Вакансии

Location: Poland; Bulgaria On behalf of SafetyTech Client #1 , SD Solutions is looking for a highly motivated and technically proficient Vulnerability Researcher to join our security research division . SD Solutions is a staffing company operating globally. Contact us to get more details about the benefits we offer. We are seeking a highly motivated and technically proficient Vulnerability Researcher to join our security research division. This role is dedicated to determining the true intent behind cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious, with a focus on vulnerability research, exploit development, and reverse engineering. You need to be independent, attentive to details, organized, eager to learn new things, and eager to research and solve complex problems. Responsibilities: Review cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious Determine the underlying intent and goal behind each prompt, and assess whether the user is pursuing a legitimate purpose or an intent to cause harm Apply deep domain expertise to judge the technical context, specificity, and real-world uplift a response would give an attacker Annotate each prompt with an intent label and a clear written rationale, following the project guidelines Independently annotate the same prompts as a second researcher; cases where researchers disagree are escalated to a reviewer Flag ambiguous cases, emerging attack techniques, and gaps in the guidelines, and help improve them Requirements: Minimum of 5 years of proven, hands-on experience in vulnerability research and reverse engineering Proven ability to discover vulnerabilities through fuzzing, static and dynamic analysis, and patch diffing Exploit development experience, including memory corruption, heap exploitation, ROP, and mitigation bypasses (ASLR, DEP, CFI) Fluent use of IDA, Ghidra, Binary Ninja, and debuggers (WinDbg, GDB, LLDB) on x86/x64 and ARM binaries Understanding of the CVE lifecycle, n-day versus 0-day work, and how public PoCs are weaponized Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation Clear written communication in English, with the ability to document your reasoning concisely Nice to have: OSED, OSEE, GIAC GXPN Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research About the company: A company building specialized evaluation infrastructure for AI safety and robustness testing. Their platform simulates adversarial conditions used by AI development teams to validate agent behavior before deployment. Currently expanding a freelance contributor pool for scenario and environment development. By applying for this position, you agree to the terms outlined in our Privacy Policy. Please take a moment to review our Privacy Policy https://sd-solutions.breezy.hr/privacy-notice , and make sure you understand its contents. If you have any questions or concerns regarding our Privacy Policy, please feel free to contact us.

Location: Warsaw, Poland; Prague, Czechia; Sofia, Bulgaria; Bucharest, Romania; Madrid, Spain; Tbilisi, Georgia CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information: cloudlinux.com Imunify360 Security Suite is an innovative security solution designed specifically for shared and VPS/Dedicated servers. The automated, easy-to-use solution with the six-layer approach to security delivers comprehensive and complete attack prevention. We are looking for a Lead Security Engineer - Vulnerability Response to join our Web Protection Team. The challenge ahead When a critical vulnerability in a popular web application or WordPress plugin goes public, attackers start exploiting it within hours. Most site owners can't patch that fast. We want our customers protected before the first attack reaches them, and we want them to know it. That's the challenge we're hiring for: AI-driven vulnerability response. Build and run a pipeline that detects new high and critical vulnerabilities, generates WAF rules with AI assistance, validates them, and ships them to production in a short window. Protection plus public announcement, both automated. The same pipeline that ships the rule also produces the public advisory. Every critical vulnerability we cover is announced soon after the rule ships, so customers and the market see that Imunify closed it first. Build on what works. An AI-assisted pipeline already runs for our WordPress protection plugin. The first big project is to extend this approach to ModSecurity/Coraza WAF rules. Speed without breaking sites. On shared hosting, a rule that blocks legitimate traffic is a customer incident. Fast and precise both matter. Make it measurable. Time-to-protection, coverage of critical vulnerabilities, and false-positive rate are the numbers this role owns. About the role You will own the vulnerability response pipeline end to end and be its main builder. You combine deep web application security expertise with strong automation skills, and you think about the product: what customers need, what to measure, what to build next. You'll lead a small team of security analysts and work closely with automation, QA, and marketing. What you'll do Design and build the AI-driven pipeline from disclosure to announcement: vulnerability intake, triage, rule drafting, testing, release, and the public advisory. Lead the extension of our existing WordPress-plugin pipeline to ModSecurity/Coraza rules. Write and review WAF rules (ModSecurity/SecLang) for real-world web vulnerabilities. Build test harnesses that check rules against exploits and real traffic before release. Lead and mentor security analysts: set priorities, review their work, remove blockers. Define and track time-to-protection, coverage, and false-positive rate, and improve them. Automate advisory generation as part of the pipeline, and agree the format and review flow with marketing. Requirements What we're looking for: 5+ years in web/application security: vulnerability research, detection engineering, WAF engineering, or similar. Deep understanding of web attack classes (SQLi, XSS, RCE, auth bypass, path traversal, file upload, deserialization) and how to detect them in HTTP traffic. Hands-on experience writing WAF rules (ModSecurity/SecLang, OWASP CRS, or similar) and regular expressions. Able to read PHP code and understand a vulnerability from an advisory or a patch diff. Strong Python: you've built automation pipelines that run in production. CI/CD and automated testing. Hands-on daily use of AI/LLM tools; you know where to trust them and how to verify their output. Proven track record of leading a technical project end to end. Product mindset: you reason about customer impact, not only technical correctness. Upper-intermediate English or better. Nice to have: WordPress ecosystem security: plugin vulnerabilities, vulnerability feeds (Wordfence, Patchstack, WPScan), CVE credits or bug bounty. Coraza or other WAF engines. Exploit analysis or threat intelligence background. Linux server administration, hosting industry. Personal skills: Strong ownership: you take a goal, not a task list. See the whole process and find the bottleneck, not only fix individual issues. Communicate clearly and raise risks early. Calm under pressure: critical vulnerabilities don't wait for working hours. Comfortable making decisions with incomplete information. Benefits What's in it for you? A focus on professional development. Interesting and challenging projects. Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide. Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves. Compensation for private medical insurance. Co-working and gym/sports reimbursement. Budget for education. The opportunity to receive a reward for the most innovative idea that the company can patent. By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.

Location: Remote - Colombia ; Remote - Costa Rica ; Remote - Mexico About Backblaze Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $136M ARR and is the leading specialized storage cloud, managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We’re seeking a Vulnerability Management Engineer to join our team! About the Role The Vulnerability Management Engineer drives risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies. The role combines vulnerability data, asset and configuration intelligence, application-security testing, threat intelligence, and AI-assisted analysis to determine whether vulnerabilities are reachable, exploitable, and likely to represent an imminent organizational threat. Key Responsibilities Correlate threat intelligence and vulnerability findings with asset inventory, software configuration, system configuration, application testing, network exposure, ownership, and business criticality. Assess exploitability and reachability rather than relying on vulnerability severity alone. Incorporate exploit prediction, known exploitation, open-source threat intelligence, adversary activity, and environmental context into prioritization. Determine whether exposure requires immediate incident response or remediation under established operational objectives. Use AI-assisted workflows to ingest and correlate vulnerability intelligence against the organization's actual technology configuration while independently validating conclusions. Partner with Red Team to validate practical exploitability of significant vulnerabilities. Identify compensating controls such as configuration changes, access restrictions, segmentation, or filtering when immediate patching is impractical. Automate vulnerability ingestion, analysis, prioritization, remediation tracking, mitigation, and verification where appropriate. Qualifications Experience with enterprise vulnerability or exposure management. Strong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies. Experience interpreting vulnerability intelligence and assessing practical exploitability. Knowledge of risk-based prioritization techniques including CVSS, exploit prediction, known-exploitation intelligence, and environmental context. Experience correlating vulnerability, asset, configuration, SAST, DAST, SCA, endpoint, or related security data. Experience with scripting, automation, or data analysis. Familiarity with continuous exposure management, attack-path analysis, AI-assisted analysis, or automated mitigation is preferred. Strong understanding of OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE. Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, MITRE ATLAS and MAESTRO. At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here. At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer. To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.

Location: Remote, Canada; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Security Analyst on GitLab’s Product Security Vulnerability Operations team, you will help protect GitLab customers by triaging security reports, supporting vulnerability management operations, and coordinating clear communications with security researchers, customers, and internal teams. You will work closely with PSIRT engineers, Vulnerability Management, Security Engineering, Legal, Customer Success, Support, and Communications. This role is an excellent opportunity for an early-career security prfessional who is curious, organized, detail-oriented, and excited to build expertise in product security response. This role is open to candidates across North America, though we encourage applications from those based on the West Coast US or West Coast Canada (British Columbia) as the team is looking to expand coverage in the Pacific Time Zone. What you’ll do Triage incoming bug bounty reports, including reviewing report quality, validating findings, assessing potential impact, identifying duplicates, and routing reports to the appropriate teams. Triage vulnerabilities identified through vulnerability management activities and help track them through assessment, remediation, and closure. Work with PSIRT engineers and development teams to gather technical details, reproduce issues, and clarify affected products, versions, and configurations. Support severity assessment using frameworks and terminology such as CVE, CVSS, CWE, and OWASP. Communicate professionally and respectfully with security researchers participating in coordinated vulnerability disclosure and bug bounty programs. Support GitLab’s role as a CVE Numbering Authority by preparing information for CVE assignment, maintaining accurate records, and helping coordinate CVE-related activities. Represent GitLab as an acting CNA representative in CVE-related discussions and operations, escalating questions and coordinating with the appropriate internal and external stakeholders. Draft and coordinate customer-facing communications about security vulnerabilities, fixes, mitigations, and release information in partnership with PSIRT, Legal, Customer Success, Support, and Corporate Communications. Maintain accurate issue records, timelines, researcher communications, remediation status, and follow-up actions. Monitor queues and operational metrics to identify trends, aging items, recurring issues, and opportunities to improve response quality and consistency. Create and improve runbooks, procedures, templates, and other documentation that make vulnerability handling more efficient and transparent. Participate in incident handoffs, root cause analysis documentation, lessons-learned activities, and product security reviews. Build technical and operational expertise in PSIRT, bug bounty, vulnerability management, and coordinated vulnerability disclosure. What you’ll bring Early-career experience or equivalent education in cybersecurity, software engineering, information technology, or a related field. Relevant internships, coursework, labs, research, customer support, or practical security projects are welcome. Foundational understanding of software vulnerabilities and security concepts, including web applications, APIs, CI/CD environments, authentication, and authorization. Familiarity with security terminology such as CVE, CVSS, CWE, OWASP Top 10, and coordinated vulnerability disclosure. Strong attention to detail and the ability to organize and prioritize multiple reports or work items. Clear written and verbal communication skills, with the ability to explain technical topics to both technical and non-technical audiences. Experience with a bug bounty or vulnerability disclosure platform such as HackerOne or Bugcrowd. Experience reviewing security reports, participating in capture-the-flag exercises, performing vulnerability research, or working with security tooling. Familiarity with CVE assignment, CNA processes, security advisories, or vulnerability databases. Nice to have: Basic scripting, log analysis, issue tracking, or data analysis experience; experience writing technical documentation, customer communications, support responses, or operational procedures. About the team The GitLab Product Security Vulnerability Operations is a globally distributed team that helps ensure GitLab delivers secure applications customers can trust. VulnOps serves as a central point of contact for external security researchers and helps govern the policies, processes, and guidelines used to address vulnerabilities in GitLab’s supported products. Team members collaborate across regions using documented processes, automation, and structured handoffs to support vulnerability resolution and ongoing operational improvements. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $115,000 — $150,000 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Обязанности: — Осуществлять контроль и оценку защищённости инфраструктуры компании; — Искать уязвимости на внешнем и внутреннем контуре компании автоматизированными и ручными средствами; — Проводить оценку и приоритизацию обнаруженных уязвимостей; — Писать рекомендации о методах устранения уязвимостей, разрабатывать стратегию информационной безопасности; — Осуществлять мониторинг информации об угрозах информационной безопасности из внешних источников (телеграм‑каналы, тематические форумы, порталы вендоров); — Тестировать новые решения в области оценки защищённости инфраструктуры; — Разрабатывать собственные скрипты для сканирования на критичные уязвимости; — Анализировать и оптимизировать процессы ИБ. Требования: — Опыт работы с автоматизированными средствами анализа защищённости (Nessus, Qualys, Max Patrol 8, RedCheck или Rapid7); — Знание OWASP Top 10 и методов обнаружения web‑уязвимостей; — Владение инструментами Kali Linux (Metasploit, Burp Suite, Nuclei и пр.); — Уверенное знание операционных систем Windows/Linux (на уровне администратора), сетевых технологий, инфраструктурных служб и сервисов (Active Directory, DNS, DHCP, Terminal Services и т.д.); — Понимание рисков информационной безопасности и возможных каналов утечек информации; — Обладание знаниями в области безопасности сетей, протоколов и ОС.

Location: Remote, Canada; Remote, Israel; Remote, United Kingdom GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As an Intermediate Software Engineer on GitLab’s Vulnerability Management team, you’ll help build the core security workflows that GitLab Ultimate customers use to triage, prioritize, and act on vulnerabilities. You’ll work primarily in Ruby on Rails on backend systems, including security dashboards, vulnerability reports, and ingestion pipelines. You’ll take ownership of well-defined projects, solve technical problems with support from experienced team members, and collaborate with other engineers. You’ll also have opportunities to contribute beyond the backend when the work requires it. You will join a fullstack team, working together with product managers, designers, and frontend engineers to solve problems across the Vulnerability Management domain. What you’ll do Develop and maintain backend features for GitLab’s vulnerability management workflows. Confidently ship features and improvements with minimal guidance and support from other team members; collaborate with the team on larger projects. Help improve the performance, reliability, and scalability of security data ingestion and reporting systems. Collaborate with frontend engineers and contribute across the stack when needed. Work with engineers across security teams as vulnerability data and workflows come together in Vulnerability Management. Collaborate with Product Management and Product Design to maintain a high bar for quality Craft code that meets our internal standards for style, maintainability, and best practices for a high-scale web environment Conduct code reviews within our Code Review Guidelines and ensure community contributions receive a swift response Recognize impediments to our efficiency as a team ("technical debt"), propose and implement solutions Participate in on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues. What you’ll bring Experience building and maintaining backend applications with Ruby on Rails. Experience delivering and maintaining software systems as part of a larger engineering team. The ability to investigate technical problems, ask for context when needed, and work toward a practical resolution. Experience working with relational databases such as PostgreSQL. Clear communication and collaboration skills in a distributed team. An interest in learning from others, sharing knowledge, and growing your technical skills. Frontend development experience, including JavaScript or Vue.js, is helpful. Experience with Elasticsearch, graph databases, vulnerability management, application security, or related transferable skills is helpful. About the team The Vulnerability Management team develops the core security workflows that help GitLab customers triage and manage vulnerabilities. The team owns areas including the security dashboard, vulnerability reports, and ingestion pipelines, and serves as an important interface for security-related features across GitLab. The team is focused on moving beyond lists of findings toward workflows that help customers prioritize and coordinate remediation. You’ll collaborate asynchronously with a small, distributed group and with related security teams, including the Agentic Security Flows team. How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Product Manager , you will own GitLab's Secret Detection offering and the Vulnerability Research function that produces the detection content across security products. Secret Detection is one of the highest-signal, highest-volume security capabilities on the platform. Leaked credentials are the most common initial access vector in real breaches, and as AI agents write, commit, and configure more of the software, the surface area for exposed secrets grows faster than the number of humans watching it. You will own the full loop: detect a secret with high precision, tell the customer whether it is still live, get it revoked, and prevent the next one from ever landing. In parallel, you will own vulnerability research as a product asset rather than a back-office function. The detection rules, advisory data, and malicious package and reference intelligence your team produces are what make GitLab's security scanners worth paying for, and they need to ship on a cadence with measurable quality. This is an outcome-owning role - you will carry adoption, retention, and revenue targets for your area and be expected to explain how your roadmap moves them. Some examples of our projects: Push protection and pre-receive blocking that stops a credential before it reaches a repository, without wrecking developer flow Secret validity checking and automated revocation partnerships with major cloud and SaaS token issuers Detection content pipelines that turn threat research into shipped rules, with precision and recall tracked per rule Intelligence-driven detection of malicious packages, dependencies, and references entering the software supply chain What you'll do Own the business outcomes for Secret Detection and Vulnerability Research, including adoption, expansion, competitive win rate, and revenue contribution. Bring a point of view on packaging and pricing, not just features. Set the strategy for the full secret lifecycle: prevention, detection, validation, revocation, and reporting across GitLab.com, Dedicated, and Self-Managed. Treat detection content as a product. Define how rules, advisories, and intelligence feeds are sourced, validated, versioned, and measured, and make quality visible to customers. Hold the line on detection quality. False positives are a product defect and you will own the metrics that prove precision is improving. Work at the level of the technology. Read the rule syntax, question the entropy heuristics, understand why a scanner missed something, and challenge engineering with informed alternatives. Use AI to compress the distance between question and answer. Pull your own data, prototype your own flows, synthesize research and competitive input yourself, and bring conclusions rather than requests for someone else to investigate. Build the case for where AI belongs in the product: triage, rule generation, remediation guidance, and reducing the human review burden per finding. Partner with engineering, security research, threat intelligence, Field, and GitLab's own Security team, who are one of your most demanding users. Communicate in writing, asynchronously, with enough precision that a distributed team can act without a meeting. What you'll bring Domain depth in application security, vulnerability management, or security research. You have worked on or adjacent to scanners, detection content, threat intelligence, or SDLC security tooling and you know how these products actually get evaluated in a bake-off. Technical credibility sufficient to earn the respect of a security engineering team. You do not need to have written the scanner, but you should be able to reason about detection logic, data pipelines, CI integration, and the tradeoffs between coverage and noise. Commercial reasoning. You start from revenue mechanics, buyer motion, and competitive displacement, then work inward to product decisions. Candidates who reason only from feature lists outward are not a fit. Evidence of using AI as a force multiplier in your own work: research, analysis, data pulls, prototyping, drafting. Consuming a chat assistant occasionally is not the same as restructuring how you work. Judgment under ambiguity. You bring structured options and a recommendation instead of escalating an open question. Bias for clarity. You can take a noisy, technical, politically contested problem and produce one page that everyone can align on. Bonus: hands-on background as a developer, security engineer, red teamer, or researcher; experience with credential and token ecosystems; experience commercializing a data or intelligence asset. About the team This role sits in GitLab's Security product management organization, which owns application security testing, vulnerability management, supply chain security, secrets management, and AI governance. The Security Section is central to GitLab's Ultimate tier and to the shift toward consumption-based product revenue, so the work is visible to senior leadership and directly tied to company results. You will work asynchronously with engineering, design, and research counterparts across multiple regions, and with the Field teams who take this to market. How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Boston, MA Workplace: OnSite At WHOOP, we are on a mission to unlock human performance and extend healthspan. The security organization supports this mission by protecting the systems, data, and infrastructure that power the platform and enable trusted member experiences. WHOOP is seeking a Security Analyst to support day-to-day security operations and maintain operational visibility across the security environment. This role works closely with the internal security team and external security partners to investigate alerts, coordinate response activities, and ensure security issues are triaged and addressed efficiently. The ideal candidate combines strong analytical skills with operational discipline and enjoys working across security and engineering teams to investigate potential threats and improve security processes. RESPONSIBILITIES - Triage and investigate security alerts originating from internal security tooling as well as those escalated by external security monitoring partners. - Monitor and manage the internal security operations ticket queue, ensuring alerts and investigations are prioritized, tracked, and resolved in a timely manner. - Assist with investigation of security events across endpoint, identity, cloud, and SaaS platforms. - Support incident response activities including investigation, containment coordination, documentation, and post-incident analysis. - Respond to external threat intelligence and digital risk alerts related to potential brand abuse, impersonation, or exposed credentials. - Collaborate with security engineering teams and external security partners to improve detection coverage and reduce false positives. - Help identify gaps in logging, telemetry, or investigation workflows across security platforms. - Assist with threat hunting and security investigations using data from SIEM and other security tools. - Support vulnerability management workflows by assisting with triage, prioritization, and tracking of remediation activities. - Own and manage the security operations queue while serving as a central intake point for security questions, alerts, and reports across the organization, ensuring items are triaged, prioritized, and driven through investigation or resolution. - Operate the organization’s phishing simulation program to reduce susceptibility to social engineering threats, including managing phishing campaigns and coordinating targeted remediation training for users with repeated failures. - Identify opportunities to improve security operations through process improvements, automation, and responsible use of AI to streamline investigation, triage, and reporting workflows. - Maintain documentation for incident response procedures, investigation workflows, and operational playbooks. - Participate in the security team’s on-call rotation to support investigation and response activities when needed. QUALIFICATIONS - 3+ years of experience in security operations, incident response, threat detection, or a related cybersecurity role. - Experience investigating security alerts or suspicious activity across environments such as endpoint, identity, cloud, or SaaS systems. - Experience triaging and managing security investigation workflows, including ticket queues or incident tracking systems. - Familiarity with SIEM platforms, log analysis, and security monitoring tools. - Understanding of common attacker techniques and frameworks such as MITRE ATT&CK. - Experience working with security tools such as EDR platforms, identity systems, cloud logging platforms, or similar technologies. - Familiarity with modern AI-enabled tools used in enterprise environments and an understanding of risks associated. - Experience improving security operations through automation, scripting, or responsible use of AI to increase operational efficiency. - Strong analytical and investigative skills with the ability to evaluate security events and determine potential impact. - Ability to coordinate investigations across multiple teams and communicate findings clearly to technical and non-technical stakeholders. - Strong written documentation skills for incident records, investigation notes, and operational procedures. - Relevant security certifications such as Security+, CySA+, SSCP, GSEC, or GCIH are a plus. This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $70,000 - $110,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Location: US, Remote Workplace: Remote The Luxor team has built a range of solutions for compute power, including a mining pool, custom firmware, an ASIC brokerage desk, Hashrate derivatives and compute to power CI and agents. We service clients across the globe. Our client base is growing rapidly and as such we are looking to expand our platform engineering team. We're looking for a Senior Platform Security Engineer with strong expertise in security and compliance. You'll join Luxor AI's Platform team and own the entire area of security and compliance within the team's scope, contributing to building and running production infrastructure. This role is ideal for someone who has experienced how security and compliance operate within a large organization and now seeks the autonomy to evolve that function at a fast-growing startup. It will suit an individual energized by the importance of the data we protect and the reliability we provide to our clients. This role will report directly to the Chief Technology Officer. This is a fully remote role based in U.S.A. with seldom travel if needed. RESPONSIBILITIES - Serve as a day-to-day security advisor for the team you support, advocating security requirements as an engineering team member during sprint planning, architecture reviews, process discussions, product direction, design decisions, and while work is in flight - Build and maintain centralized automated security testing and enforcement in CI/CD, including static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), secrets scanning, and infrastructure-as-code (IaC) scanning - Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate ongoing patching and hardening into engineering operations - Continually audit application environments and development processes to ensure compliance with internal and external requirements, and alignment with security standard methodologies - Implement and maintain cloud detection and response monitoring, and act as an incident CIRT responder - Document controls, configurations, and decisions to build durable institutional knowledge - Enforce policies and detection using device management tooling (e.g. FleetMDM) REQUIREMENTS - Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience - 8+ years of experience in DevOps, software engineering, or security engineering - Proficiency with CI/CD platforms (e.g. GitHub Actions), infrastructure as code tools (e.g.,Terraform), and configuration management (e.g. Ansible) - Proficiency in at least two of the following languages: Go, JavaScript, Rust, Python - Hands-on cloud security experience in GCP, Alibaba, AWS, OVH, Hetzner and/or Azure, including identity and access management, containerization, network security controls, encryption, logging, and monitoring - Harden access and controls (e.g. IAM Policy) - Hands-on experience with Kubernetes GitOps (e.g. Flux, ArgoCD) - Demonstrated experience implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement - Familiarity with penetration testing applications or experience conducting penetration testing engagements - Strong scripting skills in Python, or Bash for automation and integration - Experience supporting third-party attestations and audits (e.g., SOC 2 Type 2, ISO 27001), including preparation, implementation, and ongoing evidence collection - Operated and maintained Zero Trust network infrastructures using Tailscale and Cloudflare WARP, providing direct technical support to users while managing access policies and troubleshooting remote connectivity issues. - Strong communication and governance skills, with the ability to translate technical risk into business terms for technical and non-technical audiences, and to advocate for security without slowing down delivery At Luxor we believe that meaningful contributions can be made by anyone. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Luxor welcomes all! Luxor does not accept unsolicited headhunter and agency resumes. Luxor will not pay any third-party agency or company that does not have a signed agreement with Luxor. HOW WE USE AI IN OUR HIRING PROCESS We use AI tools to support certain parts of our hiring process, and we believe in being transparent about how they’re used. During your application, AI may assist in reviewing CVs, qualifications, and assignments by providing additional insights, but it does not make decisions, every application is evaluated at each step by a member of our hiring team. We also use AI to transcribe interviews so our team can stay focused on the conversation rather than note-taking. Any voice recordings are automatically deleted within 15 days. In addition, AI helps us keep candidates informed about their application status and helps us understand how our process is working so we can improve it over time. In all cases, AI is used to support efficiency and consistency, not to replace human judgment. If you have any questions about how we use these tools or your data, or if you would prefer to opt out of any of these features, please include them in the dedicated section of the application form, and we’ll follow up accordingly.

Location: England; Portugal; Spain; Italy; Germany Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ Docker Forward Deployed Engineers (FDE) embed directly with our most strategic customers to solve important, complex technical problems and turn ambitious ideas into production outcomes. FDEs take on the most challenging technical challenges using existing Docker products and patterns when possible, and work across customer, Docker Product and Engineering teams to realize new approaches when required.   As a Docker FDE, you will work side-by-side with customer engineering teams to deeply understand their goals, problems, constraints, and technical landscape; identify the highest-leverage opportunities; and design, build, and ship solutions with them. You own the technical journey from discovery and architecture through prototyping, implementation and production rollout.   The solutions you build may use existing Docker products, extend Docker into new environments, integrate deeply with customer and third-party systems, or reveal capabilities that Docker should build next. You work closely with Docker Solutions Architects to evolve existing patterns, and Docker Product and Engineering to turn new learnings into reusable patterns and product capabilities.   RESPONSIBILITIES Build in Production with Customers - Embed with customer engineering teams to design, build, and ship solutions from first prototype through stable production rollout. Use existing Docker products and patterns when possible, invent, prototype and validate innovative solutions when necessary. - Deliver working technical artifacts to customers: custom MCP servers with tightly integrated Docker Sandbox environments for coding agents and containerized agents; Docker Compose definitions for multi-agent harnesses and model-backed applications; Hardened Image standardization and migration; New tools that unblock customer progress. - Integrate Docker's AI platform with the customer's existing stack, including identity providers (OIDC/SAML/SSO), secrets management, private and air-gapped registries, Kubernetes, CI/CD pipelines, and observability tooling. - Own technical delivery on your engagements: scope the work, sequence it, make trade-offs between speed and quality, remove blockers early, and contribute directly to code whenever progress depends on it. Make AI Adoption Safe and Governable - Translate customer security, compliance, and platform requirements into concrete plans and see those plans through from ideation to production. - Help customers define controls to enable them to adopt agentic AI to solve their unique business problems without compromising security, compliance, data sovereignty or end-user experience. - Establish quality and performance standards for customers and work closely with Docker Product and Engineering to quickly address issues that fall outside of established thresholds - Partner with customer security and platform teams to get agentic workloads through architecture review, threat modeling, and change control. Partner with Solutions Architecture and the Field - Work closely with Solutions Architects to enable off-the-self solutions when possible and provide technical experience and leadership when a bespoke solution is necessary. - Feed implementation learnings back into reference architectures, SOW templates, and success patterns so that FDE innovations become standard features and implementation patterns. - Support the field with technical depth during proofs of concept, escalations, and expansion conversations when a working build is the fastest path to a customer adoption. Close the Loop with Product and Engineering - As part of Docker Engineering FDEs work closely with Product and Engineering teams to fold FDE innovations, learnings, and design patterns into existing or new products and services. - Work with Customers, Product and Engineering to establish quality and performance thresholds, ensuring customer environments meet them consistently, and responding quickly and decisively when they don’t. - Be the voice of the customer. Deliver data-driven and actionable feedback to Product and Engineering: what works well; what does not; what customers are asking for; and what blocks their adoption and forward progress. FDE experience directly influences the roadmap. Shape the Practice - Define the FDE engagement model, delivery standards, and quality bar, and codify them so that engagements are consistent across customers, regions, and delivery partners. - Mentor and lead other Forward Deployed Engineers, and participate in hiring loops to grow the team. - Act as the senior technical escalation point on the hardest problems impacting your customers. Every incident is an opportunity to improve Docker products and services. - Maintain deep, current knowledge of the agentic AI stack: LLMs, APIs, MCP, coding agents, model and harness evaluation approaches, performance and quality thresholds, deployment patterns. - This role may require participation in an on-call rotation to provide support outside of standard business hours, including evenings, weekends, and holidays, as needed.   QUALIFICATIONS Required - 10+ years of software engineering experience, including 4+ years in a customer-facing technical role such as Forward Deployed Engineer, Solutions Engineer, Professional Services Engineer, or Software Engineer with consulting or technical founder experience. - Technical leadership across multiple engagements, teams, or domains, with a proven ability to set delivery standards, define repeatable patterns, and influence product direction through field evidence. - Expert production coding skills in Go, Python, or TypeScript, with a track record of shipping and operating software that other people depend on and of leading technical design reviews. - Deep, hands-on Docker expertise: Dockerfiles and multi-stage builds, Docker Compose, image and registry operations, container networking and storage, and container security fundamentals. - Hands-on experience building with LLMs and agents in production, including tool use and function calling, the Model Context Protocol (MCP server and client implementation), prompt and context engineering, and evaluation of agent behavior. - Working knowledge of software supply chain security: SBOMs, image signing and attestation, vulnerability management, minimal and hardened base images, and secure CI/CD. - Experience integrating with enterprise systems: identity providers (Okta, Entra ID, LDAP/Active Directory), federated identity protocols (OIDC, SAML), secrets managers, Kubernetes, and at least one major cloud platform (AWS, Azure, GCP). - Ability to scope and deliver complex work in ambiguous, fast-moving customer environments, making sound trade-offs between scope, speed, and quality. - Excellent communication skills with engineers, security and platform teams, and executive stakeholders, with a low-ego, collaborative approach and the ability to lead through influence rather than authority. - Proven track record of technical mentorship and of raising the bar for the engineers around you. - High agency and comfort operating autonomously in distributed, remote-first teams. - Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience. - Travel to customer sites to build in person with customer teams, estimated at up to 50%. Bonus - Experience with Docker Hardened Images, Docker Scout, MCP Gateway, MCP Toolkit, Docker Sandboxes, or Docker Model Runner. - Experience deploying and operating coding agents (Claude Code, Codex, Gemini CLI, Cursor, or similar) in team or enterprise settings. - Experience with air-gapped, regulated, or compliance-driven environments in financial services, healthcare, government, or similar sectors. - Contributions to open source projects in the container, Kubernetes, or MCP ecosystems. - Prior experience founding or scaling a Forward Deployed Engineering or Professional Services practice. Compensation & Equity United States: €121K – €198K + equity ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Location: United States, Remote Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Do you want to help bring PlayStation technology to a worldwide audience? Are you passionate about securing infrastructure that constantly pushes the boundary of the gaming industry? Are you ready to work with innovative technology, forward-thinking engineers, and a passionate security team? If so, join us! The role is a senior-level application security position combining strong technical expertise with leadership, initiative, and collaboration. You will provide strategic mentorship and hands-on support in designing, implementing, and testing secure solutions that strengthen PlayStation products and services. As a technical leader within Product Security, you’ll guide practices and influence multiple teams to embed security throughout the software development lifecycle. Key Responsibilities Lead security initiatives across the SDLC and improve development practices through scalable automation. Conduct and guide threat modeling and security requirements early in design phases. Partner with developers, architects, and product managers to align business goals with security needs. Lead security architecture and code reviews for distributed systems. Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams. Advance the Product Security strategy through multi-functional initiatives and cultural influence. Balance business and security risks through technically grounded, pragmatic recommendations. Translate lessons learned into reusable organizational assets that enhance overall security posture. Mentor engineers and practitioners, promoting secure-by-default thinking and shared accountability. Demonstrate proactive leadership, coordinating teams to deliver measurable security and business impact. Qualifications 7+ years in information security and 3+ years in software development. Bachelor’s degree or equivalent in Computer Science, Information Security, or related field. Effective communication and leadership abilities; capable of influencing technical and non-technical collaborators including management. Dedicated and proactive, finding opportunities and leading initiatives independently. Deep understanding of enterprise and cloud-native architectures and their secure design. Expertise in network and web protocols (TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect) and common attack vectors. Proven expertise in guiding security development and code evaluations and providing actionable, risk-based recommendations. Skilled in multiple programming languages (e.g., Java, C/C++, JavaScript, Python) and mitigating vulnerabilities such as OWASP Top 10. Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines. Familiar with Agile, DevOps, and modern delivery practices. Hands-on experience with cloud technologies (AWS, Azure, GCP, Kubernetes, service mesh, CDN) including secure configuration and identity management. Desired Experience Strong analytical and problem-solving skills with an attacker perspective — able to anticipate and simulate real-world attacks. Experience in penetration testing, automated testing, or testing frameworks (JUnit, pytest, REST Assured, Playwright). Security certifications preferred (GIAC, OSCP, CEH, CISSP, CCSP, or equivalent). At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. This is a flexible role that can be remote, with varying pay ranges based on geographic location. For example, if you are based out of Seattle, the estimated base pay range for this role is listed below. $177,300 — $265,900 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: Remote - India Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . Job Summary If you like owning problems end to end, making security a default property of everything we build, and working closely with engineering, we want to meet you. Bugcrowd is looking for security engineers who move beyond standard tooling and drive measurable security outcomes our customers can rely on. You will help us shape a culture where security helps others succeed, not just points out problems. Essential Duties and Responsibilities Partner Closely with Engineering : Refine architecture, validate new features, and drive security investment while prioritizing engineering velocity Build Security Paved Roads : Contribute to the secure defaults, libraries, and "paved roads" that systematically eradicate entire classes of vulnerabilities rather than fixing bugs one by one Create Feedback Loops : Tune security tooling such as SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters Be our Best Customer : Ensure our bug bounty program can be a model for other customers. Experiment with new ways to leverage the creativity of the crowd. Provide feedback on new platform features to engineering and product Own Projects End to End : Lead cross-functional product security projects from scoping through delivery, influencing product and engineering roadmaps and clearly communicating risk to both technical and non-technical stakeholders Amplify our Impact : Use code and automation as a lever to scale coverage and eliminate repetitive work. Build systems based on incentives and accountability rather than just bureaucratic process Education, Experience, Knowledge, Skills, and Abilities 3+ years of experience in product security, application security, or secure software development Can review code, automate tasks, and build security tooling in at least one modern programming language (e.g., Python, Go, Ruby, Java) Hands-on experience with core application security practices — threat modeling, secure code review, and automated testing (SAST, DAST, SCA) — and a solid grasp of common vulnerability classes (e.g., OWASP Top 10) Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product. Bachelor's degree in engineering, computer science or relevant field, or equivalent practical experience Bonus Points (Preferred but not required) Previous experience with Bug Bounty or vulnerability disclosure programs A background in building "paved roads" or secure-by-default internal libraries to eliminate entire classes of vulnerabilities Hands-on experience securing cloud-native platforms and Infrastructure as Code (e.g., Terraform, AWS, GCP, Kubernetes, Docker) Experience working within a fast-paced, high-growth security or SaaS company Working Conditions and Physical Requirements The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and / or standing - Must be able to remain in a stationary position 50% of the time Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - remote, work-from-home 100% of the time Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

Location: Spain; Portugal; Poland; Serbia; Czechia Who we are Action1 is an autonomous patch management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in 5 minutes - it just works and is always free for the first 200 endpoints, with no functional limits. By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment and remediation without needing a VPN, it eliminates routine labor, preempts ransomware and security risks, and protects the digital employee experience. In 2026, Action1 was recognized by Inc. 5000 as the fastest-growing founder-led cybersecurity company in America. At the helm of Action1 are industry veterans Alex Vovk and Mike Walters, American entrepreneurs who founded Netwrix, which has grown into a multi-billion-dollar industry-leading cybersecurity company. The Role We are looking for a Product & Web Designer to shape the user experience of Action1's SaaS platform and help make complex IT management workflows simple, intuitive, and efficient. Your primary focus will be designing product interfaces, improving usability, and building consistent design patterns across our platform. You'll work closely with Product Managers and R&D teams to turn product requirements and user needs into practical, well-designed solutions. This is a hands-on role with real ownership. We value designers who think beyond visual appearance, understand how users interact with software, and are comfortable proposing solutions rather than simply following instructions. Alongside product design, you may occasionally support web, HR, and marketing initiatives with visual design work. What you'll do Design intuitive user interfaces for Action1's SaaS platform. Create user flows, wireframes, mockups, and interactive prototypes. Improve usability and simplify complex product workflows. Refine product interfaces based on user feedback, usability insights, and technical constraints. Occasionally create visuals for websites, HR initiatives, and marketing materials. What we're looking for 2+ years of professional experience in UI/UX or product design, preferably for SaaS or web applications. Strong UI/UX skills, including interaction design, user flows, information architecture, and visual design. Hands-on experience using AI-powered design tools and solutions to accelerate workflows, explore ideas, and improve design outcomes. Nice to have Experience designing complex B2B SaaS products, dashboards, or administrative interfaces. Experience with user research, usability testing, and data-informed design decisions. Understanding of responsive design, accessibility, and WCAG principles. Basic knowledge of HTML, CSS, and frontend development constraints. Familiarity with IT infrastructure, cybersecurity, or endpoint management products. Please include a portfolio demonstrating your product design work. We especially value examples showing the problem, your design approach, and the final solution. Benefits Fully remote work with flexibility to support your work-life balance. A collaborative environment that empowers you to own your domain and implement best practices. Stable income, benefits, flexible working hours, and opportunities for career advancement. Friendly, professional colleagues who are eager to support you and help you grow. Engaging challenges and opportunities to make a meaningful impact.

Location: Bengaluru, Karnataka, India, APAC From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About Us Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites. About the Role Fivetran is looking for a high-performance, experienced engineer to be a part of a team of Senior Site Reliability Engineer. You will be working closely with engineering teams, product managers, as well as support and sales engineers to build the future of the Fivetran Data Platform Reliability. As a member of the Site Reliability Engineering team, you will take ownership of the overall performance and reliability of Fivetran’s infrastructure, the robustness of the deployment pipeline, as well as timely and effective incident response and resolution. You will take responsibility for the growth and stability of Fivetran’s infrastructure, and be a key player driving effective incident response and overall issue avoidance. Responsible for ongoing reliability and robustness of Fivetran’s production infrastructure by monitoring availability, capacity, and throughput. Evolve systems by adding reliability into our product roadmap Coordinate the re-prioritize or fix critical bugs for support or sales requirements as needed Make recommendations to production infrastructure by interfacing with engineering to ensure 100% availability Ensure scalable artifacts deployment to all environments by automation scripts Constantly monitor infrastructure vulnerabilities and remedy them by working with the security team Technologies You’ll Use Working knowledge of managed Kubernetes (EKS, AKS and GKE) Knowledge of Cloud Platforms and related tooling: AWS, Azure, GCP, Terraform, Ansible, Buildkite, Pulumi and ArgoCD Experience in Python/Shell scripting. Bonus if you have Java, GO, etc Experience with Linux operating systems internals and administration Experience with cloud networking like VPNs, Privatelinks, and Private Service connect (GCP) Experience with databases such as PostgreSQL Skills We’re Looking For 6+  Years of experience working with SaaS products at scale. Working knowledge of managed Kubernetes (EKS, AKS and GKE). Knowledge of Cloud Platforms and related tooling: AWS, Azure, Google Cloud (GCP), Terraform, Ansible, Buildkite, Pulumi and ArgoCD. Experience in Python/Shell scripting and Go Language. Bonus if you have Java. Experience with Linux operating systems internals and administration Experience with cloud networking like Site-to-Site VPNs, Privatelinks and Private Service connect (GCP) #LI-AV1 #LI-HYBRID Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.

Location: Remote - US Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . This is a seasoned engineer role in which you lead technical efforts across multiple teams or subsystems, owning system architecture and development across the stack. A Senior Software Engineer drives technical innovation, acts as a mentor and process advocate, driving improvements that scale beyond a single team. You will exercise high discretion over technical decisions and influence department-level business outcomes. You will set the architectural direction for the systems you own, make and document the key design tradeoffs, and provide strong leadership within and across scrum teams to deliver on that vision. Essential Duties and Responsibilities Proactively research, prototype, and introduce technologies and  system designs for green-field products. Lead the design of new systems and major changes to existing ones: write design docs, evaluate alternatives, and document tradeoffs and decisions (e.g., ADRs) Primary IC for green-field product, ensuring long-term code maintainability, readability, and extensibility. Continuously evolve team processes, driving scalable improvements in delivery, quality, and collaboration. API & Integration Design, develop, and maintain scalable and secure APIs, UIs and integration services. Implement RESTful, RPC, and event-driven APIs/UIs for internal and external systems. Collaborate with product, data, and platform teams to ensure seamless system interoperability. Manage API lifecycle including versioning, authentication, monitoring, and performance optimization. Develop and maintain integration pipelines between SaaS systems, data sources, and third-party applications. Troubleshoot integration issues, conduct root cause analysis, and implement fixes. Support continuous improvement through automation, observability, and best practices. Education, Experience, Knowledge, Skills, and Abilities 5+ years of experience of software development experience Strong proficiency in TypeScript and modern JavaScript. Extensive experience with React and JavaScript web development frameworks (Next.js preferred) Experience with ORM frameworks and relational databases, including data modeling and provenance tracking patterns (Prisma, Drizzle, PostgreSQL) Experience building long-running, fault-tolerant workflows with durable execution engines (Inngest, Temporal, or similar) Hands-on experience integrating state-of-the-art LLMs into production systems, including agent design, tool use, and evaluation Strong understanding of integration patterns, and experiencing building external API integrations (pub/sub, webhook, ETL, etc.). Excellent debugging, analytical, and problem-solving skills. Preferred Experience Bachelor’s degree in Computer Science, Software Engineering, or related field. Working Conditions and Physical Requirements The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and / or standing - Must be able to remain in a stationary position 50% of the time Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - remote, work-from-home 100% of the time with travel to client sites Pay Range Disclosure At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business. The national estimate for the current base range for the position of Senior Full Stack Engineer is: $140,400 - $175,500. This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

Location: Limassol, Cyprus Workplace: hybrid We are looking for an Application Security Engineer in the AppSec team. As a Senior Application Security Engineer at inDrive, you will own whole areas of our AppSec program, from security requirements and design reviews to controls that work in production. You will work with product, platform and infrastructure teams on new architecture, AI systems and the security of our apps and services. The role fits a hands-on engineer who reviews code and architecture, leads work across several teams and makes security decisions based on data. Key Responsibilities Own one or more areas of the AppSec program end to end, including the plan, the risks and the metrics. Run security design reviews and threat modeling of new features, services and AI systems, and defend security requirements at the architecture committee. Assess the security of web, mobile and API applications and find variants of confirmed vulnerabilities across other services. Coordinate external security assessments and bug bounty findings, from triage and prioritisation with teams to fix verification. Design secure authentication and authorization between users, services and internal tools together with platform teams. Choose, pilot and tune security tools, and keep only those that pay off in real findings. Turn incidents and assessment results into lasting controls, policies and secure defaults for developers. Consult development teams on complex security issues and take shifts in AppSec duty for Critical and High incidents. Skills, Knowledge and Expertise Higher education in IT, preferably in information security. Knowledge of mobile application security on Android and iOS, client-server trust, app integrity and protection against bots and account takeover. Deep knowledge of web and API security, including authentication and authorization flaws, SSRF, injections and business logic issues, and the ability to find variants of a vulnerability class across many services. Strong understanding of identity and access, OAuth 2.0, OIDC, JWT, signing key rotation, mTLS, service-to-service authentication and SSO. Understanding of security risks of AI systems and LLM agents, such as prompt injection, excessive tool permissions and agent access to sensitive data, and practical use of AI in your own security work. Practical understanding of cloud-native infrastructure, Kubernetes, containers, API gateways and AWS. Experience in threat modeling and security design review of new features and architecture. Understanding of vulnerability management and risk, including severity, SLA, compensating controls and risk acceptance. Ability to read and review code in at least one language, preferably Golang. Track record of leading projects with two or more teams from a requirement to a verified fix, and clear written English. Experience with secrets and key management, rotation and response to credential leaks. Nice to have Knowledge of software supply chain security, dependencies, CI/CD pipelines and source control platform hardening. Experience tuning SAST, DAST and SCA tools for precision and judging a tool by noise and cost per real finding. Why join us Help us challenge injustice by creating fair choices for millions of people across 47 countries. Develop your professional skills with access to mentoring, career consulting, and learning programs. Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program. Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects. Work alongside people who take initiative, speak openly, and challenge themselves to grow. Improve your language skills through co-financed courses and internal speaking clubs. Annual salary from 70 700 EUR gross. Final benefits may vary depending on the location.

Location: Limassol, Cyprus Workplace: hybrid You’ll be responsible for auditing and hardening cloud and bare-metal systems, securing CI/CD pipelines, and designing robust security controls for our Kubernetes-based environments. This role requires deep technical expertise in cloud security (AWS), infrastructure as code, and vulnerability management, as well as the ability to collaborate on architectural decisions and drive security improvements across infrastructure layers.. Key Responsibilities Perform regular security audits across cloud, bare-metal, CI/CD, auth systems, and logging infrastructure. Support external security audits and penetration tests; manage remediation of findings and misconfigurations. Contribute to architectural design of infrastructure services, providing security expertise throughout the lifecycle. Build and maintain vulnerability scanning processes using commercial and open-source tools; support remediation efforts. Maintain and evolve the internal security infrastructure using AWS, Kubernetes, and modern DevOps practices. Skills, Knowledge and Expertise 3+ years of hands-on experience in infrastructure security, including vulnerability management across cloud and on-prem environments. Proficiency with cloud platforms (especially AWS) and Kubernetes, including applying security best practices and managing secure infrastructure. Strong knowledge of IaC tools (Terraform, Terragrunt, Ansible) and CI/CD pipeline security, using tools like GitHub Actions or GitLab CI. Automation skills using scripting languages such as Python or Bash, with experience building tools and scripts to improve security operations. Familiarity with security compliance and monitoring, including secret management (e.g., Vault), SIEM tools, and standards like ISO 27001 or PCI DSS. Why join us Help us challenge injustice by creating fair choices for millions of people across 48 countries. Develop your professional skills with access to mentoring, career consulting, and learning programs. Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program. Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects. Work alongside people who take initiative, speak openly, and challenge themselves to grow. Improve your language skills through co-financed courses and internal speaking clubs. Annual salary from 70 700 EUR gross Final benefits may vary depending on the location.

Location: Annapolis Junction, MD, United States Job Title Mid‑Level Systems Integration Engineer (Linux, Unix, C) Why IDS? IDS believes in resolving conflict, building innovative approaches to do so. Combining operational expertise with an intimate understanding of today’s greatest challenges, we bring our customers the solutions required for success in a complex and multidimensional world. IDS tailors solutions for a diverse range of government, military, nonprofit, and public‑sector clients. Locations Annapolis Junction, MD Shifts Available Please note, candidates must be flexible. Shift times are general hours; some projects may require earlier or later reporting based on customer requirements. Job Description IDS is seeking a Mid‑Level Systems Integration Engineer to support enterprise computer systems and network operations. The engineer will manage and analyze system and network environments, translate user needs into technical solutions, support system migrations, and evaluate technologies to enhance agency standard solutions. Key Duties • Manage enterprise computer systems and networks by analyzing technical issues and implementing corrective actions • Monitor and interpret visual outputs indicating operational status of systems and network infrastructure • Translate user requests into technical diagnoses and implement solutions to meet operational needs • Develop and support migration strategies to transition customers to new architectures or technologies with minimal impact • Evaluate new technologies and equipment for integration into agency standard solutions Requirements • Bachelor’s degree with five (5) years of relevant experience, or Master’s degree with three (3) years, or Associate’s degree with seven (7) years, or high school diploma/GED with nine (9) years of relevant experience • Degree in Network Engineering, Systems Engineering, Information Technology, or related field • Strong experience with Linux systems • Experience in systems administration, network administration, application administration, or IT support • Experience supporting hardware installation such as servers or network infrastructure • Experience configuring storage solutions such as network‑attached storage • Experience implementing security best practices including PKI certificate generation, deployment, and maintenance • Knowledge of Unix shell scripting languages such as Bash, Bourne, or C • Must possess an IAT‑I certification (e.g., Security+ CE) • Relevant experience must include computer or information systems design or development, programming, information or cyber security, network security, vulnerability analysis, computer forensics, information assurance, or systems engineering • Experience in network or system administration • Active TS/SCI with Polygraph Compensation • Salary range: $110,000 – $130,000 • Benefits