Инфраструктура и безопасность вакансии - удалённо

• Проектировать, разрабатывать и внедрять LLM/AI агентов и AI-ассистированные инструменты для процессов команды ИБ (анализ инцидентов, threat intelligence, vulnerability management, автоматизация рутинных операционных задач и др.). • Выстраивать новые рабочие процессы команды на базе AI-решений — от пилотов и MVP до продуктивной эксплуатации.

Location: United Arab Emirates Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. We are looking for a Deputy Regional Information Security Officer to own ICT security, operational resilience, and regulatory compliance across a portfolio of entities at different stages of maturity, from established licensed operations to new markets launching under frameworks. This is not a support function. You will be the named security officer for your entities, accountable to their boards and their regulators. This is a high visibility, high trust role for a security governance professional who thrives at the intersection of technology, compliance, and financial services, and who is energised by applying established group frameworks to the local needs of a growing regulated entity. Payward is one of the world's most trusted and secure digital asset platforms, operating across a growing network of regulated entities spanning Europe, the Middle East, and Asia Pacific. As we expand into new markets and deepen our regulatory footprint, the demand for embedded, senior-level ICT security leadership at the entity level has never been higher.   THE OPPORTUNITY - Prepare, contribute and report to regional risk governance and board committee meetings, highlighting control status, risk exposure, and readiness - Execute risk assessments and control testing across UAE operations in line with VARA cybersecurity guidelines and security best practices - Maintain and review Business Impact Assessments (BIA), integrating findings into global resilience planning - Contribute to Business Continuity Plan (BCP) documentation, testing, and updates, including entity-specific scenarios - Collaborate with Group Security and IT to: - Align UAE-specific regulatory controls with global policies and control frameworks - Contribute to the development of security policies to meet international and UAE compliance requirements - Conduct security control validation and document evidence for internal/external audits - Participate in remediation planning for audit findings and track progress to closure - Support the RISO in preparing and submitting regulatory documentation to regulators - Prepare and present security and resilience reports for internal governance committees and local entity management - Assist in responses to regulatory examinations, including due diligence and compliance queries - Liaise with compliance and legal teams to interpret regulatory changes and propose control adaptations - Participate in the regional incident response process, assist with post-incident reviews, and support continuous improvement activities - Coordinate with cross-functional stakeholders to embed security requirements into operational processes WHAT YOU WILL DO - Regulatory Governance - Serve as the named ICT security officer for your appointed entities, with formal accountability for security risk, ICT governance, and resilience oversight at board level - Prepare and present security, risk, and resilience materials to entity boards, with material review and coaching from the Global RISO Lead beforehand - Act as the primary point of contact for VARA and other relevant regulatory authorities on ICT and security matters -- including examinations, inspections, licensing interactions, and ongoing supervisory dialogue - Support entity go live processes by implementing and localizing established group ICT governance frameworks for new market launches, ensuring they meet UAE regulatory requirements and entity specific needs - As the portfolio evolves, engage with additional regulatory frameworks with support from the broader RISO team - ICT Risk and Security - Lead ICT and security risk assessments for your appointed entity, escalating material risks through local governance and the Global RISO Lead - Maintain and adapt entity level policies and procedures to align with group standards and UAE regulatory requirements - Coordinate control testing, evidence documentation, and audit preparation with global security and compliance teams - Manage the classification, escalation, and regulatory reporting of ICT-related incidents within the timeframes required by applicable regulators - Operational Resilience - Lead business impact assessments, critical function mapping, and business continuity planning at the entity level - Oversee continuity and recovery testing, ensuring outputs meet regulatory expectations and feed back into global resilience planning - Maintain oversight of ICT third-party dependencies and outsourcing arrangements in line with regulatory requirements - Group Liaison - Act as a key local liaison between UAE entities, the RISO team, Group Security, and Compliance - Drive local implementation of group frameworks, policies, and resilience standards, adapting them where jurisdiction-specific requirements demand - Represent entity priorities in group-led security initiatives and governance forums WHAT YOU BRING - 7+ years of experience in information security governance, ICT risk management, or regulatory compliance in a regulated financial services, fintech, or virtual asset environment - Direct experience as a named regulatory contact, involvement in regulatory examinations, supervisory interactions, licensing processes, or equivalent - Familiarity with UAE regulatory frameworks. Experience with VARA or other virtual asset / crypto-native regulatory regimes is a significant advantage and strongly preferred - Demonstrated ability to implement, adapt, and maintain compliance or governance frameworks within a regulated environment - Experience conducting risk assessments, business impact analyses, and resilience planning at the entity level - Familiarity with ICT outsourcing and third-party risk management within group structures - Ability to translate technical risk into board-level narrative and regulatory-grade documentation - Comfortable operating across multiple jurisdictions simultaneously, each at a different stage of regulatory maturity - Strong project management skills and the ability to drive outcomes across cross-functional, globally distributed teams - Certifications such as CISSP, CISM, CRISC, CISA, or ISO27001 Lead Implementer preferred - Familiarity with EU frameworks such as DORA and MiCA is strongly preferred WHY THIS ROLE - You will hold a named role within a regulated entity with accountability and board-level visibility - You will operate at the frontier of virtual asset regulation -- VARA is one of the most advanced and fastest-evolving crypto regulatory frameworks in the world, and you will be shaping how Kraken meets it from day one of market entry - You will build ICT governance programs from scratch for new market entries, not inherit and maintain what others have set up - Exposure to local governance forums, regulators, and senior stakeholders, with remote guidance and preparation support from the Global RISO Lead - The scope of this role is intentionally designed to grow -- as Kraken's entity footprint expands, so does the portfolio and the regulatory breadth you will be exposed to, potentially including Asian and EU frameworks such as DORA - You will join a remote-first, international team shaping the future of crypto asset governance and resilience across some of the world's most demanding regulatory environments Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Location: Remote Workplace: Remote We are building AI to simulate the world through merging art and science. We believe that world models are at the frontier of progress in artificial intelligence. Language models alone won’t solve the world’s hardest problems – robotics, disease, scientific discovery. Real progress requires models that experience the world and learn from their mistakes, the same way that humans do. And this kind of trial and error can be massively accelerated when done in simulation, rather than in the real world. World models offer the most clear path to general-purpose simulation, changing how stories are told, how scientific progress is made and how the next frontiers of humanity are reached. Our team consists of creative, open minded, caring and ambitious people who are determined to change the world. We aspire to continuously build impossible things and our ability to do so relies on building an incredible team. If you are driven to do the same, we'd love to hear from you. *Titles posted to our careers page are updated regularly to best advertise the role and expected seniority, but internally we have a flat titling system with two types of titles: one for individual contributors and one for people managers. ABOUT THE ROLE *Open to hiring in London and APAC. We're building a creative platform used by artists, filmmakers, and teams at some of the world's most recognized brands. Our support org handles everything from a five-minute billing question to a technical escalation, and we're building out a dedicated tier for the first kind so our more experienced specialists can focus on the second. We're looking for a Support Representative who's accurate, fast, and comfortable following a process closely under volume. No creative or AI background required. We'll train you on the product. WHAT YOU’LL DO - Resolve high-volume, tickets across account access, billing, and plan questions for Free, Standard, and Pro and Max users - Use existing macros, playbooks, and AI support layer suggestions to close tickets accurately and quickly - Recognize when a ticket needs product judgment or creative-tool troubleshooting, and route it to Tier 2 Support or Enterprise - Flag recurring questions that don't have a macro yet WHAT YOU’LL NEED - Clear, accurate written communication, especially on process-driven, checklist-style work - Comfortable with repetitive, high-volume work without losing accuracy - Prior experience with tools like Zendesk, Notion, or Slack is a plus, not a requirement - 0-2 years in any customer-facing or process-driven role (preferably in SaaS, but not required) - Enough curiosity to spend a little time in the product or help docs before talking to us. No creative background needed, just evidence you looked WHAT SETS GREAT CANDIDATES APART The best people in this role follow the playbook precisely and know exactly when a ticket doesn't fit it. They don't force a wrong answer to hit volume, and they don't escalate everything out of caution either. They've put in enough time with Runway to have a real sense of what it does and who uses it, so a ticket that's slightly off-script doesn't stump them, even without a creative background. When they see the same question surface three times, they ask whether it should become a macro instead of just answering it a third time. Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. Our salary ranges are based on competitive market rates for our size, stage and industry, and salary is just one part of the overall compensation package we provide. There are many factors that go into salary determinations, including relevant experience, skill level and qualifications assessed during the interview process, and maintaining internal equity with peers on the team. The range shared below is a general expectation for the function as posted, but we are also open to considering candidates who may be more or less experienced than outlined in the job description. In this case, we will communicate any updates in the expected salary range. Lastly, the provided range is the expected salary for candidates in the U.S. Outside of those regions, there may be a change in the range, which again, will be communicated to candidates. WORKING AT RUNWAY Great things come from great teams. https://www.youtube.com/watch?v=kwmj4ato2kw&ab_channel=Runway We’d love to hear from you. We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed. So regardless of race, gender identity or expression, sexual orientation, religion, origin, ability, age, veteran status, if joining this mission speaks to you, we encourage you to apply. More about Runway - Universal World Simulator https://runwayml.com/world-simulator.html - GWM-1 https://runwayml.com/research/introducing-runway-gwm-1 - Gen-4.5 https://runwayml.com/research/introducing-runway-gen-4.5 - General World Models https://runwayml.com/research/introducing-general-world-models - Robotics SDK https://runwayml.com/research/introducing-runway-gwm-1#robotics-section - Conversational Real-time Agents https://runwayml.com/research/introducing-runway-gwm-1#avatars-section - Runway Studios https://runwayml.com/studios We're excited to be recognized as a best place to work: Crain's https://www.crainsnewyork.com/awards/best-places-work-2023 | InHerSight https://www.inhersight.com/companies/best/city/new-york-city-ny | BuiltIn NYC https://builtin.com/awards/new-york-city/2024/best-places-to-work | INC https://www.inc.com/best-workplaces/2024

Задачи: — Работы в части разделённого deployment-а — Развитие и устранение дефектов CI/CD pipeline продукта — Адаптация CI/CD pipeline продукта на новые продукты — Оптимизация внутрикомандных процессов и инструментов в части сборок, прохождения QG, установки на стенды Требования: — Опыт работы от 3-х лет — Agile-фреймворки — DevOps — Docker — Hadoop — Jenkins — Kubernetes — Администрирование ОС Unix/Linux Условия: — full-time — Трудоустройство: ИП/Самозанятость — Локация: Строго РФ

Основная задача — настраивать инстансы для HFT-систем, разбираться в причинах задержек и добиваться нужной производительности. • Разворачивать торговые приложения, настраивать инстансы и окружение под требования к нагрузке и задержкам.

• поддерживать и настраивать IP-телефонию на базе Asterisk: dialplan, SIP-транки, маршрутизация; • подключать SIP-провайдеров, обеспечивать входящую и исходящую связь, автообзвон;

- Опыт настройки и управления Jira/Confluence (плагины, обновления, безопасность). - Умение собирать требования бизнеса и переводить их в технические решения (плагины, скрипты).

• Resolve customer technical issues end-to-end (Helpdesk + Slack) within SLA. • Conduct root cause analysis with Grafana, Datadog (logs, metrics, traces).

- Понимание работы интернета. - Навыки настройки почты, FTP, SSH.

Создавать и внедрять CI/CD-проекты для систем в Банке. Создавать скрипты для автоматизации процессов разработки и сопровождения.

Разработка и поддержка CI/CD пайплайнов. Автоматизация инфраструктуры (IaC).

Задачи: — Владеть портфелем из 10-15 стратегических аккаунтов. — Быть основным техническим контактом для API-партнеров, информировать заинтересованные стороны и доводить вопросы до решения. — Поддерживать технические оценки. — Участвовать в продажах, демонстрировать возможности API, понимать требования партнера и объяснять, как будет работать интеграция. — Руководить внедрением партнеров: превращать требования в четкий план интеграции, сопровождать разработчиков на этапе настройки и тестирования, отслеживать прогресс до запуска. — Самостоятельно устранять неполадки: исследовать запросы, ответы, логи, проблемы с аутентификацией и поведение интеграции до эскалации в инженерный отдел. — Тесно сотрудничать с инженерной командой, предоставляя четкие шаги для воспроизведения, релевантные доказательства и информацию о влиянии на клиента при необходимости глубокого расследования. — Улучшать опыт разработчиков: создавать и поддерживать руководства по API, коллекции Postman, примеры кода, FAQ и инструкции по онбордингу. — Выявлять повторяющиеся проблемы, делиться отзывами партнеров и шаблонами интеграций для улучшения продукта. — Вести усилия по расширению: кросс-продажи новых функций и продуктов как естественное продолжение отношений, а не отдельное действие. Требования: — Опыт 4+ лет в технической роли с взаимодействием с клиентами или эквивалентный опыт в компаниях с API-ориентированным или девтулз-направлением. — Практическое понимание REST API, HTTP, JSON, аутентификации, вебхуков, пагинации и ограничений по скорости. — Умение работать с Postman или curl, читать логи, писать или адаптировать небольшие примеры кода на JavaScript или Python. — Опыт продвижения внедрения внутри сложных организаций, умение работать с разными уровнями клиентов. — Сильная исполнительность и умение доводить вопросы до конца. — Опыт работы в стартапе с численностью менее 50 человек. — Свободное владение английским языком, умение объяснять технические вопросы как разработчикам, так и нетехническим заинтересованным лицам. — Ответственный подход и менталитет владельца. Условия: — Удаленная работа из любой точки мира. — Стандартные рабочие часы: понедельник–пятница, 8:00–17:00 по восточному времени США с перерывом на обед. — Возможны редкие звонки вне стандартных часов для партнеров из Азиатско-Тихоокеанского региона и ключевых этапов внедрения. — Полная занятость.

• Практический опыт работы с Docker/docker-compose; • Опыт с Qdrant, REST/gRPC и Qdrant Cloud;

Develop and maintain Terraform/OpenTofu modules for vSphere VM provisioning, placement/resource-pool configuration, and cloud-init/cloudbase-init integration, following designs defined by the VMware Architect. Create and run Ansible playbooks for post-provisioning configuration handoff on VMware-provisioned VMs.

Задачи: — Взять на себя ключевую часть сетевой и VPN-инфраструктуры проекта — Следить за изменениями в блокировках и сетевых ограничениях — Понимать современные методы фильтрации трафика — Знать актуальные VPN-технологии и постоянно тестировать новые инфраструктурные решения — Строить масштабируемую и отказоустойчивую инфраструктуру — Проектировать отказоустойчивую инфраструктуру, способную переживать сбои и изменения сетевых ограничений без постоянного ручного вмешательства — Быстро исследовать изменения в сетях, ставить эксперименты, находить причины проблем и внедрять решения Требования: — Senior-уровень в сетях: TCP/IP, UDP, DNS, TLS/HTTPS, маршрутизация, NAT — Серьёзный практический опыт с VPN, туннелированием и Xray — Опыт работы именно с крупными VPN-проектами — Глубокое понимание DPI, фильтрации трафика, блокировок и причин деградации соединений — Сильный Linux и сетевая диагностика — Опыт с dedicated-серверами, VPS/VDS, CDN, дата-центрами и хостинг-провайдерами — Практический опыт колокации собственного оборудования (плюсом) — Постоянная погружённость в VPN-индустрию и понимание того, что в ней происходит прямо сейчас — Хорошо ориентироваться в рынке хостингов и дата-центров — Понимать особенности разных провайдеров Условия: — Full-time — Только основная работа — без параллельной работы и учёбы

• Общаться с Shopify merchants через live chat, email и calls. • Помогать клиентам настраивать приложения и решать технические вопросы.

Описание вакансии Ищем начинающего DevOps-инженера с перспективой профессионального роста внутри команды. Задачи: поддержка Linux-серверов и CI/CD, работа с Docker и GitLab Runner, автоматизация инфраструктуры с помощью Ansible, настройка мониторинга, сетей и внутренних сервисов.