Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Location: Singapore
About the Department
Cloudforce One
is Cloudflare's threat operations and research team, responsible for identifying and disrupting cyber threats ranging from sophisticated cyber criminal activity to nation-state sponsored advanced persistent threats (APTs). Cloudforce One works in close partnership with external organizations and internal Cloudflare teams, continuously developing operational tradecraft and expanding ever-growing sources of threat intelligence to enable expedited threat hunting and remediation.
Members of Cloudforce One are at the helm of leveraging an incredibly vast and varied set of data points that only one of the world's largest global networks can provide. The team analyzes these unique data points at massive scale and efficiency, synthesizing findings into actionable threat intelligence to better protect our customers.
About INTERDICT
I.N.T.E.R.D.I.C.T.
(Identify, Neutralize, Triage, Engage, Respond, Disrupt, Integrate, Contain, Threat Hunting) is Cloudforce One's unified operational security organization responsible for identifying, analyzing, and responding to threats targeting Cloudflare and its customers. INTERDICT encompasses three main sub-functions:
Cloudflare Managed Defense (CMD):
Network and application security monitoring for 'Under Attack' mitigation support.
PhishGuard:
Managed email threat detection and response service.
Detection Engineering:
ML model development and detection optimization.
Together, INTERDICT provides comprehensive
24×7×365 protection
across email, application, and network threat surfaces.
Role Summary
As a
Senior Response Engineer
within the Cloudflare Managed Defense Center (CMDC), you will serve as a subject-matter expert and technical escalation point for threat mitigation across Cloudflare’s strategic enterprise customer base. In this role, you will lead the response to sophisticated, multi-vector cyberattacks spanning OSI Layers 3, 4, and 7, operating beyond standard playbooks to diagnose anomalies, engineer custom mitigations, and stabilize mission-critical infrastructure under fire.
Beyond active incident command, you will act as a force multiplier: architecting customer-specific defense strategies, authoring and refining automated detection logic, mentoring Tier 1 and Tier 2 engineers, and collaborating directly with Cloudflare Product and Engineering teams. We are looking for an experienced, high-ownership technical leader who excels during high-stakes incidents and is passionate about mentoring others while advancing threat mitigation at scale.
CMDC operates 24×7×365.
This role participates in a regional shift rotation and on-call escalation rota including periodic weekend and public-holiday coverage as part of a follow-the-sun model across AMER, EMEA, and APAC.
Role Responsibilities
Act as the technical lead and incident commander during high-impact, multi-vector security events, designing and deploying bespoke mitigation strategies when standard runbooks do not suffice.
Perform deep-dive forensic analysis into complex Layer 3/4 and Layer 7 traffic anomalies, identifying zero-day attack patterns, sophisticated bot networks, and novel evasion techniques.
Apply advanced mitigation strategies and filter malicious traffic using Cloudflare’s core security suite, including Magic Transit, Web Application Firewall (WAF), and Advanced Rate Limiting.
Lead technical communications and incident bridge calls with enterprise C-level executives, principal network engineers, and security teams during critical events, clearly articulating root causes, impact assessments, and remediation paths.
Monitor and investigate proactive security alerts across internal telemetry systems to rapidly triage incoming events, assess blast radius, and validate threat severity.
Adhere to and champion strict customer SLAs for alert response times, event analysis, and clear executive reporting.
Mentor and elevate Tier 1 and Tier 2 engineers through structured shadowing, technical post-mortems, and internal training.
Partner with internal Engineering and Product teams to translate operational attack trends into prioritized platform enhancements, tool feedback, and automated detection logic.
Role Requirements (Must-Have Skills)
A minimum of 6–8 years of hands-on experience in a high-volume Security Operations Center (SOC), Managed Detection and Response (MDR), network engineering, or incident response environment dealing directly with live threat mitigation.
Comprehensive knowledge of networking principles and internet infrastructure, including TCP/IP, UDP, ICMP, DNS, BGP routing mechanics, and edge network design.
Deep expertise in Layer 7 protocols and web architectures (HTTP/1.1, HTTP/2, HTTP/3, TLS handshakes/ciphers, reverse proxy models, and API security).
Experience analyzing network traffic data for anomaly detection and designing, tuning, and executing advanced mitigation strategies against L3/L4 and L7 attacks, including bespoke countermeasures when standard playbooks are insufficient.
Advanced proficiency in packet capture and network traffic analysis using tools such as tcpdump, Wireshark, or tshark to isolate anomalies and dissect malformed or novel payloads.
Practical experience analyzing and mitigating security incidents using AI and machine learning tools, paired with the hands-on capability to build and integrate custom tooling that improves operational workflows, accelerates log telemetry analysis, and defends against AI-driven botnets and adversarial edge attacks.
Proficiency in using the command line (Bash shell) alongside general system administration literacy across Linux, Mac, or Windows environments.
Proven experience commanding incident bridges, making decisive risk-tradeoff decisions, and maintaining composure while managing enterprise stakeholders during high-pressure crises.
Nice-to-Have Skills
Direct experience querying large-scale distributed logging and analytics systems using SQL, GraphQL, ClickHouse, or SIEM platforms (Splunk, Elastic, Sumo Logic).
Hands-on experience defending against advanced persistent threats (APTs), credential stuffing, scraping botnets, or application-layer bypass attacks against major CDNs/WAFs.
Relevant industry certifications, such as CISSP, CCNP/CCIE, or advanced GIAC credentials (e.g., GCIA, GCIH, GNFA).
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Location: Toronto, Ontario, Canada
Workplace: Hybrid
ABOUT SENTRY
Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building.
Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future.
ABOUT THE ROLE
The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate.
We take a pragmatic approach to preventing and responding to security risks. In this role not only will you build and contribute to systems which detect malicious activity, you will have the unique opportunity to implement new controls to prevent future incidents. You will work across detection and response and corporate security domains. You'll contribute to practices that keep Sentry secure as we grow: alert triage for corporate and production, detection engineering, deploying preventative controls, identity and access management, investigations and incident response, and more.
You'll partner with teams across the company to prevent and respond to security incidents. You will work as a technical collaborator who prioritizes preventative controls, defense in depth, and high signal alerting practices. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security approaches and challenges.
IN THIS ROLE, YOU WILL
- Maintain, improve, and own detection engineering systems. We own and operate our own detection stack and are building agentic triage with thoughtful security response and orchestration automation.
- Perform investigations, and contribute to security incident response. You will assist and contribute to a breadth of incident types, or Sentry and our customers.
- Contribute to, maintain, and operate identity and access management systems. Access management is a critical component of our security program.
- Have a lot of opportunity to grow and learn across many security domains. We are a highly cross-functional team and you will have opportunities to touch adjacent security projects spanning appsec, infrasec, governance, and privacy.
- Research, identify, and respond to emerging threats relevant to Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices.
YOU’LL THRIVE IN THIS ROLE IF YOU
- Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you protect a fast-moving engineering organization.
- Get excited when something new lands on your desk, be it an interesting breach, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before.
- Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction.
- Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than make a noisy reactive solution which requires manual triage.
- Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team.
QUALIFICATIONS
- 2-5 years of industry experience in a detection and response, corporate security, or generalist security engineering role
- Degree in Computer Science or a related field, equivalent training, or professional experience
- Hands-on experience with several of the following: alert triage, detection tuning and writing, detection-as-code, security log ingestion, investigations and security incident response, identity and access management (IAM), phishing response, user access reviews, managing endpoint detection and response tooling
- Experienced and comfortable programing in at least one language (Python preferred) and comfortable using agentic development workflows
- Familiarity with operating distributed cloud technology (AWS, CICD, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and experience with corporate (SSO, SAML, IAM) and defensive security tooling (EDR, SIEM, CNAPP, ZTNA, etc.)
- A collaborative approach to problem solving paired with strong written and verbal communication
Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow.
The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $162,000 to $200,000 CAD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs.
EQUAL OPPORTUNITY AT SENTRY
Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible.
If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io.
Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.
Location: San Francisco, California
Workplace: Hybrid
ABOUT SENTRY
Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building.
Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future.
ABOUT THE ROLE
The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate.
We take a pragmatic approach to preventing and responding to security risks. In this role not only will you build and contribute to systems which detect malicious activity, you will have the unique opportunity to implement new controls to prevent future incidents. You will work across detection and response and corporate security domains. You'll contribute to practices that keep Sentry secure as we grow: alert triage for corporate and production, detection engineering, deploying preventative controls, identity and access management, investigations and incident response, and more.
You'll partner with teams across the company to prevent and respond to security incidents. You will work as a technical collaborator who prioritizes preventative controls, defense in depth, and high signal alerting practices. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security approaches and challenges.
IN THIS ROLE, YOU WILL
- Maintain, improve, and own detection engineering systems. We own and operate our own detection stack and are building agentic triage with thoughtful security response and orchestration automation.
- Perform investigations, and contribute to security incident response. You will assist and contribute to a breadth of incident types, or Sentry and our customers.
- Contribute to, maintain, and operate identity and access management systems. Access management is a critical component of our security program.
- Have a lot of opportunity to grow and learn across many security domains. We are a highly cross-functional team and you will have opportunities to touch adjacent security projects spanning appsec, infrasec, governance, and privacy.
- Research, identify, and respond to emerging threats relevant to Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices.
YOU’LL THRIVE IN THIS ROLE IF YOU
- Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you protect a fast-moving engineering organization.
- Get excited when something new lands on your desk, be it an interesting breach, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before.
- Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction.
- Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than make a noisy reactive solution which requires manual triage.
- Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team.
QUALIFICATIONS
- 2-5 years of industry experience in a detection and response, corporate security, or generalist security engineering role
- Degree in Computer Science or a related field, equivalent training, or professional experience
- Hands-on experience with several of the following: alert triage, detection tuning and writing, detection-as-code, security log ingestion, investigations and security incident response, identity and access management (IAM), phishing response, user access reviews, managing endpoint detection and response tooling
- Experienced and comfortable programing in at least one language (Python preferred) and comfortable using agentic development workflows
- Familiarity with operating distributed cloud technology (AWS, CICD, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and experience with corporate (SSO, SAML, IAM) and defensive security tooling (EDR, SIEM, CNAPP, ZTNA, etc.)
- A collaborative approach to problem solving paired with strong written and verbal communication
Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow.
The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $150,000 to $200,000 USD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs.
EQUAL OPPORTUNITY AT SENTRY
Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible.
If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io.
Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.
ГибридSan Francisco, California
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Location: Cluj-Napoca, Romania; Bucharest, Romania; Bucuresti, Romania; Belgrade, Serbia; Chișinău, Moldova, Republic of; Tiraspol, Moldova, Republic of; Sofia, Bulgaria; Erevan, Armenia; Almaty, Kazakhstan; Astana, Kazakhstan; Budapest, Hungary; Miskolc, Hungary; Bryanston, South Africa; Cape Town, South Africa; Johannesburg, South Africa; Aya Napa, Cyprus; Larnaca, Cyprus; Limassol, Cyprus; Nicosia, Cyprus; Paphos, Cyprus; Paralimni, Cyprus; Amman, Jordan; Alexandria, Egypt; Cairo, Egypt; Lebanon; Dnipro, Ukraine; Kharkiv, Ukraine; Kyiv, Ukraine; Lviv, Ukraine; Sambir, Ukraine; Odesa, Ukraine; Berat, Albania; Batumi, Georgia; Cebu City, Philippines; Ljubljana, Slovenia; Manila, Philippines; Sarajevo, Bosnia and Herzegovina; Singapore; Skopje, North Macedonia; Banská Bystrica, Slovakia; Tbilisi, Georgia; Zagreb, Croatia; Davao City, Philippines; Iloilo City, Philippines; Makati, Philippines; Quezon City, Philippines; Taguig, Philippines; Ahmedabad, India; Pondicherry, India; Delhi, India; Fatorda, India; Hyderabad, India; Bangalore, India; Jakarta, Indonesia; Mumbai, India; Sahibzada Ajit Singh Nagar (Mohali), India; Kuala Lumpur, Malaysia; Bangkok, Thailand; Ho Chi Minh, Vietnam
Workplace: remote
At TechBiz Global, we are providing recruitment service to our TOP clients from our portfolio. We are currently seeking a
Detection & Response Engineer
to join one of our clients' teams. If you're looking for an exciting opportunity to grow in a innovative environment, this could be the perfect fit for you.
Key Responsibilities:
Investigate security cases and targeted hunts using CrowdStrike Falcon Next-Gen SIEM and CQL; correlate telemetry, assess scope and impact, document findings, and recommend appropriate actions.
Develop, test, deploy, tune, and maintain detection logic, queries, dashboards, analyst guides, and version-controlled detection content.
Build and maintain Falcon Fusion SOAR workflows for enrichment, evidence capture, routing, escalation, and authorized response.
Validate telemetry coverage and quality; troubleshoot parsing, normalization, mapping, and source-data issues.
Translate validated investigations into platform workflow specifications and co-build scripts, API integrations, workflow components, and prototypes with Product and Engineering.
Test workflows and detections against representative cases; monitor outcomes, exceptions, and production feedback, and document ownership and support handoffs.
Provide technical support, troubleshooting, knowledge transfer, and coaching; coordinate assigned analysis and platform work.
Must have:
5+ years of relevant security experience, including at least 2 years developing, testing, and tuning detection logic, or equivalent demonstrated capability.
Production proficiency with CrowdStrike Falcon Next-Gen SIEM, including CQL, cross-source investigations, detection content, telemetry interpretation, and tuning.
Hands-on Falcon Fusion SOAR workflow experience and practical use of Charlotte AI with evidence verification and awareness of approval boundaries.
Practical Python, REST/Falcon APIs, JSON, authentication, error handling, and secure credential management; familiarity with PowerShell or another relevant scripting language.
Experience with telemetry onboarding, parser/normalization troubleshooting, MITRE ATT&CK, Windows/Linux events, and controlled changes, version control, peer review, and regression testing.
Strong investigation judgment, defensible documentation, communication, and cross-functional collaboration skills.
Nice to have:
Experience converting SOC runbooks or manual analysis into production workflows or internal security platforms.
CrowdStrike resident, responder, partner implementation, or customer-embedded Falcon experience; FalconPy or comparable API tooling.
Experience partnering with Product and Engineering on analyst-facing features, case lifecycle integration, acceptance testing, or iterative delivery.
Managed security services, multi-client or follow-the-sun SOC operations, and ITSM integrations such as ServiceNow or Jira.
Relevant CrowdStrike training or credentials, GIAC invest
УдалённоCluj-Napoca, Romania; Bucharest, Romania; Bucuresti, Romania; Belgrade, Serbia; Chișinău, Moldova, Republic of; Tiraspol, Moldova, Republic of; Sofia, Bulgaria; Erevan, Armenia; Almaty, Kazakhstan; Astana, Kazakhstan; Budapest, Hungary; Miskolc, Hungary; Bryanston, South Africa; Cape Town, South Africa; Johannesburg, South Africa; Aya Napa, Cyprus; Larnaca, Cyprus; Limassol, Cyprus; Nicosia, Cyprus; Paphos, Cyprus; Paralimni, Cyprus; Amman, Jordan; Alexandria, Egypt; Cairo, Egypt; Lebanon; Dnipro, Ukraine; Kharkiv, Ukraine; Kyiv, Ukraine; Lviv, Ukraine; Sambir, Ukraine; Odesa, Ukraine; Berat, Albania; Batumi, Georgia; Cebu City, Philippines; Ljubljana, Slovenia; Manila, Philippines; Sarajevo, Bosnia and Herzegovina; Singapore; Skopje, North Macedonia; Banská Bystrica, Slovakia; Tbilisi, Georgia; Zagreb, Croatia; Davao City, Philippines; Iloilo City, Philippines; Makati, Philippines; Quezon City, Philippines; Taguig, Philippines; Ahmedabad, India; Pondicherry, India; Delhi, India; Fatorda, India; Hyderabad, India; Bangalore, India; Jakarta, Indonesia; Mumbai, India; Sahibzada Ajit Singh Nagar (Mohali), India; Kuala Lumpur, Malaysia; Bangkok, Thailand; Ho Chi Minh, Vietnam
Workplace: Удаленно
Объединённая компания Wildberries и Russ — это международная технологическая компания, образованная в результате слияния двух лидеров рынка — IT-компании Wildberries и оператора наружной рекламы Russ.
По мере масштабирования IT-направления, Wildberries активно усиливает команду ИБ, создавая надежную и адаптивную инфраструктуру защиты. Мы сталкиваемся с уникальными вызовами, от повышения безопасности каждого отдельного сервиса до обеспечения целостной защиты всей нашей обширной инфраструктуры.
Мы ищем аналитика SOC, который будет проектировать и развивать распределенные системы централизованного сбора, обработки и анализа событий. Аналитику предстоит обеспечить масштабируемое и воспроизводимое обнаружение и реагирование на инциденты в инфраструктурах бизнес-юнитов объединенной группы компаний.
Обязанности
Реагирование на инциденты информационной безопасности;
Проведение полного цикла мероприятий по форензике;
Формирование списка корректирующих действий, их контроль и реализация на основе уроков, извлеченных из инцидентов;
Разработка и поддержка в актуальном состоянии плейбуков по реагированию на инциденты;
Участие в процессе подключения источников: оценка полноты информации для реагирования на инциденты.
Требования
Навыки идентификации и анализа вредоносного ПО, cкриптов, документов;
Опыт работы с SIEM: умение выстраивать оптимальные поисковые запросы, интерпретировать полученные результаты, строить визуализации для удобного отображения и анализа данных;
Умение пользоваться инструментарием по сбору триажа и форензике;
Владение Python/PowerShell/Bash на уровне, позволяющем автоматизировать повседневные задачи;
Знание одной из систем Linux/Windows/MacOS на уровне системного администратора;
Навыки анализа и обработки большого объема данных (логи с хостов, триажи, дампы памяти/жестких дисков) с ручной и/или автоматической корреляцией между собой и выделением значащих данных.
Будет плюсом:
Опыт работы с ELK stack;
Знание устройства Kubernetes, Docker, особенностей их мониторинга;
Умение писать простые SQL-запросы;
Опыт работы с NTA;
Наличие профильных сертификатов по информационной безопасности
Выступления на крупных конференциях и митапах, например PHDays, OffZone, Standoff и других.
Условия
Обучение и развитие: языковые клубы, собственный корпоративный университет, программы развития управленческих навыков и многое другое;
Благополучие сотрудников: корпоративный пакет ДМС со стоматологией, корпоративный спорт, консультации психолога и дополнительные возможности аккредитованной IT-компании;
Множество сообществ: клуб спикеров, футбола, йоги, шахмат и т.д.;
Забота о семьях: создаем условия, в которых легко сочетать карьеру и заботу о близких – от гибкого подхода до масштабных проектов для детей сотрудников;
Скидки и партнерские программы: на обучение, страхование, покупки и многое другое;
Комфортная рабочая среда: бесплатное питание в офисе, современные офисы рядом с метро, корпоративная техника и портал для сотрудников.
Location: Remote (Canada)
Workplace: Remote
BUILD SOMETHING PEOPLE LOVE
Wealthsimple is Canada’s leading financial innovator. The company offers a full suite of simple, sophisticated financial products across managed investing, do-it-yourself trading, cryptocurrency, tax filing, spending and saving. Wealthsimple currently serves more than 4 million Canadians and holds over $169 billion in assets under administration. The company was founded in 2014 by a team of financial experts and technology entrepreneurs, and is headquartered in Toronto, Canada.
We're proud of what we've built — and we're just getting started. Read our Culture Manual https://www.wealthsimple.com/en-ca/culture and learn more about how we work https://www.wealthsimple.com/en-ca/careers.
ABOUT THE ROLE
We are looking for a curious, hands-on security professional early in their career to join our Detection & Response team as an Incident Response Developer. You’ll report to the Manager of Detection & Response and work closely with senior responders to investigate security incidents, improve our response processes and build automation that helps us scale. You’ll get hands-on experience with real incidents and the mentorship to grow into the craft.
The ideal candidate has a foundation in security fundamentals, some hands-on exposure to investigations or security operations, and real enthusiasm for automating repetitive work. You’re a problem-solver who stays calm when things get busy, asks good questions and wants to learn from experienced teammates.
WHAT YOU'LL DO
- Strengthen our incident response capabilities by building relationships with Engineering teams, writing new playbooks and automating manual steps.
- Own investigations from start to finish: triage, evidence collection, analysis, containment and documentation.
- Act as Incident Commander for low- and medium-severity incidents, and support senior responders on high-severity ones.
- Turn recurring incident types into repeatable workflows (intake, playbook, automation, closure), from the first design through to the tooling behind them.
- Report incident trends and metrics that inform team priorities.
- Work with our Security Engineers to monitor, refine and expand our SIEM and SOAR platforms.
- Work with the HR, Fraud and Privacy teams on investigations into potentially fraudulent and sensitive activity, including insider threats and snooping.
- Participate in an on-call rotation for responding to security incidents, internal questions and operational support.
- Work with the detection engineering team to develop new, high-fidelity detection rules based on incident trends and threat intelligence.
SKILLS YOU BRING
- 3+ years of experience in cybersecurity.
- 1–2+ years of hands-on incident response experience, owning investigations end to end.
- The ability to coordinate responders and stakeholders during an incident, and know when to escalate.
- Experience using a SIEM to turn noise into signal, including writing queries and tuning alerts.
- Proficiency with AI coding tools (Claude Code, Cursor, ChatGPT, etc.) to build and maintain automation. We invest in tooling (automation, Slack bots, AI agents) so responders spend their energy on the decisions that matter.
- A workflow mindset: you can look at a messy, recurring problem and break it into steps that tooling or AI can take on.
- Working knowledge of cloud infrastructure (e.g., AWS, GCP or Azure) and how to investigate within it.
- Discretion and sound judgment when handling sensitive information, such as HR and insider-threat matters.
- Clear, honest and inclusive communication with both internal and external stakeholders.
- Good judgment under pressure, in technical problem solving and in working across teams.
- A strong desire to learn from the team and others. We value making one another successful!
WHY WEALTHSIMPLE?
🌸 Top-tier health benefits and life insurance
📈 Long-term group savings with employer match, through Wealthsimple for Business
🌴 20 vacation days, 4 wellness days, and unlimited sick and mental health days per year*
✈️ 90 days away: work outside Canada for up to 90 days per year*
👥 Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS
🌎 We are a hybrid team with over 1,500 employees across North America. The people are one of the best parts of working here: you'll collaborate with incredibly talented, curious, and driven teammates who are deeply committed to doing great work.
*Unlimited paid sick days, Wellness Days and the 90 day away program do not apply to certain roles.
ICYMI
Technology & Innovation at Wealthsimple: We move quickly and build thoughtfully. That means we're always looking for better ways to work — whether that's new tools, AI, or rethinking how we approach a problem. We don't expect you to have all the answers, but we do expect curiosity and a willingness to evolve alongside the products we're building.
Inclusion Statement: We're building products for a diverse world, and we need a diverse team to do it well. We strongly encourage applications from everyone, regardless of race, religion, colour, national origin, gender, sexual orientation, age, marital status, or disability status.
Accessibility Statement: We're committed to an accessible hiring experience. If you need any accommodations throughout the interview process, please let us know — we'll work with you to make sure you have what you need. We also welcome any feedback on how we can better accommodate candidates with accessibility needs.
AI in Hiring: We may use artificial intelligence (AI) tools to support parts of our hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our team but don't replace human judgment – all final hiring decisions are made by people. If you have questions about how your data is used, reach out to us.
Location: Remote (Canada)
Workplace: Remote
BUILD SOMETHING PEOPLE LOVE
Wealthsimple is Canada’s leading financial innovator. The company offers a full suite of simple, sophisticated financial products across managed investing, do-it-yourself trading, cryptocurrency, tax filing, spending and saving. Wealthsimple currently serves more than 4 million Canadians and holds over $169 billion in assets under administration. The company was founded in 2014 by a team of financial experts and technology entrepreneurs, and is headquartered in Toronto, Canada.
We're proud of what we've built — and we're just getting started. Read our Culture Manual https://www.wealthsimple.com/en-ca/culture and learn more about how we work https://www.wealthsimple.com/en-ca/careers.
ABOUT THE ROLE
We are seeking an experienced and hands-on security professional to join our Detection & Response team as a Senior Incident Response Developer. Reporting to the Manager of Detection & Response, this is a critical, technical role focused on strengthening our ability to respond to and recover from security threats. You will be a key player in investigating complex security incidents, building scalable response processes, and taking command when it matters most.
The ideal candidate has a deep, technical background in hands-on incident response and a keen eye for where automation can improve and scale our capabilities. You are a natural problem-solver who remains composed under pressure, a senior team member who enjoys mentoring others in the craft of incident response, and a builder who can create the playbooks, scripts, and processes needed to protect our company and our customers. Between incidents, you'll build the tooling and workflows that make the next one faster and easier to handle.
WHAT YOU'LL DO
- Help take our security incident response capabilities to the next level by building relationships with Engineering teams, new playbooks and finding opportunities for automation.
- Grow others in the art of Incident Response to support the program and increase consistency in outcomes.
- Play a key role in building and shaping the Security Incident Response team.
- Take the role of Incident Commander to bring incidents to resolution.
- Turn recurring incident types into repeatable workflows (intake, playbook, automation, closure) so they become routine work for the team.
- Help shape the direction of investment by informing the business of trends and relevant metrics.
- Partner with our Security Engineers to monitor, refine, and expand our SIEM and SOAR platforms.
- Coordinate with HR, Fraud and Privacy teams to investigate potential fraudulent and sensitive activity including insider threats and snooping.
- Participate in an on-call rotation for responding to security incidents, internal questions and operational support.
- Partner with the detection engineering function to develop new, high-fidelity detection rules based on incident trends and threat intelligence.
SKILLS YOU BRING
- 5+ years of experience in the Cybersecurity domain.
- 3+ years experience being an Incident Manager, taking ownership of investigations.
- Ability to lead a team during high-stress situations, providing direction and support to team members.
- Understand how to turn noise into signals using a SIEM.
- Proficiency with AI coding (Claude Code, Cursor, ChatGPT etc). We invest in tooling (automation, Slack bots, AI agents) so responders spend their energy on the decisions that matter.
- Thinks in workflows: can look at a messy, recurring problem and break it into steps that tooling or AI can take on.
- Knowledge of and familiarity with cloud infrastructure.
- Believes that honesty, transparency, and inclusivity are important when communicating with both internal and external stakeholders.
- Demonstrates good judgment under pressure both in terms of technical problem solving and collaborating cross functionally.
- Eager to learn from the team and others. We value making one another successful!
WHY WEALTHSIMPLE?
🌸 Top-tier health benefits and life insurance
📈 Long-term group savings with employer match, through Wealthsimple for Business
🌴 20 vacation days, 4 wellness days, and unlimited sick and mental health days per year*
✈️ 90 days away: work outside Canada for up to 90 days per year*
👥 Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS
🌎 We are a hybrid team with over 1,500 employees across North America. The people are one of the best parts of working here: you'll collaborate with incredibly talented, curious, and driven teammates who are deeply committed to doing great work.
*Unlimited paid sick days, Wellness Days and the 90 day away program do not apply to certain roles.
ICYMI
Technology & Innovation at Wealthsimple: We move quickly and build thoughtfully. That means we're always looking for better ways to work — whether that's new tools, AI, or rethinking how we approach a problem. We don't expect you to have all the answers, but we do expect curiosity and a willingness to evolve alongside the products we're building.
Inclusion Statement: We're building products for a diverse world, and we need a diverse team to do it well. We strongly encourage applications from everyone, regardless of race, religion, colour, national origin, gender, sexual orientation, age, marital status, or disability status.
Accessibility Statement: We're committed to an accessible hiring experience. If you need any accommodations throughout the interview process, please let us know — we'll work with you to make sure you have what you need. We also welcome any feedback on how we can better accommodate candidates with accessibility needs.
AI in Hiring: We may use artificial intelligence (AI) tools to support parts of our hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our team but don't replace human judgment – all final hiring decisions are made by people. If you have questions about how your data is used, reach out to us.
Location: Remote Canada
At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.
About the InfoSec team
At Affirm, security is integral to our mission of building honest financial products and driving the company’s long-term success. The Security Operations and Resilience Engineering (SOR) program is the foundation of our prevention, detection, and response capabilities, helping safeguard Affirm’s assets and enterprise security ecosystem. As part of our Security Team, you’ll join a group of passionate, highly skilled professionals redefining fintech security through collaboration, innovation, and a team-first mindset.
About the role
We’re seeking an experienced security leader to lead Affirm’s global security investigations and incident response program as we expand internationally. This leader will guide complex investigations and incidents while building the operating practices, readiness, and technical capabilities needed to support consistent response across regions and scale with the business.
In this role, you’ll lead a technically deep, engineering-oriented team that manages major incidents and builds better response capabilities. You’ll direct complex investigations while staying close to the technical work, bring structure to ambiguity, guide responders and executives through critical decisions, and turn incident findings into durable engineering improvements. You’ll also help shape AI-enabled investigation workflows, including agentic approaches to evidence gathering, analysis, and coordination, with human oversight and clear security, privacy, and operational safeguards.
What you’ll do
Lead security incidents and investigations across the full lifecycle, from initial assessment through containment, remediation, recovery, and post-incident review.
Serve as incident commander for major security events, set clear roles and decision paths, and coordinate large technical and cross-functional response groups through ambiguity.
Guide technical investigations and root-cause analyses with engineering teams, validate fixes, and drive durable corrective actions across the business.
Manage and develop a technical, engineering-oriented response team, set priorities, coach engineers, and build incident command depth and consistent execution across regions.
Set operating objectives and global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and measures of response effectiveness.
Drive engineering improvements to response tooling, security telemetry, detection, and automation, including agentic AI workflows that support investigation and analysis with appropriate human oversight and security and privacy safeguards.
Translate complex security and incident metrics into actionable executive dashboards and board-level risk reporting, surfacing trends and remediation priorities that drive cross-functional action.
What we look for
10+ years of experience in security operations, incident response, or a related security field.
Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments, from detection and assessment through containment, remediation, and recovery.
Strong technical foundation in security operations, with depth in investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments. Experience in fintech or payments, and familiarity with using threat intelligence to inform response, are nice to have.
Experience managing and developing technical or engineering teams, setting direction and priorities, coaching engineers, and guiding hands-on incident work alongside engineering improvements.
Track record of building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, operational measures, and security tooling such as SIEM, EDR, or SOAR.
Excellent written and verbal communication, including translating complex incidents, security metrics, and customer or business impact into clear executive updates and board-level reporting, and aligning cross-functional partners.
Demonstrated ability to independently move ambiguous work forward, make sound decisions with incomplete information, and drive investigations, remediation, and program improvements to completion with measurable results.
An AI-forward mindset and sound judgment in applying AI to security operations, including agentic investigation or automation workflows with human oversight and appropriate security, privacy, and operational safeguards.
Pay Grade - R
Equity Grade - 9
Employees new to Affirm typically come in at the start of the pay range.
Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company).
CAN base pay range per year: $
209,000
-
269,000
Location - Remote Canada
This remote role is open only to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.
#LI Remote
Remote-first with flexibility built in
Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience.
Benefits designed for you
Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights:
Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.
Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.
Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount.
We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help.
For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law.
By clicking "Submit Application," you acknowledge that you have read Affirm's
Global Candidate Privacy Notice
and consent to the use of your personal information as described.
Location: Remote US
At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.
About the InfoSec team
At Affirm, security is integral to our mission of building honest financial products and driving the company’s long-term success. The Security Operations and Resilience Engineering (SOR) program is the foundation of our prevention, detection, and response capabilities, helping safeguard Affirm’s assets and enterprise security ecosystem. As part of our Security Team, you’ll join a group of passionate, highly skilled professionals redefining fintech security through collaboration, innovation, and a team-first mindset.
About the role
We’re seeking an experienced security leader to lead Affirm’s global security investigations and incident response program as we expand internationally. This leader will guide complex investigations and incidents while building the operating practices, readiness, and technical capabilities needed to support consistent response across regions and scale with the business.
In this role, you’ll lead a technically deep, engineering-oriented team that manages major incidents and builds better response capabilities. You’ll direct complex investigations while staying close to the technical work, bring structure to ambiguity, guide responders and executives through critical decisions, and turn incident findings into durable engineering improvements. You’ll also help shape AI-enabled investigation workflows, including agentic approaches to evidence gathering, analysis, and coordination, with human oversight and clear security, privacy, and operational safeguards.
What you’ll do
Lead security incidents and investigations across the full lifecycle, from initial assessment through containment, remediation, recovery, and post-incident review.
Serve as incident commander for major security events, set clear roles and decision paths, and coordinate large technical and cross-functional response groups through ambiguity.
Guide technical investigations and root-cause analyses with engineering teams, validate fixes, and drive durable corrective actions across the business.
Manage and develop a technical, engineering-oriented response team, set priorities, coach engineers, and build incident command depth and consistent execution across regions.
Set operating objectives and global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and measures of response effectiveness.
Drive engineering improvements to response tooling, security telemetry, detection, and automation, including agentic AI workflows that support investigation and analysis with appropriate human oversight and security and privacy safeguards.
Translate complex security and incident metrics into actionable executive dashboards and board-level risk reporting, surfacing trends and remediation priorities that drive cross-functional action.
What we look for
10+ years of experience in security operations, incident response, or a related security field.
Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments, from detection and assessment through containment, remediation, and recovery.
Strong technical foundation in security operations, with depth in investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments. Experience in fintech or payments, and familiarity with using threat intelligence to inform response, are nice to have.
Experience managing and developing technical or engineering teams, setting direction and priorities, coaching engineers, and guiding hands-on incident work alongside engineering improvements.
Track record of building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, operational measures, and security tooling such as SIEM, EDR, or SOAR.
Excellent written and verbal communication, including translating complex incidents, security metrics, and customer or business impact into clear executive updates and board-level reporting, and aligning cross-functional partners.
Demonstrated ability to independently move ambiguous work forward, make sound decisions with incomplete information, and drive investigations, remediation, and program improvements to completion with measurable results.
An AI-forward mindset and sound judgment in applying AI to security operations, including agentic investigation or automation workflows with human oversight and appropriate security, privacy, and operational safeguards.
Pay Grade -
R
Equity Grade - 15
Employees new to Affirm typically come in at the start of the pay range
. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)
USA base pay range (CA, WA, NY, NJ, CT) per year: $
265,000
-
325,000
USA base pay range (all other U.S. states) per year: $
236,000
-
296,000
#LI-Remote
Remote-first with flexibility built in
Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience.
Benefits designed for you
Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights:
Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.
Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.
Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount.
We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help.
For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law.
By clicking "Submit Application," you acknowledge that you have read Affirm's
Global Candidate Privacy Notice
and consent to the use of your personal information as described.
Location: Dakar, Senegal
Workplace: Hybrid
LA SANTÉ N'ATTEND PAS.
Que les symptômes s’aggravent. Qu'il faille 6 mois avant d’obtenir un rendez-vous. Qu'on dépende d’un système de santé englué dans le papier et les processus manuels. Et pourtant, c’est ainsi que fonctionne aujourd’hui la santé en Afrique de l’Ouest. Vous attendez, jusqu’à ne plus pouvoir attendre.
Nous existons pour mettre fin à cette attente.
Née en 2022 au Sénégal, Tanel est la première assurance santé numérique d’Afrique de l’Ouest francophone. Elle opère au Sénégal et en Côte d’Ivoire. Nous transformons un marché dominé par les processus papier et des acteurs historiques fragmentés. Avec plus de 30 000 membres, un réseau de plus de 1 200 établissements de santé et de plus de 400 pharmacies, ainsi qu’un chiffre d'affaires multiplié par 7 en 2025, nous avons démontré une véritable adéquation entre notre produit et les besoins du marché, dans des pays qui avaient besoin d’une révolution.
En 2026, Alan, le leader européen de l’assurance santé axée sur la prévention, avec plus de 950 M€ de CA et + 1 M de membres en France, en Belgique, en Espagne et au Canada, a acquis Tanel afin d’accélérer son expansion sur le continent africain. Ensemble, nous construisons l’assurance santé de référence en Afrique de l’Ouest francophone, avec l’ambition d’atteindre 200 M$ de CA d’ici 2030.
Nous réunissons le meilleur des deux mondes : l’expertise de terrain de Tanel, ses relations locales et la confiance qu’elle a su bâtir, ainsi que la plateforme technologique de pointe d’Alan, son expertise actuarielle et son expérience du déploiement dans plusieurs pays.
⭐️ LA FINANCE CHEZ ALAN ⭐️
La Finance chez Alan, c’est l’équipe qui bâtit le socle financier permettant de piloter une assurance santé digitale en pleine croissance, sur des marchés où presque tout reste à construire.
Le cœur de nos responsabilités : produire une information financière fiable pour chacune de nos entités, tenir des comptes toujours prêts pour la clôture, et donner à l’entreprise les chiffres sur lesquels elle peut s’appuyer pour décider. Au quotidien, cela signifie tenir la comptabilité, piloter les clôtures, coordonner les cabinets externes, suivre la trésorerie et pousser l’automatisation dans un contexte multi-pays et multi-devises.
Nous réunissons une diversité de profils :
- Des profils qui structurent : définition du modèle de reporting, des normes et des processus financiers,
- Des profils qui délivrent : une production comptable et un reporting d’excellence au quotidien, tout en améliorant en continu ce que nous faisons.
Nous recherchons des membres d’équipe prêts à instaurer des standards financiers de classe mondiale sur des marchés qui les méritent, et à en faire un véritable avantage.
⭐️ LE RÔLE DE RESPONSABLE FINANCIER ⭐️
Nous recherchons un(e) responsable financier(ère) expérimenté(e) et opérationnel(le) pour porter l’ensemble de la fonction finance de nos activités en Afrique de l’Ouest.
Vous serez le point unique de responsabilité sur la façon dont ce périmètre est piloté et reporté. Basé(e) à Dakar, vous ferez le lien entre les équipes locales, les cabinets externes et la maison-mère. En détail, vos missions comprendront :
- Piloter le reporting de l’ensemble du périmètre : produire chaque mois le compte de résultat, le bilan et la situation de trésorerie de chaque entité et les intégrer proprement dans le reporting mensuel global.
- Coordonner les comptables et les cabinets : animer une équipe de comptables et la relation avec les cabinets d’expertise-comptable externes de chaque entité — fixer le calendrier de clôture, revoir leurs livrables et tenir le niveau de qualité.
- Piloter la clôture et les contrôles : assurer une clôture mensuelle fiable sur l’ensemble des entités et des devises (FCFA et USD), porter les rapprochements et mettre en place les contrôles nécessaires à mesure que l’activité se rapproche de comptes prêts pour l’audit.
- Assurer le lien avec la maison-mère : être l’interlocuteur(rice) finance du groupe — traduire les réalités locales en standards de reporting, répondre aux demandes de données et soutenir la consolidation.
- Améliorer, automatiser et faire grandir l’équipe : challenger et fluidifier les processus financiers pour réduire le travail manuel et accélérer le reporting, et participer au recrutement, à l’onboarding et à la montée en compétences de l’équipe finance locale.
Vous travaillerez en grande autonomie, en collaboration étroite avec les équipes centrales Finance, Data et Trésorerie.
⭐️ UNE OPPORTUNITÉ UNIQUE DE PARTICIPER À QUELQUE CHOSE D'HISTORIQUE ⭐️
En tant que membre de l'équipe Alan, vous serez aux avant-postes d'une véritable révolution de la santé en Afrique de l'Ouest. Vous contribuerez à bâtir la colonne vertébrale opérationnelle d'une entreprise passant de 30 000 à des centaines de milliers de membres, de deux pays à un continent entier.
Vous vivrez l'énergie d'une startup rapide, portée par ses fondateurs et en pleine croissance. Ce n'est pas un poste d'opérations ordinaire : vous opérerez sur un marché où tout est à construire, et où votre travail aura un impact direct et visible sur la vie des gens.
⭐️ VOUS ÊTES PEUT-ÊTRE LA BONNE PERSONNE SI… ⭐️
- Vous avez plus de 6 ans d’expérience en comptabilité/finance, avec une réelle responsabilité dans une clôture multi-entités.
- Vous maîtrisez les normes SYSCOHADA / OHADA et la fiscalité locale (TVA, IS/BIC).
- Vous avez fait vos preuves dans le management de comptables et de cabinets externes, la définition de standards et la tenue d’un calendrier de production, vous faites fonctionner un dispositif financier distribué dans les délais.
- Vous êtes rigoureux(se), autonome, proactif(ve) et orienté(e) solution.
- Vous êtes un(e) excellent(e) communicant(e), à l’aise pour faire le pont entre des équipes locales et des interlocuteurs internationaux.
- Vous êtes parfaitement à l’aise en français et en anglais (langue de travail du groupe).
C’est encore mieux si vous avez :
- Une expérience en assurance santé, en mutuelle (IPM/mutuelle) ou dans un environnement de gestion pour compte de tiers (TPA).
- Une bonne connaissance de l’environnement réglementaire au Sénégal ou en Côte d’Ivoire ; une expérience de consolidation (US GAAP ou IFRS/normes françaises) est un plus.
- Des compétences en data et en automatisation pour fiabiliser et accélérer le reporting.
🎁 AVANTAGES
- Type de contrat : CDI.
- Sur site, dans nos bureaux de Dakar, en collaboration étroite avec une équipe locale passionnée.
- Tous les outils nécessaires pour donner le meilleur de vous-même.
- Une assurance santé complète via Alan pour vous et votre famille.
- Des opportunités d'apprentissage et de formation : une politique flexible, des budgets pour les livres et les conférences.
🎯 NOTE IMPORTANTE : NOUS RECRUTONS DES PERSONNES, PAS DES RÔLES.
Si cette opportunité vous enthousiasme mais que vous ne cochez pas toutes les cases, nous serions ravis d'échanger avec vous. Toutes les personnes, y compris celles issues de groupes sous-représentés, devraient se sentir libres de postuler : soit on réussit, soit on apprend. Rappelez-vous, ceci est un guide, pas une liste exhaustive. #LI-DNP
Aurora is looking for a Staff Security Engineer Cloud Detection and Response to lead detection infrastructure projects, expand cloud and enterprise coverage, build detections, hunt threats, and respond to incidents.
Location: San Francisco; Washington D.C.; New York City
Workplace: Hybrid
We're hiring a Legal Response Specialist on Perplexity's Support team to handle legal and other sensitive tickets. You'll help Legal answer routine requests for information and support Governance, Risk & Compliance, or GRC, on privacy and security requests.
You'll review cases, write responses, and follow up until the work is done. Support Engineering owns the routing and safeguards that keep these tickets from being missed, answered by AI, or automatically closed.
RESPONSIBILITIES
- Monitor designated Support and Legal channels, assess urgency, and route requests for human review. Promptly escalate government, court, law enforcement, and legal-threat requests according to approved procedures.
- Respond to routine requests using Legal-approved templates and guidance. Escalate matters requiring legal interpretation or disclosure of user information.
- Answer routine requests for information under Legal's guidance. Gather account history and draft responses for matters that need review.
- Help GRC process data subject requests and meet deadlines. Follow approved identity-verification and data-handling procedures.
- Coordinate security questionnaires and data protection agreements, with Legal and GRC responsible for substantive review and approval.
- Track each case through completion, including after handoffs. Record decisions, follow up on deadlines, and confirm the work is done before closing.
- Work with Support Engineering to test routing, AI bypass rules, auto-close protections, and alerts. Investigate missed cases and verify fixes.
- Keep approved replies and handoff instructions current with Legal and GRC. Arrange backup coverage so cases keep moving when you're out.
- Handle other sensitive support escalations. Report backlog, response times, overdue cases, and recurring problems to Support, Legal, and GRC.
REQUIREMENTS
- 5+ years in support, trust and safety, legal or privacy operations, or compliance, ideally at a technology company.
- Experience handling legal, privacy, or law enforcement requests.
- Working knowledge of GDPR, CCPA, and data subject requests.
- Judgment about when to involve Legal or GRC, and care with confidential and privileged information.
- Clear writing, including in sensitive customer conversations.
- Ability to manage competing deadlines and follow through without reminders.
- Experience improving support processes with technical teams, including automation and AI safeguards.
NICE TO HAVE
- Experience with Intercom, Decagon, Linear, or Kodex.
- Paralegal, privacy, or compliance experience or certification.
- Experience with security questionnaires, SOC 2, ISO 27001, or HIPAA.
- Familiarity with AI products or data tools for case reviews.
ГибридSan Francisco; Washington D.C.; New York City
Location: San Francisco; Washington D.C.; New York City
Workplace: Hybrid
We're hiring a Legal Response Specialist on Perplexity's Support team to handle legal and other sensitive tickets. You'll help Legal answer routine requests for information and support Governance, Risk & Compliance, or GRC, on privacy and security requests.
You'll review cases, write responses, and follow up until the work is done. Support Engineering owns the routing and safeguards that keep these tickets from being missed, answered by AI, or automatically closed.
RESPONSIBILITIES
- Monitor designated Support and Legal channels, assess urgency, and route requests for human review. Promptly escalate government, court, law enforcement, and legal-threat requests according to approved procedures.
- Respond to routine requests using Legal-approved templates and guidance. Escalate matters requiring legal interpretation or disclosure of user information.
- Answer routine requests for information under Legal's guidance. Gather account history and draft responses for matters that need review.
- Help GRC process data subject requests and meet deadlines. Follow approved identity-verification and data-handling procedures.
- Coordinate security questionnaires and data protection agreements, with Legal and GRC responsible for substantive review and approval.
- Track each case through completion, including after handoffs. Record decisions, follow up on deadlines, and confirm the work is done before closing.
- Work with Support Engineering to test routing, AI bypass rules, auto-close protections, and alerts. Investigate missed cases and verify fixes.
- Keep approved replies and handoff instructions current with Legal and GRC. Arrange backup coverage so cases keep moving when you're out.
- Handle other sensitive support escalations. Report backlog, response times, overdue cases, and recurring problems to Support, Legal, and GRC.
REQUIREMENTS
- 5+ years in support, trust and safety, legal or privacy operations, or compliance, ideally at a technology company.
- Experience handling legal, privacy, or law enforcement requests.
- Working knowledge of GDPR, CCPA, and data subject requests.
- Judgment about when to involve Legal or GRC, and care with confidential and privileged information.
- Clear writing, including in sensitive customer conversations.
- Ability to manage competing deadlines and follow through without reminders.
- Experience improving support processes with technical teams, including automation and AI safeguards.
NICE TO HAVE
- Experience with Intercom, Decagon, Linear, or Kodex.
- Paralegal, privacy, or compliance experience or certification.
- Experience with security questionnaires, SOC 2, ISO 27001, or HIPAA.
- Familiarity with AI products or data tools for case reviews.
ГибридSan Francisco; Washington D.C.; New York City
Location: Paris; Lyon; Nice; Nantes; Bordeaux; Lille; Toulouse; Dijon; Strasbourg; Marseille; Montpellier
Workplace: remote
Ajax Systems est une entreprise technologique internationale et le plus grand fabricant de systèmes de sécurité en Europe, comptant plus de 4,5 millions d'utilisateurs finaux et 330 000 utilisateurs PRO dans plus de 180 pays à travers le monde. L'entreprise propose des solutions complètes pour la protection des habitations et des entreprises, quelle que soit leur envergure. À ce jour, le portefeuille de produits Ajax comprend 280 dispositifs dédiés à la protection contre les intrusions, à la vidéosurveillance, à la sécurité incendie, à la protection des personnes, ainsi qu'au confort et à l'automatisation. L'entreprise compte 5 000 collaborateurs.
Nous constituons des équipes locales, convaincus que les experts du terrain sont les mieux placés pour appréhender les spécificités de chaque marché. L'entreprise est représentée commercialement dans le monde entier, notamment en Italie, en Espagne, en Allemagne, en France, au Royaume-Uni, aux États-Unis, en Australie, en Afrique du Sud et dans de nombreuses autres régions.
L'équipe mondiale de Développement Commercial rassemble des collaborateurs partageant les mêmes valeurs et les ambitions d'Ajax Systems. L'alliance du meilleur logiciel et d'un matériel haute performance a définitivement transformé la perception des systèmes de sécurité, tant pour les utilisateurs que pour les professionnels du secteur. Présente dans les plus grands salons spécialisés — IFSEC, Expoprotection, Intersec — et récompensée par des prix prestigieux décernés par des médias de référence tels que PSI Magazine et GIT SECURITY, Ajax figure aujourd'hui parmi les systèmes de sécurité les plus primés d'Europe.
La production d'Ajax Systems repose sur quatre usines : deux implantées en Ukraine, une en Turquie et une au Vietnam. La certification ISO 14001 de l'entreprise garantit un impact environnemental maîtrisé tout au long du processus de fabrication. Le choix des composants entrant dans la conception des dispositifs Ajax est conditionné par la fourniture de déclarations de fabricants attestant de leur conformité aux exigences RoHS.
L'entreprise est née dans un contexte de révolution et de guerre. La résilience est donc au cœur de l'ADN de la marque, et la lutte contre le mal — par la création des meilleurs dispositifs de sécurité et d'automatisation — constitue la mission indéfectible d'Ajax.
Ajax Systems est une success-story ukrainienne, portée par une force et une énergie hors du commun.
Responsabilités :
Identifier et développer de nouvelles opportunités commerciales en adéquation avec la stratégie de croissance de l'entreprise.
Développer et entretenir des relations solides avec les clients clés, les partenaires et les parties prenantes.
Mener une veille marché active afin d'identifier les nouvelles tendances, opportunités et risques potentiels.
Analyser les données du marché pour élaborer et mettre en œuvre des stratégies commerciales efficaces.
Collaborer avec les équipes transverses pour garantir la livraison optimale des produits et services.
Préparer et animer des présentations auprès de clients et partenaires potentiels.
Négocier les contrats et accords avec les clients et les partenaires.
Gérer et prioriser plusieurs projets et initiatives de manière simultanée.
Compétences & Qualifications :
Plus de 5 ans d'expérience dans la sécurité incendie et la protection des personnes, ou dans un secteur similaire.
Solides connaissances techniques des systèmes de détection et de protection incendie.
Expérience avérée dans la maîtrise de l'ensemble du cycle de vente : identification de nouvelles opportunités commerciales, élaboration de propositions et de présentations, négociation et
closing
.
Capacité à concevoir et à mettre en œuvre des stratégies commerciales performantes.
Excellentes aptitudes relationnelles et communicationnelles, permettant de nouer des relations durables avec les clients, les partenaires et les experts du secteur au niveau décisionnel.
Solides compétences analytiques pour interpréter les tendances du marché, cerner les besoins des clients et proposer des solutions adaptées.
Capacité à gérer et à prioriser plusieurs projets et missions en simultané.
Bonne connaissance des dernières technologies et tendances en matière de sécurité électronique, notamment les solutions cloud et l'IoT.
Profil alliant expertise technique, maîtrise des techniques de vente et excellentes compétences en communication.
Nous offrons :
Un produit qui se vend de lui-même.
La liberté de prendre des décisions et de concrétiser vos idées.
Une culture transparente et sans fioritures.
Une équipe solide, soudée et hautement professionnelle.
Des missions ambitieuses et des défis stimulants.
L'opportunité de travailler avec le système de sécurité le plus reconnu du marché et d'évoluer dans votre carrière.
Location: India; Vietnam; Indonesia; Philippines; Thailand; Pakistan
About us
Paired
is a
global staffing and recruiting agency
that specializes in pairing remote work with top-tier talent!
We are dedicated to connecting talented individuals with remarkable companies in need of their skills. Our goal is to create fulfilling job
opportunities for professionals around the world
.
About the Role
We’re hiring a
Direct-Response Video Editor for a fast-growing DTC brand
to work remotely with their team.
The brand runs fast-paced direct-response ad campaigns, mainly on Meta and TikTok, and launches new products and collections often. You’ll edit short-form videos for both paid ads and organic content, mostly b-roll with text overlays and founder UGC (launch announcements and direct-to-camera informative videos). You’ll work closely with a small, friendly marketing team on time-sensitive campaigns where clear communication and quick turnaround matter.
Job Responsibilities
Day to Day
Brainstorm ad and content ideas with the marketing team.
Edit short-form videos for Meta and TikTok, for both paid ads and organic content.
Deliver finished, clean videos with captions, on-screen text and royalty-free music.
Build strong hooks, keep viewers watching, and highlight the CTA to drive conversions.
Apply feedback from review rounds and re-submit without delays.
Track ad performance data and use it to guide future edits.
Follow brand guidelines and approved wording in all on-screen text and captions.
What We’re Looking For
Someone who understands proper hooks, viewer retention and how to drive conversions with a clear CTA.
Willingness to learn the brand’s community, including its mindset and needs. The audience is the community, and every ad is tailored to what they expect.
Respect for brand compliance. For example, the brand talks about the
resistance
its tools offer, not
magnet strength
, and avoids restricted terms and wording that lacks empathy.
Experience with founder-led or UGC-style content is a plus.
Requirements
Proven experience editing direct-response or performance video ads.
Full proficiency in professional editing software.
Strong English: scripts, videos and all team communication are in English, so you need to catch any wording, spelling or grammar mistakes.
Close attention to detail in short, fast-paced videos, even with multiple review rounds in place.
Ability to work quickly and reliably on time-critical launches.
Benefits
Competitive base salary. The base range is $1,500–$2,500 USD per month. Where you land depends on your experience and portfolio.
It's a creative-ownership role, with room to grow into scaling larger-budget campaigns.
100% remote work flexibility from anywhere.
Dynamic, fast-paced team culture focused on innovation and high-impact growth.
Collaborate with ambitious creators and e-commerce growth experts.
Detection & Response engineers own their detections end to end: you write them, you tune them, and your team is paged when they fire. The security team is spread across the globe with a follow-the-sun pager rotation so nobody is paged at 3am local.
Удалённоseniorfrom investigations, and partner closely with the US-based team so context carries across time zones instead of getting lost at handoff
Location: United States
About Gramian
Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs.
About the Role
We are looking for a detail-oriented Business Analyst – AI Evaluation Specialist to support a project focused on assessing and comparing chatbot responses. You will evaluate multiple AI-generated outputs against defined business requirements and quality criteria, analyze business processes, and deliver structured assessments that help improve the accuracy and usefulness of AI systems. The ideal candidate combines strong business analysis, data interpretation, requirements documentation, and critical evaluation skills with the ability to communicate clear, evidence-based conclusions.
Key Responsibilities
Gather, analyze, and document business requirements, stakeholder expectations, and project objectives.
Compare multiple chatbot responses and assess their accuracy, relevance, completeness, and alignment with defined evaluation criteria.
Conduct structured evaluations and provide clear, evidence-based final assessments of AI-generated outputs.
Translate business requirements into functional specifications, evaluation criteria, and actionable documentation.
Analyze workflows, business processes, and data to identify gaps, inefficiencies, and improvement opportunities.
Create reports, dashboards, process maps, and other project documentation.
Support project planning, testing, implementation, and user acceptance testing (UAT).
Collaborate with technical teams and business stakeholders to ensure project requirements are understood and met.
Track project progress, risks, dependencies, and key performance indicators (KPIs).
Present findings, insights, and recommendations to support informed decision-making.
Maintain consistent evaluation quality and meet project deadlines and task completion targets.
Requirements
Bachelor's degree in Business Administration, Finance, Computer Science, or a related field.
At least 3 years of professional experience as a Business Analyst or in a similar analytical role.
Strong analytical thinking, problem-solving, and decision-making skills.
Proficiency in Excel and experience with SQL, Power BI, Tableau, or comparable analytical and reporting tools.
Experience gathering requirements, documenting functional specifications, and mapping business processes.
Strong attention to detail and the ability to compare complex information against defined criteria.
Excellent written communication, reporting, and documentation skills.
Ability to collaborate with cross-functional teams and manage multiple priorities independently.
Willingness to work five days per week, including weekends when required, with two weekdays off during the project.
Own our detection coverage across Defender XDR, Entra ID, Sentinel, Microsoft Graph, Azure, and Microsoft 365 — from raw signal through to shipped, tuned detections. Build and maintain a living map of Microsoft security signal: what exists, known ingestion lag, where it lands, what gates it, how long it's kept, and how far you can trust it.