Инфраструктура и безопасность вакансии - гибрид

Ожидания от кандидата Обязанности: Аудит внутренних ИТ систем на соответствие требованиям законодательства Разработка внутренней нормативной документации Требования к опыту: Высшее образование - информационная безопасность, либо IT образование + наличие сертификата о прохождении профессиональной переподготовки 512 часов.

Location: New York Workplace: Hybrid ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F https://www.baseten.co/blog/announcing-our-series-f/, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE We are looking for an IT Support / Operations Engineer to join Baseten as we continue to scale our IT team. In this role, you will play a critical part in bringing our technical support entirely in-house to provide a seamless, high-touch experience for all Baseten employees. As we continue to scale, you will be the primary point of contact for day-to-day technical issues, allowing you to have a direct impact on our team's productivity and overall office environment. This position is ideal for a hands-on problem solver who enjoys a mix of hardware and software troubleshooting, user lifecycle management, and maintaining the physical IT infrastructure of a modern office. While you will focus heavily on elevating our internal support standards, you will also assist with systems administration and workflow automation as our company evolves. This is a hybrid role based out of our San Francisco or New York office, following our standard policy of three days per week in-person to ensure our physical office and AV systems remain high-performing and reliable.   RESPONSIBILITIES - Serve as the escalation point for day-to-day technical support, diagnosing and resolving hardware and software issues across our Mac and Windows fleet - Manage user lifecycle administration including provisioning, deprovisioning, and access management across all systems and services - Own the IT onboarding experience for new employees — from laptop setup and account configuration to a smooth first-day experience - Maintain and continuously improve office IT infrastructure to ensure a reliable, high-performing environment for all employees - Build and maintain a knowledge base of self-serve resources to reduce ticket volume and empower users - Manage IT asset procurement, inventory tracking, and vendor relationships - Support new office buildouts and contribute to broader workplace IT planning as we scale - Identify opportunities to automate workflows and eliminate inefficiencies across IT operations - Adapt to the evolving needs of a fast-growing company, taking on new challenges as they arise - Systems administration, including managing admin-level access, configuring user permissions, and performing routine maintenance across cloud-based services.   REQUIREMENTS - Strong working knowledge of Google Workspace, MDM platforms (e.g. Kandji), IdM/SSO solutions (e.g. Okta), and video conferencing tools - Proven experience administering macOS at scale, with solid working knowledge of Windows environments - Hands-on experience with automation tools and a track record of streamlining IT processes and workflows - Excellent communication skills with a genuine passion for delivering great support experiences - Strong organizational skills with the ability to manage multiple priorities in a fast-paced, ambiguous environment BENEFITS - Competitive compensation, including meaningful equity - (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents - Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!) - Paid parental leave - Fertility and family-building stipend through Carrot - (U.S. only) Company-facilitated 401(k) - Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities. Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you. At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).

Заниматься автоматизацией CI/CD на тестовых и промышленных системах (Jenkins, Ansible). Обеспечивать непрерывную работоспособность проектов.

Поддерживать инфраструктуру на bare metal и виртуальных машинах. Разворачивать и обслуживать кластеры Kubernetes.

• Коммерческий опыт в DevOps или SRE от 4 лет. • Реальный опыт проектирования и построения инфраструктуры с нуля.

Location: Warsaw, Mazowieckie, Poland; Sofia City, Bulgaria; Limassol, Cyprus Workplace: hybrid Capital.com's Product Security team protects our web and mobile applications, infrastructure, and external perimeter in a highly regulated environment. As Senior/Staff Application Security Engineer, you will raise the bar for application security across the organisation. This role is measured by leverage: how well you design, automate, and scale security processes so that many engineering teams can build securely by default. You will lead security architecture reviews and threat modelling, increasingly with the help of AI tooling, and turn one-off security work into repeatable, self-service capabilities. The role combines deep hands-on offensive and defensive security expertise with the engineering mindset needed to automate at scale. You will work closely with development, QA, DevOps, and platform teams. Responsibilities: Security Architecture & Threat Modelling: Lead security architecture reviews and threat modelling for new and existing systems, using AI tools to make reviews faster, more consistent, and scalable across teams Act as a security force multiplier by influencing the standards, patterns, and guardrails that let teams move fast and stay secure Security Automation & Tooling: Design, build, and automate scalable security processes that engineering teams can self-serve, covering secure design review, threat modelling, testing, and remediation workflows Integrate and automate security checks across the SDLC and CI/CD pipelines (SAST, DAST, SCA, secrets, and IaC scanning), tuned for strong signal and low friction Own and evolve security tooling such as DefectDojo and SAST, DAST, and SCA platforms, maximising automation, coverage, and integration Apply AI and LLM-based tooling to architecture review, threat modelling, code review, and vulnerability triage, and help define how the team adopts these tools safely Security Testing & Vulnerability Management: Conduct and oversee security assessments of web and mobile applications, APIs, and cloud infrastructure, including manual testing and PoC development Run vulnerability scans across internal infrastructure and the external perimeter, then analyse findings, define remediation, and track issues to closure Support and triage the Bug Bounty Program and external vulnerability reports, automating triage where possible Participate in and help lead red teaming and offensive security exercises Enablement: Drive knowledge sharing on secure development, mentor engineers, and deliver training for development and QA teams Requirements: Experience: 5+ years in application or product security, or equivalent depth, with a track record of senior or staff-level impact Demonstrable experience leading security architecture reviews and threat modelling (e.g. STRIDE, attack trees, data-flow analysis) across multiple teams or products Proven ability to automate and scale security processes by building tooling, integrations, and self-service workflows that reduce manual effort Technical: Strong hands-on security testing skills, including code review and web, mobile, and API application security assessments, as well as the ability to triage and validate external vulnerability reports and bug bounty submissions Strong software engineering ability in at least one language (e.g. Python, Go, JavaScript), with the ability to build automation, not just scripts Deep understanding of the OWASP Top Ten, secure design, and secure coding best practices Experience with SAST, DAST, SCA, and vulnerability management platforms, and integrating them into CI/CD Strong understanding of modern application architectures: REST APIs, microservices, cloud-based systems, and containers Practical experience applying AI and LLM tooling to security work, or clear enthusiasm and aptitude to do so Collaboration: Excellent communication and influencing skills: you can explain security concepts to technical and non-technical stakeholders and drive change without direct authority A self-starter who enjoys solving complex problems, building leverage through automation, mentoring others, and strengthening security culture Nice to have: Experience securing the AI harness: hardening LLM and agent pipelines, prompts, tool and MCP integrations, and model endpoints against prompt injection, data leakage, and insecure agent actions Experience securing Kubernetes, including cluster hardening, RBAC, network policies, admission control, workload isolation, and image and supply-chain security Experience securing AWS infrastructure, including IAM, network and account architecture, key and secret management, and CSPM Experience building AI-assisted security tooling or internal self-service security platforms Experience mentoring or technically leading a security team Offensive or advanced security certifications such as OSAI, OSEP, OSCP, or OSWE What you'll get in return: You will join the company, that cares about work and life balance Annual Bonus based on the performance review cycle Generous Annual Leave Policy Medical Insurance and Pension fund, with additional benefit packages based on the location Hybrid working model (3 days from our modern office and 2 days fully remotely) Comprehensive Workation Policy with 30 more remote days available. Possibility of taking two additional days of paid leave per year to dedicate to volunteering efforts.

Location: Warsaw, Mazowieckie, Poland; Sofia City, Bulgaria; Limassol, Cyprus Workplace: hybrid Capital.com builds and operates web and mobile trading platforms, public and partner APIs, and the backend services behind them, all in a highly regulated environment. As Application Security Architect, you will be the senior design authority for the security of these products. You will set the direction for how we secure software at scale: you will own secure-by-design patterns and standards, lead threat modelling and architecture reviews, and define the application security baseline that engineering teams build against. Working closely with the Product Security team and the Director of Product Security, you will guide AppSec processes and set the vision for your area without direct line management. You will treat security as a shared outcome rather than a gate, balancing strong protection with developer experience and delivery speed, and you will earn adoption through enablement rather than mandates. Responsibilities: Security Architecture & Standards: Define and maintain secure-by-default reference architectures for common patterns: web apps, mobile backends, microservices, public and partner APIs, and event-driven services Own core application security architecture decisions: authentication and authorisation, session management, API security, secrets management, multi-tenant isolation, and security logging and auditing Lead the redesign of user authentication and the delivery of security features into the product Develop and roll out application security standards, secure-coding guidelines, configuration standards, reusable design patterns, and architecture decision records (ADRs) that engineers can apply without a security expert in the room Define internal policies for the safe use of AI-assisted and vibe-coding tools Define security requirements for acquired technology and guide its secure integration Threat Modelling & Design Review: Establish and run a threat-modelling operating model, covering scope, cadence, templates, and facilitation, proportionate to each product's risk tier Own the security review stage of the new product approval process, covering architecture design and configuration Lead design reviews for high-impact initiatives: new products, new auth flows, payment and sensitive-data flows, platform migrations, and major refactors Identify design-level risks and agree practical, prioritised mitigations with engineering teams Secure SDLC, DevSecOps & Supply Chain: Assess the current state of application security, propose improvements, and drive the secure SDLC strategy with Engineering and Security leadership Oversee AppSec processes and own the tooling strategy (SAST, DAST, IAST, SCA, and secrets scanning), including how findings flow back to engineering Embed security controls as guardrails in CI/CD through policy-as-code, with agreed enforcement and escalation paths Partner with DevOps to organise repository management and prevent supply-chain attacks, covering safe component usage, dependency management, SBOMs, and build integrity Improve the security of our internal tools Requirements: Experience: 8+ years in technology, including 5+ years in a dedicated application or product security role, with a strong engineering background and hands-on architecture or design ownership Proven track record creating, documenting, and rolling out security standards, patterns, and best practices across a complex engineering organisation Deep, demonstrable threat-modelling experience across product portfolios Technical: Experience designing and implementing a secure SDLC in a cloud-native environment. Strong AWS knowledge is required, and exposure to GCP or other clouds is welcome Strong command of OWASP standards (Top 10, ASVS) and DevSecOps practice, including AppSec tooling (SAST, DAST, IAST, SCA, secrets scanning) and vulnerability management Deep understanding of modern distributed architectures: microservices, REST and GraphQL APIs, event-driven systems, OAuth2/OIDC, and containerised workloads (Docker, Kubernetes). You should be able to reason about their trust boundaries, attack surface, and data flows across web and mobile clients Collaboration: Exceptional ability to influence and align engineering teams without direct authority, and to brief both engineers and executives Pragmatism and strategic thinking: you balance the ideal with the achievable, protect delivery throughput, and turn long-term direction into an actionable plan Clear written communication through diagrams, ADRs, and patterns, plus a track record of mentoring and cross-functional collaboration Nice to have: Experience in fintech, trading, brokerage, or another regulated environment Awareness of relevant regulatory and compliance drivers: FCA and CySEC operational resilience, GDPR, and PCI DSS Software supply-chain security, including SBOMs and artifact and build integrity Experience securing AI-integrated product features, or using AI to scale an AppSec programme Experience building or running a Security Champions programme CSSLP, GIAC GDSA, or a hands-on offensive security certification. Certifications are valued but secondary to demonstrated experience What you'll get in return: You will join the company, that cares about work and life balance Annual Bonus based on the performance review cycle Generous Annual Leave Policy Medical Insurance and Pension fund, with additional benefit packages based on the location Hybrid working model (3 days from our modern office and 2 days fully remotely) Comprehensive Workation Policy with 30 more remote days available. Possibility of taking two additional days of paid leave per year to dedicate to volunteering efforts.

Задачи: — Поддержка и развитие CI/CD, Infrastructure as Code и Kubernetes-платформы — Проектирование и развитие наблюдаемости (Observability): метрики, логи, трейсы, алертинг, дашборды (Prometheus, Grafana, OpenTelemetry, Loki и др.) — Диагностика и устранение узких мест: профилирование приложений и инфраструктуры, анализ производительности, тюнинг конфигураций K8s, ОС, сетевых компонентов и СУБД — FinOps и оптимизация затрат: мониторинг и анализ расходов на облачные ресурсы, балансировка между стоимостью и надежностью — Автоматизация рутинных операций, участие в ревью архитектуры и улучшении стабильности системы Требования: — Опыт работы в роли DevOps/SRE/Platform Engineer не менее 2 лет — Уверенное владение Linux и Kubernetes (эксплуатация, отладка, оптимизация ресурсов, понимание работы контроллеров, CNI, CSI) — Практический опыт построения и поддержки CI/CD (GitLab CI, GitHub Actions, ArgoCD и др.) и IaC (Terraform, Pulumi) — Глубокое понимание принципов наблюдаемости и мониторинга: умение проектировать алерты, настраивать сбор метрик/логов/трейсов — Навыки диагностики производительности: анализ bottlenecks, понимание сетевого стека, балансировки нагрузки — Опыт работы с облачными платформами (Yandex Cloud, Cloud.ru, AWS/GCP/Azure) — Знание основ сетевой маршрутизации, DNS, HTTP/gRPC, TLS Будет плюсом: — Опыт работы с сервис-мешами (Linkerd/Istio) — Понимание методологий SRE (SLI/SLO, error budget, incident response, основы chaos engineering) — Сертификации в области Cloud/Kubernetes/SRE/FinOps Условия: — Работа в коллективе ИТ-профессионалов — Возможность самореализации в амбициозных проектах цифровой трансформации компании-лидера в своей отрасли — Отсутствие бюрократии и дух стартапа — Стабильный работодатель — Достойный уровень оплаты, годовой бонус — Конкурентоспособный социальный пакет — Официальное трудоустройство в собственную аккредитованную ИТ компанию со всеми преимуществами — Гибридный график работы.

Задачи: — Обеспечение бесперебойной работы ПО и торгового оборудования в зоне ответственности, проведение регламентных работ и поддержание высокого качества ИТ-сервиса. — Построение, сопровождение и развитие систем мониторинга (оборудование и ПО). — Проведение проактивных мероприятий для предотвращения аварий и минимизации рисков. — Автоматизация рутинных задач, связанных с мониторингом, сбором метрик, конфигурированием компонентов и управлением правами доступа. — Развитие и сопровождение парка технологического оборудования. — Подбор нового оборудования/ПО, проведение пилотных тестирований и приемо-сдаточных испытаний. — Обработка сложных обращений в ServiceDesk, глубокая диагностика и решение инцидентов (уровень 3–4 линии). — Анализ корневых причин проблем, формирование предложений по оптимизации. — Ведение технической отчетности, написание регламентов, инструкций и наполнение базы знаний. Требования: — Опыт проектирования, настройки, развития и поддержки систем мониторинга ИТ-инфраструктуры (Zabbix, Prometheus, Grafana, Nagios или аналогичные) с фокусом на сбор метрик, логирование и алертинг распределенного оборудования. — Понимание работы протокола SNMP. — Глубокие знания архитектуры, принципов подключения и диагностики POS-систем, онлайн-касс, фискальных регистраторов, банковских терминалов, сканеров, термопринтеров, ИБП и счетчиков посетителей. — Способность решать сложные инциденты на уровне 3–4 линии поддержки. — Уверенное администрирование ОС Linux, Windows и Android. — Опыт написания скриптов на Python, Bash или PowerShell для автоматизации мониторинга, сбора логов и траблшутинга. — Отличное знание архитектуры ПК, понимание компонентной базы рабочих станций и кассовых модулей (сборка, кастомизация, диагностика "железа"). — Четкое понимание принципов построения сетей, модели OSI и назначения протоколов для диагностики проблем доступности оборудования на стыке сети и ПО: IP, TCP, UDP, ARP, NAT, VLAN, DHCP, DNS, OSPF, BGP, IPsec, GRE, SSL/TLS, SSH, Telnet. — Английский язык на уровне свободного чтения технической документации. Будет плюсом: — Практический опыт конфигурирования и администрирования сетевого оборудования (коммутаторы, маршрутизаторы). — Опыт работы в эксплуатации ИТ-инфраструктуры крупного ритейла или компаний с большой распределенной сетью устройств. — Опыт работы с базами данных SQL (написание запросов для анализа инцидентов/логов) и системами виртуализации. — Опыт работы в Service Desk системах (Jira, OTRS). Условия: — Формат работы: гибрид (Балашиха, Новомилетское шоссе, вл2.). — Гибкий график (с 8 до 17, с 9 до 18 или с 10 до 19). — Участие в проекте кафетерия льгот (ДМС, спорт, мобильная связь, обучение). — Полугодовые премии. — Корпоративные скидки до 30% на товары Спортмастер, Ostin, Funday, Demix. — Внутреннее и внешнее обучение, конференции. — BestBenefits – сервис персонализированных скидок и привилегий. — Технику предоставляем.

Развертывание и настройка средств мониторинга для стабильной работы. Диагностика и решение проблем в инфраструктуре и приложениях.

Развертывание и обеспечение работоспособности/отказоустойчивости общих информационных систем компании (в пределах зоны ответственности); Поддержка проектов в решении сложных/нестандартных задач;

Разрабатывать и сопровождать Jenkins Pipeline скрипты и Shared Library (Groovy); Разрабатывать и сопровождать Ansible скрипты;

Полноценная реализация поставленных задач. - Виртуализация и hardware: администрирование VMware (vCenter, vSphere), управление vSAN, бэкапы Veeam.

Мы занимаемся развитием и поддержкой системы класса BPM, автоматизирующей задачи Юридического департамента. В системе реализованы как правовые (автоматизированная оценка заемщика, правовые заключения и др.), так и судебные бизнес-процессы юридической службы. Для реализации этих процессов широко используются технологии искусственного интеллекта (AI), OCR компоненты. Мы используем самые современные технологии: Jenkins, Ansible, Groovy Git (BitBucket), SonaQube, Nexus Maven, Gradle, NPM Docker, оркестраторы Kubernetes/OpenShift Istio PostgreSQL Linux SberOS, Ubuntu based. Задачи: — автоматизировать процессы сборки, деплоя и конфигурирования приложений с помощью Jenkins, Helm, Kustomize и ArgoCD — поддерживать релизные процессы, DevSecOps — подготавливать, настраивать и эксплуатировать тестовые стенды — настраивать мониторинг работы серверов — решать нетривиальные задачи по настройке процессов CI/CD — работать вместе с разработчиками, ML-инженерами и аналитиками для оптимизации рабочих процессов — консультировать, обучать коллег. Требования: — опыт в роли devops инженера от 5 лет — знание SQL на уровне написания простых запросов — опыт построения CI/CD на техстэке Groovy, Helm, Python, Bash — опыт использования и понимание работы систем контроля версий Git — опыт работы с СУБД Postgresql — опыт настройки веб-сервера Nginx — опыт контейнеризации: Docker и/или Podman (Containerfile/Dockerfile, volumes, networking, registry). Будет плюсом: — опыт работы с Kubernates/Openshift — опыт работы с Ansible — опыт работы и настройки ALG (NGINX, IBM DataPower, SOWA.) Условия: — гибридный формат работы (2-3 дня в офисе) — годовой бонус и ежегодный пересмотр — расширенный ДМС с первого дня + стоматологию и льготное страхование для семьи — корпоративный университет Сбера, внутреннюю образовательную платформу, участие в IT-конференциях — офис на Ленинском проспекте с зонами отдыха и спортзалом — льготную ипотеку в Сбере, корпоративную пенсионную программу, подписку СберПрайм с возможностью совместного использования на трёх близких, скидки от партнеров и сервисов группы компаний.

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters WHAT YOU'LL ACHIEVE - Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up. - Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. - Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful. - Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements. - Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes. - Help define and track metrics such as coverage, MTTD, and alert quality. - Join a shared on-call rotation for incident response. SKILLS YOU'LL NEED TO BRING - We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you. - 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role. - Have written or tuned detections that run in production, and care about signal quality and cutting noise. - Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly. - An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect. - Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs. - Have used SIEM, EDR, or SOAR tools in any size of environment. - Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end. NICE TO HAVE - Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry. - Experience running SIEM, EDR, or SOAR platforms at large scale. - Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections). - Experience applying LLMs or agent-style tooling to security workflows. - Experience securing AI-enabled systems or endpoint tooling. - Kubernetes or container detection experience. - Background in threat intelligence, malware analysis, or digital forensics. - Contributions to the security community through research, tooling, CTFs, or talks. - Experience at a high-growth startup or AI company. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $185,000 - $280,000 per year.   By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550 and and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528.   #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: Dublin, Ireland Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters WHAT YOU'LL ACHIEVE - Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up. - Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. - Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful. - Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements. - Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes. - Help define and track metrics such as coverage, MTTD, and alert quality. - Join a shared on-call rotation for incident response. SKILLS YOU'LL NEED TO BRING - We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you. - 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role. - Have written or tuned detections that run in production, and care about signal quality and cutting noise. - Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly. - An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect. - Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs. - Have used SIEM, EDR, or SOAR tools in any size of environment. - Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end. NICE TO HAVE - Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry. - Experience running SIEM, EDR, or SOAR platforms at large scale. - Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections). - Experience applying LLMs or agent-style tooling to security workflows. - Experience securing AI-enabled systems or endpoint tooling. - Kubernetes or container detection experience. - Background in threat intelligence, malware analysis, or digital forensics. - Contributions to the security community through research, tooling, CTFs, or talks. - Experience at a high-growth startup or AI company. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role's scope and complexity, and the candidate's experience and expertise, and may vary from the range provided below. The estimated base salary range for this role is €75,000–€142,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

- поддерживать и развивать инфраструктуру продукта на Linux; - обеспечивать стабильную работу серверов, прокси и CDN;

Location: Paris Workplace: Hybrid ABOUT VOODOO Founded in 2013, Voodoo is a tech company that creates mobile games and apps with a mission to entertain the world. Gathering 800 employees, 7 billion downloads, and over 200 million active users, Voodoo is the #3 mobile publisher worldwide in terms of downloads after Google and Meta. Our portfolio includes chart-topping games like Mob Control and Block Jam, alongside popular apps such as BeReal and Wizz. TEAM The Engineering & Data team builds innovative tech products and platforms to support the impressive growth of their gaming and consumer apps which allow Voodoo to stay at the forefront of the mobile industry. The Engineering & Data team plays a key role in Voodoo's long-term strategy. It enables Voodoo to both accelerate product diversification and provide a state of the art growth-engine to distribute and scale our games. They create innovative solutions that drive growth with a pragmatic approach, ranging from simple searching to complex machine learning systems. ROLE We’re looking for a Senior Security Engineer to join our Engineering & Data team. In this role, you’ll be responsible for a wide variety of topics: - Security Engineering & Guardrails: Architect, construct, and maintain automated security guardrails and paved paths to foster secure-by-default development environments. - Shift-Left Architecture Guidance: Collaborate with development teams during the early ideation and design phases to embed secure coding practices and architecture from inception. - Continuous & Automated Assessment: Develop automated, continuous assessment capabilities that replace manual reviews and scale seamlessly across the business unit. - Hands-on Code Contribution: Work directly alongside engineers to contribute code for security fixes and paved-path solutions, ensuring security remains the simplest route. - Self-Service Tooling: Partner with developers to build scalable, self-service security tools that empower teams to detect and remediate risks independently. - Preventive & Detective Controls: Implement robust preventive and detective controls to deliver ongoing assurance rather than point-in-time security checks. - Strategic Collaboration & Incident Response: Drive long-term security strategy with key stakeholders while actively participating in periodic on-call rotations for incident support. - AI-Driven Security Innovation: Utilize AI technologies and methodologies to streamline threat detection, accelerate security evaluations, and advance scalable system protection. PROFILE (MUST HAVE) - 5+ years of experience troubleshooting systems, analyzing logs, and automating complex tasks via command-line tools - 5+ years of experience identifying security vulnerabilities, assessing risks, and constructing mitigation strategies - 5+ years of hands-on experience with scripting, software development, and security-focused code reviews across standard programming languages - Demonstrated expertise in recognizing industry-standard security vulnerabilities, understanding threat vector patterns, and applying effective remediation techniques - Proven track record in a leadership or guidance role, such as a technical lead, mentor, or engineering team lead - Proficiency in applying threat modeling and comprehensive risk identification methodologies - Proven track record securing microservices, service-oriented architectures, and web services - Experience with identity provider servers and authentication protocols (such as OAuth2, OIDC, SAML) - Experience with penetration testing (pentest) and vulnerability assessments - Self-starter with strong ownership, accountability, and ability to work autonomously and collaboratively across teams and organizations in a fast-paced environment. PROFILE (NICE TO HAVE) - Advocate for security standards with clarity and empathy. - Familiarity with AI/ML workflows and agents. OUR STACK Terraform, Kubernetes, Prometheus, ArgoCD, CircleCI, GitHub Actions, Atlantis, Grafana, Claude Code, Trivy, Conftest / OPA, AWS IAM Identity Center (SSO), Okta, AWS Secrets Manager, AWS KMS, AWS WAFv2, AWS Shield, AWS ACM, AWS GuardDuty, Sealed Secrets, Kyverno, cert-manager BENEFITS - Competitive salary based on experience - Swile Lunch voucher - Gymlib (100% covered by Voodoo) - Premium healthcare coverage with SideCare, 100% covered for you and your family - Wellness activities in our Paris office - Remote Fridays