and tax authority engagement — working through the local reporting teams and external accountants who handle data preparation, review and submission, rather than performing that work yourself. Your role is to define how things get done, ensure consistent quality across every market, and be the region's face in front of auditors and tax authorities. What Makes This Role Different: Build, don't just maintain. You're stepping into a newly created position with a mandate to design the region's audit and compliance approach from the ground up — not inherit a fixed process. Full regional ownership. This role spans the entire Europe region. High visibility, real stakes. You'll be the direct point of contact with external auditors and tax authorities on some of the company's most sensitive matters, with senior leadership relying on your judgment. A technology-forward environment. The business is actively investing in automation, AI and dashboarding to modernize reporting — you'll be expected to bring ideas here, not just adopt what's handed to you. Cross-functional reach. You'll work closely with the Tax, Transfer Pricing and Legal teams, and directly with hub-entity finance teams, on issues spanning VAT, customer transactions and company-wide reviews. What You'll Do: 1. Statutory & Global Audit Leadership Audit Lifecycle Ownership: Lead the end-to-end process for local statutory audits and global group audits across all 23 countries — planning, coordinating PBC (Provided by Client) lists, and driving on-time sign-off. External Auditor Relationship: Act as the primary regional point of contact for audit firms, owning timelines and resolution of open items. Consolidation Alignment: Ensure local statutory filings align with Global/Group reporting timelines (IFRS/US GAAP/local GAAP) for a seamless audit process. Pre-Audit Structuring: Work with local teams ahead of each audit cycle to define what needs to be prepared and how — so the region walks into every audit with a consistent, proactive structure rather than reacting to auditor requests. 2. Tax Governance & Regulatory Compliance Filing Oversight: Ensure accurate, on-time submission across VAT, Withholding Tax (WHT), Corporate Income Tax, and country-specific statistical and national bank reporting — delivered through local reporting teams and external accountants, with you owning quality and timeliness. Tax Team Liaison: Standardize and oversee submission of supporting data to the central Tax team; ensure schedules provided for assessments are reconciled and audit-ready. Notice & Assessment Management: Proactively manage tax notices and audits, coordinating evidence-gathering and working with the Tax team to ensure timely, well-supported responses. Corporate Secretarial Support: Oversee annual filings and coordinate with Legal on board meeting minutes (financial aspects) and other local regulatory requirements. 3. Process Improvement & Digital Transformation Root Cause Analysis: Identify recurring audit adjustments or tax queries and implement structural fixes to eliminate them at the source. Internal Controls: Strengthen the control environment across the region to minimize audit findings. Technology & Automation: Identify and champion tools — including AI and dashboarding — to reduce manual work and increase consistency across the region's reporting. What We're Looking For: Mindset & Soft Skills (critical to this role) A challenger, not a process-follower — someone who questions how things are done today and proposes a better way, rather than simply executing an existing playbook. Comfortable operating in a fast-moving, high-volume, occasionally chaotic environment, and energized rather than fatigued by it. Strong communicator and team player who can build trust quickly across Tax, Legal, Transfer Pricing and local finance teams. Strategic mindset with the ability to zoom out across markets while staying close enough to the detail to be credible with auditors and tax authorities. Experience & Technical Skills Currently operating at Manager level (or equivalent) within an audit firm or a multinational's in-house compliance/audit function — this is not a developmental hire. 10–12+ years of post-qualification experience, with hands-on exposure to multi-country compliance in Europe. Chartered Accountant (CA), CPA, or ACCA qualification. Solid working knowledge of IFRS, European tax regulations, and Transfer Pricing fundamentals. Advanced proficiency with Tier-1 ERP systems (SAP, Oracle, or NetSuite). Fluent English, written and spoken — required given daily interaction with regional and global stakeholders. Strong project management and negotiation skills, with the ability to work confidently across time zones and cultures. In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is EUR 40,000. In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.     #ALEPH Why Join Us?   Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.     We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.    #ALEPH

Location: Budapest, Hungary Workplace: hybrid Are you ready to join our digital revolution journey?    At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.   Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.   With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career. Role Purpose As Audit & Compliance Manager, Europe, you will be the primary owner of audit readiness and tax regulatory compliance across all Europe entities. You will set the standard, structure and cadence for how the region prepares for and manages statutory audits, global group audits, and tax authority engagement — working through the local reporting teams and external accountants who handle data preparation, review and submission, rather than performing that work yourself. Your role is to define how things get done, ensure consistent quality across every market, and be the region's face in front of auditors and tax authorities. What Makes This Role Different: Build, don't just maintain. You're stepping into a newly created position with a mandate to design the region's audit and compliance approach from the ground up — not inherit a fixed process. Full regional ownership. This role spans the entire Europe region. High visibility, real stakes. You'll be the direct point of contact with external auditors and tax authorities on some of the company's most sensitive matters, with senior leadership relying on your judgment. A technology-forward environment. The business is actively investing in automation, AI and dashboarding to modernize reporting — you'll be expected to bring ideas here, not just adopt what's handed to you. Cross-functional reach. You'll work closely with the Tax, Transfer Pricing and Legal teams, and directly with hub-entity finance teams, on issues spanning VAT, customer transactions and company-wide reviews. What You'll Do: 1. Statutory & Global Audit Leadership Audit Lifecycle Ownership: Lead the end-to-end process for local statutory audits and global group audits across all 23 countries — planning, coordinating PBC (Provided by Client) lists, and driving on-time sign-off. External Auditor Relationship: Act as the primary regional point of contact for audit firms, owning timelines and resolution of open items. Consolidation Alignment: Ensure local statutory filings align with Global/Group reporting timelines (IFRS/US GAAP/local GAAP) for a seamless audit process. Pre-Audit Structuring: Work with local teams ahead of each audit cycle to define what needs to be prepared and how — so the region walks into every audit with a consistent, proactive structure rather than reacting to auditor requests. 2. Tax Governance & Regulatory Compliance Filing Oversight: Ensure accurate, on-time submission across VAT, Withholding Tax (WHT), Corporate Income Tax, and country-specific statistical and national bank reporting — delivered through local reporting teams and external accountants, with you owning quality and timeliness. Tax Team Liaison: Standardize and oversee submission of supporting data to the central Tax team; ensure schedules provided for assessments are reconciled and audit-ready. Notice & Assessment Management: Proactively manage tax notices and audits, coordinating evidence-gathering and working with the Tax team to ensure timely, well-supported responses. Corporate Secretarial Support: Oversee annual filings and coordinate with Legal on board meeting minutes (financial aspects) and other local regulatory requirements. 3. Process Improvement & Digital Transformation Root Cause Analysis: Identify recurring audit adjustments or tax queries and implement structural fixes to eliminate them at the source. Internal Controls: Strengthen the control environment across the region to minimize audit findings. Technology & Automation: Identify and champion tools — including AI and dashboarding — to reduce manual work and increase consistency across the region's reporting. What We're Looking For: Mindset & Soft Skills (critical to this role) A challenger, not a process-follower — someone who questions how things are done today and proposes a better way, rather than simply executing an existing playbook. Comfortable operating in a fast-moving, high-volume, occasionally chaotic environment, and energized rather than fatigued by it. Strong communicator and team player who can build trust quickly across Tax, Legal, Transfer Pricing and local finance teams. Strategic mindset with the ability to zoom out across markets while staying close enough to the detail to be credible with auditors and tax authorities. Experience & Technical Skills Currently operating at Manager level (or equivalent) within an audit firm or a multinational's in-house compliance/audit function — this is not a developmental hire. 10–12+ years of post-qualification experience, with hands-on exposure to multi-country compliance in Europe. Chartered Accountant (CA), CPA, or ACCA qualification. Solid working knowledge of IFRS, European tax regulations, and Transfer Pricing fundamentals. Advanced proficiency with Tier-1 ERP systems (SAP, Oracle, or NetSuite). Fluent English, written and spoken — required given daily interaction with regional and global stakeholders. Strong project management and negotiation skills, with the ability to work confidently across time zones and cultures. In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is 15,871,000 HUF. In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.   #ALEPH Why Join Us?   Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.     We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.    #ALEPH

Location: Bucharest, Romania Workplace: hybrid Are you ready to join our digital revolution journey?    At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.   Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.   With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career. Role Purpose As Audit & Compliance Manager, Europe, you will be the primary owner of audit readiness and tax regulatory compliance across all Europe entities. You will set the standard, structure and cadence for how the region prepares for and manages statutory audits, global group audits, and tax authority engagement — working through the local reporting teams and external accountants who handle data preparation, review and submission, rather than performing that work yourself. Your role is to define how things get done, ensure consistent quality across every market, and be the region's face in front of auditors and tax authorities. What Makes This Role Different: Build, don't just maintain. You're stepping into a newly created position with a mandate to design the region's audit and compliance approach from the ground up — not inherit a fixed process. Full regional ownership. This role spans the entire Europe region. High visibility, real stakes. You'll be the direct point of contact with external auditors and tax authorities on some of the company's most sensitive matters, with senior leadership relying on your judgment. A technology-forward environment. The business is actively investing in automation, AI and dashboarding to modernize reporting — you'll be expected to bring ideas here, not just adopt what's handed to you. Cross-functional reach. You'll work closely with the Tax, Transfer Pricing and Legal teams, and directly with hub-entity finance teams, on issues spanning VAT, customer transactions and company-wide reviews. What You'll Do: 1. Statutory & Global Audit Leadership Audit Lifecycle Ownership: Lead the end-to-end process for local statutory audits and global group audits across all 23 countries — planning, coordinating PBC (Provided by Client) lists, and driving on-time sign-off. External Auditor Relationship: Act as the primary regional point of contact for audit firms, owning timelines and resolution of open items. Consolidation Alignment: Ensure local statutory filings align with Global/Group reporting timelines (IFRS/US GAAP/local GAAP) for a seamless audit process. Pre-Audit Structuring: Work with local teams ahead of each audit cycle to define what needs to be prepared and how — so the region walks into every audit with a consistent, proactive structure rather than reacting to auditor requests. 2. Tax Governance & Regulatory Compliance Filing Oversight: Ensure accurate, on-time submission across VAT, Withholding Tax (WHT), Corporate Income Tax, and country-specific statistical and national bank reporting — delivered through local reporting teams and external accountants, with you owning quality and timeliness. Tax Team Liaison: Standardize and oversee submission of supporting data to the central Tax team; ensure schedules provided for assessments are reconciled and audit-ready. Notice & Assessment Management: Proactively manage tax notices and audits, coordinating evidence-gathering and working with the Tax team to ensure timely, well-supported responses. Corporate Secretarial Support: Oversee annual filings and coordinate with Legal on board meeting minutes (financial aspects) and other local regulatory requirements. 3. Process Improvement & Digital Transformation Root Cause Analysis: Identify recurring audit adjustments or tax queries and implement structural fixes to eliminate them at the source. Internal Controls: Strengthen the control environment across the region to minimize audit findings. Technology & Automation: Identify and champion tools — including AI and dashboarding — to reduce manual work and increase consistency across the region's reporting. What We're Looking For: Mindset & Soft Skills (critical to this role) A challenger, not a process-follower — someone who questions how things are done today and proposes a better way, rather than simply executing an existing playbook. Comfortable operating in a fast-moving, high-volume, occasionally chaotic environment, and energized rather than fatigued by it. Strong communicator and team player who can build trust quickly across Tax, Legal, Transfer Pricing and local finance teams. Strategic mindset with the ability to zoom out across markets while staying close enough to the detail to be credible with auditors and tax authorities. Experience & Technical Skills Currently operating at Manager level (or equivalent) within an audit firm or a multinational's in-house compliance/audit function — this is not a developmental hire. 10–12+ years of post-qualification experience, with hands-on exposure to multi-country compliance in Europe. Chartered Accountant (CA), CPA, or ACCA qualification. Solid working knowledge of IFRS, European tax regulations, and Transfer Pricing fundamentals. Advanced proficiency with Tier-1 ERP systems (SAP, Oracle, or NetSuite). Fluent English, written and spoken — required given daily interaction with regional and global stakeholders. Strong project management and negotiation skills, with the ability to work confidently across time zones and cultures. In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is 220,800 RON. In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.     #ALEPH Why Join Us?   Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.     We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.    #ALEPH