Инфраструктура и безопасность вакансии - в офисе

Location: Gurgaon, India Workplace: onsite About Welo Global  Welo Global is a leader in multilingual AI, technology, and content solutions serving over 2,000 clients in 300 languages. The company combines globally scaled multilingual infrastructure, including a network of over 500,000 linguists and domain experts, with advanced NLP, computational linguistics, and best-in-class compliance backed by seven ISO certifications. Welo Global’s five brands—Welocalize (multilingual content and localization services for global enterprises), Park IP (intellectual property and patent translation services for law firms and corporate legal teams), Welo Life Sciences (regulated language and compliance-aligned content solutions for pharmaceutical, biotech, and medical device organizations), Adapt (multilingual performance-led digital marketing agency), and Welo Data (multilingual data generation, evaluation, and human data infrastructure for AI systems)—serve distinct customer segments with purpose-built expertise, fit-for-purpose solutions, and supporting technology. weloglobal.com  Job Reference: #LI-JC1 Job Description-    Provide L1–L2 technical support to a global user base with a focus on SLA-driven ticket management, excellent customer service, employee onboarding/offboarding and endpoint lifecycle management. Flexible, engaged and responsive in the adoption of continuously evolving support workflows.    Key responsibilities Service desk and SLAsProvide professional IT support via Zendesk; triage, troubleshoot, and resolve tickets within agreed SLAs.Manage and prioritize the support ticket queue using an SLA-driven approach, ensuring that highest to lowest priority tickets are responded to and resolved within agreed service levels. Maintain high CSAT, provide clear ticket communication, and timely escalations.Identify opportunities for improvement and adopt automation and AI (such as Zendesk AI features, AI support assistants) to improve and accelerate the support workflow (for example to aide in triage and draft responses). Team Development Flexible and engaged in the adoption new tools and workflows, including AI-assisted support tools, as part of a continuously evolving IT environment. Endpoints and operating systems Deliver in-depth desktop support for Windows and macOS. Provision and manage devices using AutoPilot, Intune/Endpoint Manager, and Jamf/Mosyle. Manage full laptop lifecycle: purchasing, replacements, warranty, returns, secure wipe/disposal, and accurate asset tracking (Workday). Identity, collaboration, and SaaS Administer Microsoft 365, Entra ID (Azure AD), and Exchange Online; support Teams, SharePoint, OneDrive. Support and manage onboarding/offboarding access provisioning, MFA, conditional access, and least-privilege practices. Support additional cloud platforms such as Citrix ShareFile, Okta, and Zendesk. Mobile Device Management (MDM) through Microsoft Intune, Jamf and Mosyle. Network and remote access Troubleshoot basic networking (DHCP, DNS, VPN, NAT, Wi‑Fi) and coordinate with network engineers/ISPs as needed. Security, compliance, and continuity Follow security and privacy standards (e.g., ISO 27001, GDPR) and participate in security incident response and phishing triage. Document and maintain internal and user-facing knowledge base articles. Collaboration Work effectively with a remote IT team across time zones; communicate proactively with stakeholders. Education Bachelor’s degree in Computer Science, Information Systems, or equivalent experience. Relevant certifications are an advantage. Experience 3+ years of hands-on IT support in a corporate environment. Strong experience with Windows and macOS support. Proven administration of Microsoft 365, Entra ID (Azure AD), Intune/Endpoint Manager, and device provisioning (AutoPilot). Mobile device management with Intune, Jamf, or Mosyle. Scripting/automation with PowerShell; experience with Power Apps/Logic Apps is highly desirable. Networking fundamentals (DHCP, DNS, VPN, NAT) and troubleshooting. Experience with major cloud/SaaS platforms (e.g., Okta, Citrix ShareFile, Zendesk) is a plus. Key competencies Excellent customer service, communication, and stakeholder management. Comfortable adopting new tools and workflows, including AI-assisted support tools, as part of a continuously evolving IT environment. Methodical troubleshooting and problem-solving. Strong organization, prioritization, and time management; able to balance local and remote user needs. Ability to work independently and as part of a distributed team; proactive and accountable. Additional Job Description-  Languages Fluent English required. Work conditions 3 days a week from the Gurugram office and 2 days from the Noida office, total 5 days a week. Nice to have Certifications: Microsoft (MD-102/SC-900), Jamf 200/300, CompTIA A+/Network+/Security+, ITIL Foundation, Apple ACSP.

Location: New York; Stockholm Workplace: OnSite ABOUT US: AI NEEDS A NEW INFRASTRUCTURE LAYER. WE'RE BUILDING IT AT MODAL. Every era of computing brought new workloads that previous infrastructure couldn't support: mainframes, databases, and the cloud. Each time, the company that rebuilt the layer underneath defined the decade. AI is no different, except it touches everything instead of one slice, and the window to build the layer underneath it is open right now. Our customers include category-defining companies like Ramp https://modal.com/blog/how-ramp-built-a-full-context-background-coding-agent-on-modal, Cognition, DoorDash, and Suno. They rely on Modal for instant GPU access, sub-second container starts, and native storage, so it's simple to serve low-latency inference, fine-tune models, and access production-ready sandboxes at scale. We've passed $1B in annualized run rate, up 15x from a year ago. In October 2026 we raised a $750M Series D led by Accel at a $15.75B valuation. Our team includes creators of popular open-source projects (e.g.,Seaborn https://github.com/mwaskom/seaborn,Luigi https://github.com/spotify/luigi), academic researchers, international olympiad medalists, and experienced engineering and product leaders with decades of experience. THE ROLE: We’re looking for a Detection & Response Engineer to build the systems that help us identify, investigate, and respond to threats across our platform. This is an engineering role focused on automation. You’ll build detections, investigation tooling, and response capabilities that scale with our infrastructure, using AI where it meaningfully improves signal, investigation speed, and operational effectiveness. You’ll work closely with infrastructure, platform, and security engineers to ensure every incident makes the platform more resilient. WHAT YOU'LL WORK ON: Detection Engineering - Design and build high-fidelity detections for attacks, abuse, and anomalous behavior across our infrastructure and production systems - Continuously improve detections based on telemetry, threat intelligence, and lessons learned from incidents - Improve visibility across cloud infrastructure, containers, identity systems, and production services Incident Response - Lead or participate in investigations spanning production infrastructure, cloud environments, and internal systems - Build playbooks and automation that reduce investigation time and improve response consistency - Drive post-incident improvements that eliminate entire classes of future incidents Security Tooling & Automation - Build internal tooling that improves detection, investigation, and response workflows - Leverage LLMs to automate repetitive analysis, accelerate investigations, and surface actionable insights from security telemetry - Improve the collection, quality, and usability of security telemetry across the platform Engineering Partnership - Partner with engineering teams to ensure new systems are observable and secure by default - Help teams instrument services with the telemetry needed for effective detection and response - Drive security improvements that make the platform easier to defend over time YOU MAY BE A FIT IF: - You have experience in detection engineering, incident response, security engineering, or software engineering with a strong security focus - You have strong software engineering skills and experience building production systems. - You’ve investigated security incidents in cloud-native or distributed environments - You’re familiar with modern cloud infrastructure, Kubernetes, Linux, and networking - You’ve built detections using logs, telemetry, behavioral signals, or large-scale event data. - You have strong SQL skills for investigating security events and developing detections - You’re interested in applying AI and LLMs to detection, investigation, and response, and in understanding emerging threats involving AI-powered systems - You have strong written and verbal communication skills NICE-TO-HAVE: - Experience building AI- or LLM-powered security tooling - Experience with SIEM, SOAR, or EDR platforms - Experience with Kubernetes security or large-scale cloud infrastructure - Experience with threat hunting, malware analysis, or digital forensics - Experience contributing to security operations in a high-growth engineering organization

Location: San Francisco, CA; New York, NY Workplace: OnSite ABOUT US At LangChain, our mission is to make intelligent agents ubiquitous. We build the foundation for agent engineering in the real world, helping developers move from prototypes to production-ready AI agents that teams can rely on. We began as widely adopted open-source tools and have grown to also offer a platform for building, evaluating, deploying, and operating agents at scale. With $125M raised at Series B from IVP, Sequoia, Benchmark, CapitalG, and Sapphire Ventures, we’re at a stage where we’re continuing to develop new products, growth is accelerating, and all team members have meaningful impact on what we build and how we work together. LangChain is a place where your contributions can shape how this technology shows up in the real world. Today, our platform includes LangSmith (Observability, Evaluation, Deployment, Fleet, and Sandboxes), our open source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement. We have 100M+ monthly open source downloads, 6,000+ active LangSmith customers, and 5 of the Fortune 10 use LangSmith in production (+ 35% of the Fortune 500 overall), including teams at Klarna, Clay, Coinbase, Workday, Lyft, Cloudflare, Harvey, Rippling, Vanta, LinkedIn, Monday.com, Nvidia, and Bridgewater. ABOUT THE TEAM The Security team ensures that while AI moves at breakneck speed, everyone driving the racecar is wearing a seatbelt. We secure LangChain's core platform and protect AI agents from emerging threats. We work across the stack so developers can confidently ship from prototype to production without compromising on safety or privacy. ABOUT THE ROLE You'll be the hands-on detection and response engineer responsible for how we see, stop, and learn from threats across LangChain's production platform, cloud infrastructure, and the services that host and execute agentic workloads. You'll partner closely with Product Security to turn threat models, vulnerabilities, and incidents into telemetry, detections, and durable defenses. Your primary focus is engineering: building detection, investigation, and response systems that scale the Security team's impact beyond what manual operations allow. We are looking for engineers who think like builders, not just operators — strong software skills are a must. This role participates in an incident on-call rotation, but its core focus is engineering systems that reduce risk, speed up investigations, and make incidents less frequent and less costly. Location/City: San Francisco or NYC WHAT YOU'LL DO - Own the detection lifecycle: Translate threat models, incidents, and attacker behavior into telemetry requirements and detections-as-code. Validate coverage, measure signal quality, tune false positives, and continuously test whether defenses work. - Build security monitoring and telemetry: Design the telemetry pipeline end-to-end across cloud (GCP/AWS), Kubernetes, and the LangSmith/LangGraph control plane. Instrument services, define the signals that matter, and make security data reliable and useful. - Engineer investigations and threat hunting: Build tools and workflows for proactive hunting, evidence collection, incident scoping, and containment. Turn investigation findings into new detections and lasting improvements. - Use agents to scale the team: Build reliable internal AI agents and automation that triage alerts, enrich findings, gather evidence, scope incidents, and accelerate routine security work. Design human-in-the-loop controls and evaluations so automation is safe, observable, and trustworthy. - Lead incident response and participate in on-call: Triage, scope, contain, and remediate security incidents, then drive postmortems that produce durable engineering changes. - Partner with Product Security: Turn product threat models and vulnerability findings into production monitoring, and feed real-world detection and incident learnings back into secure design. WHAT YOU'LL BRING - 5+ years in security engineering, with meaningful experience in detection engineering, security operations, or incident response — and the software skills to build your way out of repetitive work. - Strong software engineering in Python or Go (TypeScript a plus). You design maintainable systems and write production code, not just one-off scripts. - Cloud and Kubernetes detection depth: Experience with GCP or AWS logging, Kubernetes audit and runtime telemetry, workload identity, and turning raw signals into actionable detections. - Detection and adversary expertise: The ability to model realistic attacker behavior, hunt across complex systems, test detection coverage, and distinguish meaningful signal from noise. - Hands-on incident response: You've participated in on-call, led incidents, and written postmortems that changed how a team operates. - Experience building reliable automation or developer-facing systems: You can design APIs and workflows, instrument what you build, evaluate quality, and operate it in production. - A pragmatic product mindset: You can identify users and requirements, prioritize the highest-leverage problems, define success, and ship iteratively. NICE TO HAVE - Experience building or operating AI agents for security workflows such as alert triage, investigation, evidence collection, or human-in-the-loop response. - Proficiency using AI tooling to accelerate security investigations and engineering work. - Understanding of AI threats, adversarial testing, and the security boundaries of LLM and agent workloads. - Exposure to SOC 2 or ISO 27001 monitoring and evidence automation. - Experience with infrastructure as code such as Terraform or Helm. - Experience securing both SaaS and self-hosted or air-gapped deployments. Annual salary range: $185,000- $250,000 USD Compensation Philosophy: We offer competitive compensation that includes base salary, variable compensation for relevant roles, meaningful equity, benefits, and perks. We are hiring for this role across a range of scope, and the compensation band reflects that. Your offer depends on what we learn about your impact, craft, leadership, and communication during the interview process. We will tell you early where you’re tracking and talk comp with you before offer stage. Team members in the EU, UK, and APAC receive locally competitive benefits aligned with regional norms and regulations. BENEFITS Benefits include medical, dental, and vision coverage, flexible vacation, a 401(k) plan, meals on in-office days in the US and more.

Location: San Francisco, CA Workplace: OnSite ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. ABOUT THE ROLE We’re looking for an IT Site Specialist to join our IT Team at Ramp based in our San Francisco office! This is a temporary full-time on-site role that blends hands-on, in-person site support with ownership of our core SaaS application stack, and we weigh both sides equally. On the site side, you’ll be the primary IT presence in SF — owning deskside support, onboarding/offboarding, endpoint and AV support, and office inventory. On the application side, you’ll administer the tools the whole company depends on — Okta, Google Workspace, Slack, JAMF, and a growing set of SaaS platforms — owning provisioning, access, portfolio, renewals, integrations, and automation. We’re looking for someone who takes pride in running a smooth on-the-ground operation while also thinking like a systems owner who scales IT through automation and sound identity practices. WHAT YOU’LL DO - Provide in-person support at our San Francisco office 5 days/week, acting as the site’s primary IT point of contact. - Perform IT Support Specialist (L4) duties, encompassing all responsibilities of the IT Support Specialist role. - Provide deskside/walk-up support and resolve IT tickets end-to-end. - Handle advanced troubleshooting and internal escalation before handoff to Pod 2 – IT Engineering. - Triage and field support requests across tickets, email, Slack, and the team-it-ops and help-it distros; proactively work to minimize volume and improve SLAs. - Direct and review Serval (AI support agent) workflow runs — step in when automated resolution fails, and contribute workflow builds and guidance improvements. - Coordinate application onboarding/offboarding tied to lifecycle events (joiner/mover/leaver) — provisioning, deprovisioning, and access changes across the SaaS stack. - Administer core applications (Okta, Google Workspace, Slack, JAMF, and other SaaS tools): user lifecycle, group/role management, and SSO/SCIM integrations. - Own application portfolio management — seat counts, usage tracking, and license optimization. - Manage SaaS renewals — tracking contract dates and coordinating renewals/cancellations. - Partner with Pod 3 on SaaS App Strategy execution from an operational/usage standpoint. - Build and maintain integrations and automations to reduce manual work and enforce least-privilege access. - Manage on-site hardware inventory, lifecycle, and procurement coordination — stock levels, reorder requests, and coordinating with fulfillment vendors (e.g., Firstbase, SHI, CDW, Amazon). - Support AV/conference room reliability in the SF office. - Take ownership of small and large projects, partnering with internal and external teams to deliver. - Perform recurring audits on application licenses, access, and hardware; drive remediation. - Create technical and user-facing documentation; push the team toward industry best practices. - Be an advocate for our users — understand their challenges and remove blockers with empathy. WHAT YOU NEED - Minimum 4 years of technical experience in an enterprise-size organization, with hands-on experience in both on-site IT support and SaaS/application administration. - Strong knowledge of our core tech stack: Okta, Google Workspace, Slack, JAMF, and modern SaaS tools. - Solid understanding of User Lifecycle Management, identity/access management, and least-privilege principles. - Experience with SSO/SCIM provisioning and building integrations or automations across SaaS platforms. - Experience managing SaaS application portfolios, license optimization, and vendor renewals. - Experience with deskside support, ticket resolution, and knowing when to escalate to an engineering team. - Comfort owning the physical site experience — endpoint troubleshooting, AV, and inventory — alongside back-end application administration. - Strong attention to detail, execution-oriented, and comfortable owning ambiguous, cross-functional work. NICE-TO-HAVES - Experience in high-growth startups. - Experience managing macOS/Windows in hybrid/remote environments. - Scripting/automation experience (e.g., Python, API integrations, workflow tools). - Experience with AI-assisted support tooling and workflow automation (e.g., Serval or similar). - Experience coordinating hardware procurement with fulfillment vendors (e.g., Firstbase, SHI, CDW). - Okta Certified Professional / Administrator. - Slack Certified Admin. - Google Workspace Administrator experience. BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Location: Toronto, ON Workplace: OnSite 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. 1Password is opening a new flagship office in Toronto, and we need a senior technical leader to own the workplace technology that powers it. As a member of the IT team, this role is responsible for designing, implementing, and continuously evolving the technology experience across network infrastructure, AV and collaboration systems, physical security technology, and workplace endpoint services. This is an onsite, senior individual contributor role based in Toronto, reporting to the Manager of IT Support. You will serve as the company's primary subject matter expert for workplace networking and AV technologies, establishing the technical standards that will be replicated across future office locations. Beyond building the Toronto office, you will provide ongoing engineering leadership, drive technology improvements, mentor Workplace Technology Specialists supporting regional offices, and act as the senior escalation point for complex infrastructure and workplace technology issues. If you enjoy owning systems end to end, building scalable solutions, and solving challenging technical problems, we'd love to hear from you. How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is an onsite opportunity within Toronto, Canada. What we're looking for: - 5+ years designing, deploying, and supporting enterprise network infrastructure, including wired, wireless, routing, switching, and WAN/ISP redundancy using platforms such as Cisco Meraki or Aruba. - Experience designing, deploying, and operating enterprise workplace AV environments, including video conferencing, room scheduling, multi zone audio, digital signage, and room control systems. - Experience administering MDM platforms and managing endpoint lifecycle, provisioning, automation, and deployment workflows. - Experience implementing and supporting physical security technologies, including access control and camera platforms. - Experience delivering new office builds or major workplace technology projects while coordinating with vendors, contractors, and building management. - Experience building automation workflows and operational tooling that reduce manual effort and improve reliability. - Strong communication skills with the ability to partner effectively across technical and nontechnical stakeholders. - Willingness to travel to support office builds, technology standardization, and regional workplace initiatives. Bonus points for: - Experience working in a remote first organization supporting distributed workplace infrastructure. - Familiarity with SOC 2, ISO 27001, and physical security governance requirements. - Experience mentoring technical staff and establishing engineering standards across multiple office locations. What you can expect: INFRASTRUCTURE - Design, deploy, and continuously improve the Toronto office network, including wired, wireless, dedicated IT room infrastructure, and redundant internet connectivity with automated failover. - Serve as the technical owner for workplace networking across the company, developing scalable standards and reference architectures for future office builds. - Own the physical security technology stack, including access control, camera systems, and integrated workplace technologies. - Partner with the Security team on governance, compliance, audit requirements, and building integrations while driving long term platform reliability and lifecycle planning. - Own vendor relationships, technology evaluations, hardware standards, monitoring, capacity planning, and ongoing infrastructure performance across networking, AV, and physical security systems. - Evaluate emerging workplace technologies and recommend improvements that enhance reliability, scalability, and employee experience. WORKPLACE EXPERIENCE - Design, deploy, and continuously optimize AV and collaboration technologies across a variety of meeting spaces, including video conferencing, room scheduling, multi zone audio, digital displays, and proactive monitoring. - Own the technology behind the end to end onboarding experience for Toronto employees, including device provisioning, MDM workflows, automation, deployment standards, and lifecycle management. - Act as the senior technical escalation point for complex networking, AV, workplace infrastructure, and endpoint issues, while providing hands on support when required. - Provide mentorship and technical guidance to Workplace Technology Specialists supporting other regional office locations, helping establish consistent engineering and operational standards across the company. - Build and maintain engineering documentation, runbooks, architecture diagrams, automation workflows, and operational standards. - Provide onsite coverage for workplace technology operations during planned absences and support additional office builds and major technology initiatives as needed. What success looks like: - The Toronto office launches with resilient, well designed networking, AV, and physical security systems that become the blueprint for future 1Password offices. - Workplace infrastructure continues to evolve through proactive engineering, monitoring, automation, and lifecycle improvements rather than reactive support. - Regional Workplace Technology Specialists are enabled through mentorship, documentation, and standardized engineering practices. - Employees have a seamless workplace technology experience, while complex technical issues are resolved through thoughtful engineering solutions. - Routine operational work becomes increasingly automated, allowing more time to focus on strategic infrastructure improvements and future office expansion. Canada-based roles only: The annual base salary for this role is between $93,000 CAD and $130,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. Our culture At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. How we work with AI We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password. This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing 👶 Maternity and parental leave top-up programs 🩺 Competitive health benefits 🏝 Generous PTO policy Growth and future 📈 RSU program for most employees 💸 Retirement matching program 🔑 Free 1Password account Community 🤝 Paid volunteer days 🏆 Peer-to-peer recognition through Bonusly 🌎 Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting. You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Задачи: — Мониторинг сервисов и оперативное реагирование на инциденты. — Диагностика и устранение технических неисправностей. — Анализ логов и поиск причин возникновения ошибок. — Выполнение регламентных технических работ. — Взаимодействие с командами разработки, DevOps и телеком-направлением. Требования: — Уверенное владение Linux и работа в командной строке. — Базовые знания сетевых технологий (TCP/IP, DNS, VPN, HTTP/HTTPS). — Умение работать с SQL (SELECT, JOIN, UPDATE). — Базовые знания Docker. — Умение анализировать логи приложений и операционной системы. — Английский язык на уровне чтения технической документации. Будет плюсом: — Опыт работы с Grafana, Zabbix, Prometheus. — Знание Redis. — Опыт работы с Git. — Опыт работы с Asterisk, FreeSWITCH или другими VoIP-решениями. — Понимание CI/CD и опыт сопровождения SaaS-продуктов. Условия: — Работа в международной AI-компании. — Сменный график работы. — Комфортный офис в Алматы. — Бесплатные обеды. — Оплата тренажерного зала. — Возможность работать с современной AI-инфраструктурой и развиваться в направлении Linux/DevOps.

Location: Seoul, South Korea Workplace: onsite ABOUT YOU We are looking for a talented Integration Manager who can work with new and existing game partners and help get out tools, products, and services working inside their games. The ideal candidate will possess a blend of technical and people skills, reasonable design and UX sensibility, and some understanding of how payments in gaming "should" work. You should have experience playing games. Applicants should expect to assist developers and technical personnel rapidly debug their technical issues and escalate or transfer as necessary - for this reason, ability to quickly diagnose basic technical issues and provide proper documentation is a must.   If you’re passionate about driving business growth, supporting game developers, and expanding the reach of innovative gaming solutions, we would love to hear from you!   This role will be based out of our Japan office but can be hybrid or fully remote depending on the situation.   ABOUT US At Xsolla, we believe that great games begin as ideas, driven by the curiosity, dedication, and grit of creators around the world. Our mission is to empower these visionaries by providing the support and resources they need to bring their games to life. We are committed to leveling the playing field, ensuring that every creator has the opportunity to share their passion with the world.   Headquartered in Los Angeles, with offices in Berlin, Seoul, and beyond, we partner with industry leaders like Valve, Twitch, and Ubisoft to clear the paths for innovation in gaming. Our global reach spans over 200 geographies, offering more than 700 payment methods in 130+ currencies.   Longevity Opportunity Vision Enjoy the game! Job Purpose The Integration Manager is Xsolla's front-line technical partner for game studios — a hybrid role blending pre-sales engineering, technical support, and customer success. You'll work directly with new and existing game partners to get Xsolla's products, tools, and APIs working inside their games, from the first technical conversation through go-live and beyond. You'll lead client-facing meetings and demos, translate business needs into technical requirements, troubleshoot integration issues hands-on (logs, API calls, JSON payloads, webhook events), and act as the connective tissue between the client, Business Development, Customer Success, and Engineering. Responsibilities Client-Facing & Pre-Sales Lead and confidently run client meetings, calls, and technical demos independently, without needing a BD or CS lead to carry the conversation Act as the primary technical point of contact during pre-sales and onboarding, scoping integration requirements and setting realistic expectations Present technical concepts clearly to both technical and non-technical stakeholders (engineers, producers, executives) Technical Integration & Troubleshooting Guide partners through API integration, including authentication, request/response structures, JSON payloads, and webhook configuration and delivery Diagnose issues using data dumps, technical logs, and API traces; distinguish integration errors from platform bugs Write and interpret basic scripts or API calls (e.g., via Postman, curl) to reproduce and isolate client-reported issues Document issues concisely and completely enough for engineering to act on without back-and-forth Know when to resolve an issue directly versus escalate to Engineering, Product, or Support, and manage that handoff cleanly Cross-Functional Communication Serve as the communication hub between Client, Business Development, Customer Success, and Development teams, ensuring nothing gets lost in translation between technical and commercial priorities Provide clear, well-organized status updates to internal stakeholders and clients throughout the integration lifecycle Maintain accurate documentation in Jira, Confluence, and related tools Qualifications & Skills Bachelor's degree (or equivalent experience) in a related field 3+ years of experience in technical integration, solutions engineering, or a client-facing technical role Demonstrated ability to lead client meetings and presentations independently — this is not a support-only or backend role Working knowledge of REST APIs, JSON, and webhooks; able to read API documentation, interpret payloads, and troubleshoot integration failures independently Comfortable using tools like Postman (or equivalent) to test and debug API calls Near-native fluency in both Korean and English, written and verbal; able to confidently lead client presentations and meetings and write professional business emails in either language without support (daily cross-team communication is in English) Proven customer service or client relationship experience Comfortable working with high autonomy, shifting priorities, and a significant workload Strong attention to detail and time management Nice to Have Prior experience in the gaming industry, payments, or fintech Experience with Confluence, Jira, and G Suite Prior experience at a foreign or international company, or working across time zones with global teams Genuine interest in games (as a player) and the gaming industry The duties and responsibilities of this position may evolve over time to support the organization's goals and individual growth. This job description is intended to outline the general nature and level of work being performed and is not intended to be an exhaustive list of all duties, responsibilities, and qualifications required. By submitting your application, you consent to Xsolla conducting background checks, where permitted by law, after the final interview stage. All checks will comply with local regulations, and your information will be handled confidentially. Xsolla takes your privacy seriously and will not sell or externally distribute any personal data received during the hiring process. In accordance with applicable data protection laws including the Personal Information Protection Act (PIPA), Xsolla is committed to protecting your personal information and respecting your privacy. For any inquiries related to data privacy, please contact: careers@xsolla.com Explore more opportunities at: https://xsolla.com/careers

Задачи: — развитие и поддержка современной DevOps-инфраструктуры. Требования: — опыт работы от 3 лет; — опыт с Docker и Kubernetes; — опыт с CI/CD (GitHub Actions или аналогичные инструменты); — опыт с Terraform и/или Ansible; — опыт с Prometheus, Grafana, ELK Stack; — опыт работы с облачной инфраструктурой.

Location: Almaty, Kazakhstan Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.   Role Overview We're looking for a hands-on Infrastructure Security Engineer to own security across our cloud and ML infrastructure — the platform that trains our models and serves millions of generations a day. The work spans tenant isolation for user-deployed apps, GPU cluster security, and model protection from training pipeline to serving. You'll sit between Security, DevOps, and ML Engineering. You'll own both immediate implementation work and long-term operational responsibility: cloud and ML infrastructure security, vulnerability management, monitoring, and access governance.   KEY RESPONSIBILITIES We are looking for someone with experience in scaling high-growth startups who can make an immediate impact in the following areas: Cloud & Network Security - Evaluate, implement, and maintain cloud security tooling. - Own infrastructure and container vulnerability management across our cloud environments, and drive remediation. - Design and implement network segmentation to tighten internal security boundaries. - Build centralized security monitoring across cloud infrastructure. Corporate Access Control - Own access governance and credential management across cloud and internal tooling. - Partner with Engineering, DevOps, and IT to raise identity and access management standards. Technical Leadership: - Set the technical direction for infrastructure security and lead cross-functional projects turning the standards you set into tooling and guardrails engineers actually ship with. Requirements: Few people will match all of these. If you're strong on some and eager to learn the rest, apply anyway. - 7+ years in infrastructure security or security engineering, including time at a high- growth startup. - Deep hands-on experience securing a major cloud provider and a container orchestrator, managed with infrastructure-as-code (AWS, Kubernetes, Terraform). - Experience securing ML workloads — training or inference infrastructure, GPU clusters, or model-serving platforms. - Solid networking, operating systems, and cryptography fundamentals. - Strong grasp of container and infrastructure security practices and vulnerability management. - Comfortable working cross-functionally with DevOps, Engineering, and ML teams; able to independently find and close security gaps. - High agency. Nice to have - Experience with sandboxing, container isolation, or secure execution environments for untrusted code. - Experience with CSPM rollouts. - Incident response and security monitoring experience. - Familiarity with SOC 2 or similar frameworks. WHAT WE OFFER: - Competitive base salary in USD - Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth. - On-site role in our Almaty office (we will relocate you from anywhere).

Location: Almaty, Kazakhstan Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. ABOUT THE ROLE We’re looking for an IT Security Engineer to own and strengthen the security of our corporate technology environment. This is a hands-on role spanning identity and access management, endpoint security, SaaS security, Zero Trust, security automation, and incident response. You’ll work closely with Security, IT, Engineering, and business teams to build secure, scalable systems and automate the controls that protect our people, devices, applications, and data.   WHAT YOU’LL DO IDENTITY & ACCESS MANAGEMENT - Own and strengthen identity and access controls across our corporate environment, with a focus on Microsoft Entra ID. - Implement and maintain SSO/SAML, SCIM provisioning, MFA, Conditional Access, and RBAC. - Build and improve automated joiner, mover, and leaver (JML) workflows. - Regularly review permissions, privileged access, and authentication policies to reduce unnecessary access and security risk. - Help establish identity as the foundation of our Zero Trust security model. ENDPOINT SECURITY - Manage and improve endpoint security through Microsoft Intune/MDM, device compliance policies, and endpoint protection tooling. - Deploy and maintain EDR capabilities across the corporate fleet. - Establish and enforce security baselines for employee devices. - Investigate endpoint security events and remediate compromised or non-compliant devices. SAAS & CORPORATE APPLICATION SECURITY - Assess and improve the security posture of corporate SaaS applications. - Partner with application owners to implement appropriate authentication, authorization, provisioning, and data-access controls. - Identify shadow IT, excessive permissions, insecure configurations, and other SaaS-related risks. - Help establish scalable security standards for onboarding and managing new corporate applications. ZERO TRUST & CORPORATE ACCESS - Design and implement Zero Trust principles across identity, endpoints, applications, and corporate access. - Strengthen controls around privileged access, remote access, and access to sensitive systems. - Apply practical security controls that balance strong protection with employee productivity. SECURITY AUTOMATION - Automate repetitive security and IT workflows using scripts, APIs, and integrations. - Build tooling to automate access reviews, provisioning, compliance checks, alert enrichment, remediation, and other security processes. - Use scripting languages such as Python or JavaScript to improve security operations and reduce manual work. - Look for opportunities to turn manual security processes into scalable, reliable systems. DETECTION & INCIDENT RESPONSE - Monitor and investigate security alerts across identity, endpoint, and corporate systems. - Perform initial investigation and triage of suspicious activity and potential security incidents. - Support incident containment, remediation, and post-incident improvements. - Build lightweight detections and alerts for meaningful risks within the corporate environment. WHAT WE’RE LOOKING FOR - Strong hands-on experience with identity and access management, ideally within Microsoft Entra ID. - Experience implementing or managing SSO/SAML, SCIM, MFA, Conditional Access, RBAC, and JML workflows. - Experience with MDM and endpoint security, ideally Microsoft Intune and modern EDR tooling. - Understanding of SaaS and corporate application security. - Experience implementing or operating within a Zero Trust security model. - Ability to automate workflows using scripts and APIs, with experience in a language such as Python or JavaScript. - Working knowledge of security detection, investigation, and incident response. - Strong security judgment — you can distinguish theoretical risk from meaningful business risk and prioritize accordingly. - Comfortable operating independently in a fast-moving startup environment where priorities can change quickly. - Builder mindset: you look for ways to automate, simplify, and improve systems rather than relying on manual processes. NICE TO HAVE - Experience with reverse engineering, CTFs, security competitions, or similar hands-on security challenges. - Strong understanding of networking fundamentals, including VPNs, network segmentation, authentication protocols, and common lateral-movement techniques. - Experience securing rapidly scaling or highly technical organizations. - Experience working closely with engineering or product security teams. - Familiarity with cloud security concepts and modern security monitoring tools. WHAT WE OFFER: - Competitive base salary in USD - Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth. - On-site role in our Almaty office (we will relocate you from anywhere).

Location: Almaty, Kazakhstan Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. ABOUT THE ROLE Break new features before they ship: agentic systems, MCP servers, code-generating agents, user-deployed apps, generative models for image, video, and voice, and enterprise features (SSO, org and team management, roles). It's new ground, and you'll help define how we secure it. You go first. What you'll do: - Pentest new features and products pre-release: web, APIs, admin surfaces. - Work out the attack surface of each new feature yourself. - Hunt authorization flaws across our multi-tenant APIs and retest fixes. - Join design and code reviews early, so flaws die before they're built. - Turn recurring findings into guardrails — paved-road standards and automated checks — so a bug class dies once instead of resurfacing every release. - Bring a working repro to the team that owns the code and see the fix through. Requirements - A track record of finding real vulnerabilities in real systems — appsec work, bug bounty, or research. - The ability to read modern codebases, trace a bug to root cause, and discuss the fix with the engineers who wrote it. - A threat-modeling instinct for spotting the weak spots in a design or architecture before a line is written. - Enough cloud and container fundamentals to follow a bug into the infrastructure it runs on. - High agency. - Working English. Nice to have - LLM/agent security research, public research or CVEs, OSWE/CWEE or equivalent hands-on certificates. WHAT WE OFFER: - Competitive base salary in USD - Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth. - On-site role in our Almaty office (we will relocate you from anywhere).

Location: San Francisco, CA Workplace: OnSite ABOUT US At LangChain, our mission is to make intelligent agents ubiquitous. We build the foundation for agent engineering in the real world, helping developers move from prototypes to production-ready AI agents that teams can rely on. We began as widely adopted open-source tools and have grown to also offer a platform for building, evaluating, deploying, and operating agents at scale. With $125M raised at Series B from IVP, Sequoia, Benchmark, CapitalG, and Sapphire Ventures, we’re at a stage where we’re continuing to develop new products, growth is accelerating, and all team members have meaningful impact on what we build and how we work together. LangChain is a place where your contributions can shape how this technology shows up in the real world. Today, our platform includes LangSmith (Observability, Evaluation, Deployment, Fleet, and Sandboxes), our open source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement. We have 100M+ monthly open source downloads, 6,000+ active LangSmith customers, and 5 of the Fortune 10 use LangSmith in production (+ 35% of the Fortune 500 overall), including teams at Klarna, Clay, Coinbase, Workday, Lyft, Cloudflare, Harvey, Rippling, Vanta, LinkedIn, Monday.com, Nvidia, and Bridgewater. ABOUT THE ROLE We are seeking our second IT Engineer to join our growing team in San Francisco. Our team laid the foundation for IT at LangChain, and this role is critical to helping us mature and scale that foundation as the company grows. You'll bring deep technical expertise to our fleet management and SaaS administration, with room to shape how we manage our fleet, identity, SaaS stack, and the automation that runs the business. The ideal candidate brings startup experience, thrives in ambiguity, loves a good problem, and is excited to build scalable systems that support our global team.   WHAT YOU'LL DO Infrastructure & Automation - Build and maintain our IT infrastructure and tech stack that scales with LangChain’s rapid growth - Drive automation initiatives to reduce toil and improve efficiency using scripts, APIs, and workflow tools - Implement monitoring and documentation practices that enable operational excellence Client Platform Engineering - Reimagine how we deploy, configure, and manage our Mac fleet. MDM (Iru) is the foundation, not the entire solution however. - Design and build a secure, reliable, and maintainable desktop environment that replaces our current patchwork of one-off scripts with version-controlled, testable, and repeatable systems - Own our approach to custom security controls and application deployment across the fleet, so updates and configuration changes are consistent and easy to roll out at scale - Build the fleet management systems now so they hold up as headcount, and the fleet, keep growing Security & Identity Management - Drive our identity strategy, implementing secure, scalable access controls following the principle of least privilege - Identify and implement security enhancements across our SaaS stack - Partner with our Security team to drive improvement of our enterprise security posture SaaS Administration - Administer and optimize our growing SaaS stack, managing provisioning, access controls, and lifecycle management - Become IT's central administrator for LangSmith, our own product, developing deep fluency in its administration surface - Build automated workflows for LangSmith administration using its API paired with our automation tooling, reducing manual, toil-heavy admin work - Help IT stay fluent across the internal tools we run and support, including the LLM Gateway. Another LangChain product. Core IT Operations - Provide support to employees globally across hardware, software, networking, and IT tools - Deliver great onboarding experiences for new hires, ensuring they have the right hardware, access, and setup so they can be productive from day one   WHAT YOU'LL BRING - 5+ years of experience in IT engineering and systems administration - Deep proficiency with Okta and Okta Workflows - Fluency in at least one general-purpose programming language (Python, JavaScript, or similar) with demonstrated ability to write production-quality scripts and automation - Versed in the us of REST APIs, webhooks, and API authentication methods; you should be comfortable reading API documentation and building integrations between systems - Demonstrated ability to build meaningful automations that reduce manual work and improve IT operations - Hands-on experience with IaC using Terraform to manage and provision IT infrastructure and applications, and comfort applying changes within an existing Terraform codebase - Experience using coding agents (e.g. Claude Code) as part of your day-to-day engineering workflow to build and ship automation faster - Strong experience with a modern tech stack that includes Google Workspace, Slack, Notion, Claude, ChatGPT - Solid understanding of MDM platforms, and ideally experience going beyond baseline MDM with fleet/configuration management tooling to manage a fleet's security and application needs - Experience administering a large or complex SaaS stack, ideally including internal or AI/LLM-based products - Strong networking fundamentals (TCP/IP, DNS, VPNs, firewalls, switching, wireless, LAN/WAN)   - Annual salary range: $150,000-$170,00 USD Compensation Philosophy: We offer competitive compensation that includes base salary, variable compensation for relevant roles, meaningful equity, benefits, and perks. We are hiring for this role across a range of scope, and the compensation band reflects that. Your offer depends on what we learn about your impact, craft, leadership, and communication during the interview process. We will tell you early where you’re tracking and talk comp with you before offer stage. Team members in the EU, UK, and APAC receive locally competitive benefits aligned with regional norms and regulations. BENEFITS Benefits include medical, dental, and vision coverage, flexible vacation, a 401(k) plan, meals on in-office days in the US and more.

Ищу DevOps Engineer уровня Middle /Senior в команду Jana Post.

Location: Baku Workplace: onsite ABOUT YOU Xsolla seeks a security engineer to join a new security team during a critical build-out phase. You work across application security and infrastructure security - reviewing code, hardening cloud environments, supporting incident response, and partnering with engineering teams to improve security posture across the company. This is a generalist role well-suited to an early-team hire. You are comfortable working across domains rather than specializing in one, and you grow into deeper expertise as the team and program mature. You collaborate closely with the security program manager and work directly with engineering teams on secure design, findings, and remediation. Our tech stack includes GCP, vSphere/ESX, Kubernetes and container workloads, MariaDB, CockroachDB, Go, PHP, and Python. You do not need expertise in all of these, but you are comfortable navigating a mixed environment and learning what you need. As always true in job descriptions, there is an intangible value that is hard to capture. We look for a diverse set of perspectives and skills. Even if you don't match every requirement, we encourage you to apply if you think you can be highly successful in this role.   ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Perform Application Security Reviews - Conduct code reviews, run SAST / DAST and dependency scanning tools, and work with engineering to resolve findings. Participate in Threat Modeling - Contribute to threat modeling sessions for new features and architecture changes, helping identify risks early in the design process. Help Harden Cloud and Container Infrastructure - Work on GCP, Kubernetes, and IAM configurations to strengthen the security of our cloud and container environments. Participate in Pen Test Remediation - Help triage penetration test findings and work with engineering teams to implement fixes, coordinating closely with the security program manager. Partner with Engineering on Secure Design - Review architectures, advise on secure implementation patterns, and help teams make informed security decisions. Identify and Track Security Findings - Document findings, assess severity, and track them through the remediation lifecycle to resolution. Support Incident Response - Help investigate and document security events, contribute to root-cause analysis, and support containment efforts. Write Async Security Guidance - Produce advisories, best-practice documentation, and practical guidance that helps engineering teams build securely across time zones. Support Product Security - Work with partners on the security posture of customer-facing services, contributing to reviews and assessments as needed. What You Bring Foundational AppSec Knowledge - Understands common vulnerability classes, secure coding patterns, and how to conduct a meaningful code review. Cloud Environment Exposure - Has worked with GCP or a similar cloud provider and is comfortable with IAM , networking, and container concepts. Code Literacy - Reads and reviews code in one or more of: Go, Python, PHP. Does not need to be a software engineer, but can follow logic and spot issues. Security Tooling Familiarity - Has used or is familiar with SAST , DAST , or dependency scanning tools and understands how they fit into a development workflow. Strong Written Communication - Writes clear, concise async documentation - findings, advisories, guidance - that works across time zones and audiences. Collaborative Mindset - Partners effectively with engineering teams. Focuses on helping teams build securely rather than just identifying problems. Self-Directed with Growth Mindset - Eager to learn, comfortable with ambiguity, and able to make progress with minimal direction in a new and evolving team. Nice to Have Threat modeling experience; Hands-on Kubernetes or container security experience; Infrastructure security background - Linux, networking, vSphere/ ESX; Familiarity with NIST CSF , PCI , SOC 2, or ISO 27001 from a technical perspective; Detection engineering or incident response experience; Experience building security automation or internal tooling; Relevant certifications ( OSCP , GWAPT , CKS , or similar hands-on certs). Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.

Location: Baku Workplace: onsite ABOUT YOU We are looking for a junior application security specialist to join a growing security team at Xsolla. This is a hands-on role where you will work closely with senior specialists to identify, assess, and help remediate security vulnerabilities across our products and infrastructure. You will be involved in day-to-day AppSec work - code reviews, vulnerability triage, threat modeling, and security testing. You are curious, detail-oriented, and eager to develop deep expertise in application security. You do not need to have all the answers, but you ask the right questions and follow through. This is a strong learning environment. You will be exposed to real-world security challenges in a payment platform operating at scale, and supported by experienced security specialists who will help you grow.   ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Triage Security Findings - Assess incoming bug bounty reports and scanner findings. Evaluate validity, calculate real severity, and escalate appropriately with clear written summaries. Assist with Vulnerability Assessments - Participate in security assessments of web applications and APIs. Help identify and document risks in new features and existing systems. Write Clear Security Documentation - Document findings, reproduction steps, and remediation guidance in a way that engineering teams can act on. Support Threat Modeling - Participate in threat modeling sessions. Learn to identify trust boundaries, data flows, and attack surfaces in system designs. Monitor Security Tools - Help operate SAST , DAST , and dependency scanning tooling. Track findings, reduce noise, and support remediation workflows. Support Code Reviews - Review code for common vulnerability classes under guidance of senior specialists. Learn to identify security issues across PHP, Python, and Go codebases. Stay Current - Follow developments in the security community. Bring awareness of new vulnerability classes, CVEs, and attack techniques relevant to our stack. What You Bring Web Security Fundamentals - Solid understanding of common vulnerability classes: OWASP Top 10, CSRF , XSS , IDOR , SQL injection, open redirect, authentication and session management weaknesses. You understand root causes, not just names. Web and Browser Fundamentals - Solid understanding of how web applications work: HTTP request/response cycle, client-server model, REST APIs, how browsers handle same-origin policy, cookies and their attributes, and CORS . This is the foundation everything else builds on. Security Testing Tools - Hands-on experience with Burp Suite or similar web application security testing tools. You have used them to intercept, modify, and replay requests — not just run automated scans. Vulnerability Documentation - Able to reproduce a vulnerability and write it up clearly: reproduction steps, proof of concept, and impact statement. Findings that engineering teams cannot reproduce or understand do not get fixed. Secure Development Awareness - Familiarity with foundational secure coding concepts: input validation, output encoding, parameterized queries, and least privilege. Code Readability - Ability to read and follow code in at least one language relevant to web security - PHP, Python, JavaScript, or Go. You don't need to be a developer, but you need to follow logic and spot security-relevant patterns. Analytical Thinking - You reason through problems methodically. You can explain not just what a vulnerability is but why it exists, how it is exploited, and what fixing it actually requires. Clear Written Communication - You write findings and summaries that are precise, reproducible, and useful to the engineers who need to act on them. Curiosity and Initiative - You dig into problems rather than stopping at the surface. When something looks wrong, you investigate before concluding Nice to Have Participation in bug bounty programs or CTF competitions; Basic scripting ability for automation - Python or Bash; Familiarity with CI/CD pipelines and where security tooling fits; Exposure to cloud environments - GCP, AWS, or Azure; Relevant coursework or certifications - eWPT, CEH , PortSwigger Web Security Academy progress, or similar entry-level credentials. Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.

Задачи: — Развитие и поддержка IT-инфраструктуры в высоконагруженном гео распределенном проекте; — Обеспечение бесперебойной работы инфраструктуры и сервисов; — Сопровождение bare-metal кластеров k8s; — Сопровождение кластеров Clickhouse, Kafka, PostgreSQL, Aerospike; — Автоматизация процессов; — Обнаружение потенциальных проблем и участие в создании решения по их устранению; — Поиск, тестирование и внедрение новых решений, помогающих оптимизировать текущие процессы и повысить качество предоставляемых услуг; Требования: — Опыт администрирования Linux серверов; — Опыт администрирования Kubernetes; — Опыт администрирования ClickHouse, PostgreSQL, Redis; — Опыт работы с брокерами сообщений (Kafka); — Понимание принципов IaC; — Prometheus stack; — ELK/EFK; Будет плюсом: — Опыт работы с Aerospike; — Опыт использования GitLab CI; — Опыт автоматизации с помощью Ansible; — Владение любым языком программирования или скриптовым языком (Python, Bash, Go и др.); Условия: — Отсутствие дресс-кода и бюрократии; — Рабочий ноутбук на выбор: Mac или PC; — Покупка билетов до Кипра за счёт компании; — Помощь с переездом семьи из любого региона; — Рабочая виза для сотрудника и гостевая виза для членов семьи; — Предоставляем жильё на первый месяц; — Медицинская страховка и мобильная связь; — Бесплатные обеды и напитки; — Всегда полные корзины фруктов и всяких вкусняшек в офисе; — Бесплатные курсы английского и греческого языков; — Оплата занятий спортом; — Частичная оплата школ и детских садов.

Задачи: — эксплуатация Kubernetes в production (HPA, requests/limits, network policies) — практическое применение CI/CD и GitOps — работа с Observability stack (метрики, алерты, дашборды, tracing, SLO/error-budget, runbook’и) — уверенный опыт с PostgreSQL и Redis (pooling, индексы, партиционирование, репликация, troubleshooting) — глубокое знание Terraform, Linux, сетей и TLS — работа с high-load или latency-sensitive системами (от 10k RPS, p95/p99 latency, bottleneck analysis, нагрузочное тестирование) — проектирование прогрессивных деплоев (canary/blue-green, feature flags, A/B infra) и миграций без даунтайма (strangler-fig, shadow/replay) — понимание IDP/platform-as-product подхода и построения golden-path платформ — написание архитектурных документов (ADR) и менторство других инженеров Требования: — опыт эксплуатации Kubernetes в production — практический опыт CI/CD и GitOps — опыт работы с Observability stack — уверенный опыт с PostgreSQL и Redis — глубокое знание Terraform, Linux, сетей и TLS — опыт работы с high-load или latency-sensitive системами — опыт проектирования прогрессивных деплоев и миграций без даунтайма — понимание IDP/platform-as-product подхода — умение писать архитектурные документы и менторить Условия: — работа в офисе в г. Алматы — занятость оффлайн

Обязанности: • Управление кластерами виртуализации Proxmox (KVM) • Управление AD, кластером терминальных серверов Windows Server 2022 • Работа с сетевым оборудованием Mikrotik, Cisco, D-link • Управление почтовым сервером Zimbra • Настройка системы мониторинга Zabbix • Работа с серверным оборудованием • Управление СХД Synology, Qnap • Настройка IP телефонии Asterisk(FreePBX), Mango, Gigaset • Инвентаризация и управление инцидентами в GLPI • Работа с системами видеонаблюдения и СКУД Требования: • Высшее образование, желательно техническое • Опыт работы в администрировании от 5 лет • Уверенные знания в области сетевой инфраструктуры • Навыки работы в bash, PowerShell, желательно Python, PHP • Высокий уровень стрессоустойчивости, ответственности и коммуникабельности Мы предлагаем: • Место работы: отдельно стоящее здание частной клиники в зеленом районе Москвы • График работы: 5 дней в неделю (8-и часовой рабочий день), начало рабочего дня в 8-00, 9-30 или 11-30 и плавающими выходными (по договоренности с коллегами)