Вакансии

Fastly is seeking a Threat Detection Analyst for the APAC region who is Japanese speaking. The role is part of the Fastly Customer Security Operations Center (CSOC) team, focusing on operational support of Fastly’s security products and services, particularly integrating and supporting agent software installed on customer systems. The position involves monitoring and analyzing customer activity with emphasis on security functions such as identifying account-takeover, Bot Attacks, and WAF administration, focusing on application layer security and web technologies. The role requires working Friday to Tuesday, 0000 - 0800 UTC (9am - 6pm AEST). Responsibilities include: — Ensuring security for customers and providing outstanding responses to security issues. — Providing deep application-security expertise on escalated cases from customers and automated systems. — Conducting continuous improvement and research to enhance customer security products and operations. — Contributing to processes and policies to scale the organization. — Creating and reviewing security service reports for customers. — Creating and managing security content for customer environments. Requirements: — Prior experience working in a SOC environment. — Experience with SaaS/Cloud or hybrid cloud deployments; Apache, NGINX, IIS or other web server platforms and associated application server technologies and frameworks. — Scripting skills in Python, Java, Go, Rust, PHP, Unix/Linux Shell, C#, or other common web languages. — Strong information security background with practical skills in application security. — Experience in IT or security technical support, operations, or research roles. — Unix/Linux or Windows system administration skills. — Ability to work with limited supervision and mentor others on security knowledge. — Fluent spoken and written English, adaptable to different audiences. — Experience troubleshooting software products. — Focus on delivering exceptional customer experiences. Work hours require availability during core business hours. The position is remote based with potential to become hybrid as Fastly expands in the region. Travel to the US and internationally may be required. Benefits include a comprehensive package starting from day one, with variations depending on country. Fastly emphasizes a positive work environment, diversity, inclusion, and support for employees' passions and causes. Applications must be submitted through Fastly's official careers site. Fastly is an equal opportunity employer committed to a safe and welcoming work environment free of discrimination and harassment. Reasonable accommodations are available for applicants with disabilities.

Зарплата не указана

Location: Home based - Worldwide The Threat Intelligence Lead will own Canonical’s threat intelligence strategy and execution, including understanding of which cyber threat actors are targeting Canonical, and the use of intelligence on Tactics, Techniques and Procedures (TTP) to better our products and internal cybersecurity controls. You will collaborate with internal stakeholders as well as with the wider cybersecurity community, making sure that Canonical is recognised as a thought leader on open source threat intelligence. This role will report to the CISO. You will lead intelligence gathering and development activities on threat actors targeting software supply chains. You'll study attack trends across the wider open source software landscape, report findings to internal security teams, and advise the wider engineering community on the best course of action to detect and mitigate possible threats. As the publisher of Ubuntu, Canonical products are directly or indirectly present in almost every organisation and household in the world, making them a prime target for threat actors. This team's mission is to help Canonical, and by extension countless community members and companies around the world, secure their software infrastructure. What you’ll do in this role Build and own Canonical’s threat intelligence strategy Build and maintain OSINT research environments Develop OSINT tradecraft, principals, and techniques Identify and track targeted intrusion cyber threats, trends, and new developments by cyber threat actors through analysis of proprietary and open source datasets Collaborate across teams to inform on activity of interest Coordinate adversary/campaign tracking Contribute to the wider threat intelligence community, establishing Canonical as a key contributor and thought leader in the space Work with product and engineering teams to explain cybersecurity threats and advise on mitigation strategies Work with the OPSEC and IS team to help implement/update security controls prioritising cyber defence Identify intelligence gaps and propose new tools and research projects to fill them Conduct briefings for executives, internal stakeholders and external customers The successful Threat Intelligence Lead will be An experienced threat intelligence leader (or similar) Knowledgeable about the current open source threat landscape and computer networking/infrastructure concepts Highly competent with OSINT tools (e.g., Buscador, Trace Labs OSINT VM, OSINT Framework, Maltego, Shodan, social media scraping tools, etc.) Able to identify, organise, catalogue, and track adversary tradecraft trends — often with incomplete data Experienced using threat intelligence data to influence enterprise architecture or product development decisions An excellent communicator with the ability to clearly articulate and tailor technical content to a variety of audiences Able to travel twice a year, for company events up to two weeks long Desired Characteristics A professional portfolio of OSINT related scripts, tools, or frameworks Demonstrated involvement in the larger OSINT community (please share relevant links) Degree qualified, with a bachelor's degree in computer science, information security, or a related field Certifications in related areas (e.g. GOSI, SANS SEC487 & SEC587, IntelTechniques OSIP, etc) Experience in a tech company or government/military signal intelligence departments What we offer you We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. Distributed work environment with twice-yearly team sprints in person Personal learning and development budget of USD 2,000 per year Annual compensation review Recognition rewards Annual holiday leave Maternity and paternity leave Employee Assistance Programme Opportunity to travel to new locations to meet colleagues Priority Pass, and travel upgrades for long haul company events About Canonical Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004.​ Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical is an equal opportunity employer We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration. #LI-remote

Identify, generate, qualify, and close new business for customers and prospects in a defined territory. Responsible for managing the full sales lifecycle, and building the go-to-market.

Зарплата не указана

Location: Poland; Brazil; Peru; Sweden; Argentina; Romania; Cyprus; Czech Republic; Hungary; Mexico; Chile; Bulgaria Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. Before you apply, we encourage you to explore our culture page https://www.kraken.com/culture to understand what drives us and how we work. THE TEAM xStocks brings real-world assets on-chain as tokenized securities that are regulated, fully-backed, and tradable across multiple blockchains. Built within Payward, the xStocks team runs the infrastructure that issues, custodies, and settles these instruments across EVM, Solana, TON, Tron, and more. The platform moves real value, so security is not a feature bolted on at the end. It is a property of everything the team ships. This is a hybrid engineering and security seat built for someone who is genuinely both: you ship products alongside the engineering team when the security queue is quiet, and you own security work end to end when it lands. You report into engineering and partner closely with the Payward security, CISO, and compliance functions. THE OPPORTUNITY - Own security deliverables end to end. Coordinate and review smart-contract audits, respond to security questionnaires and due-diligence requests, support CISO and compliance initiatives, and turn findings into tracked, closed-out fixes. - Run offensive assessments against our own platforms. Pentest the web apps, APIs, backend services, and on-chain components, and build the tooling to do it repeatedly rather than once. - Continuously assess posture. Threat-model new and existing systems, review architecture and key-management flows, and maintain a living view of the risks and their mitigations. - Review code for security. Be a default reviewer on changes touching auth, cryptography, custody, signing, and fund movement across our chains. - Harden the platform. Improve secrets handling, IAM and least-privilege, dependency and supply-chain hygiene, and detection and logging for security-relevant events. - Secure custody and signing workflows. Review and harden transaction signing flows, MPC and HSM integrations, signer permissions, admin roles, approval policies, and break-glass procedures. - Contribute to product engineering. Pick up regular backlog work in TypeScript so you stay close to the codebase you are defending. - Support incidents. Help with detection, triage, response, and post-mortems, and feed the lessons back into the program. WHAT YOU BRING - An engineer first. You write and review production code comfortably, TypeScript and Node.js in our stack, and you understand systems deeply enough to break them. - Strong application and infrastructure security fundamentals. The OWASP-class vulnerability landscape, authn and authz, injection, SSRF, supply-chain risk, and secure design. You have done real offensive work in pentesting, vuln research, or red-team. - Applied cryptography and blockchain security. Symmetric and asymmetric primitives, hashing, signatures, and key management, plus the security model of EVM, Solana, and ideally TON or Tron. You can read a smart contract and reason about how it fails. - Ownership. You can take an ambiguous security item, an audit, a questionnaire, or an incident, and drive it to closure without being managed through it. - Clear communication. You can explain a risk to engineers, to a CISO, and to an auditor, and tailor the message to each. - An automation instinct. You do not want to catch the same issue manually twice, so you turn findings into tests, alerts, controls, documentation, or platform improvements. - Risk judgment. You can tell a theoretical issue from a material one, and communicate severity, likelihood, impact, and remediation tradeoffs clearly. NICE TO HAVE - Experience commissioning or remediating third-party smart-contract audits. - Familiarity with custody and signing infrastructure such as HSMs, MPC, and ForDefi-style providers, and with on-chain transaction security. - Cloud security depth in GCP or AWS, IAM, and container and runtime hardening. - Detection engineering and security observability, including SIEM and log-based detections. - Relevant certifications such as OSCP, OSWE, or GWAPT. - Prior work in a regulated fintech or tokenization/DeFi environment. Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Анализ кода и поведения вредоносных программ под Windows и Linux, реверс‑инжиниринг; Отслеживание актуальных угроз, кампаний и техник атакующих (публичные отчёты, threat intelligence, свежие образцы);

Зарплата не указана

cоздавать и развивать сервисы SOC; формировать IR команды;

320 – 480 ₽

Runpod is looking for a Director of Security to lead security strategy, compliance, secure development, incident response, and security operations.

125 000 – 220 000 $

Anthropic is looking for a Senior Staff Security Engineer to lead incident response and build threat detection and response capabilities.

Зарплата не указана

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $400M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. We are excited to welcome a Junior Engineer to join our Application Security team at 1Password. Application Security helps enable 1Password to build and deliver secure products with confidence. We’re responsible for 1Password’s Secure Software Development Lifecycle and related security activities like design review and architecture guidance, threat modelling, software supply chain security, and a suite of automated security tooling. As part of the Application Security team, this Junior Engineer will focus primarily on building and maintaining new or existing security tooling, including static analysis, dynamic analysis, code scanning (sage) and emerging agentic AI solutions.   How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is a remote opportunity within Canada and the US. What we're looking for: - You have 0-2+ years of experience in software development - You have a passion and curiosity for security engineering, including but not limited to topics of secure coding, pentesting, vulnerability analysis, security design and architecture - You have strong experience, demonstrated through project work or real world experience, leveraging agentic AI capabilities to accelerate security workflows, automate repetitive tasks, or enhance detection and remediation efforts - You have experience with internal tool development and engineering enablement - You have a strong foundational understanding of software development principles, and are comfortable reading and writing code - You work well in a team environment with positive communications amongst a variety of technical and non-technical stakeholders - You’re adaptable and resilient, thriving in fast-paced environments with shifting priorities   Bonus points for: - Experience with Rust and/or Golang, or a demonstrated ability to pick up new languages quickly. - Experience conducting security code reviews, design architecture guidance, threat modelling - Practical or hands-on experience with web application security topics, including but not limited to topics in OWASP Top 10.   What you can expect: - Work within a small team of Application Security Engineers focused on minimizing security risk across our SSDLC - Work with cross functional partners across Security, Product Engineering, Marketing, CX and more on the security parameters of new features across 1Password’s product suite - Design, build, integrate and scale new agentic AI capabilities to enable secure product development activities - Enhance and maintain existing security tools in a variety of areas including static analysis, dynamic analysis, code scanning, and more. - Develop and maintain comprehensive dashboards and reporting metrics around our security risk program, tailored to different audiences (technical, non-technical, compliance, senior leadership, etc.)   USA-based roles only: The annual base salary for this role is between $100,000 USD and $140,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $85,000 CAD and $119,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. Our culture At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. How we work with AI We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password. This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing 👶 Maternity and parental leave top-up programs 🩺 Competitive health benefits 🏝 Generous PTO policy Growth and future 📈 RSU program for most employees 💸 Retirement matching program 🔑 Free 1Password account Community 🤝 Paid volunteer days 🏆 Peer-to-peer recognition through Bonusly 🌎 Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting. You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Location: North America Workplace: Remote At Linear, we're building the product development system for teams and agents. AI is fundamentally changing how software gets built, and we’re shaping the tools this new era requires. Founded in 2019, Linear has become the platform of choice for more than 30,000 companies (including OpenAI, Coinbase, and Ramp) to plan, build, and ship their products. Today, our team is distributed across North America, Europe, and Australia, and we’re continuing to grow internationally. What unites us is relentless focus, fast execution, and a deep care for software craftsmanship. At Linear, we are committed to quality. Security is an essential part of that quality — not a layer that we add later, but something we build in from the start. We have a foundational security program we're proud of but, as Linear evolves our product and scales into enterprise, there's meaningful work ahead: staying ahead of vulnerabilities as our attack surface grows, responding fast and cleanly when incidents happen, and hardening our product and infrastructure. As Security Engineer at Linear, you'll be operating in a high-autonomy role with real scope, doing hands-on security work across the product and infrastructure we build. Location & work mode Linear is a remote-first company. This role is open to candidates based in North America. You can work from anywhere within this region. We value deep focus and async collaboration, with intentional moments to connect in person through team off-sites, optional co-working, and occasional travel. What you’ll do Depending on your experience / skillset and our broader priorities, you could: - Operate, automate, and extend vulnerability management end-to-end: triage, prioritize, and drive remediation across product, infrastructure, and dependencies, and keep the program’s SLAs meaningful rather than theoretical - Run our bug bounty program: triage incoming reports, validate severity, work with engineering on fixes, and keep researcher relationships professional and responsive - Lead product security testing: threat model new features (including AI/agent-facing surfaces), review designs and code for security-relevant risk, and do hands-on testing (manual and tool-assisted) rather than relying solely on scanners - Be a primary responder for security incidents: lead investigation and containment, drive postmortems, and turn lessons into concrete hardening work - Own meaningful chunks of our cloud/infra security posture on GCP/k8s/Postgres: harden configurations, close gaps surfaced by audits or scanning, and partner with infra engineering on secure defaults - Build and maintain security tooling and automation, including using AI/LLM tooling to speed up triage, code review, and repetitive investigation work, so the program scales without linear headcount growth - Partner with the GRC/Trust function: feed real findings into the risk register and control evidence, and help make sure compliance requirements reflect actual engineering practice What we’re looking for - A generalist, senior-level security engineer (5+ years across security engineering, with real depth in at least two of: vulnerability management, product/appsec testing, incident response, and cloud security). We need breadth, rather than a narrow specialist in any one of these. - Hands-on and technical: you can read and reason about code (we use a lot of TypeScript), you’re comfortable in cloud environments (GCP a plus), and you can go deep on a finding rather than just filing a ticket for someone else to fix. You’re comfortable using AI coding/security tools as force multipliers (Linear Agent, Claude, Codex, etc). - Calm under pressure: you can lead an incident from first alert through postmortem without needing to be told what to do next - A builder: you’d rather write a script or ship a tool than repeat a manual process a third time - A pragmatic risk-reducer: you optimize for actually reducing risk, not for checking a box or maximizing findings count - Autonomy-oriented: comfortable setting your own priorities, working with significant independence, and knowing when to escalate - A clear communicator: able to explain a technical finding to a non-technical stakeholder and write it up so it’s actually actionable Our tech This is a hands-on security engineering role. You'll be running tools, reading/writing code, building detections, working in our cloud environment, and partnering closely with the engineers who build our product. Our stack is fronted by Cloudflare and runs on Google Cloud with k8s, Postgres, and Node. For day-to-day work, we use: - Linear, GitHub, Slack, and Google Workspace for collaboration - Claude and ChatGPT for general & engineering-specific AI tasks - Vanta for compliance automation and evidence collection Our security-specific tooling includes: - GitHub Advanced Security - RunReveal - SentinelOne What we offer We're a small, focused team that cares deeply about the quality of our work and the people we do it with. Here's what you can expect: - Competitive salary and equity - Employee-friendly equity terms including early exercise in the US and extended exercise windows - Daily meal and coffee stipend on every workday - Paid co-working space or desk - Health coverage (based on country requirements) - 5 weeks paid vacation, plus local statutory holidays - 4 months paid parental leave - Paid month off after 4 years & every 2 years thereafter - Regular team events and off-sites - Remote-first with no required commute Learn how we think and work - Read Me https://linear.app/readme a story about our mission - Our hiring process: How we hire at Linear https://linear.app/now/how-we-hire-at-linear - How we work: Designing remote work at Linear https://linear.app/now/designing-remote-work-at-linear - Why and how we do work trials https://linear.app/blog/why-and-how-we-do-work-trials-at-linear Linear blog post - How we use AI in design https://designerfund.substack.com/p/ai-design-linear feature of Linear's design team - Scaling our real-time sync engine https://linear.app/blog/scaling-the-linear-sync-engine talk by our cofounder, Tuomas Artman, at Linear's 2023 offsite - Our recent tender offer: Sharing Linear’s growth with the people building it https://linear.app/now/sharing-growth-with-the-people-building-linear Linear is an equal opportunity employer. We do not discriminate based on race, color, religion, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic under applicable law.

Location: Hong Kong Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. Before you apply, we encourage you to explore our culture page https://www.kraken.com/culture to understand what drives us and how we work. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. Kraken’s VIP team supports the firm’s highest-value private clients: high-net-worth individuals who expect a premium, secure, and deeply tailored experience. We ensure Kraken remains the exchange of choice for VIPs through white-glove relationship management, personalized trading enablement, and high-impact benefits. We are looking for a Head of VIP, Asia to lead and grow Kraken’s VIP presence across the region. This is a player-coach role: you will build and lead a small, high-performing team while personally owning strategic client relationships, originating new business, and shaping the regional growth playbook. You will set the standard for how Kraken serves, retains, and grows its most valuable private clients in Asia. You will be equally comfortable in a senior client meeting, building an introducer network, coaching a relationship manager, hosting a VIP event, and partnering internally to remove the product or operational barriers that cost us high-value business. Kraken’s VIP program is unique, and we intend to keep it that way. We don’t copy what other exchanges and desks do. You’ll take what makes our program different and adapt it to how Asia’s VIP clients actually trade, network, and build trust. That means testing new ideas, learning fast, dropping what doesn’t work, and scaling what does. If you’re bold, comfortable with ambiguity, and humble enough to fail fast and move on, this is your seat.     THE OPPORTUNITY - Lead, coach, and develop VIP relationship managers in Asia; establish clear standards for client coverage, pipeline management, service quality, and commercial performance. - Build the operating model for VIP growth across Asia, including territory coverage, account segmentation, referral strategy, events, and performance reporting. - Own regional AOP growth, net deposits, client assets, trading volume, retention, and revenue performance. - Build a repeatable pipeline of qualified high-value clients through direct outreach, referrals, introducers, family offices, proprietary trading firms, OTC desks, miners, project treasuries, and high-volume traders. - Represent the voice of Asia’s VIP client base internally: identify competitive threats, regional market dynamics, product gaps, and opportunities that influence where private-client capital trades. PERSONALLY OWN STRATEGIC CLIENT RELATIONSHIPS - Own and grow Kraken's most strategically important private client relationships across Asia, bringing our full VIP offering - ranging from trading and asset management to other services - to market locally, within Kraken's compliance and risk framework. - Serve as the senior relationship owner for Kraken’s largest and most strategically important private clients across Asia. - Bring Kraken’s VIP and private-client offering to market locally, including spot, margin, futures, OTC execution, earn and yield opportunities, lending, and tailored benefits. - Build trusted, durable relationships while ensuring every client interaction and commercial initiative operates within Kraken’s licensing, compliance, and risk framework. BUILD REGIONAL PRESENCE AND PARTNERSHIPS - Develop Kraken’s presence in Asia’s VIP trading and investor communities, including private trading groups, investor clubs, KOL and trader networks, and closed-door investor circles. - Design and lead high-quality regional programming, including VIP dinners, trader meetups, conference-adjacent events, and partner activations, in collaboration with Marketing and Regional teams. - Build and manage introducer and referral partnerships that create a durable source of qualified VIP opportunities. - Partner with Product, Marketing, Compliance, Banking, Client Service, and Operations to launch regional growth initiatives and improve the client experience.     WHAT YOU BRING - 7+ years of experience in VIP relationship management, private banking, brokerage, private-client sales, account management, or business development, including meaningful experience in crypto or digital assets. - Demonstrated people leadership experience, with the judgment and practical coaching ability to lead a small team while remaining hands-on with strategic clients and revenue opportunities. - A strong personal network among Asia’s crypto HNWIs, traders, family offices, OTC desks, funds, or trading communities. Experience across Greater China, Hong Kong, Taiwan, or Singapore is especially valuable. - A proven record of personally originating and converting new business, not solely servicing an existing client book. - Deep knowledge of crypto market structure and trading solutions, including spot, margin, futures, OTC, lending, tokenized equities, and yield/earn products. - Strong commercial judgment and comfort managing KPIs including assets on platform, net deposits, revenue, trading volume, retention, pipeline conversion, and client portfolio growth. - Native or near-native Mandarin and fluent English. - Comfort operating across multiple regulated Asian jurisdictions, with sound judgment on when to engage Compliance and Risk partners early. - Willingness to travel up to 30% across the region for strategic client meetings, events, and conferences.           Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Location: Canada; San Francisco; United States; New York; Ottawa; Toronto; Montreal Workplace: Remote WHO ARE WE? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! WHY THIS ROLE? This role is for a highly experienced Back-End Software Engineer who wants to work on core systems that shape how the platform (Model Vault) operates. You will help define the architecture of the platform where reliability, security, performance, and simplicity all matter, and where many of the problems do not have off-the-shelf solutions. Model Vault is Cohere’s inference platform for deploying and operating models securely at enterprise scale. The team owns the systems between a customer and the underlying AI infrastructure, including identity, deployments, metering, billing, security, privacy, and confidential computing. We are strengthening these systems as Model Vault grows, with the goal of scaling to millions of users and supporting some of the world’s most demanding enterprise workloads. AS A SENIOR/STAFF SOFTWARE ENGINEER, YOU WILL: - Evolve and scale the backend systems that power Model Vault, including authentication and authorization, deployment management, billing, metering, and customer lifecycle. - Lead major architectural initiatives across identity, payments, usage systems, platform scalability, and other core product foundations. - Build highly reliable control-plane services for provisioning, configuring, scaling, and operating model deployments across clouds and hardware platforms. - Design APIs and distributed systems with strong guarantees around correctness, consistency, isolation, failure recovery, idempotency, and observability. - Build security and privacy into the platform architecture, including tenant isolation, least-privilege access, auditability, secrets management, encryption, and confidential computing boundaries. - Solve complex problems that span backend systems, cloud infrastructure, security, and AI inference, where conventional SaaS patterns are often not enough. - Drive projects end-to-end, from architecture and threat modeling through implementation, rollout, production operations, and iteration based on real customer workloads. YOU MAY BE A GOOD FIT IF: - You are a strong backend engineer with excellent fundamentals in distributed systems, databases, networking, operating systems, and security. - You have strong programming fundamentals and experience building production systems in languages such as Go, Python, Java, C++, Rust, or similar. You write clean, maintainable, well-tested code and make thoughtful tradeoffs between simplicity, performance, and correctness. - You have designed and operated production systems where correctness, availability, security, and performance mattered at significant scale. - You can take ambiguous, high-impact technical problems, define the right architecture, and drive them through to reliable production systems. - You have strong systems-design instincts and understand concepts such as concurrency, consistency, caching, queues, rate limiting, backpressure, failure domains, idempotency, and graceful degradation. - You think deeply about security boundaries and understand authentication, authorization, identity, cryptography, secrets, tenant isolation, and how small implementation choices can create significant security risks. - You are comfortable reasoning across backend services, APIs, databases, distributed systems, and the cloud infrastructure they run on. - You are comfortable diving into unfamiliar codebases and debugging complex problems that cross service or system boundaries. - You care about the details of production engineering, including instrumentation, capacity planning, migrations, backwards compatibility, incident response, and safe rollouts. - You are comfortable challenging existing architecture and evolving foundational components when the system’s needs change. - You have a track record of taking technically difficult projects from an unclear starting point to systems that other engineers and customers depend on. FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS: - A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch. - Full health and dental benefits, including a separate budget for mental health. - RRSP matching, 401K, Pension Scheme. - 100% Parental Leave top-up for up to 6 months, for either parent. - Annual enrichment benefits: Arts & culture, fitness/wellness, quality time, and a workspace improvement credit. Education & learning stipend for conferences, courses, and coaching. - 6 weeks of paid vacation (30 working days!) - Budget for traveling to other offices if you are remote, plus an annual company offsite. HOW AND WHERE WE WORK: - Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon. - For those in the office: a daily lunch program, plenty of snacks, and regular community and social events. - For those not near an office: a co-working benefit so you can work alongside others in your city. - Everyone receives a $500 home office stipend to set up your workspace properly. If any of the above doesn’t line up exactly with your experience, we still encourage you to apply. We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs. We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider. Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.

Задачи: — Самостоятельное выявление угроз, анализ рисков, расследование инцидентов и внедрение технических мер защиты. — Полный цикл Incident Response: Detect → Analyze → Assess Risk → Contain → Remediate → Verify → Document. Требования: — Опыт в Cybersecurity / Information Security от 3 лет. — Уверенное администрирование Linux, Server Hardening. — Глубокое понимание TCP/IP, DNS, HTTP/HTTPS, TLS, VPN. — Практический опыт с Firewall, WAF, IDS/IPS, SIEM, Cloudflare и DDoS Protection. — Vulnerability Management (Nessus, OpenVAS, Qualys), CVE/CVSS. — Web/API Security, OWASP Top 10. — Анализ логов, расследование Security Incidents, работа с IOC. — Управление доступом: RBAC, MFA, PAM, Least Privilege. — Автоматизация задач безопасности — Bash/Python. — Реальный опыт проектирования и внедрения Zero Trust / ZTNA, а не только теоретические знания. — Identity-based Access, Device Trust, Conditional Access, Microsegmentation. — Интеграция с IAM/SSO/IdP, контроль привилегированного доступа. — Опыт с Cloudflare Zero Trust, Teleport, CyberArk, Tailscale, Zscaler или аналогичными решениями. Будет преимуществом: — AWS/Azure/GCP Security, Kubernetes Security, Wazuh, Suricata, Pentest, Threat Modeling, ISO 27001, PCI DSS. Условия: — Локация: Пафос, Кипр (офис). — График: 09:00–18:00. — Зарплата: €6 000–8 000 / месяц. Важно: — Нанимающая компания не рассматривает граждан РФ. — Кандидаты без практического опыта внедрения Zero Trust / ZTNA не рассматриваются.

6 000 – 8 000 €

Location: New York, NY (HQ) Workplace: Hybrid ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. ABOUT THE ROLE Ramp is hiring its first dedicated Physical Security Lead to build and run the program that protects our people, our leaders, our events, and our offices. Our footprint now spans a multi-floor New York headquarters, Ramp-managed offices, and a growing set of hubs across North America and Europe. Our leaders are increasingly visible on public stages. You'll own three areas in roughly equal measure: executive protection, event security, and office security (access control, cameras, guards, and building security). Your job is to turn a set of strong vendors and partner teams into one measurable, risk-based program. This is a high-ownership IC role on the Corporate Security team. It reports to the Director of IT & Corporate Security and is based at our NYC HQ. This is a physical security role; cybersecurity and information security are owned by other Ramp security teams. We aren't looking for a guard supervisor or a box-checker. We want someone who makes it safe for Ramp to move fast, host great events, and keep our leaders accessible. WHAT YOU'LL DO - Build and run Ramp's executive protection program: - Protective risk assessments and residential security reviews. - Domestic and international travel security. - Advance work for high-visibility appearances. - Selecting, standing up, and managing our executive protection provider. - Turn threat intelligence into protective action. Partner with Detection & Response to move from online threat and exposure monitoring to threat assessments, personal-information exposure reduction, and clear escalation playbooks. - Own security for internal and external events, from all-hands and offsites to conferences, customer events, and executive dinners: - Risk-tiered intake and written security plans. - Coordination with venues and vendors. - On-site leadership for the highest-risk events. - After-action reviews. - Set Ramp's global physical security standards for access control, video surveillance, intercoms, visitor management, and alarm monitoring. Tier them for headquarters, Ramp-managed offices, and flexible or serviced hub spaces. - Build security into every new office, move, and expansion: - Write the security design requirements and review drawings. - Manage integrators through installation and acceptance testing. - Partner with IT on network and identity integration. - Manage the guard program and security vendors end to end: scope, post orders, SLAs and KPIs, budget, and quarterly business reviews. Own the security relationship with landlords and building management. - Lead emergency preparedness and physical incident response: - Emergency notifications, evacuation and shelter-in-place plans, and drills. - Liaison with local law enforcement. - Workplace-violence prevention, in partnership with People and Legal. - Run physical access governance with IT. Tie access to joiner/mover/leaver events, run regular access reviews, and keep audit-ready evidence for physical security controls. - Measure and report program health to leadership. Use AI and automation to scale the program without scaling headcount. WHAT YOU NEED - 6+ years in corporate or physical security, including 3+ years owning a security program or major workstream at a multi-site company. Executing someone else's program doesn't count toward this. - Hands-on depth in at least two of the three areas (executive protection, event security, physical security systems such as access control and cameras) and solid working knowledge of the third. - Experience administering or deploying enterprise access control and video platforms (e.g., Avigilon Alta/Openpath, Verkada, Genetec, LenelS2), and partnering with IT on networking and SSO. - A track record of managing security vendors (guard, protection, integrator, event staffing) through contracts, SLAs, budgets, and performance reviews. - Strong risk judgment. You size controls to the actual threat, explain the tradeoffs, and lead with "here's how we do this safely" rather than "no." - Excellent writing. You can produce a crisp SOP, an event security plan, and a one-page executive brief. - Willingness to work from our NYC office 4 days a week, travel 10–15%, support occasional evening and weekend events, and serve as primary on-call for physical security incidents (with the Director as backup and guard and vendor partners as on-site first response). - Real, day-to-day use of AI tools in your work. NICE-TO-HAVES - ASIS CPP or PSP; formal executive protection training; first aid or Stop the Bleed certification. - Experience at a high-growth tech, fintech, or financial services company with a high-profile founder or CEO. - Experience writing security design standards for office buildouts and reading architectural or low-voltage drawings. - Familiarity with physical and environmental control requirements in SOC 2, PCI DSS, or FedRAMP. - A government protective, law enforcement, or military background, combined with corporate program ownership. - An established network of protection, event security, and integrator vendors in NYC, SF, and internationally. FAIR WARNING - This is a builder role. Parts of the program exist today (vendors, a responsibility matrix, some SOPs). You'll turn them into a system. - You're an IC who directs vendors and partner teams, not a manager of a security staff. You'll need to influence Workplace, Events, IT, Executive Assistants, People, and Legal without formal authority. - Security at Ramp enables the business. Events still happen, offices stay welcoming, and executives stay accessible. Your job is to make that safe. - Evenings, weekends, and travel come with the territory, especially around major events. BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Ищем сильного Security Engineer с практическим опытом защиты инфраструктуры, расследования инцидентов и проектирования архитектуры безопасности. • Опыт в Cybersecurity / Information Security от 3 лет.

6 000 – 8 000 €

-Встраивать и сопровождать процессы SSDLC / DevSecOps в CI/CD. -Настраивать и развивать инструменты SAST, DAST, SCA, Secret Detection, снижать количество ложных срабатываний.

Зарплата не указана

Squads is looking for a Senior Security Engineer Product and Infrastructure to lead product and infrastructure security, conduct reviews, manage vulnerabilities, and strengthen secure development practices.

175 000 – 220 000 $

Location: Berlin Office; Bosnia; Norway; Estonia; Latvia; Slovenia; Netherlands; Hungary; Kosovo; Portugal; Poland; Serbia; Germany; Austria; Finland; Montenegro; Albania; Lithuania; Slovakia; Ireland; Bulgaria; Denmark; Belgium; Czech Republic; United Kingdom; Croatia; Spain; Greece Workplace: Remote The AI orchestration of your wildest imagination. n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits. Backed by a fiercely inventive community and 500+ builder-approved integrations, we’re changing the way people bring systems together and scale ideas for impact. Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve: - Cultivated a community of more than 650,000 active developers and builders - Earned 190K+ GitHub stars, making us one of the world’s Top 40 most popular projects - Backed by top investors, from Sequoia’s first German seed to our SAP's recent strategic investment - bringing us to a $5.2bn valuation That’s the company we’ve built. Now we’d love to see what you can build. If you’re applying, try n8n out - whether you’re technical or not - and share a screenshot of your first workflow with us. The easiest place to start is here: app.n8n.cloud/register http://app.n8n.cloud/register. We’re in a defining moment of an incredible journey. Come and build with us. 🎯 Your main goal will be to identify and reduce security risks across n8n's product and internal systems, using threat modelling, hands-on security expertise, and cross-functional collaboration to help teams design, build, and operate more secure systems. You'll join our growing security team at a pivotal stage, acting as a trusted security partner to teams across the business. You'll help us build a move from reactive security management to a proactive, scalable security practice. Here's what you'll be driving: THREAT MODELLING, RISK ASSESSMENT & SECURITY DESIGN - Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems, identifying vulnerabilities and recommending practical mitigations. - Partner with Engineering, Cloud, IT, and Data teams to review security designs, define actionable security requirements, and influence the implementation of appropriate controls. - Help teams embed security into their development processes through secure coding guidance, design reviews, documentation, and security tooling that enables them to identify and address risks independently. VULNERABILITY MANAGEMENT & COORDINATED DISCLOSURE - Participate in the security triage rotation, assessing incoming vulnerability reports, validating findings, and prioritising remediation based on severity and business impact. - Collaborate with engineering teams to coordinate vulnerability remediation, verify fixes, and support secure patch and release processes. - Help manage our vulnerability disclosure and bug bounty programmes, including engagement with security researchers, coordinated disclosures, and GitHub Security Advisories. SECURITY OPERATIONS & INCIDENT READINESS - Help establish and improve logging, detection, and protective monitoring capabilities across our infrastructure, corporate systems, and internal applications. - Develop and improve incident response processes, runbooks, and exercises to strengthen our ability to detect, investigate, and respond to security incidents. - Work closely with system owners to identify security gaps, prioritise remediation, and verify that implemented controls effectively reduce risk. CUSTOMER TRUST & COMPLIANCE ENGINEERING - Support SOC 2 compliance by helping establish continuous control monitoring, automated evidence collection, and processes that make security assurance part of everyday operations. - Collaborate with Sales, Solutions Engineering, and Customer Success to respond to customer security assessments and build reusable resources that streamline future requests. - Partner with Legal, Finance, IT, and other stakeholders to assess security risks, improve security policies and controls, and strengthen trust with enterprise customers. We're hiring two Security Engineers with complementary strengths, so you don't need to be an expert in every security domain. REQUIREMENTS MUST-HAVES - 🔍 Threat Modelling & Risk Assessment: You have hands-on experience assessing real-world systems, identifying security risks, determining defensible severity levels, and recommending practical controls that teams can implement. - 🛠️ Technical Security Expertise: You can validate security findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation when needed to demonstrate risks or improve security processes. - 🔐 Security Engineering Experience: You've worked hands-on in infrastructure, product, or application security within a product-focused organisation, with a strong understanding of how modern systems are designed and secured. - 🤝 Cross-functional Influence: You're comfortable acting as an internal security consultant, advising teams, challenging technical decisions constructively, and influencing stakeholders without direct authority. - 🎯 Risk Remediation & Ownership: You've helped secure systems you don't directly own, translating security findings into actionable requirements and working with responsible teams to ensure effective remediation. - 🤖 AI & LLM Fluency: You're comfortable using LLM-assisted tooling and understand its limitations, security implications, and potential failure modes. - ✍️ Clear Communication: You can explain complex security risks, document technical findings, and provide practical guidance that engineers and non-technical stakeholders can confidently act on. You also bring deep expertise in at least two of the following areas: - 💻 Application Security: You've developed security checks, engineering guardrails, tooling, or guidance that helps product teams build and ship secure software. - ☁️ Platform Security: You have experience securing a major cloud provider and Kubernetes environments, including areas such as sandboxing, multi-tenancy, or identity. - 🔑 Corporate Security: You've worked on identity and access management, endpoint security, employee access lifecycles, or data access controls across corporate environments. - 🚨 Security Monitoring: You've implemented logging, protective monitoring, or security detection capabilities that support effective investigation and incident response. - 📋 Security Assurance & Compliance: You've supported SOC 2 or ISO 27001 from an engineering perspective, including implementing technical controls or automating compliance evidence collection. NICE-TO-HAVES - 🐛 Vulnerability Disclosure: You've helped operate bug bounty or coordinated vulnerability disclosure programmes, including publishing security advisories such as GHSAs or CVEs. - 🧠 AI & Agent Security: You have experience assessing or securing LLM-powered applications and AI agents, including risks related to permissions, tool access, prompt injection, or sensitive data. - 🏢 Corporate IT Tooling: You're familiar with platforms such as Okta, Azure, or Drata and their role in securing corporate systems and supporting compliance. - 🌍 Open-source Ecosystems: You've worked with open-source or source-available products, contributed to security communities, or are already familiar with n8n. - 🎯 Penetration Testing: You have practical penetration testing experience and can independently identify, demonstrate, and help remediate security vulnerabilities. - 🌱 Early-stage Security Experience: You've been an early security hire or helped establish security practices in a startup or rapidly scaling organisation. Why join us? At n8n, you'll help shape security at a defining stage of our growth. We're building a security practice that goes beyond reacting to vulnerabilities, and you'll play a key role in how we identify risks, influence engineering decisions, and establish security practices that scale with the business. You'll work across a broad range of challenges, from securing AI-powered product features and our source-available automation platform to improving corporate security, strengthening incident readiness, and making compliance more automated. You'll have direct exposure to teams across the company, the opportunity to influence important technical decisions, and the autonomy to turn your expertise into measurable security improvements. Sound like a challenge you're excited to take on? Apply now — and help us build the future of secure automation. n8n is an equal opportunity employer and does not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, gender identity, age, marital status, veteran status, or disability status. We can sponsor visas to Germany; for any other country, you need to have existing right to work. Our company language is English. You care about diversity and inclusion? We do too! Check out our Diversity, Inclusion and Belonging initiatives at n8n https://www.notion.so/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35?pvs=21 (https://www.notion.so/n8n/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35). Location disclaimer: If you see multiple job postings for the same role, it is most likely because we're hiring remotely for this role and posting in different locations to make sure every potential candidate can see the role. Please apply to the location you're the most likely to work from in the future. BENEFITS - Competitive compensation 💸 – We offer fair and attractive pay. - Ownership 💪 – Our core value is to “empower others,” and we mean it—you’ll get a slice of n8n with equity. - Work/life balance 🏖️ – We work hard but ensure you have time to recharge: - Europe: 30 days of vacation, plus public holidays wherever you are. - US: 20 vacation days, 8 sick days, plus public holidays wherever you are. - Health & wellness 🩺 – - Europe: We provide benefits according to local country norms.* - US: Multiple low-premium, low-deductible medical plans with coverage for individuals and families—plus a no-cost premium HDHP option with a pre-seeded HSA—along with dental and vision coverage. - Future planning 💰 – - Europe: We provide pension contributions according to local country norms.* - US: 401(k) retirement plan with a 4% employer match. - Financial security 🛡️ – - Europe: We provide benefits according to local country norms.* - US: Company-paid short-term and long-term disability insurance, plus life insurance to support you and your loved ones. - Career growth 📈 – We hire rising stars who grow with us! You’ll get €1K (or equivalent) per year to spend on courses, books, events, or coaching to level up your skills. - A passionate team 🤩 – We love our product, and we prove it with regular hackathons where we see who can build the coolest thing with it! - Remote-first 🌏 – Our team works remotely across Europe, with regular off-sites for team bonding. Some roles, like sales in the US, are hybrid—please check the job description. - Giving back 🤝 – We're big fans of open source, and you'll get $100 per month to support projects you care about. - Transparency 🙏 – We all know what everyone’s working on, how the company is doing—the whole shebang. *Country and/or State specific details provided in your employment agreement.