Вакансии

Location: Paris; New York; US (EST); US Workplace: Remote ABOUT MORPHO Morpho is a leading Decentralized Finance (DeFi) lending protocol backed by a16z crypto, Paradigm, Ribbit Capital, Apollo, Vaneck, Coinbase Ventures, Variant and 50 others to build an open credit network giving anyone, anywhere, access to the best possible terms. Morpho is experiencing exponential adoption, with over billion in deposits on the network and used by institutional clients including Bitwise, Galaxy, and Anchorage Digital and the largest crypto exchanges, such as Coinbase, Binance, and Kraken. Now, Morpho is scaling its team of contributors to establish itself as the open credit network, not just of DeFi, but of the world.   WHY MORPHO EXISTS Everyone has the potential to build something great for the world. But fulfilling that ambition almost always requires more: people willing to trust you with their capital. Yet access to capital still depends on where you live, who you know, and which institutions are willing to trust you. Even when capital is available, it sits fragmented across disconnected networks and hidden behind intermediaries. The result is a system that fails most of the people it should serve. Borrowers overpay. Lenders earn less than they should. Many are shut out entirely, not because they are unworthy of credit, but because today's infrastructure was never built to connect them. Morpho exists to solve this. Full article here https://morpho.org/blog/why-morpho-exists/. LOCATION: Paris or remote (from -5h GMT up to +2h GMT to ensure sufficient overlap with the rest of the team). ABOUT THE ROLE: As Head of Security, you'll define and drive Morpho's security strategy across the entire organization - corporate IT, cloud and infrastructure, application, supply chain, identity, incident response, threat intelligence, and counterparty security - and you'll build the team and function to deliver it. This is a hands-on leadership role: in the early days you'll personally do the work while you hire, and you'll stay close enough to the technical detail to earn the trust of a deeply technical organization. You'll also be Morpho's credible security voice, internally to leadership, and externally to the integrators, institutions, and ecosystem partners who depend on us. You'll partner closely with Engineering on infrastructure and deployment integrity, and with our Integration team, which works with various partners across the Morpho ecosystem. RESPONSIBILITIES: - Own and continuously evolve Morpho's security strategy and roadmap across, cloud/infrastructure, application, supply-chain, identity, and operational security. - Build and lead the security function - hire, grow, and develop the team, recruiting skillsets across security operations and application security. - Oversight of the IT function - Stay hands-on. Personally execute critical security work - threat modeling, architecture review, control implementation, and incident command - while the team scales. - Set the governance architecture: a coherent security framework that ties tooling and controls together, rather than accumulating tools in isolation. - Own incident response end to end - runbooks, incident command, severity and escalation structure, and market communication during an event. - Build and run a counterparty security program for curators and partners - identity verification, screening, operational diligence, and bidirectional incident-coordination channels. - Lead Morpho's certification strategy (e.g. SOC 2, ISO 27001), meeting both the spirit and the letter sustainably. - Represent Morpho's security posture externally - to fintechs, financial institutions, and the broader ecosystem - and internally to executives. - Partner cross-functionally with Engineering, Protocol, and Integrations, driving security outcomes through both direct ownership and influence. WHAT SUCCESS LOOKS LIKE: FIRST 30 DAYS - You've built a clear, independent picture of Morpho's posture, architecture, threat model, and in-flight work - and pressure-tested the existing strategy against it. - You've met the team and established working relationships with the people who own the surfaces you'll most depend on. - You understand the path-to-funds attack surface in depth and have an early, evidence-based view of the highest-severity risks and quick wins. - You know exactly where incident-response readiness stands today. FIRST 60 DAYS - You've published a clearly prioritized security roadmap with clear sequencing, owners, and the rationale for what's deferred and aligned leadership behind it. - You've defined the team build-out plan and opened the first hire. - You're personally driving the top-severity gaps - identity and authentication enforcement, deployment guardrails, and a documented incident-response runbook among them. - You've set the governance framework and the certification path in motion. FIRST 90 DAYS - Demonstrable progress closing the highest-priority gaps, with key controls enforced rather than optional. - A documented incident-response capability that's been validated by at least one tabletop exercise. - Hiring underway, and a clear operating rhythm established with Engineering, Protocol, and Integrations. - Morpho's external security posture is taking shape - trust surface, counterparty security program, and ecosystem engagement - and you're recognized internally and externally as Morpho's credible security voice. MUST-HAVE EXPERIENCE & SKILLS: - 10+ years in security, several of them building or leading a security function, ideally at a crypto/web3, fintech, or financial-services company where security is core to the business. - Strong grasp of the crypto/web3 threat model - Proven experience building and growing a security team from a small base, recruiting across security operations and application/infrastructure security. - Deep, hands-on technical expertise across cloud, infrastructure, CI/CD, supply-chain, identity, and application security - you do the work, not just direct it. - Owned incident response end to end, including incident command and external communication. - Sharp prioritization and the ability to galvanize action through hard and soft influence, including driving outcomes through teams you don't own. - Exceptional, organized, responsive communication - credible to executives and to external audiences from fintechs to Fortune 500 institutions. - Humble. NICE TO HAVE: - An established network and public profile in the security or crypto-security community, and comfort representing security work publicly (talks, writing, framework contribution). - Offensive security depth, or experience standing up red/blue capabilities. - Familiarity with institutional and regulatory expectations and threat-sharing networks (e.g. Crypto ISAC, TIBER-style frameworks). - Taken an organization through certifications (SOC 2, ISO 27001, or equivalent) PERKS & BENEFITS We design benefits around deep work and growth, so you can do the best work of your career. Expect fair, top-tier compensation, real flexibility, time together in Paris, great health coverage, and support to keep learning.   EQUAL OPPORTUNITY We welcome applicants from all backgrounds and hire based on talent, potential, and values alignment.

• Ensure the security of the company’s server, network, and cloud infrastructure. • Monitor and analyze information security events to detect attacks, scanning activity, anomalies, and unauthorized access attempts.

🕹 Список обязанностей: Выстроить централизованную систему IT-безопасности и управления инфраструктурой для всех юридических лиц группы компаний. Управление доступами — разделение данных, дисков и папок по юридическим лицам, централизованная выдача и отключение доступов, контроль onboarding/offboarding.

Location: Berlin Office; Bosnia; Norway; Estonia; Latvia; Slovenia; Netherlands; Hungary; Kosovo; Portugal; Poland; Serbia; Germany; Austria; Finland; Montenegro; Albania; Lithuania; Slovakia; Ireland; Bulgaria; Denmark; Belgium; Czech Republic; United Kingdom; Croatia; Spain; Greece Workplace: Remote The AI orchestration of your wildest imagination. n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits. Backed by a fiercely inventive community and 500+ builder-approved integrations, we’re changing the way people bring systems together and scale ideas for impact. Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve: - Cultivated a community of more than 650,000 active developers and builders - Earned 190K+ GitHub stars, making us one of the world’s Top 40 most popular projects - Backed by top investors, from Sequoia’s first German seed to our SAP's recent strategic investment - bringing us to a $5.2bn valuation That’s the company we’ve built. Now we’d love to see what you can build. If you’re applying, try n8n out - whether you’re technical or not - and share a screenshot of your first workflow with us. The easiest place to start is here: app.n8n.cloud/register http://app.n8n.cloud/register. We’re in a defining moment of an incredible journey. Come and build with us. 🎯 Your main goal will be to identify and reduce security risks across n8n's product and internal systems, using threat modelling, hands-on security expertise, and cross-functional collaboration to help teams design, build, and operate more secure systems. You'll join our growing security team at a pivotal stage, acting as a trusted security partner to teams across the business. You'll help us build a move from reactive security management to a proactive, scalable security practice. Here's what you'll be driving: THREAT MODELLING, RISK ASSESSMENT & SECURITY DESIGN - Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems, identifying vulnerabilities and recommending practical mitigations. - Partner with Engineering, Cloud, IT, and Data teams to review security designs, define actionable security requirements, and influence the implementation of appropriate controls. - Help teams embed security into their development processes through secure coding guidance, design reviews, documentation, and security tooling that enables them to identify and address risks independently. VULNERABILITY MANAGEMENT & COORDINATED DISCLOSURE - Participate in the security triage rotation, assessing incoming vulnerability reports, validating findings, and prioritising remediation based on severity and business impact. - Collaborate with engineering teams to coordinate vulnerability remediation, verify fixes, and support secure patch and release processes. - Help manage our vulnerability disclosure and bug bounty programmes, including engagement with security researchers, coordinated disclosures, and GitHub Security Advisories. SECURITY OPERATIONS & INCIDENT READINESS - Help establish and improve logging, detection, and protective monitoring capabilities across our infrastructure, corporate systems, and internal applications. - Develop and improve incident response processes, runbooks, and exercises to strengthen our ability to detect, investigate, and respond to security incidents. - Work closely with system owners to identify security gaps, prioritise remediation, and verify that implemented controls effectively reduce risk. CUSTOMER TRUST & COMPLIANCE ENGINEERING - Support SOC 2 compliance by helping establish continuous control monitoring, automated evidence collection, and processes that make security assurance part of everyday operations. - Collaborate with Sales, Solutions Engineering, and Customer Success to respond to customer security assessments and build reusable resources that streamline future requests. - Partner with Legal, Finance, IT, and other stakeholders to assess security risks, improve security policies and controls, and strengthen trust with enterprise customers. We're hiring two Security Engineers with complementary strengths, so you don't need to be an expert in every security domain. REQUIREMENTS MUST-HAVES - 🔍 Threat Modelling & Risk Assessment: You have hands-on experience assessing real-world systems, identifying security risks, determining defensible severity levels, and recommending practical controls that teams can implement. - 🛠️ Technical Security Expertise: You can validate security findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation when needed to demonstrate risks or improve security processes. - 🔐 Security Engineering Experience: You've worked hands-on in infrastructure, product, or application security within a product-focused organisation, with a strong understanding of how modern systems are designed and secured. - 🤝 Cross-functional Influence: You're comfortable acting as an internal security consultant, advising teams, challenging technical decisions constructively, and influencing stakeholders without direct authority. - 🎯 Risk Remediation & Ownership: You've helped secure systems you don't directly own, translating security findings into actionable requirements and working with responsible teams to ensure effective remediation. - 🤖 AI & LLM Fluency: You're comfortable using LLM-assisted tooling and understand its limitations, security implications, and potential failure modes. - ✍️ Clear Communication: You can explain complex security risks, document technical findings, and provide practical guidance that engineers and non-technical stakeholders can confidently act on. You also bring deep expertise in at least two of the following areas: - 💻 Application Security: You've developed security checks, engineering guardrails, tooling, or guidance that helps product teams build and ship secure software. - ☁️ Platform Security: You have experience securing a major cloud provider and Kubernetes environments, including areas such as sandboxing, multi-tenancy, or identity. - 🔑 Corporate Security: You've worked on identity and access management, endpoint security, employee access lifecycles, or data access controls across corporate environments. - 🚨 Security Monitoring: You've implemented logging, protective monitoring, or security detection capabilities that support effective investigation and incident response. - 📋 Security Assurance & Compliance: You've supported SOC 2 or ISO 27001 from an engineering perspective, including implementing technical controls or automating compliance evidence collection. NICE-TO-HAVES - 🐛 Vulnerability Disclosure: You've helped operate bug bounty or coordinated vulnerability disclosure programmes, including publishing security advisories such as GHSAs or CVEs. - 🧠 AI & Agent Security: You have experience assessing or securing LLM-powered applications and AI agents, including risks related to permissions, tool access, prompt injection, or sensitive data. - 🏢 Corporate IT Tooling: You're familiar with platforms such as Okta, Azure, or Drata and their role in securing corporate systems and supporting compliance. - 🌍 Open-source Ecosystems: You've worked with open-source or source-available products, contributed to security communities, or are already familiar with n8n. - 🎯 Penetration Testing: You have practical penetration testing experience and can independently identify, demonstrate, and help remediate security vulnerabilities. - 🌱 Early-stage Security Experience: You've been an early security hire or helped establish security practices in a startup or rapidly scaling organisation. Why join us? At n8n, you'll help shape security at a defining stage of our growth. We're building a security practice that goes beyond reacting to vulnerabilities, and you'll play a key role in how we identify risks, influence engineering decisions, and establish security practices that scale with the business. You'll work across a broad range of challenges, from securing AI-powered product features and our source-available automation platform to improving corporate security, strengthening incident readiness, and making compliance more automated. You'll have direct exposure to teams across the company, the opportunity to influence important technical decisions, and the autonomy to turn your expertise into measurable security improvements. Sound like a challenge you're excited to take on? Apply now — and help us build the future of secure automation. n8n is an equal opportunity employer and does not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, gender identity, age, marital status, veteran status, or disability status. We can sponsor visas to Germany; for any other country, you need to have existing right to work. Our company language is English. You care about diversity and inclusion? We do too! Check out our Diversity, Inclusion and Belonging initiatives at n8n https://www.notion.so/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35?pvs=21 (https://www.notion.so/n8n/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35). Location disclaimer: If you see multiple job postings for the same role, it is most likely because we're hiring remotely for this role and posting in different locations to make sure every potential candidate can see the role. Please apply to the location you're the most likely to work from in the future. BENEFITS - Competitive compensation 💸 – We offer fair and attractive pay. - Ownership 💪 – Our core value is to “empower others,” and we mean it—you’ll get a slice of n8n with equity. - Work/life balance 🏖️ – We work hard but ensure you have time to recharge: - Europe: 30 days of vacation, plus public holidays wherever you are. - US: 20 vacation days, 8 sick days, plus public holidays wherever you are. - Health & wellness 🩺 – - Europe: We provide benefits according to local country norms.* - US: Multiple low-premium, low-deductible medical plans with coverage for individuals and families—plus a no-cost premium HDHP option with a pre-seeded HSA—along with dental and vision coverage. - Future planning 💰 – - Europe: We provide pension contributions according to local country norms.* - US: 401(k) retirement plan with a 4% employer match. - Financial security 🛡️ – - Europe: We provide benefits according to local country norms.* - US: Company-paid short-term and long-term disability insurance, plus life insurance to support you and your loved ones. - Career growth 📈 – We hire rising stars who grow with us! You’ll get €1K (or equivalent) per year to spend on courses, books, events, or coaching to level up your skills. - A passionate team 🤩 – We love our product, and we prove it with regular hackathons where we see who can build the coolest thing with it! - Remote-first 🌏 – Our team works remotely across Europe, with regular off-sites for team bonding. Some roles, like sales in the US, are hybrid—please check the job description. - Giving back 🤝 – We're big fans of open source, and you'll get $100 per month to support projects you care about. - Transparency 🙏 – We all know what everyone’s working on, how the company is doing—the whole shebang. *Country and/or State specific details provided in your employment agreement.

Location: Budapest WorldQuant develops and deploys systematic financial strategies across a broad range of asset classes and global markets. We seek to produce high-quality predictive signals (alphas) through our proprietary research platform to employ financial strategies focused on market inefficiencies. Our teams work collaboratively to drive the production of alphas and financial strategies – the foundation of a balanced, global investment platform. WorldQuant is built on a culture that pairs academic sensibility with accountability for results. Employees are encouraged to think openly about problems, balancing intellectualism and practicality. Excellent ideas come from anyone, anywhere. Employees are encouraged to challenge conventional thinking and possess an attitude of continuous improvement. Our goal is to hire the best and the brightest. We value intellectual horsepower first and foremost, and people who demonstrate an outstanding talent. There is no roadmap to future success, so we need people who can help us build it. Technologists at WorldQuant research, design, code, test and deploy firmwide platforms and tooling while working collaboratively with researchers and portfolio managers. Our environment is relaxed yet intellectually driven. We seek people who think in code and are motivated by being around like-minded people. The Role : We are seeking a diligent and driven security operations specialist with strong hands-on technical skills, proven problem solving ability and excellent communication skills. As an security operations specialist at WorldQuant you will work closely with our technologists, researchers and portfolio managers to ensure systems are following best practices, perform incident response, provide patch and vulnerability remediation guidance, and support the identity and authorization infrastructure of the firm. Responsibilities (including but limited to): Research CVEs and other threat intelligence to formulate and deploy a response Operate and manage WorldQuant’s secrets and authentication management tool instances Develop tooling for continuous audit, code analysis and other security analysis activities Monitor and operate detection tools and respond to identified security issues in the environment Provide operational support for Authentication, Identity and other security infrastructure. Operate and improve the firms security monitoring and detection and infrastructure Provide customers support for foundational components such as Kerberos, SSH, SSL and more. Requirements : Degree in a technical or quantitative discipline from a top tier University Solid understanding of UNIX security. Knowledge of industry standard tools beneficial - (eg gitlab, nix, redhat linux, claude, jira, etc) Scripting experience, preferably in python. Experience operating security infrastructure, developing integrations of security products. Ability to communicate and design solutions related to security from first principles. Experience with Linux, Kerberos, SSL, SSH and  Active Directory Experience with agentic development Strong verbal and written communication skills in English What We Offer: Competitive compensation package Core benefits include: premium private health insurance and life insurance with savings plan Support for every aspect of life through Employee Assistance Program and fully covered sick leave Strong culture of learning and development: training courses, library, guest speakers, share and learn events, global conferences Regular offsite team buildings, annual conferences and occasional global summits – opportunity to travel and connect with our local and global teams Employee resources groups with strong diversity and inclusion culture #LI-DN1 By submitting this application, you acknowledge and consent to terms of the WorldQuant Privacy Policy. The privacy policy offers an explanation of how and why your data will be collected, how it will be used and disclosed, how it will be retained and secured, and what legal rights are associated with that data (including the rights of access, correction, and deletion). The policy also describes legal and contractual limitations on these rights. The specific rights and obligations of individuals living and working in different areas may vary by jurisdiction. Copyright © 2025 WorldQuant, LLC. All Rights Reserved. WorldQuant is an equal opportunity employer and does not discriminate in hiring on the basis of race, color, creed, religion, sex, sexual orientation or preference, age, marital status, citizenship, national origin, disability, military status, genetic predisposition or carrier status, or any other protected characteristic as established by applicable law.

Location: PL Workplace: remote Overview: SOFTSWISS continues to expand the team and is looking for an experienced IAM Security Engineer to join us. We are seeking a hands-on professional with strong expertise in identity and access management, IAM integrations, and access lifecycle automation, who shares our culture and values. Purpose of the role: You will be responsible for designing, implementing, and maintaining secure and scalable identity and access management solutions, integrating IAM services across enterprise systems, and automating access lifecycle processes to ensure efficient and secure access management. Key responsibilities: Architect and implement IAM-related integrations using SCIM, SAML, OAuth, OIDC, and APIs. Lead automation of access lifecycle management processes. Design and implement RBAC/ABAC models across enterprise systems. Troubleshoot and resolve complex IAM-related incidents Integrate IAM services into CI/CD and Infrastructure-as-Code workflows. Provide technical expertise during identity-related investigations. Define secure configuration standards for IAM platforms. Develop and maintain high-quality technical documentation. Required Experience: Skills Advanced practical expertise in identity federation and modern authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect). Deep hands-on experience with Keycloak administration and configuration, including realm management, client configuration, role mapping, identity brokering, and custom authentication flows. Proven ability to design, build, and optimize Joiner/Mover/Leaver (JML) workflows using Adaxes or analog , including automation rules, business logic, and approval flows. Strong understanding of RBAC/ABAC implementation patterns. Experience designing and implementing secure API integrations (REST APIs, token-based authentication, service-to-service communication). Advanced troubleshooting and debugging capabilities across IAM ecosystems. Strong automation and scripting skills (e.g., PowerShell, Python, Bash) Ability to translate security requirements into scalable IAM solutions. Knowledge Strong knowledge of IAM architecture patterns and federation models. In-depth understanding of authentication flows, token lifecycle management, and access control enforcement mechanisms. Knowledge of identity lifecycle orchestration patterns and directory service integrations (e.g., Active Directory). Familiarity with PAM integration and privileged access governance concepts. Experience 3+ of experience in IAM or security engineering roles within enterprise environments. Proven hands-on experience administering and engineering solutions on the Keycloak platform, including realm design, client configuration, identity brokering, custom authentication flows, role mapping, and token management. Experience designing and implementing secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect). Hands-on experience building and optimizing automated Joiner/Mover/Leaver (JML) workflows using Adaxes, including approval logic and lifecycle orchestration. Demonstrated experience improving access lifecycle efficiency through automation and process redesign. Experience troubleshooting complex IAM, SSO, and federation-related incidents. Experience supporting identity-related security investigations and audit activities. Education and Qualification Bachelor’s or Master’s degree in Computer Science, Information Security, or related field. Advanced security certifications preferred (e.g., CISSP, CIAM, vendor IAM certifications). Main Advantages Private health insurance Sports benefits Comprehensive Mental Health Program Free English lessons (online) Local language courses Paid time off Maternity leave support Referral program rewards Upskilling, internal workshops, and participation in professional conferences and corporate events

Location: Poland Workplace: remote About Finom   Finom is a European tech startup headquartered in Amsterdam, and we’re on a journey towards revolutionizing the financial landscape for entrepreneurs worldwide. Our mission is to develop an all-in-one financial B2B solution that integrates banking functions, accounting, financial management, and invoicing into a seamless, mobile-first platform.   We recently closed a €115 million Series C equity round (around $133 million), bringing our total funding to approximately $346 million. This significant investment follows a $105 million growth funding round from General Catalyst, a long-term backer since 2021 known for supporting companies like Airbnb, HubSpot, KAYAK, and Stripe.   Finom's platform goes beyond traditional banking, offering invoicing and a growing suite of features, including AI-enabled accounting, aiming to simplify financial management for entrepreneurs. We're actively expanding our reach across key EU markets like Germany, France, the Netherlands, Italy, and Spain.   At Finom, we’re not just redefining the entrepreneurial experience — we’re empowering our employees to make a real difference. Your work matters, and your impact extends far beyond product metrics. We nurture innovation and an inspiring work environment where bold ideas thrive, prioritizing thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and our business as a whole.   Maintaining our start-up spirit, we prioritize thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and, of course, our business. About the role Finom is a licensed EMI operating across several EU markets, where information security and compliance are a big part of how we work. We're looking for an Information Security Officer to join our Cyber Security team and take ownership of security compliance and risk management day to day. You won't be starting from a blank page. We already have a mature, certified ISMS and established processes for risk management, audits, vendor assessments and reporting. Your role is to get to know what we have, keep it running well, spot opportunities to make it better and make sure compliance works in practice, not just on paper. You'll report directly to the CISO and work closely with our Cyber Security and Engineering teams, as well as Risk, Legal & Compliance, Internal Audit and other teams across the company. What You Will Be Doing - Maintain the ISMS and ICT risk management framework records: document and records register, control ownership and evidence repository. - Perform and refresh information security risk assessments, maintain the risk register, prepare risk treatment plans and track their implementation with control owners. - Prepare for and go through internal and external audits, certifications and assessments: own the calendar, collect evidence, work directly with auditors and track findings to closure. - Run periodic checks of control design and operating effectiveness and raise gaps for remediation. - Draft and maintain information security policies, procedures and guidelines and prepare them for annual review and approval. - Collect and analyse ISMS KPIs and KRIs and prepare the regular security and risk reporting for management. - Perform security assessments of new suppliers and periodic reassessments of existing ones together with Risk, Legal and the DPO. - Prepare responses to security and compliance questionnaires from partners, customers and regulators. - Review new projects, products and vendors from an information security and compliance perspective. - Track changes in cybersecurity, ICT risk and privacy regulation and supervisory guidance, assess impact and propose required changes. - Keep company-wide security awareness and training materials relevant and up to date. - Automate evidence collection, control checks, questionnaire answering and reporting with templates, scripts and AI tooling. Who You Are - 4+ years of experience in information security compliance, ISMS, GRC or related areas. - Practical experience with ISO/IEC 27001: working with an ISMS and preparing for and going through certification or surveillance audits. - Experience with information security risk assessments, risk registers and risk treatment plans. - Experience answering security questionnaires and due diligence requests from partners, customers or regulators. - Able to translate standards and regulatory requirements into practical controls, procedures and evidence that people actually follow. - Hands-on and self-driven: you own tasks end to end, work directly with people to solve problems and do not wait for a perfect methodology before acting. - Open to AI tools and automation and actively use them in day-to-day work. - Strong written English and clear documentation skills. Nice to Have - Experience in banking, payments or an EMI. - PCI DSS, SWIFT CSP or payment scheme assessments. - Knowledge of DORA, NIS2 and GDPR, including working with a DPO on RoPA and DPIA. - Vendor security assessment and third-party risk experience. - Certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CRISC or CISM. What You Will Get In Return   Make a genuine impact on the product   Join our upward trajectory, and grow with us. We provide the resources and opportunities for continuous personal and professional development, empowering you to make a genuine impact on our evolving product.   Work in the EU   Embark on this exciting journey with us and enjoy the flexibility of traveling and working remotely or in a hybrid model across Europe.   Become a stock options holder   Unlock your inner entrepreneur and align your aspirations with ours through our Stock Options Program. This exciting opportunity is available to every team member, from junior team members to our founders.   Receive unwavering support and care   Finom stands by you at every step, embodying our commitment to your well-being and success reflected in our modern, friendly, and eco-conscious corporate culture. We offer constant support and care to ensure your Finom experience is successful and fulfilling.   Work & Swim program   Immerse yourself in our exclusive Work & Swim Program. Spend one month in a comfortable corporate apartment in enchanting Cyprus. It's the ideal opportunity to strike the perfect work-life balance while enjoying breathtaking Mediterranean views.   Equal Opportunity Statement    At Finom, we're an equal opportunity employer and value diversity at our company. We embrace diversity and invite applications from all walks of life. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, disability status, or other applicable legally protected characteristics.

Location: Spain Workplace: remote About Finom   Finom is a European tech startup headquartered in Amsterdam, and we’re on a journey towards revolutionizing the financial landscape for entrepreneurs worldwide. Our mission is to develop an all-in-one financial B2B solution that integrates banking functions, accounting, financial management, and invoicing into a seamless, mobile-first platform.   We recently closed a €115 million Series C equity round (around $133 million), bringing our total funding to approximately $346 million. This significant investment follows a $105 million growth funding round from General Catalyst, a long-term backer since 2021 known for supporting companies like Airbnb, HubSpot, KAYAK, and Stripe.   Finom's platform goes beyond traditional banking, offering invoicing and a growing suite of features, including AI-enabled accounting, aiming to simplify financial management for entrepreneurs. We're actively expanding our reach across key EU markets like Germany, France, the Netherlands, Italy, and Spain.   At Finom, we’re not just redefining the entrepreneurial experience — we’re empowering our employees to make a real difference. Your work matters, and your impact extends far beyond product metrics. We nurture innovation and an inspiring work environment where bold ideas thrive, prioritizing thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and our business as a whole.   Maintaining our start-up spirit, we prioritize thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and, of course, our business. About the role Finom is a licensed EMI operating across several EU markets, where information security and compliance are a big part of how we work. We're looking for an Information Security Officer to join our Cyber Security team and take ownership of security compliance and risk management day to day. You won't be starting from a blank page. We already have a mature, certified ISMS and established processes for risk management, audits, vendor assessments and reporting. Your role is to get to know what we have, keep it running well, spot opportunities to make it better and make sure compliance works in practice, not just on paper. You'll report directly to the CISO and work closely with our Cyber Security and Engineering teams, as well as Risk, Legal & Compliance, Internal Audit and other teams across the company. What You Will Be Doing - Maintain the ISMS and ICT risk management framework records: document and records register, control ownership and evidence repository. - Perform and refresh information security risk assessments, maintain the risk register, prepare risk treatment plans and track their implementation with control owners. - Prepare for and go through internal and external audits, certifications and assessments: own the calendar, collect evidence, work directly with auditors and track findings to closure. - Run periodic checks of control design and operating effectiveness and raise gaps for remediation. - Draft and maintain information security policies, procedures and guidelines and prepare them for annual review and approval. - Collect and analyse ISMS KPIs and KRIs and prepare the regular security and risk reporting for management. - Perform security assessments of new suppliers and periodic reassessments of existing ones together with Risk, Legal and the DPO. - Prepare responses to security and compliance questionnaires from partners, customers and regulators. - Review new projects, products and vendors from an information security and compliance perspective. - Track changes in cybersecurity, ICT risk and privacy regulation and supervisory guidance, assess impact and propose required changes. - Keep company-wide security awareness and training materials relevant and up to date. - Automate evidence collection, control checks, questionnaire answering and reporting with templates, scripts and AI tooling. Who You Are - 4+ years of experience in information security compliance, ISMS, GRC or related areas. - Practical experience with ISO/IEC 27001: working with an ISMS and preparing for and going through certification or surveillance audits. - Experience with information security risk assessments, risk registers and risk treatment plans. - Experience answering security questionnaires and due diligence requests from partners, customers or regulators. - Able to translate standards and regulatory requirements into practical controls, procedures and evidence that people actually follow. - Hands-on and self-driven: you own tasks end to end, work directly with people to solve problems and do not wait for a perfect methodology before acting. - Open to AI tools and automation and actively use them in day-to-day work. - Strong written English and clear documentation skills. Nice to Have - Experience in banking, payments or an EMI. - PCI DSS, SWIFT CSP or payment scheme assessments. - Knowledge of DORA, NIS2 and GDPR, including working with a DPO on RoPA and DPIA. - Vendor security assessment and third-party risk experience. - Certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CRISC or CISM. What You Will Get In Return   Make a genuine impact on the product   Join our upward trajectory, and grow with us. We provide the resources and opportunities for continuous personal and professional development, empowering you to make a genuine impact on our evolving product.   Work in the EU   Embark on this exciting journey with us and enjoy the flexibility of traveling and working remotely or in a hybrid model across Europe.   Become a stock options holder   Unlock your inner entrepreneur and align your aspirations with ours through our Stock Options Program. This exciting opportunity is available to every team member, from junior team members to our founders.   Receive unwavering support and care   Finom stands by you at every step, embodying our commitment to your well-being and success reflected in our modern, friendly, and eco-conscious corporate culture. We offer constant support and care to ensure your Finom experience is successful and fulfilling.   Work & Swim program   Immerse yourself in our exclusive Work & Swim Program. Spend one month in a comfortable corporate apartment in enchanting Cyprus. It's the ideal opportunity to strike the perfect work-life balance while enjoying breathtaking Mediterranean views.   Equal Opportunity Statement    At Finom, we're an equal opportunity employer and value diversity at our company. We embrace diversity and invite applications from all walks of life. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, disability status, or other applicable legally protected characteristics.

Location: Cyprus Workplace: remote About Finom   Finom is a European tech startup headquartered in Amsterdam, and we’re on a journey towards revolutionizing the financial landscape for entrepreneurs worldwide. Our mission is to develop an all-in-one financial B2B solution that integrates banking functions, accounting, financial management, and invoicing into a seamless, mobile-first platform.   We recently closed a €115 million Series C equity round (around $133 million), bringing our total funding to approximately $346 million. This significant investment follows a $105 million growth funding round from General Catalyst, a long-term backer since 2021 known for supporting companies like Airbnb, HubSpot, KAYAK, and Stripe.   Finom's platform goes beyond traditional banking, offering invoicing and a growing suite of features, including AI-enabled accounting, aiming to simplify financial management for entrepreneurs. We're actively expanding our reach across key EU markets like Germany, France, the Netherlands, Italy, and Spain.   At Finom, we’re not just redefining the entrepreneurial experience — we’re empowering our employees to make a real difference. Your work matters, and your impact extends far beyond product metrics. We nurture innovation and an inspiring work environment where bold ideas thrive, prioritizing thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and our business as a whole.   Maintaining our start-up spirit, we prioritize thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and, of course, our business. About the role Finom is a licensed EMI operating across several EU markets, where information security and compliance are a big part of how we work. We're looking for an Information Security Officer to join our Cyber Security team and take ownership of security compliance and risk management day to day. You won't be starting from a blank page. We already have a mature, certified ISMS and established processes for risk management, audits, vendor assessments and reporting. Your role is to get to know what we have, keep it running well, spot opportunities to make it better and make sure compliance works in practice, not just on paper. You'll report directly to the CISO and work closely with our Cyber Security and Engineering teams, as well as Risk, Legal & Compliance, Internal Audit and other teams across the company. What You Will Be Doing - Maintain the ISMS and ICT risk management framework records: document and records register, control ownership and evidence repository. - Perform and refresh information security risk assessments, maintain the risk register, prepare risk treatment plans and track their implementation with control owners. - Prepare for and go through internal and external audits, certifications and assessments: own the calendar, collect evidence, work directly with auditors and track findings to closure. - Run periodic checks of control design and operating effectiveness and raise gaps for remediation. - Draft and maintain information security policies, procedures and guidelines and prepare them for annual review and approval. - Collect and analyse ISMS KPIs and KRIs and prepare the regular security and risk reporting for management. - Perform security assessments of new suppliers and periodic reassessments of existing ones together with Risk, Legal and the DPO. - Prepare responses to security and compliance questionnaires from partners, customers and regulators. - Review new projects, products and vendors from an information security and compliance perspective. - Track changes in cybersecurity, ICT risk and privacy regulation and supervisory guidance, assess impact and propose required changes. - Keep company-wide security awareness and training materials relevant and up to date. - Automate evidence collection, control checks, questionnaire answering and reporting with templates, scripts and AI tooling. Who You Are - 4+ years of experience in information security compliance, ISMS, GRC or related areas. - Practical experience with ISO/IEC 27001: working with an ISMS and preparing for and going through certification or surveillance audits. - Experience with information security risk assessments, risk registers and risk treatment plans. - Experience answering security questionnaires and due diligence requests from partners, customers or regulators. - Able to translate standards and regulatory requirements into practical controls, procedures and evidence that people actually follow. - Hands-on and self-driven: you own tasks end to end, work directly with people to solve problems and do not wait for a perfect methodology before acting. - Open to AI tools and automation and actively use them in day-to-day work. - Strong written English and clear documentation skills. Nice to Have - Experience in banking, payments or an EMI. - PCI DSS, SWIFT CSP or payment scheme assessments. - Knowledge of DORA, NIS2 and GDPR, including working with a DPO on RoPA and DPIA. - Vendor security assessment and third-party risk experience. - Certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CRISC or CISM. What You Will Get In Return   Make a genuine impact on the product   Join our upward trajectory, and grow with us. We provide the resources and opportunities for continuous personal and professional development, empowering you to make a genuine impact on our evolving product.   Work in the EU   Embark on this exciting journey with us and enjoy the flexibility of traveling and working remotely or in a hybrid model across Europe.   Become a stock options holder   Unlock your inner entrepreneur and align your aspirations with ours through our Stock Options Program. This exciting opportunity is available to every team member, from junior team members to our founders.   Receive unwavering support and care   Finom stands by you at every step, embodying our commitment to your well-being and success reflected in our modern, friendly, and eco-conscious corporate culture. We offer constant support and care to ensure your Finom experience is successful and fulfilling.   Work & Swim program   Immerse yourself in our exclusive Work & Swim Program. Spend one month in a comfortable corporate apartment in enchanting Cyprus. It's the ideal opportunity to strike the perfect work-life balance while enjoying breathtaking Mediterranean views.   Equal Opportunity Statement    At Finom, we're an equal opportunity employer and value diversity at our company. We embrace diversity and invite applications from all walks of life. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, disability status, or other applicable legally protected characteristics.

Задачи: — проектировать масштабируемые решения в области безопасности — автоматизировать процессы обнаружения угроз и реагирования — руководить инцидент-менеджментом — усиливать возможности безопасности с использованием искусственного интеллекта Требования: — опыт в инфраструктурной безопасности, ISO 27001, threat modeling — знание Git, облачных технологий, Bitcoin — опыт в корпоративной безопасности, безопасности продуктов — навыки инцидент-реагирования, автоматизации безопасности — понимание стандартов PCI, SOC 2 — опыт работы с AWS, GitHub Условия: — удалённая работа — зарплата $225,000 - $275,000 в год

Задачи: — Выстроить централизованную систему IT-безопасности и управления инфраструктурой для всех юридических лиц группы компаний. — Управление доступами — разделение данных, дисков и папок по юридическим лицам, централизованная выдача и отключение доступов, контроль onboarding/offboarding. — Сетевая безопасность — аудит инфраструктуры, настройка отдельных IP для групп компаний, управление VPN, возможность переключения между сетями для определённых сотрудников. — Контроль устройств — централизованное управление MacBook, Windows и удалёнными рабочими столами, ограничение прав пользователей, защита от сброса устройств. — Мониторинг сотрудников — контроль скачивания, удаления и передачи файлов, USB-устройств, журналирование действий, резервное копирование и удалённый доступ к корпоративным данным. — Безопасность ПО и AI — аудит приложений, расширений и AI-инструментов, согласование новых интеграций, блокировка небезопасных сервисов. — Корпоративные аккаунты : внедрение 2FA, централизованное управление email и мессенджерами, безопасное создание аккаунтов, оценка корпоративных платформ (Slack и др.). — Реагирование на инциденты : обнаружение подозрительной активности, попыток взлома и утечек данных, настройка уведомлений и процедур оперативного реагирования. — Мобильная безопасность : защита рабочих данных на личных устройствах, корпоративные SIM-карты, SMS, возможность удалённого удаления данных. — Дополнительные проекты : участие в разработке безопасного AI-ассистента для управления большим количеством email-аккаунтов. Требования: — Опыт от 5 лет в роли IT Security Engineer, Senior SysAdmin или Infrastructure Engineer. — Опыт инженерного проектирования и внедрения систем с нуля. — Практический опыт работы с MDM (Intune, Jamf и др.), IAM/SSO, Active Directory / Entra ID. — Экспертиза в сетях (VLAN, маршрутизация, корпоративные VPN) и внедрении DLP-систем. Условия: — Полностью удаленный формат работы. — Возможность самостоятельно принимать архитектурные решения и выстраивать ИТ-процессы группы компаний. — Работа возможна из любой страны, кроме РФ.

Задачи: — Принимать участие в пилотировании и внедрении новых сервисов информационной безопасности (ИБ) — Формировать требования ИБ и разрабатывать процессы контроля их реализации — Участвовать в развитии существующих сервисов ИБ — Помогать с автоматизацией и выполнением требований ИБ в корпоративных сервисах компании Требования: — Интерес к области информационной безопасности и желание в ней разбираться — Понимание принципов и концепций информационной безопасности: zero trust, least privilege, need to know, defense in depth — Базовые знания криптографических протоколов и алгоритмов: SSL/TLS, AES, RSA — Знание принципов аутентификации и авторизации, понимание современных протоколов аутентификации: OAuth, Kerberos, NTLM, Raduis, LDAP — Умение ставить цели и разрабатывать план по их достижению в рамках своей зоны ответственности — Способность анализировать угрозы информационной безопасности, выявлять закономерности и аномалии для обнаружения угроз, разрабатывать решения для их предотвращения — Способность быстро изучать новое и внедрять это в работу — Коммуникабельность и открытость в общении Будет плюсом: — Владение powershell и bash на уровне уверенного пользователя — Опыт автоматизации рутинных, административных задач — Опыт редактирования данных в формате JSON и YAML — Умение реализовать несложные программы для автоматизации — Опыт участия в разработке регламентирующих документов Условия: — Оплачиваемая стажировка — Официальное оформление по срочному трудовому договору — Возможность гибкого рабочего времени — Команда признанных экспертов — Современные технологии — Расширение технического кругозора — Социальный пакет — Бесплатное обучение: курсы, митапы от сотрудников и библиотека книг — Ежемесячная доплата на питание — Комфортные условия: 2 спортзала и сауна прямо в офисе — Свой ресторан и бар Локация: гибридный формат работы, Москва

Location: GE; PL Workplace: remote Overview: SOFTSWISS is looking for an IAM Security Operations Engineer to maintain and troubleshoot IAM services, manage identity lifecycle processes (JML), and ensure secure, role-based access across our systems. Key responsibilities: Handle complex and non-standard JML scenarios Perform technical troubleshooting of IAM services (SSO, IdP, provisioning flows), including Keycloak Configure and maintain Adaxes automation tool: automation rules, approval-based workflows, role-based permissions, etc Implement changes in IAM services and integrations (Keycloak, Adaxes,etc) Process Joiner/Mover/Leaver (JML) access requests in alignment with approved RBAC models Automate repetitive access management tasks Validate access requests against least privilege and segregation of duties principles Write technical and user documentation, including models (e.g., UML) Monitor IAM platform health and proactively identify risks Assist users with access and system requests in alignment with Security standards and procedures Required Experience: 2+ years in IAM, identity operations, or security engineering roles Experience in maintaining and troubleshooting IAM – related services (Keycloak, Adaxes, GWS) Experience maintaining secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect) Hands-on experience with RBAC configuration and provisioning workflows Solid understanding of IAM architecture concepts Working knowledge of SSO, MFA, provisioning, and directory services Understanding of identity-related security risks Strong troubleshooting and log analysis skills Understanding of identity protocols (SAML, OAuth, OIDC – operational level) Ability to communicate clearly with business users Ability to work independently on technical incidents Scripting or automation capability (e.g., Python, PowerShell, Bash) Intermediate or higher English (B1+) and strong command of Russian Main Advantages Private health insurance Sports benefits Comprehensive Mental Health Program Free English lessons (online) Local language courses Paid time off Maternity leave support Referral program rewards Upskilling, internal workshops, and participation in professional conferences and corporate events

Задачи: — Оценка систем — Построение мер безопасности и контроля конфиденциальности Требования: — null Условия: — null

OpenRouter ищет инженера по решениям в области безопасности, который будет отвечать за проведение обзоров безопасности для клиентов и предоставление точных технических рекомендаций по безопасности для корпоративных покупателей. В обязанности входит анализ инфраструктуры, архитектуры и процессов безопасности, включая вопросы, связанные с большими языковыми моделями (LLM), управлением рисками и соответствием (GRC), а также контрактной документацией и анкетами по безопасности. Кандидат должен обладать знаниями в области безопасности приложений, облачной безопасности и инфраструктуры искусственного интеллекта, а также иметь опыт работы с инструментами и процессами, направленными на обеспечение безопасности и доверия клиентов.

Задачи: — выявлять, тестировать и устранять уязвимости в безопасности приложений и систем. Требования: — опыт работы с безопасностью, включая уязвимости, penetration testing, red teaming, RBAC. — знание технологий Java, Go, Rust, OAuth2. — опыт в области финтеха и криптовалют. Условия: — гибридный формат работы в Сингапуре.

Location: United States, Remote Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. As a Senior Product Security Analyst within our Game Security Team, you play a critical role in safeguarding our community from bad actors, ensuring that the spirit of friendship remains the cornerstone of every world we create. You will leverage our anti-cheat detections and use your detective skills to find those folks who would compromise our worlds and spoil our players’ experiences. You will work with engineers and data scientists to piece together the clues to make the picture come together and create a portfolio of evidence so that we can confidently isolate cheaters and ensure fair and honest gameplay. Responsibilities: Conduct in-depth investigations using game data and telemetry focused on identifying cheaters Prepare clear, detailed investigation reports where findings and recommendations are supported by specific data and evidence. Work with the team to prioritize, validate, and tune cheat detections. Collaborate as a valued team member, contributing to and supporting our collective pursuit of shared objectives REQUIRED Skills: Solid track record as a tech-savvy investigator, adept in uncovering information, tackling complex problems, and conducting thorough monitoring of adversaries Possess the versatility to effectively collaborate within a team setting and the initiative to autonomously drive projects to completion with minimal supervision Proven ability to craft and present conclusive, data-driven reports that drive action and targeted outcomes Proficient with querying relational databases (e.g., SQL), big data service (e.g., Redshift, Omni, Snowflake or Big Query) Familiarity with the AAA Games Cheating/Security landscape, and a passion for protecting player experiences. Bachelor’s degree or equivalent Nice-to-have Skills : Game security, anti-cheat, or similar investigative experience. Utilizing data visualization tools (e.g., Tableau, Omni) to interpret and present data insights Additional language proficiency (e.g., Chinese, Korean, Russian, Japanese, Spanish) At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. This is a flexible role that can be remote, with varying pay ranges based on geographic location. For example, if you are based out of Seattle, the estimated base pay range for this role is listed below. $177,300 — $265,900 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice (where applicable) for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: Remote - US West About the Job: We're looking for a senior security leader to run our Product Security team and partner to the Director of Security. In this role, you'll own how Security operates: a program led by risk rather than audit calendars, where engineering teams own their security health and Security informs, guides, and validates, where automation and AI take the first pass on every finding, and where posture is measured and published to executives every quarter. You'll build that model, starting with Product Security and extending across the division. You'll bring a balance of people management, security judgment, and program leadership as you manage a team of security engineers, act as incident manager of record, hold delegated approval for vendor and access decisions, and run the division when the Director is in an audit, a board cycle, or on vacation. You'll work closely with every engineering team to make the secure path the easy one. Responsibilities: Manage the portfolio of your team's work, appropriately managing everyone's time and assigning them to the highest priority work. Help your team and the engineering organization make sense of, and simplify, how security work gets done: who owns what, what is automated, and what Security stops doing. Guide product engineering teams in owning their own security health: findings route to them with mapped severity, Security reviews and validates rather than fixes, and each team sees its security health in its own service review. Own the wiring and routing of security findings and requests, driving down noise and the human-decision rate across intake, triage, and review. Serve as incident manager of record for security incidents: first escalation for our service-level commitments, delegated approver for vendor and access decisions, and cover for the Director's operational duties. Publish posture: monthly service-level attainment to engineering, quarterly posture to the executive team, and a risk register that drives priorities. About You: You have led a security team out of the gatekeeper model once already, and you can say what teams owned afterward, what Security stopped doing, and what the numbers did. You think in risk, not control lists, and you would rather defend a priority call than a checklist. You treat automation and AI as the first responder and yourself as the escalation path. You have been the second leader to a director or CISO and know which decisions to make in their name. You have run security incidents end to end, including the comms and the review afterward. You were a strong Senior or Staff security engineer before you managed, and you can still read a PR, a threat model, or a cloud finding and make a call. You track and drive metrics, and you understand what they can and can't tell you. Qualifications: 5+ years of experience in a formal security or engineering management role, including managing senior engineers. Experience moving a security function from gatekeeper to team ownership, with measurable results. Experience as incident manager for security incidents at a SaaS company, including external communication. Experience guiding teams through technical tradeoffs and developing senior engineers' careers. The ability to track and drive metrics, and the wisdom to understand what they can and can't tell you. Familiarity with AWS security at scale and with external audits (SOC 2, ISO 27001, or FedRAMP) as a participant or control owner. Excellent communication skills with both technical and non-technical stakeholders. A thoughtful, empathetic approach to leadership and collaboration. Pay: Target pay ranges based on Geographic Zones* for Level M3: Zone 1: San Francisco/Bay Area or NYC Metropolitan Area, Boston, Seattle - $240,600 - 330,700* Zone 2: Irvine, LA, Monterey, Santa Barbara, Santa Rosa, Austin, Portland, Philadelphia, Chicago - $216,500 - 297,600 ** Zone 3: All other US locations - $ 204,500 - 281,100 ** All Zones Inclusive of 15% Bonus Target LaunchDarkly operates from a place of high trust and transparency; we are happy to state the pay range for our open roles to best align with your needs. Exact compensation may vary based on skills, experience, and location. *Within the United States, our geographic pay zones are defined by counties surrounding major metropolitan areas. **Restricted Stock Units (RSUs), health, vision, and dental insurance, and mental health benefits in addition to salary. About LaunchDarkly: Modern software delivery was supposed to be the foundation for a thriving digital business but reality has proven otherwise. Slow, inefficient development cycles, costly outages, and fragmented customer experiences are preventing developers from building their best software. The LaunchDarkly platform helps developers innovate on new features faster while protecting them with a safety valve to instantly rewind when things go wrong. Developers can target product experiences to any customer segment and maximize the business impact of every feature. And by gradually rolling out new application components, they escape nightmare "big-bang" technology migrations. The LaunchDarkly platform was built to guide engineers to the next frontier of DevOps by: Improving the velocity and stability of software releases, without the fear of end customer outages Delivering targeted experiences by easily personalizing features to customer cohorts Maximizing the business impact of every feature through the ability to experiment and optimize Coordinating the release and optimization of software to provide consistent experiences across mobile platforms and device types Improving the effectiveness and productivity of engineering teams, by providing insights into engineering cadence and stability At LaunchDarkly, we believe in the power of teams. We're building a team that is humble, open, collaborative, respectful and kind. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, or disability status. LD invites any applicant to review our written Affirmative Action Plan. To do so, contact People Ops at hr@launchdarkly.com . Do you need a disability accommodation? Fill out this accommodations request form and someone from our People Operations team will contact you for assistance. Your safety matters to us. To protect yourself from potential scams, LaunchDarkly recruiters will only contact you from @LaunchDarkly .com email addresses or via LinkedIn from "Verified Recruiter" accounts. Be cautious of emails from other domains.  Legitimate LaunchDarkly recruiters will never ask for money, fees, or banking information before making a job offer. LaunchDarkly will never make a job offer without conducting a formal interview process. Our interview process does not involve asking detailed questions by email. If you are ever unsure about a communication that you receive, don't click any links—visit Careers | LaunchDarkly directly for confirmed job openings and links to apply. Please notify us of any fraudulent representation by sending an email to careers@launchdarkly.com .