Кибербезопасность вакансии

Задачи: — Обучение с нуля в области кибербезопасности, начиная с Linux и Networking. — Обучение реальным системам и уязвимостям, их выявлению, анализу и работе с профессиональной методологией. — Подготовка независимого специалиста по безопасности, способного работать в реальной среде. Требования: — Отсутствие необходимости в предварительных знаниях. — Требуются дисциплина, время и серьёзный подход. Условия: — Обучение онлайн в вечернее время. — Группа из 8 человек, количество мест не увеличивается. Описание: — Не требуется готовый "cybersecurity mutaxassisi". — Не проводится повторное обучение поверх поверхностных знаний из других учебных центров. — Не используются готовые инструменты и команды. — Не проводится решение CTF и искусственных задач. — Обучение ведёт опытный специалист с сертификатами EWPT, EWPTX и EMAPT, работающий в государственных организациях и обладающий опытом в области хакерства, реверс-инжиниринга, архитектуры безопасности и тестирования на проникновение. — Фокус на реальных задачах и системах, а не на искусственных вызовах.

Location: Remote Workplace: Remote We are building AI to simulate the world through merging art and science. We believe that world models are at the frontier of progress in artificial intelligence. Language models alone won’t solve the world’s hardest problems – robotics, disease, scientific discovery. Real progress requires models that experience the world and learn from their mistakes, the same way that humans do. And this kind of trial and error can be massively accelerated when done in simulation, rather than in the real world. World models offer the most clear path to general-purpose simulation, changing how stories are told, how scientific progress is made and how the next frontiers of humanity are reached. Our team consists of creative, open minded, caring and ambitious people who are determined to change the world. We aspire to continuously build impossible things and our ability to do so relies on building an incredible team. If you are driven to do the same, we'd love to hear from you. *Titles posted to our careers page are updated regularly to best advertise the role and expected seniority, but internally we have a flat titling system with two types of titles: one for individual contributors and one for people managers. ABOUT THE ROLE Open to hiring remote — we also have offices in New York, San Francisco, Seattle, London, Paris, and Tel Aviv. Runway is hiring a Detection & Response Engineer to own how we find and stop attacks against our infrastructure, our research environment and our products. Securing a company that trains and serves frontier video models is a different problem from securing a typical SaaS product. The environment includes research compute, large training datasets, a fast-moving build pipeline and engineers who work inside AI-assisted tooling every day. Each of those changes what an attack looks like and what you need to see to catch it. You'll join the Security team and build our detection and response program the way an engineer would: detections as code, response as automation, evidence as something you can query. This is a role with real ownership: you'll own the detection program end to end, from what we log to how quickly we close an incident. You'll report to the head of security, partner with engineers across platform and research, and shape how this function grows from here. WHAT YOU'LL DO - Own detection and response end to end: what we log, what we alert on, how we triage and how we recover - Write and tune detections as code across multiple cloud environments, Kubernetes, identity systems, endpoints and SaaS, and measure them on coverage and precision rather than alert volume - Lead incident response from the first alert through containment and forensics, then write the post-incident review people actually read - Build automation that takes toil out of triage, including enrichment, correlation, containment actions and evidence collection, and use LLM-based tooling where it holds up under audit - Monitor AI agents and developer tooling operating inside our environment, and turn that into concrete telemetry and controls - Partner with platform and research engineers so new systems ship with logging and response playbooks in place on day one - Run threat hunts and tabletop exercises against the parts of the environment that worry you most, and fix what you find - Turn incident and detection metrics into evidence for SOC 2, ISO 27001 and enterprise customer security reviews, working with our GRC team - Participate in an on-call rotation for security incidents WHAT YOU'LL NEED - Hands-on incident response experience: you've triaged live alerts, led investigations and written up what happened afterward - Experience building and tuning detections in a modern SIEM, ideally managed as code - Working knowledge of how attackers move through cloud and Kubernetes environments (IAM abuse, container escape, credential theft, supply chain compromise) and what that leaves behind in logs - Comfort writing Python, Typescript, Rust or another language to automate response work and connect security tools - Familiarity with at least one major cloud platform and with Kubernetes at the level of audit logs, RBAC and workload identity - Clear writing. Incident timelines, detection documentation and updates to leadership are all part of the job - Judgment about what to alert on, what to automate and when to wake someone up EVEN BETTER IF YOU HAVE - Experience monitoring GPU or HPC-style infrastructure, or research environments with large datasets - Experience building detections or guardrails for AI agents, LLM tooling or MCP servers - Cloud forensics experience: disk and memory acquisition, cloud audit trail reconstruction, chain of custody - Published open source detection content Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. Our salary ranges are based on competitive market rates for our size, stage and industry, and salary is just one part of the overall compensation package we provide. There are many factors that go into salary determinations, including relevant experience, skill level and qualifications assessed during the interview process, and maintaining internal equity with peers on the team. The range shared below is a general expectation for the function as posted, but we are also open to considering candidates who may be more or less experienced than outlined in the job description. In this case, we will communicate any updates in the expected salary range. Lastly, the provided range is the expected salary for candidates in the U.S. Outside of those regions, there may be a change in the range, which again, will be communicated to candidates. WORKING AT RUNWAY Great things come from great teams. https://www.youtube.com/watch?v=kwmj4ato2kw&ab_channel=Runway We’d love to hear from you. We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed. So regardless of race, gender identity or expression, sexual orientation, religion, origin, ability, age, veteran status, if joining this mission speaks to you, we encourage you to apply. More about Runway - Universal World Simulator https://runwayml.com/world-simulator.html - GWM-1 https://runwayml.com/research/introducing-runway-gwm-1 - Gen-4.5 https://runwayml.com/research/introducing-runway-gen-4.5 - General World Models https://runwayml.com/research/introducing-general-world-models - Robotics SDK https://runwayml.com/research/introducing-runway-gwm-1#robotics-section - Conversational Real-time Agents https://runwayml.com/research/introducing-runway-gwm-1#avatars-section - Runway Studios https://runwayml.com/studios We're excited to be recognized as a best place to work: Crain's https://www.crainsnewyork.com/awards/best-places-work-2023 | InHerSight https://www.inhersight.com/companies/best/city/new-york-city-ny | BuiltIn NYC https://builtin.com/awards/new-york-city/2024/best-places-to-work | INC https://www.inc.com/best-workplaces/2024

Location: Remote Workplace: Remote We are building AI to simulate the world through merging art and science. We believe that world models are at the frontier of progress in artificial intelligence. Language models alone won’t solve the world’s hardest problems – robotics, disease, scientific discovery. Real progress requires models that experience the world and learn from their mistakes, the same way that humans do. And this kind of trial and error can be massively accelerated when done in simulation, rather than in the real world. World models offer the most clear path to general-purpose simulation, changing how stories are told, how scientific progress is made and how the next frontiers of humanity are reached. Our team consists of creative, open minded, caring and ambitious people who are determined to change the world. We aspire to continuously build impossible things and our ability to do so relies on building an incredible team. If you are driven to do the same, we'd love to hear from you. *Titles posted to our careers page are updated regularly to best advertise the role and expected seniority, but internally we have a flat titling system with two types of titles: one for individual contributors and one for people managers. ABOUT THE ROLE *Open to hiring remote — we also have offices in New York, San Francisco, Seattle, London, Paris, and Tel Aviv. Runway is hiring an Infrastructure Security Engineer to secure the platform our models are trained and served on. The role covers Kubernetes platform security, cloud identity and access, software supply chain, tenant isolation in the serving layer and the research infrastructure behind our models. Securing a company that trains and serves frontier video models is a different problem from securing a typical SaaS product. The environment includes research compute, large training datasets, a fast-moving build pipeline, and engineers who work inside AI-assisted tooling every day. Each of those changes what an attack looks like and what the platform has to enforce to stop it. This is a hands-on engineering role on the Security team. You'll write policy, tooling and infrastructure code, work in the platform team's repositories, and ship controls that hold up in production. WHAT YOU'LL DO - Design and ship security controls in our Kubernetes ecosystem: admission policy, RBAC, workload identity, network policy and runtime hardening across every cluster we run - Harden the software supply chain from dependency intake through build and deploy, including package firewalling, artifact signing and provenance, and admission controls that block what doesn't pass - Own cloud IAM and identity architecture: least-privilege roles, short-lived credentials and workload federation - Secure research infrastructure and training pipelines, including access to model weights and datasets, without slowing down the people using them - Threat model new platform components before they ship and turn the findings into concrete requirements the owning team can act on - Build guardrails for AI agents and developer tooling operating inside our infrastructure - Write infrastructure as code and policy as code, and treat security configuration with the same review and rollout discipline as any other change - Give the incident response team what they need when infrastructure is involved: fast answers about how a system works and what to shut off WHAT YOU'LL NEED - Hands-on experience securing Kubernetes in production: you've written admission policies, debugged RBAC and workload identity problems and understand how a cluster gets compromised - Working knowledge of cloud IAM and networking on at least one major cloud platform, including how identity federation and short-lived credentials actually work - Experience with infrastructure as code and GitOps-style deployment, and the habit of shipping security changes through the same pipeline as everything else - Comfort writing Python, Typescript, Rust or another language to build tooling, not just scripts - An understanding of software supply chain attacks and the controls that stop them: signing, provenance, SBOMs, admission enforcement - Clear writing. Design docs, threat models and explanations to engineers who don't work in security are all part of the job - Judgment about which controls to enforce, which to recommend and how to roll out a breaking change without breaking the company EVEN BETTER IF YOU HAVE - Experience securing GPU or HPC-style compute, training pipelines or research environments - Experience with policy engines and admission controllers (Kyverno, OPA Gatekeeper, Falco or similar) - Multi-tenant isolation design in a cloud environment: ABAC, scoped credentials, per-tenant boundaries - Experience producing security architecture evidence for SOC 2, ISO 27001 or other audits and customer assessments - Open source contributions or published work in cloud or Kubernetes security Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. Our salary ranges are based on competitive market rates for our size, stage and industry, and salary is just one part of the overall compensation package we provide. There are many factors that go into salary determinations, including relevant experience, skill level and qualifications assessed during the interview process, and maintaining internal equity with peers on the team. The range shared below is a general expectation for the function as posted, but we are also open to considering candidates who may be more or less experienced than outlined in the job description. In this case, we will communicate any updates in the expected salary range. Lastly, the provided range is the expected salary for candidates in the U.S. Outside of those regions, there may be a change in the range, which again, will be communicated to candidates. WORKING AT RUNWAY Great things come from great teams. https://www.youtube.com/watch?v=kwmj4ato2kw&ab_channel=Runway We’d love to hear from you. We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed. So regardless of race, gender identity or expression, sexual orientation, religion, origin, ability, age, veteran status, if joining this mission speaks to you, we encourage you to apply. More about Runway - Universal World Simulator https://runwayml.com/world-simulator.html - GWM-1 https://runwayml.com/research/introducing-runway-gwm-1 - Gen-4.5 https://runwayml.com/research/introducing-runway-gen-4.5 - General World Models https://runwayml.com/research/introducing-general-world-models - Robotics SDK https://runwayml.com/research/introducing-runway-gwm-1#robotics-section - Conversational Real-time Agents https://runwayml.com/research/introducing-runway-gwm-1#avatars-section - Runway Studios https://runwayml.com/studios We're excited to be recognized as a best place to work: Crain's https://www.crainsnewyork.com/awards/best-places-work-2023 | InHerSight https://www.inhersight.com/companies/best/city/new-york-city-ny | BuiltIn NYC https://builtin.com/awards/new-york-city/2024/best-places-to-work | INC https://www.inc.com/best-workplaces/2024

Location: Las Vegas, Nevada, United States Global Trade Compliance Manager Operations · Full-time · In-Person (Las Vegas, Nevada, US) · Hours 9am - 5pm EST About Nysonian: Nysonian is one of the fastest-growing consumer portfolios, behind NOBL and Flo Pilates. We grew over 8x in 2025 and are building the next phase of the business across physical products, software, and subscription experiences. NOBL is a functional travel brand built around a simple idea. Travel products should solve real problems, not just look better. Every feature is designed to eliminate friction from the travel experience, from seamless organization and easy access to tracking, connectivity, and protection. Flo Pilates brings studio-quality Pilates into the home through connected fitness hardware, content, and subscription experiences. Across both brands, we are building product ecosystems that deepen the customer relationship beyond the initial purchase and create recurring value over time. We are looking for builders who want ownership, speed, and the ability to shape products at scale. The Opportunity: Nysonian is hiring a Global Trade Compliance Manager to to own the company's end-to-end import/export compliance program across all origin and destination markets. This role is responsible for export documentation and compliance out of China, Vietnam, Thailand, and Cambodia, and for import/customs clearance compliance into the UAE, UK, EU, Australia, Canada, the USA, and Mexico — including HS/HTS classification, importer- of-record (or equivalent) obligations, and duty/tariff management in each jurisdiction, to a standard of 100% compliance. The role works closely with the China/Southeast Asia buying and sourcing teams, the Mexico manufacturing facility, customs brokers and freight forwarders in each market, and surety/bond providers, to keep shipments compliant and identify and resolve compliance risk before it becomes a liability. What You'll Own: Own end-to-end export documentation and compliance for shipments originating from China, Vietnam, Thailand, and Cambodia, including commercial invoices, packing lists, certificates of origin, and each origin country's export licensing/permit requirements. Own end-to-end import and customs clearance compliance for shipments into the UAE (Dubai Customs / GCC), UK (post-Brexit customs, EORI), EU (EU customs union, EORI), Australia (Australian Border Force), Canada (CBSA), the USA (CBP), and Mexico (SAT/Aduana). Manage and maintain HS/HTS code classifications across the full product catalog for NOBL Travel, Flo Pilates, and other Nysonian brands, mapping classifications correctly to each destination market's tariff schedule. Act as the primary point of contact for the customs clearance process in each market, coordinating directly with local customs brokers, freight forwarders, carriers, and customs authorities to resolve entry issues, holds, and requests for information. Manage Importer of Record (or equivalent, e.g., EORI holder) responsibilities and obligations in every import market, maintaining 100% compliance with each jurisdiction's customs regulations, bonded entry requirements, and recordkeeping standards. Monitor and manage customs surety bonds and guarantees where applicable (e.g., the U.S. bond program with Avalon Risk Management), including bond sufficiency, claims, and provider relationships, and lead resolution of any bond or liquidated damages matters. Lead the response to customs compliance actions and enforcement notices from any origin or destination authority (e.g., CBP liquidated damages notices, requests for information), coordinating internally and with outside counsel or brokers as needed. Identify and apply free trade agreement and preference programs to reduce duty exposure (e.g., USMCA, EU/UK- Vietnam FTA, ASEAN trade agreements, GCC arrangements, AANZFTA), and assess rules-of-origin risk — particularly for products manufactured in Mexico with components sourced from China, where dual-origin exposure exists. Monitor changes in tariff policy, trade agreements, and trade remedy actions (e.g., U.S. Section 301/232, EU CBAM, safeguard duties) across all markets, and translate them into landed-cost impact and mitigation recommendations for leadership. Partner with the China/Southeast Asia buying teams and the Mexico manufacturing facility to ensure sourcing, bill-of-materials, and country-of-origin documentation support accurate classification and compliant entries in every market. Build and maintain internal SOPs, recordkeeping systems, and training materials to standardize export and import compliance practices across all origin and destination countries. Prepare compliance reporting and risk summaries for leadership, flagging open exposures by country (e.g., open enforcement cases, bond claims) and recommended next steps. Skills & Qualifications: 5+ years of experience in international trade compliance spanning both export (Asia-origin) and import compliance across multiple destination markets, ideally supporting a consumer goods or e-commerce company. Hands-on experience with HS/HTS classification and customs entry processes across more than one jurisdiction (e.g., US, UK/EU, Canada, Australia, or GCC). Working knowledge of Importer of Record / EORI-equivalent obligations, customs bonds/guarantees, and customs enforcement actions (e.g., CBP liquidated damages, CF-28/CF-29 notices). Familiarity with rules of origin under USMCA and other applicable free trade agreements, including multi-country manufacturing scenarios (e.g., China-origin components assembled in Mexico). Experience working with customs brokers and freight forwarders across multiple countries, and coordinating export procedures with factories/sourcing offices in China, Vietnam, Thailand, or Cambodia. Strong attention to detail and comfort owning compliance outcomes independently across jurisdictions, with a track record of driving issues to resolution. Excellent written and verbal English communication skills, with the ability to coordinate across teams and time zones in Asia, the Middle East, Europe, and North America. Licensed Customs Broker (LCB), CCS/CBIP, or an equivalent international trade compliance certification is a plus but not required. Compensation We use a market-based approach to compensation. This role also offers performance-based rewards tied to business impact. Your starting compensation will be based on your location, experience, and qualifications, with increases over time tied to performance, role growth, and company impact. Why You Will Love Working At Nysonian: Our Culture We are founder-led and operate with speed, direct communication, and clear accountability We believe in exceptional management and invest in tools and opportunities to connect with colleagues We build products that positively impact millions of people's lives AI is intentionally embedded in how we work, create, and scale, supporting innovation and impact Senior leaders are expected to create structure, make decisions, and stay close to execution Growth & Development Competitive pay and meaningful opportunities for performance-based advancement Direct ownership of strategy, systems, execution, and team buildout within your function Opportunity to build and scale a meaningful part of the business across two hardware-backed consumer brands Scope and compensation growth tied to performance, role expansion, and measurable business impact Benefits Health, Dental and Vision Insurance Life and Disability Insurance Paid Time Off Nine (9) paid holidays per year Complimentary Nobl & Flo products Nysonian is an equal opportunity employer.

Location: United States & Canada Workplace: Remote About WorkOS 🚀 WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations. We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid. As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products. About the Security team The Security team at WorkOS is responsible for keeping the data and identities of hundreds of millions of users secure. Security is fundamental to our products, and customer trust is the foundation of our success. We are a highly collaborative group with a strong engineering mindset. Our security program is shaped by hands-on experience attacking and defending systems, and applying lessons from across the industry. We embrace the latest advancements in practices and tooling that make modern security teams effective. We are comfortable in code and collaborate often with engineering to create products that are secure by default. Who we’re looking for - Risk-focused and pragmatic. You excel at identifying and reasoning about security risk in real-world contexts. You prioritize ruthlessly, always asking: what's the most effective way to reduce risk right now and in the long term? - A builder who can break things. You're comfortable reading and writing code, and you have a passion for deeply understanding the products you secure. You think like an attacker to find subtle, high impact vulnerabilities and like a defender to design pragmatic, effective mitigations. - A strong partner to engineering. You build trust with engineers by understanding their priorities, making security frictionless, and finding ways to make the secure path, the easiest path. - Excited about AI. You're embracing AI and automation to scale security and reduce toil. - Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you. Responsibilities - Lead secure design efforts. Partner with engineering teams on secure design and code reviews. Identify and prioritize risks early in the product lifecycle. - Build secure by default systems. Develop paved paths that systemically reduce risk and make secure development the easiest path for engineers. - Perform offensive security testing. Conduct penetration tests and code audits on new and existing products from an adversarial lens. - Improve our security tooling. Integrate and improve our static analysis, supply chain security, and vulnerability management capabilities across engineering pipelines. - Operate our responsible disclosure program. Run and improve our program by furthering automation, validating submissions, and coordinating remediation. - Improve our products. Write and ship code to remediate vulnerabilities in production systems and improve the security posture of WorkOS products. - Work directly with customers. Help build our customers' trust by directly engaging with their security-related questions and concerns. Qualifications - 5+ years of experience in a security engineering or security-focused software engineering role. - Ability to execute across a wide range of security functions such as security assessments, penetration testing, responsible disclosure, security tooling integration, etc. - Familiarity with and experience using common industry tooling. - Proven ability to identify vulnerabilities in software, demonstrated through CVEs, bug bounty, blog posts, or prior work experience. - Strong written and verbal communication skills, particularly in partnering with engineering teams. - Comfortable reading and writing code, and able to effectively leverage AI during the process. - Bonus: Experience in the authentication and identity domain. - Bonus: Experience writing production level code, especially developing security features. Benefits and Perks (US Only) 💖 At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.   - 401k matching - Competitive Equity - Healthcare, dental and vision coverage - FSA, ST/LT Disability, Voluntary Life - Carrot fertility benefits - 20 days paid vacation + 10 holidays + unlimited sick leave - 12 weeks fully paid parental leave - Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active - Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being - Commuter benefits for hybrid employees in SF/NYC - Unlimited token usage! Please inquire directly with our recruiting team for benefits available to those working outside the US.   Equal Opportunity Employer WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

We are building a new capability that turns fragmented, noisy security logs into actionable insights. The position is full-time, 40 hours per week, with mostly remote work within Germany and monthly in-person collaboration at the Berlin office. The contract is fixed-term. Salary ranges from EUR 69,000 to 77,000 per year.

Задачи: — проводить пентест Web, API, мобильных приложений, инфраструктуры, сетей и облака; — выполнять white-box / SAST-анализ исходного кода; — работать с разработчиками, DevOps и Blue Team; — использовать Burp Suite, Nmap, Metasploit, Nessus/OpenVAS, Hydra, sqlmap, Impacket, BloodHound и др.; — участвовать в построении SecSDLC; — готовить отчёты по результатам работ. Требования: — знание OWASP Top 10 / API Top 10 / Mobile Top 10; — понимание TCP/IP, HTTP/S, DNS, LDAP, SMB; — опыт в Pentest / Network Security; — уверенное владение Linux; — опыт работы с Burp Suite, Nmap, Metasploit и инструментами анализа уязвимостей; — знание OWASP, MITRE ATT&CK, D3FEND.

Задачи: — Подготовка учеников с нуля в направлении Cybersecurity и pentest — Обучение через практические проекты Требования: — Не указаны явно Условия: — Обучение 24/7 — Оплата от $60 и выше Ментор: Fayozbek, 19 лет, специализация Cybersecurity

Задачи: — Защищать серверы, сети, облачную инфраструктуру и веб-сервисы. — Выстраивать Zero Trust и безопасный доступ к внутренним системам. — Выявлять угрозы, расследовать инциденты и устранять уязвимости. — Работать над архитектурой безопасности вместе с DevOps и разработчиками. Требования: — От 3 лет в кибербезопасности и администрировании Zero Trust. — Практический опыт ZTNA — обязателен: Cloudflare Zero Trust, Teleport, Tailscale, CyberArk или аналоги. — Уверенный Linux, понимание сетей, TLS, VPN и сегментации. — Опыт с WAF, SIEM, IDS/IPS, управлением уязвимостями и расследованием инцидентов. — Знание OWASP Top 10, принципов управления доступом и безопасности Docker; Bash или Python для автоматизации. Условия: — Официальное трудоустройство. — Комфортный офис в Пафосе. — Сильная техническая команда. — Возможность влиять на архитектуру безопасности. — Рассматриваются кандидаты, которые уже на Кипре или готовы переехать для работы в офисе.

What We Do: Huntress is a fully remote, global team focused on cybersecurity, founded in 2015 by former NSA cyber operators. They protect over 4 million endpoints and 7 million identities worldwide with enterprise-grade cybersecurity products designed alongside their Security Operations Center (SOC). What You’ll Do: - Triage, investigate, respond, and remediate various intrusions daily. - Review EDR telemetry, log sources, and forensic artifacts to determine root causes and provide remediation. - Perform tactical malware analysis. - Investigate suspicious Microsoft M365 activity and provide remediations. - Assist in escalations from Product Support for threat-related and SOC questions. - Contribute to detection engineering creation and tuning. - Participate in projects to improve outcomes for analysts and partners. - Collaborate in a mentored team environment. What You Bring To The Team: - 4+ years experience in SOC or Digital Forensics (DFIR). - Experience with Windows, Linux, and MacOS attack surfaces. - Knowledge of Threat Actor tools and techniques including MITRE ATT&CK Framework, PowerShell, Command Prompt, WMIC, Scheduled Tasks, SCM, Windows Domain and host enumeration, lateral movement, persistence, defense evasion, and other offensive TTPs. - Experience with static and dynamic malware analysis. - Working knowledge of Windows Administration or Enterprise Domain Administration including Active Directory, Group Policy, Domain Trusts. - Working knowledge of core networking concepts such as common ports/protocols, NAT, Public/Private IPs, VLANs. - Working knowledge of web technologies including web servers/applications and OWASP top 10. - Effective communication skills to explain complex events to less technical audiences. - Customer-focused decision making. - Strong curiosity and eagerness to learn. Preferred Qualifications: - Experience in MSP/MSSP/MDR roles. - Linux and MacOS investigative experience. - Experience with scripting languages like PowerShell, Python, Bash, PHP, JavaScript, or Ruby. - Experience with platforms like HackTheBox, TryHackMe, Blue Team Labs Online. - Experience with cloud investigations (M365, Azure, AWS, GCP). - Participation in cybersecurity competitions. - Familiarity with MSP tools such as RMMs. What We Offer: - 100% remote work environment. - Generous paid time off including vacation, sick time, and holidays. - 12 weeks paid parental leave. - Comprehensive medical, dental, and vision benefits. - 401(k) with 5% company contribution. - Life and disability insurance. - Stock options for full-time employees. - $500 one-time home office reimbursement. - Annual education and professional development allowance. - $75/month digital reimbursement. - Access to BetterUp coaching platform. Accommodations: - Reasonable accommodations available for application and selection process upon request. Huntress is committed to inclusivity and non-discrimination, except against hackers exploiting businesses.

Location: Serbia; Poland; Kazakhstan; Georgia; European Union Workplace: Remote 🌍 Remote Salmon is a technology-driven financial company building a banking and lending platform across Southeast Asia, starting in the Philippines. We combine global fintech expertise with deep local market knowledge to make financial services simple, accessible, and useful for millions of people across the region. 7M+ app downloads. 2M+ monthly active users. 7,000+ partner stores. US$310M+ raised from leading global investors. Manila-based, globally distributed, and hybrid-first — our team spans 45+ countries. If you want to solve complex problems at scale and impact how millions of people access and manage money, come build with us. Southeast Asia's fintech moment starts here. About the role: You'll own information security risk management, control assurance, and ISO 27001 ISMS governance across a regulated group spanning banking, consumer finance, and technology. What you'll do: - Form an independent view of security risk and challenge whether proposed controls actually address it, working directly with the Group CISO - Assess control design and operating effectiveness across areas such as IAM, cloud, endpoint security, monitoring, vulnerability management, data protection, and secure development - Turn risk and control data into clear, decision-ready reporting for governance forums What you'll own: - Own the security risk process end to end: assessment, treatment, acceptance, monitoring, and reporting - Maintain the risk register and challenge risk assessments and treatment plans so residual risk, ownership, and remediation status stay current - Maintain the security control framework, test controls using evidence, data, sampling, or technical validation, and drive remediation with control owners - Maintain the ISO 27001 ISMS: policies and standards, Statement of Applicability, risk records, control evidence, exceptions, and key security registers - Track control deficiencies, findings, exceptions, and remediation actions - Define KRIs and control metrics, and flag where management decisions or escalation are needed What makes you a strong fit: - Strong practical experience in information security risk management: inherent and residual risk, treatment, acceptance, control effectiveness, risk appetite - Enough technical depth to critically assess controls across IAM, cloud, endpoint security, monitoring, vulnerability management, data protection, and secure development - Hands-on experience reviewing or testing controls, with the ability to distinguish a documented control from an effective one - Working knowledge of ISO 27001, with the ability to turn complex risk and control information into concise management reporting - Comfortable working with GRC platforms, structured risk and control registers, and evidence management What we offer: Ownership and flexibility - Fully remote work with core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8) - Company-provided tools and equipment Health and time off - Medical insurance support for you and your family through co-funding or reimbursement, depending on your location and subject to policy limits - Access to an internal mental health support specialist - 22 vacation days, Philippine public holidays, and 15 sick days Growth and team experience - Opportunities to learn and share your expertise through internal expert meetups, external conferences, speaking opportunities, and industry publications - Company-sponsored trips to Manila to meet and work with your team in person - High-performing teams can earn a dedicated beach house week in Southeast Asia We believe strong teams are built by people with different backgrounds, experiences, and points of view. Salmon is an equal opportunity employer, and we make hiring decisions based on skills, experience, and potential.

О проекте: Международный проект в области AI Security, связанный с разработкой сред, которые помогают LLM-моделям проходить обучение с подкреплением для задач, связанных с кибербезопасностью. Эти среды содержат задания в различных областях кибербезопасности (пентестинг, реагирование на инциденты, эксплуатация, вредоносное ПО и т.д.), цель — создавать достаточно сложные задачи, чтобы модель допускала ошибки, но которые остаются решаемыми для профессиональных специалистов. Это не классическая позиция Pentester или Red Team Engineer. Основная задача — создавать сложные, но реалистичные и проверяемые security-сценарии, в которых LLM-модели совершают ошибки из-за недостатков в рассуждении (reasoning), а не из-за неоднозначных инструкций или ограничений среды. Задачи: — Проектировать security-сценарии для оценки и обучения LLM-моделей — Создавать environments с использованием GitHub, Slack и других инструментов, встречающихся в реальной разработке — Разрабатывать задачи, требующие сложного многошагового reasoning — Моделировать реальные offensive security-сценарии (supply chain attacks, malicious pull requests, exploitation через GitHub Actions и другие техники) — Проверять сценарии на нескольких frontier-моделях и анализировать причины ошибок — Формулировать ожидаемое поведение модели и описывать, почему ошибка считается reasoning failure — Автоматизировать создание и проверку задач с использованием Python и других инструментов Требования: — 5+ лет практического опыта в Offensive Security, Application Security или Web Penetration Testing — Глубокое понимание современных техник атак и поверхности атаки веб-приложений, API, GitHub, CI/CD и связанных экосистем — Практический опыт penetration testing и исследования безопасности приложений — Опыт разработки на Python и/или JavaScript — Навыки статического и динамического анализа кода (Python, JavaScript, Java) — Умение самостоятельно исследовать новые направления, проектировать сложные сценарии и объяснять результаты — Свободный английский язык (Upper-Intermediate / B2+) — Практический опыт работы с современными LLM-моделями — Понимание особенностей работы LLM, ограничений и типичных failure modes — Интерес к AI Security и исследованию поведения LLM Будет плюсом: — Практический опыт AI Red Teaming или LLM Security — Опыт работы с Agentic AI, AI Agents или Model Evaluation — Опыт исследований безопасности GitHub Actions, CI/CD, Supply Chain Security — Сертификаты OSWE, eWPTXv2, OWEE, OSWA или аналогичные — Публикации, write-ups, участие в Bug Bounty, HackTheBox, TryHackMe, Pwn2Own или других проектах Условия: — B2B-контракт (с ИП) — Оплата в долларах США — Part-time: ориентировочно 5–20 часов в неделю — Минимальный объем — 1–2 задачи в неделю — На выполнение одной задачи обычно требуется 5–10 часов — Локация — строго вне РФ (либо уже за пределами РФ, либо готовность к релокации) — Старт — ASAP

О проекте: Международный проект в области AI Security, связанный с разработкой сред, которые помогают LLM-моделям проходить обучение с подкреплением для задач, связанных с кибербезопасностью. Эти среды содержат задания в различных областях кибербезопасности (пентестинг, реагирование на инциденты, эксплуатация, вредоносное ПО и т.д.), цель — создавать достаточно сложные задачи, чтобы модель допускала ошибки, но которые остаются решаемыми для профессиональных специалистов. Это не классическая позиция Pentester или Red Team Engineer. Основная задача — создавать сложные, но реалистичные и проверяемые security-сценарии, в которых LLM-модели совершают ошибки из-за недостатков в рассуждении (reasoning), а не из-за неоднозначных инструкций или ограничений среды. Задачи: — Проектировать security-сценарии для оценки и обучения LLM-моделей — Создавать environments с использованием GitHub, Slack и других инструментов, встречающихся в реальной разработке — Разрабатывать задачи, требующие сложного многошагового reasoning — Моделировать реальные offensive security-сценарии (supply chain attacks, malicious pull requests, exploitation через GitHub Actions и другие техники) — Проверять сценарии на нескольких frontier-моделях и анализировать причины ошибок — Формулировать ожидаемое поведение модели и описывать, почему ошибка считается reasoning failure — Автоматизировать создание и проверку задач с использованием Python и других инструментов Требования: — 5+ лет практического опыта в Offensive Security, Application Security или Web Penetration Testing — Глубокое понимание современных техник атак и поверхности атаки веб-приложений, API, GitHub, CI/CD и связанных экосистем — Практический опыт penetration testing и исследования безопасности приложений — Опыт разработки на Python и/или JavaScript — Навыки статического и динамического анализа кода (Python, JavaScript, Java) — Умение самостоятельно исследовать новые направления, проектировать сложные сценарии и объяснять результаты — Свободный английский язык (Upper-Intermediate / B2+) — Практический опыт работы с современными LLM-моделями — Понимание особенностей работы LLM, ограничений и типичных failure modes — Интерес к AI Security и исследованию поведения LLM Будет плюсом: — Практический опыт AI Red Teaming или LLM Security — Опыт работы с Agentic AI, AI Agents или Model Evaluation — Опыт исследований безопасности GitHub Actions, CI/CD, Supply Chain Security — Сертификаты OSWE, eWPTXv2, OWEE, OSWA или аналогичные — Публикации, write-ups, участие в Bug Bounty, HackTheBox, TryHackMe, Pwn2Own или других проектах Условия: — B2B-контракт (с ИП) — Оплата в долларах США — Part-time: ориентировочно 5–20 часов в неделю — Минимальный объем — 1–2 задачи в неделю — На выполнение одной задачи обычно требуется 5–10 часов — Локация — строго вне РФ (либо уже за пределами РФ, либо готовность к релокации) — Старт — ASAP

Задачи: Защита масштабной цифровой экосистемы Vingroup: Cloud, приложения, данные, IT-инфраструктура, OT и критически важные системы. Условия: Помощь с релокацией, визой и разрешением на работу; Поддержка с жильём; Международная медицинская страховка; 18–20 дней оплачиваемого отпуска + праздники; 1–2 оплачиваемых перелёта на родину в год; Поддержка членов семьи; Образование детей — до $25 000 в год на ребёнка в зависимости от условий программы; Транспортная поддержка; Льготы экосистемы Vingroup; Персональный HR-сопровождение при переезде и адаптации. Открытые направления: SOC — Tier 1 / 2 / 3; Red Team / Offensive Security; Application Security; Cloud / Network / Infrastructure Security.

Требования: — 4+ года опыта Задачи: — Опыт работы в SOC/операциях безопасности — Активное использование AI для автоматизации и обнаружения в SOC — Практический опыт работы с SIEM — Глубокое понимание фреймворков реагирования на инциденты

Задачи: — Развивать antifraud-направление: определять стратегию, roadmap и приоритеты; — Руководить командой scientists/developers и развивать экспертизу; — Разрабатывать и внедрять antifraud-правила, scoring-модели и автоматизировать ручные процессы; — Развивать единый antifraud-сервис и выводить решения в production. Требования: — Опыт построения fraud prevention в iGaming, fintech, marketplace или payments; — Опыт работы с разными типами фрода и управления antifraud-направлением; — Опыт управления разработкой в роли лида + готовность самостоятельно писать и выводить код в production; — Уверенный SQL и Python; опыт Machine Learning для classification и scoring-задач будет плюсом; — Опыт взаимодействия с бизнесом и другими стейкхолдерами. Условия: — Компенсация на основании ваших ожиданий; — 24 дня оплачиваемого отпуска; — Корпоративные занятия английским; — Для сотрудников офиса на Кипре - компенсация питания, GYM & SPA в офисе и корпоративные мероприятия.

Location: Poland; Georgia Workplace: Remote Solvd Inc. is a rapidly growing AI-native consulting and technology services firm delivering enterprise transformation across cloud, data, software engineering, and artificial intelligence. We work with industry-leading organizations to design, build, and operationalize technology solutions that drive measurable business outcomes. Following the acquisition of Tooploox, a premier AI and product development company, Solvd now offers true end-to-end delivery—from strategic advisory and solution design to custom AI development and enterprise-scale implementation. Our capability centers combine deep technical expertise, proven delivery methodologies, and sector-specific knowledge to address complex business challenges quickly and effectively. We are looking for an Application Security Engineer to join a greenfield digital news platform build for a major international news brand. Security is not a pre-launch checklist here — it is an engineering requirement embedded across every phase of delivery, from architecture through launch and into multi-year support. You'll be the security authority on a full-lifecycle engagement, validating controls across a composable CMS, video pipeline, advertising integrations, personalisation services, and public-facing APIs — on a platform designed to sustain extreme traffic during breaking-news events. WHAT YOU'LL DO - Define and validate application and platform security controls across all delivery phases. - Perform architecture and threat-model reviews at design stage and as the platform evolves. - Review authentication, authorization, and privileged-access controls across CMS, APIs, and integrated services. - Validate API and integration security across a composable, multi-vendor platform architecture. - Review secrets, credentials, and token-management practices across the full stack. - Support vulnerability scanning and penetration-testing activities — coordinating findings and remediation. - Validate encryption and secure data handling across storage, transit, and third-party integrations. - Review security logging, monitoring, and incident-response requirements. - Support GDPR and privacy engineering requirements throughout delivery. - Conduct third-party security assessments for integrated services and vendors. - Provide remediation guidance and produce security acceptance evidence ahead of launch. BASIC QUALIFICATIONS - 5+ years of experience in application security, security engineering, or a closely related role. - Experience performing threat modelling and architecture security reviews on complex, multi-component platforms. - Strong knowledge of authentication and authorization patterns — OAuth, OIDC, RBAC, privileged access management. - Hands-on experience validating API security and reviewing integration patterns across third-party services. - Solid understanding of secrets management, credential handling, and token lifecycle best practices. - Experience supporting or coordinating vulnerability scanning and penetration testing programmes. - Knowledge of encryption standards and secure data handling practices across storage and transit. - Familiarity with GDPR and privacy-by-design engineering requirements. - Ability to produce clear remediation guidance and security acceptance documentation for engineering and delivery teams. PREFERRED QUALIFICATIONS - Experience securing composable CMS or media platform architectures — AEM, Amplience, or similar. - Background working on high-traffic, public-facing platforms where availability and security intersect. - Experience with security logging and monitoring tooling — SIEM, alerting, incident response playbooks. - Familiarity with third-party vendor security assessment processes. - Relevant certification — CISSP, OSCP, CEH, or equivalent. - Experience working within a phased, full-lifecycle delivery programme alongside engineering and architecture teams. When you join Solvd, you'll… - Shape real-world AI-driven projects across key industries, working with clients from startup innovation to enterprise transformation. - Be part of a global team with equal opportunities for collaboration across continents and cultures. - Thrive in an inclusive environment that prioritizes continuous learning, innovation, and ethical AI standards. Ready to make an impact? If you're excited to build things that matter, champion responsible AI, and grow with some of the industry’s sharpest minds. Apply today and let’s innovate together. Solvd is an equal opportunity employer.

Требования: — Опыт Security Code Review — Знание основных уязвимостей Java, Kotlin, .NET и умение находить их в коде — Знание логических уязвимостей, где они могут возникать, и опыт их нахождения в коде и диаграммах последовательности — Опыт работы с SemGrep, Solar AppScreener — Опыт написания правил и их оптимизации — Опыт написания правил для GitLeaks — Опыт оптимизации сканирования AppScreener — Знание основных уязвимостей веб и мобильных приложений, умение оценить их критичность — Опыт триажа уязвимостей — Опыт разработки отчетов и рекомендаций по результатам анализа безопасности — Опыт проведения анализа защищенности веб и мобильных приложений — Опыт моделирования угроз и проведения ревью безопасности нового функционала приложений — Умение применять паттерны ООП на Python и написание скриптов инструментов с применением паттернов ООП — Знание английского языка на уровне чтения технической литературы — Готовность самостоятельно разбираться в чужом коде (скриптах) — Ведение базы знаний и технической документации — Работа в Agile/SCRUM командах — Опыт работы с GIT — Знание и опыт работы с CI/CD на базе GitLab