Инфраструктура и безопасность вакансии - гибрид

— Автоматизация инфраструктуры, CI-пайплайны; — Миграция между ДЦ, запуск новых проектов;

Задачи: — Управление Mac MDM на более чем 300 устройствах. — Автоматизация процессов. Требования: — Опыт работы от 3 лет с Mac MDM. Условия: — Офис в Лимассоле. — Гибридный формат работы.

Задачи: — исследование устройств различного назначения, бинарного кода (без исходного кода), программного обеспечения и внутреннего программного обеспечения (ВПО); — исследование внутреннего ПО устройств на наличие уязвимостей и недокументированных возможностей; — анализ защищенности программного обеспечения устройств; — разработка PoC по результатам проведенного анализа; — модификация внутреннего ПО для устранения ошибок. Требования: — опыт работы в качестве Team lead/Ведущий Reverse engineer от 2 лет; — навыки управления командой, умение грамотно распределять задачи и нагрузку; — понимание принципов обратного проектирования (исследования) программного обеспечения; — владение инструментами обратной разработки (IDA Pro, Radare2 или др.); — языки программирования: Python, C/С++, Assembler; — понимание архитектуры ОС; — опыт использования ОС Linux; — знание английского языка на уровне чтения технической документации. Плюсом будет: — знакомство с аппаратной архитектурой и схемотехникой различных устройств; — опыт исследования программного обеспечения на безопасность, поиска уязвимостей; — опыт разработки низкоуровневого кода для x86, MIPS, ARM, RISC-V; — опыт автоматизации исследования при помощи мультиагентной среды (MML). Условия: — официальное трудоустройство в аккредитованной IT-компании и возможность пользоваться соответствующими льготами; — гибкое начало рабочего дня, гибридный график (офис + удаленка), полностью удаленный формат невозможен; — офис в пешей доступности от метро Электрозаводская, Семеновская; — полис ДМС с расширением ВЗР (страхование выезжающих за рубеж); — премирование за высокие производственные показатели и результаты труда по итогам успешной работы Общества за год; — предложение по заработной плате и условиям труда формируется по результатам собеседования, в зависимости от опыта и знаний.

развивать общие инструменты и шаблоны поставки изменений для продуктов резервов и RWA, сокращать ручные операции и время подготовки релизов. создавать и совершенствовать CI/CD-пайплайны с автоматизированными проверками качества, безопасности и совместимости изменений приложений и БД.

развивать CI/CD-процессы для сервисов AIFA. контейнеризировать и развёртывать сервисы в Kubernetes.

- Спроектировать и развернуть инфраструктуру продукта с нуля. - Подготовить инфраструктуру к переезду продукта в наш контур.

Команда безопасности ИИ ищет специалиста для whitebox-анализа LLM-приложений, AI-агентов, RAG и векторных БД. Нужно выявлять prompt injection и другие AI-угрозы, проверять защитные фильтры и контроль вызовов инструментов.

Задачи: — DevOps: администрирование и автоматизация инфраструктуры, построение отказоустойчивых и масштабируемых систем. — TechLead Android: управление командой, разработка крупных B2C-приложений. Требования: — DevOps: опыт от 5 лет в Linux, администрировании и автоматизации инфраструктуры; практический опыт с CI/CD, Docker, Kubernetes, Ansible, Terraform, GitLab; мониторинг с Prometheus и Grafana; глубокое понимание сетей (TCP/IP, HTTP), баз данных, балансировки нагрузки; навыки Bash, Python или Go; диагностика и устранение проблем. — TechLead Android: опыт от 7 лет в Android-разработке, из них от 3 лет в роли Team Lead / Tech Lead; опыт работы с крупными B2C-приложениями (от 500 тыс. пользователей); глубокое знание Kotlin, Coroutines, Flow, Jetpack Compose, Clean Architecture, MVVM/MVI, многомодульной архитектуры; практический опыт с CI/CD, GitLab CI/GitHub Actions, Hilt/Dagger/Koin, Retrofit, Room, unit/UI-тестированием, оптимизацией производительности и релизами в Google Play. Условия: — Локация: Астана/Алматы (гибридный формат работы). Контакт для отклика: @IMANASTASSIYA

- Администрировать и развивать серверную инфраструктуру на базе Windows и Linux; - Сопровождать физическое серверное оборудование, в том числе размещенное в ЦОД;

Продвинутое знание Linux систем, опыт от 3 лет. Углубленное знание фундаментальных принципов работы компьютерной аппаратной части;

Ищем Senior PostgreSQL Engineer / DRE, который будет отвечать за надёжность, производительность и масштабирование production PostgreSQL-кластеров в 24/7 среде.

развивать стенд, на котором мы проходим путь ДЗО раньше самих ДЗО: развёртывание целиком через AEF Operator, агенты разных типов, контроллер трейсов на стороне клиента. настраивать сеть и service mesh: Istio (сайдкары, шлюзы, mTLS, выход наружу только через egress-шлюз), политики Cilium, изоляцию агентов по namespace.

Задачи: — Настраивать средства CI/CD для команды разработчиков — Настраивать средства централизованного сбора и анализа логов для сервисов компании — Подготавливать сценарии развёртывания приложений и их формальное описание с помощью Jenkins — Управлять конфигурацией серверов — Совершенствовать системы мониторинга и логирования — Тестировать инфраструктуры web-приложений до их выхода в продакшн: прогнозирование нагрузки, определение проблемных мест и их оперативное устранение — Совершенствовать системы контейнерной оркестрации — Решать проблемы и инциденты — Вести документацию, заниматься написанием инструкций и схем Требования: — Коммерческий опыт работы от 3-х лет на позиции DevOps-инженера в финансовом секторе — Опыт работы с любой из систем Continuous Integration (Jenkins, TeamCity, Bamboo & etc) и с любой из систем Continuous Delivery (ArgoCD, Flux & etc) — Навыки работы с системами хранения артефактов (JFrog Artifactory, Nexus, ProGet) — Практический опыт проектирования и самостоятельной реализации CI-пайплайнов — Опыт работы с Docker или podman, сборка образов, buildah в k8s — Уверенное владение скриптовым языком Bash, GNU coreutils и BusyBox — Приветствуется навык работы с Ansible, Jinja2 и с gradle — Умение тестировать и измерять результаты своей работы Условия: — Разработка на современном стеке технологий — Работа в гибкой методологии разработки — Возможность работать как в офисе, так и в гибридном/удаленном формате — Поездки на конференции и тренинги за счет компании, внутренние семинары, внутренние митапы — Новая техника для комфортной работы — Сессия профессионального развития персонала дважды в год, результатом которой является план индивидуального развития каждого сотрудника и получение обратной связи

- Обеспечивать стабильную работу высоконагруженной образовательной платформы в роли L1/L2 инженера. - Проводить комплексную диагностику инцидентов: анализировать логи в Grafana, работать с API через Postman или ApiDog, проверять гипотезы через MongoDB.

Location: San Francisco Bay Area, USA Workplace: Hybrid Why work at Higgsfield AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. About the role: Higgsfield AI is looking for a highly technical, hands-on MTS, ML Security to join Higgsfield Security and own security across our GPU clusters and AI/ML infrastructure, from model training to inference and production deployment. In this role, you will work as part of the Security team and closely with our ML and Infrastructure teams to design, implement, and operate security controls that protect models, data, and underlying infrastructure. Your core responsibilities will include securing GPU compute environments, assessing infrastructure and AI/ML vendors, and enforcing security requirements through technical controls, deployment policies, and verified remediation. We're looking for someone who combines deep security engineering expertise with a practical, solutions-oriented mindset. The ideal candidate is comfortable working across cloud environments, Kubernetes, Linux, and GPU infrastructure, and understands how to balance security, performance, and reliability in a fast-moving AI environment. This role carries direct ownership of GPU infrastructure security and the security requirements that third-party providers must meet to support Higgsfield’s workloads and data. What you'll do: AI/ML & GPU Infrastructure Security - Own the security of GPU clusters supporting distributed training and production inference across cloud and rented datacenter environments. - Harden GPU hosts, operating systems, drivers, container runtimes, Kubernetes clusters, and workload scheduling configurations; reduce privileged access and unnecessary exposure. - Secure distributed training environments and GPU workloads through isolation, access controls, and data movement restrictions. Validate isolation between tenants and workloads across compute, networking, and storage, including shared GPU environments where applicable. - Design and implement controls to protect sensitive datasets, model checkpoints, weights, and customer data. - Strengthen inference security through tenant isolation, service authorization, secure model loading. - Partner with ML and Platform Engineering teams to integrate security into infrastructure design and development workflows. Vendor Security Assessment & Enforcement - Lead technical security assessments of GPU infrastructure providers, datacenter operators, and other AI security vendors that process Higgsfield data and support AI workloads. - Evaluate vendor architecture and evidence covering tenant isolation, privileged access, data handling and retention, use of customer data for model training, encryption, vulnerability management, and incident response. - Translate security requirements into enforceable technical controls, including approved configurations, and continuous checks for configuration drift. - Track internal and vendor security findings to closure with accountable owners and deadlines, validate remediation, and escalate unmet requirements. Document any approved exceptions with compensating controls and expiration dates. Cloud & Platform Security - Design, implement, and maintain security controls across Linux, Kubernetes, cloud infrastructure, networks, and third party datacenter environments. - Secure infrastructure provisioning, configuration management, and access to third-party infrastructure providers. Restrict and audit vendor and administrator access to cluster management interfaces and production systems. - Implement least-privilege access, workload identity, secrets management, encryption, and auditable access controls. - Identify and remediate vulnerabilities and configuration risks across production systems, including GPU hosts, drivers, and container runtimes, coordinating changes with infrastructure owners to maintain service reliability. Security Operations & Risk Management - Develop and maintain detection and response capabilities for infrastructure and AI-specific security threats, including unauthorized GPU workloads, privilege escalation, and suspicious data transfers. - Investigate and respond to potential credential compromise, unauthorized data access, model theft, and compromised workloads. - Partner cross-functionally to implement practical security improvements that account for the performance, scalability, and reliability requirements of GPU workloads. Requirements: - Strong hands-on experience in Security Engineering, Infrastructure Security, Platform Security, or a related technical discipline. - Deep understanding of Linux, Kubernetes, networking, and cloud infrastructure security. - Practical experience securing or operating GPU clusters or distributed AI/ML infrastructure, with an understanding of training and inference workloads, GPU drivers and runtimes, and workload isolation. - Experience designing and implementing security controls across complex, distributed production environments. - Strong knowledge of identity and access management, workload isolation, encryption, secrets management, and least-privilege principles. - Experience conducting technical vendor security assessments, evaluating supporting evidence, and driving remediation with external providers. - Ability to identify, investigate, and remediate security vulnerabilities and infrastructure threats. - Proficiency in scripting or programming languages such as Python, Go, or Bash. - Experience partnering with Infrastructure, Platform, or ML Engineering teams to implement security solutions. - Strong technical ownership, sound judgment, and the ability to prioritize security risks in a fast-paced environment. - A hands-on, collaborative approach with the ability to independently drive security initiatives from design through deployment, verify that controls work in production, and hold internal teams and vendors accountable for agreed security requirements. Compensation & Benefits - We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth. - Base Salary: The anticipated salary range for this role is $200,000 - $300,000, depending on experience, skills, scope, and location. • Bonus: This role is Bonus eligible and may participate in the Company's discretionary annual bonus program. - Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth. - Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally, including medical, dental, and vision insurance, a competitive 401(k) retirement plan with company matching, and additional benefits and perks. - The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team. - Significant ownership, direct impact, and opportunities for professional growth as the company scales. This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams. Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.

Location: Anywhere in France Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. 🛡️ THE ROLE Most GRC roles are about keeping auditors happy. This one is about earning our members' trust: every day, they share their diagnoses, their claims and their care with us. You'll own security governance and risk at Alan end to end. That means one clear framework across our certifications and regulations, which the whole company uses to decide what matters most. You set the direction, make the calls on risk, and help every team own its part. We just earned our HDS certification, and there's much more to build as we grow from 1M to many millions of members, across more countries and regulators. That includes how we govern AI, which Alan uses across its products and operations. This is a hands-on senior role. You do the work yourself, mentor the junior GRC engineer we're hiring alongside you, and grow the team over time.   🚀 WHAT YOU'LL DO - Make our security framework a tool for the whole company. You own the full certification cycle (ISO 27001, HDS and those to come), and turn it into something teams use every day to prioritise, not a binder for auditors. - Bring the security view on regulation. Legal and Risk own the regulatory relationships. You bring the security answer: what the rules mean for how we protect data, and which controls make it work in practice. - Run risk as an ongoing programme. You map and prioritise security risks, including AI risks, turn them into clear treatment plans, and feed them into company-wide risk decisions with the Risk team. - Help every team own its risks. You define the controls framework and the standards, while the teams who build and run our systems own the controls. You brief the board and audit committee, and you know which findings need an urgent call and which can wait for the quarterly report. - Own incident governance. You triage and escalate incidents, own business continuity and disaster recovery, and shape the security side of our regulatory incident reports. - Be a credible partner to engineering. You work with engineering teams early on new designs and spot control gaps (access, encryption, logging) before they ship. You don't need to be an architect, but you can hold the conversation.   🏗️ WHAT YOU'LL BUILD - One governance model: clear ownership of risks and controls across teams, so security decisions don't bottleneck on one person. - A living risk map: prioritised risks that actually drive company and engineering decisions. - One compliance backbone: a single control system across our countries and regulators, built to scale. - An automated evidence engine: evidence collected straight from engineering systems, so audits run continuously instead of as a quarterly rush. You'll work closely with Legal, the Data Protection Officer, Internal Audit and Risk, and day to day with engineering and operations teams.   ⭐ WHAT WE'RE LOOKING FOR Your team You'll join Alan's Corporate team, which brings together our control functions: Risk, Corporate Governance & Internal Control, Legal, Compliance and Security. They share one mission: building what lets Alan operate at scale, safely and responsibly. Within that group, you carry the security governance and risk dimension, working hand in hand with the security engineers who run our infrastructure and platform security, and with a junior GRC engineer we're hiring alongside you. You'll be hands-on every day, building and owning the work yourself. Along the way, you'll mentor the junior engineer and help shape how GRC grows at Alan. What you bring - You want to build and own things yourself, and you enjoy helping someone else grow while you do it. - 6+ years in security, with real GRC ownership. - You've run a GRC roadmap in a certified or strongly regulated environment (ISO 27001, HDS, SOC 2, or regulated sectors like health, insurance or finance). You're comfortable working with certification auditors, and you can explain what a framework requires and why it makes sense for business teams. - You take a stand on risks, and you'd rather close one real risk than write ten policies. - You're fluent in French and English.   A big plus - You've driven a certification or audit cycle end to end yourself. - You've automated compliance work, or you're eager to, and you have a view on where AI can help. - You've presented risk to senior leaders or a board. - You've mentored or onboarded someone before. 🌍 HOW WE WORK Location: You must be legally eligible to work from France, Belgium or Spain. Remote work: We offer remote work flexibility.   🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. Remember, this is just a guide, not a checklist. We'll be thrilled to receive your application!   🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info.   YOU WANT TO KNOW MORE ABOUT ALAN?   🙌 Perks & Benefits https://alan.com/en/careers/a/salary-equity: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. 🤘A strong culture https://alan.com/en/about/a/leadership-principles: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work

Location: Anywhere in France Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. 🛡️ THE ROLE Most GRC roles are about keeping auditors happy. This one is about earning our members' trust: every day, they share their diagnoses, their claims and their care with us. You'll join Alan's security team to help run our compliance and risk work across ISO 27001, HDS and DORA, across a growing number of countries and regulators. We just earned our HDS certification, and there's much more to build, including how we govern AI across our products: assessing AI risks, setting the controls, and keeping up with the AI Act. You'll learn alongside experienced security engineers, with a dedicated coach from day one. You'll take on real ownership early, and your scope grows as we scale from 1M to many millions of members. And you'll learn how we work at Alan: teams own their risks and controls, we automate wherever we can, and we focus on real outcomes, not paperwork. 🚀 WHAT YOU'LL DO - Keep our certifications on track. You run the day-to-day of the ISO 27001 and HDS audit cycles: collecting evidence, preparing internal audits, and following up on corrective actions until they're closed. - Turn regulations into practical actions. With Legal and the DPO, you help translate requirements like DORA, HDS, and GDPR into clear tasks for the teams, and track that they get done. - Learn the health sector rules. You build your knowledge of health-specific frameworks (ANS, HDS) and help apply them to how we handle health data. - Contribute to risk management. You help build and update our risk mapping, including AI risks, and follow up on the treatment plans with the teams who own them. - Support the teams who own the controls. You keep the controls framework up to date, answer teams' questions, and help explain security clearly to every stakeholder, from engineers to managers. - Support incident governance. You help classify and document incidents, keep Business continuity and Disaster recovery plans up to date, and prepare inputs for DORA incident reports. - Automate what slows us down. You spot repetitive compliance tasks and automate them with scripts, tools or AI. 🏗️ WHAT YOU'LL HELP BUILD - One compliance backbone: A single control system for several regulators in several countries, so Alan can scale without rebuilding compliance each time. - An automated evidence engine: evidence collected straight from engineering systems with scripts and AI, so audits run continuously instead of as a quarterly rush. You'll work closely with Legal, the DPO, Internal Audit and Risk, and day to day with engineering and operations teams. ⭐ WHAT WE'RE LOOKING FOR - You want to do the work yourself and grow with it: a permanent, hands-on role where you build things for the long run. - 2+ years in security, GRC or compliance (an audit background is fine if you want to move into building). - You've played a key part in a certification or audit cycle (ISO 27001, HDS, SOC 2 or similar). - You're curious about how things work technically, and you've automated at least one manual task (a script, a tool, an AI workflow). - You're fluent in French and English, and comfortable presenting in both. - You learn fast, ask for feedback, and go into the details when it matters. 🌍 HOW WE WORK Location: You must be legally eligible to work from France, Belgium or Spain. Remote work: We offer remote work flexibility. 🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. 🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info. YOU WANT TO KNOW MORE ABOUT ALAN? 🙌 Perks & Benefits https://alan.com/en/careers/a/salary-equity: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. 🤘A strong culture https://alan.com/en/about/a/leadership-principles: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work

• От 3 лет опыта. • Обязательный production-опыт с Kubernetes, миграции в Kubernetes.