Требования:
Опыт Security Code Review
Знание основных уязвимостей Java/Kotlin/.NET и умение находить их в коде
Знание логических уязвимостей, где они могут возникать и опыт их нахождения в коде и диаграммах последовательности
Опыт работы с SemGrep, Solar AppScreener. Опыт написания правил и их оптимизации
Опыт написания правил для GitLeaks
Опыт оптимизации сканирования AppScreener
Знание основных уязвимостей веб и мобильных приложений. Умение оценить их критичность
Опыт триажа уязвимостей
Опыт разработки отчетов и рекомендаций по результатам анализа безопасности
Опыт проведения анализа защищенности веб и мобильных приложений
Опыт моделирования угроз и проведения ревью безопасности нового функционала приложений
Уметь применять паттерны ООП на Python и написание скриптов инструментов с применением паттернов ООП
Знать английский язык на уровне чтения технической литературы
Готовность самостоятельно разбираться в чужом коде (скриптах)
Ведение базы знаний и технической документации
Работа в Agile/SCRUM командах
Опыт работы с GIT
Знание и опыт работы с CI|CD на базе GitLab
Location: Remote (United States | Canada)
Workplace: Remote
1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing.
About 1Password
At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work.
If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future.
As a Staff Security Engineer on Security Incident Response, you'll serve as a senior technical leader and builder for the team, helping shape both how we respond to incidents today and how our response capabilities evolve over time.This role is about advancing what the team is capable of, not just responding when something breaks. You'll design and build the AI-assisted systems that extend the team's reach, lead the response to the most complex incidents, and own programs that make the organization more prepared over time, from tabletop exercises and gamedays to the continued advancement of threat hunting and insider risk capabilities.
You bring engineering depth, sound incident judgment, and the ability to plan, and deliver complex work against a longer-term maturity roadmap not just execute against a queue.
This is a senior individual contributor role with organization-wide impact on how 1Password investigates, contains, and learns from security incidents.
This role reports to the Manager, Security Incident Response.
How we’re using AI today
Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers.
This is a remote opportunity within Canada and the US.
What we're looking for:
- Significant experience leading complex, high-severity security incidents across multiple environments, including serving as an incident commander or equivalent technical lead.
- Experience designing and building AI-assisted or agentic automation for security operations (triage, investigation, containment), with sound judgment about where automation should and shouldn't hold decision authority.
- Strong software engineering skills, and experience building production tooling, automation, or systems rather than only operating existing security platforms.
- Experience owning a security program or capability roadmap end to end, including planning, sequencing, and delivering multi-quarter work.
- Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and response approaches.
- Experience designing and running tabletop exercises, gamedays, or comparable readiness programs and translating findings into improvements..
- Strong written and verbal communication skills, including the ability to represent technical tradeoffs to senior leadership and cross-functional stakeholders.
- Experience mentoring engineers or otherwise raising the technical and investigative capabilities of a team.
How you'll work:
- You look for opportunities to build systems that scale the team's capabilities rather than relying on repeated manual effort, and you're interested in thoughtfully applying AI and automation where they can improve security outcomes.
- An experienced incident commander who brings structure to complex incidents, makes sound decisions with incomplete information, and helps teams move forward during high-pressure situations.
- You're comfortable taking ownership of a capability from strategy through execution, including defining priorities, sequencing work, navigating dependencies, and delivering against a longer-term roadmap.
- You can operate as a technical partner to leaders and cross-functional teams, independently representing technical priorities, risks, and tradeoffs.
- You value continuous improvement and contribute to an environment where teams can examine incidents, decisions, and failures openly and turn what they learn into stronger systems and practices.
What you can expect:
- Serve as incident manager and technical escalation point for complex, high-severity events, bringing structure, sound judgement, and clear decision-making under pressure.
- Design and build AI-assisted and automated systems that improve how quickly and consistently the team can triage, investigate, and contain incidents.
- Establish appropriate safety controls, approval gates, auditability, and rollback mechanisms for automated and AI-assisted actions, ensuring high-impact decisions remain appropriately human-controlled.
- Own the team's readiness programs, including tabletop exercises and incident gamedays, from scenario design and execution through debriefing and translating finishes into concrete (or measurable) improvements
- Advance the team’s threat hunting and insider risk capabilities by identifying opportunities, defining priorities, and delivering roadmap work that improves investigative depth and coverage
- Plan, sequence, and deliver multi-quarter initiatives that mature the team's capabilities, bringing project management discipline to work that doesn't fit neatly into a sprint.
- Mentor and provide technical leadership to other engineers, strengthening engineering rigor and investigative judgement across the team.
- Partner with Security Operations, Product Security, and Engineering teams to close gaps surfaced through investigations, hunting, and simulations.
- Foster psychological safety and blameless learning across incident retrospectives, gamedays, and tabletop debriefs.
- Extend strong incident response practices beyond the immediate team by building reusable systems, tooling, and operating patterns that strengthen response capabilities across areas such as PSIRT, Privacy, and Engineering.
USA-based roles only: The annual base salary for this role is between $192,000 USD and $278,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
Canada-based roles only: The annual base salary for this role is between $167,000 CAD and $242,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.
This posting is for an existing vacancy.
Our culture
At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first.
You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results.
How we work with AI
We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password.
This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others.
Our approach to remote work
We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.
What we offer
We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:
Health and wellbeing
👶 Maternity and parental leave top-up programs
🩺 Competitive health benefits
🏝 Generous PTO policy
Growth and future
📈 RSU program for most employees
💸 Retirement matching program
🔑 Free 1Password account
Community
🤝 Paid volunteer days
🏆 Peer-to-peer recognition through Bonusly
🌎 Remote-first work environment
*Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting.
You belong here.
1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.
Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs.
Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you.
Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.
1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.
Fastly is seeking a Threat Detection Analyst for the APAC region who is Japanese speaking. The role is part of the Fastly Customer Security Operations Center (CSOC) team, focusing on operational support of Fastly’s security products and services, particularly integrating and supporting agent software installed on customer systems. The position involves monitoring and analyzing customer activity with emphasis on security functions such as identifying account-takeover, Bot Attacks, and WAF administration, focusing on application layer security and web technologies. The role requires working Friday to Tuesday, 0000 - 0800 UTC (9am - 6pm AEST).
Responsibilities include:
— Ensuring security for customers and providing outstanding responses to security issues.
— Providing deep application-security expertise on escalated cases from customers and automated systems.
— Conducting continuous improvement and research to enhance customer security products and operations.
— Contributing to processes and policies to scale the organization.
— Creating and reviewing security service reports for customers.
— Creating and managing security content for customer environments.
Requirements:
— Prior experience working in a SOC environment.
— Experience with SaaS/Cloud or hybrid cloud deployments; Apache, NGINX, IIS or other web server platforms and associated application server technologies and frameworks.
— Scripting skills in Python, Java, Go, Rust, PHP, Unix/Linux Shell, C#, or other common web languages.
— Strong information security background with practical skills in application security.
— Experience in IT or security technical support, operations, or research roles.
— Unix/Linux or Windows system administration skills.
— Ability to work with limited supervision and mentor others on security knowledge.
— Fluent spoken and written English, adaptable to different audiences.
— Experience troubleshooting software products.
— Focus on delivering exceptional customer experiences.
Work hours require availability during core business hours. The position is remote based with potential to become hybrid as Fastly expands in the region. Travel to the US and internationally may be required.
Benefits include a comprehensive package starting from day one, with variations depending on country. Fastly emphasizes a positive work environment, diversity, inclusion, and support for employees' passions and causes.
Applications must be submitted through Fastly's official careers site. Fastly is an equal opportunity employer committed to a safe and welcoming work environment free of discrimination and harassment. Reasonable accommodations are available for applicants with disabilities.
Задачи:
— Проводить оценку архитектуры решений и готовности сервиса к запуску с точки зрения безопасности;
— Анализировать отчеты SSDLC сканеров, bug bounty;
— Разрабатывать рекомендации по устранению уязвимостей, ставить задачи на команды, проверять устранения;
— Дорабатывать правила для SSDLC сканеров и WAF;
— Заниматься построением и развитием процессов SSDLC;
— Заниматься написанием политик и инструкций по информационной безопасности в своей зоне ответственности;
— Обучать и консультировать команды разработки в области информационной безопасности.
Требования:
— Знаешь принципы безопасной разработки;
— Имеешь опыт анализа архитектуры приложений и отдельных технологических процессов с точки зрения безопасности;
— Имеешь навыки определения и устранения уязвимостей в веб и мобильных приложениях;
— Работал с инструментами SAST, DAST, SCA, WAF;
— Знаешь типовые протоколы аутентификации, базовые принципы криптографии;
— Имеешь навыки работы в команде.
Желательно, но не обязательно:
— Умение разбираться в чужом коде (Java, JavaScript, TypeScript, Kotlin, Swift);
— Навыки автоматизации задач с помощью скриптовых языков (Python, Go);
— Практический опыт работы с Linux, Docker, Kubernetes.
Условия:
— Оформление по трудовому кодексу. Полностью белая зарплата.
— Каждый месяц отдельная сумма на питание.
— Регулярные тимбилдинги, спортивные забеги, корпоративные праздники.
— ДМС включает стоматологию и полис путешественника.
— Обучение за счёт компании: тренинги, конференции, митапы, курсы английского.
— Выдача ноутбука и всего необходимого для работы.
— Возможность работать в красивом и удобном офисе с кофе, сладостями и фруктами.
— Бесплатные онлайн-консультации психологов, юристов, специалистов по финансам и ЗОЖ, ветеринаров.
— Офисы в Нижнем Новгороде, Москве и Петербурге.
Задачи:
— Проверять безопасность сервисов, приложений, архитектуры, новых фич и сопровождать внедрение мер по устранению выявленных рисков
— Давать рекомендации по построению безопасной архитектуры, описывать целевую архитектуру по лучшим практикам (в том числе OWASP)
— Анализировать код разрабатываемых сервисов на наличие уязвимостей
— Проводить аудит безопасности сред и приложений (web, API, mobile)
— Проводить аудит и тестирование программ лояльности на предмет безопасности и возможных злоупотреблений, включая анализ бизнес-логики
— Составлять отчеты по результатам аудитов, заводить задачи в Jira с рекомендациями, сопровождать их до закрытия и перепроверки, контролировать недопущение роста технического долга безопасности
— Строить и поддерживать модели угроз по закрепленным сервисам
— Составлять рекомендации по улучшению автоматических сканеров анализа уязвимостей совместно с DevSecOps
— Анализировать уязвимости по программе bug bounty: триаж, оценка, рекомендации
— Оказывать помощь младшим специалистам команды, участвовать в их обучении и передаче экспертизы
Требования:
— Коммерческий опыт работы в AppSec / анализе защищённости от 5 лет
— Глубокие знания web-технологий, понимание архитектуры микросервисных приложений
— Понимание природы уязвимостей из OWASP Top 10 и OWASP Mobile Top 10 и умение их эксплуатировать
— Умение работать с инструментами: nmap, BurpSuite, ZAP, MSF, SQLmap, nuclei, mobsf, gobuster и другими, способность объяснить их работу в боевом режиме
— Опыт построения моделей угроз (STRIDE / threat modeling) и ревью архитектуры
— Опыт анализа кода с точки зрения безопасности хотя бы на одном из распространенных стеков
— Опыт тестирования на проникновение веб-приложений, мобильных приложений и API от 3 лет
— Знания принципов работы средств защиты информации (WAF и решений на уровне сервиса)
— Умение обходить защиту на уровне приложений и средств защиты информации
Преимущества:
— Опыт работы в e-commerce, fintech или маркетплейсах (понимание рисков платежей, авторизации, бонусных систем, программ лояльности)
— Понимание инфраструктурных уязвимостей
— Навыки работы со скриптами (Python, Bash) для автоматизации тестов
— Наличие профильных сертификатов
— Успешный опыт участия в CTF
— Высшее образование в сфере ИБ или ИТ
Условия:
— Аккредитованная IT-компания, развивающая один из ТОП-10 крупнейших интернет-магазинов страны
— Персональное предложение по заработной плате и официальное трудоустройство
— Гибридный формат работы
— Помощь карьерного консультанта для выбора индивидуального направления развития
— Широкий социальный пакет со стоматологией, компенсация питания в офисе, скидки и бонусы от партнеров
— Современное оборудование для работы
— Стильный и уютный офис в центре Екатеринбурга и Москвы
— Корпоративная культура, уважение индивидуальности, отсутствие дресс-кода
— Изучение английского языка, компенсация обучений и развитие в онлайн-университете
О компании и команде
Страховая Группа «СОГАЗ», один из крупнейших в России страховщиков федерального уровня, предлагает присоединиться к высокопрофессиональной команде специалистов, обладающей уникальным для рынка опытом, знаниями и технологиями. Блок ИБ в СОГАЗ активно развивается. Мы создаем новые решения, которые делают нашу работу более технологичной и эффективной. В настоящее время мы находимся в поиске опытного специалиста по безопасности кода.
Задачи:
— развивать цикл и процессы безопасной разработки (S-SDLC) в части статического анализа Web приложений (процессы, автоматизация);
— обеспечивать защиту разрабатываемых и используемых приложений компании;
— проводить аудиты безопасности разрабатываемых сервисов (ручной анализ, статический анализ кода, поиск секретов);
— принимать участие в проектировании безопасной архитектуры разрабатываемых продуктов;
— формировать и формализовывать требования безопасности для продуктов;
— консультировать разработчиков и контролировать устранение выявленных уязвимостей;
— разрабатывать, внедрять и сопровождать системы и процессы информационной безопасности в части статического анализа кода и поиска уязвимостей;
— проводить обучение сотрудников требованиям информационной безопасности в части разработки
Требования:
— умение самостоятельно выявлять уязвимости в Web приложениях;
— понимание циклов CI/CD (Gitlab-CI) и DevOps;
— понимание принципа работы и настройки правил и инструментов статического анализа Web приложений;
— экспертное знание Client-Side и Server-Side уязвимостей (OWASP TOP-10 и немного больше);
— понимание хотя бы одного языка программирования (в приоритете Java и Python);
— понимание принципов работы систем аутентификации и авторизации (PKI, LDAP, OAuth, SAML, 2FA);
— знание Bash, Docker, Python или Go;
— умение читать код и выявлять ошибки;
— опыт работы со сканерами уязвимостей (Burp Suite, OWASP ZAP).
Будет плюсом:
— наличие репортов о найденных уязвимостях в программах Bug Bounty;
— наличие профильных сертификатов (OSCP, OSWE, CDP и т.д.);
— наличие зарегистрированных CVE;
— опыт выступления на профильных конференциях и написания профильных статей
Условия:
— оформление полностью в соответствии с ТК РФ;
— ДМС со стоматологией в лучших клиниках страны;
— премиальные условия на все виды страхования в «СОГАЗе» для вас и близких родственников;
— собственный фитнес-центр в офисе в центре Москвы (оборудование Milon для «умных» тренировок);
— возможность проходить внешнее обучение после успешного прохождения испытательного срока, а также обучаться на курсах корпоративного портала;
— скидки в детские лагеря и подарки на Новый год для детей сотрудников;
— реальные возможности профессионального и карьерного роста;
— настрой на долгосрочное сотрудничество;
— возможность работать гибридно (офис в пешей доступности от м. Чистые пруды).
Location: Toronto; Calgary; Boston; Canada; Seattle; New York; Vancouver; California; Ottawa; Montreal
Workplace: Remote
WHO ARE WE?
Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.
We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.
We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.
We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!
WHY THIS ROLE
Enterprises hand Cohere their most sensitive data and put our models inside workflows they can't afford to get wrong. Securing that means working on problems the industry hasn't settled yet, what authorization means when an agent acts on a user's behalf, how to contain tools that consume untrusted input, and whether tenant boundaries hold when a model can be steered by the data it reads. The established playbooks only take you so far.
We're hiring a Senior Product Security Engineer to work these problems alongside the engineers building the products, reviewing architecture and code, threat modeling before implementation, testing what ships, and turning what you learn into defaults other teams inherit. This is a hands-on engineering role, not an advisory one.
WHAT YOU’LL DO
- Lead security reviews. Review architecture, code, and security-sensitive changes. Identify both individual vulnerabilities and the recurring design patterns behind them.
- Secure AI-powered products. Evaluate risks such as prompt injection, unsafe tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and sandbox escapes.
- Threat model new capabilities. Identify trust boundaries, abuse cases, and high-impact failure modes before implementation. Translate findings into practical, prioritized mitigations.
- Perform hands-on testing. Investigate suspected vulnerabilities, develop proofs of concept, assess exploitability and impact, and partner with engineers through remediation.
- Build scalable guardrails. Develop secure defaults, approved patterns, reusable controls, review requirements, and automated checks that reduce recurring risks.
- Strengthen engineering capability. Pair with engineers, document practical guidance, and help product teams develop durable security expertise.
- Influence risk decisions. Explain technical findings, business impact, and remediation options clearly to engineers, product leaders, and executives.
YOU MAY BE A GOOD FIT IF
- You have strong software engineering fundamentals and can independently understand, test, and contribute fixes to production codebases.
- You are proficient in at least one of Python, Go, or TypeScript.
- You have led security reviews or threat models for complex production systems and can point to meaningful design or risk improvements that resulted.
- You understand common vulnerability classes and their underlying design failures, including injection, authorization flaws, IDOR, SSRF, unsafe deserialization, race conditions, cryptographic misuse, and software supply-chain risks.
- You understand modern application architecture, including web applications, APIs, OAuth/OIDC, cloud platforms, containers, Kubernetes, and CI/CD systems.
- You can reason rigorously about untrusted input, authorization, isolation, identity, delegation, and data boundaries. Direct experience with agentic AI systems is valuable but not required.
- You have driven security improvements involving multiple engineering teams, including situations where influence mattered more than authority.
- You communicate clearly with both technical and non-technical audiences.
NICE TO HAVE
- Experience building or operating security tooling such as SAST, DAST, SCA, custom linters, or policy-as-code.
- Experience securing multi-tenant SaaS, enterprise software, or systems that process sensitive customer data.
- Offensive security experience through penetration testing, red teaming or security research.
- Experience operating or participating in a vulnerability disclosure or bug bounty program.
- Contributions to open-source security projects, published research, conference talks, or credited vulnerability discoveries.
FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS:
- A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
- Full health and dental benefits, including a separate budget for mental health.
- RRSP matching, 401K, Pension Scheme.
- 100% Parental Leave top-up for up to 6 months, for either parent.
- Annual enrichment benefits:
Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
Education & learning stipend for conferences, courses, and coaching.
- 6 weeks of paid vacation (30 working days!)
- Budget for traveling to other offices if you are remote, plus an annual company offsite.
HOW AND WHERE WE WORK:
- Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon.
- For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.
- For those not near an office: a co-working benefit so you can work alongside others in your city.
- Everyone receives a $500 home office stipend to set up your workspace properly.
If any of the above doesn’t line up exactly with your experience, we still encourage you to apply.
We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs.
We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.
Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.
Задачи:
- Разрабатывать нагруженные бэкенд-приложения
- Участвовать в проектировании внутренней архитектуры приложений и код-ревью
- Разрабатывать unit-тесты
- Прорабатывать метрики в приложении для настройки мониторинга и алертинга
- Участвовать в системном анализе
- Участвовать в проработке и принятии архитектурных решений
Требования:
- Коммерческий опыт разработки на Go: конкурентность, тестирование, профилирование
- Понимание внутреннего устройства macOS и Linux: процессы, сетевой стек, файловые системы, механизмы безопасности
- Умение работать с бинарными данными, парсить системные логи, анализировать память
- Знание сетевых протоколов и методов обеспечения безопасности: TLS, mTLS, криптография
- Опыт командной работы, умение общаться с техническими командами
Будет плюсом:
- Опыт работы с системными вызовами, низкоуровневыми API macOS (IORegistry, XPC, EndpointSecurity) и Linux (inotify, procfs, seccomp, eBPF)
- Опыт с eBPF для мониторинга системных событий, опыт создания резидентных приложений, знание разработки под macOS (Sandboxing, Notarization)
Задачи:
— Разрабатывать инструменты, сервисы и автоматизации для задач кибербезопасности.
— Активно использовать LLM в ежедневной работе (Claude, Cursor и другие AI-инструменты).
— Автоматизировать процессы безопасности и избавляться от ручной работы.
— Создавать детекторы, проверки и security automation.
— Участвовать в разработке внутренней платформы для кибербезопасности.
Требования:
— Python будет одним из основных инструментов, но важнее умение разбираться в сложных задачах, быстро осваивать новые технологии и находить нестандартные подходы к их решению.
— Специалисты с сильным техническим бэкграундом и продуктовым мышлением, которым интересно создавать инструменты и сервисы, приносящие реальную пользу другим командам.
Location: Belgrade, Serbia
Workplace: hybrid
Are you ready to join our digital revolution journey?
At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.
Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.
With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career.
Role Purpose
As Audit & Compliance Manager, Europe, you will be the primary owner of audit readiness and tax regulatory compliance across all Europe entities. You will set the standard, structure and cadence for how the region prepares for and manages statutory audits, global group audits, and tax authority engagement — working through the local reporting teams and external accountants who handle data preparation, review and submission, rather than performing that work yourself. Your role is to define how things get done, ensure consistent quality across every market, and be the region's face in front of auditors and tax authorities.
What Makes This Role Different:
Build, don't just maintain.
You're stepping into a newly created position with a mandate to design the region's audit and compliance approach from the ground up — not inherit a fixed process.
Full regional ownership.
This role spans the entire Europe region.
High visibility, real stakes.
You'll be the direct point of contact with external auditors and tax authorities on some of the company's most sensitive matters, with senior leadership relying on your judgment.
A technology-forward environment.
The business is actively investing in automation, AI and dashboarding to modernize reporting — you'll be expected to bring ideas here, not just adopt what's handed to you.
Cross-functional reach.
You'll work closely with the Tax, Transfer Pricing and Legal teams, and directly with hub-entity finance teams, on issues spanning VAT, customer transactions and company-wide reviews.
What You'll Do:
1. Statutory & Global Audit Leadership
Audit Lifecycle Ownership:
Lead the end-to-end process for local statutory audits and global group audits across all 23 countries — planning, coordinating PBC (Provided by Client) lists, and driving on-time sign-off.
External Auditor Relationship:
Act as the primary regional point of contact for audit firms, owning timelines and resolution of open items.
Consolidation Alignment:
Ensure local statutory filings align with Global/Group reporting timelines (IFRS/US GAAP/local GAAP) for a seamless audit process.
Pre-Audit Structuring:
Work with local teams ahead of each audit cycle to define what needs to be prepared and how — so the region walks into every audit with a consistent, proactive structure rather than reacting to auditor requests.
2. Tax Governance & Regulatory Compliance
Filing Oversight:
Ensure accurate, on-time submission across VAT, Withholding Tax (WHT), Corporate Income Tax, and country-specific statistical and national bank reporting — delivered through local reporting teams and external accountants, with you owning quality and timeliness.
Tax Team Liaison:
Standardize and oversee submission of supporting data to the central Tax team; ensure schedules provided for assessments are reconciled and audit-ready.
Notice & Assessment Management:
Proactively manage tax notices and audits, coordinating evidence-gathering and working with the Tax team to ensure timely, well-supported responses.
Corporate Secretarial Support:
Oversee annual filings and coordinate with Legal on board meeting minutes (financial aspects) and other local regulatory requirements.
3. Process Improvement & Digital Transformation
Root Cause Analysis:
Identify recurring audit adjustments or tax queries and implement structural fixes to eliminate them at the source.
Internal Controls:
Strengthen the control environment across the region to minimize audit findings.
Technology & Automation:
Identify and champion tools — including AI and dashboarding — to reduce manual work and increase consistency across the region's reporting.
What We're Looking For:
Mindset & Soft Skills (critical to this role)
A challenger, not a process-follower — someone who questions how things are done today and proposes a better way, rather than simply executing an existing playbook.
Comfortable operating in a fast-moving, high-volume, occasionally chaotic environment, and energized rather than fatigued by it.
Strong communicator and team player who can build trust quickly across Tax, Legal, Transfer Pricing and local finance teams.
Strategic mindset with the ability to zoom out across markets while staying close enough to the detail to be credible with auditors and tax authorities.
Experience & Technical Skills
Currently operating at Manager level (or equivalent) within an audit firm or a multinational's in-house compliance/audit function — this is not a developmental hire.
10–12+ years of post-qualification experience, with hands-on exposure to multi-country compliance in Europe.
Chartered Accountant (CA), CPA, or ACCA qualification.
Solid working knowledge of IFRS, European tax regulations, and Transfer Pricing fundamentals.
Advanced proficiency with Tier-1 ERP systems (SAP, Oracle, or NetSuite).
Fluent English, written and spoken — required given daily interaction with regional and global stakeholders.
Strong project management and negotiation skills, with the ability to work confidently across time zones and cultures.
#ALEPH
Why Join Us?
Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.
We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.
#ALEPH
Обязанности:
— RedTeam/Пентест сетевого периметра, доменной и платежной инфраструктуры (blackbox, greybox, whitebox)
— Анализ защищённости беспроводных сетей
— Оптимизация и повышение уровня информационной инфраструктурной и сетевой безопасности
— Мониторинг рынка актуальных угроз информационной безопасности
— Участие в R&D проектах
Требования:
— Опыт работы от 2х лет в качестве пентестера инфраструктуры
— Отличное знание как минимум одного языка программирования (go, java, python, php) и умение читать и анализировать исходный код на распространенных языках программирования
— Уверенное владение методикой проведения инфраструктурных пентестов
— Отличное знание сетевых протоколов (TCP/IP), атак на них и обход механизмов защиты
— Навыки тестирования на проникновение и поиска уязвимостей с предоставлением отчетов
— Уверенное владение специализированным ПО и фреймворками для проведения различных видов тестирований (Burp Suite, Metasploit, PowerSploit, BloodHound, Cobalt-Strike, Impacket)
— Опыт администрирования *nix и Windows-систем, web-серверов
— Знание технологий виртуализации (ESXi, Hyper-V) и контейнеризации (Docker, Kubernetes), а также атак на них
— Английский язык – не ниже уровня intermediate (Чтение технической литературы)
Будет плюсом:
— Сертификация в области практической безопасности (OSCP/OSCE/OSEP/GWAPT/GPEN и т.д.)
— Участие в CTF (task-based или attack-defense) и прохождение спец. лабораторий (standoff365, hackthebox, pentester academy)
— Опыт проведения комплексного анализ защищенности платежных инфраструктур и ДБО
— Участие в Red Team
Условия:
— Зарплатные условия обсуждаются по итогам собеседования
— Режим работы офис\Гибрид\удаленка обсуждаются по итогам интервью
— Есть 2 коворкинга на Алтае и Сочи доступные для работы 1 раз в год
— Погружение в ИИ-культуру – взаимодействуем с искусственным интеллектом на постоянной основе и обучаем этому новичков, предоставляем бесплатных ИИ-помощников
— Стандартные + большой компании: ДМС, обучения, возможность участия в различных общих активностях от D&D до марафона
Задачи:
— сопровождать студентов в учебном чате;
— отвечать на вопросы по материалам курса;
— помогать разобраться в сложных темах;
— подсказывать по заданиям, инструментам и практическим кейсам;
— проводить онлайн-вебинары и делиться своей экспертизой;
— поддерживать понятную и конструктивную коммуникацию в чате;
— регулярно проверять сообщения минимум 2 раза в день;
— отвечать на вопросы в течение 24 часов.
Требования:
— практический опыт проведения тестирования на проникновение веб-приложений и API: умение самостоятельно проводить разведку, находить и подтверждать уязвимости, оценивать их влияние и формулировать рекомендации по устранению;
— хорошее знание основных классов веб-уязвимостей из OWASP Top 10: понимание причин возникновения, умение находить на практике, отличать реальные уязвимости от ложноположительных результатов, подтверждать возможность эксплуатации и объяснять разработчикам, как исправить;
— знание уязвимостей аутентификации и авторизации: выявление проблем с управлением сессиями, контролем доступа, IDOR, обходом авторизации и другими типовыми сценариями;
— опыт тестирования API и понимание специфики поиска уязвимостей в API: работа с REST API, анализ запросов и ответов, проверка механизмов аутентификации и авторизации, поиск нарушений контроля доступа и других типовых проблем;
— владение инструментами веб-пентеста и умение применять их для решения практических задач: использование Burp Suite и/или аналогичных инструментов (ZAP, Caido) для перехвата и анализа HTTP-трафика, автоматизации проверок и ручного тестирования;
— умение грамотно документировать результаты тестирования: описание сути и сценария эксплуатации уязвимости, оценка рисков и влияния, приведение доказательств и дача понятных рекомендаций по устранению;
— представление о безопасной разработке, контейнеризации и DevSecOps: понимание этапов SDLC и CI/CD, на которых можно выявлять и предотвращать уязвимости, и как результаты пентеста связаны с процессами разработки.
Условия:
— удалённое сотрудничество с взаимодействием со студентами в учебном чате и на онлайн-вебинарах;
— возможность экспериментировать и реализовать свой потенциал без микроменеджмента;
— плавное погружение в сотрудничество с поддержкой команды и знакомством с инструментами сопровождения;
— пополнение портфолио сертификатами о социально полезной деятельности;
— нетворкинг, поддержка и вдохновение от комьюнити экспертов из разных сфер;
— возможность участвовать в конференциях, мероприятиях и подкастах Яндекс Практикума.
Ищем hands-on DevSecOps / Security специалиста для проекта в сфере regulated crypto / fintech.
Основная задача — разбирать результаты IT/Security-аудитов и технически закрывать выявленные vulnerabilities, security gaps и audit findings.
Что важно:
• DevSecOps / Application / Infrastructure / ICT Security;
• DORA — обязательно;
• MiCA, ISO 27001 или аналогичные стандарты;
• опыт security/compliance-аудитов;
• понимание regulated crypto / fintech;
• умение самостоятельно делать remediation.
Будет плюсом: Fireblocks, crypto custody, MPC, crypto exchanges, custodians, fintech/payment.
Не рассматриваем чистых Compliance Officers, специалистов только по документации и Backend Developers без Security/DevSecOps опыта.
Location: Hong Kong, Hong Kong SAR; Singapore, Singapore
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.
OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.
Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
About the Team
The Compliance function at OKX is responsible for promoting a strong compliance culture and supporting the business in meeting its regulatory obligations and managing enterprise risk.
The Product Compliance team is responsible for embedding compliance into the product lifecycle and supporting the compliant development, launch and ongoing operation of OKX products and features globally across all markets in which our products and services are offered. We work closely with Product, Engineering, Legal, Risk, Central Compliance and local Compliance teams to identify regulatory and compliance requirements, assess product risks and develop practical solutions that support responsible commercial growth.
About the Opportunity
We are seeking an experienced, hands-on and commercially minded Senior Compliance Manager to join our Product Compliance team.
This is a senior individual-contributor role focused primarily on the day-to-day review of new products, material product changes and existing product enhancements. The emphasis is on delivering timely, well-reasoned product compliance assessments using a risk-based approach, ensuring that material compliance risks are sufficiently mitigated and the firm’s regulatory positioning protected.
You will act as a trusted compliance partner throughout the product development lifecycle, helping Product and Engineering teams navigate complex regulatory requirements while enabling commercially viable outcomes. You will be expected to distinguish between legal or regulatory constraints that cannot be crossed, risks that can be addressed through proportionate controls, and residual risks that require documented escalation or risk acceptance.
What You’ll Be Doing
Own and deliver day-to-day compliance reviews of new products, features, market expansions and material changes to existing products across OKX's global business and product suite.
Review product requirements, technical documentation, user journeys, onboarding flows, trading or transaction mechanics, reward structures, disclosures and operational processes.
Apply a risk-based waterfall that distinguishes hard legal or regulatory blockers from risks that may be addressed through controls, product conditions, jurisdictional restrictions, monitoring or escalation.
Conduct and document product compliance risk assessments covering areas such as regulatory perimeter and licensing, AML/CFT, sanctions, KYC, consumer protection, financial promotions, trading and market conduct, asset safeguarding, data privacy and third-party risk.
Produce clear, concise and evidence-based and solutions-based compliance recommendations setting out identified risks, required mitigants, residual exposure and the proposed approval or escalation route.
Work directly with Product, Engineering, Legal, Risk, Central Compliance and local Compliance teams to develop practical and scalable solutions to identified compliance requirements.
Maintain complete and accurate documentation and audit trails for product reviews, decisions, conditions, exceptions, approvals and subsequent changes.
Support post-launch monitoring, control testing and assurance in partnership with Audit, Product and other Compliance teams, and drive remediation of identified issues.
Promote a compliance-by-design culture within the product lifecycle; communicate the Product Compliance framework and program requirements to relevant stakeholders and deliver targeted training or guidance to Product, Engineering and business teams as required.
Support special projects and priority product launches in a fast-paced and continually evolving environment.
What We Look For In You
At least 8 years of relevant experience in Compliance, Legal or Risk within financial services, fintech, payments or the cryptocurrency industry.
Bachelor's degree in law, finance, business, economics, engineering or a related field, or equivalent practical experience.
Significant hands-on experience in product compliance, regulatory advisory or product risk assessment, including advising on new products and material product changes.
Strong understanding of the digital-asset industry and the products offered by crypto platforms, including trading, custody, payments, staking or earn products, lending, structured products, wallets or DeFi.
Strong working knowledge of relevant regulatory and compliance requirements, including licensing and regulatory-perimeter considerations, AML/CFT, sanctions, KYC, consumer protection, financial promotions and trading or market-conduct requirements.
Demonstrated ability to analyze products or initiatives involving significant complexity and risk and translate regulatory requirements into practical product requirements and controls.
Experience in and demonstrated success in leveraging AI-enabled technology to maintain risk assessment standards, including ongoing tuning of agentic skills aligned with the Company’s risk appetite.
Excellent risk judgment and the ability to balance compliance rigor with a pragmatic, risk-based approach that supports responsible commercial outcomes.
Proven ability to develop and deliver repeatable product compliance solutions, controls and review processes aligned with broader group requirements.
Strong project-management and execution skills, including the ability to manage multiple concurrent reviews, maintain accurate documentation and meet product-launch deadlines.
Excellent written and verbal communication skills, with the ability to present clear recommendations and lead discussions with Product, Engineering, Legal, Risk, senior management and other Compliance stakeholders.
Strong stakeholder-management skills and the ability to influence product decisions and constructively challenge proposals without compromising Compliance rigor.
Self-motivated, proactive and comfortable operating independently within a fast-paced, globally dispersed team.
High personal integrity and sound professional judgment, including the ability to identify when an issue requires escalation.
Nice to Haves
Direct product compliance or regulatory advisory experience at a crypto exchange, fintech or technology-led financial-services company.
Experience supporting multi-jurisdictional product launches and applying regulatory requirements across the United States, European Union, Middle East or Asia-Pacific.
Practical knowledge of CeFi trading products, including spot, derivatives, leverage, custody, institutional products and OTC flows.
Familiarity with Web3 products, blockchain technology, smart contracts, DeFi protocols and digital-asset transaction flows.
Experience developing compliance risk-assessment frameworks, controls, and key risk indicators.
Perks &
Benefits
Competitive total compensation package
L&D programs and Education subsidy for employees' growth and development
Various team building programs and company events
Wellness and meal allowances
Comprehensive healthcare schemes for employees and dependants
More that we love to tell you along the process!
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: Dublin, Ireland
Workplace: Hybrid
WHO WE ARE
Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.
Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work.
ABOUT US:
Notion helps you build beautiful tools for your life’s work. In today's world of endless apps and tabs, Notion provides one place for teams to get everything done, seamlessly connecting docs, notes, projects, calendar, and email—with AI built in to find answers and automate work. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, love Notion for its flexibility and choose it because it helps them save time and money.
In-person collaboration is essential to Notion's culture. We require all team members to work from our offices on Mondays, Tuesdays, and Thursdays, our designated Anchor Days. Certain teams or positions may require additional in-office workdays.
ABOUT THE ROLE:
Millions of people rely on Notion to do their most important work. Protecting that trust starts with protecting the people who build Notion: our employees, their laptops, their identities, and the SaaS apps they rely on every day.
We are looking for a hands-on Corporate Security Engineer to own and improve the technical controls that keep our workforce and corporate environment safe. This is a security engineering role focused on building scalable controls and automation across identity, endpoints, SaaS, and workforce infrastructure, not a traditional IT support or corporate engineering role.
You'll own and evolve core security controls, design systems and automation that scale with the company, and help make security both stronger and easier to use. You'll partner closely with IT, Infrastructure, GRC, and Detection & Response to improve the security foundations that employees rely on every day.
WHAT YOU'LL ACHIEVE:
- Harden our identity and access management stack, including Okta and Google Workspace, with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS.
- Run our endpoint security program across a macOS-first fleet, including MDM, EDR, and configuration baselines, with working coverage for Windows and ChromeOS.
- Secure AI tool usage at the endpoint, including governance of large language models, AI agents, and model context protocol (MCP) integrations; detect and prevent unauthorized or risky AI service access and data exfiltration through AI-enabled tools.
- Reduce SaaS risk at scale through SSPM tooling and custom automation, including detection of risky OAuth grants, excessive permissions, shadow IT, and configuration drift.
- Write code (Python, Terraform) to automate access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection.
- Partner with Detection & Response to ensure corporate systems produce the telemetry needed to detect identity, endpoint, and SaaS abuse.
- Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering, not a separate workstream.
- Partner with Detection & Response on investigation and response for corporate security incidents, including phishing, account compromise, lost devices, and BEC.
SKILLS YOU NEED TO BRING:
- Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company.
- Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM).
- Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments.
- Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration.
- Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors.
- Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level.
- Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC.
NICE TO HAVES:
- Experience at a fast-growing tech or AI company where the security program had to outpace headcount.
- A background in IT engineering, SRE, or production engineering that transitioned into security engineering.
- Experience building internal security tooling or workflows that improved employee or developer experience.
- Contributions to the security community through open-source tools, blog posts, or conference talks.
We hire talented and passionate people from a variety of backgrounds because we want our global employee base to represent the wide diversity of our customers. If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply. If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550. https://dev.notion.so/a3ce416456924276a59de91bca740028?pvs=21
#LI-Onsite
A NOTE ON AI
You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on.
EQUAL OPPORTUNITY & ACCOMMODATIONS
We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
Samsara is the pioneer of the Connected Operations™ Cloud, a platform that enables organizations that depend on physical operations to harness IoT data to improve safety, efficiency, and sustainability.
Key requirements:
— proficiency in Go, Python, and JavaScript
— bonus: experience with C/C++ (firmware/embedded systems)
