Инфраструктура и безопасность вакансии

Задачи: — Подготовка новых рабочих станций — Регистрация пользователей в информационных системах — Устранение программных и аппаратных проблем — Ведение учёта компьютерного оборудования и программного обеспечения — Участие в проектах по развитию IT-инфраструктуры компании — Содействие обеспечению информационной безопасности Требования: — Минимум 2 года опыта на аналогичной позиции — Знание архитектуры персональных компьютеров и серверов — Актуальные знания современного аппаратного обеспечения — Опыт работы с пользовательскими операционными системами MS Windows 7, 8, 10, MacOS — Базовые знания серверных операционных систем — Уверенные базовые знания сетевых технологий Условия: — Совместная рабочая атмосфера в внутреннем сообществе разработчиков игр, объединяющем более десятка внутренних студий, создающих инновационные проекты для мобильных, ПК и консолей — Сильная команда специалистов из разных областей с доступом к уникальному опыту и профессиональным знаниям — Возможность экспериментировать и работать над интересными задачами с амбициозными целями, наличие всех ресурсов для реализации новых идей — Создание отличных игр и завоевание сердец игроков — Продвижение границ игровой индустрии и лидерство в развитии

Location: Almaty, Kazakhstan Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. ABOUT THE ROLE Break new features before they ship: agentic systems, MCP servers, code-generating agents, user-deployed apps, generative models for image, video, and voice, and enterprise features (SSO, org and team management, roles). It's new ground, and you'll help define how we secure it. You go first. What you'll do: - Pentest new features and products pre-release: web, APIs, admin surfaces. - Work out the attack surface of each new feature yourself. - Hunt authorization flaws across our multi-tenant APIs and retest fixes. - Join design and code reviews early, so flaws die before they're built. - Turn recurring findings into guardrails — paved-road standards and automated checks — so a bug class dies once instead of resurfacing every release. - Bring a working repro to the team that owns the code and see the fix through. Requirements - A track record of finding real vulnerabilities in real systems — appsec work, bug bounty, or research. - The ability to read modern codebases, trace a bug to root cause, and discuss the fix with the engineers who wrote it. - A threat-modeling instinct for spotting the weak spots in a design or architecture before a line is written. - Enough cloud and container fundamentals to follow a bug into the infrastructure it runs on. - High agency. - Working English. Nice to have - LLM/agent security research, public research or CVEs, OSWE/CWEE or equivalent hands-on certificates. WHAT WE OFFER: - Competitive base salary in USD - Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth. - On-site role in our Almaty office (we will relocate you from anywhere).

Location: United States (Remote); United Kingdom (Remote) Workplace: Remote About Teleport Don't wait for the future of infrastructure. Be part of it. Teleport is the AI Infrastructure Identity Company. We're solving one of the hardest problems in security: giving every human, machine, workload, and AI agent a cryptographically secured identity, improving engineering velocity while maintaining security. We make trusted computing simple. This gives you the freedom, power, and autonomy to build and innovate with confidence. Remote-first and globally distributed, we work with companies like Nasdaq, DoorDash, and Elastic to secure infrastructure for an AI world. About the Role   We're looking for a Forward Deployed Engineer that will work directly with customers to ensure successful Teleport deployments. You will meet regularly with customers, understand pain points blocking deployments and remove roadblocks. This includes writing and fixing IaC deployments (like Helm charts), developing workarounds, and writing Go code to fix bugs and implement small features. For more complex issues, you will work with customers to articulate the problem they are trying to solve, gather requirements, and make the business case to the product and engineering teams to invest in resolving the issue. What You'll Do - This job sits at the intersection of product, engineering, and revenue. - You won't just work closely with the engineering team, you will be on the engineering team. - The range of problem solving includes networking, performance, security and integrations with existing systems. - Most of the code you will write will be open source. - Our products are loved by their users, you'll get to meet them regularly. What We're Looking For - Excellent communication skills. - Willing to travel to customer sites. - Infrastructure as Code (IaC) experience (like Terraform, Ansible, Helm). - Linux systems engineering experience. - Go or Rust experience. - As we are a startup, you should be comfortable changing the area of focus and working directly with customers. How We Hire - You will join 30 minute intro call and we will walk you through the compensation, interview process and requirements - You will join a 30 minute call with the hiring manager, and we will walk you through the take home exercise and help answer questions - You join a Slack channel and submit a coding challenge https://github.com/gravitational/careers/blob/main/challenges/sre/challenge.md using Github Why Teleport You're joining a company where the problem is real, the team is small, and your work shows up directly in the product. We're not a big company, you won't get lost in a crowd. You'll have the freedom and autonomy to do what you're great at, alongside teammates who care about doing it right and want to see you succeed. The work is collaborative, there's real room to grow, and the mission is one worth showing up for. Remote-first and globally distributed, we're genuinely passionate about what we're building. The Benefits At Teleport, we believe your career is more important than a list of perks. That's why we focus on making your day-to-day the best it can be — giving you the autonomy, access, and support to do the best work of your career. - Extensive health coverage - Annual expense budget - Rest and recovery policies that maximize your ability to recharge - Investment in your future with retirement savings plans - Professional development opportunities Teleport is an equal opportunity employer and does not discriminate against any employee or applicant on the basis of age, color, disability, gender, national origin, race, religion, sexual orientation, veteran status, or any classifications protected by federal, state, or local law. Candidate Privacy Notice: For information about our collection and processing of job applicant personal data for this position, please see our Job Applicant Privacy Policy and Notice of Collection at goteleport.com/legal/apply/job-applicant/ http://goteleport.com/legal/apply/job-applicant/

Location: Montreal Workplace: remote ABOUT YOU  We are looking for a Site Reliability Engineer (Monetization) who is pragmatic, product-minded, and equally comfortable writing code and running production systems to join our Infrastructure department's SRE team. The best candidate will be someone who thrives in a fast-paced, highly collaborative, and exceptionally dynamic setting and is excited to own the application-level infrastructure and reliability of a high-traffic commerce domain end to end - from deploy pipelines and Kubernetes manifests to SLOs, capacity planning, and production readiness. Strong Kubernetes, observability, and software engineering skills are essential, along with experience in operating production services in a cloud environment (GCP/GKE or comparable) and partnering closely with product development teams. The ability to hold a dual perspective - understanding both how developers ship features and what infrastructure needs to stay reliable - and to bring the reliability lens into design decisions early will be key to your success in this role. This is a hybrid embedded role: you remain part of the SRE organization (practices, standards, duty rotation) while being functionally embedded into the Monetization product domain. You'll build long-term working relationships with the domain's engineering teams, own a meaningful share of their application infrastructure execution, and co-author the reliability practices used company-wide. If you're passionate about making complex distributed systems boringly reliable and love building the commerce and monetization backbone that lets game developers around the world get paid, we would love to hear from you! ABOUT US Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Own the application-level infrastructure of the Monetization domain: Helm charts, Terraform configurations, Kubernetes deployments, runtime configuration, and service-level networking and integrations Own the domain's observability: design and implement SLOs/SLIs, monitors, alerts, and dashboards for critical services on Datadog and OpenTelemetry-based tooling Help to set up and evolve CI/CD pipelines for domain services (GitLab CI, GitHub Actions), including deploy and rollback automation Perform capacity planning and performance tuning ahead of expected load - product launches, sales events, and regional rollouts - including load testing and performance regression investigation Run Production Readiness Reviews for new services and major changes; define and enforce what "production-ready" means for the domain Support domain incident response: assist with deep investigation of complex incidents, contribute to post-mortems, drive follow-up reliability improvements, and maintain runbooks Build domain-specific automation that reduces operational toil: runbook automation, deploy helpers, recurring operational scripts Maintain and drive a forward-looking reliability roadmap for the domain together with product engineering leads Participate in product team planning, refinements, and architecture reviews, bringing the reliability perspective before design decisions become expensive to change Co-author company-wide SLO/SLI, capacity, and operational standards together with the broader SRE team; contribute improvements directly to shared SRE-operated subsystems Participate in the SRE duty rotation, supporting developers across the company Qualifications & Skills 3+ years of proven SRE, DevOps, or platform engineering experience: on-call or incident response duty, SLO/monitoring ownership, deploy pipeline and infrastructure work for production services Software development background: you have built and shipped backend services, not only operated them - comfortable reading application code during an investigation and writing production-quality automation in at least one language (e.g., Go, PHP) Hands-on Kubernetes experience: Helm, manifests, deploy strategies, debugging application-level performance and networking issues (GKE or another managed Kubernetes) Solid observability practice: building monitors, dashboards, and SLOs/SLIs on a modern platform (Datadog preferred; Prometheus/Grafana experience also relevant), familiarity with OpenTelemetry Infrastructure as Code exposure (Terraform/Terragrunt) for collaboration with platform teams GCP experience (IAM, networking, managed services) Experience building and maintaining CI/CD pipelines (GitLab CI and/or GitHub Actions) Programming/scripting proficiency sufficient to build automation and tooling (e.g., Python, Go, or Bash) Practical experience with incident response, post-mortems, and driving reliability improvements from incidents Strong collaboration and communication skills — this role works embedded with product development teams daily Experience in payments, fintech, e-commerce, or gaming — high-traffic transactional systems Nice to Have: Kubernetes certifications Google Cloud Platform certifications HashiCorp certifications Benefits We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we're not just building a business; we're cultivating a community that values creativity, collaboration, and the transformative power of play. Equal Employment Opportunity Statement Xsolla is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or any other characteristic protected by law. We consider qualified applicants with criminal histories in accordance with the Fair Chance Act. Criminal History Consideration For the Site Reliability Engineer (Monetization) position, we will conduct a background check that may include the following: Criminal history check Employment verification Education verification Relevance to Job Responsibilities The background check is relevant to this position because of the following role responsibilities: Accessing confidential company data Handling infrastructure that processes sensitive financial transactions Ensuring compliance with regulatory requirements Rights Under the Fair Chance Act Applicants are encouraged to inquire about their rights under the Fair Chance Act. If you have questions regarding our hiring practices, please contact careers@xsolla.com. By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with this Xsolla Privacy Notice for Job Applicants. Please direct any inquiries regarding your data privacy to careers@xsolla.com. Salary varies depending on experience level and location.

Задачи: — Проектировать, строить и поддерживать масштабируемую и надежную инфраструктуру баз данных для нескольких игровых продуктовых команд. — Развивать и эксплуатировать среды PostgreSQL, обеспечивая стабильность, производительность, отказоустойчивость и экономическую эффективность. — Участвовать в архитектурных улучшениях и миграциях, включая управляемые и самостоятельные решения баз данных. — Работать с задачами масштабирования и высоконагруженными производственными средами. — Анализировать и оптимизировать затраты на инфраструктуру, включая оценку компромиссов между управляемыми и самостоятельными решениями. — Автоматизировать операции с базами данных и развертывание сред с использованием Infrastructure as Code и скриптовых инструментов. — Поддерживать и улучшать существующие решения с PostgreSQL, MySQL, AWS RDS, ElastiCache и MemoryDB. — Обрабатывать инциденты и сложные производственные случаи совместно с продуктовыми и инфраструктурными командами. — Тесно сотрудничать с командами разработки для понимания их потребностей и снижения операционной нагрузки при работе с инфраструктурой данных. — Вносить вклад в надежность, безопасность и лучшие практики в базе данных компании. Требования: — Практический опыт автоматизации и инструментов Infrastructure as Code, таких как Terraform, Ansible, Puppet, SaltStack или аналогичных. — Опыт эксплуатации stateful-сервисов в Kubernetes. — Экспертиза в PostgreSQL: архитектура, настройка, репликация, обслуживание и эксплуатация. — Опыт работы в роли администратора баз данных, инженера надежности баз данных или инженера инфраструктуры с производственными базами данных. — Практический опыт работы с облачными средами и управляемыми решениями баз данных. — Опыт работы с высоконагруженными системами и оптимизацией производительности. — Опыт работы с CI/CD пайплайнами и скриптами на Bash или Python. — Хорошее понимание компромиссов между производительностью, надежностью, масштабируемостью и стоимостью инфраструктуры. — Продуктово-ориентированный подход: забота об удобстве использования, опыте разработчиков и автоматизации. — Сильные коммуникативные навыки и способность эффективно работать с распределенными продуктовыми командами. Желательно: — Опыт работы с Redis и Kafka. — Опыт миграции между управляемыми и самостоятельными решениями баз данных. — Опыт нагрузочного тестирования и сравнительного анализа технологий и архитектур баз данных. Условия: — Медицинская программа (включая стоматологию) или компенсация медицинских расходов, доступная в любом месте работы. — Медицинская программа для членов семьи при работе в офисах в Кипре, Армении и Казахстане. — Оплачиваемый отпуск и больничные. — Возможность работать в офисах в официальных локациях или удаленно. — Спортивные активности (йога, футбол, волейбол) в официальных локациях. — Пакет поддержки при релокации в официальные локации. — Курсы английского языка онлайн, уроки греческого и армянского для сотрудников в Кипре и Армении. — Участие в гейм-джемах, хакатонах, конференциях и митапах в качестве спикеров. — Поддержка социальных инициатив сотрудников и участие в благотворительных проектах. Формат работы: в офисах компании в Кипре, Армении и Казахстане или удаленно.

Задачи: — сопровождение Linux-систем — обработка обращений пользователей в Service Desk — разработка скриптов автоматизации — подготовка технических решений — взаимодействие с поставщиками оборудования и программного обеспечения Требования: — опыт работы от трёх лет — уверенная работа с Linux — знание сетевых технологий, виртуализации, Ansible и Zabbix — умение автоматизировать задачи с помощью Bash, Python или PowerShell — готовность заниматься поддержкой пользовательской и серверной инфраструктуры Условия: — официальное трудоустройство с первого дня — стабильная белая заработная плата — ДМС со стоматологией — обучение за счёт компании — работа в аккредитованной ИТ-компании Росатома — возможности профессионального и карьерного роста — удобный график 5/2 в Колпино

Задачи: — Проектировать, развертывать и управлять инфраструктурой AWS от сетей до мультиаккаунтной архитектуры и платформ EKS. — Автоматизировать развертывание и обновления с помощью Infrastructure-as-Code (Terraform/OpenTofu) и GitOps. — Сотрудничать с продуктовыми и функциональными командами для создания возможностей самообслуживания и поддержания автономии разработчиков. — Обеспечивать надежность, безопасность и экономичность платформы, включая соответствие требованиям FedRAMP и FIPS. — Разрабатывать новые архитектурные возможности для поддержки масштабируемости, устойчивости и AI-нагрузок. — Участвовать в общем дежурстве для поддержания стабильности платформы. Требования: — Опыт работы не менее 5 лет в роли Platform, DevOps, Software или Site Reliability Engineer. — Глубокие практические знания AWS сервисов: VPC, CloudFront, API Gateway, EKS. — Владение Kubernetes и Infrastructure as Code (Terraform или OpenTofu) с подходом GitOps. — Высшее образование в области компьютерных наук, инженерии или эквивалентный опыт. — Готовность проживать или переехать в Мадрид, Испания. — Свободное владение английским языком. Плюсом будет: — Опыт работы в средах с требованиями соответствия (FedRAMP или FIPS). — Опыт создания внутренних платформ для разработчиков (IDP) с современными инструментами. — Опыт работы с архитектурами на основе ячеек или мульти-региональными архитектурами в масштабе. Условия: — Постоянный контракт с конкурентной оплатой и ежегодным бонусом за результаты. — Гибридный формат работы с офисом в центре Мадрида рядом со стадионом Бернабеу. — Частная медицинская страховка (Sanitas) и полностью оплачиваемые суточные ваучеры на питание. — Неограниченный оплачиваемый отпуск плюс 23 стандартных праздничных дня и 3 дня волонтерства. — Гибкий график, компенсация абонемента в спортзал, а также компенсация расходов на уход за детьми и транспорт. — Возмещение до 50% стоимости курсов английского и испанского языков.

Обязанности: — Объединить наблюдаемость и эксплуатацию для легаси и нового стека в единый стандарт; — Построить рабочий алертинг с приоритизацией и эскалациями, чтобы снизить шум и ускорить реакцию; — Запустить стабильный процесс инцидент менеджмента: triage, роли, коммуникации, пост мортем, контроль действий после аварий; — Поставить дежурства 24/7 с понятной ротацией и runbooks; — Обеспечить безопасную поэтапную миграцию к GitOps без просадки SLA. Требования: — Опыт в роли Senior SRE/DevOps; — Опыт работы в продакшн средах с гибридом Bare metal и Kubernetes; — Умение строить observability: метрики, логи, SLI/SLO, алертинг по сервисным сигналам; — Опыт ведения инцидентов как Incident Commander и проведения RCA; — Опыт настройки дежурств, runbooks и операционных процессов; — Сильные Linux и сетевые навыки, понимание edge/DNS/TLS/LB; — Умение работать кросс-функционально и доводить изменения до эксплуатационного результата. Требования по стеку: Linux, Kubernetes, Helm, Prometheus/VictoriaMetrics, Grafana, CI/CD, IaC, GitOps-практики (ArgoCD/Flux как целевая модель), SRE-методики: SLI/SLO, error budgets, incident response, postmortem culture. Будет плюсом: — Опыт с игровыми или realtime системами; — Опыт эксплуатации PostgreSQL и RabbitMQ, включая backup/restore drills; — Опыт с Cloudflare, DNS/CDN и multi-region routing; — Автоматизация SRE-задач на Python/Go/Bash; — Опыт chaos/game day практик. Условия: — Удаленная работа из любого гео в ±3 часах от МСК или гибрид из офиса в Казани; — Открыты к разным форматам оформления; — Гибкое начало рабочего дня, 5 дополнительных выходных в год; — Баланс между перфомансом и здоровым ворк-лайф балансом; — Возможности для развития, инициативы и профессионального роста.

Location: San Francisco, CA Workplace: OnSite ABOUT US At LangChain, our mission is to make intelligent agents ubiquitous. We build the foundation for agent engineering in the real world, helping developers move from prototypes to production-ready AI agents that teams can rely on. We began as widely adopted open-source tools and have grown to also offer a platform for building, evaluating, deploying, and operating agents at scale. With $125M raised at Series B from IVP, Sequoia, Benchmark, CapitalG, and Sapphire Ventures, we’re at a stage where we’re continuing to develop new products, growth is accelerating, and all team members have meaningful impact on what we build and how we work together. LangChain is a place where your contributions can shape how this technology shows up in the real world. Today, our platform includes LangSmith (Observability, Evaluation, Deployment, Fleet, and Sandboxes), our open source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement. We have 100M+ monthly open source downloads, 6,000+ active LangSmith customers, and 5 of the Fortune 10 use LangSmith in production (+ 35% of the Fortune 500 overall), including teams at Klarna, Clay, Coinbase, Workday, Lyft, Cloudflare, Harvey, Rippling, Vanta, LinkedIn, Monday.com, Nvidia, and Bridgewater. ABOUT THE ROLE We are seeking our second IT Engineer to join our growing team in San Francisco. Our team laid the foundation for IT at LangChain, and this role is critical to helping us mature and scale that foundation as the company grows. You'll bring deep technical expertise to our fleet management and SaaS administration, with room to shape how we manage our fleet, identity, SaaS stack, and the automation that runs the business. The ideal candidate brings startup experience, thrives in ambiguity, loves a good problem, and is excited to build scalable systems that support our global team.   WHAT YOU'LL DO Infrastructure & Automation - Build and maintain our IT infrastructure and tech stack that scales with LangChain’s rapid growth - Drive automation initiatives to reduce toil and improve efficiency using scripts, APIs, and workflow tools - Implement monitoring and documentation practices that enable operational excellence Client Platform Engineering - Reimagine how we deploy, configure, and manage our Mac fleet. MDM (Iru) is the foundation, not the entire solution however. - Design and build a secure, reliable, and maintainable desktop environment that replaces our current patchwork of one-off scripts with version-controlled, testable, and repeatable systems - Own our approach to custom security controls and application deployment across the fleet, so updates and configuration changes are consistent and easy to roll out at scale - Build the fleet management systems now so they hold up as headcount, and the fleet, keep growing Security & Identity Management - Drive our identity strategy, implementing secure, scalable access controls following the principle of least privilege - Identify and implement security enhancements across our SaaS stack - Partner with our Security team to drive improvement of our enterprise security posture SaaS Administration - Administer and optimize our growing SaaS stack, managing provisioning, access controls, and lifecycle management - Become IT's central administrator for LangSmith, our own product, developing deep fluency in its administration surface - Build automated workflows for LangSmith administration using its API paired with our automation tooling, reducing manual, toil-heavy admin work - Help IT stay fluent across the internal tools we run and support, including the LLM Gateway. Another LangChain product. Core IT Operations - Provide support to employees globally across hardware, software, networking, and IT tools - Deliver great onboarding experiences for new hires, ensuring they have the right hardware, access, and setup so they can be productive from day one   WHAT YOU'LL BRING - 5+ years of experience in IT engineering and systems administration - Deep proficiency with Okta and Okta Workflows - Fluency in at least one general-purpose programming language (Python, JavaScript, or similar) with demonstrated ability to write production-quality scripts and automation - Versed in the us of REST APIs, webhooks, and API authentication methods; you should be comfortable reading API documentation and building integrations between systems - Demonstrated ability to build meaningful automations that reduce manual work and improve IT operations - Hands-on experience with IaC using Terraform to manage and provision IT infrastructure and applications, and comfort applying changes within an existing Terraform codebase - Experience using coding agents (e.g. Claude Code) as part of your day-to-day engineering workflow to build and ship automation faster - Strong experience with a modern tech stack that includes Google Workspace, Slack, Notion, Claude, ChatGPT - Solid understanding of MDM platforms, and ideally experience going beyond baseline MDM with fleet/configuration management tooling to manage a fleet's security and application needs - Experience administering a large or complex SaaS stack, ideally including internal or AI/LLM-based products - Strong networking fundamentals (TCP/IP, DNS, VPNs, firewalls, switching, wireless, LAN/WAN)   - Annual salary range: $150,000-$170,00 USD Compensation Philosophy: We offer competitive compensation that includes base salary, variable compensation for relevant roles, meaningful equity, benefits, and perks. We are hiring for this role across a range of scope, and the compensation band reflects that. Your offer depends on what we learn about your impact, craft, leadership, and communication during the interview process. We will tell you early where you’re tracking and talk comp with you before offer stage. Team members in the EU, UK, and APAC receive locally competitive benefits aligned with regional norms and regulations. BENEFITS Benefits include medical, dental, and vision coverage, flexible vacation, a 401(k) plan, meals on in-office days in the US and more.

Ищу DevOps Engineer уровня Middle /Senior в команду Jana Post.

Компания Volna.tech ищет DevOps-инженера уровня Middle / Middle+ на финтех-проект. Роль предполагает автоматизацию развертывания, развитие инфраструктурной платформы и обеспечение отказоустойчивости систем в продуктивной среде. Задачи: • Автоматизация процессов развертывания, конфигурирования и сопровождения инфраструктуры; • Анализ, локализация и устранение технических замечаний, инцидентов и проблем эксплуатации; • Разработка и поддержка CI/CD-пайплайнов, скриптов автоматизации и решений на базе Infrastructure as Code (IaC); • Обеспечение стабильности, отказоустойчивости и наблюдаемости инфраструктурных компонентов; • Настройка и сопровождение систем мониторинга, логирования и контроля производительности; • Участие в развитии инфраструктурной платформы и внедрении лучших практик DevOps. Требования: • Опыт работы в роли DevOps-инженера от 3 лет, практический опыт внедрения и поддержки процессов автоматизации (CI/CD) и сопровождения инфраструктуры в продуктивной среде; • Опыт администрирования и сопровождения Linux-систем (настройка, диагностика, обеспечение безопасности); • Практический опыт работы с Docker и Kubernetes; • Уверенное владение инструментами Infrastructure as Code (Terraform, Ansible); • Опыт настройки и сопровождения CI/CD-процессов (GitLab CI, Jenkins); • Навыки автоматизации повседневных задач с использованием Bash и/или Python.

Emerging Travel Group — travel-tech компания с продуктами в сегментах B2C, B2B, B2A (RateHawk, Roundtrip, ZenHotels), которые помогают клиентам управлять всеми потребностями в путешествиях. Требования: — 1+ лет опыта в 2-3 линии technical support — English B2+ В компании работает много русскоговорящих ребят. Размер команды – 3500+ человек. Инвестиции – $78 млн.

Location: Baku Workplace: onsite ABOUT YOU Xsolla seeks a security engineer to join a new security team during a critical build-out phase. You work across application security and infrastructure security - reviewing code, hardening cloud environments, supporting incident response, and partnering with engineering teams to improve security posture across the company. This is a generalist role well-suited to an early-team hire. You are comfortable working across domains rather than specializing in one, and you grow into deeper expertise as the team and program mature. You collaborate closely with the security program manager and work directly with engineering teams on secure design, findings, and remediation. Our tech stack includes GCP, vSphere/ESX, Kubernetes and container workloads, MariaDB, CockroachDB, Go, PHP, and Python. You do not need expertise in all of these, but you are comfortable navigating a mixed environment and learning what you need. As always true in job descriptions, there is an intangible value that is hard to capture. We look for a diverse set of perspectives and skills. Even if you don't match every requirement, we encourage you to apply if you think you can be highly successful in this role.   ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Perform Application Security Reviews - Conduct code reviews, run SAST / DAST and dependency scanning tools, and work with engineering to resolve findings. Participate in Threat Modeling - Contribute to threat modeling sessions for new features and architecture changes, helping identify risks early in the design process. Help Harden Cloud and Container Infrastructure - Work on GCP, Kubernetes, and IAM configurations to strengthen the security of our cloud and container environments. Participate in Pen Test Remediation - Help triage penetration test findings and work with engineering teams to implement fixes, coordinating closely with the security program manager. Partner with Engineering on Secure Design - Review architectures, advise on secure implementation patterns, and help teams make informed security decisions. Identify and Track Security Findings - Document findings, assess severity, and track them through the remediation lifecycle to resolution. Support Incident Response - Help investigate and document security events, contribute to root-cause analysis, and support containment efforts. Write Async Security Guidance - Produce advisories, best-practice documentation, and practical guidance that helps engineering teams build securely across time zones. Support Product Security - Work with partners on the security posture of customer-facing services, contributing to reviews and assessments as needed. What You Bring Foundational AppSec Knowledge - Understands common vulnerability classes, secure coding patterns, and how to conduct a meaningful code review. Cloud Environment Exposure - Has worked with GCP or a similar cloud provider and is comfortable with IAM , networking, and container concepts. Code Literacy - Reads and reviews code in one or more of: Go, Python, PHP. Does not need to be a software engineer, but can follow logic and spot issues. Security Tooling Familiarity - Has used or is familiar with SAST , DAST , or dependency scanning tools and understands how they fit into a development workflow. Strong Written Communication - Writes clear, concise async documentation - findings, advisories, guidance - that works across time zones and audiences. Collaborative Mindset - Partners effectively with engineering teams. Focuses on helping teams build securely rather than just identifying problems. Self-Directed with Growth Mindset - Eager to learn, comfortable with ambiguity, and able to make progress with minimal direction in a new and evolving team. Nice to Have Threat modeling experience; Hands-on Kubernetes or container security experience; Infrastructure security background - Linux, networking, vSphere/ ESX; Familiarity with NIST CSF , PCI , SOC 2, or ISO 27001 from a technical perspective; Detection engineering or incident response experience; Experience building security automation or internal tooling; Relevant certifications ( OSCP , GWAPT , CKS , or similar hands-on certs). Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.

Location: Baku Workplace: onsite ABOUT YOU We are looking for a junior application security specialist to join a growing security team at Xsolla. This is a hands-on role where you will work closely with senior specialists to identify, assess, and help remediate security vulnerabilities across our products and infrastructure. You will be involved in day-to-day AppSec work - code reviews, vulnerability triage, threat modeling, and security testing. You are curious, detail-oriented, and eager to develop deep expertise in application security. You do not need to have all the answers, but you ask the right questions and follow through. This is a strong learning environment. You will be exposed to real-world security challenges in a payment platform operating at scale, and supported by experienced security specialists who will help you grow.   ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Triage Security Findings - Assess incoming bug bounty reports and scanner findings. Evaluate validity, calculate real severity, and escalate appropriately with clear written summaries. Assist with Vulnerability Assessments - Participate in security assessments of web applications and APIs. Help identify and document risks in new features and existing systems. Write Clear Security Documentation - Document findings, reproduction steps, and remediation guidance in a way that engineering teams can act on. Support Threat Modeling - Participate in threat modeling sessions. Learn to identify trust boundaries, data flows, and attack surfaces in system designs. Monitor Security Tools - Help operate SAST , DAST , and dependency scanning tooling. Track findings, reduce noise, and support remediation workflows. Support Code Reviews - Review code for common vulnerability classes under guidance of senior specialists. Learn to identify security issues across PHP, Python, and Go codebases. Stay Current - Follow developments in the security community. Bring awareness of new vulnerability classes, CVEs, and attack techniques relevant to our stack. What You Bring Web Security Fundamentals - Solid understanding of common vulnerability classes: OWASP Top 10, CSRF , XSS , IDOR , SQL injection, open redirect, authentication and session management weaknesses. You understand root causes, not just names. Web and Browser Fundamentals - Solid understanding of how web applications work: HTTP request/response cycle, client-server model, REST APIs, how browsers handle same-origin policy, cookies and their attributes, and CORS . This is the foundation everything else builds on. Security Testing Tools - Hands-on experience with Burp Suite or similar web application security testing tools. You have used them to intercept, modify, and replay requests — not just run automated scans. Vulnerability Documentation - Able to reproduce a vulnerability and write it up clearly: reproduction steps, proof of concept, and impact statement. Findings that engineering teams cannot reproduce or understand do not get fixed. Secure Development Awareness - Familiarity with foundational secure coding concepts: input validation, output encoding, parameterized queries, and least privilege. Code Readability - Ability to read and follow code in at least one language relevant to web security - PHP, Python, JavaScript, or Go. You don't need to be a developer, but you need to follow logic and spot security-relevant patterns. Analytical Thinking - You reason through problems methodically. You can explain not just what a vulnerability is but why it exists, how it is exploited, and what fixing it actually requires. Clear Written Communication - You write findings and summaries that are precise, reproducible, and useful to the engineers who need to act on them. Curiosity and Initiative - You dig into problems rather than stopping at the surface. When something looks wrong, you investigate before concluding Nice to Have Participation in bug bounty programs or CTF competitions; Basic scripting ability for automation - Python or Bash; Familiarity with CI/CD pipelines and where security tooling fits; Exposure to cloud environments - GCP, AWS, or Azure; Relevant coursework or certifications - eWPT, CEH , PortSwigger Web Security Academy progress, or similar entry-level credentials. Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.

Location: Berlin, Germany Workplace: remote ABOUT YOU We are looking for an Operations Engineer who is technically curious, detail-oriented, a strong communicator, and proactive to join our Global Technical Operations (GTO) team. The best candidate will be someone who thrives in a fast-paced, highly collaborative, and exceptionally dynamic setting and is excited to monitor and investigate production issues across a global platform, help improve how we detect and respond to incidents, analyze trends and patterns in production data, and contribute to better communication with partners and stakeholders during incidents. Strong troubleshooting skills, observability platform experience, and scripting ability are essential, along with experience in SRE, DevOps, production operations, or NOC environments supporting high-availability platforms in the gaming industry. The ability to communicate clearly and effectively in English — both written and verbal — when writing incident updates, shift handoffs, and status page communications will be key to your success in this role. If you’re passionate about keeping critical systems running and continuously improving operational processes and love being the first to spot issues and the one who drives them to resolution for game developers and players worldwide, we would love to hear from you!   ABOUT US Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities: Serve as the primary dashboard monitor during your shift — continuously watch the GTO Operational Dashboard in Datadog, detect anomalies by correlating signals across APM, logs, metrics, synthetic tests, and Real User Monitoring, and determine whether alerts warrant an incident ticket or can be resolved through immediate investigation. Triage and investigate production incidents — create incident tickets in JIRA Service Management, perform initial technical investigation using Datadog (traces, logs, infrastructure and application metrics), determine blast radius and likely root cause domain, and route to the correct team (Product SRE, Infrastructure SRE, or Engineering) using the smart routing model. Own lower-severity incidents end-to-end from detection through resolution — diagnose, execute runbook procedures, and resolve without escalation where possible. Escalate promptly when an incident is unresolved within defined thresholds or requires a code-level fix. Support the TSO Lead during major incidents as the technical right hand in the war room — surface real-time data (error rates, impact scope, deployment history, related alerts), maintain the incident ticket with live timeline entries and linked evidence, and execute mitigation actions as directed. Draft incident communications under TSO Lead direction, including internal Slack updates, stakeholder notifications, and customer-facing status page updates (status.xsolla.com). Support clear, timely communication throughout the incident lifecycle. During non-incident periods, analyze incident trends, recurring issues, and production bugs — compile data from Datadog, JIRA, and Slack, identify patterns, and contribute findings to regular reports for product and engineering teams. Compile incident timelines and draft initial PIR documents for Post-Incident Review preparation. Track PIR action items post-session and flag overdue items to the TSO Lead. Build and maintain operational automation (alert enrichment scripts, incident templates, Slack workflows, dashboard widgets) and contribute to runbook development — documenting new resolution procedures so they can be repeated by any Operations Engineer on any shift. Conduct structured shift handoffs covering active incidents, at-risk services, upcoming deployments, and follow-up items. Participate in knowledge transfer sessions with SREs to continuously expand independent resolution capability. Cover for the TSO Lead during vacations, absences, or emergencies — including severity classification, escalation decisions, stakeholder communications, and basic Incident Commander functions. Publish health reports of critical apps periodically. Qualifications: Previous experience working at a gaming company is required — you understand the pace, player expectations, live operations dynamics, and the operational demands of the gaming industry. 4+ years of experience in SRE, DevOps, production operations, NOC, or technical operations in a high-availability environment. Strong troubleshooting and investigation skills — ability to take an alert or user-reported symptom and methodically trace it through the stack: application logs, APM traces, infrastructure metrics, database queries, and network paths. Hands-on experience with Datadog (or equivalent observability platform: Grafana, Splunk, New Relic, Elastic) — navigating APM, building log queries, reading infrastructure dashboards, interpreting SLO burn rates, and configuring monitors and alerts. Proficiency in at least one scripting language: Python, Go, or Bash. You will write automation scripts, build operational tooling, and work with APIs. Clear written and verbal communication skills in English — ability to write incident tickets, investigation notes, Slack updates, shift handoff reports, status page communications, and PIR drafts that are clear, concise, and useful to both technical and non-technical audiences. Working knowledge of Kubernetes and cloud infrastructure (GCP preferred, AWS/Azure acceptable) — understanding of pods, deployments, services, ingress, node health, and how to investigate Kubernetes-related production issues. Understanding of SLOs, error budgets, and burn-rate alerting — knowing what a multi-window burn-rate alert means, how error budgets deplete, and how SLO breaches translate into incident severity. Experience with incident management tooling: JIRA or JIRA Service Management, PagerDuty or OpsGenie, Slack, and Confluence. Experience with or strong interest in AI/ML-assisted operations: anomaly detection, alert correlation, predictive monitoring, or automated remediation. Comfort with 24x7 shift-based operations as part of a follow-the-sun model with handoff overlaps. Weekend on-call (rotating) is required. Nice to Have: Familiarity with Datadog Service Catalog, synthetic monitoring, and RUM (Real User Monitoring). Experience with distributed systems debugging: tracing failures across microservices, understanding cascading failures, and reading distributed traces end-to-end. Exposure to database operations (MySQL, PostgreSQL, Redis, Kafka) at a level sufficient to investigate connection pool exhaustion, replication lag, slow queries, or queue backlogs during incidents. Familiarity with CI/CD pipelines and deployment tooling (GitLab CI, ArgoCD, Helm) — enough to correlate recent deployments with production issues and identify rollback targets. JIRA Service Management administration experience: workflows, automation rules, SLA timers, and queues. ITIL Foundation certification is a plus but not required — practical experience matters more. Benefits We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees through a comprehensive Benefits Program. This includes unlimited Flexible Time Off, Gym membership, monthly train ticket and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play. The duties and responsibilities of this position may evolve over time to support the organization’s goals and individual growth. This job description is intended to outline the general nature and level of work being performed and is not intended to be an exhaustive list of all duties, responsibilities, and qualifications required. By submitting your application, you consent to Xsolla conducting background checks, where permitted by law, after the final interview stage. All checks will comply with local regulations, and your information will be handled confidentially. Xsolla takes your privacy seriously and will not sell or externally distribute any personal data received during the hiring process. In accordance with applicable data protection laws, Xsolla is committed to protecting your personal information and respecting your privacy. For any inquiries related to data privacy, please contact: careers@xsolla.com Explore more opportunities at: https://xsolla.com/careers

Location: Berlin, Germany Workplace: remote ABOUT YOU We are looking for a Technical Service Operations Lead (TSO Lead) who is operationally driven, collaborative, analytical, and a strong communicator to join our Global Technical Operations (GTO) team. The best candidate will be someone who thrives in a fast-paced, highly collaborative, and exceptionally dynamic setting and is excited to help coordinate incident response alongside cross-functional teams, identify trends and patterns in production issues, improve how we communicate with partners during incidents, and drive continuous improvement through post-incident reviews. Strong incident management experience, ITIL knowledge, and observability/monitoring expertise are essential, along with experience in technical operations, SRE, or NOC environments supporting high-availability platforms in the gaming industry. The ability to communicate clearly and effectively in English — both written and verbal — across technical and executive audiences will be key to your success in this role. If you’re passionate about driving operational excellence and platform reliability at scale and love ensuring the reliability and uptime of commerce and payment solutions that game developers and players depend on, we would love to hear from you!   ABOUT US Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities: Serve as Incident Commander for major incidents — coordinating cross-functional response teams, driving investigation, making escalation decisions, and ensuring incidents are resolved within SLA targets. Own all incident communications: draft and send clear, timely updates to senior leadership, Customer Success, and partner/customer contacts throughout the incident lifecycle, and manage customer-facing status page updates (status.xsolla.com). Facilitate blameless Post-Incident Reviews (PIRs) for major incidents — leading root cause identification, assigning corrective actions with clear owners and deadlines, and tracking them to closure. During non-incident periods, proactively analyze incident trends, recurring issues, and production bugs — identify patterns, create Problem tickets, and report findings and recommendations to product and engineering teams on a regular cadence. Enforce the incident management framework across the organization, including the severity model, priority matrix, SLA targets, escalation procedures, and deployment readiness gates. Oversee and mentor the Operations Engineer on your shift — coaching on triage, investigation, runbook execution, and documentation quality while conducting regular knowledge transfer sessions to build depth across the service portfolio. Produce shift handoff reports and deliver regular operational reporting: incident trends, KPI performance (MTTD, MTTA, MTTR), SLA adherence, proactive detection rate, and repeat incident analysis. Audit service catalogue completeness on a regular cadence and govern JIRA Service Management workflows for incident, PIR, and problem management. Cover for the Operations Engineer role during absences, breaks, or surge incidents. Participate in weekend on-call rotation for major incidents. Qualifications: Previous experience working at a gaming company is required — you understand the pace, player expectations, live operations dynamics, and the operational demands of the gaming industry. 6+ years of experience in incident management, SRE, NOC leadership, or technical operations in a production environment supporting high-availability, high-transaction systems. Proven incident management experience — coordinating multi-team response, making real-time escalation decisions, and communicating with executive stakeholders under pressure. Excellent written and verbal communication skills in English — ability to draft clear, concise executive updates at 3 AM under pressure, facilitate blameless PIRs, present operational metrics to senior leadership, and communicate incident status to customers and partners with clarity and professionalism. Strong ITIL foundation — understanding of incident, problem, and change management lifecycles with practical experience implementing or operating ITIL-aligned workflows. Technical depth across the observability stack — ability to read and interpret logs, traces, and metrics in Datadog (or equivalent: Grafana, Splunk, New Relic). Understanding of APM, SLOs, error budgets, burn-rate alerting, and synthetic monitoring. Hands-on experience with incident tooling: Datadog, PagerDuty or OpsGenie, JIRA or JIRA Service Management, Slack, and Confluence. Analytical mindset — ability to identify trends, patterns, and recurring issues from incident data and translate them into actionable recommendations for product and engineering teams. Experience with SLA/SLO-driven operations where MTTD, MTTA, and MTTR are measured, reported, and improved. Comfort with 24x7 shift-based operations as part of a follow-the-sun model with handoff overlaps. Weekend on-call (rotating) for critical severities is required. Nice to Have: Experience with customer/partner-facing incident communications and status page management. Experience with or strong interest in AI/ML-assisted operations: anomaly detection, alert correlation, predictive alerting, automated remediation, or self-healing automation. JIRA Service Management administration experience: workflows, SLA timers, automation rules, queues, and permissions. Familiarity with Datadog Service Catalog, scorecards, and SLOs — especially burn-rate alerts and multi-window SLOs. Experience building an operations function from scratch — defining processes, writing runbooks, establishing governance cadences. Background in Kubernetes, cloud infrastructure (GCP preferred), microservices architecture, or distributed systems. ITIL certification (Foundation or higher) is a plus but not required. Benefits We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees through a comprehensive Benefits Program. This includes unlimited Flexible Time Off, Gym membership, monthly train ticket and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play. The duties and responsibilities of this position may evolve over time to support the organization’s goals and individual growth. This job description is intended to outline the general nature and level of work being performed and is not intended to be an exhaustive list of all duties, responsibilities, and qualifications required. By submitting your application, you consent to Xsolla conducting background checks, where permitted by law, after the final interview stage. All checks will comply with local regulations, and your information will be handled confidentially. Xsolla takes your privacy seriously and will not sell or externally distribute any personal data received during the hiring process. In accordance with applicable data protection laws, Xsolla is committed to protecting your personal information and respecting your privacy. For any inquiries related to data privacy, please contact: careers@xsolla.com Explore more opportunities at: https://xsolla.com/careers

Задачи: — Разработка и поддержка backend на Python с использованием Django и Django Rest Framework. — Создание REST API, работа с Django ORM, миграциями и админ интерфейсом. — Настройка и поддержка AWS сервисов: S3, RDS, SNS, SQS, CloudFront, CloudFormation. — Реализация OAuth потоков аутентификации. — Использование AI инструментов и LLM. — Работа с Celery (версии 4.x/5.x) и брокерами сообщений Redis или RabbitMQ. — Использование Docker (Dockerfile, docker-compose) и базовые знания CI/CD (GitHub Actions или аналогичные). — Работа с SQL и реляционными базами данных, предпочтительно PostgreSQL. — Использование Git, проведение Pull/Merge Requests, Code Reviews, Git Flow. Требования: — Опыт работы с Python не менее 5 лет. — Опыт работы с Django, Django REST Framework. — Знание PostgreSQL. — Опыт работы с Django ORM моделями. — Знание архитектурных паттернов RESTful API. — Опыт работы с брокерами сообщений Redis или RabbitMQ. — Опыт работы с кэшированием Redis. — Опыт работы с инструментами мониторинга Sentry (желательно Pytest, Flake8, Bandit, wemake-python-styleguide). — Опыт работы с AI инструментами (OpenAI, Claude, RAG / Knowledge Base Tools, Zapier, Make.com). — Профессиональное владение английским языком. Желательно: — Опыт DevOps: настройка и поддержка AWS сервисов. — Опыт настройки и поддержки CI/CD пайплайнов (GitHub Actions или аналогичные). — Знание платежных шлюзов Mollie, Stripe, PayPal и подобных. — Опыт настройки и оптимизации Sentry, логирования и мониторинга. — Опыт тестирования и работы с инструментами качества кода: Pytest, Flake8, Bandit, wemake-python-styleguide. — Опыт работы с интернационализацией и внешними интеграциями (CRM, API). — Базовые знания Vue.js или опыт взаимодействия с фронтендом на Vue. — Использование feature flags с django-waffle и продвинутых админ плагинов (CKEditor, image-cropping, sortable2). — Знание Poetry, Fabric, Django Channels. — Опыт обработки PDF и изображений (PyMuPDF, Pillow, heif-image-plugin). Условия: — Полностью удалённая работа с гибким графиком. — Конкурентная оплата, полная занятость или фриланс, в зависимости от опыта. — Возможности профессионального роста и долгосрочного сотрудничества.

Location: Hong Kong, Hong Kong SAR; Singapore, Singapore OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Opportunity As a Technical Expert, you will lead the development of the company’s core security engineering and DevSecOps capabilities, with a strong focus on security product development, platform engineering, and SDK /Agent development . The ideal candidate should demonstrate deep security expertise, broad technical coverage, strong hands-on engineering capability, and exceptional influence in driving security governance across business teams . What You’ll Be Doing Lead the architecture and core development of the company’s end-to-end DevSecOps platform, security products, and SDKs/Agents , covering code, build, artifacts, images, deployment, and runtime security. Own the design and development of RASP / Java Agent runtime protection , leveraging ASM, ByteBuddy, and Java Instrumentation for bytecode enhancement, runtime hooks, detection and blocking engines, while continuously improving performance, stability, and compatibility. Build and integrate SAST, DAST, IAST, SCA, code security scanning, and image security scanning into CI/CD workflows, and drive deep integration of tools such as SonarQube and Coverity to form a closed loop of scanning, gating, remediation, and re-validation. Drive core application security protection and offensive/defensive capabilities across scenarios such as XSS, SQL injection, SSRF, deserialization, command execution, authentication/authorization flaws, privilege escalation, and API security . Advance AI-Native Security Engineering by applying LLMs and AI Agents to vulnerability analysis, rule generation, false-positive reduction, remediation suggestions, security knowledge management, and workflow automation, while building deep understanding of their architecture, principles, and security implications. Partner closely with business engineering teams to drive security standards, integration rules, quality gates, risk classification, remediation workflows, and overall security governance adoption. Collaborate with engineering, architecture, operations, QA, and business stakeholders to solve complex security problems and turn them into scalable product capabilities, engineering solutions, and governance mechanisms. What We Look For In You Strong fundamentals in computer science and security, with deep understanding of operating systems, networking, compilers/ JVM internals, distributed systems, application security, cloud-native security, and software supply chain security , with both breadth and depth in security technologies. Expert-level Java proficiency , especially in JVM internals, ClassLoader , Java Agent, ASM, ByteBuddy, bytecode instrumentation, profiling, and performance tuning ; proficient in Python or Golang as well. Proven hands-on experience with RASP, SAST, DAST, IAST, SCA, image security, and code security scanning , with the ability to independently design, integrate, and productionize security capabilities. Strong offensive and defensive security experience , with deep understanding of vulnerability root causes, exploitation techniques, detection logic, bypass methods, and remediation strategies in web, API, and microservice environments. Strong practical experience with LLMs and AI Agents , plus deep understanding of model architecture, agent design, tool invocation, context engineering, evaluation methods, and the impact of AI on both security engineering and attacker capabilities. Strong engineering and product mindset, capable of leading the design and implementation of security products, platform modules, and SDKs/Agents while balancing security effectiveness, performance overhead, integration cost, and operability . Strong ownership, communication skills, and cross-functional influence, with a proven ability to drive business teams on security governance, policy adoption, and remediation outcomes. Preferred Qualifications Background from top-tier Internet companies, cloud providers, or leading cybersecurity vendors ; Experience leading DevSecOps platforms, application security platforms, RASP systems, code scanning platforms, or cloud-native security platforms ; Strong experience in security product development, SDK /Agent development, vulnerability research, penetration testing, red/blue team exercises, or incident response ; Hands-on experience in AI + Security initiatives such as security copilots, intelligent rule generation, automated vulnerability analysis, or remediation recommendation systems. Perks & Benefits Competitive total compensation package L&D programs and education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .