Вакансии

🔸Проводить комплексное тестирование безопасности веб-приложений, API и мобильных приложений. 🔸Выполнять ручной и автоматизированный поиск уязвимостей.

Location: Amsterdam, Netherlands About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Role Overview Nebius is seeking an experienced Security Analyst - Tier 2 for its Security Operations Center (SOC). This role is a hands-on position built for depth, serving as the investigative core of the SOC, focused on evidence and grounded conclusions. This role reports to the SOC Manager, under the Detection and Response function within the CISO Office. You are welcome to work in our offices in Tel Aviv, Israel. Key Responsibilities Investigate escalated security alerts across endpoint, identity, cloud, email, and network layers. Determine scope, impact, and root cause using EDR, SIEM, and supporting telemetry. Escalate suspected incidents to the Incident Response team and complex investigations to Tier 3. Provide structured feedback to relevant stakeholders on detection or prevention quality, false-positive patterns, and coverage gaps discovered during investigations. Contribute to and refine SOC runbooks, triage guides, and investigation procedures. Review Tier 1 escalations, coach on handoff quality, and act as the analytical reference during triage. Document investigations to a standard that supports handoff, quality review, and lessons learned. Participate in the on-call rotation, acting as the investigative point of contact outside business hours. Required Qualifications: Experience Around 5-7 years of hands-on security operations experience, with proven depth in alert investigation. Experience taking investigations to a clear verdict, including confirmed incidents. Technical Expertise Strong working command of EDR platforms and SIEM-based investigation, including writing and adapting queries independently. Solid understanding of attacker techniques, with the ability to map findings to MITRE ATT&CK in analysis and reporting. Investigation capability across at least two of: endpoint, identity, cloud, email, or network domains. Windows and Linux internals at the depth required for log and artifact analysis: processes, authentication flows, and persistence mechanisms. Solid networking fundamentals: TCP/IP, DNS, HTTP/S, and the ability to interpret network telemetry. Scripting ability (Python or similar) for analysis at scale, and familiarity with SOAR platforms. Certifications such as BTL2, OSDA, or CDSA are an advantage. Leadership & Communication Intellectual honesty, clearly distinguishing important and vague data, what is known, what is assumed, and what is still unknown. Collaborative escalation habits, hands off with context and stays available to support what comes next. Structured written communication, writing investigation notes that tell the story on their own. Fluent in English, written and verbal, comfortable working with international teams and stakeholders. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Workplace: Удаленно Объединённая компания Wildberries и Russ — это международная технологическая компания, образованная в результате слияния двух лидеров рынка — IT-компании Wildberries и оператора наружной рекламы Russ. Обязанности Разработка и развитие методологии сетевой безопасности: формирование требований, стандартов,рекомендаций и методик проверок безопасности сетевой инфраструктуры; Проведение аудитов сетевой безопасности: анализ конфигураций FW/NGFW (OPNsense, nftables, Fortinet, Check Point), сетевых устройств. Выявление небезопасных конфигураций, нарушений сегментации и отклонений от требований безопасности; Проведение ревью безопасности технических решений: экспертиза сетевой архитектуры и изменений инфраструктуры, оценка безопасности сетевых взаимодействий, сегментации, маршрутизации и публикации сервисов. Формирование рекомендаций по снижению выявленных рисков; Автоматизация: разработка и сопровождение инструментов (Python/Go/Bash) для аудита конфигураций, выявления отклонений от эталонов, анализа сетевых политик и формирования отчётности. Интеграция с инфраструктурными API и сервисами ИБ; Взаимодействие со смежными командами: участие в разборе сложных сетевых проблем и инцидентов, консультирование по вопросам сетевой безопасности, подготовка технических заключений и поддержка документации; Контроль устранения недостатков: оценка критичности выявленных проблем, согласование мер по их устранению со смежными командами, проведение повторных проверок и контроль выполнения требований безопасности. Требования Глубокое понимание сетевых технологий и протоколов: TCP/IP, DNS, HTTP(S), TLS, VLAN, VRF, NAT, OSPF/BGP, VPN, принципов маршрутизации и фильтрации трафика; Практический опыт работы с FW/NGFW (OPNsense, nftables, Fortinet, Check Point, PT NGFW), понимание механизмов и принципов построения политик безопасности; Понимание принципов построения и защиты виртуальных сетей, SDN и сетевой виртуализации (Proxmox, Open vSwitch, VXLAN, виртуальные маршрутизаторы и межсетевые экраны); Понимание сетевой архитектуры Kubernetes: CNI, Cilium, eBPF, Network Policies, Service Networking, Ingress и механизмов сетевой изоляции workloads; Знание принципов сегментации и микросегментации, DMZ, Zero Trust, Least Privilege и методов ограничения сетевой связности; Опыт проведения технических аудитов и Security Review: анализ конфигураций, выявление небезопасных настроек, оценка рисков и формирование рекомендаций по устранению недостатков; Умение анализировать сетевой трафик и диагностировать сложные проблемы сетевой связности с использованием Wireshark, tcpdump и других инструментов. Опыт автоматизации технических задач с использованием Python/Go/Bash, понимание Git, GitLab CI/CD и принципов работы с API. Условия Обучение и развитие: языковые клубы, собственный корпоративный университет, программы развития управленческих навыков и многое другое; Благополучие сотрудников: корпоративный пакет ДМС со стоматологией, корпоративный спорт, консультации психолога и дополнительные возможности аккредитованной IT-компании; Множество сообществ: клуб спикеров, футбола, йоги, шахмат и т.д.; Забота о семьях: создаем условия, в которых легко сочетать карьеру и заботу о близких – от гибкого подхода до масштабных проектов для детей сотрудников; Скидки и партнерские программы: на обучение, страхование, покупки и многое другое; Комфортная рабочая среда: бесплатное питание в офисе, современные офисы рядом с метро, корпоративная техника и портал для сотрудников.

Ищем специалиста, который умеет не просто находить уязвимости, но и проверять их реальную эксплуатацию — от первичной разведки до пост-эксплуатации. - Проводить пентесты внешнего периметра: от разведки до пост-эксплуатации.

Location: Москва Workplace: Гибрид, Удаленно, Офис Объединённая компания Wildberries и Russ — это международная технологическая компания, образованная в результате слияния двух лидеров рынка — IT-компании Wildberries и оператора наружной рекламы Russ. Вместе с масштабным развитием IT направления Wildberries и Russ развивает информационную безопасность. Мы решаем сложные и разнообразные задачи: от повышения защищенности каждого сервиса до развития безопасности в рамках всей нашей инфраструктуры. Мы ищем дежурного аналитика SOC, готового учиться и развиваться. Эта позиция отлично подходит для старта карьеры в SOC. Мы не требуем идеальных знаний, но нам важно ваше желание расти как профессионал. Обязанности Обнаружение, расследование и реагирование на инциденты Разработка инструкций по разбору и верификации алертов Требования Желание развиваться в сфере ИБ Опыт работы с системами мониторинга (Log management, SIEM) Опыт работы с Linux и Windows системами на уровне администратора, в частности — работа с логами Понимание работы сети и основных сетевых прикладных протоколов Будет плюсом, если у тебя есть: Опыт разработки правил корреляции событий Опыт работы с ELK Stack/OpenSearch/Wazuh Опыт работы с IRP/SOAR на уровне пользователя Знание современных тактик и техник компьютерных атак, методов и средств их обнаружения Базовые навыки программирования на Python, PowerShell или Bash для автоматизации рутинных задач Участие в CTF Условия Обучение и развитие: языковые клубы, собственный корпоративный университет, программы развития управленческих навыков и многое другое; Благополучие сотрудников: корпоративный пакет ДМС со стоматологией, корпоративный спорт, консультации психолога и дополнительные возможности аккредитованной IT-компании; Множество сообществ: клуб спикеров, футбола, йоги, шахмат и т.д.; Забота о семьях: создаем условия, в которых легко сочетать карьеру и заботу о близких – от гибкого подхода до масштабных проектов для детей сотрудников; Скидки и партнерские программы: на обучение, страхование, покупки и многое другое; Комфортная рабочая среда: бесплатное питание в офисе, современные офисы рядом с метро, корпоративная техника и портал для сотрудников.

Location: Москва Workplace: Гибрид, Удаленно, Офис Объединённая компания Wildberries и Russ — это международная технологическая компания, образованная в результате слияния двух лидеров рынка — IT-компании Wildberries и оператора наружной рекламы Russ. Ищем инженера, который будет отвечать за развитие и поддержку корпоративной экосистемы Kaspersky: Kaspersky Security Center (KSC), Kaspersky Endpoint Security для Windows и Linux, KEDR, KATA и связанные компоненты (включая KSMG). Значительная часть серверной инфраструктуры продуктов Kaspersky развернута в Linux-окружении, поэтому важен практический опыт администрирования и сопровождения решений Kaspersky на Linux. Роль предполагает ownership ключевых компонентов платформы: политики, деплой, health, detection, response, интеграции и развитие архитектуры. Мы ищем человека с сильным практическим опытом именно в продуктах Kaspersky. Обязанности Администрировать и развивать Kaspersky Security Center (KSC) на Linux: иерархия серверов, политики, группы, задачи, деплой агентов, контроль coverage и health, лицензирование, отчетность; Поддерживать и настраивать Kaspersky Endpoint Security для Windows и Linux (включая особенности KES for Linux): политики защиты, исключения, Application Control, Device Control, обновления, работа с агентами; Развивать и эксплуатировать KEDR (Kaspersky Endpoint Detection and Response): телеметрия, расследования, response-действия, playbooks, интеграция с другими компонентами; Работать с KATA (Kaspersky Anti Targeted Attack): интеграция с endpoint-агентами, анализ инцидентов, настройка detection и response; Администрировать и развивать KSMG (Kaspersky Secure Mail Gateway) и связанные почтовые/сетевые компоненты экосистемы; Настраивать интеграции внутри экосистемы Kaspersky (KSC ↔ KEDR ↔ KATA ↔ KES) и с внешними системами (SIEM и т.д.); Обеспечивать стабильную работу Linux-бэкенда Kaspersky-решений: обновления, troubleshooting, мониторинг, оптимизация; Участвовать в развитии архитектуры и roadmap платформы Kaspersky в компании. Требования Глубокий практический опыт работы с Kaspersky Security Center (желательно актуальные версии, опыт именно с Linux-версией KSC будет большим плюсом); Уверенный опыт администрирования Kaspersky Endpoint Security для Windows и Linux; Практический опыт работы с KEDR (Optimum/Expert или аналог) — телеметрия, расследования, response; Опыт или хорошее понимание KATA; Знание и опыт работы с KSMG или другими компонентами экосистемы Kaspersky (почтовые/сетевые шлюзы); Сильное понимание особенностей развертывания и эксплуатации продуктов Kaspersky на Linux; Умение читать логи продуктов Kaspersky, проводить troubleshooting агентов и серверной части; Опыт автоматизации (Bash + Python/PowerShell) в контексте администрирования Kaspersky. Желательно, но не обязательно: Опыт построения иерархии KSC и работы с несколькими Administration Server; Понимание интеграции KEDR/KATA с SIEM и Active Directory; Опыт работы с кастомными правилами и playbooks в KEDR/KATA; Знание особенностей KES for Linux (контейнеры, namespaces и т.д.). Будет преимуществом: Сертификации Kaspersky (KL 002, KL 048 или аналоги); Опыт миграций или крупных обновлений платформы Kaspersky; Опыт работы с Kaspersky в крупных инфраструктурах (тысячи+ endpoint’ов). Условия Обучение и развитие: языковые клубы, собственный корпоративный университет, программы развития управленческих навыков и многое другое; Благополучие сотрудников: корпоративный пакет ДМС со стоматологией, корпоративный спорт, консультации психолога и дополнительные возможности аккредитованной IT-компании; Множество сообществ: клуб спикеров, футбола, йоги, шахмат и т.д.; Забота о семьях: создаем условия, в которых легко сочетать карьеру и заботу о близких – от гибкого подхода до масштабных проектов для детей сотрудников; Скидки и партнерские программы: на обучение, страхование, покупки и многое другое; Комфортная рабочая среда: бесплатное питание в офисе, современные офисы рядом с метро, корпоративная техника и портал для сотрудников.

Location: Riyadh, Saudi Arabia Role Summary The SOC L2 Specialist delivers SMC's managed security operations service. The role handles escalated alerts from L1, leads incident response, and supervises day-to-day SOC activity. Key Responsibilities Investigate and triage alerts escalated from L1 analysts, and confirm or close them with clear reasoning Lead incident response: containment, eradication, recovery and root cause analysis Perform deep-dive analysis of logs, network traffic, endpoint telemetry and email threats Tune SIEM correlation rules and use cases to reduce false positives Run threat hunting based on threat intelligence and MITRE ATT&CK Create and maintain incident response playbooks and SOAR workflows Supervise and mentor L1 analysts, review their work, and manage shift handovers Write incident reports and present findings to technical and management stakeholders Report incidents in line with NCA requirements and SMC's escalation matrix Track SOC KPIs such as MTTD, MTTR and SLA compliance. Requirements Bachelor's degree in Cybersecurity, Computer Science, IT or related field 4–6 years in a SOC, with at least 2 years at L2 level Strong hands-on SIEM experience (Splunk, IBM QRadar, Microsoft Sentinel, or similar) Experience with EDR/XDR (CrowdStrike, Defender for Endpoint, SentinelOne) and SOAR platforms Solid knowledge of MITRE ATT&CK, the cyber kill chain, malware analysis basics and network protocols Experience in an enterprise or managed SOC (MSSP) environment Saudi national, fluent in Arabic and English Willing to support on-call or shift rotation if required Preferred Certifications GCIH, GCIA, CySA+, CEH, Splunk Core Certified Power User, Microsoft SC-200, IBM QRadar certification

Location: Riyadh, Saudi Arabia Role Summary The GRC Senior Specialist provides governance, risk management and compliance consultancy to Saudi Motorsport Company. The role owns the cybersecurity governance framework and keeps SMC compliant with NCA and other Saudi regulations. Key Responsibilities Develop, review and maintain cybersecurity policies, standards and procedures Lead compliance with NCA ECC, CCC, and other applicable frameworks (PDPL, ISO 27001) Run gap assessments and build remediation roadmaps with control owners Own the cybersecurity risk register: identify, assess, treat and report risks Conduct third-party and vendor risk assessments Prepare SMC for internal, external and NCA audits, and manage evidence collection Track compliance status and present risk and compliance reports to senior management Support business continuity and disaster recovery planning from a security angle Run security awareness programs and policy communication across the organization Advise business and IT teams on regulatory and security requirements for new projects Requirements Requirements Bachelor's degree in Cybersecurity, Information Systems, IT or related field 7+ years in cybersecurity GRC, with at least 3 years in KSA Proven hands-on experience implementing NCA ECC and CCC, including NCA self-assessments Strong knowledge of ISO 27001, ISO 31000, NIST CSF and the Saudi PDPL Experience writing policies and leading audits end to end Familiarity with GRC platforms (ServiceNow IRM/GRC, RSA Archer, MetricStream) is a plus Saudi national, fluent in Arabic and English, with strong report writing skills Preferred Certifications CISA, CISM, CRISC, CGEIT, ISO 27001 Lead Implementer or Lead Auditor

Основная задача специалиста — создавать сложные, но реалистичные и проверяемые security-сценарии, в которых LLM-модели совершают ошибки именно из-за недостатков в рассуждении (reasoning) , а не из-за неоднозначных инструкций или ограничений среды.

Location: Indonesia; Nigeria; Turkey; United States About Gramian Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs. About the Role We are looking for experienced Application Security Engineers and Security-Focused Software Engineers to support a specialized AI security evaluation project. In this role, you will assess how effectively static analysis tools identify security vulnerabilities in Generative AI applications, particularly LLM agents and Retrieval-Augmented Generation (RAG) systems. You will build small, runnable repositories containing realistic examples of Sensitive Information Disclosure (SID) and Excessive Agency (EA) vulnerabilities, alongside fixed and near-miss versions. You will analyze code paths, identify security weaknesses, define authorization contexts, develop deterministic tests, and document findings. Your work will help improve the reliability of security tools and strengthen how AI systems are evaluated for application-level vulnerabilities. LOCATION: Remote EXPERIENCE: 5+ years in application/product security or security-focused software engineering PROJECT: GenAI application security evaluation and AI training TECHNICAL FOCUS: Python, TypeScript, SAST, CodeQL, Semgrep, LLM agents, RAG, and MCP AI EXPERIENCE: Hands-on experience building LLM agents or RAG applications is required. Key Responsibilities Build runnable agent and RAG repositories containing code-reachable Sensitive Information Disclosure and Excessive Agency vulnerabilities. Develop realistic security scenarios involving tool calling, agent memory, Model Context Protocol (MCP), and other LLM application components. Create vulnerable, fixed, and hard-negative code variants with minimal security-relevant differences. Evaluate static application security testing (SAST) tools and assess their ability to detect genuine vulnerabilities while avoiding false positives. Perform source-to-sink analysis and trace relevant data flows, action paths, and trust boundaries. Annotate security findings, including affected assets, root causes, controls, severity, and residual risk. Define authorization contexts covering actors, tenants, identities, permitted data, actions, purposes, and recipients. Develop deterministic tests to validate vulnerable, fixed, and negative security behaviors. Recommend appropriate security controls and remediation approaches. Participate in technical calibration, peer reviews, and quality assurance activities. Requirements 5+ years of professional experience in application security, product security, or security-focused software engineering. Strong experience conducting secure code reviews and identifying application-level vulnerabilities. Practical knowledge of source-to-sink analysis, taint analysis, and static application security testing (SAST). Hands-on experience with security analysis tools such as CodeQL or Semgrep. Experience building or securing LLM agents and/or Retrieval-Augmented Generation (RAG) applications. Familiarity with frameworks and technologies such as LangChain, LlamaIndex, OpenAI or Anthropic SDKs, and Model Context Protocol (MCP). Strong understanding of authorization models, including: Actors, identities, and trust boundaries. Multi-tenant authorization and access control. OAuth, IAM, and identity management. Permitted data access and actions. Purpose and recipient restrictions. Document-level access control. Production-level coding experience in Python and/or TypeScript. Ability to distinguish genuine Sensitive Information Disclosure and Excessive Agency vulnerabilities from non-findings and false positives. Strong analytical skills and the ability to communicate technical security findings clearly.

Location: Bangladesh; Brazil; Colombia; Egypt; Ghana; India About Gramian Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs. About the Role We are looking for experienced Application Security Engineers and Security-Focused Software Engineers to support a specialized AI security evaluation project. In this role, you will assess how effectively static analysis tools identify security vulnerabilities in Generative AI applications, particularly LLM agents and Retrieval-Augmented Generation (RAG) systems. You will build small, runnable repositories containing realistic examples of Sensitive Information Disclosure (SID) and Excessive Agency (EA) vulnerabilities, alongside fixed and near-miss versions. You will analyze code paths, identify security weaknesses, define authorization contexts, develop deterministic tests, and document findings. Your work will help improve the reliability of security tools and strengthen how AI systems are evaluated for application-level vulnerabilities. LOCATION: Remote EXPERIENCE: 5+ years in application/product security or security-focused software engineering PROJECT: GenAI application security evaluation and AI training TECHNICAL FOCUS: Python, TypeScript, SAST, CodeQL, Semgrep, LLM agents, RAG, and MCP AI EXPERIENCE: Hands-on experience building LLM agents or RAG applications is required. Key Responsibilities Build runnable agent and RAG repositories containing code-reachable Sensitive Information Disclosure and Excessive Agency vulnerabilities. Develop realistic security scenarios involving tool calling, agent memory, Model Context Protocol (MCP), and other LLM application components. Create vulnerable, fixed, and hard-negative code variants with minimal security-relevant differences. Evaluate static application security testing (SAST) tools and assess their ability to detect genuine vulnerabilities while avoiding false positives. Perform source-to-sink analysis and trace relevant data flows, action paths, and trust boundaries. Annotate security findings, including affected assets, root causes, controls, severity, and residual risk. Define authorization contexts covering actors, tenants, identities, permitted data, actions, purposes, and recipients. Develop deterministic tests to validate vulnerable, fixed, and negative security behaviors. Recommend appropriate security controls and remediation approaches. Participate in technical calibration, peer reviews, and quality assurance activities. Requirements 5+ years of professional experience in application security, product security, or security-focused software engineering. Strong experience conducting secure code reviews and identifying application-level vulnerabilities. Practical knowledge of source-to-sink analysis, taint analysis, and static application security testing (SAST). Hands-on experience with security analysis tools such as CodeQL or Semgrep. Experience building or securing LLM agents and/or Retrieval-Augmented Generation (RAG) applications. Familiarity with frameworks and technologies such as LangChain, LlamaIndex, OpenAI or Anthropic SDKs, and Model Context Protocol (MCP). Strong understanding of authorization models, including: Actors, identities, and trust boundaries. Multi-tenant authorization and access control. OAuth, IAM, and identity management. Permitted data access and actions. Purpose and recipient restrictions. Document-level access control. Production-level coding experience in Python and/or TypeScript. Ability to distinguish genuine Sensitive Information Disclosure and Excessive Agency vulnerabilities from non-findings and false positives. Strong analytical skills and the ability to communicate technical security findings clearly.

🔎 Maqsad: Kiberxavfsizlikni noldan o‘rganmoqchi bo‘lganlar uchun. soc l1 darajagacha kerakli bilimlarni beraman.

Location: United States Workplace: Remote At ClickUp, we're building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an AI-native company. Every team member is expected to leverage AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what's possible. 🚀 Security at ClickUp Security at ClickUp is engineering-focused. We partner with teams across the company to protect our platform, our internal systems and our customers through secure design, defensive controls, detection and response. We build tooling and automation, including AI-powered workflows, to turn what we learn into lasting improvements.   About the team Infrastructure Security at ClickUp secures the cloud, compute, network and access layers underneath ClickUp: a multi-account AWS organization, a large Kubernetes fleet, infrastructure managed as code and the identity systems engineers use to reach production. We are a small team that works agentic first, using AI agents we build and maintain ourselves to multiply what a team our size can cover.   You will support this mission by thinking like a developer, breaking down a problem that we face, testing a method to approach it with automation, and implementing solutions that yield compounding value. Your skills to uncover threat indicators will be the foundation of this work.   The role - Architecture, proposals and reviews. Act as an initial reviewer on infrastructure proposals and designs from engineering and non-engineering teams such as business systems and go-to-market. Write our own security proposals and review the changes that follow. Translate security requirements and agent findings into clear guidance for less-technical partners, and bring their needs back into our designs. - Agentic security tooling and agent infrastructure. Build, evaluate and maintain the agents behind our reviews, triage and investigations, and help run the sandboxed, observable infrastructure they operate on. - Detection, investigation and response. Lead cloud and infrastructure alerts and incidents through to resolution and root cause, working alongside AppSec and incident response on incidents that span both. - Identity, access and least privilege. Move people, CI and services toward least privilege and just-in-time access across our cloud organization and the tooling engineers use to reach production. Deliver fixes as secure building blocks that teams adopt by default. - Compute, network and pipeline security. Harden our container, serverless and virtual machine workloads, our network perimeter and our CI/CD pipelines, and add checks so each class of issue is caught automatically next time. - Continuous review and audit evidence. Move vulnerability, access and attack-surface reviews from point-in-time checks to continuous monitoring that also produces evidence for our infrastructure controls. Qualifications - 5+ years in security engineering, cloud infrastructure or SRE, with at least 2 years securing AWS at organization scale. - At least a year of agentic development experience: building agent skills and tools for real engineering work, and developing and maintaining the development harness they run in, from configuration and permissions to integrations, evaluations and cost controls. You can secure agents against prompt injection, over-privileged tools and unaudited actions, and explain how agents fall into the confused deputy problem and the lethal trifecta. You validate agent output against evidence and decide where human review is required. - Deep AWS IAM experience: IAM Identity Center or an equivalent SSO model, SCPs, permission boundaries, resource and key policies, cross-account trust, and the ability to prove a policy's effect with simulation rather than inference. - Production Kubernetes security on EKS or similar, covering RBAC, workload identity, network policy, admission control and container runtime hardening. - AWS networking for security: VPC design, endpoints and endpoint policies, network and DNS firewalls, egress control, and WAF. - Fluency with infrastructure as code such as Terraform, including reusable patterns, multi-environment rollouts and reading plans for security impact. - Experience with CNAPP, SIEM or runtime security tooling and the cloud detection sources around it, such as CloudTrail, GuardDuty and Access Analyzer. - Experience investigating cloud and infrastructure security events: correlating cloud audit, Kubernetes, identity and network logs to establish what happened, its blast radius and its root cause. - A track record of reviewing architecture and writing design proposals, guiding teams toward secure designs through conversation rather than mandate, mentoring others through reviews, and turning a review into a change another team is glad to make. - Python, Go or TypeScript for security automation. - Clear written and verbal communication, including explaining technical risk to non-technical partners. Most of our work with other teams is asynchronous, so much of the job is a well-evidenced finding, proposal or design note that another team can act on without a meeting. Desirable - Experience using AI agents in a SOC or other incident response workflows. - Sandboxed runtime experience with gVisor, Firecracker or Kata. - Offensive security or red-team experience in cloud and Kubernetes environments. - Policy engines such as OPA or Rego. - Supporting audits like SOC 2 with automated evidence collection.   Our stack AWS, Kubernetes, infrastructure as code, CI/CD with federated identity, an enterprise identity provider, observability and cloud security platforms, and AI agent tooling. Equal Opportunity Employer ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. Privacy Notice ClickUp collects and processes personal data in accordance with applicable data protection laws. You can find further details by viewing our Global Candidate Privacy Notice. https://clickup.com/careers-terms/candidate-privacy-notice If you are a Philippine Job Applicant, please also see our Philippine Data Privacy Notice https://t333.s.clickup-attachments-stg.com/t333/d9a53ce2-6d2c-48cd-84b1-ed4e525f9613/Philippine%20Data%20Privacy%20Notice_2024.pdf?view=open for further details. Visa Sponsorship Please note we are unable to sponsor or take over sponsorship of an employment visa for roles outside of engineering and product at this time. Sponsorship for engineering and product roles is not guaranteed, but is instead based on the business needs for that specific role at that time. Please reach out to the recruiter with any questions. Fraud Alert ClickUp Talent Acquisition will only initiate contact via an @clickup.com http://clickup.com email or through our official careers portal on clickup.com http://clickup.com. We will never request fees, payments, or sensitive personal information. Please disregard any offers received outside these channels and report them to support@clickup.com. AI Processing Notice ClickUp may use artificial intelligence and machine learning technologies to help review and screen candidates' employment applications against role-related criteria. These tools support, but do not replace, human decision‑making. If you have questions or need an accommodation in the recruitment process, please contact us at AskPeople@ClickUp.com.

Понимание архитектуры web-приложений и микросервисов. Опыт анализа кода на Java, JavaScript/TypeScript, Python, C/C++, C#.

Location: Vilnius 500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating. Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down. With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better. The job Millions of people trust Flo with their most personal health data. As our Security Architect, you’ll make sure we deserve that trust. This is a hands-on individual contributor role. You’ll work side by side with engineering, product and platform teams to shape secure architectures and build the guardrails that let both humans and AI coding agents ship quickly and safely. The role combines security architecture, product and application security engineering and security risk expertise: you will set secure patterns and standards, lead threat modelling and design reviews, embed security into the SDLC and CI/CD, and translate security risk into clear, pragmatic decisions. What you’ll do Shape secure architecture from day one. Partner with teams early in design, lead security design reviews for new services and major changes, and record key decisions and risk trade-offs. Build security harnesses for human and AI-agent development. Design guardrails, sandboxing, least-privilege access for agents and tools, secrets handling, policy-as-code and automated checks that run inside developer and agent workflows. Lead on AI and agentic security. Define secure patterns for LLM integrations, MCP servers and tool use, and tackle risks like prompt injection, data leakage, excessive agency and supply-chain compromise. Create paved roads. Publish reusable patterns, reference architectures and standards that teams adopt because they’re the easiest option. Scale threat modelling. Build tools and skills that let engineers run threat models themselves, and carry out internal security assessments. Remove whole classes of vulnerabilities. Automate vulnerability triage and investigation, find systemic root causes, and feed the fixes back into patterns and guardrails. Turn risk into clear decisions. Explain security risk in pragmatic terms so the business can prioritise based on risk and value. Advise and enable. Be a trusted partner to engineering, product and leadership, coach engineers, and help evaluate third-party and AI tools so they can be adopted securely. Support ISO 27001/27701 so that controls are built into how we engineer, not bolted on afterwards. What you’ll bring 7+ years in security engineering, application/product security or security architecture, including hands-on work securing cloud-native systems Deep knowledge of Secure SDLC: threat modelling, security testing, app security review and CI/CD security Hands-on experience with AWS and Cloudflare (or equivalents) and Terraform or similar IaC A strong grasp of the OWASP Top 10 and the ability to assess exploitability and impact Solid coding skills (e.g. Python, Go, Scala) and experience building security tooling or automation Practical understanding of the risks in AI-assisted and agentic development and LLM applications (e.g. OWASP Top 10 for LLMs) Experience with security risk analysis and risk management methods The ability to explain trade-offs clearly to engineers and senior stakeholders, and to win people over Nice to have Experience building guardrails, sandboxes or policy-as-code (e.g. OPA) for developer platforms or AI coding agents iOS or Android security experience Experience with ISO 27001, ISO 27701 or SOC 2 audits A background in health tech, femtech or another regulated, privacy-sensitive industry Certifications or degrees such as CISSP, CCSP, OSCP or an MSc in Information Security Why Flo You’ll protect data that matters deeply to millions of people. You’ll also help set the standard for how a company adopts agentic engineering safely, and you’ll have real ownership: you design and build the first version, then hand it off to the teams who will run it. Salary Range - gross per month (ranges may vary based on skills and experience) €8.000 — €10.000 EUR How we work We’re a mission-led, product-driven team. We move fast, stay focused and take ownership – from brief to build to impact. Debate is encouraged. Decisions are shared. We care about craft, ship with purpose, and always raise the bar. You’ll be working with people who take their work seriously, not themselves. It takes commitment, resilience, and the drive to keep going when things get tough. Because better health outcomes are worth it. What you'll get We support impact with meaningful reward. Here’s what that looks like: Competitive salary and annual reviews Opportunity to participate in Flo’s performance incentive scheme Paid holiday, sick leave, and female health leave Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents Accelerated professional growth through world-changing work and learning support In-person collaboration and work in a hybrid model, with 3 days per week spent in the office 5-week fully paid sabbatical at 5-year Floversary Flo Premium for friends & family, plus more health, pension and wellbeing perks Diversity, equity and inclusion Our strength is in our differences. At Flo, hiring is based on merit, skill and what you bring to the role – nothing else. We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities. Read our privacy notice for job applicants .

Location: London 500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating. Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down. With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better. The job Millions of people trust Flo with their most personal health data. As our Security Architect, you’ll make sure we deserve that trust. This is a hands-on individual contributor role. You’ll work side by side with engineering, product and platform teams to shape secure architectures and build the guardrails that let both humans and AI coding agents ship quickly and safely. The role combines security architecture, product and application security engineering and security risk expertise: you will set secure patterns and standards, lead threat modelling and design reviews, embed security into the SDLC and CI/CD, and translate security risk into clear, pragmatic decisions. What you’ll do Shape secure architecture from day one. Partner with teams early in design, lead security design reviews for new services and major changes, and record key decisions and risk trade-offs. Build security harnesses for human and AI-agent development. Design guardrails, sandboxing, least-privilege access for agents and tools, secrets handling, policy-as-code and automated checks that run inside developer and agent workflows. Lead on AI and agentic security. Define secure patterns for LLM integrations, MCP servers and tool use, and tackle risks like prompt injection, data leakage, excessive agency and supply-chain compromise. Create paved roads. Publish reusable patterns, reference architectures and standards that teams adopt because they’re the easiest option. Scale threat modelling. Build tools and skills that let engineers run threat models themselves, and carry out internal security assessments. Remove whole classes of vulnerabilities. Automate vulnerability triage and investigation, find systemic root causes, and feed the fixes back into patterns and guardrails. Turn risk into clear decisions. Explain security risk in pragmatic terms so the business can prioritise based on risk and value. Advise and enable. Be a trusted partner to engineering, product and leadership, coach engineers, and help evaluate third-party and AI tools so they can be adopted securely. Support ISO 27001/27701 so that controls are built into how we engineer, not bolted on afterwards. What you’ll bring 7+ years in security engineering, application/product security or security architecture, including hands-on work securing cloud-native systems Deep knowledge of Secure SDLC: threat modelling, security testing, app security review and CI/CD security Hands-on experience with AWS and Cloudflare (or equivalents) and Terraform or similar IaC A strong grasp of the OWASP Top 10 and the ability to assess exploitability and impact Solid coding skills (e.g. Python, Go, Scala) and experience building security tooling or automation Practical understanding of the risks in AI-assisted and agentic development and LLM applications (e.g. OWASP Top 10 for LLMs) Experience with security risk analysis and risk management methods The ability to explain trade-offs clearly to engineers and senior stakeholders, and to win people over Nice to have Experience building guardrails, sandboxes or policy-as-code (e.g. OPA) for developer platforms or AI coding agents iOS or Android security experience Experience with ISO 27001, ISO 27701 or SOC 2 audits A background in health tech, femtech or another regulated, privacy-sensitive industry Certifications or degrees such as CISSP, CCSP, OSCP or an MSc in Information Security Why Flo You’ll protect data that matters deeply to millions of people. You’ll also help set the standard for how a company adopts agentic engineering safely, and you’ll have real ownership: you design and build the first version, then hand it off to the teams who will run it. Annual Salary Range (ranges may vary based on skills and experience) £100,000 — £130,000 GBP How we work We’re a mission-led, product-driven team. We move fast, stay focused and take ownership – from brief to build to impact. Debate is encouraged. Decisions are shared. We care about craft, ship with purpose, and always raise the bar. You’ll be working with people who take their work seriously, not themselves. It takes commitment, resilience, and the drive to keep going when things get tough. Because better health outcomes are worth it. What you'll get We support impact with meaningful reward. Here’s what that looks like: Competitive salary and annual reviews Opportunity to participate in Flo’s performance incentive scheme Paid holiday, sick leave, and female health leave Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents Accelerated professional growth through world-changing work and learning support In-person collaboration and work in a hybrid model, with 3 days per week spent in the office 5-week fully paid sabbatical at 5-year Floversary Flo Premium for friends & family, plus more health, pension and wellbeing perks Diversity, equity and inclusion Our strength is in our differences. At Flo, hiring is based on merit, skill and what you bring to the role – nothing else. We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities. Read our privacy notice for job applicants .

🔹 комплексный пентест веб- и мобильных приложений, аудит backend и API;

• Понимание устройства прикладных/серверных web-приложений и микросервисной архитектуры.