Вакансии

Location: Toronto, Ontario, Canada Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. We take a pragmatic approach to preventing and responding to security risks. In this role not only will you build and contribute to systems which detect malicious activity, you will have the unique opportunity to implement new controls to prevent future incidents. You will work across detection and response and corporate security domains. You'll contribute to practices that keep Sentry secure as we grow: alert triage for corporate and production, detection engineering, deploying preventative controls, identity and access management, investigations and incident response, and more. You'll partner with teams across the company to prevent and respond to security incidents. You will work as a technical collaborator who prioritizes preventative controls, defense in depth, and high signal alerting practices. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security approaches and challenges. IN THIS ROLE, YOU WILL - Maintain, improve, and own detection engineering systems. We own and operate our own detection stack and are building agentic triage with thoughtful security response and orchestration automation. - Perform investigations, and contribute to security incident response. You will assist and contribute to a breadth of incident types, or Sentry and our customers. - Contribute to, maintain, and operate identity and access management systems. Access management is a critical component of our security program. - Have a lot of opportunity to grow and learn across many security domains. We are a highly cross-functional team and you will have opportunities to touch adjacent security projects spanning appsec, infrasec, governance, and privacy. - Research, identify, and respond to emerging threats relevant to Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices. YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you protect a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting breach, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than make a noisy reactive solution which requires manual triage. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team. QUALIFICATIONS - 2-5 years of industry experience in a detection and response, corporate security, or generalist security engineering role - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: alert triage, detection tuning and writing, detection-as-code, security log ingestion, investigations and security incident response, identity and access management (IAM), phishing response, user access reviews, managing endpoint detection and response tooling - Experienced and comfortable programing in at least one language (Python preferred) and comfortable using agentic development workflows - Familiarity with operating distributed cloud technology (AWS, CICD, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and experience with corporate (SSO, SAML, IAM) and defensive security tooling (EDR, SIEM, CNAPP, ZTNA, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow. The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $162,000 to $200,000 CAD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Sentry59 дн назад

Location: San Francisco, California Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. We take a pragmatic approach to preventing and responding to security risks. In this role not only will you build and contribute to systems which detect malicious activity, you will have the unique opportunity to implement new controls to prevent future incidents. You will work across detection and response and corporate security domains. You'll contribute to practices that keep Sentry secure as we grow: alert triage for corporate and production, detection engineering, deploying preventative controls, identity and access management, investigations and incident response, and more. You'll partner with teams across the company to prevent and respond to security incidents. You will work as a technical collaborator who prioritizes preventative controls, defense in depth, and high signal alerting practices. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security approaches and challenges. IN THIS ROLE, YOU WILL - Maintain, improve, and own detection engineering systems. We own and operate our own detection stack and are building agentic triage with thoughtful security response and orchestration automation. - Perform investigations, and contribute to security incident response. You will assist and contribute to a breadth of incident types, or Sentry and our customers. - Contribute to, maintain, and operate identity and access management systems. Access management is a critical component of our security program. - Have a lot of opportunity to grow and learn across many security domains. We are a highly cross-functional team and you will have opportunities to touch adjacent security projects spanning appsec, infrasec, governance, and privacy. - Research, identify, and respond to emerging threats relevant to Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices. YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you protect a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting breach, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than make a noisy reactive solution which requires manual triage. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team. QUALIFICATIONS - 2-5 years of industry experience in a detection and response, corporate security, or generalist security engineering role - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: alert triage, detection tuning and writing, detection-as-code, security log ingestion, investigations and security incident response, identity and access management (IAM), phishing response, user access reviews, managing endpoint detection and response tooling - Experienced and comfortable programing in at least one language (Python preferred) and comfortable using agentic development workflows - Familiarity with operating distributed cloud technology (AWS, CICD, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and experience with corporate (SSO, SAML, IAM) and defensive security tooling (EDR, SIEM, CNAPP, ZTNA, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow. The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $150,000 to $200,000 USD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Sentry59 дн назад

Location: Toronto, Ontario, Canada Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. As a Security Engineer on this team, you'll work across application and platform security domains. You'll contribute to the practices that keep Sentry secure as we grow: security reviews, threat modeling, vulnerability management, and embedding secure coding practices into an engineering organization that cares about doing things right. You'll partner closely with product and engineering teams to influence how features are designed and built from the start. You will work as a technical collaborator who helps make the secure path the obvious one. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security challenges. IN THIS ROLE, YOU WILL - Support and help mature Sentry's security review program. From secure code review, to architecture review, and threat modeling. You'll help build the processes, tooling, and culture which make security a natural part of how we ship and operate. - Contribute to mature vulnerability management practices. Intake, triage, prioritization, remediation tracking, and support of our bug bounty and responsible disclosure program. - Advocate for secure-by-design principles. Partner with engineering and product teams to embed security early in the development lifecycle and integrate security tooling into developer and CI/CD workflows. - Validate and reproduce application and infrastructure security findings. Scanning, manual testing, and supporting penetration testing and vulnerability validation across Sentry's application, SDKs and cloud-based platform. - Help evaluate and respond to emerging threats relevant to application security at Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices. YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you grow into shaping how security gets done across a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting vulnerability, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than solve it manually a hundred times. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team. QUALIFICATIONS - 2-5 years of industry experience designing, building, or securing complex applications and cloud systems - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty and responsible disclosure programs - Experienced and comfortable programming in at least one language, and able to read and reason about code in Python, Typescript, Go, or Rust - Familiarity with using distributed cloud technology (AWS, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and an understanding of how those technologies are secured (cloud networking, IAM, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow. The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $162,000 to $200,000 CAD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Sentry59 дн назад

Manager, Engineering, Secure Build and SCS Services (East Coast Preferred)

Location: San Francisco, California Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. As a Security Engineer on this team, you'll work across application and platform security domains. You'll contribute to the practices that keep Sentry secure as we grow: security reviews, threat modeling, vulnerability management, and embedding secure coding practices into an engineering organization that cares about doing things right. You'll partner closely with product and engineering teams to influence how features are designed and built from the start. You will work as a technical collaborator who helps make the secure path the obvious one. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security challenges. IN THIS ROLE, YOU WILL - Support and help mature Sentry's security review program. From secure code review, to architecture review, and threat modeling. You'll help build the processes, tooling, and culture which make security a natural part of how we ship and operate. - Contribute to mature vulnerability management practices. Intake, triage, prioritization, remediation tracking, and support of our bug bounty and responsible disclosure program. - Advocate for secure-by-design principles. Partner with engineering and product teams to embed security early in the development lifecycle and integrate security tooling into developer and CI/CD workflows. - Validate and reproduce application and infrastructure security findings. Scanning, manual testing, and supporting penetration testing and vulnerability validation across Sentry's application, SDKs and cloud-based platform. - Help evaluate and respond to emerging threats relevant to application security at Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices. YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you grow into shaping how security gets done across a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting vulnerability, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than solve it manually a hundred times. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team. QUALIFICATIONS - 2-5 years of industry experience designing, building, or securing complex applications and cloud systems - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty and responsible disclosure programs - Experienced and comfortable programming in at least one language, and able to read and reason about code in Python, Typescript, Go, or Rust - Familiarity with using distributed cloud technology (AWS, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and an understanding of how those technologies are secured (cloud networking, IAM, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow. The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $155,000 to $200,000 USD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Docker59 дн назад

Location: England; Canada; United States Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ Secure Build builds and operates the infrastructure behind Docker's container builds. The team owns Docker Build Cloud and Docker Hub Automated Builds while developing the next generation of trusted build and CI capabilities. Its direction is to make Docker the trusted place CI runs: isolated execution, brokered access to secrets and networks, and verifiable evidence of what each build or test job did. The work spans Go services, container and build technology, cloud infrastructure, sandboxing and software supply-chain security, alongside the operational responsibility for production systems customers already depend on. SCS Services builds the backend systems and product capabilities that help developers understand, secure and ship software with confidence. The team powers important parts of Docker Scout and Docker Hardened Images, including the services and workflows that turn supply-chain data into useful developer, customer and agent experiences. Its estate is deliberately polyglot, with Clojure and Go services, event-driven workflows, Kafka, legacy Datomic components and newer Spanner-backed services. It also supports the customer journey around discovering, assessing, subscribing to and managing hardened artefacts. We are looking for one Engineering Manager to lead both teams. Together they sit at the centre of Docker's secure software supply-chain work: one creates trusted build outcomes, while the other turns build, artifact and dependency data into services and experiences used across Scout and Docker Hardened Images. This is a two-team leadership role with separate roadmaps, production responsibilities and technical domains. The teams should deliver independently, with explicit contracts and joined-up ownership where their services connect. You will own the health, delivery and growth of both teams and make the trade-offs that keep them effective as a portfolio. You will not be expected to be the deepest expert in every language or domain. You will need enough technical breadth and current engineering judgement to engage credibly in designs, reviews and incidents across both teams, set direction with strong senior engineers, and recognise when the right answer is to create space for their expertise. THE KIND OF PERSON WE'RE LOOKING FOR The successful candidate leads first. They are an experienced engineering manager who can inherit two capable teams, earn trust quickly and help each become a high-performing, value-delivering part of the wider Docker organisation. They are deliberate about where they spend their attention, protect both teams from becoming the second priority, and make portfolio trade-offs visible rather than allowing urgency, proximity or the loudest stakeholder to decide. They stay close to the technical work without trying to own every technical decision. They can hold a substantive conversation about distributed backend systems, event and data pipelines, build and CI infrastructure, trust boundaries and production operations. They are active in design and review, useful during incidents and willing to get hands-on where that moves the work forward. The balance still tilts strongly to leadership, coaching, delivery and organisational judgement. They care about security as a product and engineering property, not only as compliance. They understand how modern attacks exploit identity, secrets, dependencies and build systems, and they can reason about the evidence customers need to trust an artefact or workflow. They lead through judgement, clarity and unblocking rather than ceremony for its own sake. Above all, they grow the engineers around them and help both teams ship outcomes developers and enterprises can rely on. RESPONSIBILITIES: - Lead Secure Build and SCS Services, owning delivery, team health, growth, performance and operational excellence across both. - Turn two changing roadmaps into a coherent portfolio plan with explicit priorities, capacity and trade-offs, and create leadership coverage so neither team becomes the permanent second priority. - Partner with Product to shape strategy and roadmaps for secure build, Docker Scout, Docker Hardened Images and the services that connect them. - Stay close to the technical work through design and code review, incident response and selective hands-on contribution where it adds leverage. - Ensure each team's technical direction supports product, security, reliability and customer priorities, setting it collaboratively with Staff and senior engineers while leaving clear decision ownership with them. - Own the interfaces between the teams, including trust boundaries, contracts, data quality, versioning, operational ownership and customer-facing failure modes. - Balance new product work with inherited systems and on-call, and invest in reliability improvements driven by recurring operational pain. - Own engineer growth and performance, handle difficult conversations directly, hire and retain strong people and build succession depth within both teams. - Align Product, Design, Security, DHI Content, Registry, Hub, sales, support, commercial and legal partners while shielding the teams from churn. - Lead disciplined use of AI-assisted engineering and communicate decisions, risks and progress clearly across UK and US working hours. QUALIFICATIONS - Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience - 5+ years managing high-performing engineering teams, with meaningful responsibility across more than one team or distinct technical domain. - 8+ years of professional, hands-on software engineering experience in backend, infrastructure, platform or developer tooling. - Experience leading, growing and retaining engineers at or above your own technical seniority, including teams you did not build and difficult performance conversations. - A leader-first operating model, with current enough technical judgement to participate in design and review across unfamiliar systems without needing to be the best engineer in the room. - Experience prioritising across competing roadmaps, operational load and stakeholder commitments, with clear mechanisms for allocating attention and capacity. - Strong backend and distributed-systems judgement, including APIs, event-driven architectures, data stores, cloud-native infrastructure and production operations. - Understanding of CI or build-system internals, containers and artefact workflows, plus a strong interest in software supply-chain security and trust boundaries. - Experience leading teams that operate production infrastructure through on-call, incident response, observability, SLOs and the work required to reduce recurring operational load. - Strong product judgement and evidence of shaping roadmaps with Product rather than only receiving requirements. - Clear written and verbal communication, strong cross-functional influence, customer closeness and comfort leading a remote-first organisation across European and US time zones. Helpful, but Not Required - Experience with Go, Clojure or both, and evidence of becoming effective across a polyglot estate. - Experience with Kafka, Spanner, Datomic or comparable event-streaming and distributed-data systems. - Experience with OCI, BuildKit, Buildx, GitHub Actions or comparable build and CI platforms. - Experience with sandboxing, microVMs, untrusted workload execution or multi-tenant infrastructure. - Experience with SLSA, in-toto, SBOMs, VEX, Sigstore, cosign, provenance, signing or vulnerability scanning. - Experience evolving legacy systems while shipping new capability for developer tools, security products, regulated customers or software-agent workflows. WHAT TO EXPECT FIRST 30 DAYS - Build relationships with every engineer and the Product partners for both teams before changing structure, process or roadmap. - Understand Secure Build's product direction, production estate and on-call load, including Docker Build Cloud and Docker Hub Automated Builds. - Understand the SCS Services products, customers, architecture and operational profile, and map the dependencies, trust boundaries and ownership lines between the teams. FIRST 90 DAYS. - Own a coherent portfolio plan with both teams and Product, including explicit capacity for roadmap, reliability and cross-team work. - Establish a sustainable operating cadence and leadership coverage that prevents either team depending on your constant presence. - Agree ownership and escalation paths for shared services and failures, start one material improvement in each team and make progress and risk visible. ONE YEAR OUTLOOK - Both teams deliver predictably against a portfolio that connects secure build, Scout and Docker Hardened Images outcomes without collapsing their distinct missions. - Secure Build has delivered material trusted-build or secure-CI capability and reduced operational risk in its inherited production systems. - SCS Services has delivered material customer outcomes, while both teams have sustainable on-call, clearer ownership and senior engineers leading broader work. Docker considers visa sponsorship on a case-by-case basis based on business needs. Compensation & Equity Canada: CA$244,550 – CA$392,150 + equity United States: $174,900 – $282,700 + equity ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Scorewarrior59 дн назад

Senior Security Engineer

About Scorewarrior Scorewarrior is an independent game studio with a single mission: to excite and unite players all over the world. For over 10 years they've been pursuing it through Total Battle — a product they continue to actively and successfully grow. The team consists of 230 self-motivated professionals who know and love their craft, and the company has recently begun an active company-wide adoption of AI tools. Their home is a great office in Limassol, Cyprus. They offer a strong relocation package for you and your family, and put real effort into making life on the island genuinely varied and interesting. Location & format: Onsite — Limassol, Cyprus. Full relocation support provided. The mission of this role: This is a hands-on engineering role: you design and implement solutions yourself, working side by side with Infrastructure, DevOps, and development teams. Leadership experience is not required here and not expected. Key objectives: — Strengthen cloud and infrastructure security in practice: secrets management, audit logging and controlled production access. — Close high-impact risks: start from an honest assessment of the current state and build a consistent picture of gaps and risks as you go. — Work secure-by-default: wherever possible, remove the security burden from teams through automation and platform-level solutions rather than rules and manual procedures. — Roll up your sleeves: dive into what Infrastructure, DevOps, and development teams are building right now, understand it from the inside, and make security part of it. Job requirements: — Real experience building platform and infrastructure security — you have designed and implemented security solutions yourself: not audited or monitored them, and you can walk us through the architecture, the decisions, and what you'd do differently. — Cloud security as your core strength: Recent hands-on experience securing cloud environments. — A strong infrastructure background. You may have grown entirely within security engineering or moved into security from DevOps, SRE, system administration, or network engineering. What matters is that your thinking is an engineer's thinking: architecture first, building over prescribing. — The ability to explain risks with facts. You have real cases where you make technical teams see why a risk matters and why a change is needed through evidence, architecture, and concrete scenarios. — AppSec, SIEM, and SOC experience are useful but secondary. Nice to have: — Infrastructure-as-Code in practice. — Container and Kubernetes security experience. — Scripting and automation as a habit: Python, Go, or Bash — you'd rather automate a control than write a procedure for humans to follow. — GCP specifically. Their stack is GCP; deep experience with it will shorten your path to impact, though strong AWS/Azure experience translates well. — Experience with securing AI tool usage. Who this role is NOT for: — Your current focus is on monitoring, alert triage and incident analysis. — Your specialization is threat research, malware analysis, cryptography, or lab-style cybersecurity. — Your recent work is mostly paper security: policies, compliance documents, and audits. — You are looking for a management track or ownership of a security function right now — strategy and team building belong to the security leadership role they're hiring separately. Why join Scorewarrior? — 99% employee satisfaction, low turnover, and colleagues who genuinely enjoy collaborating. — Live and work in sunny Cyprus with full relocation and visa support for you and your family. — Shape a global hit: the only European studio with a 4X strategy title in the world’s top-10. — Grow fast in a company that’s already strong, independent, financially rock-solid, and expanding at startup speed, with no layoffs. — Flat structure, collective decision-making, and honest feedback create full transparency and help you grow fast. — High salaries, a 13th month, performance bonuses, and extra rewards for long service, marriage, or welcoming a child, and lunch every day. — Private family health insurance, plus a monthly allowance for children’s pre-school, school, and university education. — Specialized training and certifications, language courses and books to support your growth.

Scorewarrior59 дн назад

Senior Global Health Security (GHS) Advisor, DOS LEAP Global - Morocco

About Scorewarrior Scorewarrior is an independent game studio with a single mission: to excite and unite players all over the world. For over 10 years they've been pursuing it through Total Battle — a product they continue to actively and successfully grow. The team consists of 230 self-motivated professionals, and the company has recently begun an active company-wide adoption of AI tools. The office is located in Limassol, Cyprus, with full relocation support provided. The mission of this role To build a viable, right-sized security system for Scorewarrior that protects what matters without slowing the company down, owning it end-to-end: from diagnosis and strategy to implementation, team, and culture. Key objectives — Build a viable security system across core domains: IAM (access management, MFA, SSO), infrastructure security (cloud, services, network), foundational SDLC/AppSec (security in development and code), and related processes and training. — Start with a proper diagnosis of the current landscape and design a system tailored for the company. — Own security risks and communicate effectively with both business leaders (CTO, CEO) and technical teams (developers, infrastructure). — Make informed build-vs-buy decisions regarding security tools and methods. — Introduce security as a partner, embedding baseline practices smoothly without blocking teams. — Define safe usage policies and guardrails for company-wide adoption of AI tools. — Build and grow the security team deliberately, hiring the first security engineers with clear rationale. Job requirements — 8+ years of hands-on experience in security with real projects designed, implemented, and maintained. — Real systems experience, either through a stable security engineering career or transition from system administration, technical support, or network engineering. — Proven experience hiring and building a team (2+ people) with deliberate structure. — Experience building a security function from unclear state to working system, including assessment, prioritization, and implementation. — Strong awareness of the security product market and ability to choose appropriate tools or methods. — Partner-style operating approach, working through engineering teams without blocking or mandatory authority. Nice to have — Experience in B2C products, SaaS platforms, gamedev, or mobile apps with company size up to 1,000 people. — Experience working with external security providers. — Familiarity with common security frameworks. — Experience as the first or founding security hire in a company. Who this role is NOT for — Those focused mostly on policies, reports, and committees without recent hands-on systems experience. — Those operating with hierarchical authority, mandatory sign-offs, and blocking by default. — Those who replay the same security project regardless of company context. — Those who avoid building and leading a team. What success looks like — Clear diagnosis of the security landscape and a plan trusted by CTO. — Security system working quietly with embedded baseline practices and improved protection. — Security function growing deliberately with well-structured team. Why join Scorewarrior? — 99% employee satisfaction, low turnover. — Office-first team in Limassol with modern seaside workspace and full relocation and visa support. — Opportunity to shape a global hit game. — Financially stable and expanding company with no layoffs. — Flat structure with collective decision-making and honest feedback. — Industry-leading rewards including high salaries, bonuses, and benefits. — Support at every life stage including private family health insurance and education allowances. — Priority on personal growth with training, certifications, language courses, and books.

Dexis64 дн назад

Location: Morocco Dexis is a dynamic professional services firm dedicated to partnering with government and community leaders both in the U.S. and internationally to achieve critical social outcomes in a rapidly changing world. At Dexis, you will experience a corporate culture of inclusiveness, respect, fairness, and trust. You will be given the means and mentorship needed to succeed, and your creativity will be rewarded. LEAP Program Description Global Solutions Ventures (GSV) – a joint-venture partnership between ZemiTek, LLC and Dexis Consulting Group – is implementing the Long-term Exceptional Technical Assistance Project (LEAP Global), a mechanism originally used by USAID to battle against infectious diseases such as malaria, HIV/AIDS, tuberculosis, neglected tropical diseases, and pandemic influenza. As of July 1, 2025, LEAP Global transitioned to the U.S. Department of State (DOS). This initiative aims to address the complex human resource challenges faced by national infectious disease programs in the USA-supported countries. The intervention of this project is to hire and embed technical expert advisors and subject matter experts within government entities. By directly embedding the technical expertise within the national programs, LEAP provides long-term, sustainable lifesaving support to empower host governments to lead and manage key aspects of their infectious disease portfolios and improve coordination between the U.S. Government and the host country. About the Position The Senior Global Health Security (GHS) Advisor will support the Moroccan Ministry of Health and Social Protection Department of Epidemiology and Disease Control (DELM) in carrying out life-saving health assistance in full alignment with the U.S. Presidential Executive Order (EO) directives. The primary focus of the Advisor will be technical support with a special emphasis on preventing, detecting, and responding to emerging infectious disease threats which impact public health. The Senior GHS Advisor will support a One Health (the intersection of human, animal, and environmental health) approach among multi-sectoral Government Departments and Agencies - such as the Ministry of Health, Agriculture, and Environment- for the effective adoption and implementation of life saving interventions focusing on preventing, detecting and responding to emerging infectious disease threats with public health potential. The Senior GHS Advisor will identify programmatic bottlenecks and facilitate solutions through coordinated technical support and facilitation of effort through GHS projects. The Senior GHS Advisor will be based within the Ministry of Health and Social Protection. The advisor will receive direction from the appropriate Ministry staff, who will serve as the onsite Manager/Supervisor. Familiarity with USAID/Department of State programming and C/AOR experience are highly desirable as the advisor is expected to support the implementation of the GHS portfolio. The advisor will report to the U.S. Department of State on a weekly and monthly basis. Responsibilities With input from the Moroccan Ministry of Health and Social Protection, GHS envisions two Senior GHS advisors will support the Ministry under this program. The profile of each advisor is as follows: An expert in epidemiology and public health, responsible for improving human health outcomes in line with a One Health approach, which includes enhancing multisectoral coordination to detect, respond, and mitigate the health security threat of high-risk zoonotic diseases with human epidemic potential. The advisor will be responsible for the interpretation of epidemiological trends, as well as the development of reports, summaries, and bulletins; An expert in management and monitoring-evaluation, responsible for supporting the monitoring and evaluation of performance indicators related to emerging infectious diseases, the establishment of dashboards, gap analysis, and the strengthening of steering and reporting tools. In addition to these areas of expertise, the advisor will also have the following responsibilities: Support multisectoral ministries in effective delivery of life-saving health assistance through utilization of domestic and donors’ resources (e.g., Global Fund). Assist the relevant ministries with effective delivery of LHA GHS services, including but not limited: community-based active surveillance, systems capacity for detecting priority diseases/threats, data systems for monitoring, analyzing, and reporting on threats, infection prevention and control (IPC), including commodities and WASH in healthcare facilities, case management, including Emergency Management including Emergency Operating Centers (EOC) and Point of Entry Screening, Risk Communication and Community Engagement, Emergency outbreak response. Provide technical support and actively engage with field work to implement programmatic and response interventions at national and sub-national levels. Assist in monitoring the progress of GHS program implementation and provide recommendations for improvements in service delivery. Review and analyze performance reports submitted to the Global Fund (GF), and other partners. Help organize regular discussions among the multisectoral stakeholders and partners to ensure alignment of technical approaches in the respective GHS portfolio. Provide support to the appropriate multisectoral ministries in identification of performance gaps, potential barriers and bottlenecks, and facilitate consensus on targeted interventions to improve performance on key indicators attributable to: A reduction in incidence and mortality for epidemic and pandemic prone diseases. Strengthening systems to prevent, detect, and respond to infectious disease threats. Rapid and effective responses to infectious disease outbreaks posing a threat to public health. Support the implementation and expansion of best practices in GHS and outbreak response nationwide. Support MoHP and other relevant Ministries in routine review of service delivery processes and outcomes. Promote the dissemination of best practices and effective models nationwide. Promote prioritized interventions in effective community-based active surveillance, strengthening systems capacity for detecting priority diseases/threats, and data systems for monitoring, analyzing, and reporting on threats. Support the adoption of infection prevention and control (IPC), including commodities and WASH in healthcare facilities, and case management. Support and strengthen Emergency Management including Emergency Operating Centers (EOC) and Point of Entry (POE) screening; risk communication. Support the relevant Ministries to rapidly and accurately report infectious diseases threats to the relevant, domestic and international system– such as the International Health Regulations (IHR) 7-1-7 Outbreak Response Model and World Animal Health Information System (WAHIS) for quick responses to pandemic threats. Assist the relevant multisectoral Ministers in emergency outbreak responses as needed. Assist the relevant multisectoral Ministries to achieve the relevant GHS-related targets including the Joint External Evaluation (JEE); IHR States Parties Self-Assessment (SPAR); and the Pandemic Fund Framework which includes reporting on the 7-1-7 target (7 days to detect, 1 day to report, 7 days to complete the initial response) Support the relevant Ministries in effective utilization of Pandemic Fund grants, other donors’ resources, and emergency outbreak responses efforts. Provide technical support to develop Pandemic Fund grant applications and support grant implementation review to ensure effective grant implementation and avoid duplication with US Government funded projects. Consult relevant stakeholders on required technical assistance. Assist in monitoring the progress of grant implementation. Review and analyze performance reports submitted to the Pandemic Fund and other partners. Help organize regular discussions among the relevant multisectoral stakeholders, Ministries, and donors, and State to ensure alignment of technical approaches in the respective GHS portfolios. Support emergency outbreak response including assisting with mobilizing resources, coordination of efforts, and technical support for efforts to contain and respond to the outbreak. Communications: Participate in regular conference calls with multisectoral stakeholders, U.S. Embassy and GHSD Washington to review progress, discuss activities and address emerging issues. Provide information and avail him/herself for calls/meetings with the U.S. Embassy as requested. Provide monthly reports to US Embassy/U.S. Department of State. REPORTING: The Senior Advisor will provide a detailed monthly report to the U.S. Department of State submitted by the 5th day of the following month. Additionally, the Advisor will submit a weekly progress report to U.S. Embassy/Department of State (and participate in weekly calls) to include a short paragraph about main successes for that week. Qualifications Advanced Degree: A master’s or doctoral degree in public health, epidemiology, global health, medicine, or a related field. At least 7 years in global health security, infectious disease prevention and control, or health systems strengthening. Proven ability to lead teams, manage complex projects, and coordinate with multiple stakeholders, including government agencies, donors, and implementing partners. Demonstrated expertise in areas such as: disease surveillance and outbreak response, laboratory systems strengthening, risk communication and community engagement. At least 5 years of USG experience as well as partners management. Proven ability to provide high-level technical advice to government officials, international organizations, and other stakeholders. Experience managing complex health programs, including planning, implementation, monitoring, and evaluation. Ability to establish and maintain effective working relationships with government officials, donors, NGOs, and community organizations. Strong ability to work with diverse stakeholders, including government agencies, donors, NGOs, and multilateral organizations. Strong written and verbal communication skills in English and French. Proficiency in Arabic/Darija preferred. Benefits Dexis offers benefits to support employees’ health, financial security, and well-being. The benefits outlined below are for full-time, US-based positions only. These benefits include: Medical and prescription drug coverage: A choice of three UnitedHealthcare medical plans, with coverage options for employees and eligible dependents. Dental insurance: Dental coverage for employees and eligible dependents, including preventive, basic, major, and orthodontic services, subject to plan limits. Company-paid vision insurance: Vision coverage for employees and eligible dependents, with premiums paid in full by Dexis. Employer-funded health reimbursement arrangement (HRA): Employees who enroll in the Silver HRA medical plan receive an employer-funded HRA to help pay eligible in-network deductible expenses. Company-paid life and disability insurance: Basic life and accidental death and dismemberment (AD&D) insurance, plus short-term and long-term disability coverage. Optional supplemental insurance: Voluntary supplemental life and AD&D insurance options, including life insurance options for eligible dependents. Employee Assistance Program (EAP): Company-paid access to confidential counseling and legal and financial support resources for employees and their families. Health and wellness resources: Virtual care, behavioral health resources, and wellness programs available through the medical plan. Benefits assistance: Personalized support with benefit enrollment, coverage questions, claims, and finding providers through the Employee Care Center. Participation, coverage, and employee contributions are subject to applicable benefit plan terms and eligibility requirements. Dexis is on a mission to help solve today’s most pressing global political, social, and economic challenges and create a world where all people are safe and prosperous. As a Dexis employee, you will be challenged, empowered, and mentored. Our motto is “find a way or make a way” — that’s how Dexis goes “all in.” How will you? If you are passionate about this opportunity, apply now! Only those applicants who meet the above criteria will be contacted for interview. Dexis is an Equal Opportunity Employer, and does not discriminate on the basis of race, color, sex, national origin, religion, pregnancy, disability, age, genetic information, military service, veteran status, ethnicity, citizenship, sexual orientation, gender identity, marital status, childbirth and related medical conditions, including lactation, or any other protected class under applicable law.

Scorewarrior64 дн назад

Location: Limassol Cyprus Workplace: OnSite ABOUT SCOREWARRIOR Scorewarrior is an independent game studio with a single mission: to excite and unite players all over the world. For over 10 years we've been pursuing it through Total Battle — a product we continue to actively and successfully grow. We're a team of 230 self-motivated professionals who know and love their craft, and we've recently begun an active company-wide adoption of AI tools. Our home is a great office in Limassol, Cyprus. We offer a strong relocation package for you and your family, and we put real effort into making life on the island genuinely varied and interesting. Location & format: Onsite — Limassol, Cyprus Full relocation support provided THE MISSION OF THIS ROLE To build a viable, right-sized security system for Scorewarrior — one that protects what actually matters without slowing the company down — and to own it end-to-end: from diagnosis and strategy to implementation, team, and culture. KEY OBJECTIVES - Build a viable security system across the core domains: IAM (access management, MFA, SSO), infrastructure security (cloud, services, network), foundational SDLC/AppSec (security in the development process and in the code), and the processes and training around them. We expect you to start with a proper diagnosis of our landscape — and design the system for this company, rather than replaying a project from a previous job. - Own security risks and speak both languages: business language with the CTO and CEO — risk, cost, and priorities; technology language with developers and infrastructure teams — architecture, trade-offs, and practical solutions. - Make the right build-vs-buy calls: you know the security product market well enough to tell when a problem needs a tool, when a simpler method will do, and when the problem isn't in the tooling at all — it's in habits and heads. - Introduce security as a partner, not a blocker: embed baseline practices so smoothly that teams barely notice them; for everything on top of that — inform, help when asked, and don't push when it's not the team's priority right now. - Define how AI tools are used safely: own the policy and guardrails for the company-wide adoption of AI tools — what data can go where, and how teams can use them productively without creating new risks. - Build the team: hire the first security engineers deliberately — knowing who you're hiring and why — and grow the function as the company's needs grow. JOB REQUIREMENTS - 8+ years of hands-on experience in security — real projects you designed, implemented, and stayed around long enough to see working. At the interview, we'll ask about specific cases, decisions, and their consequences — not about frameworks in theory. - A background that gave you real systems experience. Two paths work equally well for us: a stable security engineering career from university onwards, or a transition into security from system administration, technical support, or network engineering. What matters is the result — you understand infrastructure and architecture from the inside, not from diagrams. - Proven experience hiring and building a team — even a small one (2+ people). What matters is that it was deliberate: you can explain who you hired, why them, and how the team was structured around the actual problems. - Experience building a security function, not just running one. You've taken security in an organization from an unclear state to a working system: assessed the landscape, set priorities, chose what to implement and what to skip — and can show what changed as a result. - Strong awareness of the security product market. You can tell when a problem needs a tool, when a simpler method will do, and when the problem is in habits rather than tooling — and you have real examples of each call. - A partner's operating style. You work through engineering teams, not above them: no separate authority demands, no blocking by default. Your practices get adopted because they make sense, not because they're mandatory. - English and Russian language at least B2 level or higher. NICE TO HAVE - Experience in companies closest to our context: B2C products, SaaS platforms, gamedev, or mobile apps, with company size up to 1,000 people. - Experience working with external security providers. - Familiarity with common security frameworks. - Experience being the first or founding security hire in a company. WHO THIS ROLE IS NOT FOR We believe in being upfront about fit. This role is probably not for you if: - Your recent years were mostly about policies, reports, and committees — and real systems are something you haven't touched in a long time. - Your default operating mode is hierarchy: separate authority, mandatory sign-offs, and blocking by default. - You have a proven security project you replay at every company, regardless of its actual context and needs. - Building and leading a team is something you'd rather avoid — hiring is a core part of this role, not an add-on. WHAT SUCCESS LOOKS LIKE In the first months, success means a clear diagnosis: you understand our landscape, know where the real risks are, and have a plan the CTO believes in — built for this company, not imported from a previous one. Further on, success means the security system is quietly working: baseline practices are embedded so smoothly that teams barely notice them, access and infrastructure are demonstrably better protected, and teams come to security for help rather than hide from it. And success means the function is growing deliberately: the first security engineers are hired, you can explain why each of them, and the team is structured around our actual problems — not around an org chart. WHY JOIN SCOREWARRIOR? - A Great Place to Work. 99% employee satisfaction, low turnover, and colleagues who genuinely enjoy collaborating. - Live and work in sunny Cyprus. We’re an office-first team in Limassol with a modern seaside workspace, and full relocation and visa support for you and your family. - Shape a global hit. We’re the only European studio with a 4X strategy title in the world’s top-10. Our top-50 mobile game has grown 25x in revenue and audience in the last five years. - Grow fast in a company that’s already strong. We’re independent, financially rock-solid, and expanding at startup speed, and we have never had lay-offs. - Work where ideas win. Flat structure, collective decision-making, and honest feedback create full transparency and help you grow fast. - Earn industry-leading rewards. High salaries, a 13th month, performance bonuses, and extra rewards for long service, marriage, or welcoming a child, and lunch every day. - Feel supported at every stage of life. Private family health insurance, plus a monthly allowance for children’s pre-school, school, and university education. - Your growth is our priority. From specialized training and certifications to language courses and books, you’ll have everything you need to keep learning.

Attio66 дн назад

Location: Poland; Portugal; Ireland; Germany Workplace: Remote Attio is the CRM for agentic revenue. Designed for the most ambitious go-to-market teams, it gives companies the power to understand every customer, automate at scale, and build their go-to-market motion exactly as they need. We've raised $116M from some of the world's best investors: GV (Google Ventures), Redpoint, Balderton, Point Nine, and 01A. We hire builders who thrive on complex technical challenges, hold themselves to a high bar, and genuinely care about delighting the people who use what they build. The team here brings sharp judgement, real craft, and the drive to do exceptional work. We're obsessed about the details and energized by the frontier. If you want to do the best work of your career, this is the right place. ABOUT THE ROLE Attio is an AI-native platform trusted with our customers' most sensitive data - and keeping that data secure is foundational to everything we build. As we scale, so does the challenge: a large multi-tenant SaaS platform, AI-driven product features that introduce entirely new attack surfaces, and an engineering team shipping fast with AI-assisted development. We're looking for a Security Engineering Lead to build and lead Attio's Product Security function, spanning application security and security operations. You'll work alongside our Engineering Leadership to make Attio secure by design, lead the response when things go wrong, and recruit a world-class team of Security Engineers and SecOps practitioners. This is a rare opportunity to define how security works at a company operating at the frontier of AI. WHAT YOU’LL DO - Build and lead Attio’s Product Security function. Secure Attio’s large-scale, AI-native SaaS platform, and the sensitive customer data on which it operates. - Work with Engineering Leadership peers to ensure that Attio is secure by design. - Understand and mitigate the unique risks and attack vectors associated with AI-driven product features, and AI-assisted software development. - Ensure that Attio is at the forefront of secure software development and operational practices. - Lead production security incident response; deeply understand security issues and their associated root causes and risks, create remediation plans, and drive to resolution. - Recruit and retain a world-class team of Security Engineers and SecOps practitioners. WHAT YOU’LL BRING - Full understanding of the Application Security landscape in a high scale, multi-tenant SaaS context. - Appreciation of the tools and techniques used to secure SaaS applications, through prevention, detection and remediation of security issues. Understanding of how to integrate those tools into an effective, scalable, cost-efficient program that delivers a secure service. - First-class incident response skills, through the entire incident lifecycle of detection, remediation, clean-up, and post-incident corrective action. - A recognized “talent magnet” and mentor who can recruit, retain and develop a high-quality Information Security team which continues to deliver for the business as Attio scales. DESIRABLE - Experience of running an Application Security program in a high scale, multi-tenant SaaS context. - Experience of hiring and managing a team of Security Engineers, and working with cross-functional partners. - Experience of security certification and re-certification programs. - Project or program management experience. - Background in software engineering or systems administration. WHAT WE OFFER - Competitive salary of €120,000 to €145,000 - Equity in an early-stage tech company on an incredible trajectory - Apple hardware - Team off-site in fun places! (We've been to Barcelona, Lisbon, Malta, and Split so far) - Location specific benefits nb. We are open to candidates currently living in: Poland, Germany, Portugal, Ireland

Attio66 дн назад

Location: United Kingdom Workplace: Remote Attio is the CRM for agentic revenue. Designed for the most ambitious go-to-market teams, it gives companies the power to understand every customer, automate at scale, and build their go-to-market motion exactly as they need. We've raised $116M from some of the world's best investors: GV (Google Ventures), Redpoint, Balderton, Point Nine, and 01A. We hire builders who thrive on complex technical challenges, hold themselves to a high bar, and genuinely care about delighting the people who use what they build. The team here brings sharp judgement, real craft, and the drive to do exceptional work. We're obsessed about the details and energized by the frontier. If you want to do the best work of your career, this is the right place. ABOUT THE ROLE Attio is an AI-native platform trusted with our customers' most sensitive data - and keeping that data secure is foundational to everything we build. As we scale, so does the challenge: a large multi-tenant SaaS platform, AI-driven product features that introduce entirely new attack surfaces, and an engineering team shipping fast with AI-assisted development. We're looking for a Security Engineering Lead to build and lead Attio's Product Security function, spanning application security and security operations. You'll work alongside our Engineering Leadership to make Attio secure by design, lead the response when things go wrong, and recruit a world-class team of Security Engineers and SecOps practitioners. This is a rare opportunity to define how security works at a company operating at the frontier of AI. WHAT YOU’LL DO - Build and lead Attio’s Product Security function. Secure Attio’s large-scale, AI-native SaaS platform, and the sensitive customer data on which it operates. - Work with Engineering Leadership peers to ensure that Attio is secure by design. - Understand and mitigate the unique risks and attack vectors associated with AI-driven product features, and AI-assisted software development. - Ensure that Attio is at the forefront of secure software development and operational practices. - Lead production security incident response; deeply understand security issues and their associated root causes and risks, create remediation plans, and drive to resolution. - Recruit and retain a world-class team of Security Engineers and SecOps practitioners. WHAT YOU’LL BRING - Full understanding of the Application Security landscape in a high scale, multi-tenant SaaS context. - Appreciation of the tools and techniques used to secure SaaS applications, through prevention, detection and remediation of security issues. Understanding of how to integrate those tools into an effective, scalable, cost-efficient program that delivers a secure service. - First-class incident response skills, through the entire incident lifecycle of detection, remediation, clean-up, and post-incident corrective action. - A recognized “talent magnet” and mentor who can recruit, retain and develop a high-quality Information Security team which continues to deliver for the business as Attio scales. DESIRABLE - Experience of running an Application Security program in a high scale, multi-tenant SaaS context. - Experience of hiring and managing a team of Security Engineers, and working with cross-functional partners. - Experience of security certification and re-certification programs. - Project or program management experience. - Background in software engineering or systems administration. WHAT WE OFFER - Competitive salary of £120,000 to £150,000 - Equity in an early-stage tech company on an incredible trajectory - 25 days holiday plus local public holidays - Apple hardware - Private medical insurance through AXA - Pension contribution through Hargreaves Lansdown - Enhanced family leave - Team off-site in fun places! (We've been to Barcelona, Lisbon, Malta, and Split so far)

Attio66 дн назад

Technical Program Manager, Security

Location: London Workplace: Hybrid Attio is the CRM for agentic revenue. Designed for the most ambitious go-to-market teams, it gives companies the power to understand every customer, automate at scale, and build their go-to-market motion exactly as they need. We've raised $116M from some of the world's best investors: GV (Google Ventures), Redpoint, Balderton, Point Nine, and 01A. We hire builders who thrive on complex technical challenges, hold themselves to a high bar, and genuinely care about delighting the people who use what they build. The team here brings sharp judgement, real craft, and the drive to do exceptional work. We're obsessed about the details and energized by the frontier. If you want to do the best work of your career, this is the right place. ABOUT THE ROLE Attio is an AI-native platform trusted with our customers' most sensitive data - and keeping that data secure is foundational to everything we build. As we scale, so does the challenge: a large multi-tenant SaaS platform, AI-driven product features that introduce entirely new attack surfaces, and an engineering team shipping fast with AI-assisted development. We're looking for a Security Engineering Lead to build and lead Attio's Product Security function, spanning application security and security operations. You'll work alongside our Engineering Leadership to make Attio secure by design, lead the response when things go wrong, and recruit a world-class team of Security Engineers and SecOps practitioners. This is a rare opportunity to define how security works at a company operating at the frontier of AI. WHAT YOU’LL DO - Build and lead Attio’s Product Security function. Secure Attio’s large-scale, AI-native SaaS platform, and the sensitive customer data on which it operates. - Work with Engineering Leadership peers to ensure that Attio is secure by design. - Understand and mitigate the unique risks and attack vectors associated with AI-driven product features, and AI-assisted software development. - Ensure that Attio is at the forefront of secure software development and operational practices. - Lead production security incident response; deeply understand security issues and their associated root causes and risks, create remediation plans, and drive to resolution. - Recruit and retain a world-class team of Security Engineers and SecOps practitioners. WHAT YOU’LL BRING - Full understanding of the Application Security landscape in a high scale, multi-tenant SaaS context. - Appreciation of the tools and techniques used to secure SaaS applications, through prevention, detection and remediation of security issues. Understanding of how to integrate those tools into an effective, scalable, cost-efficient program that delivers a secure service. - First-class incident response skills, through the entire incident lifecycle of detection, remediation, clean-up, and post-incident corrective action. - A recognized “talent magnet” and mentor who can recruit, retain and develop a high-quality Information Security team which continues to deliver for the business as Attio scales. DESIRABLE - Experience of running an Application Security program in a high scale, multi-tenant SaaS context. - Experience of hiring and managing a team of Security Engineers, and working with cross-functional partners. - Experience of security certification and re-certification programs. - Project or program management experience. - Background in software engineering or systems administration. WHAT WE OFFER - Competitive salary of £120,000 to £150,000 - Equity in an early-stage tech company on an incredible trajectory - 25 days holiday plus local public holidays - Apple hardware - Private medical insurance through AXA - Pension contribution through Hargreaves Lansdown - Enhanced family leave - Team off-site in fun places! (We've been to Barcelona, Lisbon, Malta, and Split so far)

Fivetran67 дн назад

Location: Oakland, California, United States, AMER From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About Us Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites. About the Role Fivetran + dbt is building data pipelines to power the modern data stack for thousands of companies. We’re looking for a high-performance, experienced hands-on technical program manager(TPM) in the security domain to be part of an Engineering team. In this role, you will be responsible for leading and managing security-related initiatives across the organization. It involves collaborating with cross-functional teams to ensure the successful planning, execution, and delivery of security programs. The TPM will act as a bridge between technical teams and business stakeholders, ensuring alignment with organizational goals while mitigating security risks. The work is very diverse. Fivetran is a multi-cloud environment operating on AWS, GCP, and Azure. You will help select security tools, implement improvements within our environments, and assist in developing new processes to increase our security posture. This is a full-time position based out of our Oakland, CA office. Our hybrid work model offers a blend of remote flexibility and in-person collaboration, including two days in the office each week to connect and build as a team. Technologies You’ll Use Bash, Python, JS, BigQuery, Looker, Sigma, Azure, AWS, GCP, Terraform, Docker, Kubernetes, Github, Buildkite, SonarQube, Grafana, Prisma, Synk, Signal Sciences, AI Tools What You’ll Do This is the primary person in engineering responsible for executing the security vulnerability management program for engineering, including infrastructure, code, and dependency vulnerabilities. Collaborate with Security and Engineering teams to ensure vulnerabilities are identified, prioritized, and patched. Provide technical oversight and accountability to ensure the effective delivery of security fixes. Enhance processes by evaluating tools, recommending improvements, and driving automation for faster resolution. Usage of AI in defining the roadmap for a proactive security approach based on risk assessment/rating Running the Dependency management and image hardening programs Using AI to contribute to the remediation of code and infrastructure vulnerabilities Establish and lead a code scanning program in collaboration with infrastructure, engineering, and security teams to ensure seamless integration and sustainable security practices. Dedicate up to 20% of the time to assessing business systems to identify vulnerabilities and compliance gaps proactively. Develop a scanning and detection plan and establish policies and standards for internal data access tools to improve overall system security. Advocate for tools and solutions that support shift-left strategies, driving early integration of security and testing in the development lifecycle. Skills We’re Looking For Over 5 years of experience in technical program management with a strong focus on security engineering, vulnerability management, cloud security, and application security. Proficient in applying program management methodologies, tools, and best practices to deliver complex security initiatives. Exceptional skills in prioritization, organization, and multitasking to manage multiple programs effectively. Proven ability to work collaboratively with cross-functional teams, including product teams, SRE/QE engineers, and developers, to embed a security-first mindset into workflows and practices. Deep understanding of key security domains, including application/infrastructure security, data privacy, threat modeling, vulnerability management, and secure software development lifecycle (SDLC). Strong grasp of security concepts and principles, including network security, encryption, authentication, and authorization. Hands-on experience with SAST/DAST tools, agent-based firewalls, IDS/IPS technologies, and automation tools for security orchestration. Experience with scripting languages for automating security processes. Proficient in researching and validating vulnerabilities while proposing effective remediation or mitigation strategies. Strong familiarity with OWASP principles and best practices for securing web applications, including the OWASP Top 10 vulnerabilities and Application Security Verification Standard (ASVS) Up-to-date knowledge of market trends, emerging technologies, and best practices in cloud security Strong analytical, problem-solving, and communication skills to address security challenges, coupled with the ability to influence and collaborate effectively with engineering teams in enhancing security measures and mitigating vulnerabilities in a dynamic, fast-paced environment. #LI-HYBRID #LI-EM1 The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role. Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process. Oakland Pay Range $158,284 — $197,855 USD Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.

LangChain68 дн назад

Security Engineer - Detection & Response

Location: San Francisco, CA; New York, NY Workplace: OnSite ABOUT US At LangChain, our mission is to make intelligent agents ubiquitous. We build the foundation for agent engineering in the real world, helping developers move from prototypes to production-ready AI agents that teams can rely on. We began as widely adopted open-source tools and have grown to also offer a platform for building, evaluating, deploying, and operating agents at scale. With $125M raised at Series B from IVP, Sequoia, Benchmark, CapitalG, and Sapphire Ventures, we’re at a stage where we’re continuing to develop new products, growth is accelerating, and all team members have meaningful impact on what we build and how we work together. LangChain is a place where your contributions can shape how this technology shows up in the real world. Today, our platform includes LangSmith (Observability, Evaluation, Deployment, Fleet, and Sandboxes), our open source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement. We have 100M+ monthly open source downloads, 6,000+ active LangSmith customers, and 5 of the Fortune 10 use LangSmith in production (+ 35% of the Fortune 500 overall), including teams at Klarna, Clay, Coinbase, Workday, Lyft, Cloudflare, Harvey, Rippling, Vanta, LinkedIn, Monday.com, Nvidia, and Bridgewater. ABOUT THE TEAM The Security team ensures that while AI moves at breakneck speed, everyone driving the racecar is wearing a seatbelt. We secure LangChain's core platform and protect AI agents from emerging threats. We work across the stack so developers can confidently ship from prototype to production without compromising on safety or privacy. ABOUT THE ROLE You'll be the hands-on detection and response engineer responsible for how we see, stop, and learn from threats across LangChain's production platform, cloud infrastructure, and the services that host and execute agentic workloads. You'll partner closely with Product Security to turn threat models, vulnerabilities, and incidents into telemetry, detections, and durable defenses. Your primary focus is engineering: building detection, investigation, and response systems that scale the Security team's impact beyond what manual operations allow. We are looking for engineers who think like builders, not just operators — strong software skills are a must. This role participates in an incident on-call rotation, but its core focus is engineering systems that reduce risk, speed up investigations, and make incidents less frequent and less costly. Location/City: San Francisco or NYC WHAT YOU'LL DO - Own the detection lifecycle: Translate threat models, incidents, and attacker behavior into telemetry requirements and detections-as-code. Validate coverage, measure signal quality, tune false positives, and continuously test whether defenses work. - Build security monitoring and telemetry: Design the telemetry pipeline end-to-end across cloud (GCP/AWS), Kubernetes, and the LangSmith/LangGraph control plane. Instrument services, define the signals that matter, and make security data reliable and useful. - Engineer investigations and threat hunting: Build tools and workflows for proactive hunting, evidence collection, incident scoping, and containment. Turn investigation findings into new detections and lasting improvements. - Use agents to scale the team: Build reliable internal AI agents and automation that triage alerts, enrich findings, gather evidence, scope incidents, and accelerate routine security work. Design human-in-the-loop controls and evaluations so automation is safe, observable, and trustworthy. - Lead incident response and participate in on-call: Triage, scope, contain, and remediate security incidents, then drive postmortems that produce durable engineering changes. - Partner with Product Security: Turn product threat models and vulnerability findings into production monitoring, and feed real-world detection and incident learnings back into secure design. WHAT YOU'LL BRING - 5+ years in security engineering, with meaningful experience in detection engineering, security operations, or incident response — and the software skills to build your way out of repetitive work. - Strong software engineering in Python or Go (TypeScript a plus). You design maintainable systems and write production code, not just one-off scripts. - Cloud and Kubernetes detection depth: Experience with GCP or AWS logging, Kubernetes audit and runtime telemetry, workload identity, and turning raw signals into actionable detections. - Detection and adversary expertise: The ability to model realistic attacker behavior, hunt across complex systems, test detection coverage, and distinguish meaningful signal from noise. - Hands-on incident response: You've participated in on-call, led incidents, and written postmortems that changed how a team operates. - Experience building reliable automation or developer-facing systems: You can design APIs and workflows, instrument what you build, evaluate quality, and operate it in production. - A pragmatic product mindset: You can identify users and requirements, prioritize the highest-leverage problems, define success, and ship iteratively. NICE TO HAVE - Experience building or operating AI agents for security workflows such as alert triage, investigation, evidence collection, or human-in-the-loop response. - Proficiency using AI tooling to accelerate security investigations and engineering work. - Understanding of AI threats, adversarial testing, and the security boundaries of LLM and agent workloads. - Exposure to SOC 2 or ISO 27001 monitoring and evidence automation. - Experience with infrastructure as code such as Terraform or Helm. - Experience securing both SaaS and self-hosted or air-gapped deployments. Annual salary range: $185,000- $250,000 USD Compensation Philosophy: We offer competitive compensation that includes base salary, variable compensation for relevant roles, meaningful equity, benefits, and perks. We are hiring for this role across a range of scope, and the compensation band reflects that. Your offer depends on what we learn about your impact, craft, leadership, and communication during the interview process. We will tell you early where you’re tracking and talk comp with you before offer stage. Team members in the EU, UK, and APAC receive locally competitive benefits aligned with regional norms and regulations. BENEFITS Benefits include medical, dental, and vision coverage, flexible vacation, a 401(k) plan, meals on in-office days in the US and more.

Canonical71 дн назад

Software Engineer - Secure Container Images

Location: Home Based - Americas; Home Based - APAC; Home based - EMEA With more than 10 billion pulls , Canonical's container images are trusted by developers worldwide to build and run software securely and at scale. That trust rests on our commitment to hardened, production-ready images. We are advancing the state of the art with a new generation of Ubuntu-based container images we call "rocks": minimal images engineered for performance and usability and backed by long-term security commitments. As a member of the team, you will own the path from upstream source to published image, turning open source software into tested, signed, and continuously maintained artifacts that developers can deploy with confidence. This is fast-paced, multi-disciplinary software engineering. Because most of the software we package originates from third-party upstreams, you will work across a broad range of container technologies and hundreds of open source projects, often in several programming languages, integrating and maintaining them so they are easy to consume on Ubuntu. Automation is central to the role: you will build the pipelines that package, build, test, and publish images at scale. Your seniority in this role will reflect your software engineering experience and your ability to mentor and guide more junior colleagues. Location: This is a globally remote role This role entails Build and maintain a growing portfolio of high-quality, hardened container images Design and operate automated CI/CD pipelines that build, test, scan, sign, publish, promote, and retire images across environments and architectures Write tooling and tests to assess security compliance and cloud-native compatibility Work closely with the community and partners to share container expertise and keep our portfolio current with new features, patches, and applications Collaborate with our product security, platform, infrastructure, and customer-facing teams Contribute technical input to the team's decision-making Set the standard for quality, defining image standards that span security, compatibility, performance, size, and developer experience Grow our knowledge base and write about the work we do Work in a collaborative, agile, and globally distributed environment Mentor colleagues and contribute to hiring Work from home with global travel of up to 15% for internal and external events What we are looking for in you Proficiency in Bash and Python Experience working with CI/CD systems (e.g. GitHub Actions, Jenkins) Experience building container images Command of at least one container management or orchestration tool (e.g. Docker, Podman, or Kubernetes) Hands-on experience with Linux systems, package management, build systems, release engineering, or artifact pipelines Clear communication and end-to-end ownership, spanning design, review, documentation, operation, and cross-team collaboration A commitment to sharing knowledge and helping those around you grow A genuine appetite for learning and for working outside your comfort zone A Bachelor's degree or equivalent in Computer Science, a STEM field, or a similar discipline An exceptional academic track record from both high school and university Business level written and spoken English. Sincere personal motivation aligned with our mission. International travel 2-4 times a year for company events up to two weeks long. 0-7 years relevant experience. In addition we expect that you will match our values, by being: Precise, taking care to deliver correctness and clarity. Reliable, delivering high quality work that builds trust and confidence. Accessible, collaborating to build products and systems that are usable. Adroit, blending enthusiasm, knowledge, adaptability, style and character. Nice-to-have skills A security-oriented maintenance mindset: you can investigate dependency and vulnerability findings, assess their impact, and deliver a safe fix An understanding of software supply chain security, with some experience generating and consuming artifacts such as SBOMs, signatures, provenance, or CVE reports Familiarity with GitOps principles and workflows Familiarity with additional languages such as Go or Rust Hands-on experience building minimal and distroless container images Knowledge of the OCI specifications Familiarity with security or compliance frameworks such as CIS, NIST, FedRAMP, or DISA STIG Evidence of contributions to open source projects A passion for embedding security across all stages of the engineering lifecycle (DevSecOps), and an interest in using AI or agentic development responsibly and safely Relevant Linux, container, or cloud-native certifications (such as CKS or DCA) are welcome If your experience is close but does not match every requirement, we encourage you to apply. We value transferable experience from Linux packaging, release engineering, build systems, platform engineering, and open-source maintenance. What we offer colleagues We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. Distributed work environment with twice-yearly team sprints in person Personal learning and development budget of USD 2,000 per year Bi-annual compensation review Company recognition rewards 40 days annual leave per annum, including public holidays and our All Company holiday periods Maternity and paternity leave Team Member Assistance Program & Wellness Platform Opportunity to travel to new locations to meet colleagues, with Priority Pass for lounge access About Canonical Canonical is a pioneering tech firm at the forefront of the global move to open source. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. We are founder-led, profitable, and growing. Powered by worldwide distributed collaboration since our inception in 2004, we believe tech and business leadership can emerge anywhere. We have no central headquarters. Most of us work from home, but we are exceptionally disciplined about this. We have very high expectations of all colleagues, and are champions of excellence. Working here is a step into the future and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical is an equal opportunity employer We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration .

1Password71 дн назад

Senior Staff Product Manager, Device Security

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. As Senior Staff Product Manager, Device Security, you’ll define the strategy and roadmap for the device security capabilities that help organizations understand, control, and govern access across their environments. You’ll work at the intersection of device health, identity, access management, and Artificial Intelligence (AI), helping customers reduce security risk while building a more unified experience across people, machines, and AI agents. You’ll partner with Engineering, Design, and Go To Market (GTM) teams to turn complex security challenges into products that are clear, useful, and measurable. Reporting to the Director, Product Management – Device Security, this is a remote role open to candidates in the United States or Canada. How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is a remote opportunity within Canada and the US. What we're looking for: Required qualifications • 8+ years of Product Management experience, including ownership of security, Identity and Access Management (IAM), endpoint, or access-control products. • A track record of defining and delivering roadmaps for complex, cross-functional initiatives in a Business-to-Business (B2B) Software as a Service (SaaS) environment. • Experience contributing to product vision and strategy across multiple engineering teams or product areas. • Strong written communication skills, with experience creating PRDs, PR/FAQs, and other artifacts that align teams and support decision-making. • Experience defining Objectives and Key Results (OKRs), success metrics, and measurement frameworks connected to business outcomes. • The ability to communicate complex security and product concepts clearly with technical and non-technical audiences, including senior customer stakeholders. • A customer-centered approach to prioritization that combines qualitative insight with quantitative data. Preferred qualifications • Experience with endpoint security, device management, zero-trust, least-privilege architectures, or related security technologies. • Familiarity with Mobile Device Management (MDM) or Endpoint Detection and Response (EDR) tools. • Experience working with enterprise administration consoles and IT buyer or administrator personas. • Experience taking AI or machine-learning products from concept to initial launch. • Experience prototyping with AI-enabled developer tools and curiosity about how AI agents operate. • Familiarity with device compliance frameworks, endpoint telemetry platforms, or related security systems. What you can expect: Own and evolve the Device Security product roadmap, partnering with engineering leadership to define priorities and deliver key capabilities. • Shape the role of Device Security within 1Password Unified Access and contribute to cross-company product strategy. • Lead weekly, monthly, and quarterly prioritization, balancing near-term delivery with an 18–24 month product vision. • Represent the customer perspective through discovery, feedback loops, recorded and live demos, and structured product artifacts such as Product Requirements Documents (PRDs) and Product Requirements/FAQs (PR/FAQs). • Collaborate with Product Managers (PMs) across adjacent product areas, as well as Engineering, Design, Sales, Marketing, and Product Marketing. • Establish success metrics that connect customer outcomes and Annual Recurring Revenue (ARR) contribution to product progress. • Engage directly with enterprise customers, including Chief Information Security Officers (CISOs), Vice Presidents of Security, and Information Technology (IT) leaders. • Prototype proof-of-value solutions using AI-enabled developer tools to explore and communicate product ideas. USA-based roles only: The annual base salary for this role is between $203,000 USD and $294,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $178,000 CAD and $258,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. Our culture At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. How we work with AI We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password. This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing 👶 Maternity and parental leave top-up programs 🩺 Competitive health benefits 🏝 Generous PTO policy Growth and future 📈 RSU program for most employees 💸 Retirement matching program 🔑 Free 1Password account Community 🤝 Paid volunteer days 🏆 Peer-to-peer recognition through Bonusly 🌎 Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting. You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

2 518 вакансий по запросу «Securities»Сначала свежие

Brave56 дн назад

AI Security Researcher/Research Engineer

North America, EU, UK

OKX57 дн назад

Staff Software Engineer, Mobile Security

Sentry59 дн назад

Sentry59 дн назад

Sentry59 дн назад

Location: Toronto, Ontario, Canada Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. As a Security Engineer on this team, you'll work across application and platform security domains. You'll contribute to the practices that keep Sentry secure as we grow: security reviews, threat modeling, vulnerability management, and embedding secure coding practices into an engineering organization that cares about doing things right. You'll partner closely with product and engineering teams to influence how features are designed and built from the start. You will work as a technical collaborator who helps make the secure path the obvious one. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security challenges. IN THIS ROLE, YOU WILL - Support and help mature Sentry's security review program. From secure code review, to architecture review, and threat modeling. You'll help build the processes, tooling, and culture which make security a natural part of how we ship and operate. - Contribute to mature vulnerability management practices. Intake, triage, prioritization, remediation tracking, and support of our bug bounty and responsible disclosure program. - Advocate for secure-by-design principles. Partner with engineering and product teams to embed security early in the development lifecycle and integrate security tooling into developer and CI/CD workflows. - Validate and reproduce application and infrastructure security findings. Scanning, manual testing, and supporting penetration testing and vulnerability validation across Sentry's application, SDKs and cloud-based platform. - Help evaluate and respond to emerging threats relevant to application security at Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices. YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you grow into shaping how security gets done across a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting vulnerability, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than solve it manually a hundred times. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team. QUALIFICATIONS - 2-5 years of industry experience designing, building, or securing complex applications and cloud systems - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty and responsible disclosure programs - Experienced and comfortable programming in at least one language, and able to read and reason about code in Python, Typescript, Go, or Rust - Familiarity with using distributed cloud technology (AWS, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and an understanding of how those technologies are secured (cloud networking, IAM, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow. The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $162,000 to $200,000 CAD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Sentry59 дн назад

Manager, Engineering, Secure Build and SCS Services (East Coast Preferred)

Location: San Francisco, California Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. As a Security Engineer on this team, you'll work across application and platform security domains. You'll contribute to the practices that keep Sentry secure as we grow: security reviews, threat modeling, vulnerability management, and embedding secure coding practices into an engineering organization that cares about doing things right. You'll partner closely with product and engineering teams to influence how features are designed and built from the start. You will work as a technical collaborator who helps make the secure path the obvious one. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security challenges. IN THIS ROLE, YOU WILL - Support and help mature Sentry's security review program. From secure code review, to architecture review, and threat modeling. You'll help build the processes, tooling, and culture which make security a natural part of how we ship and operate. - Contribute to mature vulnerability management practices. Intake, triage, prioritization, remediation tracking, and support of our bug bounty and responsible disclosure program. - Advocate for secure-by-design principles. Partner with engineering and product teams to embed security early in the development lifecycle and integrate security tooling into developer and CI/CD workflows. - Validate and reproduce application and infrastructure security findings. Scanning, manual testing, and supporting penetration testing and vulnerability validation across Sentry's application, SDKs and cloud-based platform. - Help evaluate and respond to emerging threats relevant to application security at Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices. YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you grow into shaping how security gets done across a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting vulnerability, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than solve it manually a hundred times. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team. QUALIFICATIONS - 2-5 years of industry experience designing, building, or securing complex applications and cloud systems - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty and responsible disclosure programs - Experienced and comfortable programming in at least one language, and able to read and reason about code in Python, Typescript, Go, or Rust - Familiarity with using distributed cloud technology (AWS, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and an understanding of how those technologies are secured (cloud networking, IAM, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow. The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $155,000 to $200,000 USD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Docker59 дн назад

Scorewarrior59 дн назад

Senior Security Engineer

Scorewarrior59 дн назад

Senior Global Health Security (GHS) Advisor, DOS LEAP Global - Morocco

About Scorewarrior Scorewarrior is an independent game studio with a single mission: to excite and unite players all over the world. For over 10 years they've been pursuing it through Total Battle — a product they continue to actively and successfully grow. The team consists of 230 self-motivated professionals, and the company has recently begun an active company-wide adoption of AI tools. The office is located in Limassol, Cyprus, with full relocation support provided. The mission of this role To build a viable, right-sized security system for Scorewarrior that protects what matters without slowing the company down, owning it end-to-end: from diagnosis and strategy to implementation, team, and culture. Key objectives — Build a viable security system across core domains: IAM (access management, MFA, SSO), infrastructure security (cloud, services, network), foundational SDLC/AppSec (security in development and code), and related processes and training. — Start with a proper diagnosis of the current landscape and design a system tailored for the company. — Own security risks and communicate effectively with both business leaders (CTO, CEO) and technical teams (developers, infrastructure). — Make informed build-vs-buy decisions regarding security tools and methods. — Introduce security as a partner, embedding baseline practices smoothly without blocking teams. — Define safe usage policies and guardrails for company-wide adoption of AI tools. — Build and grow the security team deliberately, hiring the first security engineers with clear rationale. Job requirements — 8+ years of hands-on experience in security with real projects designed, implemented, and maintained. — Real systems experience, either through a stable security engineering career or transition from system administration, technical support, or network engineering. — Proven experience hiring and building a team (2+ people) with deliberate structure. — Experience building a security function from unclear state to working system, including assessment, prioritization, and implementation. — Strong awareness of the security product market and ability to choose appropriate tools or methods. — Partner-style operating approach, working through engineering teams without blocking or mandatory authority. Nice to have — Experience in B2C products, SaaS platforms, gamedev, or mobile apps with company size up to 1,000 people. — Experience working with external security providers. — Familiarity with common security frameworks. — Experience as the first or founding security hire in a company. Who this role is NOT for — Those focused mostly on policies, reports, and committees without recent hands-on systems experience. — Those operating with hierarchical authority, mandatory sign-offs, and blocking by default. — Those who replay the same security project regardless of company context. — Those who avoid building and leading a team. What success looks like — Clear diagnosis of the security landscape and a plan trusted by CTO. — Security system working quietly with embedded baseline practices and improved protection. — Security function growing deliberately with well-structured team. Why join Scorewarrior? — 99% employee satisfaction, low turnover. — Office-first team in Limassol with modern seaside workspace and full relocation and visa support. — Opportunity to shape a global hit game. — Financially stable and expanding company with no layoffs. — Flat structure with collective decision-making and honest feedback. — Industry-leading rewards including high salaries, bonuses, and benefits. — Support at every life stage including private family health insurance and education allowances. — Priority on personal growth with training, certifications, language courses, and books.

Dexis64 дн назад

Scorewarrior64 дн назад

Attio66 дн назад

Attio66 дн назад

Attio66 дн назад