Вакансии

Задачи: — Быть основным контактным лицом для международных клиентов в сфере финтеха и ценных бумаг, реализовывать индивидуальные планы успеха, соответствующие бизнес-целям клиентов. — Участвовать в презентациях и стратегических встречах с потенциальными клиентами вместе с командой по развитию бизнеса, помогая переводить потребности клиентов в решения агентства. — Быть первым ответчиком на ежедневные запросы клиентов, технические вопросы и операционные эскалации, обеспечивая быстрые, точные и профессиональные решения. — Руководить процессом онбординга новых клиентов, переводя обещания продаж в конкретные рабочие процессы по предоставлению услуг. — Следить за показателями здоровья аккаунтов, проводить ежемесячные и квартальные обзоры бизнеса, выявлять возможности для дополнительной и перекрестной продажи в существующих аккаунтах. — Сотрудничать с командами PR, контента и медиа для обеспечения соответствия кампаний финансовым требованиям и стандартам качества. Требования: — Минимум 3–5 лет профессионального опыта в управлении аккаунтами, клиентском успехе или отношениях с клиентами в маркетинговом/PR агентстве или компании в сфере финтеха/финансовых услуг. — Непосредственный опыт или глубокое знакомство с финтехом, брокерскими услугами, торговыми платформами или рынками капитала. — Отличные устные и письменные навыки английского языка, комфортное общение с руководителями высшего звена и международными заинтересованными сторонами. — Подтверждённая способность участвовать в звонках по привлечению новых клиентов, оперативно обрабатывать запросы и быстро выстраивать доверие. — Сильные организационные навыки с использованием CRM-систем (HubSpot, Salesforce), инструментов управления проектами (Asana, Monday.com) и средств презентации данных. — Высокий эмоциональный интеллект, гибкость в решении проблем и сильное чувство ответственности за результаты клиентов. Условия: — Конкурентоспособная зарплата, соответствующая стандартам агентства и опыту. — Полное социальное страхование (BPJS Kesehatan & BPJS Ketenagakerjaan). — Полностью удалённая работа с любого места при наличии стабильного интернета. — Работа с международными брендами финтеха и мультикультурной командой.

внедрением и эксплуатацией NTA решений (Suricata, PT NAD); внедрением и эксплуатацией NGFW (PT NGFW, Check Point и многие другие);

В роли инженера по безопасности приложений в AIFC предстоит заниматься обеспечением защиты программных продуктов, выявлением и устранением уязвимостей, а также внедрением современных методов безопасности. Кандидат должен обладать глубокими знаниями в области информационной безопасности, владеть инструментами анализа кода и тестирования на проникновение, а также иметь опыт работы с технологиями, применяемыми в разработке и эксплуатации приложений. Важны навыки работы с системами контроля версий, понимание принципов безопасного программирования и способность сотрудничать с командами разработчиков для повышения уровня безопасности продуктов.

Location: United States; Canada Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ As a Senior Security Engineer, Offensive Security, you'll help drive offensive security at Docker, putting our products, platforms, and cloud infrastructure under realistic adversarial testing to surface and drive out attack paths before real adversaries find them. You'll partner with engineering, product, and leadership to turn findings into durable fixes and to shape how security is designed into every Docker product. You'll apply your expertise in penetration testing, threat modeling, and exploit development to find and eliminate risks across Docker products and infrastructure. Working across cloud infrastructure (AWS, GCP, Azure), containerized environments, and AI/ML products, you'll implement proactive security solutions that scale with Docker's growth. This role offers the opportunity to help improve security programs at a company whose products are trusted by millions of developers worldwide. You'll work in a fast-paced, technically challenging environment where your security expertise directly impacts both Docker's platform and the broader container ecosystem. RESPONSIBILITIES: - Contribute to security initiatives that align with business goals, helping ensure security is a core component of our products and infrastructure - Support and help implement key security programs such as automated security design reviews, and vulnerability management - Build deep knowledge of software security and architecture, and act as a go-to resource for engineering teams - Partner with engineering to design and implement security architecture and controls across Docker products and platforms - Plan, scope, and execute penetration tests and red-team / adversary-emulation engagements against Docker's products and services - Develop proof-of-concept exploits and produce clear, risk-rated findings with actionable remediation guidance, then retest fixes to confirm closure - Build and maintain offensive security tooling and automation to expand testing coverage and repeatability - Perform security reviews and threat modeling (design, architecture, and code) across Docker products and services, including emerging AI products, and write automated security tests and exploits - Serve on rotating on-call schedule to respond to security events, investigate threats, and coordinate remediation efforts - Educate and collaborate with cross-functional teams (e.g., engineering, product) to promote security practices - Participate in Security Incident response QUALIFICATIONS - Have 3+ years in security engineering, including hands-on offensive security and penetration testing across applications and infrastructure - Possess 2+ years of hands-on development experience in Python or Golang - Demonstrate deep expertise in authentication, authorization, including technologies like OAuth, cryptography applications and Zero Trust principles. - Have strong hands-on experience with securing cloud ecosystems (e.g. AWS, GCP, Azure) - Have hands-on penetration testing experience across SaaS web applications and APIs., including manual exploitation beyond automated scanners - Are proficient with offensive tooling and techniques such as. Burp Suite, and OWASP frameworks - Can write security tests and develop exploits and proof-of-concepts that find real vulnerabilities in a product - Understand AI/ML security risks and mitigations, including prompt injection, data poisoning, model extraction, and adversarial attacks - Have practical experience using LLMs and agentic tooling to automate vulnerability discovery, reconnaissance, and pentesting workflows - Have a track record of building security programs and automations from scratch, applying risk-based prioritization - Have experience performing security reviews and building or improving security review automation - Have excellent communication skills, allowing you to explain complex security concepts clearly to technical and non-technical stakeholders - Understand industry standards, and actively keep up with emerging security technologies and models - Are a team player who drives security change via collaboration and cross-functional partnerships - Hold offensive security certifications such as OSCP, OSWE, OSEP, GXPN, GPEN, or CRTO - Have published CVEs, original security research, or conference talks Bonus if you: - Have experience with container escape, Kubernetes attack paths, or cloud red teaming - Have experience testing AI/ML systems for issues like prompt injection, model extraction, and data poisoning WHAT TO EXPECT FIRST 30 DAYS: - Meet with security team and key partners across engineering - Gain access to team owned systems, and internal documentation - Complete security awareness training and compliance onboarding - Review application architecture, tech stack and data flow - Review risk registry and annual roadmap - Familiarize oneself with team workflows and processes - Shadow a fellow security engineer during their on-call/secops rotations FIRST 90 DAYS: - Conduct security review on emerging Docker products - Scope and execute your first penetration test against a Docker product or service - Actively participate in architecture design reviews with the team - Contribute to a Security-owned project or initiative - Collaborate with Docker developers to validate and resolve discovered vulnerabilities - Enhance incident response capabilities by participating in on-call rotation and post-incident activities - Create and maintain security documentation and runbooks FIRST YEAR OUTLOOK - Contribute to the security roadmap for improving security controls - Strengthen Zero Trust architecture and least privilege access controls - Enhance security monitoring and anomaly detection - Perform security reviews for major product releases - Own and run recurring penetration tests and adversary-emulation exercises across Docker products, and engage with external researchers - Support audits and ensure compliance with SOC 2, ISO 27xxx - Advocate for “security by design” in all product features - Become well versed in Docker products and emerging AI technologies Docker does not offer visa sponsorship for this role.   Compensation & Equity Canada: CA$271,150 – CA$434,000 + equity United States: $194,150 – $312,950 + equity ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Location: Remote - Costa Rica Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . Job Summary If you like owning problems end to end, making security a default property of everything we build, and working closely with engineering, we want to meet you. Bugcrowd is looking for security engineers who move beyond standard tooling and drive measurable security outcomes our customers can rely on. You will help us shape a culture where security helps others succeed, not just points out problems. Essential Duties and Responsibilities Partner Closely with Engineering : Refine architecture, validate new features, and drive security investment while prioritizing engineering velocity Build Security Paved Roads : Contribute to the secure defaults, libraries, and "paved roads" that systematically eradicate entire classes of vulnerabilities rather than fixing bugs one by one Create Feedback Loops : Tune security tooling such as SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters Be our Best Customer : Ensure our bug bounty program can be a model for other customers. Experiment with new ways to leverage the creativity of the crowd. Provide feedback on new platform features to engineering and product Own Projects End to End : Lead cross-functional product security projects from scoping through delivery, influencing product and engineering roadmaps and clearly communicating risk to both technical and non-technical stakeholders Amplify our Impact : Use code and automation as a lever to scale coverage and eliminate repetitive work. Build systems based on incentives and accountability rather than just bureaucratic process Education, Experience, Knowledge, Skills, and Abilities 3+ years of experience in product security, application security, or secure software development Can review code, automate tasks, and build security tooling in at least one modern programming language (e.g., Python, Go, Ruby, Java) Hands-on experience with core application security practices — threat modeling, secure code review, and automated testing (SAST, DAST, SCA) — and a solid grasp of common vulnerability classes (e.g., OWASP Top 10) Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product. Bachelor's degree in engineering, computer science or relevant field, or equivalent practical experience Bonus Points (Preferred but not required) Previous experience with Bug Bounty or vulnerability disclosure programs A background in building "paved roads" or secure-by-default internal libraries to eliminate entire classes of vulnerabilities Hands-on experience securing cloud-native platforms and Infrastructure as Code (e.g., Terraform, AWS, GCP, Kubernetes, Docker) Experience working within a fast-paced, high-growth security or SaaS company Working Conditions and Physical Requirements The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and / or standing - Must be able to remain in a stationary position 50% of the time Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - remote, work-from-home 100% of the time Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

Private family office, Cyprus, is looking for an independent senior security reviewer to assess finished technical work before it goes live. ✔️Requirements: senior hands-on experience in cloud security / AppSec / DevSecOps, proven independent reviews (case examples), clear reporting for non-technical readers.

• Формирование 12-месячного security roadmap; • Access & Device Security: IAM / RBAC, MFA / 2FA, VDI / Remote Desktop, MDM, шифрование;

Location: Hong Kong, Hong Kong SAR Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Opportunity We are seeking a highly motivated Technology and Security Risk Manager within the Second Line of Defence (2LOD). You will be responsible for continuously refining and scaling the Technology and Security oversight program, guiding first-line of defence (1LOD) execution, and providing independent risk challenge. You will be a key member of OKX's Risk team, helping to shape and scale the firm’s 2LOD Security & Data Risk programs. You’ll work closely with stakeholders including Engineering, Product, Risk, Compliance and Internal Audit. You will play a key role in developing and implementing a comprehensive Technology and Security Risk Management program. This includes 2LOD oversight of technology defects, issues, and incidents, Risk and Control Self-Assessments (RCSA), key risk indicators (KRIs) and reporting. The ideal candidate has a strong understanding of Technology Risk (including Technology Resilience, Change Management, SDLC, CI/CD pipeline, and software quality assurance) and Cybersecurity (covering internal and external threat vectors, control weaknesses, and organisational cyber hygiene). We are looking for a candidate with a strong drive for improvement and career growth. What You’ll Be Doing Collaborate with internal stakeholders across the company to proactively identify, escalate, assess, and mitigate Technology and Security risks, ensuring adherence to the Technology Risk Policy. Providing oversight of Technology and Security Risk incidents and issues, and partnering with 1LOD stakeholders to enhance related processes and ensure effective oversight Lead the Technology Risk and Control Self-Assessment (RCSA) process from a 2LOD perspective, ensuring adherence to the ERM RCSA methodology, and providing effective challenge and oversight of 1LOD Security risks and controls. Support the Security Key Risk Indicators (KRIs) definition, monitoring, and reporting. Supporting the implementation and ongoing enhancement of Governance, Risk, and Compliance (GRC) systems to enable effective risk oversight Advocate and support the implementation of Risk Management frameworks for technology stakeholders, serving as a trusted advisor for the first line. Stay up to date on emerging trends and regulations in the digital asset space, proactively identifying and addressing new risk considerations. What We Look For In You 8+ years in information security, with a strong security architecture or technical security background; fintech, crypto or cloud-native experience preferred. Practical experience designing, implementing or reviewing cloud, IAM, cryptographic, network or application security controls. Experience in risk oversight, or readiness to transition, with the technical judgement to challenge controls and recommend proportionate improvements. Ability to threat-model systems and assess technical evidence, including architecture diagrams, IAM policies, logging configurations and dependencies. Working knowledge of cloud resilience, multi-region/AZ failover, RTO/RPO and disaster recovery testing. Familiarity with NIST CSF, ISO 27001, SOC 2 and relevant privacy requirements, including GDPR and PDPA, and their application to technical controls. Ability to independently assess and test controls, evaluate incidents and drive remediation with engineering and security teams; GRC platform experience desirable. Clear written and verbal communication, translating technical findings into prioritised actions for business stakeholders and governance committees. Strong stakeholder management skills, providing constructive challenge and collaborating across functions and geographies. A proactive, adaptable approach, with confidence taking ownership and improving practices in a fast-paced environment. A relevant degree or equivalent practical experience; CISSP, CCSP, cloud security/architecture, CISA or CISM qualifications desirable. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Please note that Hong Kong is a group-level service hub, and OKX does not carry on a business of operating a virtual asset trading platform in Hong Kong . Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Singapore, Singapore Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Opportunity We are seeking a highly motivated Technology and Security Risk Manager within the Second Line of Defence (2LOD). You will be responsible for continuously refining and scaling the Technology and Security oversight program, guiding first-line of defence (1LOD) execution, and providing independent risk challenge. You will be a key member of OKX's Risk team, helping to shape and scale the firm’s 2LOD Security & Data Risk programs. You’ll work closely with stakeholders including Engineering, Product, Risk, Compliance and Internal Audit. You will play a key role in developing and implementing a comprehensive Technology and Security Risk Management program. This includes 2LOD oversight of technology defects, issues, and incidents, Risk and Control Self-Assessments (RCSA), key risk indicators (KRIs) and reporting. The ideal candidate has a strong understanding of Technology Risk (including Technology Resilience, Change Management, SDLC, CI/CD pipeline, and software quality assurance) and Cybersecurity (covering internal and external threat vectors, control weaknesses, and organisational cyber hygiene). We are looking for a candidate with a strong drive for improvement and career growth. What You’ll Be Doing Collaborate with internal stakeholders across the company to proactively identify, escalate, assess, and mitigate Technology and Security risks, ensuring adherence to the Technology Risk Policy. Providing oversight of Technology and Security Risk incidents and issues, and partnering with 1LOD stakeholders to enhance related processes and ensure effective oversight Lead the Technology Risk and Control Self-Assessment (RCSA) process from a 2LOD perspective, ensuring adherence to the ERM RCSA methodology, and providing effective challenge and oversight of 1LOD Security risks and controls. Support the Security Key Risk Indicators (KRIs) definition, monitoring, and reporting. Supporting the implementation and ongoing enhancement of Governance, Risk, and Compliance (GRC) systems to enable effective risk oversight Advocate and support the implementation of Risk Management frameworks for technology stakeholders, serving as a trusted advisor for the first line. Stay up to date on emerging trends and regulations in the digital asset space, proactively identifying and addressing new risk considerations. What We Look For In You 8+ years in information security, with a strong security architecture or technical security background; fintech, crypto or cloud-native experience preferred. Practical experience designing, implementing or reviewing cloud, IAM, cryptographic, network or application security controls. Experience in risk oversight, or readiness to transition, with the technical judgement to challenge controls and recommend proportionate improvements. Ability to threat-model systems and assess technical evidence, including architecture diagrams, IAM policies, logging configurations and dependencies. Working knowledge of cloud resilience, multi-region/AZ failover, RTO/RPO and disaster recovery testing. Familiarity with NIST CSF, ISO 27001, SOC 2 and relevant privacy requirements, including GDPR and PDPA, and their application to technical controls. Ability to independently assess and test controls, evaluate incidents and drive remediation with engineering and security teams; GRC platform experience desirable. Clear written and verbal communication, translating technical findings into prioritised actions for business stakeholders and governance committees. Strong stakeholder management skills, providing constructive challenge and collaborating across functions and geographies. A proactive, adaptable approach, with confidence taking ownership and improving practices in a fast-paced environment. A relevant degree or equivalent practical experience; CISSP, CCSP, cloud security/architecture, CISA or CISM qualifications desirable. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Strasbourg, France We currently have a vacancy for a Senior Security Engineer to offer his/her services as an expert remotely. In the context of the first assignment, the successful candidate will be integrated in the team of the company that will closely cooperate with a major client’s IT team on site. Your tasks Develop, implement, maintain, test, and continuously improve cybersecurity solutions, products and services; Integrate cybersecurity technologies into the organization's infrastructure, ensuring secure configuration, optimal performance and operational resilience; Implement, monitor, and maintain security controls, procedures, patches, and system hardening measures to address vulnerabilities and ensure compliance with security policies; Assess, monitor, and report on the security posture and performance of systems, services, and cybersecurity solutions, recommending improvements where appropriate; Provide cybersecurity support and technical guidance to users, customers, and internal stakeholders; Collaborate closely with Operations and cross-functional teams to implement, maintain, and optimize security-related processes and operational activities; Develop scripts, automation, and software components to support cybersecurity operations, improve efficiency, and enhance security capabilities; Identify, troubleshoot, and resolve security-related issues, ensuring timely remediation and continuous service improvement; Prepare technical documentation and communicate security updates, recommendations, and progress to relevant stakeholders; Work collaboratively with team members and business stakeholders to deliver secure, reliable, and resilient technology solutions. Requirements University degree in IT or relevant discipline, combined with minimum 10 years of working experience in software systems security, cyber security and information security practices; Proven experience designing, developing, and delivering end-to-end authentication, authorization and data protection solutions for enterprise environments; Proven experience with enterprise security technologies and protocols, including SSL/TLS, X.509, SAML, OAuth, OpenID Connect, JWT, AWS KMS, KMIP, and PKCS#11; Experience designing, developing and securing both on-premises and cloud-based security solutions; Experience securing complex enterprise environments, including data centers and distributed infrastructures; Experience applying Secure Software Development Lifecycle (SSDLC) principles and security-by-design practices; Experience working in Agile software development environments and using modern collaboration and DevSecOps tools; Knowledge of programming and scripting for developing, automating, and integrating cybersecurity solutions; Knowledge of Linux and Unix operating systems, including secure configuration, administration and system hardening. Knowledge of network architecture and security, including TCP/IP, HTTP/HTTPS, IPsec, routing protocols, firewalls, routers and switches; Knowledge of cryptographic concepts and algorithms, including AES, GCM, PBKDF2, HMAC, SHA-2 and key management principles; Knowledge of operating system security, network security, security controls and modern cybersecurity technologies. Excellent command of the English language. Benefits If you are seeking a career in an exciting and dynamic company, where you will offer your services as part of a team of a major European Institution, operating in an international, multilingual and multicultural environment where you can expect real chances to make a difference, please send us your detailed CV in English, quoting reference . We offer a competitive remuneration (either on contract basis or remuneration with full benefits package), based on qualifications and experience. All applications will be treated as confidential. EUROPEAN DYNAMICS (ED) ( www.eurodyn.com ) is a leading Software, Information and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Stockholm, London, Nicosia, Hong-Kong, Valetta, etc). The company employs over 1000 engineers, IT experts and consultants (around 3% PhD, 36% MSc and 53% BSc or equivalent). We design and develop software applications using state-of-the-art technology. The group generates annual revenues in the range of EURO 40 million, with an EBITDA in the range of 20%. The value of our contract portfolio exceeds EURO 250 million. EUROPEAN DYNAMICS is a renowned supplier of IT services to government institutions, multinational corporations, public administrations and multinational companies, research and academic institutes. As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion. EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published in www.eurodyn.com/privacy . By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorise ED to process your personal data for the purposes of the company's recruitment opportunities, in line to the Policy.

Location: Strasbourg, France; Italy We currently have a vacancy for a Security Officer to offer his/her services as an expert remotely. In the context of the first assignment, the successful candidate will be integrated in the team of the company that will closely cooperate with a major client’s IT team on site. Your tasks Develop, implement, and oversee the organization's information security, IT risk management, and governance frameworks; Advise on security strategy, policies, standards, architecture, resilience, and operational security requirements; Develop and maintain the Information Security Management Framework (ISMF), translating business objectives into effective security controls and risk management processes; Establish and monitor IT governance, risk, compliance, audit, and reporting processes to ensure adherence to regulatory and organizational requirements; Conduct security risk assessments, vulnerability assessments, IT security audits, and business continuity planning, recommending appropriate mitigation measures; Develop and maintain security policies, procedures, standards, documentation, and operational guidelines; Lead enterprise-wide security initiatives, promoting security awareness and ensuring the consistent application of security standards across projects, systems, and services; Provide technical leadership in identifying and resolving complex security issues and implementing effective security controls; Manage industrial and personnel security clearance processes and liaise with relevant security authorities where required; Support strategic technology planning by advising on current and emerging cybersecurity risks, technologies, and best practices. Requirements University degree in IT or relevant discipline, combined with minimum 8 years of relevant working experience; At least 7 years of experience in a combination of risk management, information security and IT; Experience in contract, vendor, and managed services procurement and management; Hands-on experience with cloud computing technologies and virtualized environments; Experience working in Agile software development and DevSecOps environments; Excellent knowledge of information security, risk management and business continuity frameworks and standards (e.g., ISO/IEC 27001 and related standards); Knowledge of cybersecurity principles, security best practices, tools and technologies; A professional security management certification will be considered an asset; Excellent command of the English language. Benefits If you are seeking a career in an exciting and dynamic company, where you will offer your services as part of a team of a major European Institution, operating in an international, multilingual and multicultural environment where you can expect real chances to make a difference, please send us your detailed CV in English, quoting reference . We offer a competitive remuneration (either on contract basis or remuneration with full benefits package), based on qualifications and experience. All applications will be treated as confidential. EUROPEAN DYNAMICS (ED) ( www.eurodyn.com ) is a leading Software, Information and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Stockholm, London, Nicosia, Hong-Kong, Valetta, etc). The company employs over 1000 engineers, IT experts and consultants (around 3% PhD, 36% MSc and 53% BSc or equivalent). We design and develop software applications using state-of-the-art technology. The group generates annual revenues in the range of EURO 40 million, with an EBITDA in the range of 20%. The value of our contract portfolio exceeds EURO 250 million. EUROPEAN DYNAMICS is a renowned supplier of IT services to government institutions, multinational corporations, public administrations and multinational companies, research and academic institutes. As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion. EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published in www.eurodyn.com/privacy . By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorise ED to process your personal data for the purposes of the company's recruitment opportunities, in line to the Policy.

Location: Athens, Greece Are you a passionate and driven Junior Cyber-Security Engineer looking for an exciting new challenge? EUROPEAN DYNAMICS is seeking a talented individual to join our team and play a crucial role in ensuring the security and integrity of our cutting-edge projects. This is your chance to contribute to the success of a dynamic organization and advance your career in a collaborative and innovative environment. What You'll Do: Assist in the Design, implementation and support of security services, solutions, and infrastructure; Develop and implement tools to assist in the detection, prevention, and analysis of security threats; SIEM Operations (setup, monitoring, reporting); Vulnerability scanning, monitoring and reporting; Assist with the development of reports and documentation. Requirements Must-Have Qualifications: University degree (AEI/ TEI); Linux and Windows administration; Good knowledge of network, systems, and application intrusion techniques; Technical documentation skills; Excellent command of English, both written and spoken. Nice-to-Have Qualifications: Experience in developing, designing, and planning security concepts with Firewalls, IDS/IPS, and VPN systems; MSc in Information/Cyber Security; Familiarity with the ISO27001 Security Standard. Benefits We believe in rewarding talent and dedication. Here's what you can expect as part of our team: Competitive full-time salary; Private Health Coverage on the Company’s group program; Flexible Working Hours; Top-of-the-Line Tools; Professional Development: Benefit from language courses, specialized training, and continuous learning opportunities; Career Growth: Work with some of the most innovative and exciting specialists in the industry; Dynamic Work Environment: Thrive in a setting that offers challenging goals, autonomy, and mentoring, fostering both personal and company growth. If you want an exciting challenge, work with some of the coolest technologies, and enjoy your time doing it, then join us! Submit your detailed CV in English, quoting reference: ( JCSE/10/26 ). You may also consider all our other open vacancies by visiting the career section of our website ( www.eurodyn.com ) and follow us on Twitter (@EURODYN_Careers) and LinkedIn. EUROPEAN DYNAMICS (ED) ( www.eurodyn.com ) is a leading European Software, Information, and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Berlin, Stockholm, London, Nicosia, Valetta, Vienna, Den Haag, Hong Kong, etc.) The company employs over 1100 engineers, IT experts, and consultants (around 3% PhD, 41% MSc, and 54% BSc). We design and develop software applications using integrated, state-of-the-art technology. Our current IT projects have a value exceeding 300 million EURO. EUROPEAN DYNAMICS is a renowned supplier of IT services to European Union Institutions, international organizations, European Agencies, and national government Administrations in 40 countries and 4 continents. As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, colour, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion. EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published at www.eurodyn.com/privacy . By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorize ED to process your personal data for the purposes of the company's recruitment opportunities, in line with the Policy.

Location: Athens, Greece Are you an experienced ICT Security Manager fluent in English, looking for an exciting new opportunity? We currently have a vacancy for a dynamic professional to join our team in Athens, with occasional onsite missions at client premises across Europe. What You'll Do: Responsible for ensuring security in IT operations and infrastructure; Maintain security tools and technology; Monitor and audit security policy compliance; Security assessments of information systems; Provide guidance in the implementation of IS security policies; Drive Security specifications for information systems; Define security incident response plans. Requirements University degree in related subjects or at least 7 years of relevant professional experience; Minimum 5 years of experience as an IT security manager on top of the above requirement; Strong experience with quality control procedures, management, and execution of vulnerability testing and corrective measures in IT Systems; Experience with IT-Projects based on Agile Methodologies; Excellent command of English, both written and oral; Ability to integrate in an international environment and to cooperate well in a team; IT Security certification (CISM, CISSP, CISA) would be an asset. Benefits We believe in rewarding talent and dedication. Here's what you can expect as part of our team: Competitive full-time salary; Private Health Coverage on the Company’s group program; Flexible Working Hours; Top-of-the-Line Tools; Professional Development: Benefit from language courses, specialized training, and continuous learning opportunities; Career Growth: Work with some of the most innovative and exciting specialists in the industry; Dynamic Work Environment: Thrive in a setting that offers challenging goals, autonomy, and mentoring, fostering both personal and company growth. If you want an exciting challenge, work with some of the coolest technologies, and enjoy your time doing it, then join us! Submit your detailed CV in English, quoting reference: ( ICTSM/10/26 ). You may also consider all our other open vacancies by visiting the career section of our website ( www.eurodyn.com ) and follow us on Twitter (@EURODYN_Careers) and LinkedIn. EUROPEAN DYNAMICS (ED) ( www.eurodyn.com ) is a leading European Software, Information, and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Berlin, Stockholm, London, Nicosia, Valetta, Vienna, Den Haag, Hong Kong, etc.) The company employs over 1100 engineers, IT experts, and consultants (around 3% PhD, 41% MSc, and 54% BSc). We design and develop software applications using integrated, state-of-the-art technology. Our current IT projects have a value exceeding 300 million EURO. EUROPEAN DYNAMICS is a renowned supplier of IT services to European Union Institutions, international organizations, European Agencies, and national government Administrations in 40 countries and 4 continents. As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, colour, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion. EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published at www.eurodyn.com/privacy . By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorize ED to process your personal data for the purposes of the company's recruitment opportunities, in line with the Policy.

Location: Athens, Greece We are seeking a Cyber Security Engineer, who specializes in the deployment and configuration of advanced security tools and methodologies, to expand our Information Security team. Your role will involve leveraging state-of-the-art technologies to strengthen security defenses, using AI-based penetration testing, managing CTI sharing platforms, managing SIEM and IDS/IPS, orchestrating responses with NG-SOAR systems, and engaging in simulation training on cyber-range platforms. This individual should also be fluent in English and willing to serve as an expert in Athens, Greece. The successful candidate will have the opportunity to join a high-performing team comprised of diverse experts working collaboratively towards common objectives. We are searching for someone who exemplifies qualities such as responsiveness, integrity, and reliability and possesses excellent analytical, problem-solving, and organizational skills. Additionally, the ability to work effectively within a team is crucial, as this role involves supporting projects funded by the European Commission and national research frameworks. Initiative, flexibility, and a strong sense of responsibility are qualities we highly value in our ideal candidate. What You'll Do: Design, deploy, and manage AI-based penetration testing initiatives/frameworks to proactively identify vulnerabilities and mitigate potential security threats; Configure, manage, optimize, and maintain CTI sharing platforms such as MISP and OpenCTI, ensuring robust and timely threat intelligence distribution; Implement NG-SIEM solutions/technologies, based on tools such as ELK stack, Graylog, Wazuh, Grafana, Velociraptor, InfluxDB/Telegraf; Deploy, fine-tune, and oversee NG-SOAR platforms/solutions such as Shuffle, Wazuh, TheHIVE, Cortex, and IRIS, streamlining and enhancing incident response capabilities/activities; Configure and maintain behavioral IDS/IPS systems, including Snort, Suricata, and SecurityOnion, to detect and prevent malicious activities; Stay up-to-date with the latest security trends, tools, and practices, including CACAO Standards (STIX 2.1, TAXII) for threat intelligence and sharing; Contribute to the technical documentation; Collaborate with interdisciplinary teams to ensure seamless security operations and incident management. Requirements University degree in Computer Science, Information Security, or related field; preferably with postgraduate qualification at MSc or PhD level; Minimum of 5 years of experience in cyber security engineering, working directly with technical teams with proven track record; Experience in software design and development; Demonstrated experience in deploying and configuring: CTI sharing platforms such as MISP and OpenCTI; NG-SOAR platforms/technologies (Shuffle, Wazuh, TheHIVE, Cortex); NG-SIEM technologies including ELK, Graylog, Wazuh, Grafana, Velociraptor, InfluxDB/Telegraf; IDS/IPS solutions such as Snort, Suricata, and SecurityOnion. Familiarity with CACAO Standards (STIX 2.1, TAXII) is a strong plus; Exceptional problem-solving skills and the ability to work in a dynamic, fast-paced environment; Excellent command of English and Greek, both written and oral; Good interpersonal, organization, and communication skills, with the ability to work in a diverse team environment; Good analytical skills, as well as a proactive attitude towards solving problems; At least 2 years experience specifically in National and European research programs. Benefits We believe in rewarding talent and dedication. Here's what you can expect as part of our team: Competitive full-time salary; Private Health Coverage on the Company’s group program; Flexible Working Hours; Top-of-the-Line Tools; Professional Development: Benefit from language courses, specialized training, and continuous learning opportunities; Career Growth: Work with some of the most innovative and exciting specialists in the industry; Dynamic Work Environment: Thrive in a setting that offers challenging goals, autonomy, and mentoring, fostering both personal and company growth. If you want an exciting challenge, work with some of the coolest technologies, and enjoy your time doing it, then join us! Submit your detailed CV in English, quoting reference: ( CS/10/26 ). You may also consider all our other open vacancies by visiting the career section of our website ( www.eurodyn.com ) and follow us on Twitter (@EURODYN_Careers) and LinkedIn. EUROPEAN DYNAMICS (ED) ( www.eurodyn.com ) is a leading European Software, Information, and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Berlin, Stockholm, London, Nicosia, Valetta, Vienna, Den Haag, Hong Kong, etc.) The company employs over 1100 engineers, IT experts, and consultants (around 3% PhD, 41% MSc, and 54% BSc). We design and develop software applications using integrated, state-of-the-art technology. Our current IT projects have a value exceeding 300 million EURO. EUROPEAN DYNAMICS is a renowned supplier of IT services to European Union Institutions, international organizations, European Agencies, and national government Administrations in 40 countries and 4 continents. As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, colour, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion. EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published at www.eurodyn.com/privacy . By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorize ED to process your personal data for the purposes of the company's recruitment opportunities, in line with the Policy.

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE: As a Global Security Program Manager on Notion’s Global Safety & Security team, you’ll help protect our people, workplaces, and operations across a distributed global portfolio. This role exists to bring greater consistency to physical security programs as Notion scales—strengthening technology, vendor operations, incident readiness, and local execution without losing the welcoming experience we want employees and guests to feel. You’ll work across Workplace, People, IT, Legal, business leaders, vendors, and building partners, balancing hands-on operations with repeatable program design. This is a remote role based in the United States, with travel to Notion offices, events, and other locations expected—up to 50% based on operational needs. A GREAT TUESDAY: - Review regional differences in access control or visitor management and turn them into clear priorities for the global parity project. - Work with a vendor or building manager to resolve a security gap, balancing local context with global standards. - Draft an incident update, using AI to improve clarity, then validate the details and judgment behind the message. - Coordinate international project work while responding thoughtfully to an urgent operational issue.   WHAT YOU'LL ACHIEVE: - By your 90th day, kick off a global physical security parity project that creates shared visibility into regional practices, gaps, and priorities. - By your 90th day, use AI to accelerate clear, effective communications, reduce busywork, and keep detail-heavy work accurate and reviewable. - By the end of your first year, take ownership of Notion’s physical security technology program, improving how systems, data, and operating practices support safe and resilient workplaces. - By the end of your first year, demonstrate program ownership in one major physical security or safety pillar, such as business continuity and disaster recovery, event security, travel risk management, monitoring operations, crisis management, guard force operations, or governance. - By the end of your first year, deliver multiple international projects with clear plans, sound judgment, and effective coordination across regions, vendors, and cross-functional partners. SKILLS YOU'LL NEED TO BRING: - Demonstrated ability to own physical security or safety programs across multiple sites or regions, including security technology, access control, incident response, or vendor operations. - Effective project management skills, with the ability to move multiple international projects from ambiguity to clear plans, decisions, and delivery. - Clear, thoughtful communication with internal partners, vendors, building management, and local stakeholders—especially when translating security requirements into practical action. - A service-oriented approach and eagerness to help create secure, welcoming workplace experiences; you bring curiosity, ownership, and sound judgment to how you work with others. - Novice AI proficiency and a willingness to use AI as a practical collaborator for communication, accuracy checks, documentation, and reducing repetitive work. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $208,000 – $233,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74 and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Staff Security Governance Engineer, you will be the individual contributor who owns how GitLab writes, maintains, communicates, and measures its security policies and standards. You will turn emerging regulations, including AI regulation, into clear requirements that engineering, product, and legal teams can act on, and you will use automation to keep governance lightweight and continuous rather than a point-in-time exercise. You will sit on the Security Governance team within Security Assurance and work closely with Security Compliance, Security Risk, and GRC Engineering. You will report to the Director, Customer Trust & Security Governance. What you'll do Policies and standards Own the end-to-end lifecycle of GitLab's security policies, standards, procedures, and guidelines: drafting, stakeholder review, approval, publication, annual review, and retirement. Define and run the exception management process, including risk-based approvals, expiry tracking, and trend reporting that shows where policies need to change. Run policy attestation and investigate non-adherence. Keep policies clear, practical, and aligned with how GitLab's engineering teams work in a DevSecOps environment. Regulatory and framework alignment Monitor emerging regulations and standards (e.g., EU AI Act, NIST AI RMF, ISO 42001, sector or regional requirements) and partner with Legal well ahead of compliance deadlines to assess impact and update policy. Maintain mappings between our policies and frameworks such as SOC 2, ISO 27001, ISO 42001, FedRAMP, and NIST CSF, so requirements are written once and reused. Measurement and assurance Define KPIs for policy adherence and report trends to Security leadership. Run targeted internal assessments of adherence and drive remediation to closure. Support audit activities by coordinating evidence, testing, and remediation management. Customer trust Support customer questionnaires and customer meetings, and help turn recurring customer requests into better policies and self-service content. Automation and AI Identify and implement automation and AI-assisted workflows for policy management, evidence collection, control monitoring, and assessment work, in partnership with GRC Engineering. Technical leadership Act as a technical and program leader across Security, Product, Legal, and Engineering, influencing without direct authority. Mentor other team members and help set the direction of the Security Governance roadmap. What you'll bring 10+ years in security governance, GRC, or IT risk, with hands-on ownership of a policy and standards lifecycle and measurable outcomes, ideally at a global technology company. Working knowledge of SOC 2, ISO 27001, ISO 42001, FedRAMP, and NIST CSF, including how to put them into practice, not only how to read them Experience creating and maintaining an enterprise Information Security Management System (ISMS), ideally including hands on involvement in ISO 27001 certification or recertification. Understanding of cloud, SaaS, and DevSecOps practices, and the ability to write policy that engineers will follow. A risk-based mindset that balances compliance with real security risk. Demonstrated use of automation or AI to reduce manual GRC work. Strong written and verbal communication, including translating technical concepts for engineers, executives, auditors, and customers. Experience collaborating with Security, Product, Legal, and Engineering. Certifications such as CISSP, CISM, CISA, or similar are highly desirable. What success looks like First 30 days: Assessed the current policy library and exception process, built relationships with key stakeholders, and proposed a prioritized roadmap. First 90 days: Uplift the existing security policy library to align with NIST CSF, ISO 27001/27017/27018/42001, and PCI-DSS. First 120 days: A refreshed review cadence is in place, exception reporting is running, and can demonstrate a measurable improvement in policy adherence. First six months: Develop Policy as Code and collaborate with Security, Product, Legal, and Engineering for implementation into existing workflows. About the team The Security Assurance organization helps GitLab build and maintain trust by strengthening how we approach security, compliance, and risk. Security Governance sits within it and owns customer trust, security awareness, policies and standards, and other governance functions. Our counterparts are Security Compliance, Security Risk, and GRC Engineering. You will join a small team of four direct reports under the Director, where each person has broad scope and visible impact. We work remote-first and asynchronously, and we write things down and share them openly, so you'll draft and revise policies and standards in the open with input from Security, Legal, Product, and Engineering. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $168,000 — $238,000 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Renton, Washington, United States We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. At Wizards of the Coast, we connect people around the world through play and imagination. From our genre-defining games like Magic: The Gathering® and Dungeons & Dragons® to our growing multiverse, we continue to innovate and build new ways to foster friendship and connection. That’s where you come in! Wizards of the Coast has built a centralized platform, AI, and IT team that serves shared technology across WOTC and Hasbro. We are led by the belief that providing industry-leading tools, innovative technology, and excellent support allows our teams to focus on delivering outstanding player experiences first and foremost. Wizards is looking for someone who is a world-class leader of platform and cloud security, with a focus on securing AI workloads. You will be partnering closely with other enterprise and platform teams to lead how we secure our developer and AI platforms across the company. This person needs to be able to understand how to interact with and handle partner expectations while balancing security, ease of use, and broadest impact across the company. The developers on the team use heavy research based development to find the best solutions and mix of technologies in the rapidly growing field of AI. We are a team of people with strong work life balance while working to deliver top quality technology! If this is exciting to you, please apply! What You'll Do: Deliver operational security procedures for testing, validating, and securing cloud and AI workloads Run red teaming process for agentic, LLM, and machine learning solutions Partner with security team on internal tools, processes, and validation procedures for AI and developer products Run red-team processes for AI workloads Build out our automated software review/patch/remediation processes Partner with internal teams to build our next level secure developer platform What You'll Bring: 7+ years in driving cloud security Experience deploying AI SaaS tools, AI cloud workloads Deep knowledge of what good SDLC patterns look like Experience with managing and deploying organizational cloud solutions Thoughtful leadership fostering collaboration and mutual support We are an Equal Opportunity / Affirmative Action Employer Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. If you have a disability and require assistance in this application process and need to request an accommodation, please contact your recruiter or coordinator. #Wizards The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package. Pay Range $163,000 — $244,600 USD Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include: Health & Wellness Time Off to Recharge Financial Well-being Life & Family Support Volunteer and Community Initiatives Learning & Development Exclusive Perks Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.

Location: United Arab Emirates Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. We are looking for a Deputy Regional Information Security Officer to own ICT security, operational resilience, and regulatory compliance across a portfolio of entities at different stages of maturity, from established licensed operations to new markets launching under frameworks. This is not a support function. You will be the named security officer for your entities, accountable to their boards and their regulators. This is a high visibility, high trust role for a security governance professional who thrives at the intersection of technology, compliance, and financial services, and who is energised by applying established group frameworks to the local needs of a growing regulated entity. Payward is one of the world's most trusted and secure digital asset platforms, operating across a growing network of regulated entities spanning Europe, the Middle East, and Asia Pacific. As we expand into new markets and deepen our regulatory footprint, the demand for embedded, senior-level ICT security leadership at the entity level has never been higher.   THE OPPORTUNITY - Prepare, contribute and report to regional risk governance and board committee meetings, highlighting control status, risk exposure, and readiness - Execute risk assessments and control testing across UAE operations in line with VARA cybersecurity guidelines and security best practices - Maintain and review Business Impact Assessments (BIA), integrating findings into global resilience planning - Contribute to Business Continuity Plan (BCP) documentation, testing, and updates, including entity-specific scenarios - Collaborate with Group Security and IT to: - Align UAE-specific regulatory controls with global policies and control frameworks - Contribute to the development of security policies to meet international and UAE compliance requirements - Conduct security control validation and document evidence for internal/external audits - Participate in remediation planning for audit findings and track progress to closure - Support the RISO in preparing and submitting regulatory documentation to regulators - Prepare and present security and resilience reports for internal governance committees and local entity management - Assist in responses to regulatory examinations, including due diligence and compliance queries - Liaise with compliance and legal teams to interpret regulatory changes and propose control adaptations - Participate in the regional incident response process, assist with post-incident reviews, and support continuous improvement activities - Coordinate with cross-functional stakeholders to embed security requirements into operational processes WHAT YOU WILL DO - Regulatory Governance - Serve as the named ICT security officer for your appointed entities, with formal accountability for security risk, ICT governance, and resilience oversight at board level - Prepare and present security, risk, and resilience materials to entity boards, with material review and coaching from the Global RISO Lead beforehand - Act as the primary point of contact for VARA and other relevant regulatory authorities on ICT and security matters -- including examinations, inspections, licensing interactions, and ongoing supervisory dialogue - Support entity go live processes by implementing and localizing established group ICT governance frameworks for new market launches, ensuring they meet UAE regulatory requirements and entity specific needs - As the portfolio evolves, engage with additional regulatory frameworks with support from the broader RISO team - ICT Risk and Security - Lead ICT and security risk assessments for your appointed entity, escalating material risks through local governance and the Global RISO Lead - Maintain and adapt entity level policies and procedures to align with group standards and UAE regulatory requirements - Coordinate control testing, evidence documentation, and audit preparation with global security and compliance teams - Manage the classification, escalation, and regulatory reporting of ICT-related incidents within the timeframes required by applicable regulators - Operational Resilience - Lead business impact assessments, critical function mapping, and business continuity planning at the entity level - Oversee continuity and recovery testing, ensuring outputs meet regulatory expectations and feed back into global resilience planning - Maintain oversight of ICT third-party dependencies and outsourcing arrangements in line with regulatory requirements - Group Liaison - Act as a key local liaison between UAE entities, the RISO team, Group Security, and Compliance - Drive local implementation of group frameworks, policies, and resilience standards, adapting them where jurisdiction-specific requirements demand - Represent entity priorities in group-led security initiatives and governance forums WHAT YOU BRING - 7+ years of experience in information security governance, ICT risk management, or regulatory compliance in a regulated financial services, fintech, or virtual asset environment - Direct experience as a named regulatory contact, involvement in regulatory examinations, supervisory interactions, licensing processes, or equivalent - Familiarity with UAE regulatory frameworks. Experience with VARA or other virtual asset / crypto-native regulatory regimes is a significant advantage and strongly preferred - Demonstrated ability to implement, adapt, and maintain compliance or governance frameworks within a regulated environment - Experience conducting risk assessments, business impact analyses, and resilience planning at the entity level - Familiarity with ICT outsourcing and third-party risk management within group structures - Ability to translate technical risk into board-level narrative and regulatory-grade documentation - Comfortable operating across multiple jurisdictions simultaneously, each at a different stage of regulatory maturity - Strong project management skills and the ability to drive outcomes across cross-functional, globally distributed teams - Certifications such as CISSP, CISM, CRISC, CISA, or ISO27001 Lead Implementer preferred - Familiarity with EU frameworks such as DORA and MiCA is strongly preferred WHY THIS ROLE - You will hold a named role within a regulated entity with accountability and board-level visibility - You will operate at the frontier of virtual asset regulation -- VARA is one of the most advanced and fastest-evolving crypto regulatory frameworks in the world, and you will be shaping how Kraken meets it from day one of market entry - You will build ICT governance programs from scratch for new market entries, not inherit and maintain what others have set up - Exposure to local governance forums, regulators, and senior stakeholders, with remote guidance and preparation support from the Global RISO Lead - The scope of this role is intentionally designed to grow -- as Kraken's entity footprint expands, so does the portfolio and the regulatory breadth you will be exposed to, potentially including Asian and EU frameworks such as DORA - You will join a remote-first, international team shaping the future of crypto asset governance and resilience across some of the world's most demanding regulatory environments Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice