Вакансии

Location: Los Angeles, USA As a Security Engineer on the Player Security team, you will help protect player accounts and Riot’s broader service ecosystem from attacks and abuse. You will build analytical capabilities, develop data-driven detection methods, and investigate how threat actors operate across our systems. Working closely with engineering, data, and security teams, you will help improve existing services and create new solutions that provide millions of players with a safe and secure gaming experience. This role is well suited to someone with experience in security engineering, data analysis, and building scalable data or event-driven pipelines. Responsibilities: Analyze large datasets to understand attacker behavior and identify opportunities to strengthen our defenses. Design and build tools and detection systems that identify malicious activity across Riot’s ecosystem. Develop scalable, reliable data-driven and event-driven security services. Collaborate with engineering, data, security, and other cross-functional teams. Contribute to technical design, architecture, and implementation decisions. Improve existing security capabilities and help develop new approaches to protecting players. Ideate, refine, and complete threat hunts to inform security controls. Required Qualifications: 3–5 years of experience in security analysis, data engineering, and anything in between. Experience analyzing large datasets and working with data platforms such as Databricks. Strong cross-functional communication and collaboration skills. Experience working in an agile software-development environment. Desired Qualifications: Familiarity with online multiplayer games and their associated account, platform, or abuse ecosystems. Experience building data-driven or event-driven pipelines using one or more languages such as Go, Python, Java, or TypeScript. Experience developing security detections or investigating attacker behavior. Understanding of account security, fraud, abuse prevention, or threat detection. For this role, you'll find success through craft expertise, a collaborative spirit, and decision-making that prioritizes the delight of players. We will be looking at your past studies, experience, and your personal relationship with games. If you embody player empathy and care about players' experiences, this could be your role! Our Perks: Riot focuses on work/life balance, shown by our open paid time off policy and other perks such as flexible work schedules. We offer medical, dental, and life insurance, parental leave for you, your spouse/domestic partner, and children, and a 401k with company match. Check out our benefits pages for more information. At Riot Games, we put players first . That mission drives every decision in our quest to create games and experiences that make it better to be a player. Whether you’re working directly on a new player-facing experience or you’re supporting the company as a whole, everyone at Riot is part of our mission. And just like in our games, we’re better when we work together. Our goal is to create collaborative teams where you are empowered to bring your unique perspective everyday. If that sounds like the kind of place you want to work, we’re looking forward to your application. It’s our policy to provide equal employment opportunity for all applicants and members of Riot Games, Inc. Riot Games makes reasonable accommodations for handicapped and disabled Rioters and does not unlawfully discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, handicap, veteran status, marital status, criminal history, or any other category protected by applicable federal and state law. We consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with applicable federal, state and local law, including the California Fair Chance Act, the City of Los Angeles Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, the San Francisco Fair Chance Ordinance, and the Washington Fair Chance Act. Per the Los Angeles County Fair Chance Ordinance, the following core duties may create a basis for disqualifying candidates with relevant criminal histories: Safeguarding confidential and sensitive Company data Communication with others, including Rioters and third parties such as vendors, and/or players, including minors Accessing Company assets, secure digital systems, and networks Ensuring a safe interactive environment for players and other Rioters These duties are directly related to essential operations, safety, trust, and compliance obligations within our organization. Please note that job duties may evolve based on business needs and additional responsibilities may be assigned as necessary to maintain operational efficiency and security.

Location: Remote (Ukraine) Workplace: remote ELEKS Information Security Office is looking for a Security Operations Supervisor in Lviv, Ternopil, Kyiv, or Ivano-Frankivsk. Security Operations Supervisor is responsible for designing, implementing and maintenance of ELEKS Security Operations Center (SOC) and related ISMS processes. Specifically, Security Operations Supervisor objective is to ensure efficient execution of Incident Management, Threat Intelligence, Vulnerability Management and Patch Management activities. REQUIREMENTS Working experience in architecture, design and implementation of security systems and countermeasures (e.g. SIEM, EDR, DLP, UEBA, IDS/IPS, vulnerability scanners, anti-virus and anti-malware, firewalls, encryption) Knowledge of Security Operation Center processes, ability to perform supervision of SOC and perform continuous improvement of its operations Working experience in planning and conducting of technical security audits. Knowledge of Information Security (IS) standards/frameworks (ISO 27001/2, SOC2, Cyber Essentials, PCI DSS, HiTrust), ability to establish IS processes in line with these standards Network architecture, security principles, technologies, and tools Detailed technical knowledge of Windows and UNIX operating systems Virtualization technologies and security Identity and access management principles and technologies Subnetting, DNS,DHCP, VPNs, VLANs, VoIP and other network routing methods Network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, etc.) Solid knowledge of secure coding practices, application security and cryptography technologies, ethical hacking, threat modeling, secure SDLC process Solid knowledge of disaster recovery and business continuity planning Strong analytical and conceptual skills balanced by broad perspective on how security efforts to support realization of business goals and customer satisfaction Proven leadership capabilities and strong communication and interpersonal skills English – upper-intermediate or higher RESPONSIBILITIES Develop and maintain short- and long-term goals and objectives for ELEKS Security Operations Center aligned with Information Security goals Define activities and projects supporting continuous improvement of ELEKS Security Operations Center, addressing the IS gaps identified and enhancing ELEKS security overall Evaluate new technologies and processes that enhance security capabilities. Design, architect, test, analyze, evaluate and implement new security systems and processes Perform program and project management activities to ensure successful execution of ISMS projects assigned. Coordinate the development and review of ISMS policies relevant to SOC activities and other supporting documents, such as Hardening Baselines, IS standards/procedures Effectively inform stakeholders about the status of the ELEKS information security posture. Perform periodic security reporting (both: executive and technical) Coordinate handling of the information security incidents, coordinate investigation activities, communicate with clients and, if needed, escalate to ELEKS senior management, and contact authorities (Police, CERT-UA, etc.) Plan, control, and perform installation, configuration, technical support and administration of security systems and countermeasures (e.g. SIEM, EDR, DLP, UEBA, IDS/IPS, vulnerability scanners, anti-virus and anti-malware, firewalls, encryption) Supervise and perform system hardening, security testing, and vulnerability management Prevent, detect, investigate and respond to cyber threats for the organization’s assets Build and establish plans and controls to protect digital files and information systems against unauthorized access, modification and/or destruction Coordinate configuration, management and running the phishing simulation campaigns Plan, manage and optimize the capacity of ELEKS SOC Provide leadership, training and technical advice to SOC team. Identify/address training and career development needs, provide feedback and conduct performance assessment of subordinates Management of access rights for SOC by participation in approval, review, and removal of access rights (in case of specialist termination, role change and on a regular basis as per Access Control Policy) Resolve security incidents within the SOC team and, if necessary, perform disciplinary actions in conjunction with HR team

Location: Paris Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. ⭐ SECURITY ASSOCIATE INTERNSHIP ⭐ Six-month end-of-studies internship in Paris. Looking for an end-of-studies internship where you do real cybersecurity work, not a side project nobody uses? Alan protects the health data of more than 1M members, and keeping it safe is part of everyday work here. You join the Security team as a full member for six months. Topics span from compliance and certifications to vulnerabilities, detection and incident response, and you have room to pick the ones where you can have the most impact. A dedicated coach guides you and supervises your thesis. The goal at the end is a full-time job at Alan. ⭐ DETAILED MISSIONS ⭐ Alan is opening new countries, and each one brings more audits, certifications and customer security reviews. Possible topics span from governance and compliance to hands-on technical work. You won't do all of them: with your coach, you choose the ones that matter most for Alan and for you. - Governance, risk and compliance: ISO 27001 and HDS (French health data hosting) certifications, statutory IT audit, customer security reviews, risk management - Vulnerability management: triage reports and scanner findings, drive fixes with engineering teams, improve our tooling - Detection and response: write detection rules, investigate alerts, support the team on incidents - Build: technical projects you own from framing to adoption. Past projects: an internal pentest for an audit, code scanning and remediation, an HDS internal audit, tooling proofs of concept - Automate what repeats, so the team spends its time where the risk is ⭐ KEY OUTCOMES ⭐ By the end of the internship, you will have: - Owned a recurring security campaign end to end and left it cheaper for the next round - Shipped one technical project to real users - Written your end-of-studies thesis on a real security subject - Worked with engineers and senior people across the company ⭐ PROFILE & COMPETENCIES ⭐ - End of studies: engineering or security track, looking for a six-month internship - Security foundations: solid basics in security and IT, and you can apply them to a concrete case - You code: Python at least, and you automate the repetitive part - Curiosity: you dig into topics you don't master yet, and you are curious about compliance, not only offensive security - Risk sense: you know not every risk is equal, and some trade-offs are worth taking - Collaboration: you work with engineers, not against them, and look for solutions that work for both sides - Clear communication: structured and written, in English (French is a plus) - Bonus: CTFs, personal security projects, a previous security internship, cloud or SaaS experience 🙌 PERKS & BENEFITS https://alan.com/about/life-at-alan/a/perks At Alan, we believe that being in good health is a basic need, and it starts with our employees. This is why Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. Therefore, we offer: - Flexible Office. Amazing office space at our HQ, sponsored co-working hubs or a full-remote experience with home office equipment sponsorship, we want you to live where you’re the happiest. - All the tools you need. Top of the range equipment: Macbook Pro, keyboard, laptop stand, monitor, and Bose noise-canceling headphones. - Flexible vacation policy and flexible working hours. Organize your time as you wish. - Transport. Country-specific commuter benefits. - Learning & Training opportunities. A highly flexible Training policy free books and budget to attend and speak at conferences if the opportunity arises. - Personal growth through coaching: At Alan, coaching isn't just a perk - it's core to who we are. Every Alaner is paired with a dedicated coach from day one, who helps maximize their impact, nurture engagement, and navigate Alan's values to develop their full potential. Learn more about our coaching culture https://alan.com/en/blog/discover-alan/a/alan-culture-excellence-through-coaching.   IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply as it can only bring learnings or success. If you identify yourself as a woman: Did you know that research shows women often apply only when meeting 100% of requirements? Remember, this is just a guide, not a checklist. We'll be thrilled to receive your application! 🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info.

Location: Hong Kong Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped QRT’s collaborative mindset which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors. We are seeking a Security Engineer to help shape and deliver QRT's Identity Governance (IGA), Privileged Access Management (PAM), and Secrets Management capabilities. This is a hands-on engineering role requiring strong technical depth, stakeholder management, and the ability to influence change across the organisation. You will work with both technical and non-technical stakeholders to develop scalable identity and access management solutions, drive adoption of security best practices, and improve the maturity of IAM as a security discipline across QRT. Responsibilities Own and continuously improve QRT's IGA, PAM, and Secrets Management capabilities. Build strong relationships with Infrastructure, Engineering, HR, and business stakeholders to understand requirements and drive outcomes. Lead identity and access initiatives from conception through to delivery, influencing stakeholders and driving adoption. Design and implement solutions for identity lifecycle management, privileged access, authentication, and secrets management across on-premises and cloud environments. Design and implement role-based access control (RBAC) models and policies within the IGA Tool. Support uplift and maintenance of Active Directory (AD) groups to align with governance policies. Integrate secrets management platforms with CI/CD pipelines, cloud services, and enterprise applications. Develop automation and Infrastructure-as-Code / Identity-as-Code solutions to improve security, governance, and operational efficiency. Develop automation and integrations to improve security, governance, and operational efficiency. Provide guidance on IAM principles, governance models, standards, and best practices. Support access reviews, audits, investigations, and risk management activities. Act as a subject matter expert for identity-related technologies, processes, and controls. Skills & Experience 5-10 years' experience in Identity & Access Management, Security Engineering, or a related discipline. Strong understanding of Identity and Access Management principles, methodologies, governance, and operating models. Experience delivering IGA, PAM, and Secrets Management capabilities in complex enterprise environments. Experience working across both on-premises and cloud environments, integrating identities, applications, and access controls across hybrid platforms. Hands-on engineering experience implementing, integrating, and automating security technologies. Ability to engage effectively with both technical and non-technical stakeholders and influence decision-making at all levels. Proven ability to take ownership, drive initiatives, and deliver outcomes with minimal supervision. Strong understanding of identity lifecycle management, least privilege, RBAC, access governance, authentication, and privileged access management. Strong hands-on experience with platforms such as SailPoint (ISC), Delinea, CyberArk, HashiCorp Vault, or similar technologies. Strong automation-first mindset and experience applying Infrastructure-as-Code and Identity-as-Code practices Excellent communication, stakeholder management, and problem-solving skills. QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.

Location: Remote, Massachusetts, United States, AMER From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About Us Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites. About the Role Fivetran + dbt  is seeking a Manager of Security Operations, Incident Detection and Response, to bolster and improve the robustness and security of the platform and the entire enterprise. This people-leadership role is hands-on and execution-focused, requiring deep expertise in security operations, incident detection and response, AI-driven security automation, and securing multi-tenant SaaS environments. You'll build and lead a high-performing team, own the detection and response technology stack, and serve as the accountable leader for incident response across the entire enterprise, ensuring threats are detected, contained, and remediated quickly from endpoint to cloud to production. This is a full-time remote position based out of the US (EST Time Zone). Technologies You’ll Use Crowdstrike, Okta, Google Workspace, Wiz, Open Source, Notion, JIRA What You’ll Do People Leadership: Lead, mentor, and develop a team of detection and response engineers and analysts. Set clear goals, manage performance, and grow careers while fostering a culture of ownership, curiosity, and urgency. Hiring & Team Building: Recruit, hire, and onboard top security talent. Define team structure, roles, on-call rotations, and hiring plans to scale the team alongside the business. Enterprise Incident Response: Own the incident response program for the entire enterprise, including investigation, containment, eradication, remediation, and post-incident review. Act as incident commander for major security events and coordinate with Legal, Privacy, Communications, and executive leadership. Detection Engineering: Build, optimize, and maintain high-fidelity detections across cloud, identity, endpoint, SaaS, and application layers, using threat-informed approaches such as MITRE ATT&CK to close coverage gaps. AI-Driven Security Operations: Drive the adoption of AI, including LLMs and AI agents, to automate alert triage, enrichment, investigation, and response. Evaluate and integrate AI capabilities to scale the team, and build detections for threats targeting AI systems and AI usage across the enterprise. Multi-Tenant SaaS Security: Design detection and response strategies tailored to a multi-tenant SaaS platform, including tenant isolation, cross-tenant access, and customer data protection. Lead customer-impacting incident response and coordinate customer notifications. Security Technology Ownership: Own the security operations technology stack, including SIEM, SOAR, EDR/XDR, cloud detection and response, and log pipelines. Manage the roadmap, budget, and vendor relationships. Threat Hunting & Intelligence: Lead proactive threat hunting and integrate threat intelligence to identify and mitigate emerging threats before they impact the business. Cross-Team Collaboration: Work directly with engineering, infrastructure, IT, application security, and GRC teams to integrate detection and response practices and remediate risks across build pipelines, runtime environments, and corporate systems. Tooling & Automation: Develop and maintain automation, playbooks, and integrations to streamline security processes and provide self-service security tools to the organization. Security Standards & Metrics: Implement consistent security controls, monitoring, and alerting across the enterprise. Define and report on key metrics such as mean time to detect (MTTD) and mean time to respond (MTTR), and support compliance requirements. Knowledge Sharing: Stay up to date with trends in security operations, incident response, cloud security, and AI security, applying this knowledge to improve the Fivetran platform's security posture. Skills We’re Looking For Security Operations & Incident Response Expertise: Deep expertise in detecting, investigating, and responding to security incidents, with a track record of leading enterprise-wide incident response. People Management: Proven experience managing, hiring, and developing security teams, including setting priorities, managing performance, and building a strong team culture. Multi-Tenant SaaS Experience: Extensive experience securing and responding to incidents in multi-tenant SaaS environments at scale, with a strong understanding of tenant isolation and customer data protection. AI Proficiency: Hands-on experience applying AI, including LLMs and AI agents, to security operations to automate detection, triage, and response, and a strong understanding of the risks AI introduces. Cloud & Infrastructure Security: Strong experience with cloud platforms (e.g., AWS, GCP, Azure), Kubernetes, and containerized environments, including cloud-native logging and detection. Detection & Response Tooling: Proficiency with SIEM, SOAR, EDR/XDR, identity, and cloud detection tools, and experience integrating them into automated workflows. Technology Ownership: Experience owning a security technology roadmap, including tool selection, budgets, and vendor management. Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to make sound decisions under pressure in fast-paced environments. Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams, and to communicate clearly with executives and customers during incidents. Curiosity & Urgency: Demonstrates strong curiosity, a sense of urgency, and a hands-on approach to diving deep into complex technical problems to drive timely and effective solutions. #LI-Remote #LI-AM1 The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role.  Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process. Pay Range $186,701 — $233,376 USD Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.

Location: Remote, New York, United States, AMER From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About Us Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites. About the Role Fivetran + dbt  is seeking a Manager of Security Operations, Incident Detection and Response, to bolster and improve the robustness and security of the platform and the entire enterprise. This people-leadership role is hands-on and execution-focused, requiring deep expertise in security operations, incident detection and response, AI-driven security automation, and securing multi-tenant SaaS environments. You'll build and lead a high-performing team, own the detection and response technology stack, and serve as the accountable leader for incident response across the entire enterprise, ensuring threats are detected, contained, and remediated quickly from endpoint to cloud to production. This is a full-time remote position based out of the US (EST Time Zone). Technologies You’ll Use Crowdstrike, Okta, Google Workspace, Wiz, Open Source, Notion, JIRA What You’ll Do People Leadership: Lead, mentor, and develop a team of detection and response engineers and analysts. Set clear goals, manage performance, and grow careers while fostering a culture of ownership, curiosity, and urgency. Hiring & Team Building: Recruit, hire, and onboard top security talent. Define team structure, roles, on-call rotations, and hiring plans to scale the team alongside the business. Enterprise Incident Response: Own the incident response program for the entire enterprise, including investigation, containment, eradication, remediation, and post-incident review. Act as incident commander for major security events and coordinate with Legal, Privacy, Communications, and executive leadership. Detection Engineering: Build, optimize, and maintain high-fidelity detections across cloud, identity, endpoint, SaaS, and application layers, using threat-informed approaches such as MITRE ATT&CK to close coverage gaps. AI-Driven Security Operations: Drive the adoption of AI, including LLMs and AI agents, to automate alert triage, enrichment, investigation, and response. Evaluate and integrate AI capabilities to scale the team, and build detections for threats targeting AI systems and AI usage across the enterprise. Multi-Tenant SaaS Security: Design detection and response strategies tailored to a multi-tenant SaaS platform, including tenant isolation, cross-tenant access, and customer data protection. Lead customer-impacting incident response and coordinate customer notifications. Security Technology Ownership: Own the security operations technology stack, including SIEM, SOAR, EDR/XDR, cloud detection and response, and log pipelines. Manage the roadmap, budget, and vendor relationships. Threat Hunting & Intelligence: Lead proactive threat hunting and integrate threat intelligence to identify and mitigate emerging threats before they impact the business. Cross-Team Collaboration: Work directly with engineering, infrastructure, IT, application security, and GRC teams to integrate detection and response practices and remediate risks across build pipelines, runtime environments, and corporate systems. Tooling & Automation: Develop and maintain automation, playbooks, and integrations to streamline security processes and provide self-service security tools to the organization. Security Standards & Metrics: Implement consistent security controls, monitoring, and alerting across the enterprise. Define and report on key metrics such as mean time to detect (MTTD) and mean time to respond (MTTR), and support compliance requirements. Knowledge Sharing: Stay up to date with trends in security operations, incident response, cloud security, and AI security, applying this knowledge to improve the Fivetran platform's security posture. Skills We’re Looking For Security Operations & Incident Response Expertise: Deep expertise in detecting, investigating, and responding to security incidents, with a track record of leading enterprise-wide incident response. People Management: Proven experience managing, hiring, and developing security teams, including setting priorities, managing performance, and building a strong team culture. Multi-Tenant SaaS Experience: Extensive experience securing and responding to incidents in multi-tenant SaaS environments at scale, with a strong understanding of tenant isolation and customer data protection. AI Proficiency: Hands-on experience applying AI, including LLMs and AI agents, to security operations to automate detection, triage, and response, and a strong understanding of the risks AI introduces. Cloud & Infrastructure Security: Strong experience with cloud platforms (e.g., AWS, GCP, Azure), Kubernetes, and containerized environments, including cloud-native logging and detection. Detection & Response Tooling: Proficiency with SIEM, SOAR, EDR/XDR, identity, and cloud detection tools, and experience integrating them into automated workflows. Technology Ownership: Experience owning a security technology roadmap, including tool selection, budgets, and vendor management. Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to make sound decisions under pressure in fast-paced environments. Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams, and to communicate clearly with executives and customers during incidents. Curiosity & Urgency: Demonstrates strong curiosity, a sense of urgency, and a hands-on approach to diving deep into complex technical problems to drive timely and effective solutions. #LI-Remote #LI-AM1 The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role.  Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process. Pay Range $186,701 — $233,376 USD Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.

Location: London Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. ROLE OVERVIEW As a Junior Application Security Analyst in the Information Security team, you will help secure Checkout.com http://Checkout.com’s software applications throughout the Secure Software Development Lifecycle (SSDLC). You will work closely with developers and product teams to integrate security early in the development process, identify and oversee the remediation of vulnerabilities, and ensure adherence to secure coding practices and application security standards. This role focuses on practical, hands-on security support while also growing your expertise in application security.   KEY RESPONSIBILITIES SSDLC & Secure Coding - Assist in integrating security controls into the SSDLC. - Support the creation and maintenance of secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards). Application Security Testing - Run a Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans. - Conduct API security testing. - Support CI/CD pipelines to keep secure and effective integration. THREAT MODELING & APPLICATION SECURITY ANALYSIS - Participate in threat modeling sessions. - Document identified threats, assess risks and provide mitigation recommendations. - Assist in code and system reviews to analyse security in company’s products. VULNERABILITY MANAGEMENT - Triage and prioritise vulnerabilities from automated scans. - Track, verify and ensure security flaws remediation. - Assist to automate an AppSec pipelines COLLABORATION & AWARENESS - Collaborate with engineering teams to integrate security into product design and improve existing systems. - Help deliver training and awareness on SSDLC best practices and secure coding. - Contribute to security documentations. REQUIRED SKILLS & EXPERIENCE - 1–3 years in application security, secure software development, or related IT/security role. - Understand basic network technologies and protocols (HTTP, TCP/IP, DNS and the OSI model). - Understanding of common software vulnerabilities and their mitigations. - Basic programming experience in a popular language (e.g., Python, JavaScript, Golang). - Understanding of CI/CD pipelines and DevSecOps principles. - Basic understanding of cloud technologies (AWS, GCP or Azure) and GitHub security features. - Strong attention to detail in documentation and assessments. PREFERRED - Familiarity with SAST/DAST/SCA tools and API security testing platforms. - Exposure to cloud-native application security (AWS, Azure, GCP). - Understanding of container security (Docker, Kubernetes). - Experience of participating in Capture The Flag (CTF) competitions. KEY COMPETENCIES - Eager to learn and expand technical skills in application security. - Effective communicator with both technical and non-technical audiences. - Collaborative and proactive problem solver. - Ability to prioritise work. Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Анализ безопасности программного обеспечения, создаваемого не техническими специалистами. Организация процессов безопасной разработки, внедрение инструментов безопасной разработки.

Location: Remote, Poland; Agios Athanasios, Cyprus; Tbilisi, Georgia; Kazakhstan; Armenia; Portugal; Serbia; Spain Workplace: fully Simple Life is the #1 AI-powered health coaching app for adults who want to lose weight and enjoy a healthier lifestyle-without the stress or extremes. Our mission is to empower people to feel their best every day. By challenging traditional, restrictive approaches, Simple offers a more sustainable method grounded in ease, personalization, and real-life support. Simple has had over 17 million downloads and more than 300,000 5-star reviews, having helped millions lose weight successfully and sustainably. Simple has earned recognition as Best Virtual Coach and one of the Top 100 AI companies — all thanks to a dedicated global team driving real impact. With SIMPLE as a partner in their pocket, users feel cared for and empowered to embrace - and stick to - new healthy habits. To learn more, visit simple.life. We are looking for a hands-on Senior Security Engineer with a strong background in application security and cloud-native infrastructure. You will work directly with Engineering and SRE to design, implement, and improve security controls across our applications, cloud environments, and development pipelines. This is an engineering-first role. We are looking for someone who is comfortable working with code, infrastructure, and automation rather than relying solely on security tools and processes. Our main application stack is written in Go and runs on AWS and Kubernetes/EKS. This is a practical engineering role, so we’re looking for someone comfortable working with code, infrastructure and automation. Security is an independent function, giving you the chance to work across teams, own projects and shape how security is built into our systems. What you'll do: Improve application security across the SDLC through threat modeling, secure design reviews, code review, and automated security testing. Implement and maintain security controls in AWS and Kubernetes/EKS, including IAM, network policies, secrets management, workload security, and admission control. Develop security automation, infrastructure-as-code policies, and reusable tooling for engineering teams. Investigate vulnerabilities, assess their exploitability, and work with engineering teams on remediation. Support technical security assessments, penetration testing, and remediation of identified findings. Help improve security logging, detection, and incident response capabilities. Implement and maintain technical controls supporting HIPAA, SOC 2, and other relevant requirements. Take security engineering projects from design through implementation, rollout, and ongoing improvement. What we're looking for: 5+ years of relevant experience in security engineering, application security, cloud security, or software engineering with a security focus. Familiarity with HIPAA, SOC 2, or ISO 27001 requirements. Strong hands-on experience in application security, cloud security, or both, with a willingness to work across these areas. Production experience with AWS and Kubernetes. Good understanding of web and API security, authentication, authorization, and common application vulnerabilities. Ability to read and write code in Go, Python, or a similar language. Experience with CI/CD security and infrastructure-as-code. Experience working with security scanning tools and vulnerability management. Understanding of IAM, cloud networking, secrets management, and container security. Ability to independently investigate technical problems and implement practical solutions. Comfortable working directly with developers and infrastructure engineers. Strong written and spoken English. Would be a plus: Offensive security experience, penetration testing, or bug bounty work. Experience with Istio, mTLS, and Kubernetes network policies. Experience with Kyverno, OPA, Cilium, or similar technologies. Experience with supply-chain security tooling such as Cosign, Sigstore, or Syft.

Workplace: office Обязанности Проведение автоматизированного и ручного тестирования на проникновение внутренних и внешних сервисов (внутренний контур/инфраструктурные уязвимости, Web, API, сетевые сегменты) Выполнение аудита безопасности облачной платформы (OpenStack) и контейнерных сред (Kubernetes). Разработка proof-of-concept (PoC) эксплуатации уязвимостей для демонстрации рисков бизнес-подразделениям Участие в red team exercises — симуляция действий реальных злоумышленников с фокусом на критические активы компании Разработка и поддержка скриптов автоматизации (Python, Go, Bash) для оркестрации сканеров безопасности (Burp Suite Enterprise, Nessus, Trivy, Semgrep) и обработки их результатов. Аудит и hardening Kubernetes-кластеров: настройка RBAC, Network Policies, Pod Security Standards/OPA Gatekeeper, ограничение привилегированных контейнеров. Сканирование образов контейнеров на уязвимости (CVE) и небезопасные конфигурации до развертывания в production; настройка политик admission controllers Управление уязвимостями (Vulnerability Management) как внутренний сервис Взаимодействие с SOC/Blue Team для передачи индикаторов компрометации (IoC) и уточнения деталей инцидентов, выявленных в ходе пентестов Условия работы Удобный офис с парковкой на м. «Волгоградский проспект» / МЦД «Калитники», гибридный график/удаленка; График работы: 5/2, с 9:00 до 18:15 (в пятницу — до 17:00); Возможность обучаться и сертифицироваться за счёт компании: внешние тренинги и семинары по профессиональным тематикам, отраслевые конференции, программа развития управленческих навыков, очные мастер-классы, платформы онлайн-образования и многое другое; Развитую систему компенсаций и льгот; Широкий пакет ДМС (включая выезд за рубеж и стоматологию); Страхование жизни и здоровья; Скидки в магазинах сети Х5 («Пятёрочка», «Перекрёсток»); Программу привилегий Prime-zone (скидки на товары и услуги и специальные предложения от компаний-партнёров); Материальную помощь сотрудникам, попавшим в сложную жизненную ситуацию; Оформление по ТК РФ с официальной заработной платой. Профессиональные навыки Опыт работы с инструментами (Kali Linux/Parrot Security, Burp Suite, Metasploit, Nmap) Уверенное владение Python/Bash для автоматизации Понимание архитектуры K8s (etcd, kube-apiserver, CNI) Способность балансировать между «breaking» и «building» — не только находить уязвимости, но и помогать их закрыть Клиентоориентированность при работе с внутренними заказчиками Самостоятельность в решении задач средней сложности с эскалацией сложных кейсов к Senior/Lead

Workplace: Москва и Краснодар (гибрид/офис), другие города - удаленно MAGNIT TECH — технологичный драйвер одного из крупнейших ритейлеров страны. Мы создаём будущее: от решений в области автономной логистики с полностью автоматизированными распределительными центрами до исследований потенциала квантовых вычислений. Сейчас мы в поиске Аналитика SOC L3. О продукте Команда создаёт и развивает контент для систем SIEM и SOAR: пишем нормализацию событий, правила корреляции, сценарии реагирования и плейбуки. Фокус — на автоматизации: строим рабочие процессы, кастомные модули и интеграции внутри SOAR-платформы, чтобы обработка инцидентов и рутинные операции закрывались алгоритмами, а не руками. Задачи Разрабатывать и поддерживать плейбуки и сценарии автоматизации в SOAR; Проектировать и реализовывать кастомные модули и интеграции внутри платформы; Настраивать и развивать механизмы нормализации событий и корреляций; Выстраивать и оптимизировать рабочие процессы для обработки инцидентов; Участвовать в проектировании архитектуры сценариев и выборе технических решений; Документировать реализованные сценарии и автоматизации; Предлагать улучшения и новые механизмы автоматизации в существующей базе. Требования Понимание процессов мониторинга и реагирования; Уверенный опыт администрирования и разработки под SOAR-системы; Навыки программирования на скриптовых языках; Опыт практической интеграции SIEM и различных СЗИ с системой оркестрации Условия Оформление в аккредитованную ИТ-компанию Конкурентоспособную заработную плату (обсуждается индивидуально) ДМС со стоматологией и льготными условиями для членов семьи Технику для работы График работы 5/2 с гибким началом Работу в максимально уютном офисе в Москве на ст. м. Савёловская, в Краснодаре или удаленно из других городов РФ, так же есть ИТ офисы в Санкт-Петербурге (ст. м. Балтийская) и Иннополисе Возможность проведения и участия в митапах, хакатонах, где есть возможность познакомиться с работой других подразделений Возможность реализовать свой опыт и потенциал в интересных и многоплановых проектах, получить новый интересный опыт в решении сложных задач Наличие корпоративных скидок и программ лояльности Наличие корпоративной библиотеки курсов Формат работы Москва и Краснодар (гибрид/офис), другие города - удаленно

Workplace: Москва и Краснодар (гибрид/офис), другие города - удаленно MAGNIT TECH — технологичный драйвер одного из крупнейших ритейлеров страны. Мы создаём будущее: от решений в области автономной логистики с полностью автоматизированными распределительными центрами до исследований потенциала квантовых вычислений. Сейчас мы в поиске Инженера SOC L2 . О продукте Команда защищает современную облачную инфраструктуру компании: Linux, Kubernetes, контейнеры и облачные сервисы. Расследуем инциденты, проактивно ищем угрозы и наводим порядок в конфигурациях безопасности, чтобы инфраструктура работала без сбоев. Работаем с реальной продуктовой средой: собственная облачная платформа, Yandex Cloud, Cloud.ru, Kafka, PostgreSQL, Redis, Object Storage. Каждый инцидент — возможность разобраться, как система устроена изнутри, на уровне процессов, сетей и ядра. Формального опыта в SOC не требуется — нам интересны и инженеры DevOps, DevSecOps, SRE с сильной технической базой, которые хотят развиваться в Cloud Security, Threat Hunting и Incident Response. Для нас важнее практические инженерные навыки и системное мышление. Задачи Расследовать сложные и нетиповые инциденты в Linux, Kubernetes, контейнерной и облачной инфраструктуре; Проводить технический анализ и DFIR: процессы, сетевые соединения, системные журналы, артефакты компрометации; Проводить проактивный поиск угроз (Threat Hunting) на основе гипотез, IoC и техник MITRE ATT&CK; Выявлять векторы атак, находить первопричины инцидентов и давать технические рекомендации по устранению угроз; Расследовать инциденты в Kubernetes: Audit Logs, события, контейнеры, активность внутри кластера; Анализировать техники атак на Kubernetes и контейнеры по MITRE ATT&CK for Containers; Выявлять небезопасные конфигурации: RBAC, NetworkPolicy, Pod Security Standards, Secrets, SecurityContext, Admission Controllers; Анализировать защищённость облачных сервисов: Kafka, S3/Object Storage, PostgreSQL, Redis; Находить ошибки в конфигурациях IAM, сетевого доступа, аутентификации, авторизации, шифрования и управления секретами; Писать скрипты и инструменты для автоматизации расследований, сбора артефактов и проверки конфигураций; Разрабатывать сценарии обнаружения атак и методы проактивного поиска угроз; Исследовать новые техники атак на Linux, Kubernetes и облачные сервисы; Готовить техническую документацию, инструкции и сценарии расследований; Делиться экспертизой с командой и развивать процессы реагирования на инциденты. Требования Уверенное знание Linux: процессы, файловая система, права доступа, systemd, сетевой стек, системные журналы, механизмы аудита; Практический опыт работы с Kubernetes: kubectl, архитектура кластера, Pod, Deployment, DaemonSet, ServiceAccount, RBAC, NetworkPolicy, Secrets; Понимание Docker/containerd, механизмов изоляции контейнеров и возможных векторов атак; Знание основных техник MITRE ATT&CK применительно к Linux, контейнерам и Kubernetes; Понимание принципов безопасной настройки облачных сервисов: IAM, S3/Object Storage, Kafka, СУБД, сетевой доступ, управление секретами; Знание сетевых протоколов TCP/IP, DNS, HTTP(S), TLS; Уверенное владение Bash — самостоятельно пишешь скрипты для автоматизации задач; Понимание Git, CI/CD, Infrastructure as Code и DevOps-практик; Умение технически анализировать проблемы и самостоятельно искать их первопричину. Будет плюсом Опыт в SOC L2/L3, Incident Response, DFIR, DevSecOps или SRE; Практический опыт с российскими облаками или частными облачными платформами; Python / Go и опыт разработки инструментов автоматизации; Опыт с Terraform, Helm, Argo CD / FluxCD, GitLab CI/CD; Знакомство с инструментами безопасности Kubernetes: Falco, Tetragon, Trivy, Kyverno; Опыт работы с Wireshark, osquery и другими DFIR-инструментами; Понимание eBPF, Kubernetes Runtime Security и обнаружения атак на уровне ОС и контейнеров; Опыт технических исследований безопасности и Threat Hunting. Условия Оформление в аккредитованную ИТ-компанию Конкурентоспособную заработную плату (обсуждается индивидуально) ДМС со стоматологией и льготными условиями для членов семьи Технику для работы График работы 5/2 с гибким началом Работу в максимально уютном офисе в Москве на ст. м. Савёловская, в Краснодаре или удаленно из других городов РФ, так же есть ИТ офисы в Санкт-Петербурге (ст. м. Балтийская) и Иннополисе Возможность проведения и участия в митапах, хакатонах, где есть возможность познакомиться с работой других подразделений Возможность реализовать свой опыт и потенциал в интересных и многоплановых проектах, получить новый интересный опыт в решении сложных задач Наличие корпоративных скидок и программ лояльности Наличие корпоративной библиотеки курсов Формат работы Москва и Краснодар (гибрид/офис), другие города - удаленно

Location: Москва Workplace: Гибрид, Удаленно, Офис Объединённая компания Wildberries и Russ — это международная технологическая компания, образованная в результате слияния двух лидеров рынка — IT-компании Wildberries и оператора наружной рекламы Russ. Сейчас мы ищем руководителя группы анализа защищенности приложений для обеспечения непрерывного тестирования безопасности наших продуктов. В нашей команде безопасности вы будете не просто искать уязвимости, а участвовать в создании масштабных решений, защищающих экосистему Wildberries и Russ. Это позиция, где ваши навыки будут напрямую влиять на безопасность миллионов пользователей и устойчивость бизнес-процессов. Обязанности Организовывать и контролировать проведение аудитов и архитектурных ревью; Планировать задачи и управлять приоритетами; Участвовать в улучшении процессов продуктовой безопасности; Внедрять новые практики безопасности и переиспользования опыта отдельных бизнес-линий. Требования Обладаете лидерскими качествами, умеете растить команду, расставлять приоритеты, формировать стратегию; Обладаете глубокими знаниями в AppSec, имеете широкий кругозор в ИБ и умеете гибко адаптировать решения под текущие проблемы; Способны эффективно работать в условиях многозадачности, умеете управлять приоритетами и прогнозируете сроки. Условия Обучение и развитие: языковые клубы, собственный корпоративный университет, программы развития управленческих навыков и многое другое; Благополучие сотрудников: корпоративный пакет ДМС со стоматологией, корпоративный спорт, консультации психолога и дополнительные возможности аккредитованной IT-компании; Множество сообществ: клуб спикеров, футбола, йоги, шахмат и т.д.; Забота о семьях: создаем условия, в которых легко сочетать карьеру и заботу о близких – от гибкого подхода до масштабных проектов для детей сотрудников; Скидки и партнерские программы: на обучение, страхование, покупки и многое другое; Комфортная рабочая среда: бесплатное питание в офисе, современные офисы рядом с метро, корпоративная техника и портал для сотрудников.

Workplace: Удаленно Объединённая компания Wildberries и Russ — это международная технологическая компания, образованная в результате слияния двух лидеров рынка — IT-компании Wildberries и оператора наружной рекламы Russ. Обязанности Внедрять и поддерживать механизмы безопасности Kubernetes: policy-as-code, PSS/PSA, securityContext, контроль отклонений и работа с исключениями; Развивать runtime security и security observability: сбор/анализ событий, настройка правил детекта, снижение false positive, интеграции с логированием/алертингом; Улучшать сетевую безопасность кластеров: NetworkPolicies (Calico/Cilium), сегментация, контроль ingress/egress совместно с платформенной командой; Развивать автоматизацию аналитики Kubernetes-безопасности: сбор данных о конфигурациях/политиках/инцидентах, базовые отчёты и дашборды, поиск отклонений; Внедрять и сопровождать менеджмент секретов в Kubernetes: практики работы с секретами, интеграции с Vault/KMS/External Secrets, ротация и безопасная доставка секретов в workload’ы; Проводить архитектурные ревью безопасности и моделирование угроз для платформенных изменений и инфраструктурных сервисов, доводить изменения до production окружения; Автоматизировать рутину: GitOps/CI для конфигов и политик, тестирование политик, документация и runbooks. Требования Практический опыт с Kubernetes: RBAC, ServiceAccounts, securityContext, Admission, Audit Logs, PSS/PSA, харденинг Control Plane; Понимание контейнеров и Linux security на прикладном уровне; Опыт работы с 1–2 доменами: policy engines (Kyverno / OPA Gatekeeper), runtime monitoring/detection (Falco/Tetragon/Tracee или аналоги), NetworkPolicies (Calico/Cilium); Опыт secret management: Vault/External Secrets/KMS, понимание ротации, прав доступа, безопасной доставки секретов; Инструменты эксплуатации: Terraform/Ansible, Helm/Kustomize, GitOps (ArgoCD/Flux); Автоматизация: Python/Go/Bash, написание интеграций/утилит, работа с K8s API, логами/метриками; Базовая наблюдаемость: Prometheus/Alertmanager/логирование, умение разбираться в инцидентах и писать понятные runbooks. Условия Обучение и развитие: языковые клубы, собственный корпоративный университет, программы развития управленческих навыков и многое другое; Благополучие сотрудников: корпоративный пакет ДМС со стоматологией, корпоративный спорт, консультации психолога и дополнительные возможности аккредитованной IT-компании; Множество сообществ: клуб спикеров, футбола, йоги, шахмат и т.д.; Забота о семьях: создаем условия, в которых легко сочетать карьеру и заботу о близких – от гибкого подхода до масштабных проектов для детей сотрудников; Скидки и партнерские программы: на обучение, страхование, покупки и многое другое; Комфортная рабочая среда: бесплатное питание в офисе, современные офисы рядом с метро, корпоративная техника и портал для сотрудников.

Workplace: Удаленно Объединённая компания Wildberries и Russ — это международная технологическая компания, образованная в результате слияния двух лидеров рынка — IT-компании Wildberries и оператора наружной рекламы Russ. По мере масштабирования IT-направления, Wildberries активно усиливает команду ИБ, создавая надежную и адаптивную инфраструктуру защиты. Мы сталкиваемся с уникальными вызовами, от повышения безопасности каждого отдельного сервиса до обеспечения целостной защиты всей нашей обширной инфраструктуры. Мы ищем аналитика SOC, который будет проектировать и развивать распределенные системы централизованного сбора, обработки и анализа событий. Аналитику предстоит обеспечить масштабируемое и воспроизводимое обнаружение и реагирование на инциденты в инфраструктурах бизнес-юнитов объединенной группы компаний. Обязанности Реагирование на инциденты информационной безопасности; Проведение полного цикла мероприятий по форензике; Формирование списка корректирующих действий, их контроль и реализация на основе уроков, извлеченных из инцидентов; Разработка и поддержка в актуальном состоянии плейбуков по реагированию на инциденты; Участие в процессе подключения источников: оценка полноты информации для реагирования на инциденты. Требования Навыки идентификации и анализа вредоносного ПО, cкриптов, документов; Опыт работы с SIEM: умение выстраивать оптимальные поисковые запросы, интерпретировать полученные результаты, строить визуализации для удобного отображения и анализа данных; Умение пользоваться инструментарием по сбору триажа и форензике; Владение Python/PowerShell/Bash на уровне, позволяющем автоматизировать повседневные задачи; Знание одной из систем Linux/Windows/MacOS на уровне системного администратора; Навыки анализа и обработки большого объема данных (логи с хостов, триажи, дампы памяти/жестких дисков) с ручной и/или автоматической корреляцией между собой и выделением значащих данных. Будет плюсом: Опыт работы с ELK stack; Знание устройства Kubernetes, Docker, особенностей их мониторинга; Умение писать простые SQL-запросы; Опыт работы с NTA; Наличие профильных сертификатов по информационной безопасности Выступления на крупных конференциях и митапах, например PHDays, OffZone, Standoff и других. Условия Обучение и развитие: языковые клубы, собственный корпоративный университет, программы развития управленческих навыков и многое другое; Благополучие сотрудников: корпоративный пакет ДМС со стоматологией, корпоративный спорт, консультации психолога и дополнительные возможности аккредитованной IT-компании; Множество сообществ: клуб спикеров, футбола, йоги, шахмат и т.д.; Забота о семьях: создаем условия, в которых легко сочетать карьеру и заботу о близких – от гибкого подхода до масштабных проектов для детей сотрудников; Скидки и партнерские программы: на обучение, страхование, покупки и многое другое; Комфортная рабочая среда: бесплатное питание в офисе, современные офисы рядом с метро, корпоративная техника и портал для сотрудников.

Location: Москва Workplace: Гибрид, Удаленно, Офис Объединённая компания Wildberries и Russ — это международная технологическая компания, образованная в результате слияния двух лидеров рынка — IT-компании Wildberries и оператора наружной рекламы Russ. Обязанности Создавать собственные инструменты для автоматизированного поиска уязвимостей, в том числе, использующие LLM; Проводить комплексные аудиты продуктов компании; Разрабатывать внутренние чек-листы, методологии и автоматизации для эффективного тестирования безопасности; Исследовать безопасность и заниматься поиском новых векторов атак — от hardware до LLM моделей. Требования Обладаете лидерскими качествами: умение растить команду, расставлять приоритеты, формировать стратегию; Имеете экспертизу в offensive security: от классических web/mobile пентестов до атак на IoT; Имеете white-box ориентированность: умение работать с артефактами команд разработки и эксплуатации; Используете исследовательский подход: интерес к проведению ресерчей, анализу протоколов и новых векторов атак; Имеете навыки разработки инструментов: опыт написания собственных сканеров, или расширений для существующих инструментов. Условия Обучение и развитие: языковые клубы, собственный корпоративный университет, программы развития управленческих навыков и многое другое; Благополучие сотрудников: корпоративный пакет ДМС со стоматологией, корпоративный спорт, консультации психолога и дополнительные возможности аккредитованной IT-компании; Множество сообществ: клуб спикеров, футбола, йоги, шахмат и т.д.; Забота о семьях: создаем условия, в которых легко сочетать карьеру и заботу о близких – от гибкого подхода до масштабных проектов для детей сотрудников; Скидки и партнерские программы: на обучение, страхование, покупки и многое другое; Комфортная рабочая среда: бесплатное питание в офисе, современные офисы рядом с метро, корпоративная техника и портал для сотрудников.

Location: Москва Workplace: Гибрид, Удаленно, Офис Объединённая компания Wildberries и Russ — это международная технологическая компания, образованная в результате слияния двух лидеров рынка — IT-компании Wildberries и оператора наружной рекламы Russ. Расширяем Red Team Wildberries & Russ и ищем опытных Senior/Senior+ пентестеров для комплексных проектов: от внешнего периметра и веб-приложений до внутренней инфраструктуры, K8s, облаков и Active Directory. Предстоит самостоятельно вести исследования, выбирать векторы атак, объединять уязвимости в цепочки и подтверждать их влияние на бизнес, а также развивать методологию и инструменты команды. Сохраняем фокус на Purple Team: вместе с защитниками разбираем результаты, определяем необходимые изменения и проверяем их эффективность. Если интересны сложные сценарии и возможность влиять на подходы команды, буду рад познакомиться! Обязанности Проведение аудитов в формате тестирования на проникновение (внешняя и внутренняя инфраструктура, социалка) Проведение аудитов в формате анализа защищенности (веб и мобильные приложения) Проведение аудитов в формате Red/Purple Teaming Поиск и эксплуатация уязвимостей веб и мобильных приложений Поиск и эксплуатация уязвимостей и недостатков конфигурации ОС Linux а также специфичных для нее сервисов Поиск и эксплуатация уязвимостей OC Windows и недостатков конфигурации Active Directory Поиск и эксплуатация уязвимостей и недостатков конфигурации СУБД, систем виртуализации и контейнеризации Оформление найденных уязвимостей для отчетов по итогам проекто Требования Опыт проведения проектов по анализу защищенности веб и мобильных приложений Опыт проведения проектов по тестированию на проникновение (внешняя и внутренняя инфраструктура) Опыт поиска и эксплуатации уязвимостей веб и мобильных приложений Опыт поиска и эксплуатации уязвимостей ОС Linux Опыт поиска и эксплуатации уязвимостей OC Windows и недостатков конфигурации AD Опыт поиска и эксплуатации уязвимостей и недостатков конфигурации систем виртуализации и контейнеризации Знание любого языка программирования на уровне достаточном для понимания/создания эксплойтов и автоматизации задач по поиску уязвимостей Условия Обучение и развитие: языковые клубы, собственный корпоративный университет, программы развития управленческих навыков и многое другое; Благополучие сотрудников: корпоративный пакет ДМС со стоматологией, корпоративный спорт, консультации психолога и дополнительные возможности аккредитованной IT-компании; Множество сообществ: клуб спикеров, футбола, йоги, шахмат и т.д.; Забота о семьях: создаем условия, в которых легко сочетать карьеру и заботу о близких – от гибкого подхода до масштабных проектов для детей сотрудников; Скидки и партнерские программы: на обучение, страхование, покупки и многое другое; Комфортная рабочая среда: бесплатное питание в офисе, современные офисы рядом с метро, корпоративная техника и портал для сотрудников.

Location: Australia; Hong Kong The Global Security Operations Engineer is a senior technical role responsible for strengthening the firm's ability to detect, investigate, respond to, and recover from cybersecurity threats across its global environment. Working as part of the Global Security operations team, the successful candidate will lead complex security investigations, develop and optimize threat detection capabilities, and implement automation to improve the effectiveness and efficiency of security operations. The role combines hands-on incident response with proactive security engineering, helping the firm move from reactive alert management toward an increasingly automated, intelligence-led security operating model. Operating within a geographically distributed organization, the successful candidate will work closely with global and regional technology and security teams, provide technical leadership during significant incidents, and contribute to the continuous improvement of security capabilities. Based in APAC, the role will provide critical regional coverage as part of a coordinated global security operations function. Responsibilities Advanced Investigation and Incident Response Serve as a senior escalation point for security incidents, assuming ownership of complex, ambiguous, and high-severity events that exceed first-line triage capability. Conduct detailed investigations to establish initial access vectors, attacker activities and objectives, scope of compromise, and dwell time, documenting findings to an appropriate evidentiary standard. Perform root cause analysis on confirmed incidents and near misses, identifying underlying security control or process failures rather than simply addressing immediate symptoms. Act as technical lead during significant incidents across containment, eradication, and recovery, coordinating activities across global and regional teams. Conduct host and network forensics and malware triage, engaging specialist forensic providers where investigations exceed internal capabilities. Translate technical findings into clear statements of business risk for leadership and drive post-incident corrective actions through to closure. Investigate identity-based attacks, account compromise, unauthorized access, and suspicious activity across cloud platforms and enterprise applications, including Microsoft 365 and Entra ID. Participate in an on-call rotation and provide out-of-hours escalation support during serious incidents, and undertake additional projects and activities as required. Security Automation & Detection Engineering Design, build, tune, and maintain detection content mapped to the MITRE ATT&CK framework, identifying and reporting coverage gaps against threat actor tactics, techniques, and procedures relevant to the firm. Reduce false-positive volume and analyst alert fatigue through systematic tuning, suppression logic, and automated alert enrichment. Operationalize threat intelligence by translating reporting and indicators of compromise into actionable detections, threat-hunting hypotheses, and preventive controls. Design, develop, and maintain automated response playbooks, including Logic Apps, automation rules, and SOAR workflows, to reduce mean time to detect and respond. Write and maintain queries, scripts, and code (KQL, PowerShell, Python, or equivalent) supporting detection, enrichment, automated triage, and reporting. Integrate security tooling and data sources through APIs and connectors, including onboarding new log sources with appropriate parsing, normalization, and validation. Continuously assess and improve security monitoring, detection, and response capabilities, identifying opportunities to strengthen coverage, reduce operational complexity, and improve effectiveness through automation and technology optimization. Identify opportunities to apply AI-assisted investigation, alert triage, and security automation capabilities to improve detection effectiveness, reduce manual effort, and accelerate incident response. Conduct proactive threat hunting to identify suspicious activity, validate detection effectiveness, and uncover threats that may evade existing security controls. Requirements This is a hands-on technical role requiring demonstrated depth in security operations, sound technical judgment, and the ability to work with limited supervision. We value analytical rigor, curiosity, initiative, and a willingness to share knowledge and develop others as highly as any individual technology or certification. Compulsory Requirements: 5+ years of experience in security operations, incident response, or detection engineering, including demonstrable experience working in a Security Operations Center (SOC). Proven experience leading complex technical investigations end to end, from escalation through root cause analysis to documented remediation. Deep, hands-on expertise with modern SIEM and endpoint detection and response (EDR) platforms, including authoring and optimizing detection logic, conducting investigations, and managing data onboarding. Strong practical automation and scripting abilities, including KQL and at least one of PowerShell or Python, with demonstrated experience developing and operating automation in production. Experience designing and maintaining automated response playbooks using Logic Apps, automation rules, or comparable SOAR capabilities. Advanced knowledge of the MITRE ATT&CK framework, Cyber Kill Chain analysis, and established incident response methodologies, such as PICERL. Strong working knowledge of TCP/IP and networking, Windows and Linux operating systems, Active Directory, Entra cloud identity and authentication, and security operations across cloud and hybrid environments. Experience with host and network forensics, malware triage, and the analysis of malicious email headers, links, and attachments. Strong written and verbal communication skills, including the ability to communicate technical findings and security risks to both technical and nontechnical audiences. Ability to work independently and collaborate effectively with geographically dispersed teams, with flexibility to provide out-of-hours support during significant security incidents. Occasional travel to support global cybersecurity operations and incident response may be required Preferred Requirements: Bachelor's degree in Information Security, Information Technology, Computer Science, or a related discipline, or equivalent professional experience. Industry certifications such as GCIH, GCIA, GCFA, GREM, OSCP, CySA+, SC-200, AZ-500, or CISSP. Hands-on experience with Microsoft security technologies, including Microsoft Sentinel, Microsoft Defender XDR, Microsoft Entra ID, and Microsoft Azure. Experience operating within a global, federated, or shared-services model, ideally in professional services or another highly regulated sector. Familiarity with ISO 27001, the NIST Cybersecurity Framework, or comparable control frameworks Benefits Benefits are aligned with the respective location. The above is intended to describe the general content of and requirements for the performance of this job.  It is not to be construed as an exhaustive statement of essential functions, responsibilities or requirements.