Location: San Francisco, CA | New York City, NY | Seattle, WA
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
Frontier AI is on track to be among the most consequential and most adversarially-targeted technology in the world. The capability curve is steep, the adversaries who want these systems are extremely well-resourced, and the security bar this will eventually require is well beyond where the industry operates today. Incremental hardening alone is not going to close that gap, so we need breakthroughs and a group of people to go find them.
Security Labs is that team. We run a portfolio of high-risk, high-expected-value security projects: the work that seems impractical until someone optimistic and stubborn enough actually tries it. Projects run on the order of weeks rather than quarters, and each one is either handed off to the Anthropic team that will own it in production or wound down with a writeup of what we learned. We expect a meaningful fraction of our bets not to land.
This team is intentionally scrappy and ambitious. We're intentionally iterating fast on high-risk research bets and we expect a meaningful fraction not to land. If a 30% project success rate sounds uncomfortable, or uncharted and chaotic territory isn’t both frightening and exciting, this probably isn't the right fit. There are other places in Anthropic Security doing important work with more structure, less risk, and more certain paths to positive outcomes.
The questions we're trying to answer include:
Can our core research workflows survive extreme isolation?
Can we replace trust with cryptographic guarantees?
Can the models themselves become our most effective security control?
What would it actually take to defend against a tier-1 state adversary, and how much of that can we build now?
Who we're looking for.
We're hiring generalists with rare depth. You're a strong software engineer as a baseline, and on top of that you've gone deep in at least one area most engineers don't get near: firmware or hardware security, applied cryptography, OS / kernel / hypervisor internals, formal methods, reverse engineering, or high-assurance and cross-domain systems. You've built things under your own direction, you're comfortable jumping layers when the problem demands it, and you'd rather take a swing at something that might not work than ship the safe incremental thing. You think the trajectory of AI matters a great deal, you're not comfortable with how the security side of it is going by default, and you'd rather be on the inside building the answer than watching from outside.
Current Project Areas
The portfolio changes as we learn. The kinds of bets currently in flight or queued:
Standing up a prototype high-assurance research cluster: running real Anthropic training and research workloads under extreme isolation and physical security controls, and finding out exactly where productivity breaks and what we'd need to invent to get it back
Provable inference: cryptographic verification (zero-knowledge proofs, attestation chains) that a given output came from a specific model running specific code, replacing "trust us" with math
Build hypervisor-isolated microVM workload isolation across the fleet
Compiling an ML kernel through a formally verified pipeline where every lowering step carries a machine-checked proof of equivalence, making compilation-layer sabotage mathematically detectable
Regenerating clusters: automation that spins up a purpose-built cell, runs a workload, and tears the whole thing down on a TTL measured in hours, so attacker persistence has an expiry date
Using Claude itself to drive security work end to end: threat modeling new compute platforms, rewriting critical services to zero external dependencies, running the test equipment that validates what hardware datasheets claim
Part of your job is deciding what comes next. We hire people we trust to pick good bets, and project selection is owned by the engineers doing the work.
Key responsibilities
Own Security Labs projects end to end. You'll scope the bet, build the prototype, run it against real workloads, and bring it to either a hand-off or a documented exit
Stand up novel security infrastructure fast (isolated clusters, attestation chains, hypervisor and runtime work, verification tooling) optimizing for what we learn rather than for permanence
Find the receiving team early, bring them along while you build, and hand them something they actually want to own
Work embedded with research and infrastructure teams (Pretraining, RL, Inference, Compute) to test whether their workflows survive what you're proposing, and document precisely where they don't
Turn experimental results into short writeups that shape Anthropic's long-term security architecture, and into costed contingency plans we could execute on short notice
Help pick the next round of bets and influence the industry to get better along the way
Minimum qualifications
Genuinely care about where AI is heading and want to work on the security problems that determine whether it goes well. This is the most important thing on this list
Have real depth in at least one area most software engineers don't touch (e.g. firmware or hardware security, applied cryptography, OS / kernel / hypervisor internals, formal methods and verification, reverse engineering and exploit development, or high-assurance / cross-domain systems)
Have built and shipped things under your own direction. Maybe you founded a company or research group, maintained an open-source project other people depend on, or shipped research that changed how people in your field work. We weight this far more than where you've worked or for how long
Have a track record of choosing the problem yourself and seeing it through, rather than only executing a plan someone else handed you
Are comfortable jumping between domains and layers of the stack when the problem calls for it, and have actually done so
Have run prototypes or experiments where the goal was answering a hard question rather than shipping a permanent system, including ones that didn't pan out
Write clearly enough to turn weeks of work into a couple of pages someone can act on
Change your mind when the evidence says to, and are fine being the least-expert person in a room full of specialists
Care about defense. Plenty of folks here come from offense and that background is valuable, but what you actually want to spend your time on now is making systems hold up
Are a strong programmer (Python plus at least one of Rust, Go, or C/C++) and can stand up real infrastructure without that being the interesting part of your week
Preferred qualifications
Experience inside airgapped or high-side environments (classified networks, cross-domain solutions, ICS/SCADA, financial trading infrastructure) and the operational realities of working in them
A background in offensive security, red teaming, or vulnerability research, with calibrated intuitions for which threats actually matter
Familiarity with ML infrastructure (training pipelines, distributed schedulers, inference serving, accelerator hardware) sufficient for grounded conversations with researchers about what their workloads actually need
A history of working in environments built around rapid iteration rather than rigid change control: startups, applied research groups, independent consulting, small security shops
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$320,000
—
$485,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: San Francisco, CA | New York City, NY | Seattle, WA
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the team
Secure Frameworks is the team in Anthropic's Security Engineering org that builds shared security libraries and frameworks the rest of the company builds on. We collaborate closely with teams and leaders across Anthropic to own critical security foundations, including workload identity and authorization, cryptographic frameworks, and the centralized access proxy that secures traffic to internal applications.
Our mission is to make the secure thing easy and the easy thing secure by helping Anthropic engineers get secure behaviour by default and preventing entire classes of vulnerabilities through careful design. We own what we ship, help customers adopt better security practices and at times we work embedded directly in research, infrastructure or product teams.
About the role
You will design, build and run security foundations used across Anthropic's fleet, from threat model through production, on-call and adoption. Much of the work is greenfield: our infrastructure is growing quickly and the timelines are compressed, so you will help define the architecture rather than inherit it. Depending on your strengths you will focus on one or two of the areas below and contribute across the rest.
Build critical security foundations including cryptographic frameworks, mTLS infrastructure, secure serialization, and authorization systems, designed to prevent entire classes of vulnerabilities
Partner with product, research, infrastructure, and other security teams to ensure frameworks integrate smoothly with lower-layer security controls
Scope, design and build security services and libraries end-to-end, maintain them in production, and drive through ambiguous technical problems with minimal oversight
Build and operate the zero-trust access gateway that fronts Anthropic's internal services
Design and roll out authorization frameworks so services enforce least privilege consistently instead of each inventing its own access controls
Own cryptographic frameworks and libraries
Mentor engineers, contribute to hiring, and grow security engineering culture across Anthropic
Minimum qualifications
8+ years of software engineering experience building security-relevant systems in production, including leading complex initiatives independently
Strong programming skills in Go, Rust or Python
Deep understanding of authentication and authorization systems: OAuth 2.0 / OIDC, JWTs, service-to-service auth, policy-based access control
Hands-on experience with PKI, X.509, mTLS and workload identity
Working knowledge of applied cryptography: choosing and composing primitives correctly, key management, and the ways libraries fail in practice
Experience shipping and operating high-reliability services on Kubernetes across cloud and on-prem environments, including being on call for them
A track record of bringing clarity and ownership to ambiguous technical problems and driving them to resolution across teams
A strong sense of developer experience
Clear communication across all levels of the organization
Passion for AI safety and the role security engineering plays in building trustworthy AI systems
Preferred qualifications
Built security frameworks or libraries adopted across an engineering organization, and done the work to drive that adoption
Built or operated a zero-trust / BeyondCorp-style access gateway or identity-aware proxy
Migrated a fleet to mTLS at scale, including certificate issuance and staged enforcement
Maintained or contributed to open-source cryptographic libraries
Designed authorization systems using policy languages or relationship-based models
Familiarity with ML infrastructure (training, inference serving)
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$32,000
—
$485,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: San Francisco, CA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
The Security Risk team is responsible for how Anthropic identifies, prioritizes, and drives treatment of its most important security risks. We are rebuilding risk management to operate as an engineering function, using automation, quantitative risk and AI-native platforms to enable decision making. The risks we assess span Anthropic's full security landscape, so the team needs breadth across domains and the judgment to go deep wherever a decision demands it. Security Risk, in deep partnership with Security Engineering, helps define the security program and shapes how investment and treatment decisions get made.
The conventional GRC playbook was not built for a company shipping frontier AI. You will help define what replaces it, with a direct line to CISO-level decisions. As a Security Risk Analyst you will take risk questions from leadership and partner teams and drive them to a decision. Sometimes that is a fast, structured qualitative assessment and other times it is a deep FAIR-based quantitative analysis. Either way you bring leadership a clear position, the tradeoffs, and honest uncertainty, and you defend it under challenge. In parallel, you will help turn quantitative risk into a product partner teams can leverage, and define the standards a growing risk function will run on.
Key responsibilities
Enable leadership and partner teams to make risk-informed decisions. Take ambiguous risk questions, drive them to a documented decision, and communicate the quantitative and qualitative tradeoffs clearly
Lead quantitative analysis of the company's top security risk scenarios using FAIR, calibrated estimation, and simulation, working with the engineers who own the systems and presenting results in terms leadership can act on
Partner with Security Engineering to assess threat scenarios and control effectiveness so security investment is right-sized to actual risk and remediation is sequenced where it buys down the most risk
Frame escalations and risk treatment decisions with a clear recommendation, an honest statement of uncertainty, and re-evaluation triggers, and pressure test those decisions with risk owners
Shape the analysis and narrative behind leadership risk reviews, and help define risk appetite and the risk metrics the organization should measure and why
Use AI and automation to scale risk analysis, and own the calibration and quality review that keep the outputs trustworthy
Turn one-off analyses into reusable methods, templates, and training so risk analysis becomes increasingly self service for partner teams, and raise the analytical quality of the risk register
You may be a good fit if you
Have owned security or technology risk analysis end to end, qualitative and quantitative, and can point to a decision your output changed, whether a funding call, a launch call, a remediation sequence, or a documented acceptance
Have hands-on FAIR-style quantification experience, including scenario decomposition, calibrated estimation, and Monte Carlo simulation in Python, R, or spreadsheet tooling, briefed to decision makers
Thrive in ambiguity. You frame a moving question into something analyzable, pick the depth that fits, and drive to a decision rather than a report
Put defensible severity and likelihood on ambiguous problems, state uncertainty honestly, and change your position when the evidence changes
Have enough technical security depth to decompose an attack path with security engineers and be credible in the room
Can compress a complex risk position into one paragraph for the CISO, make the tradeoff explicit, and defend it under pointed questions
Use Claude or other LLMs as daily working tools and review model output critically
Are low ego and collaborative, build credibility through the work, and care about AI safety and the role security risk plays in it
Strong candidates may also
Have applied FAIR-CAM or another structured approach to control effectiveness and attack path modeling
Have built or operated a cyber risk quantification program, or turned quantitative analysis into tooling, templates, or training that others ran
Have helped define risk appetite or tolerance thresholds an organization actually used to make decisions
Bring a background in security engineering, detection, threat intelligence, actuarial science, or decision science that grounds the numbers in real systems
Are familiar with security risks specific to AI systems, such as goal or intent modification, and how they change traditional threat models
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$270,000
—
$345,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: San Francisco, CA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the team
Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward a fundamentally different kind of GRC: one that directs Claude, with the right humans in the loop, to challenge and evidence the performance of controls continuously rather than through periodic audits.
Within Security GRC, Compliance and Audit Programs (CAP) runs the integrated audit across our frameworks and maintains the Common Control Framework the program hangs off. This role sits in Compliance & Audit Programs and works one regime family, US public sector, from requirements through authorization and ongoing compliance, working alongside the public sector engineering pods rather than downstream of them.
About the role
You'll help drive the compliance programs that keep Anthropic's US government authorizations current: federal civilian (FedRAMP, including FedRAMP 20x for Claude Enterprise), Department of War (DoD impact levels, CMMC, NIST SP 800-171), and state and local (StateRAMP, TX-RAMP and agency requirements). You'll own the recurring cycles those authorizations run on (continuous monitoring, POA&M, annual assessments, significant changes), help build new authorizations as we add them, and keep every frontier model's authorizations current.
You'll turn government requirements into specific, testable requirements that engineering teams build against, review the evidence that comes back, and say so when a launch is not ready for a government boundary. You'll map US government requirements onto our Common Control Framework so the public sector view and the integrated audit view of the same control stay one framework. Building with Claude is a normal part of the job: mapping, evidence collection and reporting, with you deciding where human judgment stays in the loop.
This is an individual contributor role, working closely with a peer on US public sector compliance, for someone who works well independently, writes clearly, and gets satisfaction from a government authorization that holds up as the product changes underneath it.
Key responsibilities
Run the recurring compliance cycles for our US government authorizations (continuous monitoring, POA&M, annual assessments, SSP updates, significant changes and incident notifications), starting with C4G on Palantir FedStart and the NIST SP 800-171 assessment with Schellman
Co-own FedRAMP 20x work for Claude Enterprise, and help build new authorizations (first-party FedRAMP High, DoW impact levels, StateRAMP and TX-RAMP) with requirements and evidence work
Support model authorizations in GovCloud and Vertex for every model launch, as the GRC member of the Inference and model delivery pod
Translate government obligations into partner team requirements, for example vulnerability SLAs in our internal vulnerability reporting platform, and review the evidence
Answer public sector customer and deal questions (what a boundary allows, CUI, IRS Publication 1075, CJIS, ITAR), and handle questionnaires and RFIs until they move to Customer Trust
Map US government requirements onto the Common Control Framework with the Controls Assurance Lead and keep one source of truth for status
Build with Claude: automate mapping, evidence collection and reporting, and verify machine-drafted language before it becomes the record
Minimum qualifications
Several years in security compliance or IT audit with hands-on US government compliance for a cloud service (FedRAMP, DoD impact levels, CMMC or NIST SP 800-171, or StateRAMP), including the ongoing compliance cycle after authorization
Working command of the NIST SP 800-53 Moderate baseline and the mechanics of authorization: boundary definition, control implementation statements, assessment, continuous monitoring, POA&M and significant change
Experience writing requirements for engineering teams from a control baseline and reviewing the evidence that came back
Working knowledge of how a GovCloud or Vertex style government region differs from commercial, and what changes when a model, feature or region is added to an authorized boundary
Enough technical fluency to read a runbook, configuration or pipeline definition and judge whether it enforces the written control
Clear writing, because implementation statements and status reports are what assessors, engineers and leadership work from
Ability to get partner teams to prioritize and close compliance work without authority over them
Preferred qualifications
Have taken a service through FedRAMP High or DoD IL4 or IL5, or supported a service on classified networks
Have worked on a FedRAMP 20x pilot or built machine-readable evidence or reporting for an assessor
Have applied LLMs to compliance work such as control mapping, evidence testing or continuous evidence collection
Hold or are eligible for a US security clearance
Experience with state and local requirements such as StateRAMP, TX-RAMP, IRS Publication 1075 or CJIS
You don't need to
Have done everything on this list or worked every regime. The scarce combination is running a government authorization on its recurring cycle plus the judgment to tell whether a control actually works
Write production code. The bar is fluency sufficient to read, query and challenge
Hold every certification. CISSP, CISA, CGRC or similar are welcome and not required
Have prior AI industry experience
Deadline to apply: None. Applications will be received on a rolling basis.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$255,000
—
$270,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: San Francisco, CA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the team
Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward a fundamentally different kind of GRC: one that directs Claude, with the right humans in the loop, to challenge and evidence the performance of controls continuously rather than through periodic audits.
Responsibilities:
Serve as the security policy partner for AI agent governance, authoring the policies and standards for how agents are built, deployed, operated
Define review and approval criteria when an agent may interact with sensitive or regulated data, and which actions require human approval as it relates to compliance frameworks
Serve as the GRC reviewer within existing engineering approval workflows
Define data governance requirements for agents, including least-privilege access, access reviews, and handling of regulated and sensitive data
Monitor agent behavior over time and adapt governance requirements in partnership with cross-functional security, research and engineering teams
Map agent security and data controls to AI governance frameworks (e.g., ISO 27001, ISO 42001, EU AI Act), strengthening Anthropic's certification efforts ensuring agent security is auditable
Assess and document agent-related security and compliance risks, driving them to resolution with engineering owners
Own the policy for agent-related risk acceptances and exceptions, including approval authority, duration and re-review
You may be a good fit if you:
Have 8+ years in security governance, risk, and compliance, including ownership of security policies and control standards at a technology company
Have owned or meaningfully supported efforts to compartmentalize sensitive data, PII, or intellectual property, and understand how identity and access mechanisms implement or undermine protection boundaries
Think about non-human identities as a distinct risk and control category, and can design least-privilege access and accountability controls for systems acting on a person's behalf
Can reason from a threat model to a control and explain the tradeoff to both an engineer and an auditor
Have defined risk-based review or approval criteria within engineering workflows and kept them effective under high change velocity
Deliver clear, precise written work for both technical and non-technical audiences
Thrive in ambiguous environments with no settled industry playbook, where you're expected to propose the standard rather than wait for one
Are energized by being the security and risk authority who educates and influences outcomes rather than only advises
Strong candidates may also:
Understand the security properties of LLM agents, whether from an AI, developer-platform, or agent-tooling company, or through comparable experience
Bring familiarity with AI governance frameworks alongside traditional security frameworks
Have adapted controls from regulated or highly sensitive environments to an open, high-trust engineering culture
Possess relevant certifications (CISSP, CISM, CRISC, CISA, CCSP, ISO 27001 or ISO 42001 Lead Implementer/Auditor)
Candidates need not have:
Done everything on this list before. Very few people have governed AI agents at scale — we care more about how you reason about access, accountability, and blast radius than about a prior title.
Deadline to apply: None. Applications will be received on a rolling basis.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$255,000
—
$345,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Foster City, CA
Workplace: Hybrid
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
ABOUT THE ROLE
We're looking for a Security Engineer with deep incident response experience to help defend Replit, a fast-moving, cloud-native AI vibe-coding platform. You'll be the person who takes charge when something goes wrong. You'll lead investigations from first signal to root cause, coordinate containment across Security, SRE, and Engineering, and keep stakeholders informed while the incident is moving fast.
This isn't a pure responder role. We want a well-rounded security engineer who has run real incidents and wants to make the next one faster. You'll write the scripts, automations, and tooling that take manual work out of triage, evidence collection, and containment. You'll also turn lessons from each incident into better detections, playbooks, and platform hardening.
RESPONSIBILITIES
Incident Response
- Serve as incident commander or technical lead for security incidents, from detection and triage through containment, eradication, recovery, and post-incident review.
- Coordinate response across Security, SRE, Engineering, Legal, and leadership. Drive decisions under pressure and keep a clear record of actions taken.
- Communicate incident status, impact, and risk clearly to technical and executive audiences.
- Participate in and help shape the security on-call rotation.
Investigation & Forensics
- Investigate suspicious activity across cloud infrastructure, containers, identity systems, and application layers using SIEM, Cloud Logging, telemetry, and host and container artifacts.
- Determine scope, root cause, attacker behavior, and blast radius for confirmed incidents.
- Quickly assess whether emerging threats (0-days, active exploitation campaigns, bug bounty findings, customer reports) apply to Replit, and whether we're already affected.
IR Automation & Tooling
- Build scripts, automations, and tools (Python, Go, Bash, or directly on Replit) that speed up response, such as automated enrichment, evidence collection, credential and session revocation, workload isolation, and alert triage.
- Develop and maintain response playbooks and runbooks, and automate them where possible.
- Integrate response workflows with SIEM, SOAR, ticketing, and chat tooling to cut time-to-contain.
Detection & Continuous Improvement
- Turn incident findings into new or improved detections, logging coverage, and visibility.
- Lead blameless post-incident reviews and drive remediation items to completion.
- Run tabletop exercises and simulations to test readiness and find gaps.
REQUIRED SKILLS & EXPERIENCE
- Proven experience leading or serving as technical lead on security incidents in a cloud or SaaS environment.
- Strong hands-on investigation skills with SIEM, cloud audit logs, and log-based analysis. Comfortable working through large datasets under time pressure.
- Proficiency writing production-quality scripts or tools in Python, Go, or Bash for investigation and automation.
- Solid knowledge of cloud architecture and security, especially Google Cloud Platform (IAM, audit logging, GKE, networking).
- Working knowledge of Kubernetes and containers, including how to investigate and contain compromised workloads.
- Understanding of identity systems, SaaS architectures, and common cloud attack paths (credential theft, privilege escalation, supply chain, token abuse).
- Familiarity with software engineering fundamentals, CI/CD pipelines, and package ecosystems, so you can work effectively with Engineering on code-level fixes.
- Understanding of IR frameworks and lifecycle (for example NIST 800-61), plus the vulnerability lifecycle and exploitability analysis.
PREFERRED QUALIFICATIONS
- Experience building or operating SOAR or other response automation platforms.
- Digital forensics experience with cloud, Linux hosts, or containers.
- Experience with threat intelligence, threat hunting, or security research.
- Experience with bug bounty programs or coordinated vulnerability disclosure.
- Familiarity with detection-as-code practices and writing detection rules.
- Experience in fast-paced, cloud-native, or AI/ML-driven environments.
- Relevant certifications (such as GCIH, GCFA, GCFR), or equivalent hands-on experience.
WHAT WE VALUE
- Curiosity & initiative: Strong desire to understand attacker behaviors, emerging threats, and how they apply to real-world systems.
- Speed & analytical rigor: Ability to quickly assess high-risk vulnerabilities with clear, evidence-based reasoning.
- Collaboration: Comfort working across cross-functional teams spanning Security, SRE, Engineering, and Infrastructure.
- Clear communication: Ability to explain findings, risks, and mitigation strategies to stakeholders at all levels.
- Ownership mindset: Takes initiative to drive investigations, improvements, and remediations to completion.
- Continuous learning: Passion for staying up to date on new vulnerabilities, exploit trends, and cloud-native security best practices.
Full-Time Employee Benefits Include:
💰 Competitive Salary & Equity
💹 401(k) Program with a 4% match (US Only)
⚕️ Health, Dental, Vision and Life Insurance
🩼 Short Term and Long Term Disability
🚼 Paid Parental, Medical, Caregiver Leave
🏝 Flexible Time Off (FTO) + Holidays
🚗 Commuter Benefits (In-Office & US Only)
📱 Monthly Wellness Stipend
🧑💻 Autonomous Work Environment
🖥 In Office Set-Up Reimbursement (In-Office Only)
🚀 Quarterly Team Gatherings
☕ In Office Amenities (In-Office Only)
Want to learn more about what we are up to?
- Self-driving Company https://replit.com/blog/self-driving-company
- Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale
- AI Adoption https://replit.com/blog/ai-adoption
- Build Open-Source Apps https://replit.com/build/open-source-app-builder
Interviewing + Culture at Replit
- Operating Principles https://blog.replit.com/operating-principles
- Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
Location: Los Angeles, CA
Workplace: onsite
About Spin.AI
Spin.AI is a global SaaS security company based in Palo Alto, CA, protecting enterprises from SaaS ransomware, Shadow IT, non-compliance, data loss, and data leak disasters in the cloud.
SpinOne is an all-in-one SaaS data protection platform built for mission-critical applications such as Google Workspace, Microsoft 365, Salesforce, Slack, and Atlassian. We deliver the most innovative last line of cyber defense, along with SaaS data management and protection, for more than 2,000 organizations worldwide. Learn more at https://spin.ai/
About the Role
We are looking for a hungry, energetic Partner Manager to join our growing security team. Reporting directly to our VP of Sales, this role will focus on building Spin.ai's partner network - initially focusing on the Google Workspace partner ecosystem, then growing into security-specific partnerships. You will help sell Spin.ai's recently acquired industry leader in Google Workspace Security, DoControl, as well as Spin.ai's growing Browser Security solution, combining the two into a powerful, best-of-breed security offering. With the foundation already built - working with leading GWS partners such as SADA, Pythian, and Wursta - we're looking for someone who can take over the running motion and, most importantly, push it to the next level with their knowledge and expertise.
What You'll Do:
Partner Sourcing
Identify net-new Google Workspace and security resellers to work with, and book intro meetings to communicate joint value
Attend local and global events to grow and maintain relationships, representing
Spin.ai
as a leading Google Workspace DLP and Browser Security solution
Work with the VP of Sales and Account Executives to schedule initial account-mapping sessions and start driving joint pipeline
Complete and sign relevant reseller agreements, and negotiate and confirm margins
Partner Deal Sourcing
Work with the partner sales team and
Spin.ai
's sales team to build joint pipeline - this includes writing emails for partner reps to send to their customers, following up on those threads, and creating slides for their recurring customer calls
Enable the partner sales team to effectively position and sell
Spin.ai
security solutions through weekly 1:1 account mappings and the materials listed above
Stay involved as needed from deal sourcing through closed-won to ensure strong engagement from both sides and a successful outcome for all parties
Partner Relationship Management
Partnerships are a relationship game - maintain key relationships across all major partners to keep
Spin.ai
top of mind and seen as a trusted partner
This includes weekly 1:1s with key reps, traveling for lunches, dinners, and events, and staying in regular, informal contact (text)
Market Expertise
Maintain deep knowledge of the Google Workspace DLP and Browser Security space
Understand Spin.ai's differentiators and know every competitor inside and out
Fluently pitch the combined DLP + Browser Security solution, with the ability to sell each individually or jointly as needed
Ask the right discovery questions to effectively communicate joint value in partner intro meetings
What You Bring:
Google Workspace Partner Experience:
3+ years of experience successfully working and selling within the Google Workspace partner ecosystem (SADA, 66degrees, Pythian, etc.)
Domain Knowledge:
Strong understanding of DLP and Browser Security
Security Partner Experience:
Google Workspace is the primary focus, but you also have the drive and ability to grow into building security-specific partnerships (Optiv, etc.)
Positive Attitude:
A mindset focused on positivity and finding ways to do more, every day
Grit and Drive:
Willingness to get hands-on, go above and beyond, leverage internal resources, and do what it takes to drive success for yourself and your prospects
What We Offer:
$300k OTE plus Uncapped Commissions
Unlimited PTO
Hybrid Office Model
Paid Holidays
Premium health, dental, vision, and life insurance, 100% covered by the company
401(k)
Employee Wellness Program
Why Spin.AI?
Inc. 5000 list for 2026! 🚀
Overall Ranking: #3,309
Industry Ranking: #107
Metro Ranking: #114
State Ranking: #463
Forbes Named Spin.AI One of America's Best Startup Employers
THREE
Years in a Row (2024- 2026)
Work in a fast-moving, high-impact cybersecurity company recognized by
Gartner, Forrester, and G2
.
Collaborative, transparent culture – your ideas and experiments matter.
Direct impact: your work translates into real business growth and visibility.
Growth opportunities and performance-based rewards.
Why join Spin.AI?
This is an incredible opportunity to join a fast-paced team with high growth potential to become a new unicorn or decacorn within the next few years.
Dream team of highly motivated and talented people, ambitious goals and challenges that require high analytical, management and communication skills.
EEO Statement
Equal Opportunity Employer
Spin.AI is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive considerations for employment without regard to race, color, religion, sex, age, disability, marital status, familial status, sexual orientation, pregnancy, genetic information, gender identity, gender expression, national origin, ancestry, citizenship status, veteran status, and any other legally protected status under federal, state, or local anti-discrimination laws.
View The EEO is the Law poster and its supplement.
Disability Accommodation
For individuals with disabilities that need additional assistance at any point in the application and interview process, please contact our HR Manager, Shushan Akopian via shushan@spin.ai.
Location: Los Angeles, CA
Workplace: onsite
About Spin.AI
Spin.AI is a global SaaS security company based in Palo Alto, CA, protecting enterprises from SaaS ransomware, Shadow IT, non-compliance, data loss, and data leak disasters in the cloud.
SpinOne is an all-in-one SaaS data protection platform built for mission-critical applications such as Google Workspace, Microsoft 365, Salesforce, Slack, and Atlassian. We deliver the most innovative last line of cyber defense, along with SaaS data management and protection, for more than 2,000 organizations worldwide. Learn more at https://spin.ai/
About the Role
We are looking for a hungry, energetic Regional Sales Manager to join our growing security team. Reporting directly to our VP of Sales, this role will focus on selling Spin.ai's industry-leading Browser Security solution - a fast-growing market - as well as its recently acquired, best-of-breed SaaS DLP solution, DoControl. This role centers on cutting-edge security, combining top-tier SaaS-level DLP and Browser Security capabilities into a solution no other vendor in the market is able to match. This is a net-new-logo role focused on the Mid-Market/Enterprise space, with an average deal size of $100,000.
What You'll Do:
Pipeline Creation
Work with the VP of Sales and Partner Manager to source deals through our growing partner network - Optiv, Defy, and others
Build market awareness by attending trade shows, building relationships, and following up relentlessly
Partner with Marketing and the SDR team on strategic, focused outbound and inbound management efforts
Deal Management
Drive deals from sourcing to closed-won, including discovery, demos, and Proof-of-Value (POV) execution, negotiations, and procurement
Multi-thread accounts and build relationships from the executive level down to ensure deal alignment and success
Partner with the Principal Solutions Engineer to deliver effective, relevant demos and POVs
Align internal teams as needed to support account success - product requests, financial approvals, etc.
Market Expertise
Maintain deep knowledge of the Browser Security and DLP space
Understand Spin.ai's differentiators and know every competitor inside and out
Fluently pitch the combined Browser + DLP solution, with the ability to sell each individually or jointly as needed
Ask the right discovery questions to uncover each prospect's real challenge
Partner with Product to provide feedback on where we can continue to improve and enhance the solution
Keep Salesforce up to date and maintain a clean, accurate forecast, fulfilling MEDDPICC requirements to ensure each deal is properly qualified, with gaps identified and resolution paths in place
What You Bring:
Cybersecurity Experience:
A proven track record successfully selling enterprise deals ($100K+) for 3+ years, with consistent quota attainment
Domain Knowledge:
Strong understanding of the Browser Security and DLP space, ideally with experience selling similar products
Partner Experience:
A track record of selling with and through channel partners in the cybersecurity space
Positive Attitude:
A mindset focused on positivity and finding ways to do more, every day
Grit and Drive:
Willingness to get hands-on, go above and beyond, leverage internal resources, and do what it takes to drive success for yourself and your prospects
What We Offer:
$300k OTE plus Uncapped Commissions
Unlimited PTO
Hybrid Office Model
Paid Holidays
Premium health, dental, vision, and life insurance, 100% covered by the company
401(k)
Employee Wellness Program
Why Spin.AI:
Inc. 5000 list for 2026! 🚀
Overall Ranking: #3,309
Industry Ranking: #107
Metro Ranking: #114
State Ranking: #463
Forbes Named Spin.AI One of America's Best Startup Employers
THREE
Years in a Row (2024- 2026)
Work in a fast-moving, high-impact cybersecurity company recognized by
Gartner, Forrester, and G2
.
Collaborative, transparent culture – your ideas and experiments matter.
Direct impact: your work translates into real business growth and visibility.
Growth opportunities and performance-based rewards.
Why join Spin.AI?
This is an incredible opportunity to join a fast-paced team with high growth potential to become a new unicorn or decacorn within the next few years.
Dream team of highly motivated and talented people, ambitious goals and challenges that require high analytical, management and communication skills.
EEO Statement
Equal Opportunity Employer
Spin.AI is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive considerations for employment without regard to race, color, religion, sex, age, disability, marital status, familial status, sexual orientation, pregnancy, genetic information, gender identity, gender expression, national origin, ancestry, citizenship status, veteran status, and any other legally protected status under federal, state, or local anti-discrimination laws.
View The EEO is the Law poster and its supplement.
Disability Accommodation
For individuals with disabilities that need additional assistance at any point in the application and interview process, please contact our HR Manager, Shushan Akopian via shushan@spin.ai.
Location: Atlanta, Georgia; Toronto, Ontario; Athens, Georgia
Workplace: Hybrid
Artificial Intelligence. Actual Impact.
At Docebo, we’re using AI to change how people learn at work—and we mean actually change it. We’re an AI-powered learning platform that helps organizations create, deliver, and manage training all in one place. But our real mission goes deeper: we help teams move faster, work smarter, and focus on the work that truly matters. Our platform is built with intelligent, time-saving tools that personalize learning, eliminate busywork, and turn training from a checkbox into a superpower. The result? Better experiences for learners and real results for businesses.
We’re shaping the future of learning with a team that isn’t afraid to challenge the status quo. If you're excited by the idea of using AI to make work-life better for real people–you’ll feel right at home here. And it’s not just what we build, it’s how we show up. At Docebo, our values aren’t just posters on the wall—they guide how we work every day. We call it the Docebo Heart: trust by default, assume positive intent, and create space for different perspectives to thrive.
So… what are you waiting for? Join 900+ Docebians around the world and help us reinvent the way people learn, because learning never stops.
THE ADVENTURE AHEAD 🚀
As our Vice President, Information Security, you will step up as the de facto security leader owning Docebo’s global security strategy across product, cloud, GRC, and AI. This is not an advisory tower role; you will operate at executive altitude while staying close to real architecture, engineering decisions, threat modeling, and control execution. You will drive hard, measurable risk reduction while pioneering AI-first security practices that empower our business to move fast with complete confidence.
THE DAY-TO-DAY 🗓️
- Architect Global Strategy: Own and evolve Docebo’s enterprise security roadmap across product security, cloud hardening, GRC, privacy, and incident response to achieve measurable control maturity.
- Embed Security by Design: Partner deeply with Product and Engineering to integrate threat modeling, secure SDLC, CI/CD security, identity controls, and vulnerability remediation into core engineering workflows.
- Pioneer AI-First Security: Build robust governance and controls for AI products and internal tooling while harnessing AI to automate detection, vulnerability management, and threat response.
- Champion Customer Trust: Lead compliance programs (SOC 2, ISO 27001) backed by real controls, and represent Docebo with executive credibility in board updates, audits, and enterprise customer due diligence.
- Elevate Defense Operations: Strengthen security telemetry, threat intelligence, and detection across cloud and corporate environments to protect against emerging modern attack patterns.
- Empower High-Impact Teams: Lead and coach a talented security team, building a high-accountability culture focused on clear outcomes, rapid execution, and continuous learning.
YOUR SUPERPOWERS ⚡
- Proven Executive Leadership: Significant experience leading information security programs in a software, SaaS, or tech product environment with a track record of executive and board collaboration.
- Deep Technical Foundations: Hands-on mastery of application security, cloud security (AWS), infrastructure, identity systems, secure SDLC, and modern vulnerability management.
- Mandatory Certification: Active CISSP credential backed by a deep understanding of SOC 2, ISO 27001, privacy regulations, and enterprise SaaS security standards.
- Collaborative Business Driver: Exceptional ability to forge trusted partnerships across Product, Engineering, Legal, and Sales, acting as an enabler who balances security with business velocity.
- Outcome-Focused Execution: A clear track record of using metrics and business risk language to make decisive, risk-informed choices in complex, ambiguous environments.
BONUS POINTS 🎯
- AI Security Expertise: Hands-on experience securing AI-enabled products and LLMs, or utilizing AI tools to scale security operations and automated testing.
- Advanced Technical Certifications: Additional credentials such as CISM, CISA, CCSP, AWS Security Specialty, or GIAC, combined with offensive security or red teaming experience.
- Enterprise & Public Sector Reach: Proven experience navigating FedRAMP standards, public-sector requirements, and high-growth global SaaS expansion.
OUR HYBRID WORK PHILOSOPHY 🤝
Great work can happen anywhere but coming together helps us go further. Our team spends three days a week in the office (Tuesday-Thursday) to collaborate, solve problems, and learn from each other. With flexibility the rest of the week, it’s a balance designed to help everyone do their best work and keep growing.
OUR TOTAL REWARDS PHILOSOPHY 🎉
Our Total Rewards Philosophy centers around three core areas to reward and care for our People:
- Rewarding Impact: We lead with competitive pay to reward the impact, skills and traits that fuel our success.
- Fostering Holistic Wellbeing: We care deeply about and invest in the whole person with programs that support our people’s physical, mental, and financial well-being.
- Empowering Our Talent Culture: We build a culture of trust and empowerment by designing our rewards and benefits with transparency, equity, and flexibility, enabling our people to do their best work and stay for the long haul.
OUR PROMISE TO YOU 😍
- Financial Wellness: Own a piece of Docebo through our Employee Share Purchase Plan (ESPP) at a 15% discount, plus a competitive compensation package.
- Your Well-Being, Covered: You’ll get access to health benefits, so you can get the care you need when you need it.
- Rest, Relax, Repeat: Rest and recharge with paid vacation days, two company-wide Docebo Days, floating holidays for cultural celebrations, and your birthday off!
- Family First: We provide coverage offering you time with your little one(s) so you can soak up all those precious moments. Fun fact: we had 30 Docebian babies join the family in 2025!
- Connections That Count: Connect with global communities through our Employee Resource Groups (including PRIDE, DWA, BIDOC, and Green Ambassadors) and company-wide events that keep the fun rolling all year long.
ABOUT DOCEBO 💙
At Docebo, we create seamless, AI-powered learning experiences for over 3,000 customers worldwide. We have successfully achieved two IPOs (TSX: DCBO & NASDAQ: DCBO https://www.docebo.inc/home/default.aspx), been recognized as a top SaaS e-learning solution, and are growing exponentially in the process. We're a global company, with office across North America, EMEA, APAC, and beyond. Our team is guided by five core values—Grow Together Win Together, Build with Our Customer, Clear is Kind, Own Outcomes, Progress Over Perfection—that shape everything we do. If this resonates with you, now is the perfect time to join one of the fastest-growing learning technology companies in the world.
Docebo is an Equal Employment Opportunity employer https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf. We are committed to diversity and inclusion in our workforce. All qualified applicants and employees will receive consideration for employment regardless of their race, colour, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, citizenship status, age, disability, genetic information, or any other category protected under applicable law.
As a federal contractor, Docebo is committed to the principles of affirmative action and equal employment opportunity for protected veterans and individuals with disabilities. Docebo does not discriminate because of protected veteran status or on the basis of disability, and Docebo takes affirmative action to employ and advance in employment qualified protected veterans and individuals with disabilities.
Any individuals requiring a reasonable accommodation or would like to voluntarily disclose a disability or protected veteran status to assist with their employment application should send an e-mail to their recruiter directly.
Location: Remote (United States | Canada)
Workplace: Remote
1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing.
About 1Password
At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work.
If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future.
Security isn't a feature at 1Password. It is the product. We're looking for a Principal Product Manager to shape security strategy across the company, working with Security Engineering, who hold one of the highest technical bars in the industry, and with the product teams building everything our customers touch.
You'll be the bridge. You'll understand cryptographic and architectural detail well enough to earn the trust of our security engineers, and you'll translate what matters into clear priorities for feature teams. Just as importantly, you'll bring a deep respect for the customer: a security control nobody can stand to use makes everyone less safe. You'll help us find the design that's both rigorous and usable, and have the credibility to say so in a room full of experts
WHAT YOU'LL DO
- Partner with product teams on security early. Work with PMs and feature teams to understand their upcoming roadmaps, identify security requirements and threat-model implications before designs are locked, and make sure those needs are visible, prioritized, and resourced.
- Align Security Engineering with product strategy. Translate feature-team needs into prioritized security work, and make Security Engineering's priorities legible to the rest of the company so tradeoffs are made in the open.
- Own an independent security roadmap. Set direction for platform-level security investments, such as key management and recovery, the cryptographic foundations of our zero-knowledge architecture, authentication, and our long-term readiness for post-quantum cryptography.
- Lead our strategy for the AI era. Define how 1Password approaches agentic access to credentials, secrets for non-human identities and AI agents, and the trust models emerging around tools and protocols like MCP.
- Balance risk and usability with evidence. Help security engineers weigh real-world risk against user friction, using adoption, support, and telemetry data alongside threat models. Shipping with accepted, documented residual risk is sometimes the right call, and you'll help us make and defend those decisions.
- Represent 1Password to the security community. Engage with security researchers and our bug bounty program, speak at conferences, and contribute to the wider conversation about where credential security is heading.
- Raise the bar for product work. Coach PMs on security thinking, challenge assumptions constructively, and set the standard for how security-critical product work gets done.
OUR PHILOSOPHY ON PRODUCT CONSISTS OF FIVE CORE PILLARS:
- Focus and execution: Can you ship quickly and measure results?
- Customer empathy: Are you motivated first and foremost to solve customer problems?
- Effective communication: Can you bring the entire organization, horizontally and vertically, along on the journey?
- Go to market: Can you understand and drive business outcomes through product decisions?
- Technology: Articulating how our technology beats our competitors
Product Managers play a highly visible role at 1Password and are critical to the development and execution of our product strategy. As PMs, we are responsible for setting and championing a high bar for our products. At the Principal level, you also set the standard for how product work gets done. You coach, you challenge assumptions, and you make the whole team better. You must excel at prioritization, collaboration, and communication, while holding yourself and others accountable for measuring quality and business results. You will work with Engineering, Design, Security Research, and GTM teams to ensure every decision we make as a product is grounded in our commitment to verifiable security.
WHAT WE'RE LOOKING FOR
- 10+ years of product management experience, including significant time on security-critical products or platforms in a SaaS environment. We'll also strongly consider exceptional candidates with equivalent depth, such as security engineers or researchers who moved into product.
- Deep, demonstrable knowledge of security fundamentals: cryptography, authentication protocols, identity and access management, zero-knowledge and end-to-end encrypted system design, and threat modeling.
- Fluency in the credential and identity landscape, including passkeys, WebAuthn/FIDO, and the standards shaping how people sign in.
- A track record of earning credibility with security engineering teams, not just working alongside them.
- The ability to read and reason through technical specifications, security audits, and cryptographic design documents.
- Experience making and defending risk-based tradeoffs, and explaining them clearly to engineers, executives, and customers.
- A history of shipping security features that users actually adopt, and of using friction and adoption data to improve them.
- Experience setting strategy at the platform or infrastructure level, and influencing roadmaps you don't own without formal authority.
- Communication that scales from a security research paper to an executive briefing without losing precision in either direction.
- A strong point of view on how the security landscape is shifting, and the ability to connect it to concrete roadmap decisions.
STRONG PLUS
- Standing in the security community, through conference talks, publications, research, open-source work, or standards participation.
- Hands-on experience with AI security: agent identity and authorization, prompt injection, secrets management for automated systems.
- Experience with compliance and certification regimes such as SOC 2, FedRAMP, or FIPS.
- Prior work in vulnerability disclosure, incident response, or threat intelligence that gives you a practitioner's intuition.
- Experience running or working closely with a bug bounty program or researcher community.
WHAT YOU CAN EXPECT
- Working with a passionate, highly motivated Product and Security team that holds an exceptional bar and genuinely cares about getting it right
- A direct line to decisions that shape the security architecture millions of people depend on every day
- Empowerment to set long-term security product strategy and drive it through execution
- A culture where technical depth is respected, tradeoffs are named honestly, and shipping the right thing matters more than shipping fast
- A collaborative environment where the best argument wins, regardless of title
USA-based roles only: The annual base salary for this role is between $238,000 USD and $357,000 USD; 15% annual bonus, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
Canada-based roles only: The annual base salary for this role is between $208,000 CAD and $312,000 CAD; 15% annual bonus, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.
This posting is for an existing vacancy.
Our culture
At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first.
You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results.
How we work with AI
We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password.
This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others.
Our approach to remote work
We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.
What we offer
We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:
Health and wellbeing
👶 Maternity and parental leave top-up programs
🩺 Competitive health benefits
🏝 Generous PTO policy
Growth and future
📈 RSU program for most employees
💸 Retirement matching program
🔑 Free 1Password account
Community
🤝 Paid volunteer days
🏆 Peer-to-peer recognition through Bonusly
🌎 Remote-first work environment
*Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting.
You belong here.
1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.
Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs.
Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you.
Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.
1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.
Remote - Location: Mostly remote (within Germany), with monthly in-person collaboration at our Berlin officeHours: Part-time, 32 hours per weekContract: Fixed-termSalary: EUR 53,000 â 59,000 (at 32 hours per week)We are building a new capability that turns fragmented,...
Own security for Wrike's business systems SaaS tools such as Salesforce, Marketo, Salesloft, and the integrations that connect them, covering permissions, sharing rules, connected apps, OAuth scopes, and integrations. Build and maintain clear visibility into what data lives in these systems, why it's there, and how it flows between integrated tools.
Location: Remote
Workplace: Remote
ABOUT THE COMPANY
Rain is the global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Our technology allows partners to move, store, and use stablecoins instantly and compliantly through global payment cards, rewards, on/offramps, wallets, and cross-border rails. As both a Visa and Mastercard Principal Member, Rain issues cards that work at more than 175 million merchant locations in over 220 countries and territories. Built natively for stablecoins and trusted by more than 100 organizations worldwide, Rain delivers secure, scalable infrastructure that makes money move freely and instantly around the world.
You will have the opportunity to deliver massive impact at a hypergrowth company backed by some of the top investors in fintech, crypto, and SaaS. In January 2026, we closed a $250M Series C led by ICONIQ, valuing Rain at $1.95B, with Sapphire Ventures, Dragonfly, Bessemer Venture Partners, Galaxy Ventures, FirstMark, Lightspeed, Norwest, and Endeavor Catalyst also participating. If you're curious, bold, and excited to help shape a borderless financial future, we'd love to talk.
OUR ETHOS
We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and impact the roadmap and vision of our company.
ABOUT THE TEAM
Security Engineering is a small team that answers one question: was it built right? We run our own AI-driven red team against Rain's code and cloud, gate pull requests before they merge, and write the baselines that say how every system should be configured. Our blockchain work is covered. This role owns everything else: the backend services, APIs, cloud, and edge that move real money for real customers.
We work closely with Security Operations: we give them high-quality findings to coordinate fixes for, and clear configuration rules they can build detections on.
ABOUT THE TEAM
Security Engineering makes sure Rain is built right. We run our own AI-driven red team against our code and cloud, gate pull requests before they merge, and set the baselines for how every system is configured. This role owns everything outside blockchain: the backend services, APIs, cloud, and edge that move real money. We give Security Operations high-quality findings to coordinate fixes for, and clear configuration rules to build detections on.
ABOUT THE ROLE
You'll be Rain's application security expert and the quality bar for every non-chain finding we produce. The calls are yours: what's real, how bad it is, and what has to be fixed before launch. You'll hold the line with engineers when it matters, and make the case so they agree, not just comply.
WHAT YOU'LL DO
- Review red team findings before they reach engineers: reproduce them, cut false positives, set severity, and write tickets clear enough to fix without a meeting. Improve the scoring that grades them
- Harden our backend services and APIs, especially the money-moving paths. You'll often write the fix yourself
- Own edge defenses: DDoS protection, rate limiting, WAF rules, and abuse controls
- Write secure configuration baselines for our cloud, code, and SaaS, and turn them into automated checks
- Grow our PR security gate so more bugs are blocked before merge
- Own attack surface coverage, and run architecture reviews on new and high-risk systems
- Find, test, and pick the best security tools, whether we buy, adopt, or build
WHAT WE'RE LOOKING FOR
- 4+ years in application security, product security, or security-minded backend engineering
- You've owned security decisions. You can tell a senior engineer their design needs to change and keep a good working relationship
- You can read an unfamiliar codebase (TypeScript/Node.js) and find the bug that matters, and you know a scary-sounding finding from a real one
- Hands-on cloud security (ideally GCP), Terraform, and edge defenses like WAFs and rate limiting
- Experience with threat models or architecture reviews. You've run tool bake-offs and dropped tools that didn't earn their cost
- You'd rather ship a check than write a document, and you use AI tools heavily without trusting them blindly
BONUS ATTRIBUTES
- Fintech, payments, or card issuing background (PCI DSS a plus)
- Pentest, bug bounty, or red team experience
- Experience building security scanners, static analysis rules, or LLM-based review tools
- If you have the background: AI security for our agents and agentic payments, or corporate security alongside IT
THINGS THAT ENABLE A FULFILLING, HEALTHY AND HAPPY EXPERIENCE AT RAIN:
Unlimited time off 🌴 Unlimited vacation can be daunting, so we require Rainmakers to take 10 days minimum for themselves.
Flexible working ☕ We support a flexible workplace – work from home, come into an office, or both. We want everyone to work in an environment where they're their most confident and productive selves. New Rainmakers receive a stipend to set up a comfortable home workspace.
Easy to access benefits 🧠 For US Rainmakers, we cover 95% of your health, dental, and vision plan costs and 90% for your dependents, plus a 100% company-subsidized life insurance plan.
Retirement goals💡 Plan for the future with confidence. We offer a 401(k) with a 4% company match.
Equity plan 📦 Every Rainmaker gets an equity option plan so we all benefit from our success.
Health and Wellness 📚 High performance begins from within. Rainmakers receive a monthly stipend to be used for eligible health and wellness spending like gym memberships/fitness classes, massages, acupuncture - whatever recharges you!
In-office meals 🍜 Rainmakers working from the office enjoy lunch and dinner on us, covered with a DoorDash credit.
Team summits ✨ Summits play an important role at Rain. Time together helps us build relationships and a common destiny. Expect team and company offsites, both domestic and international.
Location: Remote, United States
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As Director of Regional Sales for GitLab's National Security Group (NSG), you'll lead a field-based team of Account Executives driving new and expansion revenue across US federal NSG departments. You'll coach and grow the team, spend time with key accounts, and lead large-deal strategy and executive negotiations. Your work will help agencies adopt GitLab's development, security, and operations (DevSecOps) platform through complex federal procurement processes.
You'll partner with senior leadership, Renewals, Customer Success, Product, and Marketing to align our sales approach with agency needs. This includes shaping offerings authorized under the Federal Risk and Authorization Management Program (FedRAMP), bringing field feedback into the roadmap, and building long-term growth within large agencies. You'll travel as needed for customer meetings and team engagements.
What you'll do
Recruit, hire, lead, and coach Account Executives covering NSG departments to achieve regional revenue and growth targets while building an accountable, inclusive team.
Lead new business and expansion strategy, generating and progressing pipeline across priority accounts to meet or exceed quarterly and annual bookings targets.
Own regional forecasting, opportunity data quality, and deal reviews. Use MEDDPICC (Metrics, Economic Buyer, Decision Criteria, Decision Process, Paper Process, Identify Pain, Champion, and Competition) to qualify opportunities and give senior leadership clear visibility into pipeline health, commitments, and risks.
Guide complex federal procurement processes with distributors and partners, including Carahsoft and systems integrators. Navigate contracting vehicles, funding cycles, and agency-specific buying processes to secure multi-year contracts and expansions.
Shape the sales approach for regulated environments, connecting FedRAMP-authorized offerings and mission-critical DevSecOps use cases to agency needs and increasing platform adoption.
Work with Renewals, Customer Success, Marketing, Product, and federal partners on account plans, product roadmap feedback, and campaigns that support retention and expansion.
Expand within large agencies through new workloads, cross-sells, and upsells, balancing near-term revenue with long-term platform adoption.
Meet customers in the field and travel as needed for key account meetings, large-deal reviews, and team engagements. Build senior executive relationships and lead negotiations while working effectively in GitLab's asynchronous environment.
What you'll bring
Experience in open source software, DevOps, or related enterprise technology sales.
A process- and data-driven approach to sales operations, including advanced use of Salesforce and other customer relationship management (CRM) and marketing automation tools.
Experience selling or leading teams in regulated or compliance-driven environments, such as FedRAMP or similar government software-as-a-service frameworks, or the ability to learn quickly in highly regulated markets.
Success selling and coaching teams through complex enterprise deals with large public sector accounts, including long sales cycles and multiple stakeholders.
Familiarity with MEDDPICC or a similar sales methodology, including pipeline generation, qualification, forecasting, and deal reviews.
Experience hiring, coaching, developing, and leading regional, field-based sales teams while building an accountable, collaborative, and inclusive team.
Skill in managing senior executive relationships and leading executive meetings and negotiations within large organizations with multiple departments and decision-makers.
Alignment with GitLab's values and leadership expectations. We welcome transferable skills in enterprise technology sales and team leadership from a range of backgrounds.
About the team
The NSG sales team is an all-remote organization. We collaborate asynchronously across regions and work with federal distributors and systems integrators, including Carahsoft, to support government customers.
Our work supports GitLab's mission to enable everyone to contribute to and co-create the software that powers our world. We value transparency and collaboration, and you'll have the autonomy and accountability to own your results.
The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our
benefits
and
equity
. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
United States Salary Range
$148,000
—
$248,400 USD
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: United States
Workplace: Remote
1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing.
About 1Password
At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work.
If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future.
Apono is now part of 1Password https://1password.com/. Together, we’re shaping the future of identity security for humans, machines, and AI agents. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. We deliver just-in-time, just-enough access governance, unleashing productivity without compromising security. If you’re excited to work alongside a team of curious, driven individuals and solve hard problems at scale, come join us and help build a safer, simpler digital future for everyone.
Artificial intelligence (AI) agents are becoming part of enterprise infrastructure—requesting access, handling credentials, interacting with production systems, and acting on behalf of people. As Senior Product Marketing Manager, Agentic Identity Security, you’ll shape how organizations understand and address this emerging security challenge. You’ll build the narrative, positioning, and market-entry strategy for Apono as part of 1Password, bringing fresh perspective to an evolving product and category while turning strategy into action.
How we’re using AI today
On the Marketing team, we’re growing our AI capability together and redesigning how work gets done. We’ve built agents to improve workflows focused on competitive intelligence, content creation, and campaign planning, helping us stay sharp, reduce context-switching, and surface the right information at the right time. AI helps us coordinate, execute, and uncover insights faster so we can spend more time on what’s most important: performance, judgement, and driving the future of 1Password.
This is a remote opportunity within the US.
What we're looking for:
- Bring experience in cybersecurity, deep technology, or business-to-business (B2B) software, with an understanding of technical buyers and complex markets.
- Bring a clear strength in product marketing, such as product launches, market-entry strategy, positioning, messaging, or narrative development.
- Think strategically while staying close to execution, turning ambiguous opportunities into clear priorities, plans, and outcomes.
- Work proactively and take ownership by identifying what needs to be done, building alignment, and moving the work forward.
- Communicate with clarity and confidence with executive, product, engineering, sales, and marketing audiences.
- Use AI tools and agents thoughtfully to improve research, planning, messaging, and workflow scale while maintaining sound judgment and a human point of view.
- Preferred: Have experience shaping an emerging category or working in a high-growth or changing organization.
What you can expect:
- Define the narrative and market-entry strategy for Apono’s next chapter as part of 1Password.
- Evaluate existing positioning and messaging, preserve what remains valuable, and evolve what no longer reflects the product or market.
- Build deep understanding of customers, personas, use cases, market dynamics, and the challenges organizations face as AI agents interact with enterprise infrastructure.
- Own messaging, product marketing strategy, launch planning, sales enablement, and the content direction that supports them.
- Partner closely with senior product, engineering, marketing, sales, and go-to-market leaders to connect strategy across the business.
- Bring ideas from strategy through execution, using customer and market feedback to refine the story and priorities.
- Help shape the capabilities and resources the product marketing function needs as the business grows.
The annual base salary for this role is between $152,000 USD and $220,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.
This posting is for an existing vacancy.
Our culture
At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first.
You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results.
How we work with AI
We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password.
This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others.
Our approach to remote work
We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.
What we offer
We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:
Health and wellbeing
👶 Maternity and parental leave top-up programs
🩺 Competitive health benefits
🏝 Generous PTO policy
Growth and future
📈 RSU program for most employees
💸 Retirement matching program
🔑 Free 1Password account
Community
🤝 Paid volunteer days
🏆 Peer-to-peer recognition through Bonusly
🌎 Remote-first work environment
*Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting.
You belong here.
1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.
Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs.
Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you.
Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.
1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.
Задачи:
— Быть основным контактным лицом для международных клиентов в сфере финтеха и ценных бумаг, реализовывать индивидуальные планы успеха, соответствующие бизнес-целям клиентов.
— Участвовать в презентациях и стратегических встречах с потенциальными клиентами вместе с командой по развитию бизнеса, помогая переводить потребности клиентов в решения агентства.
— Быть первым ответчиком на ежедневные запросы клиентов, технические вопросы и операционные эскалации, обеспечивая быстрые, точные и профессиональные решения.
— Руководить процессом онбординга новых клиентов, переводя обещания продаж в конкретные рабочие процессы по предоставлению услуг.
— Следить за показателями здоровья аккаунтов, проводить ежемесячные и квартальные обзоры бизнеса, выявлять возможности для дополнительной и перекрестной продажи в существующих аккаунтах.
— Сотрудничать с командами PR, контента и медиа для обеспечения соответствия кампаний финансовым требованиям и стандартам качества.
Требования:
— Минимум 3–5 лет профессионального опыта в управлении аккаунтами, клиентском успехе или отношениях с клиентами в маркетинговом/PR агентстве или компании в сфере финтеха/финансовых услуг.
— Непосредственный опыт или глубокое знакомство с финтехом, брокерскими услугами, торговыми платформами или рынками капитала.
— Отличные устные и письменные навыки английского языка, комфортное общение с руководителями высшего звена и международными заинтересованными сторонами.
— Подтверждённая способность участвовать в звонках по привлечению новых клиентов, оперативно обрабатывать запросы и быстро выстраивать доверие.
— Сильные организационные навыки с использованием CRM-систем (HubSpot, Salesforce), инструментов управления проектами (Asana, Monday.com) и средств презентации данных.
— Высокий эмоциональный интеллект, гибкость в решении проблем и сильное чувство ответственности за результаты клиентов.
Условия:
— Конкурентоспособная зарплата, соответствующая стандартам агентства и опыту.
— Полное социальное страхование (BPJS Kesehatan & BPJS Ketenagakerjaan).
— Полностью удалённая работа с любого места при наличии стабильного интернета.
— Работа с международными брендами финтеха и мультикультурной командой.
ГибридСША; 💹 401(k) Program with a 4% match (US Only); 🚗 Commuter Benefits (In-Office & US Only); We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds