Location: Espoo
Workplace: Hybrid
ROLE HIGHLIGHTS:
- Sovereign Infrastructure Operations Engineer
- Location: Espoo
- Department: IT
- Reports to: Head of IT
- Employment type: Permanent
- Workplace model: Onsite
- Employment is subject to applicable security screening (incl. SUPO, where required)
WHY THIS ROLE MATTERS:
As a Sovereign Infrastructure Operations Engineer, you'll take operational ownership of ICEYE's secure bare-metal infrastructure, virtualization platforms, and production Kubernetes environments, keeping the dedicated air gaped collaboration platform reliable, secure, and audit-ready under some of the strictest information security frameworks in Europe.
WHO WE ARE
ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth.
ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system.
ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future.
Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific.
YOUR DAY-TO-DAY RESPONSIBILITIES
- Manage configuration state across physical and virtual assets using GitOps with Infrastructure as Code tools (Git/Gitlab, Ansible, Terraform, or Puppet), removing manual configuration drift in secure environments in alignment with the strict change policies of the given security controls
- Maintain and support production Kubernetes clusters in restricted environments, covering upgrades, storage integration, and registry management
- Administer secure platform core services (Mattermost, Nextcloud, Keycloak, OpenBao), including deployment, upgrades, and integration with local IAM and storage
- Run weekly meetings (change management, vulnerability management) with stakeholders on the infrastructure side
- Maintain technical security controls to satisfy Finnish Katakri, German VS-NfD, and related European frameworks (e.g. NIS2, ISO 27001), including patch management, hardening, and access control
- Maintain secure infrastructure networking (VLAN isolation, mTLS, PKI) and identity integrations, in coordination with network and security teams
- Execute backup and disaster recovery procedures and routine hardware maintenance across air-gapped or high-security sites
WHAT WE’RE LOOKING FOR
Must haves:
- 5+ years hands-on experience in Systems Administration, IT Systems Engineering, or Infrastructure Operations, with a focus on Linux environments
- Practical experience running and maintaining production Kubernetes clusters
- Expert-level Linux administration (Debian/Ubuntu or RHEL/Rocky), including system hardening and vulnerability patching
- Practical knowledge of Katakri, VS-NfD, or equivalent European security/compliance frameworks (ISO 27001, NIS2)
- Solid understanding of enterprise networking fundamentals (VLAN segmentation, firewalls, DNS/DHCP, VPN protocols, PKI)
- Eligibility to obtain and maintain a high-level national security clearance in Finland
Nice to haves:
- Experience with Ceph or ZFS storage systems
- Experience with at least one Infrastructure as Code tool (Ansible, Terraform, or Puppet), with the ability to manage configurations
- Experience with Keycloak, Vault, or internal PKI management
- Familiarity with Kubernetes operations specifically in secure or air-gapped environments
APPLICATION PROCESS
- TA Screen (30 mins)
- Interview with Hiring Manager (30 mins)
- Technical Deep-Dive Interview with Team (60 mins)
- Stakeholder & Security Alignment Interview (30 mins)
WORKING AT ICEYE
At ICEYE, you’ll join a diverse and highly engaged team united by the ambition to make the impossible possible. As a global scale-up, we combine speed and ambition with the opportunity to take real ownership from day one. Your growth, wellbeing, and success are a priority, with continuous professional development, training opportunities, and a culture where collaboration is how we win.
HOW WE WORK (OUR VALUES)
Make the impossible possible: We set ambitious goals and stay calm under pressure. We bring grit, optimism, and ownership when things get hard, and we keep moving until we find a way.
- Be curious: Go deep, ask questions, listen carefully, and think critically. Understand the “why” behind decisions.
- See the big picture: Stay close to what’s happening across the company so you can make better decisions. Consider how your work affects others.
- Drive effective teamwork: Create psychological safety, invite different perspectives, and build inclusive teams. There are no bad questions.
- Act as one team: We win together. We match tasks to the right owner and stay agile as priorities shift.
- Have fun: What we do matters—and it should be enjoyable. Celebrate progress, take pride in results, and share the wins.
BENEFITS
Our benefits are designed to support your health and wellbeing, at work and beyond. We keep improving them based on employee feedback, and offerings vary by location. Talent Acquisition will confirm what applies for this role and location during the process.
OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION
We want ICEYE to be a place where people can be themselves and do great work. Different backgrounds and perspectives make us stronger, which is why we work to create an environment where people feel included, respected, and able to speak up. Whatever your background, we want you to bring your authentic self to the table.
We’re committed to fair, inclusive hiring and equal opportunity. Everyone is welcome to apply. If you need any adjustments or support during the recruitment process, tell us—we’ll do our best to help.
Apply now to start your ICEYE journey, and help us continue to make the impossible possible together. Read more about ICEYE and working with us at iceye.com http://iceye.com.
Location: US - Remote - Massachusetts , US - Headquarters - Maryland - Columbia
Who is Tenable?
Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!
What makes Tenable such a great place to work?
Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!
Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc
Your Role:
As an AI Security Engineer on Tenable's Information Security team, you will help shape and mature our approach to securing AI both within Tenable's products and across the enterprise. AI introduces a new class of risk at the intersection of application security, cloud risk, and data governance, and you will be on the front lines of defining how we assess, test, and address it.
You will apply hands-on AI engineering experience alongside deep product security and application security skills to design security controls for AI systems, lead assessments, and help engineering teams ship AI features securely. You will establish security standards for responsible AI use, influence decisions across the organization, and build tooling that raises our security posture.
This role is ideal for a practitioner who has spent real time building with AI systems, looking under the hood of model internals, and wants to channel that experience into a security specialty.
Your Opportunity:
Design, implement, and maintain end-to-end security controls across the AI/ML lifecycle.
Conduct safety research, inspecting model internals (e.g., detecting hidden deception, latent knowledge, or unwanted concepts across layers) as a core methodology.
Perform AI safety assessments and threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks.
Design and implement robust security guardrails, controls, and boundary mechanisms for Large Language Models (LLMs), Small Language Models (SLMs), and open-source models.
Act as a subject matter expert in AI safety research by inspecting model internals to detect hidden deception, latent knowledge, or unwanted concepts, ensuring highly transparent and aligned AI outputs.
Continuously monitor the AI landscape for novel vulnerabilities and attack techniques, applying deep engineering experience to proactively defend enterprise AI deployments.
Develop security reference architectures for AI deployment patterns, including MCP servers and agentic AI workflows and harnesses.
Deploy controls to ensure model integrity, governance, and proper access control across models and feature stores.
Build AI-driven tooling to strengthen cybersecurity posture across identity, incident management, vulnerability management, third-party risk, and emerging AI threat vectors.
Perform AI safety, security assessments, threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks.
Collaborate with software engineers, and product teams to integrate security best practices into AI development, training, validation, and deployment processes.
Drive Secure Software Development Lifecycle (SSDLC) and DevSecOps practices for AI-powered products, including threat modeling, security testing, penetration testing, and CI/CD pipeline security automation.
Create security guidance, documentation, and training for internal engineering and development teams; develop metrics that drive desired security behaviors and outcomes.
Research emerging trends in AI security and contribute to innovative solutions that support Tenable's AI initiatives.
What You'll Need:
5 or more years of professional experience in information security or application security, with at least 1–2 years focused on securing AI/ML systems.
Master’s Degree in Computer Science, Cybersecurity, Data Science, or a related field preferred; advanced degree preferred.
Deep understanding of AI-specific security threats, including adversarial ML, data poisoning, prompt injection, model inversion, model evasion, and inference attacks.
Strong coding experience in Python and/or Go.
Experience with frameworks & libraries such as PyTorch, Hugging Face Transformers, TensorFlow or similar.
Experience using specialized interpretability and probing tools/libraries such as TransformerLens, NNsight, Captum, or LIT (Learning Interpretability Tool).
Familiarity with mechanistic & Architectural Concepts: inspecting internal model states, residual streams, attention patterns, activation steering, Sparse Autoencoders (SAEs), or feature attribution.
Strong understanding of the ML/AI lifecycle and the security risks associated with each stage.
Knowledge of cloud security platforms: AWS, Azure, or GCP including AI/ML-related services.
Knowledge of data security principles, including encryption, masking, and tokenization.
Knowledge of SSDLC, DevSecOps, and security testing practices, including SAST, DAST, SCA, and threat modeling.
Knowledge of application security architecture best practices and patterns, including modern web applications, Docker, and microservices.
Ability to work cross-functionally across engineering, product, and business teams.
Strong written and verbal comAAmunication skills; able to clearly translate complex AI security risks for both technical and non-technical audiences.
Strong problem-solving skills, attention to detail, and ability to lead projects with end-to-end ownership.
Self-motivated and effective working independently and across distributed teams.
And Ideally:
Hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments.
Familiarity of AI security frameworks and standards, including OWASP LLM Top 10 and the NIST AI Risk Management Framework.
Experience with application security assessment tools (Burp Suite, ZAP, Tenable WAS, etc).
Familiarity with AI governance frameworks (EU AI Act, NIST AI RMF, etc.).
Background in cloud security or large-scale SaaS product environments.
Security certifications: CISSP, CSSLP, SANS GIAC, CEH, or AI-focused security certifications are a plus, but not necessary.
#LI-Hybrid
#LI-MS1
This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs.
US Pay Range
$122,500
—
$163,166.67 USD
We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact
Recruiting@Tenable.com
for further assistance.
Tenable Data Consent Statement
Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you:
General Applicant Privacy Notice
California Applicant Privacy Notice
EU/EEA/UK Applicant Privacy Notice
Location: San Francisco, CA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the Role
Anthropic is working on frontier AI systems that handle sensitive information at enormous scale. How we protect that data, and how we build privacy into our systems rather than bolting it on afterward, is central to our mission of building AI that is safe and beneficial.
We’re looking for an experienced Incident Response Manager to own and evolve incident management within the privacy team. This is a senior-level specialization on the Technical Program Manager ladder, focused on how we detect, respond to, and learn from privacy incidents. These incidents involve personal data subject to GDPR, CCPA, HIPAA and similar laws, and to the contractual commitments Anthropic makes to its customers.
You’ll be the driving force behind maturing and scaling our incident response lifecycle, from detection and triage through containment, remediation, and post-incident review. Critically, some of the highest-impact work in this role happens after the immediate response: gathering data on incident trends, reporting on patterns and root causes, and working cross-functionally across engineering, security, infrastructure, and product teams to ensure that broad fixes and systemic improvements are actually implemented. You will partner closely with Privacy Legal on notifiability and communications, and with the Privacy Program team on executive and board reporting; this role owns the engineering-side programme, its metrics and its follow-through.
You won’t just manage incidents: you’ll make sure we get meaningfully better after each one.
Key responsibilities
Own the end-to-end privacy incident management program: detection workflows, response processes, escalation paths, communication standards, and remediation tracking.
Serve as incident commander for privacy incidents, driving clear coordination across executive, engineering, security, legal, and other appropriate stakeholders.
Establish and run incident commander rotations within privacy, ensuring clear ownership and effective coordination during incidents of varying severity.
Drive post-incident accountability by defining how action items are captured, assigned, tracked, and completed across teams, ensuring follow-through on both tactical fixes and strategic improvements.
Gather, analyze, and report on incident trends and patterns to surface systemic risks, recurring root causes, and areas where the organization is most vulnerable.
Translate trend analysis into actionable cross-functional initiatives: partner with engineering, infrastructure, security, and product teams to prioritize and implement broad fixes and preventive improvements that address root causes rather than symptoms.
Lead incident review forums (post-mortems, retrospectives) and ensure learnings are captured, socialized, and acted upon across the organization.
Partner with Privacy Legal on breach and notifiability assessments against regulatory timelines, coordinate customer and regulator communications when required, and keep privileged and non-privileged records appropriately separated.
Develop and maintain privacy incident response documentation, playbooks, runbooks, and training materials; keep them current as our products, data flows and obligations evolve.
Partner with detection engineering to improve alert fidelity, reduce noise, and shorten time-to-detection for privacy events.
Define, develop, and track incident management KPIs and report regularly to leadership.
Support broad cross-functional training and initiatives to uplevel privacy awareness across the company (e.g. Tabletop exercises, training, talks).
Minimum qualifications
Have led or built incident response programs at a technology company, ideally in a high-growth or security-intensive environment.
Have a demonstrated track record of turning incident data into organizational improvements: not just writing post-mortems, but driving the cross-functional work to implement systemic fixes.
Are comfortable participating in on-call responsibilities and leading incident response during high-severity privacy events, including off-hours.
Have experience building and scaling operational processes from the ground up in environments where structure didn’t previously exist.
Excel at driving accountability and follow-through across multiple teams without direct authority—you know how to influence, track, and close the loop.
Have strong analytical skills and experience with incident trend analysis, metrics reporting, and data-driven prioritization.
Are highly organized with a knack for bringing structure to ambiguous, fast-moving situations.
Have excellent communication skills, especially under pressure and when coordinating across technical and non-technical stakeholders, including executive leadership.
Thrive in fast-paced environments where priorities shift and you’re often working with incomplete information.
Preferred qualifications
Have 7+ years of experience in technical program management, incident management, or security/privacy operations, with significant time spent in an incident response context.
Are familiar with privacy regulation and breach-notification obligations (GDPR, CCPA, HIPAA or similar) and comfortable working with legal counsel under privilege, or have a legal background.
Deadline to apply: None. Applications will be received on a rolling basis.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$290,000
—
$365,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: United States
Action1 is an autonomous patch management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in 5 minutes, it just works and is always free for the first 200 endpoints, with no functional limits. By pioneering autonomous OS and third-party application patching, Action1 helps organizations eliminate routine work, reduce ransomware and security risks, and protect the digital employee experience. It provides real-time vulnerability assessment and remediation across remote and on-site endpoints without requiring a VPN, while peer-to-peer patch distribution reduces bandwidth use on local networks.
In 2026, Action1 was recognized as the fastest-growing founder-led cybersecurity company in America on the Inc. 5000. Action1 is led by industry veterans Alex Vovk and Mike Walters, American entrepreneurs who founded Netwrix, which has grown into an industry-leading, multibillion-dollar cybersecurity company.
The Role:
We are looking for a Product Value Team Lead to lead our product content initiatives.
What you’ll do:
Lead a team of engineers in delivering high-quality product content and capabilities.
Oversee the development and delivery of product content, including:
- scripts
- data sources
- application catalogs
- software updates
- vulnerability data
- reports
Guide technical decisions from solution design through development and production rollout.
Own automation initiatives by designing, implementing, and maintaining scalable pipelines and workflows for content generation, validation, and deployment.
Improve the efficiency and reliability of our content delivery processes.
Apply AI technologies to enhance how we create and deliver product content.
Requirements
What we're looking for:
Strong software engineering fundamentals and hands-on experience owning production systems.
Excellent knowledge of Node.js, JavaScript, TypeScript, and Python.
Experience building and operating AWS services in production.
Nice to have:
Experience writing automated tests.
Proficiency in SQL.
Experience with runtime isolation and sandboxing for sensitive execution.
Experience in B2B SaaS, security, compliance, or data governance.
Experience building high-load products with numerous endpoints.
Benefits
Fully remote work with flexibility to support your work-life balance.
A collaborative environment that empowers you to own your domain and implement best practices.
Stable income, benefits, flexible working hours, and opportunities for career advancement.
Friendly, professional colleagues who are eager to support you and help you grow.
Engaging challenges and opportunities to make a meaningful impact.
Location: Singapore - Office - Suntec City
Who is Tenable?
Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!
What makes Tenable such a great place to work?
Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!
Your Role:
Tenable is looking for a Director, Channel Sales to lead our channel sales team across Asia Pacific and Japan (APJ). You'll own the region's indirect go-to-market strategy — growing and managing the partners (resellers and distributors) who help Tenable reach customers across a region that spans a diverse market.
You'll manage and build a channel team and a partner network that can operate at that scale, while working closely with Sales, Marketing, Services, and Support to make sure partners are set up to sell, deploy, and support Tenable well in their local markets.
Your Opportunity:
Lead, hire, coach, and manage a team of channel sales professionals across APJ — helping each person grow their skills and their career.
Own and execute Tenable's channel sales strategy for APJ: set clear KPIs, build repeatable playbooks, and raise the bar on channel sales best practice across the team.
Grow the Tenable Assure Partner Program footprint across APJ — recruiting, enabling, and scaling resellers and distributors across the Bronze, Silver, Gold, and Platinum partner tiers.
Partner with global and regional Sales, Marketing, Services, and Enablement teams to build consistent partner compensation, training, and incentive programs suited to APJ's markets.
Manage the end-to-end channel sales process: pipeline health, deal registration, forecasting, and the metrics that keep the channel funnel healthy.
Own key partner and customer relationships across the region, and lead commercial discussions — including volume discounts and deal terms — for strategic partners and high-value accounts.
Represent APJ's channel priorities to global channel leadership, and adapt global partner programs so they work for local market realities (e.g. distributor-led models in parts of Southeast Asia and Greater China vs. direct reseller models in Australia and New Zealand).
Travel regularly across APJ to support partners, customers, and your team in person.
Take on other reasonable duties as the business needs — this list covers the core of the role, not all of it.
What You'll Need:
A genuine people leader — someone with a track record of coaching a team and helping them grow into stronger channel sellers and, eventually, leaders themselves.
5+ years of indirect/channel sales leadership experience in technology or cybersecurity, including at least 2 years at Director level leading a channel sales or partnerships function across APJ.
A solid understanding of how channel and distribution models differ across APJ's markets, and the judgement to adapt strategy country by country rather than applying one approach everywhere.
Experience setting and managing channel KPIs, quota attainment, and sales funnel metrics — and a track record of hitting them.
Established relationships with channel partners and distributors across the region.
Strong consultative selling and negotiation skills, with the confidence to engage partner and customer executives on complex, multi-stakeholder deals.
Experience designing or managing partner pricing, incentives, and deal registration programs, including for high-profile accounts.
The ability to work at both the strategic level (regional channel strategy) and the operational level (day-to-day deal and partner support).
Willingness and ability to travel regularly across APJ.
And Ideally:
Experience selling or partnering in cybersecurity, vulnerability management, or exposure management specifically.
An additional regional language (e.g. Mandarin, Japanese, Korean, or Bahasa) — a real advantage given the number of markets in scope, though not required.
Experience working within a tiered partner program (e.g. Bronze/Silver/Gold/Platinum-style structures) at a global technology vendor.
#LI-KM1
#LI-Office
We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact
Recruiting@Tenable.com
for further assistance.
Tenable Data Consent Statement
Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you:
General Applicant Privacy Notice
California Applicant Privacy Notice
EU/EEA/UK Applicant Privacy Notice
Location: Remote
Workplace: remote
At Offchain, we aren’t just building products: we’re leading a movement.
As pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. We're laying the foundation that will define the next generation of digital commerce, governance, and human interaction. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security and transparency.
At the center of this vision is our people. Our team is made up of thinkers and doers that embrace new challenges and seek solutions that push existing boundaries. If you’re energized by solving unprecedented problems, and believe in the role that decentralized systems will play in creating a more equitable digital future, then we want to hear from you.
Why Offchain?
Offchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today.
Arbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack.
Arbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure.
To top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly.
What You’ll Do:
Work on the core infrastructure powering Arbitrum, the leading Ethereum scaling solution (20%).
Tackle complex distributed systems challenges, optimize performance, and contribute to the security and scalability of Arbitrum (10%).
Collaborate closely with research, product, and blockchain engineering teams, working at the cutting edge of blockchain technology alongside world-class engineers, including many industry leaders (10%).
Provide ongoing technical support and engineering guidance to clients and internal stakeholders by diagnosing and resolving core platform engineering issues related to the company’s infrastructure and distributed systems (10%).
Maintain the Nitro Testnode product, a development tool used by users to run local Arbitrum nodes, including implementing enhancements, troubleshooting issues, and ensuring reliability and usability for developers (10%).
Conduct peer code reviews for engineering contributions to ensure code quality, architectural consistency, and adherence to software engineering best practices across the platform (15%).
Establish and evangelize backend architectural standards, selection of tech stacks, and engineering best practices (5%).
Design high-performance compiler pipelines and extensible SDK frameworks (10%).
Work in collaboration with Security to resolve complex security issues and identify potential threats and vulnerabilities in code in distributed systems environments (5%).
Drive the technical roadmap with the Product team for complex distributed systems and data modeling, overseeing the integration of multiple microservices, ensuring database scalability and integrity under high load, and designing "API-first" strategies that ensure longterm system interoperability (5%).
What You’ll Need:
Bachelor’s degree or U.S. equivalent in Computer Science, Cybersecurity, Computer Engineering, or a related field
Plus 5 years of professional experience as a Software Engineer, Software Architect, or any occupation, job title, position designing, developing, and securing blockchain-based backend systems.
In lieu of a Bachelor's degree plus 5 years of experience, the employer will accept a Master's degree or U.S. equivalent in Computer Science, Cybersecurity, Computer Engineering, or a related field, plus 3 years of professional experience as a Software Engineer, Software Architect, or any occupation, job title, position designing, developing, and securing blockchain-based backend systems.
3 years of professional experience developing backend systems utilizing backend programming languages (including Go or Rust)
3 years working on protocols that span from L1s to L2s, including when the system is trying to reduce dependence on L1 smart contracts
3 years of professional experience collaborating with research teams to conduct cutting-edge research in blockchain technologies and cryptocurrency platforms
3 years of professional experience building distributed systems, focusing on reliable broadcast protocols, distributed data structures, and high-performance database storage engines
3 years of professional experience working in collaboration with security and with coding in a security-focused mindset in distributed systems environments
3 years of professional experience working with blockchain protocols
1 year of experience working with WebAssembly, including writing high performant and high security code in production environments
1 year of professional experience utilizing cloud infrastructure and containerization technologies (including AWS, Docker, and Kubernetes).
CONTACT: Please apply online at
https://www.offchainlabs.com/careers
Perks:
Remote-first global workforce + NY office
Professional reimbursement program (facilitates industry conference attendance, certifications, and more)
Medical, dental & vision coverage (US + some other countries)
401k retirement plan + company match (US only)
Wellness stipend
Home office set up / ergonomic equipment program
Position is 100% remote; must reside in U.S.; reports to HQ in New York, NY. Salary: $193,461 - $291,000 per year.
Attention Offchain Job Seekers:
This role cannot be performed in California, or Colorado.
Please be advised that there has been a rise in fraudulent recruiter activities, particularly within the Web3 space. If you would like to confirm whether someone is an Offchain employee or the legitimacy of an offer you received, please email jobs@offchainlabs.com
At Offchain, we are committed to building a welcoming and supportive workplace for all employees, regardless of their background or identity. We strive to create an environment where everyone feels valued and has an equal opportunity to succeed and thrive. We encourage candidates from all walks of life to apply and join our team.
Location: USA (Remote); Canada (Remote)
Workplace: Remote
Mysten Labs’ mission is to advance the internet through step-function improvements in what technology makes possible. We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value.
Our work spans on-chain finance and the emerging agent economy. Through Sui, Move, and our broader technology stack, we’re building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact.
We’re looking for a Senior Security Engineer to help protect the Sui ecosystem. You’ll uncover vulnerabilities, build monitoring tools, and assess economic risk across DeFi protocols. Working closely with external protocol teams and Mysten’s own DeFi products, including DeepBook, you’ll help address risks before they become incidents and strengthen security across the ecosystem
Responsibilities
- Build and run continuous monitoring of the Sui DeFi ecosystem for security and economic risk: oracle issues, misconfigurations/bad economic parameters, solvency and bad-debt exposure under price shocks, liquidation capacity against on-chain liquidity depth, accounting-versus-positions reconciliation, invariants.
- Extend security team tooling, both precise static analysis tooling and proprietary agent skills.
- Measure and drive compliance with the DeFi security recommendations across supported protocols: run the recurring compliance cycle, fill the protocol report card, validate security claims (audits, custody, upgrade governance, oracle dependencies) against on-chain reality, track remediation commitments, and escalate when a protocol regresses or fails to disclose an incident. Partner with the ecosystem and finance owners of the process.
- Hunt for critical vulnerabilities in the highest-TVL Sui protocols and get them fixed before they are exploited: full-package audits, variant analysis across forks, pre-execution review of multisig upgrade payloads, and forensics after incidents anywhere in the ecosystem.
- Be the security team's point of contact for external DeFi teams and for Mysten's own DeFi products such as DeepBook: due diligence, incident coordination, and post-mortems that feed back into the recommendations and the monitors.
- Write it down: findings, reports, and runbooks that a protocol engineer can act on and a non-technical stakeholder can understand, with every claim traceable to bytecode, chain state, or data.
Minimum Qualifications
- Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience.
- 3+ years of hands-on experience in security engineering, smart contract security, or DeFi risk engineering, with a track record of building tools that ran in production and of finding real vulnerabilities (audit findings, bug bounty reports, published research, or incident work).
- Strong understanding of DeFi mechanics and their failure modes: lending markets (LTV, liquidation thresholds and bonuses, close factors, bad debt), AMMs and concentrated liquidity, perpetuals, liquid staking, oracles (staleness, confidence, TWAP, multi-source aggregation), flash loans, and MEV.
- Proficiency in TypeScript and Python, and comfort with Rust. Ability to write SQL over large datasets and to work with blockchain indexers and data warehouses.
- Experience reading smart contract code at source or the bytecode or disassembly level, or evident ability to learn it quickly. Move experience is a plus, not a requirement; Solidity or Rust smart contract experience transfers.
- Rigor: you verify claims against bytecode and chain state, build known-clean checks into your tools, and say what you did not verify.
- Strong written and verbal communication, including the ability to influence external teams you have no formal authority over
- Interest in the web3 space is required.
Preferred Qualifications
- Sui and Move experience: the object and capability model, package upgrades and version gates, programmable transaction blocks, the Sui GraphQL and gRPC APIs.
- Knowledge of the recent DeFi exploit history on Sui and other chains: named incidents, oracle compromises, and the defect classes behind them.
- Experience building analysis or monitoring tools with LLM agents (Claude Code skills or comparable), and a clear sense of where models help and where deterministic tooling must do the work.
- Static or dynamic program analysis experience: taint analysis, call graphs, symbolic execution, fuzzing, formal verification.
- Quantitative or economic modeling experience: stress testing, liquidity modeling, risk parameters for lending markets.
- Publications, conference talks, CVEs, or bug bounty rankings.
Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information.
Regarding the recent rash of technology job scams: Be aware that emails from genuine Mysten Labs group recruiters will always come from the @mystenlabs.com http://mystenlabs.com domain or related subdomains (e.g., mystenlabs.com/careers http://mystenlabs.com/careers). Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers http://www.mystenlabs.com/careers.
To support an efficient and fair hiring process, we may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers.
Our team is remote first and we are hiring across the world. Here at Mysten Labs, you’ll be joining a world-class team with tremendous growth potential as we bring the next billion users to web3. We raised a $300M Series B round from top Silicon Valley led venture funds like Jump Crypto, Andreessen Horowitz (a16z), Binance Labs, Redpoint, Lightspeed, Coinbase Ventures, Electric Capital, Standard Crypto, NFX, Slow Ventures, Scribble Ventures, Samsung Next, Lux Capital, among other investment firms and strategic partners. Come join us and build the future of web3!
Location: Washington, DC
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
As an Applied AI Solutions Architect supporting a dedicated national security mission program, you will be the customer's trusted technical advisor — helping them understand the value of Claude and how to successfully integrate and deploy it into their technology stack. You'll combine deep technical and cyber domain expertise with customer-facing skills to architect LLM solutions for complex mission challenges while maintaining our high standards for safety and reliability. Working closely with our Sales, Product, and Engineering teams, you'll guide the customer from technical discovery through successful deployment, much of it on-site in secure environments.
Key responsibilities
Serve as the dedicated technical advisor for one or more national security mission programs, from discovery and evaluation through deployment and adoption
Support the customer building with Claude Code, the Claude API, and Claude for Enterprise
Help develop evaluation frameworks to measure Claude's performance for mission-specific use cases
Guide technical architecture decisions and integration into the customer's existing stack
Coordinate internally across Sales, Product, and Engineering to drive customer success
Create and deliver technical content from engineering deep dives to executive briefings
Work primarily on-site with the customer's engineering and mission teams in secure government facilities, while maintaining close internal coordination and feedback with Anthropic’s Applied AI and Engineering teams
Minimum qualifications
Active TS/SCI clearance with Polygraph
Prior experience working within US intelligence community agencies as a government civilian or cleared contractor
Experience in technical customer-facing roles (solutions architecture, sales engineering, or similar)
Exceptional ability to communicate technical concepts to diverse stakeholders, from engineers to executives
Hands-on expertise in one or more of the following domains: offensive or defensive cyber operations (including vulnerability research, reverse engineering, and ICS/OT security), cryptography and cryptanalysis, intelligence analysis and ISR (all-source, SIGINT, GEOINT), mission and weapons systems (command and control, space, electronic warfare, autonomy), CBRN and nonproliferation, or accreditation of classified systems (RMF, ATO, cross-domain solutions).
Preferred qualifications
5+ years in Solutions Architect, Sales Engineer, Technical Account Manager or equivalent roles
Familiarity with common LLM frameworks and tools
Background in artificial intelligence, machine learning, or data science
Experience designing scalable cloud architectures and integrating with enterprise systems
Experience deploying and operating software in air-gapped or classified environments
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$240,000
—
$315,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: United States & Canada
Workplace: Remote
About WorkOS 🚀
WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations.
We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid.
As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products.
About the Security team
The Security team at WorkOS is responsible for keeping the data and identities of hundreds of millions of users secure. Security is fundamental to our products, and customer trust is the foundation of our success.
We are a highly collaborative group with a strong engineering mindset. Our security program is shaped by hands-on experience attacking and defending systems, and applying lessons from across the industry. We embrace the latest advancements in practices and tooling that make modern security teams effective.
We are comfortable in code and collaborate often with engineering to create products that are secure by default.
Who we’re looking for
- Risk-focused and pragmatic. You excel at identifying and reasoning about security risk in real-world contexts. You prioritize ruthlessly, always asking: what's the most effective way to reduce risk right now and in the long term?
- A builder who can break things. You're comfortable reading and writing code, and you have a passion for deeply understanding the products you secure. You think like an attacker to find subtle, high impact vulnerabilities and like a defender to design pragmatic, effective mitigations.
- A strong partner to engineering. You build trust with engineers by understanding their priorities, making security frictionless, and finding ways to make the secure path, the easiest path.
- Excited about AI. You're embracing AI and automation to scale security and reduce toil.
- Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you.
Responsibilities
- Lead secure design efforts. Partner with engineering teams on secure design and code reviews. Identify and prioritize risks early in the product lifecycle.
- Build secure by default systems. Develop paved paths that systemically reduce risk and make secure development the easiest path for engineers.
- Perform offensive security testing. Conduct penetration tests and code audits on new and existing products from an adversarial lens.
- Improve our security tooling. Integrate and improve our static analysis, supply chain security, and vulnerability management capabilities across engineering pipelines.
- Operate our responsible disclosure program. Run and improve our program by furthering automation, validating submissions, and coordinating remediation.
- Improve our products. Write and ship code to remediate vulnerabilities in production systems and improve the security posture of WorkOS products.
- Work directly with customers. Help build our customers' trust by directly engaging with their security-related questions and concerns.
Qualifications
- 5+ years of experience in a security engineering or security-focused software engineering role.
- Ability to execute across a wide range of security functions such as security assessments, penetration testing, responsible disclosure, security tooling integration, etc.
- Familiarity with and experience using common industry tooling.
- Proven ability to identify vulnerabilities in software, demonstrated through CVEs, bug bounty, blog posts, or prior work experience.
- Strong written and verbal communication skills, particularly in partnering with engineering teams.
- Comfortable reading and writing code, and able to effectively leverage AI during the process.
- Bonus: Experience in the authentication and identity domain.
- Bonus: Experience writing production level code, especially developing security features.
Benefits and Perks (US Only) 💖
At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.
- 401k matching
- Competitive Equity
- Healthcare, dental and vision coverage
- FSA, ST/LT Disability, Voluntary Life
- Carrot fertility benefits
- 20 days paid vacation + 10 holidays + unlimited sick leave
- 12 weeks fully paid parental leave
- Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active
- Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being
- Commuter benefits for hybrid employees in SF/NYC
- Unlimited token usage!
Please inquire directly with our recruiting team for benefits available to those working outside the US.
Equal Opportunity Employer
WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Location: Washington, DC, USA
Why Join Exadel
We’re an AI-first global tech company with 25+ years of engineering leadership, 2,000+ team members, and 500+ active projects powering Fortune 500 clients, including HBO, Microsoft, Google, and Starbucks.
From AI platforms to digital transformation, we partner with enterprise leaders to build what’s next.
What powers it all? Our people are ambitious, collaborative, and constantly evolving.
About the Client
A leading source of multilateral development financing providing loans, grants, and technical assistance to support economic growth and sustainable infrastructure. Operating alongside its private-sector affiliates, the institution leverages public and private capital to address critical regional challenges. Today, it focuses on climate change, innovation, and digital transformation to improve lives across global markets.
What You’ll Do
Define, maintain, and execute the Master Test Strategy and detailed test plans
Establish testing scope, objectives, entry and exit criteria, dependencies, schedules, and quality gates
Lead testing activities across System Integration Testing, regression testing, performance testing, security testing, position conversion, and User Acceptance Testing support
Design, build, and optimize automated test frameworks and reusable test suites
Develop automated tests using the Calypso Automated Testing Tool, Selenium, JUnit, and Cucumber
Integrate automated test execution into CI/CD pipelines
Direct test-case development and execution across front-to-back Calypso workflows
Validate trade capture, pricing, risk, settlements, collateral, SWIFT messaging, and accounting postings
Coordinate test-environment setup, configuration, availability, and maintenance
Lead test-data planning, provisioning, validation, and refresh activities
Configure and maintain the tools required to support manual and automated testing
Coordinate System Integration Testing and User Acceptance Testing with technical teams, functional leads, and available business testers
Lead defect logging, triage, severity classification, prioritization, escalation, and resolution tracking
Manage defects and test execution through Jira and Xray
Monitor defect response and resolution progress and escalate risks affecting test completion
Oversee load, stress, batch, and performance testing using tools such as JMeter and LoadRunner
Coordinate security testing and vulnerability assessments based on OWASP principles
Maintain requirements-to-test traceability and ensure complete test coverage
Produce weekly test-execution metrics, readiness assessments, and quality-status reporting
Prepare test-summary reports, audit-ready evidence packages, and final testing sign-offs
Communicate testing risks, dependencies, blockers, and recommendations to project leadership
What You Bring
Extensive experience leading quality assurance and testing for complex Calypso implementations
Strong knowledge of Calypso front-to-back workflows, including: Trade capture, Pricing
Risk, Settlements, Collateral, SWIFT messaging, Accounting postings
Experience developing and executing master test strategies for large financial-services transformation programs
Hands-on experience with the Calypso Automated Testing Tool (CATT)
Strong test automation experience using Selenium, JUnit, and Cucumber
Experience integrating automated test frameworks into CI/CD pipelines
Experience leading System Integration Testing, regression testing, and User Acceptance Testing support
Strong knowledge of test-environment coordination and test-data management
Experience validating position conversions and complex financial data
Hands-on experience with performance-testing tools such as JMeter or LoadRunner
Knowledge of security-testing practices and OWASP vulnerability-assessment principles
Advanced experience with Jira and Xray for test and defect management
Experience producing test metrics, traceability reports, evidence packages, and release-readiness assessments
Strong defect-management, troubleshooting, and root-cause analysis skills
Excellent leadership, stakeholder-management, and communication skills
English level
Advanced
Work Type:
Onsite/hybrid
Location:
Washington, DC
Legal & Hiring Information
Compensation Transparency: The expected compensation range for this role is $125–140/hr USD, with eligibility for commission, bonus, or other incentive compensation where applicable. Actual compensation will be determined based on experience, skills, qualifications, geographic location within the United States, and business needs.
Location Eligibility: This role is open to candidates residing in the United States.
Experience Requirements: We welcome applicants with relevant experience regardless of where it was obtained. US work experience is not required.
Use of Artificial Intelligence in Hiring: We may use automated tools or artificial intelligence systems to support the screening, assessment, or selection of applicants as part of our hiring process.
Benefits Summary: US-based employees are eligible to participate in Exadel’s benefits programs, which may include comprehensive health, dental, and vision coverage; life and disability insurance; retirement savings programs; paid time off; paid holidays; and other wellness or voluntary benefit programs, subject to plan terms and eligibility requirements.
Equal Employment Opportunity: Exadel is proud to be an Equal Opportunity Employer committed to inclusion across minority, gender identity, sexual orientation, disability, age, and more. We do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, status as a protected veteran, or any other protected characteristic under applicable federal, state, and local laws.
Accessibility and Accommodation: We are committed to providing accommodations throughout the recruitment process in accordance with the Americans with Disabilities Act (ADA) and other applicable federal, state, and local accessibility laws. Reasonable accommodations are available to enable individuals with disabilities to perform essential functions. If you require accommodation at any stage of the hiring process, please contact us.
Data Privacy Notice: For applicants residing in California, please note that personal data collected during the application process is subject to the California Consumer Privacy Act (CCPA) and will be processed in accordance with our applicant privacy notice.
Disclaimer: Please note: this job description is not exhaustive. Duties and responsibilities may evolve based on business needs. The offer is not binding until a signed contract is in place.
Exadel Culture
We lead with trust, respect, and purpose. We believe in open dialogue, creative freedom, and mentorship that helps you grow, lead, and make a real difference. Ours is a culture where ideas are challenged, voices are heard, and your impact matters.
Location: Remote - US
Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit
www.bugcrowd.com
.
Job Summary
The Product Marketing Manager plays a central role in how Bugcrowd brings new products, features, and platform capabilities to market. This role sits within the Marketing team and reports into Brand, partnering closely with Product, Engineering, Growth, and Revenue teams to shape messaging, support launches, and turn technical depth into clear, credible stories for customers. It's a hands-on role for someone who can create clarity in ambiguity, bring structure to complex work, and move ideas from insight to execution. Success in this role requires strong judgment, thoughtful collaboration, and the ability to make complex ideas clear and compelling.
Essential Duties & Responsibilities
Own and support launches for new features, product updates, and select platform capabilities, including launch planning, audience definition, messaging development, and cross-functional coordination.
Develop messaging and evolve our positioning for assigned product areas, translating technical capabilities into clear customer value and distinct stories that resonate in the market.
Conduct customer and market research through interviews, win/loss analysis, competitive intelligence, community listening, and hands-on product exploration.
Create enablement materials for the Sales team, including launch briefs, battlecards, FAQs, pitch support, and internal guidance.
Partner cross-functionally with Product, Engineering, Design, Brand, Growth, Sales Enablement, and Customer Experience to keep initiatives moving from planning through launch.
Monitor competitive activity and market trends, and share insights that inform launch strategy, positioning, and broader product marketing recommendations.
Education, Experience, Knowledge, Skills, and Abilities
3+ years of product marketing experience, ideally in B2B SaaS, cybersecurity, or another technical category.
Demonstrated experience supporting product launches or major go-to-market initiatives from planning through execution.
Strong writing and communication skills, with the ability to translate technical concepts into clear, credible messaging for a range of audiences.
Ability to conduct and synthesize customer, product, and market research into actionable insights and recommendations.
Strong project management, prioritization, and cross-functional collaboration skills, with the ability to move work forward independently.
Experience marketing technical products, cybersecurity solutions, or offerings for highly regulated industries is preferred.
Working Conditions & Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - remote, work-from-home 100% of the time.
Pay Range Disclosure
The base pay range for this role takes into account the wide range of factors that are considered in making compensation decisions, including but not limited to Qualifications, Geographical Location, Education/certifications, Experience, Skill Sets, Training, and other business and organizational needs.
At Bugcrowd, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for the position of Product Marketing Manager
is: $83,200 - $110,000.
This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Culture
At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by
law.
Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here:
https://www.bugcrowd.com/privacy
.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at:
https://www.bugcrowd.com/about/careers/
Location: Seattle, United States; Atlanta, United States; Baltimore, United States; Toronto, Canada; Austin, United States; Denver, United States
TuxCare
offers a portfolio of security solutions for Linux and open-source software aimed at enterprise organizations. With TuxCare, enterprises can automate live vulnerability patching, minimize downtime, keep their applications secure and compliant, and get support from a team that knows Linux security best – covering the most popular Linux distributions, end-of-life systems, programming languages, and much more.
We’re looking for a Head of Direct Sales to lead TuxCare’s direct sales organization across North America and EMEA. Reporting to the Chief Revenue Officer, you will lead a distributed team responsible for new customer acquisition, growth within existing accounts, and renewals.
This is a hands-on sales leadership role. Our solutions, including SecureChain and Extended Lifecycle Support for RHEL-based Linux alternatives (ELS for RLA), call for thoughtful discovery, tailored proposals, and flexible deal structures. You’ll coach the team through live opportunities, help shape complex deals, and build a sales approach grounded in each customer’s security and business needs.
Responsabilties:
Set and execute the direct sales strategy across North America and EMEA, turning revenue goals and territory plans into clear priorities for the team.
Lead, coach, and develop Enterprise Account Executives, Account Executives, account management, renewals, and sales development team members.
Work closely with sales representatives on active deals, helping them uncover customer needs, communicate business value, and develop effective proposals.
Support complex and strategic opportunities, including customer conversations, negotiations, and requests for tailored packaging or terms.
Drive performance across new business, account growth, and renewals while maintaining a healthy pipeline and accurate forecasts.
Review sales results and win/loss trends to identify coaching opportunities and improve the team’s approach.
Build strong relationships with strategic customers and identify opportunities to grow TuxCare’s presence in both regions.
Partner with Marketing, Revenue Operations, Product, and Finance to improve go-to-market execution and resolve customer needs.
Hire, onboard, and develop sales talent across North America and EMEA.
Represent TuxCare at relevant industry events and provide regular performance and forecast updates to the CRO and executive team.
Requirements
Proven experience leading direct sales teams across North America and EMEA, with a strong record of achieving revenue targets.
Required: Direct sales or sales leadership experience in software supply chain security, software composition analysis (SCA), application security, or DevSecOps. Candidates must have sold enterprise solutions in this sector; experience selling general IT or infrastructure software alone does not meet this requirement.
Hands-on experience selling solutions to buyers concerned with software vulnerabilities, end-of-life systems, compliance, or open-source security.
Strong deal-coaching and value-selling skills, including experience with tailored product packaging and dynamic pricing.
The ability to turn technical challenges into a clear business case for both technical and executive stakeholders.
Experience managing new customer acquisition, account growth, and renewal motions.
Strong forecasting, pipeline management, negotiation, and presentation skills.
A coaching style that combines support, clear expectations, and accountability.
Familiarity with MEDDPICC or a comparable enterprise sales qualification methodology.
Willingness to travel as needed.
Benefits
What's in it for you?
A strong focus on professional development with opportunities for learning and growth:
Interesting and challenging projects,
Mentor and other knowledge-exchange programs;
Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide;
Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves to ensure you maintain a healthy work-life balance;
Compensation for private medical insurance;
Co-working and gym/sports reimbursement;
The opportunity to receive a reward for the most innovative idea that the company can patent, fostering a culture of creativity and innovation.
Location: Remote, US; Remote, EU
Workplace: remote
About us
Aave Labs began with a simple question: how do we make financial services like borrowing, saving, and earning more accessible globally?
We built the Aave Protocol, now the world’s largest and most trusted onchain lending market, connecting decentralized finance with individuals, traditional finance, and fintech.
Today, we build trusted, high-quality products that expand access to lending, credit, and savings globally
Our culture
We build trusted products that help people access and discover economic opportunities.
We hold a high bar for quality and craftsmanship. No detail is too small. Trust depends on it.
We’re a global team building products people can actually use, turning complex technology into something simple and reliable.
We stay aligned, move quickly, and think long term, while keeping teams lean and focused on impact.
About the role:
Aave Labs is looking for a Senior Smart Contract Engineer to help build and evolve the Aave Protocol and GHO stablecoin. You should have a strong passion for web3 technology and a deep understanding of smart contract development.
In this role, you'll design, implement, test, and deploy smart contracts across Ethereum and other EVM-based networks. You'll independently own small to medium-sized projects and contribute to larger protocol initiatives, working closely with the wider Aave engineering team to build secure and reliable DeFi infrastructure.
How you can make an impact:
Design, implement, and test secure Solidity-based smart contracts and decentralised applications
Own small to medium-sized smart contract projects end to end, such as building adapters and integrations, from technical design through implementation, testing, and deployment
Contribute to larger protocol initiatives, such as Aave V4, vaults, and GHO, working within established architecture
Contribute to the development and maintenance of protocol-level infrastructure and tooling
Collaborate with engineers and cross-functional teams to design and ship new protocol features and functionality
Investigate security vulnerabilities, reproduce potential attack scenarios, and contribute to mitigation and response
Debug and troubleshoot smart contract and protocol issues across development and production environments
Review code written by other engineers, providing constructive feedback with a strong focus on correctness, testing, and security
Stay up to date with developments across Ethereum, DeFi, and smart contract security, applying relevant learnings to your work
Let’s connect if you have:
Strong experience building and shipping production smart contracts using Solidity
Experience working with DeFi protocols and a strong understanding of smart contracts, the EVM, and common protocol design patterns
The ability to independently design and deliver well-defined smart contract projects of limited scope, identifying technical requirements, trade-offs, and potential risks
Deep technical expertise in one or more areas of DeFi, such as lending, vaults, stablecoins, liquidity, or protocol integrations.
Strong knowledge of smart contract security, including common vulnerability classes, testing methodologies, and secure development practices
The ability to make sound technical decisions within your area of expertise and clearly explain the reasoning and trade-offs behind your approach
A track record of producing reliable, well-tested code and providing useful technical feedback through code review
A habit of keeping up with the latest exploits, security research, tooling, and developments across the Ethereum ecosystem
A genuine passion for DeFi and building at the forefront of web3 technology
Nice to haves:
Experience building or integrating DeFi vaults, including areas such as share and NAV accounting, strategy allocation, and deposit and redemption flows
Experience contributing to large, complex DeFi protocols or smart contract codebases
Experience building protocol adapters or integrating external protocols and infrastructure
Haven’t quite met all the criteria? Let’s not miss out on the chance to speak. Whilst you might not meet every single requirement, you might bring other, more exciting skills to the companies!
Equal opportunities statement:
Aave Labs celebrates diversity and views each and every team member as a separate individual with their own unique identity. No matter your race, religion, gender, ethnicity, age, disability, sexual orientation or even the wallet you use, we welcome you at Aave Labs. As an equal opportunities employer, we take accountability and believe in everyone's potential to build, create and inspire changes. With a mission to build a diverse workforce, we are proud to foster a working environment in which everyone can feel safe and valued for who they are.
#LI-MG1
В рамках данной позиции специалист будет заниматься автоматизацией процессов, отчетности и аудита, разрабатывать внутренние python-приложения для сбора данных из банковских IT-систем, сопровождать категорирование автоматизированных систем, агрегировать данные и рассчитывать показатели защищенности. В обязанности входит проведение внутреннего аудита безопасности, проверка соответствия процессов разработки и эксплуатации информационных систем требованиям регуляторов, моделирование угроз и оценка рисков, создание детальных моделей угроз по методике ФСТЭК, а также обеспечение соответствия законодательству, включая полный цикл управления объектами критической информационной инфраструктуры (КИИ). Специалист будет заниматься категорированием, отправкой сведений во ФСТЭК и НКЦКИ, актуализацией моделей угроз после изменений архитектуры сервисов, подготовкой отчетной документации для внешних проверок, разработкой внутренней нормативно-правовой базы и обновлением организационно-распорядительных документов в соответствии с изменениями законодательства. Также предусмотрена AI-поддержка бизнес-процессов с использованием технологий больших языковых моделей (LLM) для автоматизации анализа изменений в законодательстве, составления матриц применимости требований и подготовки аналитических материалов. Эксперт будет сопровождать команды разработки и поддержки, осуществлять постоянный мониторинг исполнения требований регулятора и консультировать команды банка по вопросам развития систем в соответствии с законодательством. Требования включают высшее профильное образование в области информационной безопасности, профессиональную переподготовку по программам, согласованным с ФСТЭК России, опыт работы с системой защиты объектов КИИ не менее двух лет, уверенное владение python с использованием библиотек pandas и numpy, знание фреймворков и инструментов SQLAlchemy, OpenPyXL, Django/Flask, навыки интеграции с внешними сервисами через RESTful API (SIEM, SOAR, Vulnerability Scanners), опыт работы с CI/CD и системами контроля версий (Git/GitLab), умение создавать дашборды и визуализации данных (Power BI, Tableau, Grafana). Кандидат должен хорошо разбираться в российском законодательстве в сфере КИИ, уметь самостоятельно отслеживать изменения в законодательстве и корректировать внутренние процессы, иметь опыт внедрения решений на основе больших языковых моделей (GPT, BERT и др.), уметь формулировать эффективные промпты для генерации текстов, вычитки документации, создания чек-листов и аналитики, а также понимать этические аспекты и ограничения применения искусственного интеллекта в вопросах безопасности.
Location: Singapore, Singapore
OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa.
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.
OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.
Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.
OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
About The Opportunity
We are currently seeking a Public Cloud Operations Expert to join our Singapore team. You be will responsible for the full lifecycle management of enterprise-level hybrid cloud infrastructure, leading unified orchestration, operations, and cost optimisation of AWS and Alibaba Cloud resources, ensuring high availability, high performance, and compliance.
What You’ll Be Doing
Cloud Platform Architecture & Operations
Plan, deploy, monitor, and maintain AWS services (EC2, S3, VPC, Lambda, EKS, etc.) and Alibaba Cloud services (ECS, OSS, VPC, Function Compute, ACK, etc.).
Design highly available, auto-scaling cloud architectures, optimizing network (e.g., Alibaba Cloud CEN, AWS Direct Connect), storage, and compute resource configurations.
Monitoring & Incident Management
Implement full-stack monitoring and alerting using cloud-native tools (AWS CloudWatch, Alibaba Cloud CloudMonitor) and open-source solutions (Prometheus+Grafana, ELK).
Lead critical incident response, perform root cause analysis, and implement preventive measures (e.g., resource contention, misconfigurations, network latency).
Cost Optimisation & Resource Management
Analyse cloud resource usage, reduce costs via reserved instances, auto-scaling, and storage lifecycle policies (e.g., AWS S3 Intelligent-Tiering, Alibaba Cloud OSS Archive).
Establish resource quota management strategies to prevent waste and overspending.
Security & Compliance
Implement cloud security baselines (security groups, IAM policies, Alibaba Cloud RAM permissions, AWS Security Hub), conduct regular security audits, and remediate vulnerabilities.
Design granular access controls using AWS IAM and Alibaba Cloud RAM, and enforce database auditing (e.g., AWS CloudTrail + Alibaba Cloud DAS).
Cross-Team Collaboration & Knowledge Sharing
Collaborate with development teams to optimize application architectures and provide cloud-native solutions (Server-less, Microservices).
Document operational procedures (SOP manuals) and lead internal technical training sessions.
What We Look For In You
Technical Skills
Mastery of core services (compute/storage/network/security) on AWS or Alibaba Cloud, with familiarity in the other platform.
Proficient in Linux/Windows system operations and automation tools (Shell/Python/Ansible).
Hands-on experience with containerized operations (Kubernetes, ECS/EKS, ACK) and cloud-native technologies (e.g., Service Mesh).
Experience Requirements
5+ years of operations experience, with at least 3 years focused on public cloud (AWS/Alibaba Cloud) environments managing 100+ instances.
Experience in building cloud platforms from scratch, hybrid cloud architecture design, or large-scale migration projects (e.g., IDC-to-cloud) is preferred.
Team Management
Excellent team management and communication skills to lead and collaborate with operations, development, testing, and security teams.
Certifications & Education
AWS Certified SysOps Administrator or Alibaba Cloud ACP/ACE certifications are preferred.
Bachelor’s degree or higher in Computer Science, Network Engineering, or related fields.
Nice-To-Haves
Familiarity with multi-cloud management platforms (AWS, Alibaba Cloud, Azure) or FinOps cost optimisation methodologies.
Experience in cloud security practices, including Web Application Firewall (WAF) and DDoS protection (Alibaba Cloud Anti-DDoS Premium, AWS Shield).
Exposure to big data/AI operations (e.g., Alibaba Cloud MaxCompute, AWS EMR).
Perks & Benefits
Competitive total compensation package
L&D programs and education subsidy for employees' growth and development
Various team building programs and company events
Wellness and meal allowances
Comprehensive healthcare schemes for employees and dependants
More that we love to tell you along the process!
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: United States
Action1 is an autonomous patch management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in 5 minutes, it just works and is always free for the first 200 endpoints, with no functional limits. By pioneering autonomous OS and third-party application patching, Action1 helps organizations eliminate routine work, reduce ransomware and security risks, and protect the digital employee experience. It provides real-time vulnerability assessment and remediation across remote and on-site endpoints without requiring a VPN, while peer-to-peer patch distribution reduces bandwidth use on local networks.
In 2026, Action1 was recognized as the fastest-growing founder-led cybersecurity company in America on the Inc. 5000. Action1 is led by industry veterans Alex Vovk and Mike Walters, American entrepreneurs who founded Netwrix, which has grown into an industry-leading, multibillion-dollar cybersecurity company.
We are looking for a Dev Manager to lead the engineering team responsible for Executive Reporting.
You will combine engineering leadership with hands-on technical expertise to help customers understand patching and vulnerability trends over time through reliable reports and dashboards.
What you'll do:
Lead and develop a team of engineers, providing technical direction, mentoring, and regular feedback.
Own delivery outcomes within the agreed scope, provide practical estimates, and make capacity and priority trade-offs visible.
Work with Product Management and the EVP to define priorities and translate customer needs into executive reporting capabilities.
Oversee the design, development, and operation of reporting capabilities, including:
- Historical reporting on patches and vulnerabilities.
- The Enterprise Reports Engine and reusable report execution capabilities.
- Dashboard services for presenting trends and status to decision-makers.
- Data aggregation and consistent calculation of reporting metrics.
- Report generation, scheduling, and export workflows.
Guide technical decisions within the assigned domain, from solution design through development and production rollout, while coordinating cross-cutting architecture and security decisions with their designated owners.
Establish clear definitions for metrics, reporting periods, data freshness, and missing data so customers can interpret results accurately.
Coordinate with Product Value and core engineering teams on source data, reporting content, access controls, and shared infrastructure.
Own automated pipelines for building, testing, validating, and deploying reporting services.
Improve reporting accuracy, query performance, reliability, and observability as customer data volumes grow.
Apply AI technologies where they improve reporting development, validation, or interpretation.
Requirements
What we're looking for:
Experience leading software engineers and owning the delivery and operation of production systems.
Strong software engineering fundamentals and the ability to contribute to technical problem-solving.
Excellent knowledge of Node.js, JavaScript, and TypeScript.
Experience building and operating AWS services in production.
Hands-on experience with reporting platforms, analytics services, or data-intensive applications.
Proficiency in SQL and experience with data modeling, aggregation, and query performance.
Understanding of historical data, metric consistency, and data-quality validation.
Strong communication skills and the ability to align engineering work with product priorities.
Professional working proficiency in English for leading an English-speaking team and collaborating across functions.
Nice to have:
Experience writing automated tests for data pipelines, reporting calculations, and report generation.
Experience with dashboard engines, scheduled reporting, and large data exports.
Experience with patch management or vulnerability reporting.
Experience with runtime isolation and sandboxing for sensitive execution.
Experience in B2B SaaS, security, compliance, or data governance.
Experience building high-load products that support large numbers of endpoints.
Benefits
Fully remote work with flexibility to support your work-life balance.
A collaborative environment that empowers you to own your domain and implement best practices.
Stable income, benefits, flexible working hours, and opportunities for career advancement.
Friendly, professional colleagues who are eager to support you and help you grow.
Engaging challenges and opportunities to make a meaningful impact.
Location: Remote
Workplace: Remote
Phantom https://phantom.com is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets that never close, including perpetuals, prediction markets, tokenized assets, stablecoins and memes. Phantom users are able to discover the markets that matter and the cultural moments that shape them, building conviction through real-time data and the verified performance of top traders. With self-custody and access to open networks at its core, Phantom lets them control their financial moves in the same app they use to safely store or spend money worldwide.
Phantom has reached #1 in Google Play's finance category and consistently ranks in the top 50 apps across all categories. Check out our Forbes Fintech 50 https://www.forbes.com/sites/ninabambysheva/2026/02/23/inside-phantoms-battle-plan-to-win-the-crypto-fueled-superapp-war/ and CNBC and Statista's World's Top Fintech Companies 2026 https://www.cnbc.com/worlds-top-fintech-companies-2026/!
We are around 180 people, fully remote, backed by a $150M Series C investment from a16z, Sequoia Capital and Paradigm.
ROLE DESCRIPTION
Security is core to Phantom’s product and the trust millions of users place in us. We’re building an AI-native security team that aggressively uses AI to expand the speed, depth, and reach of our work—from code review and threat modeling to vulnerability discovery and security automation. We’re looking for strong security engineers with high agency who can identify the risks that matter, build practical solutions, and take ownership from initial discovery through verified remediation.
This is a hands-on, high-impact role spanning architecture, source code, testing, and production systems across Phantom’s mobile, web, and backend products. You’ll work directly with engineering and product teams, lead complex security initiatives, and build capabilities that scale across the company. At the Staff level, you’ll set technical direction and raise the bar for how Phantom designs, builds, and ships secure products.
This role is fully remote and open to candidates based in the US, UK and Canada.
RESPONSIBILITIES
- Product Security Ownership: Partner with engineering teams to identify and address security risks across Phantom’s mobile applications, web products, APIs, and backend services.
- Architecture and Threat Modeling: Lead security reviews for new products and major architectural changes, with particular attention to authorization boundaries, sensitive data, transaction integrity, key material, and third-party integrations.
- Secure Product Development: Embed practical security controls into the software development lifecycle, from design and implementation through testing, release, and production operation.
- Code Review and Security Testing: Perform AI assisted security code reviews and targeted testing of high-risk features. Build repeatable approaches that help find vulnerabilities before they reach production.
- Security Tooling: Develop and improve tooling that gives engineers fast, actionable security feedback without creating unnecessary friction. Use automation and AI-assisted workflows where they materially improve coverage or speed.
- Software Supply Chain Security: Harden CI/CD, build, and release systems against supply chain threats, including dependency risk, secrets exposure, build provenance, artifact integrity, and compromised developer or automation workflows.
- Vulnerability Management: Triage findings from internal testing, researchers, bug bounty submissions, and third-party assessments. Work with owners to determine real-world impact and drive issues through verified remediation.
- Incident Response: Support the investigation of product security incidents and suspicious activity. Turn lessons from incidents into durable improvements to product architecture, detection, and engineering standards.
- Technical Leadership: Establish product security patterns and expectations across engineering. At the Staff level, lead ambiguous, cross-functional initiatives and influence architecture beyond any single product team.
QUALIFICATIONS
- 5+ years of experience in product security, application security, security engineering, or software engineering, including experience operating at a senior or staff level.
- Strong understanding of web, mobile, API, and distributed-system security, including authentication, authorization, session management, cryptography, and common vulnerability classes.
- Hands-on experience building or applying AI-assisted security tooling to test applications and APIs, combining automated analysis with source-code review and manual validation.
- Demonstrated ability to review production code in one or more languages such as TypeScript, JavaScript, Rust, Python and Go.
- Experience securing software supply chains and CI/CD systems, including dependencies, build infrastructure, secrets, artifacts, signing, and release integrity.
- Experience threat modeling complex products and translating security risks into concrete engineering requirements.
- Strong judgment when evaluating exploitability, business impact, and appropriate remediation.
- Track record of partnering effectively with engineering and product teams while maintaining a high security bar.
- Clear written and verbal communication, including the ability to explain technical risk to both engineers and non-security stakeholders.
NICE TO HAVES
- Experience securing consumer financial products, wallets, payments, or other systems where client integrity and transaction safety are critical.
- Familiarity with blockchain systems, smart-contract interactions, transaction simulation, signing workflows, or self-custodial wallet architecture.
- Experience securing browser extensions or native mobile applications.
- Experience building and integrating application-security tooling, static or dynamic analysis, security test infrastructure, or policy-as-code controls.
- Familiarity with AWS, Kubernetes, CI/CD systems, and cloud-native service architectures.
- Experience working with bug bounty programs or coordinating external security assessments.
The target base salary for this role will range between $200,000 to $250,000 with the addition of equity and benefits. This is determined by a few factors including your skillset, prior relevant experience, quality of interviews and market factors (such as location) at the point in time of offer.
Why Work With Us
Phantom's journey to becoming a global trading app began with making crypto easier to use. Today, we’re building on that foundation to help people discover the markets that matter, make informed financial moves, and safely store or spend their money worldwide. Joining Phantom means helping shape that next chapter: building products that bring the freedom of open markets to more people.
- Build for global impact: Create products used by tens of millions of people, making innovative financial markets more accessible to users around the world.
- Make complexity feel simple: Solve meaningful challenges across design, engineering, and user experience to make discovering markets and managing money seamless.
- Put users in control: Help build a future where people have greater freedom over their assets and financial decisions, with security and self-custody at the foundation.
Benefits (only available to full-time employees)
- Competitive salary and equity
- Comprehensive insurance (medical/dental/vision): base plan 100% covered
- Flexible hours and a long-standing, supportive remote environment
- Unlimited vacation: Take time when you need it (and we really mean it!)
- 401(k) retirement plan
- Wellness stipend
- Weekly meal stipend
- Learning & Development stipend
- Remote / WFH set-up stipend
We strongly encourage candidates of all backgrounds to apply. We believe that our work is stronger with a variety of perspectives, and we’re eager to further diversify our company. If you have a background that you feel would make an impact at Phantom, please consider applying. We’re committed to building an inclusive, supportive place for you to do the best work of your career.
By submitting your resume and application materials, you acknowledge and agree that Phantom Technologies, Inc. ("Phantom") collects and processes your personal information (including application materials, interview records, and related data) to evaluate your candidacy. Phantom may use AI-powered tools and third-party service providers for transcription, note-taking, scheduling, and other administrative tasks. Phantom does not sell your information and your materials will be handled securely and in accordance with applicable data protection laws.
About the Team
The Security Operations team protects CircleCI’s infrastructure, product, and customer data against evolving threats, working closely with engineering to maintain security and resilience.
About the Role
As a Security Operations Engineer, you will protect CircleCI’s infrastructure, product, and customer data from AI-driven attacks and defenses. This intermediate role involves ownership of security challenges, collaboration with Engineering, contributing to the security roadmap, and leveraging AI tools to detect, respond to, and automate security threats.
What You’ll Do:
Threat Detection & Incident Response
— Monitor, investigate, and respond to security threats across cloud and application environments using security and AI-assisted tools.
— Participate in risk assessments, incident response, post-incident reviews, and on-call support, improving controls and processes.
Security Engineering & Architecture
— Build and maintain security tooling, controls, and automation across cloud, application, and CI/CD environments following best practices.
— Identify vulnerabilities and configuration risks, contribute to runbooks and compliance, and understand CircleCI’s security architecture.
AI & Security
— Incorporate AI-powered security tools into workflows and evaluate emerging technologies for detection, response, and automation.
— Stay current on AI-specific security threats and contribute to responsible AI use in security operations.
Cross-Team Partnership & Ownership
— Partner with Engineering teams to understand security needs, provide guidance, and translate risks into actionable recommendations.
— Contribute to security roadmap planning, technology evaluations, and documentation while building relationships across teams.
What You’ll Bring:
— 3+ years of security engineering or operations experience or equivalent expertise.
— Hands-on experience with cloud, application, and CI/CD security in AWS, GCP, or Azure.
— Experience with incident response and security tools including EDR, CNAPP, SASE, vulnerability scanners, and log analysis.
— Ability to build and maintain security automation and tooling using Go, Python, or Terraform.
— Strong security judgment and problem-solving skills.
— Hands-on experience with AI/ML-powered security tools in production and understanding of AI’s role in security workflows.
Bonus Skills (Nice to Have):
— Familiarity with AI-specific threat categories like prompt injection and model supply chain risks.
— Experience securing developer platforms, SaaS, or CI/CD infrastructure.
— Relevant certifications such as CEH, AWS Security Specialty, Security+.
— Contributions to process improvement, runbook development, or knowledge sharing.
Accommodation
CircleCI provides reasonable accommodation for individuals with disabilities during application and employment.
About CircleCI
CircleCI is the world’s largest CI/CD platform, processing over 3 million jobs daily, helping companies leverage AI in software delivery. Founded in 2011, headquartered in San Francisco with a global remote workforce, and venture-backed by multiple investors.
Equal Opportunity
CircleCI is an Equal Opportunity and Affirmative Action employer, not discriminating based on legally protected characteristics and considering applicants with criminal histories consistent with laws.
seniorГеография найма не уточнена
География найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
УдалённоseniorСША; 401k retirement plan + company match (US only); Position is 100% remote; must reside in U.S.; reports to HQ in New York, NY; We encourage candidates from all walks of life to apply and join our team
УдалённоseniorUSA (Remote); Canada (Remote)
География найма не уточнена
УдалённоUnited States & Canada
leadWashington, DC, USA
УдалённоRemote - US
УдалённоheadSeattle, United States; Atlanta, United States; Baltimore, United States; Toronto, Canada; Austin, United States; Denver, United States
УдалённоseniorRemote, US; Remote, EU
Зарплата не указана
Singapore, Singapore
УдалённоUnited States
УдалённоКанада, Великобритания, США; This role is fully remote and open to candidates based in the US, UK and Canada; We strongly encourage candidates of all backgrounds to apply
УдалённоmiddleOntario
Все вакансии в одном месте - страница 11 · Job Hunters
