Вакансии

Location: England; United States Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ The Secure Build team builds and operates the infrastructure behind Docker's container builds. The team owns Docker Build Cloud and Auto Builds while developing the next generation of trusted build and CI capabilities. Software is being changed faster than ever, but CI remains a bottleneck and a major trust boundary. Developers and software agents need to run build and test work quickly without exposing secrets, losing local-to-cloud parity or accepting an unverifiable result. Our direction is to make Docker the trusted place CI runs and turn that constraint into an accelerator. The technical work spans Go services, container and build technology, cloud infrastructure, isolated execution and software supply-chain security. It also requires disciplined operation of the production systems customers rely on today. Docker Build Cloud and Auto Builds will need targeted reliability and operational improvements while useful capabilities evolve towards a coherent Secure Build platform. As a Senior Software Engineer, you will turn these problems into practical product and technical outcomes. You will own substantial work from discovery and design through production, make sound security and reliability trade-offs, and stay close to the experience of developers and the agents they delegate work to. We make extensive use of AI-assisted engineering tools. We expect engineers to use them thoughtfully, validate their output and remain accountable for the quality and security of what ships. SUCCESS IN THIS ROLE LOOKS LIKE You will succeed by becoming an end-to-end owner for secure, reliable build infrastructure. Within your first year, you should have delivered a material secure-build or CI capability, reduced operational risk in Docker Build Cloud or Auto Builds, and become a trusted partner to the teams and customers that consume the platform. RESPONSIBILITIES - Turn developer, agent and security problems into clear requirements, staged technical decisions and measurable outcomes. - Design, build and operate Go services and APIs that power Docker's build and secure-CI infrastructure. - Develop isolation, identity, policy, provenance, attestation and signing capabilities for trusted build and test jobs. - Work with container, OCI, BuildKit, cloud and isolated-execution technologies to deliver secure and reproducible workflows. - Own features from technical design through rollout, observability, incident response and ongoing maintenance. - Keep Docker Build Cloud and Auto Builds reliable, make targeted improvements that reduce operational load, and help their capabilities evolve towards the wider Secure Build direction. - Make practical security trade-offs and use threat modelling to guide designs without blocking delivery. - Design for a clear developer experience, including workflows initiated or consumed by software agents. - Partner with Product, Security, Developer Experience, Registry and other platform teams on end-to-end customer workflows. - Participate in the team's paid on-call rotation and drive improvements from incidents and recurring operational work. - Communicate decisions, risks and progress clearly in a remote, async-first environment. QUALIFICATIONS REQUIRED - 6+ years of software engineering experience, with demonstrated technical leadership on production systems at scale. - Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience - Strong backend engineering experience building and operating distributed systems in production. - Production experience with Go and the ability to write, test, review and debug maintainable Go services. - Experience with containers and build or CI systems, such as OCI, BuildKit, Buildx, GitHub Actions or comparable platforms. - Experience with cloud-native infrastructure and a major cloud platform. - A strong operational mindset covering observability, reliability, incident response and on-call ownership. - Evidence of taking a feature or service from an ambiguous problem through production operation and measurable results. - Working knowledge of security boundaries, identity, secrets and common software supply-chain risks. - A strong product mindset and care for developer workflows, including experiences used by software agents. - Clear written and spoken communication suited to a remote, async-first company. HELPFUL, BUT NOT REQUIRED - Experience with Kubernetes. - Experience with SLSA, in-toto, SBOM, VEX, Sigstore, cosign, provenance or artefact signing. - Experience with sandboxing, microVMs, untrusted workload execution or multi-tenant infrastructure. - Experience building hosted CI runners, remote builders or developer-platform infrastructure. - Experience with agentic development workflows or building systems used programmatically by software agents. - Experience evolving a legacy production system while delivering new capabilities. WHAT TO EXPECT FIRST 30 DAYS - Build context on Docker Build Cloud, Auto Builds and the Secure Build product and technical direction. - Pair with the Secure Build team on core services, deployments and operational practices. - Ship a useful production change and take part in an operational review or incident-learning session. - Understand the secure-CI threat model and build relationships with DHI, Registry and Developer Experience. FIRST 90 DAYS - Own a secure-build feature or reliability improvement from problem definition through production. - Contribute materially to the secure-CI architecture, including isolation, identity, policy or signed evidence. - Deliver an observable improvement to the reliability or operability of an existing build service. - Demonstrate strong product judgement across developer and agent workflows. ONE YEAR OUTLOOK (FIRST YEAR) - Be a trusted senior technical owner on the Secure Build team. - Deliver a material secure-CI or trusted-build capability used by customers or internal product teams. - Improve the reliability and maintainability of Docker Build Cloud and Auto Builds while helping their useful capabilities converge with the wider platform. - Contribute to the team's architecture for isolated execution, brokered access and verifiable build outcomes. - Help establish strong product, design, review and operational practices as the team grows. Docker considers visa sponsorship on a case-by-case basis based on business needs.   Compensation & Equity EU: €94,040 – €155,650+ equity United States: $160,900 – $260,700 + equity ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE: Millions of people use Notion every day, and we’re growing quickly. The Infrastructure Security team’s mission is to build a secure-by-default foundation across Notion’s technical stacks—architecting systems that make the secure path the easy path. As an IC4 on this team, you’ll own meaningful infrastructure security problems end-to-end: from identifying risk, to designing pragmatic controls, to shipping secure defaults that scale across engineering. This role can be based in either San Francisco or New York City. We work from our offices on Mondays, Tuesdays and Thursdays (our Anchor Days) because we do our best thinking and building together in person. We’re looking for someone who’s excited to work alongside the team during those days.   WHAT YOU'LL ACHIEVE: - Proactively enhance the security posture of our AWS accounts and cloud infrastructure. - Create secure frameworks for secrets management and authentication/authorization. - Design and deploy robust Identity and Access Management (IAM) solutions. - Provide guidance and education on security and privacy best practices to cross-functional partners. - Participate in (and help drive) mitigation strategies during security-related incident response.   SKILLS YOU'LL NEED TO BRING: - Security architecture and expertise: you’ve built and maintained systems to secure cloud architectures, ranging from secrets management to Identity and Access Management solutions. - Backend/infrastructure development: you’ve written and shipped production-grade code, and can contribute to the codebase and architecture to raise the bar on secure systems design. - Working in production: you can debug systems in production and continuously improve components with minimal disruption. - Pragmatic, risk-based prioritization: you model threats, balance trade-offs, and focus security investments where they drive the most business impact. - Empathetic communication: you communicate nuanced ideas clearly in writing and in real time; in disagreements, you engage thoughtfully and look for the right compromise.   NICE TO HAVES: - AWS security best practices, zero trust architectures, and/or deep IAM expertise. - Data security or privacy engineering experience. - Experience applying AI tooling to defensive security workflows. - Participation in security communities (local or regional groups, conferences).   Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $230,000 - $280,000 per year.   By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74 and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: Hong Kong, Hong Kong SAR; Singapore, Singapore Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Opportunity As a Staff Engineer, y ou'll own the build-out of our security engineering and DevSecOps capabilities: designing and developing the security products, platform services, and SDKs/Agents that embed protection directly into how code is written, built, shipped, and run. This is a role for someone with real depth in security, broad coverage across the stack, and the engineering muscle to ship. Just as important is the ability to drive adoption — security that lands in complex, fast-moving business environments rather than sitting in a policy document. What You’ll Be Doing Architect and build our end-to-end DevSecOps platform and the SDKs/Agents behind our security products, covering code, build, artifacts, images, deployment, and runtime. Lead runtime protection through RASP and Java Agent — bytecode instrumentation, runtime hooking, and detection/interception engines using ASM, ByteBuddy, and Instrumentation, with continuous tuning for performance, stability, and compatibility. Integrate and productise scanning capabilities across SAST, DAST, IAST, SCA, code scanning, and image scanning. You'll embed tools like SonarQube and Coverity deep into CI/CD and close the loop from detection through blocking, remediation, and re-test. Go deep on application security offence and defence — designing detection, remediation, hardening, and counter-measures for XSS, SQL injection, SSRF, deserialisation, command execution, authentication/authorisation flaws, and API security. Bring AI-native security engineering to life. Apply LLMs and AI Agents to vulnerability analysis, rule generation, false-positive attribution, remediation guidance, security knowledge capture, and engineering automation — and build a coherent view of the architecture, mechanics, and security implications. Embed as the security technical expert inside engineering teams, driving security standards, onboarding specifications, release gates, risk tiering, and remediation mechanisms that measurably lift the security baseline and delivery quality. Partner across engineering, architecture, SRE, QA, and business teams on priority projects, solving the genuinely hard security problems and turning the solutions into reusable platform capability and repeatable practice. What We Look For In You Strong computer science and security fundamentals — deep understanding of operating systems, networking, compilers and the JVM, distributed systems, application security, cloud-native security, and supply chain security. Both breadth and depth. Expert-level Java, with hands-on depth in the JVM, ClassLoader, Java Agent, ASM, ByteBuddy, bytecode instrumentation, and performance profiling and tuning. Plus working proficiency in Python or Go. Substantial production experience with RASP, SAST, DAST, IAST, SCA, image security, and code scanning — enough to design a capability, integrate the engine, build the platform around it, and take it to scale independently. Real offensive and defensive experience. You understand the root causes, exploitation paths, detection logic, bypass techniques, and fixes for common web, API, and microservices vulnerabilities — and can design from both the attacker's and defender's point of view. Fluency with LLMs and AI Agents, including a considered view on model capability limits, agent architecture, tool calling, context engineering, evaluation methods, and how AI is reshaping both security engineering and the attack surface. Strong engineering execution paired with product instinct — able to lead the design and delivery of security products, platform modules, and SDKs/Agents while balancing security outcomes against performance overhead, integration cost, and long-term operability. Exceptional ownership, cross-team communication, and the persistence to move security governance, rule enforcement, and remediation through to a clear result. Nice to Haves Security engineering experience at a top-tier internet company, cloud provider, or leading security vendor You've led the build of a DevSecOps platform, application security platform, RASP, code scanning platform, or cloud-native security platform Background in security product development, SDK/Agent engineering, vulnerability research, red team exercises, or purple team work Shipped AI + Security work — security copilots, intelligent rule generation, automated analysis, or remediation recommendation systems Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Задачи: — Проектирование и разработка бэкенд-сервисов DSPM: разработка ядра продукта, включая пайплайны сканирования, обработки и парсинга документов, матчеры чувствительной информации, хранение и шифрование результатов. — Проектирование и разработка высоконагруженных отказоустойчивых бэкенд-сервисов, способных обрабатывать терабайты клиентских данных в потоковом режиме с акцентом на производительность, надёжность и стоимость обработки. — Сопровождение сервисов на всём жизненном цикле: от дизайна и код-ревью до выкатки и эксплуатации, включая мониторинг и алерты. Требования: — Уверенное владение Java и понимание JVM, включая принципы многопоточности и внутреннее исполнение кода. — Опыт разработки бэкенд-сервисов в продакшене с использованием Spring Boot, gRPC, баз данных и очередей или топиков. — Инженерная зрелость и продуктовое мышление, внимательность к качеству кода, включая тесты, код-ревью и наблюдаемость. — Способность самостоятельно разбираться в смежных компонентах и доводить задачи до результата.

Location: Almaty, Kazakhstan Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.   Role Overview We're looking for a hands-on Infrastructure Security Engineer to own security across our cloud and ML infrastructure — the platform that trains our models and serves millions of generations a day. The work spans tenant isolation for user-deployed apps, GPU cluster security, and model protection from training pipeline to serving. You'll sit between Security, DevOps, and ML Engineering. You'll own both immediate implementation work and long-term operational responsibility: cloud and ML infrastructure security, vulnerability management, monitoring, and access governance.   KEY RESPONSIBILITIES We are looking for someone with experience in scaling high-growth startups who can make an immediate impact in the following areas: Cloud & Network Security - Evaluate, implement, and maintain cloud security tooling. - Own infrastructure and container vulnerability management across our cloud environments, and drive remediation. - Design and implement network segmentation to tighten internal security boundaries. - Build centralized security monitoring across cloud infrastructure. Corporate Access Control - Own access governance and credential management across cloud and internal tooling. - Partner with Engineering, DevOps, and IT to raise identity and access management standards. Technical Leadership: - Set the technical direction for infrastructure security and lead cross-functional projects turning the standards you set into tooling and guardrails engineers actually ship with. Requirements: Few people will match all of these. If you're strong on some and eager to learn the rest, apply anyway. - 7+ years in infrastructure security or security engineering, including time at a high- growth startup. - Deep hands-on experience securing a major cloud provider and a container orchestrator, managed with infrastructure-as-code (AWS, Kubernetes, Terraform). - Experience securing ML workloads — training or inference infrastructure, GPU clusters, or model-serving platforms. - Solid networking, operating systems, and cryptography fundamentals. - Strong grasp of container and infrastructure security practices and vulnerability management. - Comfortable working cross-functionally with DevOps, Engineering, and ML teams; able to independently find and close security gaps. - High agency. Nice to have - Experience with sandboxing, container isolation, or secure execution environments for untrusted code. - Experience with CSPM rollouts. - Incident response and security monitoring experience. - Familiarity with SOC 2 or similar frameworks. WHAT WE OFFER: - Competitive base salary in USD - Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth. - On-site role in our Almaty office (we will relocate you from anywhere).

Location: Almaty, Kazakhstan Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. ABOUT THE ROLE We’re looking for an IT Security Engineer to own and strengthen the security of our corporate technology environment. This is a hands-on role spanning identity and access management, endpoint security, SaaS security, Zero Trust, security automation, and incident response. You’ll work closely with Security, IT, Engineering, and business teams to build secure, scalable systems and automate the controls that protect our people, devices, applications, and data.   WHAT YOU’LL DO IDENTITY & ACCESS MANAGEMENT - Own and strengthen identity and access controls across our corporate environment, with a focus on Microsoft Entra ID. - Implement and maintain SSO/SAML, SCIM provisioning, MFA, Conditional Access, and RBAC. - Build and improve automated joiner, mover, and leaver (JML) workflows. - Regularly review permissions, privileged access, and authentication policies to reduce unnecessary access and security risk. - Help establish identity as the foundation of our Zero Trust security model. ENDPOINT SECURITY - Manage and improve endpoint security through Microsoft Intune/MDM, device compliance policies, and endpoint protection tooling. - Deploy and maintain EDR capabilities across the corporate fleet. - Establish and enforce security baselines for employee devices. - Investigate endpoint security events and remediate compromised or non-compliant devices. SAAS & CORPORATE APPLICATION SECURITY - Assess and improve the security posture of corporate SaaS applications. - Partner with application owners to implement appropriate authentication, authorization, provisioning, and data-access controls. - Identify shadow IT, excessive permissions, insecure configurations, and other SaaS-related risks. - Help establish scalable security standards for onboarding and managing new corporate applications. ZERO TRUST & CORPORATE ACCESS - Design and implement Zero Trust principles across identity, endpoints, applications, and corporate access. - Strengthen controls around privileged access, remote access, and access to sensitive systems. - Apply practical security controls that balance strong protection with employee productivity. SECURITY AUTOMATION - Automate repetitive security and IT workflows using scripts, APIs, and integrations. - Build tooling to automate access reviews, provisioning, compliance checks, alert enrichment, remediation, and other security processes. - Use scripting languages such as Python or JavaScript to improve security operations and reduce manual work. - Look for opportunities to turn manual security processes into scalable, reliable systems. DETECTION & INCIDENT RESPONSE - Monitor and investigate security alerts across identity, endpoint, and corporate systems. - Perform initial investigation and triage of suspicious activity and potential security incidents. - Support incident containment, remediation, and post-incident improvements. - Build lightweight detections and alerts for meaningful risks within the corporate environment. WHAT WE’RE LOOKING FOR - Strong hands-on experience with identity and access management, ideally within Microsoft Entra ID. - Experience implementing or managing SSO/SAML, SCIM, MFA, Conditional Access, RBAC, and JML workflows. - Experience with MDM and endpoint security, ideally Microsoft Intune and modern EDR tooling. - Understanding of SaaS and corporate application security. - Experience implementing or operating within a Zero Trust security model. - Ability to automate workflows using scripts and APIs, with experience in a language such as Python or JavaScript. - Working knowledge of security detection, investigation, and incident response. - Strong security judgment — you can distinguish theoretical risk from meaningful business risk and prioritize accordingly. - Comfortable operating independently in a fast-moving startup environment where priorities can change quickly. - Builder mindset: you look for ways to automate, simplify, and improve systems rather than relying on manual processes. NICE TO HAVE - Experience with reverse engineering, CTFs, security competitions, or similar hands-on security challenges. - Strong understanding of networking fundamentals, including VPNs, network segmentation, authentication protocols, and common lateral-movement techniques. - Experience securing rapidly scaling or highly technical organizations. - Experience working closely with engineering or product security teams. - Familiarity with cloud security concepts and modern security monitoring tools. WHAT WE OFFER: - Competitive base salary in USD - Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth. - On-site role in our Almaty office (we will relocate you from anywhere).

Location: Almaty, Kazakhstan Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. ABOUT THE ROLE Break new features before they ship: agentic systems, MCP servers, code-generating agents, user-deployed apps, generative models for image, video, and voice, and enterprise features (SSO, org and team management, roles). It's new ground, and you'll help define how we secure it. You go first. What you'll do: - Pentest new features and products pre-release: web, APIs, admin surfaces. - Work out the attack surface of each new feature yourself. - Hunt authorization flaws across our multi-tenant APIs and retest fixes. - Join design and code reviews early, so flaws die before they're built. - Turn recurring findings into guardrails — paved-road standards and automated checks — so a bug class dies once instead of resurfacing every release. - Bring a working repro to the team that owns the code and see the fix through. Requirements - A track record of finding real vulnerabilities in real systems — appsec work, bug bounty, or research. - The ability to read modern codebases, trace a bug to root cause, and discuss the fix with the engineers who wrote it. - A threat-modeling instinct for spotting the weak spots in a design or architecture before a line is written. - Enough cloud and container fundamentals to follow a bug into the infrastructure it runs on. - High agency. - Working English. Nice to have - LLM/agent security research, public research or CVEs, OSWE/CWEE or equivalent hands-on certificates. WHAT WE OFFER: - Competitive base salary in USD - Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth. - On-site role in our Almaty office (we will relocate you from anywhere).

Location: Washington, District of Columbia, United States Dexis is a dynamic professional services firm dedicated to partnering with government and community leaders both in the U.S. and internationally to achieve critical social outcomes in a rapidly changing world. At Dexis, you will experience a corporate culture of inclusiveness, respect, fairness, and trust. You will be given the means and mentorship needed to succeed, and your creativity will be rewarded. About the Position Dexis is seeking a Security Assistance Analyst to support anticipated programming with the Department of State. This opportunity will provide program analysis, assessment, and trend monitoring in support of Department of State-administered military grant assistance programs. The security assistance analyst will collect and organize program data, design and implement analytical methodologies to capture program trends, develop analytical products to inform programming and budgeting decision-making, and coordinate with stakeholders within the security assistance/security cooperation enterprise. This position is contingent upon contract award. Responsibilities Serve as the primary point of contact with the client, coordinating priorities, communicating progress, managing stakeholder expectations, and ensuring alignment with mission objectives. Analyze Department of State-administered military grant assistance programs to assess trends, risks, opportunities, and implications for U.S. foreign policy and security cooperation objectives. Provide strategic context, regional insights, and operational recommendations to support leadership decision-making, program planning, and resource prioritization. Interpret analytical findings and program data to identify key trends, drivers, and implications, translating complex information into concise, actionable recommendations. Develop analytical products that synthesize security, political, operational, and programmatic insights and implications of program activities. Qualifications Bachelor’s degree and at least five (5) years of relevant experience, or Master’s degree and at least three (3) years of experience in defense or security program analysis, monitoring, and assessment. Ability to obtain a secret security clearance. Experience researching, analyzing, and synthesizing complex political, security, military, and programmatic information into concise reports, briefings, and decision-support products for program managers and senior leaders. Excellent written and verbal communication skills, including experience briefing stakeholders and translating complex issues into actionable recommendations. Proficiency with Microsoft 365 applications, including Excel, Word, PowerPoint, and SharePoint. Preferred Qualifications Active secret security clearance Experience overseeing analytical, monitoring, evaluation, research, data analytics, or decision-support activities, including prioritizing competing requirements and delivering high-quality products under compressed timelines. Demonstrated experience supporting foreign assistance, security assistance, security cooperation, defense, or international security programs. Strong u nderstanding of data architecture, data modeling, data governance, and data quality management principles. Strong understanding of knowledge management principles, repository governance, records management, and information lifecycle management. Demonstrated experience working across multiple offices, stakeholder groups, or functional teams to identify requirements and implement knowledge-sharing solutions. Below is the pay range aligned with this position. When developing a range, Dexis evaluates compensation holistically, triangulating between external market research , our budget for the position, and internal equity to arrive at a figure that is fair and competitive. Offers within this range will be based on an individual candidate's qualification, relevant education and experience, skills, performance, and organizational needs. Dexis pay range for this role: $80,000 — $120,000 USD Benefits Dexis offers benefits to support employees’ health, financial security, and well-being. The benefits outlined below are for full-time, US-based positions only. These benefits include: Medical and prescription drug coverage: A choice of three UnitedHealthcare medical plans, with coverage options for employees and eligible dependents. Dental insurance: Dental coverage for employees and eligible dependents, including preventive, basic, major, and orthodontic services, subject to plan limits. Company-paid vision insurance: Vision coverage for employees and eligible dependents, with premiums paid in full by Dexis. Employer-funded health reimbursement arrangement (HRA): Employees who enroll in the Silver HRA medical plan receive an employer-funded HRA to help pay eligible in-network deductible expenses. Company-paid life and disability insurance: Basic life and accidental death and dismemberment (AD&D) insurance, plus short-term and long-term disability coverage. Optional supplemental insurance: Voluntary supplemental life and AD&D insurance options, including life insurance options for eligible dependents. Employee Assistance Program (EAP): Company-paid access to confidential counseling and legal and financial support resources for employees and their families. Health and wellness resources: Virtual care, behavioral health resources, and wellness programs available through the medical plan. Benefits assistance: Personalized support with benefit enrollment, coverage questions, claims, and finding providers through the Employee Care Center. Participation, coverage, and employee contributions are subject to applicable benefit plan terms and eligibility requirements. Dexis is on a mission to help solve today’s most pressing global political, social, and economic challenges and create a world where all people are safe and prosperous. As a Dexis employee, you will be challenged, empowered, and mentored. Our motto is “find a way or make a way” — that’s how Dexis goes “all in.” How will you? If you are passionate about this opportunity, apply now! Only those applicants who meet the above criteria will be contacted for interview. Dexis is an Equal Opportunity Employer, and does not discriminate on the basis of race, color, sex, national origin, religion, pregnancy, disability, age, genetic information, military service, veteran status, ethnicity, citizenship, sexual orientation, gender identity, marital status, childbirth and related medical conditions, including lactation, or any other protected class under applicable law.

Location: Hybrid - San Francisco, New York City, London About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We are looking for a Security Software Engineer, Detection & Response, to build the telemetry, logging, and response systems for our Detection & Response team. This is a builder role, not a queue-triage role. You will build detection and response as software across a multi-cloud fleet of servers, containers, and endpoints, and test where AI and agents can safely take work off responders. This is a hybrid role based in San Francisco, New York City, or London, with three days a week in the office. What you’ll do Deploy and operate telemetry at fleet scale with osquery and extended Berkeley Packet Filter (eBPF) sensors across servers, containers, and endpoints, and own performance overhead, staged rollouts, canaries, and rollbacks Build and maintain the logging and security information and event management (SIEM) pipeline behind detection, including ingestion, normalization, enrichment, storage, and cost, with detections written as code with tests, code review, and continuous integration and continuous delivery (CI/CD) Automate response with tooling for host isolation, credential revocation, evidence collection, and enrichment, and test where AI and agents can safely take work off responders Strengthen the corporate security stack, including endpoint detection and response (EDR) and fleet management across Mac, Windows, and Linux, email security, and GitHub controls Join the on-call rotation, work with the managed security operations center (SOC) on escalations, and automate evidence collection for System and Organization Controls 2 (SOC 2), Payment Card Industry Data Security Standard (PCI DSS), and ISO audits What you need 5+ years in security, infrastructure, or platform engineering, writing production code in a compiled language (Go or Rust preferred) and a scripting language (Python or Bash) Deployed and operated agents, sensors, or telemetry collectors at fleet scale, such as osquery or eBPF-based tooling Operated AWS infrastructure, including networking, identity and access management (IAM), logging, and container workloads, with infrastructure as code in Terraform Built and run a data or logging pipeline, including SIEM operations and SQL for investigation Bonus if you Worked with managed SOC providers or security orchestration, automation, and response (SOAR) platforms Built or contributed to open source security or observability tooling Know serverless platforms and API security Benefits & Compensation: Competitive compensation package, including equity. Inclusive Healthcare Package. Learn and Grow - we provide mentorship and send you to events that help you build your network and skills. Flexible Time Off. We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed. The San Francisco, CA base pay range for this role is $208,000-$312,000. This salary range is an estimate. Actual salary will be based on job-related skills, experience, and location. The total compensation package also includes benefits and equity-based compensation. Your recruiter can share more about the specific pay range for your location during the hiring process. Disclosures: Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data. Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

Location: Hong Kong, Hong Kong SAR OKX will be prioritising applicants who have a current right to work in Hong Kong, and do not require OKX's sponsorship of a visa. Please note that Hong Kong is a group-level service hub, and OKX does not carry on a business of operating a virtual asset trading platform in Hong Kong. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Opportunity We are looking for a Staff Mobile Security Engineer to join our Mobile Security team, where you will play a key role in identifying and mitigating security vulnerabilities across OKX's mobile applications and platforms. This is a high-ownership role at the intersection of offensive security, mobile engineering, and platform protection — you will work closely with development, operations, and compliance teams to ensure security is embedded at every layer of our mobile stack. You bring deep expertise in mobile application security, offensive techniques, and secure coding practices. You are also fluent in AI-assisted development and bring the discipline to build, maintain, and continuously improve your own AI engineering workflows. What You'll Be Doing Identify and address security vulnerabilities in mobile code, systems, and networks through manual review, automated tooling, and threat modelling. Manage and optimise application security tools, processes, and alerts to maintain a strong security posture. Validate and respond to Bug Bounty submissions, triaging findings and coordinating remediation with engineering teams. Produce detailed security findings reports and present them to both technical and management audiences, contributing to real-world attack prevention. Collaborate with development teams to implement and champion secure coding practices across iOS and Android platforms. Apply AI tools to accelerate security research, automate vulnerability detection workflows, and improve the efficiency of threat analysis. Work alongside operations and compliance teams to ensure security is a consistent priority across the organisation. Participate in incident response and management activities. Stay current on the latest offensive security techniques, application security threats, and industry best practices. What We Look For In You 5+ years of experience in mobile application security or offensive security, with hands-on expertise in iOS and/or Android platforms. In-depth understanding of security risks, vulnerabilities, and concepts in mobile and web applications. Proficient in code review across Kotlin, Swift, TypeScript, or JavaScript, with a strong grasp of application security threats. Able to create proof-of-concepts (PoCs) to demonstrate vulnerabilities, review patch code for adherence to standards, and collaborate with repository owners on remediation. Actively uses AI tools in your security engineering workflow — including building AI-leveraged workflows and codifying repeatable agent skills so tools like Claude Code or Codex deliver reliably on real production work. Strong analytical and problem-solving abilities with excellent verbal and written communication skills. Nice-To-Haves Prior experience developing mobile security SDKs at scale — products with a daily active user base of over ten million. Experience in large-scale business risk control projects, or practical experience in threat intelligence, business risk prevention, and countermeasures against black and grey industries. In-depth reverse engineering of major apps from first-tier vendors, or other projects that demonstrate strong reverse engineering capabilities. Proficiency in ARM assembly, with the ability to implement deep-level countermeasures at the native and application layers. Experience with device fingerprint recognition — including simulating new devices through methods such as flashing, modification, and application cloning. Ability to work across multiple mobile platforms simultaneously. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! #LI-ML1 #LI-ONSITE Please note that Hong Kong is a group-level service hub, and OKX does not carry on a business of operating a virtual asset trading platform in Hong Kong. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Hong Kong, Hong Kong SAR; Singapore, Singapore OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Opportunity As a Technical Expert, you will lead the development of the company’s core security engineering and DevSecOps capabilities, with a strong focus on security product development, platform engineering, and SDK /Agent development . The ideal candidate should demonstrate deep security expertise, broad technical coverage, strong hands-on engineering capability, and exceptional influence in driving security governance across business teams . What You’ll Be Doing Lead the architecture and core development of the company’s end-to-end DevSecOps platform, security products, and SDKs/Agents , covering code, build, artifacts, images, deployment, and runtime security. Own the design and development of RASP / Java Agent runtime protection , leveraging ASM, ByteBuddy, and Java Instrumentation for bytecode enhancement, runtime hooks, detection and blocking engines, while continuously improving performance, stability, and compatibility. Build and integrate SAST, DAST, IAST, SCA, code security scanning, and image security scanning into CI/CD workflows, and drive deep integration of tools such as SonarQube and Coverity to form a closed loop of scanning, gating, remediation, and re-validation. Drive core application security protection and offensive/defensive capabilities across scenarios such as XSS, SQL injection, SSRF, deserialization, command execution, authentication/authorization flaws, privilege escalation, and API security . Advance AI-Native Security Engineering by applying LLMs and AI Agents to vulnerability analysis, rule generation, false-positive reduction, remediation suggestions, security knowledge management, and workflow automation, while building deep understanding of their architecture, principles, and security implications. Partner closely with business engineering teams to drive security standards, integration rules, quality gates, risk classification, remediation workflows, and overall security governance adoption. Collaborate with engineering, architecture, operations, QA, and business stakeholders to solve complex security problems and turn them into scalable product capabilities, engineering solutions, and governance mechanisms. What We Look For In You Strong fundamentals in computer science and security, with deep understanding of operating systems, networking, compilers/ JVM internals, distributed systems, application security, cloud-native security, and software supply chain security , with both breadth and depth in security technologies. Expert-level Java proficiency , especially in JVM internals, ClassLoader , Java Agent, ASM, ByteBuddy, bytecode instrumentation, profiling, and performance tuning ; proficient in Python or Golang as well. Proven hands-on experience with RASP, SAST, DAST, IAST, SCA, image security, and code security scanning , with the ability to independently design, integrate, and productionize security capabilities. Strong offensive and defensive security experience , with deep understanding of vulnerability root causes, exploitation techniques, detection logic, bypass methods, and remediation strategies in web, API, and microservice environments. Strong practical experience with LLMs and AI Agents , plus deep understanding of model architecture, agent design, tool invocation, context engineering, evaluation methods, and the impact of AI on both security engineering and attacker capabilities. Strong engineering and product mindset, capable of leading the design and implementation of security products, platform modules, and SDKs/Agents while balancing security effectiveness, performance overhead, integration cost, and operability . Strong ownership, communication skills, and cross-functional influence, with a proven ability to drive business teams on security governance, policy adoption, and remediation outcomes. Preferred Qualifications Background from top-tier Internet companies, cloud providers, or leading cybersecurity vendors ; Experience leading DevSecOps platforms, application security platforms, RASP systems, code scanning platforms, or cloud-native security platforms ; Strong experience in security product development, SDK /Agent development, vulnerability research, penetration testing, red/blue team exercises, or incident response ; Hands-on experience in AI + Security initiatives such as security copilots, intelligent rule generation, automated vulnerability analysis, or remediation recommendation systems. Perks & Benefits Competitive total compensation package L&D programs and education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Hybrid - San Francisco, New York City About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We are looking for a Product Security Engineer to build the systems that triage and validate bug bounty and other externally reported security findings, not to work the queue. This role suits a software engineer moving into security or a security engineer with a strong engineering background. You will build large language model (LLM) and agent-based tooling that validates findings, traces them to their root cause, and opens fixes for well-understood vulnerability classes. This is a hybrid role based in San Francisco or New York City, with three days a week in the office. What you’ll do Build the systems that take in externally reported vulnerabilities and assess validity, severity, and reproducibility at a volume manual triage cannot match Build LLM and agent-based analysis that validates business logic, authentication, and design-level findings, not just known signatures Build systems that trace validated findings to their root cause and propose, and increasingly open, fixes for well-understood vulnerability classes, with human review gates Own the bug bounty program, including scope, policy, and researcher engagement, and feed every resolved report back into automated triage Extend the tooling into security testing capabilities that customers can use on what they build and deploy What you need 5+ years of software engineering or security engineering experience, building and shipping production systems or internal tools Wrote production code in JavaScript/TypeScript on Node.js, with hands-on experience in web frameworks such as Next.js or React Built with LLM or agent-based tooling Reproduced and assessed externally reported vulnerabilities, including judging severity Bonus if you Built security automation used across an engineering org, not just for your own team Built systems that auto-generate or propose code fixes, not just findings Tested or secured multi-tenant platforms where customer-built applications run on shared infrastructure Compensation & Benefits: Competitive compensation package, including equity. Inclusive Healthcare Package. Learn and Grow - we provide mentorship and send you to events that help you build your network and skills. Flexible Time Off. We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed. The San Francisco, CA base pay range for this role is $208,000.00 - $312,000.00. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process. Disclosures: Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data. Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

Location: Remote - United States About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We're looking for a Security Engineer to join our Cloud Security Engineering team. In this role, you'll help strengthen the security of our platform by building and improving the controls that protect our infrastructure. You'll play a key role in making security a core part of how we build, deploy, and scale our systems, while helping the company grow securely and confidently. You'll report to the Security Operations Manager, and this is a hybrid or fully remote within the United States. If you're based within commuting distance of our SF or NY offices, the role includes in-office anchor days on Monday, Tuesday, and Friday. What you'll do Design and implement scalable security controls across our cloud-native platform. Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation. Build secure by default infrastructure and code CI/CD pipelines. Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows. Stay ahead of cloud security trends and adopt cutting-edge technologies to enhance platform resilience. Conduct threat modeling, risk analysis, and mitigation planning for critical systems. Drive improvements in monitoring, detection, and incident response at the platform level. Build, deploy and maintain relevant tooling. What you need 8+ years of experience in infrastructure or platform security roles. Deep understanding of secure cloud infrastructure (AWS/GCP), identity and access management, and system hardening. Proficient with tools like Terraform, CDK, Kubernetes, and CI/CD security. Skilled at balancing engineering realities with principled security practices. Proven track record of shipping secure, resilient systems at scale. Bonus if you Have built or scaled security automation pipelines. Contributed to open-source security projects or tools. Hold certifications such as GCP Security Engineer, AWS certifications, CISSP, or OSCP. Hold a bachelor's or master's degree in Cybersecurity or similar disciplines. Benefits & Compensation: Competitive compensation package, including equity. Inclusive Healthcare Package. Learn and Grow - we provide mentorship and send you to events that help you build your network and skills. Flexible Time Off. We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed. The San Francisco, CA base pay range for this role is $208,000.00 - $312,000.00. This salary range is an estimate. Actual salary will be based on job related skills, experience and location. Pay ranges outside San Francisco may be adjusted based on employee location. The total compensation package also includes benefits and equity-based compensation. Your recruiter can share more about the specific pay range for your location during the hiring process. Disclosures: Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data. Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

Задачи: — Проектировать, поддерживать и оптимизировать решения для обеспечения безопасности конечных точек. — Разрабатывать и внедрять стандарты усиления безопасности операционных систем для минимизации уязвимостей корпоративных устройств. — Тестировать, оценивать и внедрять новые продукты и технологии безопасности для рабочих станций сотрудников. — Настраивать расширенный сбор логов и телеметрии для обнаружения угроз. — Проактивно выявлять, оценивать и устранять уязвимости и ошибки конфигурации на рабочих станциях. — Реагировать на инциденты безопасности на уровне рабочих станций и поддерживать качественную документацию. Требования: — Опыт управления и обеспечения безопасности Windows и MacOS в корпоративной среде на большом масштабе. — Опыт администрирования облачных решений AV/EDR. — Умение использовать скриптовые языки, такие как PowerShell, Python или Bash, для автоматизации задач безопасности. — Экспертиза в управлении системными конфигурациями через MDM или другие инструменты управления конфигурациями. — Знание механизмов сбора логов и лучших практик усиления безопасности операционных систем. — Английский язык на уровне B1 и выше. Преимущества: — Опыт обеспечения безопасности Linux рабочих станций. — Опыт работы с SIEM решениями, такими как Splunk, ArcSight ESM, IBM QRadar или Elastic Security. — Профессиональные сертификаты в области информационной безопасности (офенсивной или дефенсивной). — Участие в CTF соревнованиях. Условия: — Официальное трудоустройство с стабильной зарплатой и медицинской страховкой. — Гибридный режим работы и гибкий график. — Пакет релокации для кандидатов из других регионов. — Доступ к профессиональным консультациям (психологическим, финансовым, юридическим). — Внутренние обучающие программы и частично или полностью оплачиваемые дополнительные курсы. — Членство в клубе скидок и предоставление всего необходимого рабочего оборудования. Процесс найма: — Рассмотрение заявки. — Предложение. — Прием на работу.

Location: Remote - United States About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We are looking for a Security Software Engineer, IAM, to build identity and access management (IAM) infrastructure as software, not administer identity products, and this role suits a software engineer who has gone deep on identity or an IAM engineer with a strong engineering background. You will own identity and IAM end to end, replacing the approval queue with access that is self-serve, time-bound, and provable, built so identity is defined as code, reviewed in pull requests, deployed through CI, and observable in production, and you will help decide how agents act on behalf of users and systems. This is a hybrid role based in San Francisco or New York City, with three days a week in the office. What you’ll do Migrate Okta and related IAM configuration to Terraform so every identity change is reviewed, tested, and versioned, and help engineering teams adopt infrastructure as code Build a self-serve access platform, including just-in-time (JIT) access, that lets team and system owners define, request, and time-bound their own access Own provisioning, deprovisioning, and access review workflows that generate System and Organization Controls 2 (SOC 2) audit evidence automatically Unify corporate IAM (employee identity, SaaS access, devices) and production IAM (service accounts, infrastructure permissions, on-call access) into one identity plane, and enforce least-privilege access across cloud, SaaS, and production infrastructure Define and build how agents request and hold access, working with the Accounts team on product-facing identity What you need 7+ years building and owning identity, access management, or platform security systems, including IAM design across corporate (Okta or equivalent) and production (AWS or GCP) environments Built and operated production services or self-service platforms in TypeScript/Node.js, Go, or Python, including REST APIs Implemented OAuth2, OpenID Connect (OIDC), Security Assertion Markup Language (SAML), and System for Cross-domain Identity Management (SCIM) at the protocol level, including failure modes such as token replay and sync drift Managed IAM infrastructure as code in Terraform Bonus if you Led a Terraform migration for IAM or identity infrastructure at scale Designed or built a JIT access system or access governance platform Designed delegation or scoped-credential models for agents or service identities Compensation & Benefits: Competitive compensation package, including equity. Inclusive Healthcare Package. Learn and Grow - we provide mentorship and send you to events that help you build your network and skills. Flexible Time Off. We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed. The San Francisco, CA base pay range for this role is $208,000 - $312,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process. Disclosures: Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data. Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

Задачи: — Разработка и улучшение biometric и identity verification решений — Создание production-level Computer Vision и ML-систем — Разработка алгоритмов Face Verification, Liveness Detection, Anti-Spoofing и Deepfake Detection — Оптимизация моделей для высоконагруженных систем — Работа с большими датасетами и подготовка данных — Внедрение современных исследований SOTA в production — Разработка и поддержка полного ML/CV pipeline — Участие в подготовке решений к международным сертификациям и тестированиям — Работа над AI-продуктами для банков, финтех-компаний, криптоплатформ, телеком-операторов и государственных организаций Требования: — Опыт работы ML Engineer / Computer Vision Engineer от 3 лет — Опыт работы с Face Biometrics, KYC, Identity Verification или Anti-Fraud решениями — Глубокие знания Computer Vision и Deep Learning — Уверенное владение Python — Опыт работы с PyTorch и/или TensorFlow — Опыт построения production-grade ML/CV систем — Опыт работы с large-scale datasets — Опыт оптимизации inference, latency и производительности моделей — Понимание архитектуры enterprise biometric systems — Английский язык на уровне B2 — Обязательное преимущество: Опыт подготовки решений к сертификации iBeta Level 2 или Опыт прохождения / участия в сертификации iBeta Level 2 Будет большим плюсом: — Опыт работы в biometric, KYC или identity verification компаниях — Участие в NIST FRVT Evaluations — Опыт разработки Anti-Spoofing и Liveness Detection систем — Опыт работы с Deepfake Detection — Понимание международных biometric compliance и certification standards — Опыт внедрения SOTA research papers в production — Опыт teamleading Условия: — Работа в международной AI-компании — Участие в разработке production-grade AI-продуктов для международных рынков — Официальное трудоустройство по трудовому договору — График 5/2, 8-часовой рабочий день — Работа в офисе в Алматы — Финальный оффер зависит от уровня экспертизы — Возможность работать над сложными задачами в области Face Biometrics, Digital Identity, KYC, AML, Fraud Prevention и Identity Verification

Location: Jakarta, Jakarta, Indonesia Dexis is a dynamic professional services firm dedicated to partnering with government and community leaders both in the U.S. and internationally to achieve critical social outcomes in a rapidly changing world. At Dexis, you will experience a corporate culture of inclusiveness, respect, fairness, and trust. You will be given the means and mentorship needed to succeed, and your creativity will be rewarded. LEAP Program Description Global Solutions Ventures (GSV) – a joint-venture partnership between ZemiTek, LLC and Dexis Consulting Group – is implementing the Long-term Exceptional Technical Assistance Project (LEAP Global), a mechanism originally used by USAID to battle against infectious diseases such as malaria, HIV/AIDS, tuberculosis, neglected tropical diseases, and pandemic influenza. As of July 1, 2025, LEAP Global transitioned to the U.S. Department of State (DOS). This initiative aims to address the complex human resource challenges faced by national infectious disease programs in the USA-supported countries. The intervention of this project is to hire and embed technical expert advisors and subject matter experts within government entities. By directly embedding the technical expertise within the national programs, LEAP provides long-term, sustainable lifesaving support to empower host governments to lead and manage key aspects of their infectious disease portfolios and improve coordination between the U.S. Government and the host country. About the Position The Senior Global Health Security (GHS) Epidemiology Advisor will support the U.S. Embassy Jakarta ECON Health Unit in carrying out life-saving humanitarian assistance (LHA) service delivery in full alignment with the new Presidential Executive Order (EO) directives and advancing Global Health Security initiatives in Indonesia. The Senior Advisor will provide strategic technical advice to support and strengthen USG and Ministry of Health (MoH) systems for detecting and responding to infectious disease threats and pandemic preparedness, with particular emphasis on epidemiology, disease surveillance, and outbreak response. The Senior Advisor will also develop action plans for zoonotic control and public health threats. The Senior Advisor will work remotely with occasional on-sites presence at the Ministry of Health or selected events and will collaborate with GHS implementers and other stakeholders. The Senior Advisor will work closely with the MOH Zoonotic Team Leader and U.S. Embassy Jakarta ECON Health Unit points of contact, who will provide supervision, guidance, and collaborative oversight. Responsibilities Provide high-level technical guidance on epidemiological methods, surveillance systems, risk communications, and outbreak investigations to support evidence-based decision making. Lead the design, assessment and recommendations for the implementing and evaluating zoonotic disease surveillance and early warning systems. Lead the drafting and development of One Health guidelines focusing on zoonotic prevention and control as part of the pandemic preparedness plan, in collaboration with the MoH. Analyze epidemiological data to inform evidence-based decision-making and policy development relevant to zoonotic diseases prevention and response and One Health data systems. Mentor and build capacity of national and sub-national epidemiology teams. Participate in the coordination and responses to infectious disease outbreaks and other public health emergencies when needed. Contribute to technical reports, publications, and strategic documents. Collaborate with partners and stakeholders to align strategies and avoid duplication of efforts. Participate in regular bi-weekly coordination meetings with U.S. Embassy Jakarta ECON Health Unit to review progress, discuss activities, and address emerging issues. Reporting Submit a detailed monthly report to the U.S. Embassy Jakarta ECON Health Unit by the 5th day of the following month. Submit weekly progress updates with key successes to the U.S. Embassy Jakarta ECON Health Unit and participate in weekly calls. Qualifications Advanced degree (Master or PhD) in Epidemiology, Public Health, or a related field. Minimum of fifteen (15) years of proven experience in applied epidemiology and global health with published materials and international experiences (candidates must specify and provide links to their publications for verification) . Advanced expertise in applied epidemiology, strong analytical skills, and the ability to work collaboratively with governments, international partners, and multidisciplinary teams in complex environments. Demonstrated experience in outbreak investigation and emergency response. Strong knowledge of global health security principles and frameworks. Experience working with government health systems and international organizations. Excellent data analysis skills and proficiency in epidemiological software (e.g., R, Stata, SAS, or similar). Strong communication and interpersonal skills, including experience working in multicultural settings. Advanced understanding of zoonotic diseases, and emerging infectious diseases. Prior experience in writing MOH guidelines and providing high level technical guidance to MOH leadership are highly desirable. Previous leadership or advisory role in large-scale public health programs. Familiarity with USG GHS programs, global GHS framework and platforms such as IHR JEE, the Pandemic Fund. Experience working with international donor mechanisms and reporting requirements such as Global Fund, DFAT, World Bank, or other GHS mechanisms are highly desirable, as the candidate will support the implementation of the GHS portfolio. Professional proficiency in spoken and written Bahasa Indonesia is required. Fluency in English (written and verbal) with minimum edits are required. Work authorization in Indonesia required. Core Competencies Strategic thinking and problem-solving Leadership and team development Cross-cultural communication Adaptability in dynamic and high-pressure environments Strong ethical standards and professionalism Benefits Dexis offers benefits to support employees’ health, financial security, and well-being. The benefits outlined below are for full-time, US-based positions only. These benefits include: Medical and prescription drug coverage: A choice of three UnitedHealthcare medical plans, with coverage options for employees and eligible dependents. Dental insurance: Dental coverage for employees and eligible dependents, including preventive, basic, major, and orthodontic services, subject to plan limits. Company-paid vision insurance: Vision coverage for employees and eligible dependents, with premiums paid in full by Dexis. Employer-funded health reimbursement arrangement (HRA): Employees who enroll in the Silver HRA medical plan receive an employer-funded HRA to help pay eligible in-network deductible expenses. Company-paid life and disability insurance: Basic life and accidental death and dismemberment (AD&D) insurance, plus short-term and long-term disability coverage. Optional supplemental insurance: Voluntary supplemental life and AD&D insurance options, including life insurance options for eligible dependents. Employee Assistance Program (EAP): Company-paid access to confidential counseling and legal and financial support resources for employees and their families. Health and wellness resources: Virtual care, behavioral health resources, and wellness programs available through the medical plan. Benefits assistance: Personalized support with benefit enrollment, coverage questions, claims, and finding providers through the Employee Care Center. Participation, coverage, and employee contributions are subject to applicable benefit plan terms and eligibility requirements. Dexis is on a mission to help solve today’s most pressing global political, social, and economic challenges and create a world where all people are safe and prosperous. As a Dexis employee, you will be challenged, empowered, and mentored. Our motto is “find a way or make a way” — that’s how Dexis goes “all in.” How will you? If you are passionate about this opportunity, apply now! Only those applicants who meet the above criteria will be contacted for interview. Dexis is an Equal Opportunity Employer, and does not discriminate on the basis of race, color, sex, national origin, religion, pregnancy, disability, age, genetic information, military service, veteran status, ethnicity, citizenship, sexual orientation, gender identity, marital status, childbirth and related medical conditions, including lactation, or any other protected class under applicable law.

Задачи: - Разрабатывать и внедрять передовые решения в сфере Digital Risk Protection (DRP), создавая и совершенствуя комплексные системы защиты от цифровых угроз - Работать с интеграциями и обработкой данных от различных API-источников, оптимизируя извлечение и обработку информации - Создавать высокопроизводительные парсеры данных для обработки больших объемов данных из различных источников - Автоматизировать процессы обнаружения и реагирования на цифровые угрозы, создавая автоматизированные системы для своевременного обнаружения и нейтрализации угроз - Разрабатывать инструменты для мониторинга контента в мессенджерах и на веб-платформах по ключевым словам, ссылкам, медиафайлам с последующим анализом и реагированием Требования: - Уверенное владение Python, опыт разработки сложных, масштабируемых и высокопроизводительных приложений, знание Django, FastAPI - Знание сетевых основ и клиент-серверного взаимодействия - Опыт работы с API (REST, GraphQL), включая обработку JSON и XML, оптимизация запросов и обработки больших объемов данных - Опыт асинхронного программирования (asyncio, aiohttp), понимание конкурентности и параллелизма (asyncio, threads, multiprocessing) - Глубокое понимание веб-скрапинга и парсинга данных, опыт работы с библиотеками для парсинга (Beautiful Soup, Selenium или аналогичные) - Опыт работы с базами данных, уверенное владение SQL и одной реляционной базой данных (PostgreSQL, ClickHouse), опыт с ORM (Django ORM, SQLAlchemy) и созданием миграций - Опыт создания веб-интерфейсов на основе макетов - Опыт работы с Docker - Опыт работы с системами контроля версий Git