Инфраструктура и безопасность вакансии - удалённо

Squads is looking for a Senior Security Engineer Product and Infrastructure to lead product and infrastructure security, conduct reviews, manage vulnerabilities, and strengthen secure development practices.

Поддержка и развитие инфраструктуры на Ubuntu 22.04/24.04; Настройка и сопровождение CI/CD в GitLab;

Задачи: — расследование нелегальных сетей — построение интеллектуальных конвейеров на базе искусственного интеллекта Требования: — опыт работы с расследованиями финансовых преступлений, отмыванием денег, нелегальными азартными играми, подпольным банкингом — знание OSINT и методов анализа угроз — опыт работы с блокчейн-интеллектом и крипторасследованиями — владение английским языком — знание китайского (мандарин) будет преимуществом Условия: — удалённая работа

- Деплоить, обновлять и эксплуатировать сервисы Big Data платформы: HDFS, Ozone S3, Iceberg и др. - Поддерживать пилот: перестраивать работу кластера под тысячи мелких таблиц и файлов.

Location: Remote, Global ABOUT THE ROLE We are seeking a platform engineer to join our Compute team. This team owns the critical systems that power project provisioning, scaling, and the compute that our users rely on every day. You’ll work on the core platform that ensures Supabase can seamlessly scale across multiple regions, handle high-volume workloads, and provide low-latency, highly available compute services. You'll design, build, and operate systems that are both robust and highly automated — enabling us to provision new projects reliably at scale, optimize resource utilization, and deliver a seamless experience to the millions of databases which we manage. WHAT YOU’LL BE RESPONSIBLE FOR: - Help build and maintain the Supabase Cloud offering; - Design and implement systems to provision, scale, and manage the multi-region compute workloads powering Supabase projects; - Own the full lifecycle of compute orchestration: project creation, warm pools, autoscaling, resizing, and resource optimization; - Improve automation and observability across the compute stack to ensure high availability and performance; - Improve our system architecture to reduce costs while balancing security, reliability, and performance; - Collaborate cross-functionally with other teams to help leverage compute as a core platform offering; - Participate in on-call rotations, incident response, and post-incident reviews; - Resolve escalated support issues, while also identifying and resolving systemic issues across the platform. YOU MIGHT BE A GOOD FIT IF YOU: - Have strong software engineering skills (Go and Typescript required); - Experience building and operating cloud infrastructure or distributed systems at scale; - Have 5+ years experience with cloud infrastructure (AWS required, additional experience with GCP and Azure is a plus) - particularly compute, networking, and storage services; - Have 3+ years experience working with building custom Kubernetes controllers, and operating large-scale (tens-to-hundreds of thousands of pods) clusters; - Are knowledgable about networking and multi-region infrastructure design; - Are familiar with Postgres; - Have experience with Infrastructure as Code tools (Pulumi highly preferred, Terraform/CDK etc acceptable) - Have experience working with QEMU, KVM, and NAS is a plus; - Have experience with being part of on-call rotations for large production system; WHAT WE OFFER - Fully Remote We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world. - ESOP Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together. - Tech Allowance Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work. - Health Benefits Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us. - Annual Off-Sites Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year. - Flexible Work We operate asynchronously and trust you to manage your own time. You know what needs to be done and when. - Professional Development Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth. ABOUT THE TEAM Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love. - ~400 team members - 60+ countries - 20+ languages spoken - Over $1B raised (including our $500M Series F) - 540,000+ community members We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.

Ищем DevOps-инженера, который выстроит и будет развивать нашу внутреннюю инфраструктуру, а также настроит пайплайн сборок Unreal. Корпоративная инфраструктура (основной фокус):

🕹 Список обязанностей: Выстроить централизованную систему IT-безопасности и управления инфраструктурой для всех юридических лиц группы компаний. Управление доступами — разделение данных, дисков и папок по юридическим лицам, централизованная выдача и отключение доступов, контроль onboarding/offboarding.

• Ты глубоко понимаешь Linux (от загрузки до сетевого стека) и уверенно владеешь Bash и Python для автоматизации. • Ты имеешь коммерческий опыт с Kubernetes (администрирование, troubleshooting) и Docker (включая оптимизацию сборок).

Location: Berlin Office; Bosnia; Norway; Estonia; Latvia; Slovenia; Netherlands; Hungary; Kosovo; Portugal; Poland; Serbia; Germany; Austria; Finland; Montenegro; Albania; Lithuania; Slovakia; Ireland; Bulgaria; Denmark; Belgium; Czech Republic; United Kingdom; Croatia; Spain; Greece Workplace: Remote The AI orchestration of your wildest imagination. n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits. Backed by a fiercely inventive community and 500+ builder-approved integrations, we’re changing the way people bring systems together and scale ideas for impact. Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve: - Cultivated a community of more than 650,000 active developers and builders - Earned 190K+ GitHub stars, making us one of the world’s Top 40 most popular projects - Backed by top investors, from Sequoia’s first German seed to our SAP's recent strategic investment - bringing us to a $5.2bn valuation That’s the company we’ve built. Now we’d love to see what you can build. If you’re applying, try n8n out - whether you’re technical or not - and share a screenshot of your first workflow with us. The easiest place to start is here: app.n8n.cloud/register http://app.n8n.cloud/register. We’re in a defining moment of an incredible journey. Come and build with us. 🎯 Your main goal will be to identify and reduce security risks across n8n's product and internal systems, using threat modelling, hands-on security expertise, and cross-functional collaboration to help teams design, build, and operate more secure systems. You'll join our growing security team at a pivotal stage, acting as a trusted security partner to teams across the business. You'll help us build a move from reactive security management to a proactive, scalable security practice. Here's what you'll be driving: THREAT MODELLING, RISK ASSESSMENT & SECURITY DESIGN - Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems, identifying vulnerabilities and recommending practical mitigations. - Partner with Engineering, Cloud, IT, and Data teams to review security designs, define actionable security requirements, and influence the implementation of appropriate controls. - Help teams embed security into their development processes through secure coding guidance, design reviews, documentation, and security tooling that enables them to identify and address risks independently. VULNERABILITY MANAGEMENT & COORDINATED DISCLOSURE - Participate in the security triage rotation, assessing incoming vulnerability reports, validating findings, and prioritising remediation based on severity and business impact. - Collaborate with engineering teams to coordinate vulnerability remediation, verify fixes, and support secure patch and release processes. - Help manage our vulnerability disclosure and bug bounty programmes, including engagement with security researchers, coordinated disclosures, and GitHub Security Advisories. SECURITY OPERATIONS & INCIDENT READINESS - Help establish and improve logging, detection, and protective monitoring capabilities across our infrastructure, corporate systems, and internal applications. - Develop and improve incident response processes, runbooks, and exercises to strengthen our ability to detect, investigate, and respond to security incidents. - Work closely with system owners to identify security gaps, prioritise remediation, and verify that implemented controls effectively reduce risk. CUSTOMER TRUST & COMPLIANCE ENGINEERING - Support SOC 2 compliance by helping establish continuous control monitoring, automated evidence collection, and processes that make security assurance part of everyday operations. - Collaborate with Sales, Solutions Engineering, and Customer Success to respond to customer security assessments and build reusable resources that streamline future requests. - Partner with Legal, Finance, IT, and other stakeholders to assess security risks, improve security policies and controls, and strengthen trust with enterprise customers. We're hiring two Security Engineers with complementary strengths, so you don't need to be an expert in every security domain. REQUIREMENTS MUST-HAVES - 🔍 Threat Modelling & Risk Assessment: You have hands-on experience assessing real-world systems, identifying security risks, determining defensible severity levels, and recommending practical controls that teams can implement. - 🛠️ Technical Security Expertise: You can validate security findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation when needed to demonstrate risks or improve security processes. - 🔐 Security Engineering Experience: You've worked hands-on in infrastructure, product, or application security within a product-focused organisation, with a strong understanding of how modern systems are designed and secured. - 🤝 Cross-functional Influence: You're comfortable acting as an internal security consultant, advising teams, challenging technical decisions constructively, and influencing stakeholders without direct authority. - 🎯 Risk Remediation & Ownership: You've helped secure systems you don't directly own, translating security findings into actionable requirements and working with responsible teams to ensure effective remediation. - 🤖 AI & LLM Fluency: You're comfortable using LLM-assisted tooling and understand its limitations, security implications, and potential failure modes. - ✍️ Clear Communication: You can explain complex security risks, document technical findings, and provide practical guidance that engineers and non-technical stakeholders can confidently act on. You also bring deep expertise in at least two of the following areas: - 💻 Application Security: You've developed security checks, engineering guardrails, tooling, or guidance that helps product teams build and ship secure software. - ☁️ Platform Security: You have experience securing a major cloud provider and Kubernetes environments, including areas such as sandboxing, multi-tenancy, or identity. - 🔑 Corporate Security: You've worked on identity and access management, endpoint security, employee access lifecycles, or data access controls across corporate environments. - 🚨 Security Monitoring: You've implemented logging, protective monitoring, or security detection capabilities that support effective investigation and incident response. - 📋 Security Assurance & Compliance: You've supported SOC 2 or ISO 27001 from an engineering perspective, including implementing technical controls or automating compliance evidence collection. NICE-TO-HAVES - 🐛 Vulnerability Disclosure: You've helped operate bug bounty or coordinated vulnerability disclosure programmes, including publishing security advisories such as GHSAs or CVEs. - 🧠 AI & Agent Security: You have experience assessing or securing LLM-powered applications and AI agents, including risks related to permissions, tool access, prompt injection, or sensitive data. - 🏢 Corporate IT Tooling: You're familiar with platforms such as Okta, Azure, or Drata and their role in securing corporate systems and supporting compliance. - 🌍 Open-source Ecosystems: You've worked with open-source or source-available products, contributed to security communities, or are already familiar with n8n. - 🎯 Penetration Testing: You have practical penetration testing experience and can independently identify, demonstrate, and help remediate security vulnerabilities. - 🌱 Early-stage Security Experience: You've been an early security hire or helped establish security practices in a startup or rapidly scaling organisation. Why join us? At n8n, you'll help shape security at a defining stage of our growth. We're building a security practice that goes beyond reacting to vulnerabilities, and you'll play a key role in how we identify risks, influence engineering decisions, and establish security practices that scale with the business. You'll work across a broad range of challenges, from securing AI-powered product features and our source-available automation platform to improving corporate security, strengthening incident readiness, and making compliance more automated. You'll have direct exposure to teams across the company, the opportunity to influence important technical decisions, and the autonomy to turn your expertise into measurable security improvements. Sound like a challenge you're excited to take on? Apply now — and help us build the future of secure automation. n8n is an equal opportunity employer and does not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, gender identity, age, marital status, veteran status, or disability status. We can sponsor visas to Germany; for any other country, you need to have existing right to work. Our company language is English. You care about diversity and inclusion? We do too! Check out our Diversity, Inclusion and Belonging initiatives at n8n https://www.notion.so/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35?pvs=21 (https://www.notion.so/n8n/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35). Location disclaimer: If you see multiple job postings for the same role, it is most likely because we're hiring remotely for this role and posting in different locations to make sure every potential candidate can see the role. Please apply to the location you're the most likely to work from in the future. BENEFITS - Competitive compensation 💸 – We offer fair and attractive pay. - Ownership 💪 – Our core value is to “empower others,” and we mean it—you’ll get a slice of n8n with equity. - Work/life balance 🏖️ – We work hard but ensure you have time to recharge: - Europe: 30 days of vacation, plus public holidays wherever you are. - US: 20 vacation days, 8 sick days, plus public holidays wherever you are. - Health & wellness 🩺 – - Europe: We provide benefits according to local country norms.* - US: Multiple low-premium, low-deductible medical plans with coverage for individuals and families—plus a no-cost premium HDHP option with a pre-seeded HSA—along with dental and vision coverage. - Future planning 💰 – - Europe: We provide pension contributions according to local country norms.* - US: 401(k) retirement plan with a 4% employer match. - Financial security 🛡️ – - Europe: We provide benefits according to local country norms.* - US: Company-paid short-term and long-term disability insurance, plus life insurance to support you and your loved ones. - Career growth 📈 – We hire rising stars who grow with us! You’ll get €1K (or equivalent) per year to spend on courses, books, events, or coaching to level up your skills. - A passionate team 🤩 – We love our product, and we prove it with regular hackathons where we see who can build the coolest thing with it! - Remote-first 🌏 – Our team works remotely across Europe, with regular off-sites for team bonding. Some roles, like sales in the US, are hybrid—please check the job description. - Giving back 🤝 – We're big fans of open source, and you'll get $100 per month to support projects you care about. - Transparency 🙏 – We all know what everyone’s working on, how the company is doing—the whole shebang. *Country and/or State specific details provided in your employment agreement.

• Сопровождение и развитие микросервисной инфраструктуры (Kubernetes, PostgreSQL). • Настройка и развитие CI/CD-пайплайнов, контроль изменений в промышленной среде.

— администрировать и развивать Windows/Linux-инфраструктуру; — поддерживать Multi-domain Active Directory, GPO, DNS и DHCP;

-Assist in developing secure software – write and optimise Rust code to build security-critical components and tools. -Code auditing & vulnerability analysis – perform deep manual and automated code reviews to identify and mitigate security vulnerabilities.

● Аудит текущего стенда: Изучить связку 1C:EDT + Git, выявить узкие места (долгие сборки, конфликты, проблемы с зависимостями). ● Анализ кода: Провести ревью проекта с точки зрения производительности.

Symbotic is looking for a Supervisor Technical Support to lead technical support operations, incident escalation, and service improvement.

Задачи: — Установить и возглавить деятельность по сертификации кибербезопасности в гражданской авиации. Требования: — Знание и опыт работы с EASA, FAA, ARP4761, ARP4754B, DO-326A, DO-356A, ED-202A, ED-203A, RMF, DISA STIG, PSecAC. — Опыт в управлении конфигурациями, оценке уязвимостей и оценке рисков безопасности. — Понимание требований к летной годности (Airworthiness). Условия: — Удалённая работа. — Зарплата от $165,000 до $220,000 в год.

Verda is looking for a Senior Observability Engineer to design, operate, and improve shared observability services and incident response.

Synthesize and share customer insights. Surface patterns from your cases in weekly and monthly reports, participate in Product and Engineering discussions with what you're learning, and mentor Support Team members on AI workflows, scripting, and SQL queries.

The Senior Director, Global Customer Support is a key executive leader responsible for defining and executing Prove’s worldwide support vision, strategy, and operational framework. Global Team Architecture: Build, scale, and lead a high-performing global support organization consisting of US-based engineers and offshore multi-tier support teams.