Location: London
Workplace: OnSite
Company Description
We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.
We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.
Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.
If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.
With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.
ROLE OVERVIEW
We are seeking a TPRM Senior Associate with 4+ years of relevant experience to serve as a key operational member of the London TPRM team. This role is the primary operational bridge between the London leadership, the Offshore TPRM Operations Team, and critical onshore functions (Procurement, Business Owners, Risk SMEs). The Senior Associate is responsible for coordinating the execution workflow, managing the quality assurance of medium-risk third parties, and driving the logistics for the critical Supplier Performance Review process.
RESPONSIBILITIES
This role is centred on execution quality, operational leadership, and cross-functional coordination within the London TPRM team structure:
- Offshore Operations Liaison & Quality Control:
- Act as the primary daily point of contact and operational supervisor for the Offshore TPRM Operations Team, ensuring the accurate and timely execution of all third-party risk assessments and due diligence activities.
- Lead the Quality Control (QC) process for all assessments delivered by the offshore team, ensuring outputs are consistent, align with established methodologies, and are fully audit-ready.
- Monitor the operational performance of the offshore team against defined Service Level Agreements (SLAs) and Key Performance Indicators (KPIs).
- Be ready to conduct third-party assessments to support the team, where required.
- Stakeholder Coordination & Assessment Oversight:
- Coordinate Assessment Initiation by working closely with Procurement and Business Owners to ensure third-party risk assessments are initiated at the correct phase of the third-party lifecycle.
- Manage the crucial triage and review process by coordinating with Internal Risk SMEs (e.g., InfoSec, Data Privacy, BCP) to ensure high-risk assessments receive appropriate specialized review and sign-off prior to completion.
- Serve as the operational point of contact for these onshore internal risk teams regarding third-party-specific findings and remediation requirements.
- Supplier Performance Monitoring & Reporting:
- Oversee the governance and standardization of ongoing supplier performance monitoring activities executed by the offshore team.
- Coordinate with Business Owners and Procurement to collect and review performance data (e.g., SLA adherence, operational metrics) and integrate significant performance failures or deficiencies into the overall third-party risk profile.
- Ensure any critical performance issues are appropriately flagged for risk review and incorporated into continuous monitoring plans.
- Escalation and Remediation Management:
- Serve as the primary escalation point for all high-risk findings, process bottlenecks, and third-party non-compliance issues reported by the Offshore TPRM Operations Team.
- Work with Business Owners and Procurement to define, drive, and track third-party remediation plans, ensuring mitigation steps are completed within established timelines.
- 2nd Line of Defense Liaison & Governance Support:
- Act as the key operational liaison for the 2nd Line of Defense (Risk Oversight), compiling and delivering required operational data, metrics, and commentary on the coverage and control effectiveness of the TPRM program.
- Support the TPRM team in the preparation of reports and presentations on TPRM metrics, trends, and program effectiveness for leadership and Risk Committees.
- Program & Tool Support:
- Assist the TPRM team in the implementation, configuration, and ongoing maintenance of the TPRM system/tool, ensuring data integrity across the platform.
QUALIFICATIONS
- Experience: 4+ years of dedicated experience in Third-Party Risk Management (TPRM), risk management, compliance, or a related operational control function.
- Consulting Background: Prior experience working at a Big 4 (e.g., Deloitte, EY, PwC, KPMG) or a similar major consulting firm is highly desirable.
- Operational Control: Proven experience acting as a process gatekeeper or reviewer, with specific experience in Quality Assurance (QA) for risk or compliance deliverables.
- Coordination: Demonstrated success coordinating delivery and information flow between offshore/remote teams and demanding onshore business/risk stakeholders.
- Stakeholder Management: Strong organizational and interpersonal skills, with the ability to manage expectations and articulate complex operational risks clearly.
- TPRM/GRC Knowledge: Solid understanding of TPRM principles, risk domains (InfoSec, BCP, ABAC, etc.), and prior experience supporting the administration or maintenance of a GRC/TPRM platform is highly desirable.
Additional Information
Bring all of you to work
We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.
Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.
We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.
It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.
Life at Checkout.com http://Checkout.com
We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us.
For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/
Location: Belgrade, Serbia; Tbilisi, Georgia
Workplace: remote
AI Digital is looking for an Information Security Specialist to take on a core operational role within our growing security team. Reporting directly to the Head of Security, you will take ownership of day-to-day execution across key operational domains—including endpoint protection, access management, vulnerability management, event monitoring, incident response, email security and employee awareness programs.
Responsibilities:
Monitor MDM and EDR coverage: device inventory, policy compliance, gap identification, escalation to IT Ops.
Triage EDR alerts: initial assessment, isolation where needed, escalation.
Monitor inactive and privileged accounts across Google Workspace and key SaaS platforms.
Track MFA coverage, maintain metrics, escalate deviations.
Vulnerability Management.
Assist with endpoint patching; notify IT Ops and DevOps on critical CVEs.
Monitor baseline security alerts in Google Workspace and EDR; assist with event triage, escalation by severity, and log maintenance.
Review phishing reports (analysis, email isolation, user notification) and manage blocking policies in Google Workspace.
Administer KnowBe4: training modules, phishing simulations, department-level metrics.
SaaS Vendor Management.
Support security incident handling from the security team side: escalation, timeline tracking, incident log.
Participate in the SOC 2 certification process.
Help prepare responses to security sections of questionnaires from current and prospective clients.
2–4 years in information security or a related field (IT, DevOps with a security focus).
Hands-on experience working with SaaS platforms from a security or administration perspective.
Understanding of core concepts: access management, vulnerability management, endpoint protection, event monitoring.
Experience with MDM solutions.
Experience with EDR.
Ability to take on a task without a defined process and drive it to completion.
Some processes will need to be built from scratch — we'll support you through that.
Comfortable coordinating with cross-functional teams: setting requirements, following up on execution.
Nice to have:
Google Workspace administration.
Security awareness platforms (KnowBe4 or equivalent).
Involvement in a SOC 2 or ISO 27001 certification process.
Familiarity with CIS Controls or NIST CSF.
Experience with process automation (scripting, API integrations, no-code/low-code tools).
What we offer:
USD compensation that values your expertise.
Work from anywhere: Fully remote to suit your lifestyle.
31 days of paid time off: 21 days of annual leave + 10 days of sick leave, because your health and work-life balance matter.
Growth-focused environment: Access to learning resources and clear pathways for growth.
Fun team events: Virtual cooking classes, yoga sessions, team quizzes and more.
A culture of trust: We cut the red tape - results over rules always. Open talk, ownership and getting things done together.
Location: New York City Office
COMPANY DESCRIPTION
Today, when you go to your doctor and get referred to a specialist, your doctor sends out a referral and tells you, "They'll be in touch soon." So you wait. And wait. Sometimes days, weeks, or even months. Why? Because too often providers are overwhelmed with the painstakingly tedious work required to get paid by insurance companies. Powered by proprietary models, Tennr handles the complex paperwork that gets patients through the door and providers paid, helping operators get patients the right care, at the right time, in the right setting.
ABOUT THE TEAM
Tennr’s Strategy and Operations team is a group of ambitious, high-agency generalists led by our VP of Strategy and Operations and working directly with our founders and executive team. The team owns strategic and operational priorities across Revenue, Product, and Services. Recent projects include rebuilding pricing and packaging, standing up our prior authorization product, and leading revenue and headcount planning.
ABOUT THE ROLE
We’re hiring a Product Operations Lead to run the operating system for Tennr’s Product and Engineering team: how we plan and review work, how customer feedback reaches the roadmap, and how new functionality gets into customers’ hands.
You’ll work closely with our P&E leadership and sit between Product, Engineering, and the teams closest to our customers: CX, Deployment, Sales, and Managed Services. You’ll run the planning and review rhythm, turn customer signal into clear roadmap inputs, own product rollouts, and develop the vendor and partner relationships our products depend on. You’ll also build the tools and lightweight processes that make our PMs faster and more effective.
This is an opportunity for an ambitious, analytical, and highly cross-functional person to take direct ownership of how Tennr plans and ships product. We believe candidates with at least 3-5 years of experience, including at least 1-2 in Product Management or Product Operations at a software company, are best suited for this role.
WHAT YOU’LL OWN
- P&E planning and review rhythm. Run the planning and review cadence with Product and Engineering leadership, from quarterly planning and goal setting to regular business and execution reviews. Bring together priorities, capacity, headcount needs, and dependencies so teams can make decisions and follow through, with reporting built from data that already exists.
- Voice of the customer. Own how customer signal from CX, Deployment, Sales, and Managed Services reaches Product and Engineering. Build the muscle to capture and synthesize feedback into clear, prioritized inputs for the roadmap, and close the loop with the teams that raised it.
- Product rollout. Own the cross-functional work required to enable and roll out new functionality. Coordinate launch readiness, documentation, training, and customer enablement with Product, Engineering, Sales, Marketing, Deployment, and Customer Experience. Own the launch calendar, run go/no-go reviews with clear sign-offs, run betas or early access programs with defined exit criteria, and hold retros after each launch.
- Product partnerships. Identify and prioritize vendors and strategic partners required to deliver or improve Tennr’s products. Evaluate opportunities and coordinate the commercial, technical, and operational work to establish those relationships.
- Internal tooling. Build custom tools, automations, and AI-powered workflows that make our PMs more efficient and effective, from feedback triage to planning dashboards.
- Stand up and refine process. Build the processes Product and Engineering need, keep them lightweight, and refine them as the team scales. Measure whether people actually use them.
- Performance and follow-through. Use data and feedback to understand whether plans and rollouts are working. Find gaps, make recommendations, and take responsibility for resolving them.
- Additional priorities. Own cross-functional projects as the business evolves, from defining the problem through execution and measurement.
IDEAL CANDIDATE BACKGROUND AND QUALIFICATIONS
- You have 3-5 years of experience, including at least 1-2 in Product Management or Product Operations at a software company.
- You’ve worked directly with Product and Engineering teams on planning, launches, or roadmap tradeoffs.
- You’re ambitious and want substantial ownership of how a product organization plans and ships.
- You learn quickly and can get deep into an unfamiliar product, workflow, or technical system.
- You can use data and customer feedback to understand whether plans and launches are working, then determine what action to take.
- You are collaborative by default and can align Product, Engineering, and go-to-market teams without detailed instructions and keep the work moving.
- You’re a strong writer. You can turn a complex decision into a clear doc, launch pre-read, or update that people actually read.
- You take responsibility for outcomes and stay with problems until they’re resolved.
- You have a strong work ethic and a low ego. You’re willing to do detailed, repetitive, or messy work yourself when it needs doing.
WHY TENNR?
- Drive Impact: one of our company values is Cowboy, meaning you set the pace. You won’t just talk about things, you’ll get them done. And feel the impact.
- Develop Operational Expertise: learn the inner workings of scaling systems, tools, and infrastructure.
- Innovate with Purpose: we’re not just doing this for fun (although we do have a lot of fun). At Tennr, you’ll join a high-caliber team maniacally focused on reducing patient delays across the U.S. healthcare system.
- Build Relationships: collaborate and connect with like-minded, driven individuals in our Hudson Square office 4 days/week.
- Free lunch! Plus a pantry full of snacks.
BENEFITS
- Beautiful new office at 345 Hudson Street
- Unlimited PTO
- 100% paid employee health benefit options
- Employer funded 401(k) match
- Competitive parental leave
Location: Remote
This role may require in-person interview/s in Austin, Texas
About Osano:
Osano is an innovative B-Corporation built around a simple belief: privacy is a fundamental right. Since day one, we’ve been focused on giving modern enterprises the ability to innovate quickly, stay competitive, and earn customer trust by respecting data privacy and complying with consent guidelines. Our products help organizations operate confidently in a rapidly evolving regulatory and technological landscape.
About The Role:
We're looking for a product-minded
Senior Software Engineer
to own meaningful parts of the Osano platform end to end, from shaping a problem with Product to running the result in production.
This role is for an engineer who treats AI tooling as a real force multiplier. You use coding agents and AI-assisted workflows to explore unfamiliar code faster, ship more and remove repetitive work. You also have the judgment to verify everything that goes out under your name. We want someone whose impact goes beyond what they write by hand, and who helps the engineers around them do the same.
You'll work across our React front end, Node.js services, PostgreSQL data stores and AWS infrastructure. You'll partner closely with Product, Design, QA and Security.
This is a remote role. You must be based in, and authorized to work in, the United States.
What you'll do:
Build and ship product, end to end
Lead multi-sprint projects from design through rollout: turn a loosely defined problem into a plan, break it into work that you and others can action, and deliver close to estimate.
Design systems that hold up, and write design docs and decision records that weigh the alternatives.
Partner with Product on scope: propose MVP cuts, phasing and tradeoffs, and measure whether what we shipped actually helped customers.
Engineer with AI to multiply your impact
Use AI coding agents and assistants across the whole development lifecycle: exploring codebases, scaffolding, writing tests, debugging, refactoring, migrations and code review.
Stay accountable for every line you ship. You understand and can explain AI-generated code, and you know where AI shouldn't be trusted.
Turn repetitive engineering work into automation: scripts, agent workflows, and checks that save your team time every week.
Share what works: help define how our teams use AI tools, and how we review and verify AI-assisted work.
Use AI responsibly. Customer and personal data stays out of AI tools except through approved, privacy-safe paths. This is non-negotiable at a privacy company.
Own what you ship in production
Build observability, feature flags and rollback paths into your work from the start.
Take turns on our triage and on-call rotation. Lead incident response for your team's systems, and see postmortem follow-ups through to completion.
Identify tech debt, size it, and make the case to get it into the plan.
Build with privacy and security by design
Apply data minimization, residency, retention and access controls to the systems you design, especially those that handle customer and personal data.
Write secure code and fix vulnerabilities in your area as part of normal work.
Raise the bar and grow others
Give code and design reviews that change outcomes, not just approvals.
Mentor engineers earlier in their careers, and make your team better at testing, reviewing and operating software.
Interview candidates and help us hire well.
About you:
Delightful Experience.
You care about the customer problem, not just the ticket, and you push for what actually helps.
Own Your Impact.
You take full responsibility for outcomes, from the first design doc to how the feature behaves in production at 2 a.m.
Stronger Together.
You put team success ahead of individual wins, give direct and kind feedback, and treat documentation and async communication as first-class work.
Growth Mindset.
You're curious and keep learning, especially as AI changes how software gets built. You're excited about what it can do without overselling it or ignoring its limits.
You're comfortable with ambiguity and create clarity for others through good design and clear writing.
Must-haves:
Typically
5+ years
building and shipping production software. We care more about what you've owned than the number of years.
A track record of
leading multi-sprint projects
from design to production in a team setting.
Strong
JavaScript/Node.js
and
React
experience, and solid
relational database
skills (PostgreSQL preferred).
Strong
system design
fundamentals: data modeling, API design, and naming the tradeoffs.
Experience
owning production systems
: on-call, incident response, observability.
Hands-on, day-to-day use of AI coding tools
such as Claude Code, Cursor or Copilot, with concrete examples of how they made you or your team more effective, and how you verify their output.
Experience
mentoring
other engineers.
Strong
written communication
in a remote, async environment.
Nice-to-haves:
AWS experience (ECS/Fargate, Lambda, S3, RDS), especially multi-region or data-residency work.
Privacy, security or compliance-sensitive B2B SaaS (GDPR, CCPA, SOC 2).
Building AI-powered automations, agent workflows or LLM-based product features.
Data and analytics tooling (Redshift, Athena) or event-driven architectures.
CI/CD, preview/ephemeral environments, end-to-end testing (Cypress).
How we work:
Fully remote, with at least four hours of overlap each day with your team's core hours.
Collaborative and video-on for meetings, and async-first for everything else. Bring people in when they are needed and share what you’re working on with the team.
Regular 1:1 checkins with your manager, with a focus on growth conversations.
Why Us:
We're a welcoming team that's dependable, curious, moves fast, and full of talented people
We're a B-corporation with a mission that matters, in a high-growth space with significant potential
You'll have access to our training program, well-defined career paths, and a leadership team that values professional development
Benefits:
Competitive-pay compensation and ownership interest/equity
Unlimited paid time off, plus a requirement to take at least two weeks off per year
We're a Best Place for Working Parents and offer paid parental leave for all new parents
Osano sponsors individual premiums on base plans at 100% and dependent premiums at 50% for Medical, Dental, and Vision insurance via Aetna
A fully and permanently remote company, so you can work from anywhere in the U.S.
Receive a MacBook and $600 to craft your home workspace
Annual company trip designed to foster connection, creativity, and fun
Mental health benefits with free memberships to mindfulness and talk therapy services
A Bit More About Osano:
Osano is a leading data privacy platform that helps organizations quickly and confidently comply with laws like GDPR, CCPA, and other global privacy regulations. From consent management to vendor risk monitoring, Osano makes complex privacy tasks refreshingly simple, so companies can focus on what they do best, while we handle the rest.
We’re backed by top-tier investors, including Baird Capital, Jump Capital, and LiveOak, and we’re scaling fast with a multi-year runway and ambitious growth plans. We’ve also been recognized as a Great Place to Work for four years running, with 97% of employees saying Osano is a great place to work.
Osano is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, genetic information, disability, veteran status, or any other characteristic protected by applicable law.
A Bit More About Osano
Osano is a leading data privacy platform that helps organizations quickly and confidently comply with laws like GDPR, CCPA, and other global privacy regulations. From consent management to vendor risk monitoring, Osano makes complex privacy tasks refreshingly simple, so companies can focus on what they do best, while we handle the rest.
We’re backed by top-tier investors including Baird Capital, Jump Capital, and LiveOak, and we’re scaling fast with a multi-year runway and ambitious growth plans. We’ve also been recognized as a Great Place to Work for four years running, with 97% of employees saying Osano is a great place to work.
As we grow, we're looking for individuals who lean into modern technologies and smarter systems to drive efficiency, clarity, and speed; both in our product and in how we operate. If you're excited by the idea of helping build a high-growth, privacy-first company that embraces thoughtful automation, emerging tech, and intentional collaboration, we’d love to hear from you.
Osano is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, genetic information, disability, veteran status, or any other characteristic protected by applicable law.
Location: London
Workplace: OnSite
Company Description
We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.
We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.
Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.
If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.
With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.
Role Description
As a Real Estate Analyst at Checkout.com, you will provide dedicated administrative, data management, and operational support to the Head of Real Estate, focusing on mitigating risk and increasing efficiency across the global portfolio. This role is essential for managing high-risk operational tasks, such as lease event tracking, lease administration, budgeting and data reporting to ensure a structured approach and prevent critical errors.
Key Responsibilities
1. Lease Administration & Governance
- Proactively track, monitor, and manage critical dates for all lease events, including renewals and break clauses, acting as the primary conduit for populating and managing the tools that host our Real Estate data.
- Support the execution of Real Estate contracts by coordinating with Brokers, Procurement, Legal etc. to finalise signing, updating project budgets, and archiving completed agreements.
- Manage operational risk by ensuring all key details related to lease obligations are accurately recorded, tracked and action is taken.
- For business case generation, gather comparable evidence, property valuations, and market data to drive strategic negotiations.
- Liaise with regional, business and central teams to capture the justification and data necessary for business case approval.
- Manage subleasing activities, including monitoring sub-tenant compliance, tracking sublease income and key milestones, and coordinating with legal and property management teams.
2. Financial and Procurement Reporting
- Coordinate with Finance, Tax and Procurement teams for Real Estate budgets, including updating and managing the Real Estate OPEX and CAPEX budget tracking tools.
- Act as the central point of contact for all property-related budget reporting, preparing quarterly reviews in a clear, digestible format that includes Real Estate and Workplace costs - giving an all inclusive cost per desk / square foot / head.
- Assist in reporting refurbishment or new office delivery costs, against business as usual spend for operational office locations.
- Support the coordination of financial and legal documentation required for transactions, such as preparing group structure charts and financials for external parties (e.g., landlords).
3. Corporate Social Responsibility (CSR) Data Collation
- Lead the coordination and collection of energy, water, and utility consumption data across the global portfolio to support future CSR reporting requirements.
- Manage the challenge of obtaining utility data in co-working and serviced spaces where direct meter readings are complex, including liaising with local teams, operators and landlords to gather the necessary information.
- Act as the conduit between the CEO Office and ESG/CSR teams to ensure our portfolio meets the needs of Sustainability policies and or regulatory requirements.
4. Departmental Administrative Support
- Assist in due diligence and preparation of business cases by researching and reporting on regional office statistics (e.g., desk counts, utilisation, attendance, capacity & commercials).
- Act as a key liaison for business case presentation and refinement.
- Maintain dynamic headcount forecasts to ensure space planning aligns with evolving business needs, particularly for high-growth regions.
- Monitor and document team shift patterns to inform workspace strategy (e.g., HVAC service requirements, after-hours access, and desk rotation models).
- Monitor and manage utilisation reports for Serviced Offices, along with onboard and offboard leaves to locations where we do not directly manage access control.
- Maintain the central digital repository for all property documentation (leases, contracts, floor plans, and insurance certificates), ensuring strict naming conventions, accessibility, and version control are met to ensure 100% audit-readiness.
- Schedule and prepare agendas, collate pre-read materials, and document meeting minutes for key real estate governance forums, proactively tracking action items to ensure timely closure by stakeholders.
- Managing the administrative aspects of the "joiner/leaver" process for office access where no assigned Workplace / People person is assigned.
- Act as the primary administrator for processing property-related invoices, performing the initial "first-pass" review to flag discrepancies against purchase orders (POs) and ensuring all costs are accurately coded before final submission to Finance.
5. Health, Safety & Physical Security Management
- Coordinate the global H&S audit schedule in partnership with SMEs, managing the central audit database, evidence library, action log, and training records to track progress and compliance.
- Support the weekly, monthly, quarterly, and annual reporting framework to surface risk trends and audit completion status, allocating audits to regional teams for execution.
- Own the scheduling, chasing, and evidence trail for the audit lifecycle, acting as the primary administrative point of contact to ensure smooth execution.
- Drive the audit lifecycle by ensuring all actions are identified, triaged, and managed to resolution, proactively identifying blockers and managing overdue items.
- Ensure regional teams interpret and apply the central H&S framework in accordance with local laws while maintaining the global baseline standards.
- Manage the integration of the H&S framework with wider Real Estate RACI to ensure clear accountability and prevent overlaps in responsibilities.
- Implement and maintain physical security policies and standards across all global office locations.
- Instruct periodic physical security risk assessments and audits to identify vulnerabilities and ensure compliance with security protocols.
- Oversee visitor management processes and physical security measures to safeguard personnel and assets.
Additional Information
Bring all of you to work
We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.
Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.
We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.
It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.
Life at Checkout.com http://Checkout.com
We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us.
For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/
Location: Remote - France; Remote - EMEA
About You
You're a jack-of-all-trades with a passion for cool technology and interacting with people and making them happy. You're a self-starter who's good at triaging problems and working on the most important one. You've worked directly with customers for a long time and are comfortable being the face of the company to them. One of the things that pleases you most in life is customers successfully using your product, being thrilled with its value, and telling you they're happy they partnered with you. Further, you're a curious person, and you'd love the opportunity to work with a technology team that includes data scientists, algorithm experts, back-end and front-end engineers to expand your knowledge.
About Us
Constructor.io http://Constructor.io powers product search and discovery for some of the largest retailers in the world. We serve billions of requests every week, and you've probably seen our results somewhere and used our product without knowing it. We differentiate ourselves by focusing on metrics over features, and reinventing search and discovery from the ground up as a machine learning challenge with the specific goal of improving metrics like revenue. We're approximately doubling year over year despite the market slow down and have customers in every eCommerce vertical.
We're a passionate team of technologists who love solving problems and want to make our customers' and coworkers' lives better. We value empathy, openness, curiosity, continuous improvement, and are excited by metrics that matter. We believe that empowering everyone in a company to do what they think is best can lead to great things.
About The Position
As a Team Lead Customer Success Southern Europe, you'll be joining a rapidly growing team that helps our customers increase their revenue by improving the search and product discovery experiences of their websites and mobile apps through integrating with our services.
Your responsibilities will include:
- Leading, coaching, and developing a team of Customer Success Managers across Southern Europe, with a focus on the main markets of France and Spain (and other Southern European countries)
- Ensuring customers successfully go live and continue to see measurable value from Constructor's product.
- Building and enabling your team to build trusted relationships across complex enterprise organizations: from engineers, data, and product teams to Heads and Directors of Ecommerce, Digital, Product, and Technology, up to VP and C-level executives.
- Translating technical concepts, product capabilities, and performance data into clear business value connecting Constructor's work to outcomes like conversion, revenue, customer experience, and operational efficiency.
- Implementing and iterating on scalable processes and best practices to support team growth.
- Acting as an escalation point for complex customer challenges and leading from the front when hands-on engagement is required.
Requirements
- French is a must for this role; and additional languages are welcome bonuses.
- Based in EMEA, ideally in Southern Europe.
- At least three years leading teams, with a minimum of three direct reports.
- At least five years managing enterprise customer relationships in Customer Success, Account Management, Solutions Consulting, or a similar customer-facing role.
- Experience building trusted relationships with stakeholders ranging from technical teams and product leaders to Ecommerce Directors, VPs, and C-level executives.
- Strong executive presence and the confidence to lead strategic customer conversations, including QBRs and EBRs.
- Strong influencing and stakeholder-management skills, including the ability to create momentum without direct authority.
- Strong problem-solving skills, intellectual curiosity, and the ability to learn quickly in a fast-moving, technically sophisticated environment.
- Experience in ecommerce, digital commerce, search, product discovery, or a related field is highly valued.
Benefits
- A competitive compensation package including stock options
- Fully remote team - choose where you live
- Work from home stipend! We want you to have the resources you need to set up your home office
- Apple laptops provided for new employees
- Training and development budget for every employee, refreshed each year
- Parental leave for qualified employees
- Work with smart people who will help you grow and make a meaningful impact
- Diversity, Equity, and Inclusion at Constructor
At Constructor.io http://Constructor.io we are committed to cultivating a work environment that is diverse, equitable, and inclusive. As an equal opportunity employer, we welcome individuals of all backgrounds and provide equal opportunities to all applicants regardless of their education, diversity of opinion, race, color, religion, gender, gender expression, sexual orientation, national origin, genetics, disability, age, veteran status or affiliation in any other protected group.
How we handle your data. By submitting this application, you acknowledge that Constructor will collect and process the personal data you provide for the purpose of evaluating your candidacy for this role. If you are not selected, we will retain your data for a limited period as described in our Recruitment Privacy Notice https://constructor.com/recruitment-privacy-notice. After that period your data will be deleted or anonymized.
Location: Ebene
Workplace: OnSite
Company Description
We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.
We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.
Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.
If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.
With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.
As a Security Analyst at Checkout.com http://Checkout.com, you are a frontline defender of our global financial ecosystem. Joining our high-velocity 24/7 Security Operations Center (SOC), you won’t just watch dashboards—you will actively hunt, triage, and neutralize threats in real-time. This is a high-impact role where you’ll leverage a world-class security stack to protect millions of transactions and ensure the integrity of our global fintech platform.
Key Responsibilities
- Proactive monitoring using Azure Sentinel (SIEM)
- End to end support for Security incident
- Utilise Wiz and Qualtys to identify misconfiguration and vulnerabilities
- Stay ahead of the curve by analyzing threat feeds and adapting our defenses against emerging fintech-specific attack vectors
- Manage and optimize SentinelOne to ensure total visibility and protection across our organisation
- Audit and secure access patterns within Okta and Active Directory, enforcing a Zero Trust philosophy
- Support PCI DSS and SOC2 audits by maintaining rigorous evidence collection and control validation.
- Analyze traffic patterns in Netskope to detect data exfiltration or anomalous user behavior.
- Provide 24/7 security coverage on a rotational shift basis, including weekends and holidays, to ensure continuous monitoring of the environment.
- Act as the first point of contact during assigned shifts, escalating high-priority incidents promptly.
Skills & Experience Required
- Experience: 2+ years in a Security Analyst or similar role, preferably within a tech or fintech environment.
- Technical Skills: Hands-on experience with SIEM tools (e.g., Azure Sentinel), endpoint protection platforms, and vulnerability scanners.
- Cloud Knowledge: Familiarity with cloud platforms like AWS, including basic understanding of cloud security best practices.
- Networking: Basic understanding of network security concepts, including firewall configurations and IDS/IPS monitoring.
- Compliance Knowledge: Awareness of PCI DSS and its relevance to security operations.
- Incident Response: Understanding of incident response processes, including containment, eradication, and recovery.
- Certifications: Relevant certifications such as CompTIA Security+, CEH, or GIAC are a plus.
Additional Information
Bring all of you to work
We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.
Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.
We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.
It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.
Life at Checkout.com http://Checkout.com
We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us.
For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/
Location: Lisbon, Portugal; Madrid, Spain; Prague, Czechia
CloudLinux
is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful.
Check out our website for more information:
cloudlinux.com
We are currently hiring a
Staff Security Engineer
within the
Imunify360 product.
Imunify360 is CloudLinux's security suite for Linux web servers. It protects hundreds of thousands of hosting servers and the websites running on them, so it sees most large-scale web attacks early — often in the first hours.
Check out our website for more information:
https://imunify360.com/
Role Mission & Scope
At Imunify360, protecting customers from evolving cyber threats requires close collaboration between security research, engineering, and other teams. Responding to complex attack campaigns involves more than identifying threats — it requires understanding attack techniques, developing effective detection and mitigation strategies, and ensuring customers are protected.
As a
Staff Security Engineer
, you'll take end-to-end technical ownership of complex security challenges, from initial threat discovery and analysis to detection, mitigation, and post-incident review.
This is a
hands-on technical leadership role
focused on practical security engineering rather than SOC monitoring, compliance, or purely theoretical research. You'll analyze malware and exploit code, develop detection and mitigation tools, anticipate emerging attack techniques, and ensure security findings translate into production-ready detections, mitigations, and fixes.
You'll work closely with engineering, security research, support, external partners, and the broader security community to coordinate responses and drive continuous improvements in our security capabilities.
As an
individual contributor
, you won't have direct reports or people management responsibilities. All security research and testing are conducted within authorized boundaries, with clearly defined scope and responsible disclosure practices.
Your mission is to strengthen Imunify360's ability to detect, prevent, and respond to emerging threats, delivering measurable security improvements that protect customers at scale.
What you will own
Malware and campaign mitigation
Lead response to large-scale exploitation and malware campaigns: triage, root cause, and mitigation across every protection layer of the product.
Reverse-engineer malware and exploits targeting Linux servers and web applications.
Track campaigns over time, not just individual samples: cluster indicators, connect activity to known actors and toolkits, anticipate the next variant.
Define and run measurable outcomes per campaign: time to detect, time to protect, cleanup effectiveness, reinfection rate.
Security response coordination
Own the security incident and response process, both for threats against our customers and for vulnerabilities in our own product: severity model, runbooks, communication, escalation.
Coordinate with external parties — software vendors, partners, CERTs/CSIRTs, abuse desks, other security vendors. Drive responsible disclosure where we find vulnerabilities.
Be the technical voice in security advisories and partner briefings, together with Product and Support.
Triage external vulnerability reports.
Offensive security on our own product
Red-team our product and infrastructure. Assume a capable attacker who already has a foothold.
Threat-model new features before they ship; own the security review gate for high-risk changes.
Turn findings into fixes with the owning teams, not just reports.
Detection engineering and tooling
Raise the quality bar of detections: false-positive budgets, test corpora, staged rollout with measurement gates and fast rollback.
Build and automate the analysis pipeline: dynamic analysis, honeypots, telemetry-driven hunting, ML-assisted triage where it measurably helps.
Write production code for these tools; expect 30–50% of your time to be hands-on building.
Turn telemetry into intelligence: emerging exploits, attacker infrastructure, trends — shared as internal briefs and selected public research.
People multiplier (no direct reports)
Mentor analysts and engineers; raise the security skill level across teams.
Bar-raiser in security hiring loops.
Key Milestones
30 days: Analyzed real threats end-to-end. Mapped the current response flow and where it breaks. Shipped at least one detection or mitigation to production.
90 days: Security response process and severity model published and agreed. Led at least one real campaign response with a written post-mortem. Baseline response metrics in place.
6 months: Time from first sighting to protection measurably reduced vs. baseline. First red-team review completed, top findings fixed. Working relationships with key external partners.
12 months: Recognized internally and externally as the owner of security response. Public research or disclosures published. Teams can run a standard campaign response without you.
Requirements
Must have
10+ years in security engineering, malware research, incident response, or offensive security, with several years leading cross-team work at Staff/Principal/Lead scope.
Deep hands-on
malware analysis and reverse engineering
skills.
Strong
web application security
and practical exploitation experience.
Deep
Linux
knowledge from both the attacker's and the defender's side.
Proven
incident response
leadership on large-scale events: you have run the response, written the advisory, and closed the post-mortem.
Production coding in
Python
plus a systems language (Go, Rust or C).
Experience with
coordinated vulnerability disclosure
and working with the security community.
Clear, short writing for both engineers and non-technical stakeholders; works well async across time zones.
Daily user of AI tools for analysis and coding, with critical judgment about their output.
Nice to have
Background in hosting or large web ecosystems.
Detection authoring at scale (signatures, WAF/IDS rules).
Kernel-level monitoring and rootkit detection.
Threat intelligence practice and actor tracking.
ML for malware classification.
Public track record: CVEs, published research, talks, CTFs, open-source security tools.
Relevant certifications are a plus, not a requirement.
Benefits
What's in it for you?
Stay hands-on technically while owning complex, high-impact engineering work.
Work on challenging Linux, automation, and cybersecurity problems across mature and newer products.
Influence technical direction and make meaningful architectural decisions.
Work independently with a high level of ownership and autonomy.
Fully remote work with flexible working hours.
24 paid vacation days, 10 national holidays, and unlimited sick leave.
Private medical insurance compensation.
Co-working and gym/sports reimbursement.
Education budget.
Opportunity to receive a reward for innovative ideas that the company can patent.
By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (
https://cloudlinux.com/candidate-privacy-notice
), which provides detailed information on how we maintain and handle your data.
Own the value plan for each account in your portfolio, connecting the business problem that led the customer to buy Mixpanel with the outcomes they measure. Build relationships with business and technical stakeholders, aligning Mixpanel's capabilities to what customers care about most.
Location: San Francisco, CA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the Role
Anthropic's Executive Briefing program brings senior leaders from our most strategic customers together with our spokespeople, product leaders, and researchers. As a Program Manager, Executive Briefings, you will run the program at one of our briefing centers and help build the global operating model that ensures an exceptional and consistent experience across the globe.
You will be the main program lead for your location and own briefings end to end: qualification and intake, agenda design, speaker selection, and day-of execution. You will set the objectives and design for each agenda and develop it jointly with Sales. You will also be the local account teams' go-to partner on how to use a briefing to move their most important opportunities forward.
You will manage the global workstream and set the standard every center follows, so customers get the same quality of briefing wherever they meet us. This is a highly cross-functional role. You will work with regional GTM leadership and the Office of the CCO on account selection and program strategy, with Product Marketing on content, with Solutions on technical deep-dives and demos, with Anthropic's executive bench on sponsorship and participation, and with Workplace, Security, and Revenue Operations on the experience and systems behind every briefing. You will be comfortable running every part of a briefing yourself and maintaining tight alignment with internal stakeholders.
Key responsibilities
Own the Executive Briefing program at your location: the local calendar, capacity planning, the request and intake process from Sales, and operating SLAs, applied against global criteria and regional allocation
Work with regional GTM leadership to decide which strategic accounts receive a briefing each quarter, hold the qualification bar, and proactively surface accounts that should be engaged
Lead discovery with account teams before each briefing to understand the customer's objectives, business context, and stage of evaluation, and turn that into a tailored agenda
Own agenda design and co-own agenda development with Sales for every briefing, including the narrative arc, discussion topics, speakers, and demos
Build and manage the speaker bench for your location: identify, source, and match speakers to briefings, run prep, and manage capacity so no one is over-asked
Own day-of orchestration and the customer experience standard at your center, in partnership with Workplace on logistics
Contribute to the playbooks, tooling, and best practices that let the program scale consistently across centers while allowing for regional nuance
Share intake and triage on a rotation across time zones so every request gets a decision within the defined SLA
Maintain one source of truth for criteria, lead times, and process so account teams get one answer
Own measurement and reporting for your center and contribute to global reporting on briefing volume, capacity and allocation, strategic-account coverage, and program-influenced pipeline and expansion
Onboard and coach briefing team members and contractors across locations
Minimum qualifications
Experience running executive briefings, customer events, or a comparable program for senior external audiences
Program management skills, including intake and prioritization, capacity planning, and managing multiple concurrent programs against SLAs
Experience designing agendas and facilitating discussions with C-level or other senior customer audiences
Experience building processes, playbooks, or tooling that help a program operate consistently
Ability to track, report on, and communicate program metrics such as volume, coverage, and pipeline influence
Strong written and verbal communication skills, with the ability to partner credibly with field leadership, executives, and internal subject matter experts
Work on site at your briefing center when briefings take place
Preferred qualifications
6+ years of experience building or scaling an executive briefing program, or a similar customer-facing program, at an enterprise technology company
Experience in a high-volume briefing environment
Experience with CRM and reporting tools such as Salesforce, and with connecting program activity to pipeline and expansion outcomes
Experience identifying and surfacing speakers for the speaker bench and managing speaker capacity across product, research, and executive teams
Experience working across time zones or across multiple sites to set one global standard
Experience onboarding or coaching new team members or contractors
Familiarity with AI products and how enterprises evaluate and adopt them
Interest in Anthropic's mission to build AI that is safe and beneficial
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$255,000
—
$320,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Poland; Brazil; Peru; Sweden; Argentina; Romania; Cyprus; Czech Republic; Hungary; Mexico; Chile; Bulgaria
Workplace: Remote
BUILDING THE FUTURE OF OPEN FINANCE
Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.
THE TEAM
xStocks brings real-world assets on-chain as tokenized securities that are regulated, fully-backed, and tradable across multiple blockchains. Built within Payward, the xStocks team runs the infrastructure that issues, custodies, and settles these instruments across EVM, Solana, TON, Tron, and more. The platform moves real value, so security is not a feature bolted on at the end. It is a property of everything the team ships. This is a hybrid engineering and security seat built for someone who is genuinely both: you ship products alongside the engineering team when the security queue is quiet, and you own security work end to end when it lands. You report into engineering and partner closely with the Payward security, CISO, and compliance functions.
THE OPPORTUNITY
- Own security deliverables end to end. Coordinate and review smart-contract audits, respond to security questionnaires and due-diligence requests, support CISO and compliance initiatives, and turn findings into tracked, closed-out fixes.
- Run offensive assessments against our own platforms. Pentest the web apps, APIs, backend services, and on-chain components, and build the tooling to do it repeatedly rather than once.
- Continuously assess posture. Threat-model new and existing systems, review architecture and key-management flows, and maintain a living view of the risks and their mitigations.
- Review code for security. Be a default reviewer on changes touching auth, cryptography, custody, signing, and fund movement across our chains.
- Harden the platform. Improve secrets handling, IAM and least-privilege, dependency and supply-chain hygiene, and detection and logging for security-relevant events.
- Secure custody and signing workflows. Review and harden transaction signing flows, MPC and HSM integrations, signer permissions, admin roles, approval policies, and break-glass procedures.
- Contribute to product engineering. Pick up regular backlog work in TypeScript so you stay close to the codebase you are defending.
- Support incidents. Help with detection, triage, response, and post-mortems, and feed the lessons back into the program.
WHAT YOU BRING
- An engineer first. You write and review production code comfortably, TypeScript and Node.js in our stack, and you understand systems deeply enough to break them.
- Strong application and infrastructure security fundamentals. The OWASP-class vulnerability landscape, authn and authz, injection, SSRF, supply-chain risk, and secure design. You have done real offensive work in pentesting, vuln research, or red-team.
- Applied cryptography and blockchain security. Symmetric and asymmetric primitives, hashing, signatures, and key management, plus the security model of EVM, Solana, and ideally TON or Tron. You can read a smart contract and reason about how it fails.
- Ownership. You can take an ambiguous security item, an audit, a questionnaire, or an incident, and drive it to closure without being managed through it.
- Clear communication. You can explain a risk to engineers, to a CISO, and to an auditor, and tailor the message to each.
- An automation instinct. You do not want to catch the same issue manually twice, so you turn findings into tests, alerts, controls, documentation, or platform improvements.
- Risk judgment. You can tell a theoretical issue from a material one, and communicate severity, likelihood, impact, and remediation tradeoffs clearly.
NICE TO HAVE
- Experience commissioning or remediating third-party smart-contract audits.
- Familiarity with custody and signing infrastructure such as HSMs, MPC, and ForDefi-style providers, and with on-chain transaction security.
- Cloud security depth in GCP or AWS, IAM, and container and runtime hardening.
- Detection engineering and security observability, including SIEM and log-based detections.
- Relevant certifications such as OSCP, OSWE, or GWAPT.
- Prior work in a regulated fintech or tokenization/DeFi environment.
Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.
Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.
We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.
OUR COMMITMENT
Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto.
We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision.
As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.
Stay connected
Follow us on Twitter https://twitter.com/krakenfx
Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address
Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/
Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice
Location: EMEA - Remote
Please note that we are unable to consider applications from candidates based in France, Italy, or Germany for this role.
Money is moving onto the internet, and the shift has a name:
Open Money.
This is money that is open, portable, agentic, and owned by you. MetaMask spent the last ten years building it; with 100M+ downloads, users in ~190 countries, and trillions in cumulative transaction volume, it's the most trusted self-custodial financial platform on the internet. Now we're building the operating system for your money: one place to hold, move, grow, and use anything you own. Join a remote-first, global team rebuilding how money works: a problem that touches everyone, every day.
About the role
MetaMask is a self-custody wallet that does not hold users’ private keys. Blockchain transactions are generally irreversible, meaning a vulnerability in the product or its software delivery chain can lead directly to financial losses for users. As a result, MetaMask attracts sustained attention from financially motivated attackers and sophisticated supply chain actors.
We are looking for a
Senior Manager, Application Security
to lead application security across the MetaMask extension, mobile app, Snaps, backend services, DeFi primitives, stablecoins, and supporting smart contracts.
The role covers architecture, code, dependencies, build and release controls, security testing, and vulnerability disclosure. This is a hands-on leadership role. You will set the strategy and operating model, lead a small senior team, and remain directly involved in code review and threat modelling.
You will report to the Head of Security and work closely with MetaMask Engineering leadership to ensure security risks are understood, owned, and addressed.
Responsibilities
Leadership and planning
Lead and develop the Application Security team, including hiring, performance management and career development, while remaining directly involved in technical work.
Set the Application Security strategy, annual goals and quarterly OKRs in line with company objectives and the approved Target Operating Model. Define and track KPIs to measure performance and progress.
Report AppSec progress, coverage, remediation performance and material gaps to Security leadership and contribute to Risk Committee reporting.
Secure design and delivery
Define security review requirements across development and release, assess whether they are met and escalate unresolved risks.
Lead threat modelling and security design reviews across clients, APIs and backend services, including authentication, key management, signing and delegated actions. Assess trust boundaries across the full system and participate in architecture and RFC reviews.
Define software supply chain security requirements and work with engineering teams to implement and validate controls for dependencies, builds, artefacts and publishing.
Lead security code reviews across MetaMask applications and smart contracts, working with engineers and relevant specialists to address findings.
Define and evolve the secure development lifecycle to incorporate AI agents, including their access, actions and human review requirements. Set security standards for AI development tools, generated code and AI components in products.
Integrate security testing into development and delivery workflows, including static and dynamic analysis, dependency scanning, secrets detection and AI scanning. Evaluate tools and validate their findings.
Help engineers prevent recurring vulnerabilities through secure coding guidance, reusable libraries, training and the security champions programme.
Vulnerability management and external testing
Own application vulnerability assessment, triage, prioritisation and remediation tracking within the organisation’s vulnerability management framework. Correlate findings across clients, services and supporting infrastructure with the relevant owners to assess combined impact. Ensure findings have clear owners and deadlines, verify fixes and escalate overdue risks.
Set the scope and proposed investment for bug bounty, penetration testing and AI security scanning based on risk and results. Manage external providers, researcher relationships, rewards and payouts, and coordinate vulnerability disclosure.
Assurance and incident support
Provide evidence of application security controls for audits and assurance reviews, and support customer and partner due diligence.
Provide application security expertise during incidents, including vulnerability analysis and remediation support.
Qualifications
Required
:
At least eight years in application security or software engineering with a security focus, including two years leading people.
Strong practical code review skills in TypeScript/JavaScript, Go or Solidity across browser extensions, mobile applications and backend services, with the ability to identify vulnerabilities and work with engineers to fix them.
Proven experience securing applications across clients and backend services, including distributed authentication, authorisation and key management.
Experience building or substantially improving an AppSec programme, including security reviews, automated testing, AI scanning, vulnerability management and developer support, with sound judgement on where AI adds value and how to validate its findings.
Practical experience securing software supply chains, including dependency policies, software composition analysis, npm, artefact integrity and CI/CD.
Experience running bug bounty and penetration testing programmes, including selecting and managing external providers.
Working knowledge of EVM smart contract security, including common vulnerabilities, review methods, upgrade and admin controls, and assessing external audits.
A record of delivering security improvements through engineering teams outside your reporting line.
Clear written communication, from actionable threat models to concise summaries of risk for executives.
Preferred
:
Offensive security qualifications such as OSCP, OSWE or OSWA, or a proven record in bug bounty programmes or CTF competitions.
Experience securing browser extensions or mobile applications.
Experience securing development workflows that use AI, or AI components in production applications.
Experience in crypto, Web3 or another sector facing sustained attacks, such as fintech, payments or infrastructure.
Knowledge of or a strong interest in applied cryptography.
Familiarity with attacks by state actors against software companies, particularly DPRK supply chain and social engineering campaigns.
Experience providing evidence of secure development controls for SOC 2 or ISO 27001 assessments.
Don't meet all the requirements? Don't sweat it. We’re passionate about building a diverse team of humans and as such, if you think you've got what it takes for our chaotic-but-fun, remote-friendly, start-up environment—apply anyway, detailing your relevant transferable skills in your cover letter. While we have a pretty good idea of what we need, we're ready for you to challenge our thinking on who needs to be in this role.
In the rapidly evolving Web3 space, we believe that everyone is a builder. This expansive paradigm requires a range of backgrounds, talents, skills, and experiences to influence and shape the future. At MetaMask, this diversity fuels our ability to shift control and redefine the realm of possibility. We are committed to ensuring that our technology empowers people and communities through decentralized technologies. We welcome the range of perspectives and differences and celebrate them. We're excited to see how your unique skills as a builder can contribute to our vision, drive innovation, and help us shape a more inclusive Web3.
MetaMask is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law.
MetaMask is aware of fraudulent recruitment practices and we encourage all applicants to review our best practices to protect yourself, which can be found on our page.
MetaMask may use artificial intelligence (AI) tools to support parts of our recruitment process, such as reviewing applications, screening resumes, or conducting initial candidate assessments. These tools are designed to assist our recruiting team and improve efficiency — they do not replace human judgment. A human recruiter or hiring manager reviews every candidate, and all final hiring decisions are made by people, not AI.
It is a requirement of employment in this position that applicants may be required to submit to background and identity verification checks, including but not limited to employment, education, criminal record checks, and other such checks as determined necessary by the company.
Location: San Francisco, CA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
Anthropic’s Applied AI team helps the world’s largest organizations put Claude to work. As a Cybersecurity Specialist on Applied AI, you’ll be part of an overlay team of domain experts who sit alongside our enterprise account teams and bring deep security expertise to the accounts where it matters most.
You won’t own an account. You’ll be the security expert the account team pulls in to win and grow the most important security conversations: helping CISOs and security leaders see where Claude can take on real security work, then guiding them from early pilots to durable, production workloads. You’ll cover a portfolio of enterprise accounts across regulated industries like financial services, insurance, and healthcare, strategic accounts like semiconductors (IP protection, industrial control systems, export controls), and digital natives and public sector agencies, each with its own threat model.
How this team works
You partner with account executives, account architects, and generalist Applied AI engineers, who own the customer relationship and the broader technical engagement. You bring the security depth they don’t have time to build.
You work across many accounts at once, so the playbooks, reference implementations, and evaluation approaches you build are reused across the field, not just for one customer.
You are the connection point between the field and Anthropic’s Product, Research, and Engineering teams, turning what you see in customer security programs into product feedback.
You work alongside ISVs, systems integrators, and managed security providers who already serve these customers, enabling them where they own the engagement rather than competing with them.
Responsibilities
Join account teams to understand a customer’s security program, identify where Claude can do meaningful security work, and turn that into a technical plan and business case
Serve as the security-domain technical advisor on strategic enterprise accounts, from discovery through deployment
Move customers from one-time code scanning to sustained security workloads: application security in the SDLC, continuous automated penetration testing, alert triage and investigation, and threat intelligence that answers “does this new vulnerability affect us, and where”
Build and maintain reference implementations, harnesses, and evaluation approaches, and help customers adapt them to their own environments and controls
Run workshops and hands-on sessions where customer security teams use Claude on their own code and workflows
Equip partners to deliver Claude-powered security outcomes, with a clear line between what Anthropic delivers and what partners deliver
Speak credibly to every audience, from appsec engineers to CISOs and executives, including how to explain the value and risk of security work in business terms
Define and track adoption depth for each security workload across your accounts, and work with Product and Engineering on the telemetry to measure it
Write the playbooks and best practices the rest of the field can reuse, including how Claude complements the security tooling customers already own
Develop reference customers who can speak to the value they’re realizing
Stay current on frontier LLM capabilities and the new classes of vulnerabilities and attacks they surface
Travel occasionally to customer sites for workshops and technical deep dives
You may be a good fit if you have
5+ years in security roles, with hands-on depth in at least two of: application security and secure SDLC, offensive security and penetration testing, detection and response, or threat intelligence and vulnerability management
Experience in a technical customer-facing role (Solutions Architect, Sales Engineer, security consultant, TAM), or on a security team where you had to win investment from leadership
Experience with large enterprise customers and complex, multi-stakeholder buying cycles, including working alongside the vendors and partners already in the account
The ability to translate between security teams, engineering teams, and executives
Comfort with Python, CI/CD, and cloud environments, plus hands-on experience using LLMs for security work such as code review, vulnerability discovery, triage, or investigation
A love of teaching and a collaborative approach to working across teams and balancing competing priorities
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$300,000
—
$400,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Remote, Global
Workplace: Remote
ABOUT SUPABASE
Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth.
ABOUT THE ROLE
We're looking for a SDK Engineer - Python to join our SDK team and own how developers talk to Supabase from Python. You'll work closely with the rest of the SDK team, our Auth, Realtime, Storage, PostgREST, Functions, CLI and Docs teams, and the open-source community, helping us make the Python SDK a library Python developers genuinely enjoy using.
Python developers reach Supabase from backend services, data pipelines, notebooks, and a growing number of AI agents and agent frameworks. The Python SDK is how all of them talk to the platform: database queries, auth, storage, realtime and edge functions, in both sync and async flavors.
This is a library-authoring role, and the work happens in the open: public repos, public issue trackers, and API decisions whose consequences last for years. If you get satisfaction from a type checker that catches the bug before your users do, from an async client that cleans up after itself, and from an issue tracker that isn't a graveyard, you'll like it here.
This role is ideal for someone who thrives in async, fast-paced environments and is excited about building developer tools that scale to millions.
WHAT YOU'LL BE RESPONSIBLE FOR
- Build and evolve our Python SDK across database, auth, storage, realtime and functions, with both sync and async APIs that feel natural in Python.
- Start new things. Alongside the maintenance work, find what's missing, make the case for it, and build it. Nobody will hand you the list.
- Work in the open. Triage inbound issues, review and shepherd outside contributions, keep CI and release automation healthy, and hold a clear, kind line on scope.
- Own the typing experience. Make the SDK fully typed and checker-friendly, so autocomplete and static analysis stay correct in real codebases.
- Keep us honest across environments. Multiple Python versions, sync and async frameworks, workers, serverless and notebooks — with dependency ranges that don't fight our users' projects. Test it, don't assume it.
- Work on realtime. Long-lived websocket connections, reconnection, and subscription and presence semantics.
- Track the platform. When auth, realtime, storage, postgrest or edge functions ship a change, make sure the SDK reflects it, and that we say so in the changelog.
- Design in public. Write the RFCs, migration guides, release notes and docs. Treat a breaking change as a deprecation path plus a migration story, not a version bump.
- Make our SDK legible to AI coding agents, which are now a major consumer of it.
YOU MIGHT BE A GOOD FIT IF YOU
- Know modern Python typing deeply. You use generics, protocols, overloads and TypedDict as design tools, run strict type checking, and fix type errors without reaching for Any.
- Have authored or maintained a published library with a public API and users outside your own company. You know what it costs to change something people depend on.
- Know the maintainer side of open source. Issue triage at volume, reviewing outside PRs, release automation, changelogs and semver, security reports, and saying no to a feature request without losing the person who asked.
- Are fluent in asyncio and have opinions on how a library should serve both sync and async callers.
- Know Python packaging for libraries: pyproject.toml, wheels, modern tooling, version support policy, and why libraries shouldn't pin their dependencies tightly.
- Test as a habit: unit, type-level and end-to-end against a real stack. Every fix comes with a regression test.
- Write well. Design docs, changelogs and issue replies are a large part of the output here, much of it public, and we're async by default.
- Have real autonomy: you find the important work, scope it, ship it, and say what you didn't do.
- Communicate clearly across both technical and non-technical audiences
- Have experience in async or globally distributed teams
- Are energized by solving real-world problems for developers
- Are comfortable navigating ambiguity and moving quickly
Bonus points if you: have run a major-version migration for a public package, know your way around JWT/OAuth, have built integrations for AI agent frameworks, or have generated idiomatic clients from a schema.
WHAT WE OFFER
- Fully Remote
We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world.
- ESOP
Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together.
- Tech Allowance
Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work.
- Health Benefits
Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us.
- Annual Off-Sites
Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year.
- Flexible Work
We operate asynchronously and trust you to manage your own time. You know what needs to be done and when.
- Professional Development
Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth.
ABOUT THE TEAM
Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love.
- ~400 team members
- 60+ countries
- 20+ languages spoken
- Over $1B raised (including our $500M Series F)
- 540,000+ community members
We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.
Location: Hyderabad, India
Our Global Structure
Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team.
Join us in our mission to transform the way people shop and eat, where impact, innovation, and growth drive everything we do. Our Information Security team enables innovation at speed—securely. As digital guardians of DoorDash, Deliveroo, and Wolt, we safeguard our systems and the data of our employees, customers, riders, and partners. We defend against emerging cyber threats and embed security into every facet of the business. From building resilient defenses and responding to incidents to empowering teams with security knowledge, we are trusted partners protecting these global brands from the inside out.
About the Role
The Senior Security Operations Centre Specialist offers a unique opportunity to shape our global Security Operations strategy across a global footprint of DoorDash, Deliveroo, and Wolt. This role provides the platform to optimize our technology and AI investments while pioneering new methods to protect our data, people, and partners. As we expand, your specialist capabilities will be essential to our continued success.
What you’ll be doing
Work in a 24/7 global security operations centre, including scheduled night and weekend shifts.
Lead the triage and investigation of security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents within specified SLAs.
Mentor a team of SOC Specialists, providing the necessary guidance and feedback to deliver a best-in-class security service to the business.
Lead the development and continuously improve operational documentation, processes and playbooks
Build and manage autonomous AI runbooks to automate and scale our alert triage capabilities.
Lead incident response and escalation, ensuring lessons learned are translated into continuous security improvements.
Support the design, development and review of threat-detection use-cases to identify suspicious activity across our cloud environment.
Feed into the risk framework of emerging and observed threats from intelligence and / or incidents (e.g., post incident activity / repair items).
Support wider security incident investigations involving Threat Intelligence and Incident Response & Digital Forensics stakeholders.
Keep up to date with current security trends, advisories, publications and security research across the threat landscape
Leverage metrics and KPIs to improve security posture and identify opportunities for strategic optimisation
Collaborate with the team to develop and help deliver cybersecurity awareness programs for employees, emphasising incident reporting and best practices.
Requirements
6–8 years of experience in SOC, demonstrating success in managing security incidents and delivering platform optimisations while acting as a technical mentor and lead for shift operations.
Proven experience building threat detection capabilities in a cloud-centric, fast-moving organisation.
Hands-on experience with AWS security config, SOAR, GSO, EDR/XDR, Splunk and SQL queries.
Practical experience ideating, configuring, managing defensive security solutions and technical project management
Committed to continuous improvement, leveraging feedback to elevate both personal and team performance.
Exceptional collaborative team player and a knowledge-sharing mindset.
Working knowledge of security compliance standards, e.g. ISO27001, GDPR, NIS2 and PCI-DSS.
Capable of working well both independently and collaboratively, whilst keeping calm, under the pressure of an incident with potentially high impact to the business.
Able to communicate effectively during or after any incident update to both technical and non-technical stakeholders.
Coordinate with the US, UK and EU central security teams as required.
Preferred, but not required
Understanding of IAM cloud security principles
Experience in a DevOps environment with familiarity of CI/CD pipelines
Hands-on experience with container technologies and orchestration services
Knowledge of cloud security data encryption standards and principles
Why Deliveroo?
At Deliveroo, you’ll do work that matters—solving real-world problems in a three-sided marketplace that’s constantly evolving.
We’re food lovers, problem solvers, community organisers, proud parents, and more, brought together by a shared drive to make things better. Working here you can expect to:
🔧 Solve meaningful problems at real scale
Work on a complex, always-on marketplace that impacts millions every day.
🌱See your impact, fast
Ship, test and improve ideas quickly in a low-hierarchy, high-ownership
environment.
🧠Grow through challenge and ownership
Take on big, ambiguous problems and accelerate your career with strong support.
🌎A culture built for builders
High standards, collaboration, flexible working and continuous learning.
Our Global Structure
Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team.
Diversity, Equity and Inclusion
At Deliveroo, we know that a great workplace reflects the world around us and that true diversity and inclusion make us stronger, more creative, and better at what we do. We’re committed to fostering an environment where everyone can do their best work and feel they belong.
We believe in equality of opportunity and welcome candidates from all backgrounds regardless of age, gender, ethnicity, disability, sexual orientation, gender identity, socio-economic background, religion, or belief.
If you have a disability or long-term health condition and need support to apply for one of our roles, or require any reasonable adjustments during the recruitment process, you’ll have the opportunity to let us know once you’ve submitted your application. We’ll share details on how to request support so we can ensure you have a fair and equitable experience.
If you’re excited about making a real impact in a fast-moving marketplace and growing your career alongside ambitious, supportive teams, we’d love to hear from you!
Beware of recruitment scams: DASH Brands will never ask you to pay money or share sensitive financial information during hiring — learn more about DASH Brands' legitimate recruiting process at
careersatdoordash.com/recruitment-scam-awareness
.
Location: Paris, France
Workplace: Hybrid
🤖 WHO WE ARE
We’re building Mo — a health companion for everyone.
We’re a small team within Alan, on a mission to redefine the future of care by democratizing access to medical expertise. We are building Mo, an intelligent, empathetic, multimodal LLM-based conversational AI assistant able to prescribe, triage, and proactively follow up on care.
Imagine giving every person in the world instant, 24/7 access to personalised medical expertise - through chat, voice, or video. That’s what we are building 🤖.
We kicked off the project in 2023, and we have launched Mo to all our french members (1M) in Q1 2026, making it the first safe AI health companion live at scale in Europe.
🚀 WHY WE NEED YOU
Mo’s scope is expanding fast: inside Alan (a new Clinic, new capabilities), across the countries we operate in, and at the interfaces with many other Alan experiences. To get this expansion right, and to keep ownership distributed within the team, we’re looking for a Product Builder to take on a real share of that complexity and ambiguity.
You’ll own end-to-end one slice of Mo’s product scope. Depending on your profile, it could be:
- 🩺 Mo for reactive care. Build all the integrations between Mo, our Clinic and the healthcare system, and shape how our medical team interacts with members in and through Mo.
- 🛡️ Mo for insurance. Make Mo the main interface between members and Alan, building on our Support AI agents, across channels and countries.
- 🌍 Mo global. Adapt Mo to new countries and find the right operating model for each (medical reviews, safety, local features).
- ➕ Mo as a platform. Make Mo the companion other teams build upon, so our domain experts can ship their own experiences through it.
🎯 IS IT YOU WE’RE LOOKING FOR?
We’re looking for Product Builders with around 5+ years of experience who want to build state-of-the-art AI products and apply them to real-world, high-stakes problems in healthcare.
- You’ll own a product area end-to-end: problem framing, vision, prioritisation, shipping, and measuring whether we actually help members get and stay better.
- You’ll work daily with engineers, ML engineers, data, and doctors, at the frontier of LLMs and agentic systems, and see your work in production with real people.
- You’ll navigate ambiguity and many stakeholders across Alan, and turn it into clear decisions and a focused roadmap.
- You’ll be hands-on: prototyping, digging into data, reading conversations and evals, getting into the technical details with the team.
- You’ll contribute to our product culture and help build the team (hiring, interview loops, etc.).
You would be a good fit in Mo if most of this sounds like you:
- Experience building and shipping a live AI/LLM product
- Very hands-on, comfortable with technical and data topics (SQL, prototyping, understanding how an LLM system behaves and fails)
- Interest or experience in one or several medical or prevention themes
- Product-minded and outcome-driven: you care about impact, not output
- Self-directed, pragmatic, driven, hard working
- Humble and still willing to grow (no matter your seniority!)
- Collaborative, enthusiastic about teamwork, learning, and teaching
- Fluent in English
- Ex-engineers and ex-founders are typically a great fit in our team
But above all, we are looking for high potential and curiosity: make sure to show us this when you apply! Everything else is a bonus
🤘 HOW WE DO IT ?
We benefit from Alan’s platform, infrastructure, distribution, and health expertise — but operate with the speed and focus of a startup. If you’re curious about Alan’s broader vision, our https://www.notion.so/alaninsuranceShareholder Letters https://alan.com/en/blog/discover-alan/a/alan-2025-q3-letter-to-shareholders are worth a read.
People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values https://alan.com/about/company-culture that guide our approach to work, such as:
HOW WE WORK: OUR LEADERSHIP PRINCIPLES
- Mission is the Boss — We think long-term and are methodical optimists who take risks, seeking our mission's success above all else.
- Distributed Ownership — Accountable enlightened despots: everyone owns their decisions and results.
- Radical Transparency — All information is accessible and written-first, so everyone can make the best decisions asynchronously.
- Always Growing — Direct, positive, and caring feedback, combined with self-growth ownership.
🙌 PERKS & BENEFITS https://alan.com/en/careers/a/salary-equity
At Alan, we believe that being in good health is a basic need, and it starts with our employees. This is why Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers.
Therefore, we offer:
- Fair rewards. Generous equity packages complement your base salary.
- Flexible Office. Amazing office space at our HQ, sponsored co-working hubs or a full-remote experience with home office equipment sponsorship, we want you to live where you’re the happiest.
- All the tools you need. Top of the range equipment: Macbook Pro, keyboard, laptop stand, monitor, and noise-canceling headphones.
- Flexible vacation policy and flexible working hours. Organize your time as you wish.
- Delightful healthcare insurance: Extremely comprehensive health insurance - 100% for you and your children, 90-100% for partners depending on your country (permanent contracts only).
- Transport. Country-specific commuter benefits.
- Learning & Training opportunities. A highly flexible Training policy free books and budget to attend and speak at conferences if the opportunity arises.
- Personal growth through coaching: At Alan, coaching isn't just a perk - it's core to who we are. Every Alaner is paired with a dedicated coach from day one, who helps maximize their impact, nurture engagement, and navigate Alan's values to develop their full potential. Learn more about our coaching culture https://alan.com/en/blog/discover-alan/a/alan-culture-excellence-through-coaching.
- Parental leave. Extended parental leave for all new parents.
IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES.
If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply as it can only bring learnings or success.
If you identify yourself as a woman: Did you know that research shows women often apply only when meeting 100% of requirements?
Remember, this is just a guide, not a checklist.
We'll be thrilled to receive your application!
🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info.
Планировать, координировать и отслеживать поставки для объединенной команды, состоящей из наших инженеров и внутренней команды разработки клиента, обеспечивая четкие приоритеты, сроки и выполнение. Оценивать существующие рабочие процессы, выявлять узкие места и внедрять практические улучшения процессов, которые дают измеримые и устойчивые результаты.
Location: US - Headquarters - Maryland - Columbia
Who is Tenable?
Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!
What makes Tenable such a great place to work?
Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!
Your Role:
Tenable's InfoSec team is looking for a Security Engineer to join our Security Engineering & Architecture group. This role was built deliberately to span disciplines rather than specialize in one: you'll split your time between securing our cloud environments and supporting general security engineering disciplines across the business — covering cloud and non-cloud systems alike. If you're early-career but curious across the breadth of InfoSec rather than narrowly focused on one domain, this role is built for you.
Your Opportunity:
Support day-to-day cloud security operations — monitoring, triage, and remediation of findings across AWS, Azure, and/or GCP environments using CNAPP/CSPM tooling.
Contribute to Security Architecture Reviews for new systems, integrations, and vendor onboarding — regardless of whether the system in question is cloud-hosted, on-prem, or SaaS. You'll work directly with the architects and engineers who own this process today, learning the methodology and eventually taking reviews from intake to sign-off.
Help identify and document misconfigurations, excessive permissions, and insecure IaC patterns (Terraform/CloudFormation), and help track remediation through to closure.
Participate in risk assessments and threat modeling exercises for new projects — applying the same core analysis skills whether the subject is a cloud workload, an internal application, or a third-party integration.
Assist with IAM/RBAC reviews and least-privilege efforts; flag static credentials, over-broad roles, and gaps in audit logging wherever they appear in the environment.
Build foundational familiarity with how AI/agentic systems intersect with our environment — cloud-hosted LLM services (AWS Bedrock, Azure OpenAI, GCP Vertex AI), the Model Context Protocol (MCP), and the basic risk surface of agent/tool-calling architectures and apply that awareness during reviews when these systems show up in scope.
Work cross-functionally with engineering, GRC, and TPRM to keep architecture reviews and cloud findings moving — this role is a connective thread between teams, not a silo.
What You'll Need:
2–3 years of experience in a security engineering, cloud security, IT security, or related technical role (internships and adjacent IT/ops experience count).
Working knowledge of at least one major cloud provider (AWS, Azure, or GCP) — IAM fundamentals, networking basics, and common misconfiguration patterns.
Basic understanding of security architecture review or threat modeling concepts (e.g., STRIDE, data flow diagrams) — or clear aptitude and interest in learning them.
Familiarity with core security engineering practices: least-privilege access, audit logging, secrets management (no static credentials), and secure configuration baselines.
Comfort reading documentation and asking good questions across unfamiliar systems — this role touches a lot of different architectures, so curiosity matters more than deep specialization in any one of them.
Strong written communication — you'll be documenting review findings and cloud remediation guidance for technical and non-technical audiences alike.
And Ideally:
Exposure to IaC security scanning (Terraform/CloudFormation) or CNAPP/CSPM/CIEM platforms.
Some hands-on exposure to a formal architecture/design review process, even informally (e.g., reviewing a peer's system design for security gaps).
Basic familiarity with AI/LLM concepts — prompts, context windows, tool/function calling, RAG — and awareness of frameworks like the OWASP Top 10 for LLM Applications or the NIST AI RMF.
A relevant certification (Security+, AWS/Azure/GCP security certs, or similar) or equivalent self-directed learning.
Prior exposure to compliance frameworks (SOC 2, FedRAMP, ISO 27001) relevant to architecture review sign-off
#LI-Hybrid #LI-MS1
This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs.
US Pay Range
$102,500
—
$136,500 USD
We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact
Recruiting@Tenable.com
for further assistance.
Tenable Data Consent Statement
Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you:
General Applicant Privacy Notice
California Applicant Privacy Notice
EU/EEA/UK Applicant Privacy Notice
УдалённоBelgrade, Serbia; Tbilisi, Georgia
leadNew York City Office
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
УдалённоseniorСША; You must be based in, and authorized to work in, the United States
ОфисLondon
УдалённоleadRemote - EMEA
ОфисEbene
УдалённоLisbon, Portugal; Madrid, Spain; Prague, Czechia; Clear, short writing for both engineers and non-technical stakeholders; works well async across time zones
San Francisco, CA | New York City, NY; Share intake and triage on a rotation across time zones so every request gets a decision within the defined SLA; Experience working across time zones or across multiple sites to set one global standard
УдалённоseniorPoland; Brazil; Peru; Sweden; Argentina; Romania; Cyprus; Czech Republic; Hungary; Mexico; Chile; Bulgaria; We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance
seniorГермания, Франция, Италия; Please note that we are unable to consider applications from candidates based in France, Italy, or Germany for this role; EMEA - Remote
San Francisco, CA | New York City, NY
УдалённоМожно работать из любой страны
seniorHyderabad, India; We believe in equality of opportunity and welcome candidates from all backgrounds regardless of age, gender, ethnicity, disability, sexual orientation, gender identity, socio-economic background, religion, or belief
Автоотклики