Вакансии

Задачи: — Проектировать и развивать MCP-сервер: архитектуру, инструменты, схемы входных и выходных данных. — Интегрировать MCP-сервер с API и внутренними сервисами DSP совместно с backend-командой. — Реализовывать инструменты для работы с кампаниями, флайтами, объявлениями, креативами, таргетингами и лимитами. — Давать ИИ доступ к статистике: показы, клики, CTR, VTR, охват, частота, качество трафика и другие показатели в разных разрезах. — Делать инструменты понятными для моделей: точные описания, предсказуемые ответы, полезные сообщения об ошибках. — Обеспечивать разграничение прав и изоляцию данных клиентов, аудит действий, подтверждение чувствительных изменений и защиту от повторного выполнения операций. — Проверять полноценные сценарии работы ИИ с платформой: правильно ли выбраны инструменты, получены данные и выполнены изменения. — Отвечать за тестирование, документацию, мониторинг и стабильность MCP-сервера в продакшене. Примеры сценариев: — «Покажи кампании, которые отстают от плана по открутке». — «Сравни эффективность площадок и устройств за неделю». — «Найди источники с низким VTR и подготовь предложения по отключению». — «Подготовь изменение таргетингов, покажи разницу и примени после подтверждения». — «Объясни, почему кампания не расходует бюджет, используя настройки и статистику». Требования: — Уверенный опыт backend-разработки на TypeScript / Node.js. — Опыт проектирования API и интеграции нескольких сервисов. — Практический опыт с MCP либо с инструментами для LLM: tool calling, структурированные ответы, агентные сценарии. — Понимание авторизации, ролей доступа, валидации данных, идемпотентности и обработки ошибок. — Умение работать с SQL, разбираться в чужом API и существующей бизнес-логике. — Опыт тестирования, Docker и эксплуатации сервисов. — Самостоятельность: способность разобраться в продуктовой задаче, предложить решение и довести его до работающего функционала. Будет плюсом: — Опыт запуска MCP-серверов в продакшене. — Знание NestJS, Go, PostgreSQL, Redis и ClickHouse. — Опыт разработки систем с несколькими клиентскими кабинетами и сложными правами доступа. — Понимание рекламных платформ и метрик: DSP, SSP, RTB, VAST, CTR, VTR, CPM. — Опыт защиты ИИ-интеграций от prompt injection и нежелательных действий. Техническое окружение: Backend платформы — NestJS и Go. Данные и инфраструктура — PostgreSQL, Redis, ClickHouse, Kafka, Docker/k8s. Frontend — React + TypeScript. О роли: Основной фокус — исключительно MCP-направление: его архитектура, функциональность и надёжность. Работа предполагает тесное взаимодействие с продуктовой и backend-командой и возможность влиять на то, как пользователи будут управлять рекламой через ИИ. В отклике: Расскажите о backend- и ИИ-интеграциях, которые вы разрабатывали. Если есть MCP-серверы или проекты с tool calling — приложите ссылку либо кратко опишите свою роль и решённые задачи.

Задачи: — Разработка full-stack приложений с использованием Node.js и React — Работа с базами данных MySQL и PostgreSQL, включая транзакции, блокировки, оптимизацию SQL-запросов — Настройка и поддержка инфраструктуры: Docker, Nginx, Redis, RabbitMQ, Elasticsearch, Prometheus, Grafana — Реализация real-time функционала с WebSocket, Socket.IO, Centrifugo — Работа с API и интеграциями, включая OAuth и Telegram Bot API — Использование AI-инструментов Claude и ChatGPT для анализа, написания кода, рефакторинга и отладки — Обеспечение безопасности приложений: защита от SQL Injection, проверка типов данных, базовое понимание криптографии — Проектирование архитектуры высоконагруженных систем с учетом масштабирования и отказоустойчивости Требования: — Уверенные знания Node.js, Express, Sequelize, React, Vite, Tailwind CSS, Zustand, Axios — Опыт работы с MySQL и PostgreSQL, понимание race conditions и конкурентного доступа — Навыки работы с Docker, настройкой Nginx, Redis, RabbitMQ, Elasticsearch, Kibana, Prometheus, Grafana — Знание принципов защиты от DDoS, работы proxy и reverse proxy — Опыт работы с OAuth, Telegram Bot API, TDLib — Умение использовать AI-инструменты в разработке — Понимание безопасности приложений и базовые знания криптографии — Навыки проектирования архитектуры высоконагруженных систем Условия: — Связь для отклика через Telegram @igorclbbet

Задачи: — Разработка full-stack приложений с использованием Node.js и React — Работа с backend и frontend, базами данных, сетевым взаимодействием и архитектурой высоконагруженных систем Требования: — Уверенное владение backend: Node.js, Express, Sequelize — Опыт работы с frontend: React, Vite, Tailwind CSS, Zustand, Axios — Уверенная работа с базами данных MySQL и PostgreSQL, включая транзакции, блокировки, конкурентный доступ, оптимизацию сложных SQL-запросов — Понимание race conditions и проблем конкурентности — Навыки работы с инфраструктурой и DevOps: Docker, настройка Nginx, Redis, RabbitMQ, очереди задач, Elasticsearch + Kibana, Prometheus + Grafana — Понимание CDN, защиты от DDoS на уровнях L3/L7, работы proxy и reverse proxy — Знание API и интеграций: работа с недокументированными API, OAuth, Telegram Bot API, TDLib — Опыт использования AI-инструментов Claude и ChatGPT для анализа, написания кода, рефакторинга, отладки и постановки технических задач — Понимание вопросов безопасности: SQL Injection, проверка типов и входных данных, race conditions, базовое понимание криптографии (RSA, SHA), обфускация, browser/device fingerprinting — Умение проектировать архитектуру высоконагруженных систем, понимание масштабирования, отказоустойчивости, взаимодействия сервисов, очередей, БД, кеша и real-time компонентов Будет плюсом: — Базовое понимание теории вероятностей — Знание принципов работы blockchain и основных сетей: Bitcoin, TON, Ethereum/ERC, TRON — Опыт работы с нестандартными API и интеграциями

Задачи: — backend и frontend разработка с использованием Node.js, Express, Sequelize, React, Vite, Tailwind CSS, Zustand, Axios — работа с базами данных MySQL и PostgreSQL, включая транзакции, блокировки, конкурентный доступ, оптимизацию сложных SQL-запросов — работа с real-time технологиями WebSocket, Socket.IO, Centrifugo — настройка и использование инфраструктурных инструментов: Docker, Nginx, Redis, RabbitMQ, Elasticsearch, Kibana, Prometheus, Grafana — обеспечение безопасности приложений, защита от SQL Injection, проверка типов данных, понимание криптографии и методов обфускации — проектирование архитектуры высоконагруженных систем, масштабирование, отказоустойчивость, взаимодействие между сервисами, очередями, БД, кешем и real-time компонентами Требования: — уверенное владение MySQL и PostgreSQL, понимание race conditions и проблем конкурентности — опыт работы с OAuth, Telegram Bot API, TDLib — умение работать с недокументированными API — базовые знания PixiJS, SEO — понимание принципов защиты от DDoS на уровнях L3/L7, работы proxy и reverse proxy — опыт использования AI-инструментов Claude и ChatGPT для анализа, написания кода, рефакторинга и отладки — базовое понимание криптографии (RSA, SHA), browser/device fingerprinting Будет плюсом: — базовое понимание теории вероятностей — понимание принципов работы blockchain и основных сетей: Bitcoin, TON, Ethereum/ERC, TRON — опыт работы с нестандартными API и интеграциями

Задачи: — Разработка full-stack приложений с использованием Node.js и React Требования: — Хорошее понимание backend и frontend разработки — Опыт работы с базами данных MySQL и PostgreSQL, включая транзакции, блокировки, конкурентный доступ — Навыки построения и оптимизации сложных SQL-запросов — Понимание race conditions и проблем конкурентности — Опыт работы с Docker, настройкой Nginx, Redis, RabbitMQ, Elasticsearch, Kibana, Prometheus, Grafana — Понимание CDN, принципов защиты от DDoS на уровнях L3/L7, работы proxy и reverse proxy — Знание React, Vite, Tailwind CSS, Zustand, Axios, базовые знания PixiJS и SEO — Умение работать с недокументированными API, OAuth, Telegram Bot API, TDLib — Уверенная работа с AI-инструментами Claude и ChatGPT для анализа, написания кода, рефакторинга, отладки — Понимание SQL Injection и способов защиты, проверка подмены типов и некорректных входных данных — Базовое понимание криптографии (RSA, SHA), обфускации, browser/device fingerprinting — Умение проектировать архитектуру высоконагруженных систем, понимание масштабирования, отказоустойчивости, взаимодействия сервисов, очередей, БД, кеша и real-time компонентов Будет плюсом: — Базовое понимание теории вероятностей — Понимание принципов работы blockchain и основных сетей: Bitcoin, TON, Ethereum/ERC, TRON — Опыт работы с нестандартными API и интеграциями

Ищем сильного Full-Stack разработчика с хорошим пониманием backend/frontend-разработки, баз данных, сетевого взаимодействия и архитектуры высоконагруженных систем. Основной стек Backend: Node.js, Express, Sequelize Frontend: React, Vite, Tailwind CSS, Zustand, Axios Databases: MySQL, PostgreSQL Real-time: WebSocket, Socket.IO, Centrifugo Базы данных Уверенная работа с MySQL / PostgreSQL Транзакции, блокировки (locks), конкурентный доступ Построение и оптимизация сложных SQL-запросов Понимание race conditions и проблем конкурентности Infrastructure / DevOps Docker Настройка Nginx Redis, RabbitMQ и очереди задач Elasticsearch + Kibana Prometheus + Grafana Понимание CDN Понимание принципов защиты от DDoS на уровнях L3/L7 Понимание работы proxy / reverse proxy Frontend React Vite Понимание нативной конфигурации Webpack Tailwind CSS Zustand Axios Базовое знание PixiJS Базовое понимание SEO API / Integrations Умение разбираться и работать с недокументированными API OAuth и основные принципы авторизации Telegram Bot API Опыт/понимание работы с TDLib AI-инструменты Уверенная работа с Claude и ChatGPT Использование AI-инструментов в ежедневной разработке: анализ и написание кода, рефакторинг, отладка и поиск решений Умение грамотно ставить технические задачи нейросетям и проверять результат Security Понимание SQL Injection и способов защиты Проверка подмены типов и некорректных входных данных Race conditions Базовое понимание криптографии: RSA, SHA и хеширование Понимание обфускации Понимание browser/device fingerprinting Architecture Умение проектировать архитектуру высоконагруженных систем Понимание масштабирования, отказоустойчивости и конкурентной обработки данных Понимание взаимодействия между сервисами, очередями, БД, кешем и real-time компонентами Будет плюсом Базовое понимание теории вероятностей Понимание принципов работы blockchain и основных сетей: Bitcoin, TON, Ethereum/ERC, TRON Опыт работы с нестандартными API и интеграциями

Location: United States (Remote) Workplace: Remote ABOUT ONEPAY OnePay is the consumer fintech trusted by millions of Americans to make money better. Our financial system is broken. High fees, low rates, and too few ways to actually grow your money. We’re fixing it. And we’re moving fast. We’re an all-in-one financial services platform that brings together banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto in one place. We also partner with employers, HCM providers, gig platforms, and others to deliver embedded financial services to millions of employees and frontline workers. We’re backed by Walmart, the world’s largest retailer, and Ribbit Capital, one of fintech’s most respected investors, giving us rare scale, distribution, and the opportunity to build something truly category-defining. But what really sets OnePay apart is how we move. Our customers don’t have time to wait… and neither do we. This place moves fast, and we’re looking for people who are: - Ready to run - Hungry and driven by urgency - Exceptional at what they do, with low ego - Comfortable operating in motion THE ROLE As a Security and Threat Operations Engineer at OnePay, your work will have a direct impact on protecting our fast-moving fintech environment. You will turn production signals into actionable detection, response, and hardening initiatives, partnering closely with Product Security, Platform Security, and Engineering teams. Your efforts will enable us to proactively identify, monitor, and stop compromised behaviors across OnePay's products and infrastructure, ensuring the continued safety and trust of our business and customers. You will: - Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments. - Review traffic patterns across APIs, authentication flows, and WAF telemetry to identify malicious activity, abuse patterns, and anomalous behavior. - Use AI responsibly as a force multiplier for triage, analysis, and workflow automation, while helping define guardrails for AI-enabled systems. - Help operate OnePay's vulnerability management program by triaging, prioritizing, and driving remediation for findings from Wiz, vulnerability scanning, and related workflows. - Develop Python-based tooling and automation to improve investigations, enrichment, response, and operational scale. - Partner with Product Security to translate threat models, security reviews, and product risks into production detections and response playbooks. - Investigate security events end to end, including triage, scoping, containment support, and follow-through on remediation. - Support vulnerability management and operational security practices in ways that align with PCI and SOC 2 expectations. - Participate in proactive threat hunting, detection improvement, and a 24x7 security incident response on-call rotation. YOU BRING - 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response, ideally in a cloud-native or product-focused environment. - Strong experience investigating suspicious activity in web, API, authentication, and infrastructure telemetry, with the ability to distinguish attacker behavior from normal production noise. - Demonstrated ability to review traffic and event patterns for signs of malicious activity, fraud, account abuse, credential attacks, reconnaissance, and exploitation attempts. - Strong Python programming skills and the ability to write maintainable code for automation, enrichment, analysis, and security operations tooling. - Experience building and tuning detections in a SIEM or detection platform and working with observability and logging systems such as CloudWatch, Datadog, or similar platforms. - Experience operating or supporting a vulnerability management program, including triage, prioritization, remediation tracking, and stakeholder coordination. - Familiarity with cloud and application security findings from platforms such as Wiz, including CNAPP, runtime, code, and vulnerability scanning use cases. - Experience with at least one major cloud provider, preferably AWS. - Working knowledge of identity and access systems, modern authentication flows, and the security implications of internet-facing applications and APIs. - Strong understanding of threat modeling, risk prioritization, and practical security controls across applications, infrastructure, and cloud environments. - Practical experience using AI tools in security workflows, along with sound judgment about AI-specific risks such as prompt injection, data leakage, excessive tool access, and weak auditability. - Excellent analytical, communication, and cross-functional collaboration skills, especially in environments where security needs to move quickly with product and engineering teams. - Drive and proactivity - everyone here is a builder and executor TOOLS WE USE We use Node and TypeScript on the server, leveraging the NestJS framework within a microservice-oriented architecture running on Kubernetes and AWS. On the client side, we build and ship product features for iOS, Android, and web platforms using React Native. We also embrace AI-assisted development, so engineers have their choice of Claude Code or Cursor to fit their workflow. While you don't need experience with our exact stack, familiarity with modern software engineering practices will help you ramp up quickly. WHAT WE OFFER - Competitive base salary, stock options, and health benefits from Day 1 - 401(k) plan with company match - Remote-friendly (US), flexible time off (FTO), and opportunities for growth - A high-growth, mission-driven, inclusive culture where your work has real impact STANDARD INTERVIEW PROCESS Our process varies by role. Most candidates go through: - AI-assisted initial screen - Interview with Talent Partner - Technical or Hiring Manager Interview - Team Interview - Executive Interview - Offer! EQUAL EMPLOYMENT OPPORTUNITY To build technology and products that are used and loved by people and solve real-world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us at talent@onepay.com.

Задачи: — full-stack разработка с использованием Node.js и React Требования: — уверенное владение backend: Node.js, Express, Sequelize — уверенное владение frontend: React, Vite, Tailwind CSS, Zustand, Axios — опыт работы с базами данных MySQL и PostgreSQL, включая транзакции, блокировки, конкурентный доступ, оптимизацию сложных SQL-запросов — понимание race conditions и проблем конкурентности — опыт работы с real-time технологиями: WebSocket, Socket.IO, Centrifugo — навыки работы с инфраструктурой и DevOps: Docker, настройка Nginx, Redis, RabbitMQ, очереди задач, Elasticsearch, Kibana, Prometheus, Grafana — понимание CDN, принципов защиты от DDoS на уровнях L3/L7, работы proxy и reverse proxy — умение работать с API и интеграциями, включая недокументированные API, OAuth, Telegram Bot API, TDLib — опыт использования AI-инструментов Claude и ChatGPT для анализа, написания кода, рефакторинга, отладки и поиска решений — понимание вопросов безопасности: SQL Injection, проверка типов и входных данных, race conditions, базовое понимание криптографии (RSA, SHA, хеширование), обфускация, browser/device fingerprinting — умение проектировать архитектуру высоконагруженных систем с учетом масштабирования, отказоустойчивости, конкурентной обработки данных, взаимодействия сервисов, очередей, БД, кеша и real-time компонентов Будет плюсом: — базовое понимание теории вероятностей — понимание принципов работы blockchain и основных сетей: Bitcoin, TON, Ethereum/ERC, TRON — опыт работы с нестандартными API и интеграциями

Location: Toronto; Calgary; Boston; Canada; Seattle; New York; Vancouver; California; Ottawa; Montreal Workplace: Remote WHO ARE WE? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! WHY THIS ROLE Enterprises hand Cohere their most sensitive data and put our models inside workflows they can't afford to get wrong. Securing that means working on problems the industry hasn't settled yet, what authorization means when an agent acts on a user's behalf, how to contain tools that consume untrusted input, and whether tenant boundaries hold when a model can be steered by the data it reads. The established playbooks only take you so far. We're hiring a Senior Product Security Engineer to work these problems alongside the engineers building the products, reviewing architecture and code, threat modeling before implementation, testing what ships, and turning what you learn into defaults other teams inherit. This is a hands-on engineering role, not an advisory one. WHAT YOU’LL DO - Lead security reviews. Review architecture, code, and security-sensitive changes. Identify both individual vulnerabilities and the recurring design patterns behind them. - Secure AI-powered products. Evaluate risks such as prompt injection, unsafe tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and sandbox escapes. - Threat model new capabilities. Identify trust boundaries, abuse cases, and high-impact failure modes before implementation. Translate findings into practical, prioritized mitigations. - Perform hands-on testing. Investigate suspected vulnerabilities, develop proofs of concept, assess exploitability and impact, and partner with engineers through remediation. - Build scalable guardrails. Develop secure defaults, approved patterns, reusable controls, review requirements, and automated checks that reduce recurring risks. - Strengthen engineering capability. Pair with engineers, document practical guidance, and help product teams develop durable security expertise. - Influence risk decisions. Explain technical findings, business impact, and remediation options clearly to engineers, product leaders, and executives. YOU MAY BE A GOOD FIT IF - You have strong software engineering fundamentals and can independently understand, test, and contribute fixes to production codebases. - You are proficient in at least one of Python, Go, or TypeScript. - You have led security reviews or threat models for complex production systems and can point to meaningful design or risk improvements that resulted. - You understand common vulnerability classes and their underlying design failures, including injection, authorization flaws, IDOR, SSRF, unsafe deserialization, race conditions, cryptographic misuse, and software supply-chain risks. - You understand modern application architecture, including web applications, APIs, OAuth/OIDC, cloud platforms, containers, Kubernetes, and CI/CD systems. - You can reason rigorously about untrusted input, authorization, isolation, identity, delegation, and data boundaries. Direct experience with agentic AI systems is valuable but not required. - You have driven security improvements involving multiple engineering teams, including situations where influence mattered more than authority. - You communicate clearly with both technical and non-technical audiences. NICE TO HAVE - Experience building or operating security tooling such as SAST, DAST, SCA, custom linters, or policy-as-code. - Experience securing multi-tenant SaaS, enterprise software, or systems that process sensitive customer data. - Offensive security experience through penetration testing, red teaming or security research. - Experience operating or participating in a vulnerability disclosure or bug bounty program. - Contributions to open-source security projects, published research, conference talks, or credited vulnerability discoveries. FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS: - A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch. - Full health and dental benefits, including a separate budget for mental health. - RRSP matching, 401K, Pension Scheme. - 100% Parental Leave top-up for up to 6 months, for either parent. - Annual enrichment benefits: Arts & culture, fitness/wellness, quality time, and a workspace improvement credit. Education & learning stipend for conferences, courses, and coaching. - 6 weeks of paid vacation (30 working days!) - Budget for traveling to other offices if you are remote, plus an annual company offsite. HOW AND WHERE WE WORK: - Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon. - For those in the office: a daily lunch program, plenty of snacks, and regular community and social events. - For those not near an office: a co-working benefit so you can work alongside others in your city. - Everyone receives a $500 home office stipend to set up your workspace properly. If any of the above doesn’t line up exactly with your experience, we still encourage you to apply. We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs. We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider. Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.

Задачи: — Разрабатывать и поддерживать нативные приложения для Android. — Создавать пользовательские интерфейсы по дизайн-макетам. — Интегрировать приложения с бэкенд-сервисами и REST API. — Участвовать в проектировании архитектуры и code review. — Оптимизировать производительность, стабильность и качество кода. — Взаимодействовать с backend-разработчиками, QA и дизайнерами. Требования: — Коммерческий опыт Android-разработки от 2 лет. — Уверенное знание Kotlin (Java — будет плюсом). — Хорошее знание Android SDK и жизненного цикла компонентов Android. — Опыт разработки UI с Jetpack Compose и/или классическими View. — Работа с Kotlin Coroutines и Kotlin Flow. — Понимание многопоточности, управления состоянием и принципов SOLID. — Опыт с архитектурой Data / Domain / Presentation, MVVM, MVI и другими паттернами презентационного уровня. — Опыт интеграции REST API. — Работа с локальными БД: SQLite, Room. — Уверенное использование Git. — Опыт с Dependency Injection: Dagger / Hilt. Будет плюсом: — Опыт с многомодульной архитектурой Android-приложений. — Написание unit- и UI-тестов. — Понимание CI/CD в мобильной разработке. — Опыт оптимизации производительности и работы с памятью.

Location: US, Boston, MA Workplace: OnSite Here at Humanoid, we believe in a future where robots amplify human potential. That’s why we’ve set out on a mission to build the world’s most capable, commercially-scalable, and safe humanoid robots. We’re bringing that mission to life with HMND‑01 - our rapidly developed humanoid platform being deployed in real industrial environments - and we’re growing the team to take it even further. ABOUT THE ROLE We are seeking a Senior NPI Mechanical Engineer to help establish our mechanical New Product Introduction (NPI) practices from the ground up, guiding hardware programs from concept through early production readiness. In this role, you will be the technical authority on manufacturability, working closely with design, quality, and supply chain teams to build the frameworks, processes, and discipline that let us scale from prototype and beta builds toward repeatable, larger-volume production. You will stand up quality processes and defect-reduction practices sized to where we are today, and own supplier relationships from sourcing through qualification and issue resolution. This is a hands-on, cross-functional role at the intersection of design, manufacturing, and quality, for an experienced mechanical engineer who thrives on creating structure out of ambiguity as much as executing within it. WHAT YOU'LL DO New Product Introduction (NPI) - Lead mechanical NPI activities across the full product lifecycle, from concept and early prototyping through pilot builds, ramp, and sustained production. - Partner with design engineering to review designs for manufacturability, assembly, and testability (DFM/DFA/DFT), influencing decisions early enough to avoid costly late-stage changes. - Help define and stand up a lightweight, right-sized gate process (EVT/DVT/PVT-equivalent) for our stage, then own the mechanical engineering deliverables (build plans, test protocols, readiness criteria) at each gate as it matures. - Coordinate cross-functionally with electrical engineering, industrial design, quality, supply chain, and program management to keep NPI programs on schedule and within budget. Manufacturing Scalability - Evaluate and select manufacturing processes, tooling, and fixturing appropriate for our current build volumes, with an eye toward what will and won't scale as we grow from beta to production - Identify and resolve bottlenecks in prototype and early pilot builds, laying the groundwork for the throughput and yield improvements we'll need as volume increases. - Develop and validate assembly processes, work instructions, and line layouts in partnership with contract manufacturers and internal operations teams- largely from scratch, not by inheriting existing documentation. - Lead design-for-scale reviews to anticipate and mitigate risks before they impact volume production. Quality & Defect Reduction - Lead defect triage and containment efforts during prototype and pilot builds, partnering with quality engineering — or building that partnership where it doesn't yet exist — to close the loop on recurring issues. - Define and begin tracking foundational quality metrics appropriate to our build volumes (e.g., first-pass yield, defect rate per build, open issues by severity), evolving toward more statistically rigorous measures like DPPM and field return rates as volumes grow. - Establish and drive quality processes across the NPI lifecycle, including FMEA, root cause analysis, and corrective/preventive action (CAPA) programs. - Champion a culture of proactive quality, embedding lessons learned from prior programs into new product designs. Supplier Management - Lead supplier sourcing, qualification, and onboarding for mechanical components, subassemblies, and tooling. - Conduct supplier audits and capability assessments to ensure suppliers can meet cost, quality, and volume requirements. - Manage ongoing supplier relationships, including performance reviews, issue resolution, and escalation management. - Negotiate and align on technical requirements, specifications, and quality agreements with suppliers and contract manufacturers. WHAT WE'RE LOOKING FOR - Bachelor's degree in Mechanical Engineering or a related field. - 10+ years of mechanical engineering experience, including significant time in NPI roles- ideally including experience both scaling hardware through high-volume manufacturing and standing up NPI processes from scratch in an early-stage or low-volume environment. - Demonstrated track record of taking products from concept through mass production, ideally in robotics, consumer electronics, or complex electromechanical systems. - Strong working knowledge of DFM/DFA/DFT principles, GD&T, and manufacturing processes (injection molding, sheet metal, machining, casting, etc.). - Hands-on experience with quality methodologies such as FMEA, 8D, root cause analysis, and SPC. - Proven experience managing supplier relationships, including sourcing, qualification, and issue resolution. - Experience standing up or scaling manufacturing lines at contract manufacturers. - Excellent cross-functional collaboration and communication skills, with the ability to influence design decisions and align diverse stakeholders. - Willingness to travel to supplier and manufacturing sites as needed (domestic and/or international). Preferred Qualifications: - Experience in robotics, automation, or other complex mechatronic products. - Familiarity with PLM/ERP systems and NPI program management tools. - Six Sigma or equivalent quality certification. - Experience with regulatory and safety compliance requirements relevant to robotics hardware (e.g., UL, CE, ISO). WHAT WE OFFER - Comprehensive health coverage for US‑based employees, including fully paid medical, dental, and vision insurance, with virtual care and employee assistance resources. - Meaningful time off to rest and recharge: 23 days of PTO (accrued), separate sick leave, and paid company holidays. - 401(k) retirement plan with 4% employer match. - Competitive equity: stock options with meaningful upside as we scale. - Free daily catered lunch, snacks, and drinks in‑office. - Collaboration with top‑tier engineers, researchers, and product experts in AI and robotics. - Freedom to influence the product and own key initiatives. For this role in Massachusetts, the expected base salary range is $150K–$190K USD per year; your placement in that range depends on how your experience maps to our internal leveling.

Location: Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of the role We are seeking a Principal Security Researcher to join our Application Security Team to conduct cutting-edge security research on GitLab's AI-powered DevSecOps capabilities. As GitLab transforms software development through intelligent collaboration between developers and specialized AI agents, we need security researchers who can proactively identify and validate vulnerabilities before they impact our platform or customers. In this role, you'll be at the forefront of security research, working with our GitLab DevSecOps platform, Duo Agent Platform, GitLab Duo Chat, and AI workflows that represent the future of human/AI collaborative development. You'll develop novel testing methodologies (including for AI agent security), conduct hands-on penetration testing, and translate emerging threats into actionable security improvements. Your research will directly influence how we build and secure the next generation of AI-powered DevSecOps tools, ensuring GitLab remains the most secure software factory platform on the market. This position offers the unique opportunity to shape security and AI security practices in one of the world's largest DevSecOps platforms, working with engineering teams who are pushing the boundaries of what's possible with AI-assisted software development. You'll have access to cutting-edge AI systems and the freedom to explore creative attack scenarios while contributing to the security of millions of developers worldwide. This role reports to the Senior Manager of Application Security. What you'll do Conduct and lead security research projects across multiple functional areas. Identify novel, systemic, and chained vulnerabilities in GitLab, where individual weaknesses combine for outsized impact. Validate security vulnerabilities through hands-on testing, developing proof-of-concept exploits that demonstrate real-world attack scenarios. Assess emerging industry vulnerability classes against the GitLab codebase, and drive remediation of the class rather than the instance. Lead security research into GitLab's AI and agentic surfaces, and define the security requirements that engineering teams build against. Build and direct the tooling and automation that scales security research, including agent-assisted vulnerability discovery across our codebase. Research the security posture of open source tools and dependencies integrated with GitLab, report findings to their maintainers, and track mitigation following our responsible disclosure guidelines . Solve technical problems of the highest scope, complexity, and ambiguity. Help shape the team and sub-department roadmap. Lead the integration of security research results into the engineering and business functions that need to act on them. Teach, mentor, and advise other domain experts and individual contributors across several teams. Share knowledge and novel vulnerability types with the security community. What you'll bring 10+ years of experience in security research, penetration testing, or offensive security roles Strong ability in discovering and exploiting vulnerabilities in large codebase and complex systems Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust. Ability to read and analyze code across multiple languages and codebases Strong knowledge of AI frameworks Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation At ease in establishing and driving complex remediation initiatives involving cross-functional teams Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner. Ability to translate complex technical findings into clear risk assessments and remediation recommendations Strong analytical and problem-solving skills with creative thinking about attack scenarios Nice to Have: Published security research or conference presentations; background in software engineering with distributed systems expertise; experience with GitLab or similar DevSecOps platforms About the team Security Researchers are a part of our Application Security team, who address complex security challenges facing GitLab and its customers to enable GitLab to be the most secure software factory platform on the market. We focus on systemic product security risks and work cross-functionally to mitigate them while maintaining Engineering's development velocity. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $203,200 — $275,000 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Los Angeles, USA Riot’s Enterprise Technology organization ensures Rioters have what they need to unlock their full potential by building secure, reliable, and scalable internal systems that keep the company running smoothly. As a Staff Full-Stack Software Engineer specializing in AI, you will personally design and build the AI agent capabilities and product experiences for an internal enterprise intelligence platform. This includes the retrieval, orchestration, and reasoning layer that sits on top of a semantic data layer built and maintained by a partner data engineering team. You’ll turn these capabilities into search, chat, and workflow experiences that help leaders find information and make decisions faster. This is a hands-on, coding-majority role. You’ll build the agents, prompts, tool integrations, and full-stack product surface yourself. You’ll work directly with product owners, system leads, and domain experts across HR, Finance, IT, Legal, and Workplace to understand real workflows. You’ll also work closely with a partner data engineering team that owns ingestion, the semantic layer, and the underlying data model. You will consume and help shape requirements for that layer rather than building it yourself. Your work will directly improve how Rioters hire, plan, spend, onboard, and operate at scale. The ideal candidate is a deeply experienced full-stack software engineer who has personally shipped AI-enabled products at scale, is comfortable building in ambiguous and evolving problem spaces, and takes ownership of systems from the first commit through production operation. The role will report to the Manager of Enterprise Systems Engineering. Responsibilities: Build and maintain an orchestrator + specialist-agent architecture (retrieval, tool use, structured outputs, multi-step reasoning) on top of a semantic data layer owned by a partner data team. Design and implement retrieval and grounding for RAG/semantic search use cases: embeddings, reranking, citation of evidence, and techniques to reduce hallucination. Integrate agents with internal and external tools/APIs (function/tool calling) to let them take real actions, not just answer questions. Build the full-stack application layer, APIs, and UI that exposes AI-powered search, chat, and workflow experiences to end users. Instrument AI features with observability for quality, latency, token usage, and cost, and use it to drive iteration and tuning. Iterate on prompts and model choices quickly, with sensible fallback behavior when a model, tool, or retrieval step fails or returns low-confidence output. Apply solid engineering fundamentals: source control, code review, automated testing (unit, integration, functional), CI/CD, and on-call for the systems you own. Required Qualifications: Bachelor's degree in Computer Engineering, Computer Science, Information Systems, or related field (or equivalent professional experience delivering enterprise technology solutions). 8+ years of professional experience in full-stack software development Practical, end-to-end experience building RAG or agentic systems: retrieval, tool-calling, structured outputs, multi-step reasoning, and verification/evaluation loops, not just familiarity with LLM APIs. Experience designing and running evaluation approaches for nondeterministic systems: curated datasets, automated metrics, human review, and production feedback. Experience establishing basic AI observability (quality, safety, reliability, latency, token usage, cost) for features you build. Working understanding of AI security and responsible-use risks, prompt injection, tool abuse, data leakage, access control, model limitations, sufficient to build safeguards into what you ship. Deep hands-on programming experience in Node, TypeScript, React. Experience with modern frameworks (e.g., NextJS, NestJS). Experience building RESTful and GraphQL APIs, working with relational (e.g., PostgreSQL, MySQL) and non-relational (e.g., Redis) databases. Comfortable with cloud infrastructure and deployment: AWS, containers (Docker), orchestration (Kubernetes), CI/CD pipelines. Familiar with software engineering best practices: automated testing, code review, monitoring/observability, security and performance considerations. Desired Qualifications: Deep practical knowledge of retrieval-augmented generation and semantic search, including embedding and reranking models, retrieval design, grounding, citations, and evaluation. Experience with agent platforms (e.g., LangGraph, AutoGen, CrewAI, or comparable), vector databases, and multi-agent orchestration patterns. Working familiarity with Python and lakehouse/data-catalog concepts (e.g., Databricks, Unity Catalog), enough to collaborate effectively with the data engineering team, without needing to own pipeline build-out. Experience shipping an internal AI product from scratch as part of a small, fast-moving team, comfortable with a "scrappy MVP, iterate" delivery style rather than a fully-specified roadmap. For this role, you'll find success through craft expertise, a collaborative spirit, and decision-making that prioritizes your fellow Rioters, who are the customers of your work. Being a dedicated fan of games is not necessary for this position! Our Perks: Riot focuses on work/life balance, shown by our open paid time off policy and other perks such as flexible work schedules. We offer medical, dental, and life insurance, parental leave for you, your spouse/domestic partner, and children, and a 401k with company match. Check out our benefits pages for more information. At Riot Games, we put players first . That mission drives every decision in our quest to create games and experiences that make it better to be a player. Whether you’re working directly on a new player-facing experience or you’re supporting the company as a whole, everyone at Riot is part of our mission. And just like in our games, we’re better when we work together. Our goal is to create collaborative teams where you are empowered to bring your unique perspective everyday. If that sounds like the kind of place you want to work, we’re looking forward to your application. It’s our policy to provide equal employment opportunity for all applicants and members of Riot Games, Inc. Riot Games makes reasonable accommodations for handicapped and disabled Rioters and does not unlawfully discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, handicap, veteran status, marital status, criminal history, or any other category protected by applicable federal and state law. We consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with applicable federal, state and local law, including the California Fair Chance Act, the City of Los Angeles Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, the San Francisco Fair Chance Ordinance, and the Washington Fair Chance Act. Per the Los Angeles County Fair Chance Ordinance, the following core duties may create a basis for disqualifying candidates with relevant criminal histories: Safeguarding confidential and sensitive Company data Communication with others, including Rioters and third parties such as vendors, and/or players, including minors Accessing Company assets, secure digital systems, and networks Ensuring a safe interactive environment for players and other Rioters These duties are directly related to essential operations, safety, trust, and compliance obligations within our organization. Please note that job duties may evolve based on business needs and additional responsibilities may be assigned as necessary to maintain operational efficiency and security.

Location: Animal Care Center - Baxter, Minnesota 🐾 Veterinary Technician – Baxter, MN ✨ $18–$23/Hour | No Regular Weekends | Growth Opportunities ✨ Voted Best in the Area for Veterinary Clinics and Grooming Facilities, Animal Care Center is looking for a full-time or part-time Licensed Veterinary Technician (LVT) to join our collaborative 3-doctor team in Minnesota’s beautiful Brainerd Lakes Area! 🌟 Why You'll Love Working Here 🐾 Your Skills Are Valued & Utilized With an exceptional 2:1 technician-to-doctor ratio, our LVTs have the support and opportunity to practice advanced technical skills and play an important role in patient care. 🩺 Get Hands-On with Surgery & Anesthesia Our Veterinary Technicians are an integral part of our surgical team, including inducing anesthesia, intubating patients, monitoring procedures, and managing dedicated technician appointments. Your skills matter here! 📈 Grow Your Career We believe in investing in our technicians and creating opportunities to grow. Experienced technicians have the opportunity to develop their leadership skills and grow into a Lead Veterinary Technician role, taking on additional responsibilities while helping support and mentor the team. 🌴 Real Work-Life Balance Our hospital is open Monday–Friday, 8:00 AM–5:00 PM, with no regular evening, weekend, or holiday shifts. Full-time technicians work either four or five days per week and receive a full one-hour lunch break every shift. 💰 Optional Extra Earning Opportunities Want to pick up additional income? LVTs can participate in our after-hours emergency on-call program from 5:00 PM–10:00 PM on weekends. On-call team members receive an on-call stipend PLUS a minimum of two hours of time-and-a-half pay whenever called into the hospital. ❤️ A Team That Knows How to Have Fun We believe a great workplace is about more than just great medicine. Our team enjoys spring and summer parties, celebrations, and opportunities to connect outside of work. We’re a supportive, collaborative group that values professional growth, work-life balance, and having fun together! 🌲 Live & Work in the Brainerd Lakes Area Located in Minnesota’s beautiful Brainerd Lakes Area, you’ll have access to amazing year-round recreation right outside of work. Enjoy sunny summer days on the area’s many lakes, scenic hiking and biking trails, boating, fishing, golf, and more. When winter arrives, enjoy snowmobiling, skiing, snowboarding, tubing, ice fishing, cross-country skiing, and fat-tire biking. Add in wonderful restaurants, local events, and activities in every season, and there’s always something to explore! 💵 Pay $18–$23 per hour , based on experience 🐾 Build Your Career With Us At Animal Care Center, you’ll join a professional, collaborative, and supportive team committed to exceptional medical, surgical, and dental care. We value our technicians, encourage continued growth, and want you to build a rewarding, long-term career with us. Ready to join a team where your skills are valued, your career can grow, and your life outside of work matters? We’d love to meet you! For more information about our hospital, visit AnimalCareCenterBaxter.com To apply: Contact Christine Erickson at christine.erickson@lakefieldvet.com or apply at careers.lakefieldvet.com POSITION SUMMARY: This position will assist the Veterinarian in diagnosing and treating pets in a small practice. This position is responsible for maintaining medical charts, completing preparatory procedures for Veterinarians, and providing general healthcare information to clients. The duties and responsibilities described are not a comprehensive list and may vary depending on the location. WHAT YOU’LL DO (Essential Functions): • Foster a culture built on our values: Respect, Learning, Do the Right Thing, WOW Service, and Fun • Provide professional, efficient, quality medical care and exceptional service to clients while maintaining maximum productivity • Obtain patient medical history from the client and referring veterinarians as needed • Perform initial evaluation of pet’s condition, collect information from client, observe pet's behavior, and checks vital statistics • Complete preparatory procedures and assist the Veterinarian throughout the rest of the examination, diagnosis, procedures, and treatment phases • Restrain pets during exams as needed • Create and maintain patient medical records and documentation • Obtain and prepare various samples including blood, urine, and fecal samples for diagnostic testing. • Perform laboratory tests on samples and update the patient’s medical chart • Educate clients about pet health needs, nutrition, and preventative care • Perform X-rays and provide results to the Veterinarian • Fill prescriptions under the direction of a Veterinarian • Administer injections, vaccines, and medication with supervision and under the direction of a Veterinarian • Perform dental prophylaxis, venipunctures, catheterization, and other procedures under supervision of a Veterinarian • Prepare patient, medications, and equipment for surgery • Support a practice environment that promotes collaboration and teamwork and ensures the delivery of quality, compassionate, effective, and efficient health care to pets • Comply with all practice policies, quality assurance guidelines, and minimum standards of care • Perform other duties or projects as requested WHAT WE’RE LOOKING FOR (Essential Qualifications): Education: • Associate’s Degree from a two-year veterinary technology program with accreditation from the American Veterinary Medicine Association (AVMA). Professional Licenses/Certifications: • Licensing requirements for Veterinary Technicians vary by state • Successful completion of the Veterinary Technician National Examination (administered by the American Association of Veterinary State Boards (AAVSB) when required by the state) • State-recognized veterinary technician certification (CVT, LVT, or RVT) with credential in good standing required Experience: • None Knowledge, Skills and Ability: • Knowledge of veterinary hospital practices and procedures • Strong organizational and time management skills including managing multiple priorities • Ability to handle and maintain sensitive and confidential information with discretion • Strong attention to detail and high level of accuracy • Interact with a variety of clients and employees in a professional, caring, compassionate, and tactful manner • Basic knowledge of the generic and brand names, common uses, and side effects of drugs utilized in a veterinary practice • Basic knowledge of medical equipment and terminology • Basic proficiency with a variety of computer programs including Microsoft Outlook, Word, Excel, and Practice Management software (PIMS) • Basic written, verbal, and active listening communication skills with a customer- oriented approach • Basic analytical, critical thinking, judgement, and problem-solving skills PHYSICAL DEMANDS: While performing the duties of this job, the team member is regularly required to talk and hear. The team member must frequently use a computer for long periods of time. Specific vision abilities are required to do this job including close vision. This position requires walking and/or standing for long periods of time, bending, reaching, grasping, and repetitive motions. Must be able to lift up to 30 lbs. unassisted, 75 lbs. with assistance. Working environment may be stressful with aggressive, frightened, abused or injured pets that may bite or scratch. Must be able to work flexible hours including evenings and weekends. SUPERVISORY RESPONSIBILITIES: None ABOUT LAKEFIELD VETERINARY GROUP We believe exceptional veterinary care starts with exceptional people. We partner with hospitals across the country to preserve what makes each practice special - its people, culture, and connection to community - while providing the operational support and resources that allow teams to thrive. As we grow, we are committed to creating an environment where team members feel respected, supported, and empowered to deliver outstanding care. Our Values Our culture is built on five core values that guide how we work and serve: Respect Learning Do the Right Thing Wow Service Fun If these resonate with you, you’ll fit right in. Equal Employment Opportunity Lakefield Veterinary Group is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all team members and applicants. Compensation Range $18 — $23 USD

Location: London & San Francisco Workplace: onsite THE OPPORTUNITY THE OPPORTUNITY Apollo Research works with most frontier AI companies (OpenAI, Anthropic, Google, Meta, Thinking Machines and others) to test their models before deployment and collaborate on fundamental scheming research. Our coding agent security product, Watcher, is deployed in production and monitors billions of agent tokens per month across engineering teams at agent-building scale-ups and enterprises.  We are looking for a security & control expert  to help us design better threat models and control protocols against AI adversaries, and improve the effectiveness and security of Watcher.  This is truly a "start-up role" in the sense that you have significant say in shaping the direction of the role. This is an individual contributor role but could lead to management responsibilities eventually, if desired. KEY RESPONSIBILITIES Threat modeling for coding agents Develop threat models for coding agents under the assumption that they could be misaligned or compromised. This includes near-term threats like AI agents leaking private internal data and long-term threats like agents sabotaging safety research. Treat coding agents through the lens of insider risk: they have credentials, access to code, network access, and the ability to execute arbitrary actions, just like a malicious insider would (see Control agenda ). Map out kill chains and attack progressions similar to frameworks like MITRE ATT&CK, adapted for agentic AI. See e.g. the Agentic Loss-of-Control Threat Matrix for an example of a high-quality contribution. Build and maintain our “coding agent security levels” which define what level of robustness Watcher provides against different categories of failure modes. These levels should be concrete, testable, and usable both internally (to guide product priorities) and externally (to communicate our security posture to customers). Failure mode library and literature Maintain our library of coding agent failure modes and keep it comprehensive, accurate, and current. Stay up to date with the academic and industry literature on coding agent security, AI security, and adjacent fields (prompt injection, deception, accidental security implications, supply chain attacks on AI systems, etc.). Attack design for monitor development Design realistic attack trajectories and example exploits for monitor development and backtesting, work with the research team to ensure monitors are trained and evaluated against credible adversarial behavior. Trajectory adjudication Serve as security adjudicator for flagged trajectories. When monitors flag ambiguous agent behavior, determine whether it represents a genuine attack, a benign-but-unusual workflow, or needs deeper investigation, and feed those judgments back into monitor improvement. Red-teaming Watcher Red-team and improve Watcher's monitors and policies, document findings, and feed them into product improvement. Work with the technical research staff to build adversarial test suites into the backtesting pipeline. *This role is distinct from the AI Security Researcher role on Apollo's Infra & Security team, which threat-models Apollo's own internal systems and the agents operating on them. REPRESENTATIVE PROJECTS Develop a comprehensive coding agent threat model: Think deeply about all the ways in which coding agents could attack an organization. Compare this threat model to conventional threats from human insiders. Publish a detailed research piece describing the threat model building on existing research, e.g. from Redwood Research. Improve our database of failure modes: We have an internal database of 50+ failure modes of coding agents with detailed reports for all of them. For this project, you would provide an expert view on the current state of that database and suggest improvements. In the long run, you would maintain that database and be responsible for integration of new failures. Prioritize failure modes that Watcher should cover: Different parts of Watcher attempt to cover different threat models and attack strategies. Based on the results of the threat model project above, we want to ensure that each part of Watcher covers the most important failure modes in the most efficient way. For example, not all monitors require blocking capability and some failure modes might benefit from additional affordances like being able to disperse subagents. JOB REQUIREMENTS Must-haves 5+ years in security roles in a hands-on technical capacity (not purely GRC/compliance). You need to be able to think structurally about threat modeling and failure modes. You need to be able to read code, understand infrastructure, and evaluate technical controls, not just write policies. Direct experience with security research, threat modeling, or offensive security. Comfortable working in a small, fast-moving team, and comfortable owning ambiguous, open-ended research questions. Strong written communication this role produces threat models, security levels, and failure mode documentation that need to be clear and precise Nice-to-haves Experience with AI/ML systems security, LLM security, or AI control research. The field is young enough that deep experience here is rare, but any exposure significantly reduces ramp-up time. Detection engineering, SOC, or incident analysis experience. A part of this role is judging whether flagged agent behavior is genuinely malicious, and people who have triaged real-world alerts might ramp much faster. Familiarity with insider threat programs or insider risk frameworks. The mental model of "the coding agent is a potentially malicious insider" is useful for this role and someone who has worked on insider threats will pick it up faster. Red teaming or offensive security background. Useful for the Watcher red-teaming responsibilities and for thinking adversarially about failure modes. Formal AI safety research background. Helpful but not necessary. We need security practitioners who can learn the AI safety context, not AI safety researchers who need to learn security. Explicitly not required Management experience. This is an IC role, at least initially. Specific certifications (CISSP, etc.). We care about demonstrated ability, not credentials. We want to emphasize that people who feel they don’t fulfill all of these characteristics but think they would be a good fit for the position, nonetheless, are strongly encouraged to apply. BENEFITS This role offers market competitive salary, equity, and competitive benefits. Salary: San Francisco : $204,000 – $385,000; London : £136,000 – £258,000. Flexible work hours and schedule Unlimited vacation Unlimited sick leave Up to 6 months of paid parental leave Comprehensive health, dental and vision insurance Retirement savings with competitive employer matching (e.g. 401(k) for US employees) Lunch, dinner, and snacks are provided for all employees on workdays Paid work trips, including staff retreats, business trips, and relevant conferences A yearly $1,000 (USD) professional development budget Relocation support and visa fees (if applicable) LOGISTICS Time Allocation : Full-time Location : This is an in-person role working out of our London or San Francisco office. We offer flexible working hours and some wfh arrangements. Visa sponsorship: We sponsor visas in both the UK and US. Sponsorship isn't guaranteed for every role or candidate, but if we make you an offer, we'll work with you to find the right visa route. ABOUT THE TEAM The product team consists of research scientists: Victor Gillioz, Monika Jotautaitė, Dmitrii Volkov; product engineers: Jeremy Neiman, Zak Walters, Zen van Riel, Srdjan Miletic and Gustavo Bicalho; and our GTM lead: Kyle Dai. Marius Hobbhahn (CEO) advises the team. Furthermore you will interact with our other SWEs and researchers, since we intend to be "our own customer" by using our products internally for our research work. You can find our full team here. ABOUT APOLLO RESEARCH The rapid rise in AI capabilities offers tremendous opportunities, but also presents significant risks. At Apollo Research, we're primarily concerned with risks from Loss of Control, i.e. risks coming from the model itself rather than e.g. humans misusing the AI. We're particularly concerned with deceptive alignment / scheming, a phenomenon where a model appears to be aligned but is, in fact, misaligned and capable of evading human oversight.  We work on the science of scheming, detection of scheming (e.g. building evaluations), and scheming mitigations (e.g. anti-scheming). We also work on control and monitoring research (see our scalable monitoring agenda). We work closely with many frontier AI companies, such as OpenAI, Anthropic, Google, Meta, Thinking Machines and others, e.g. to test their models and collaborate on the science of scheming. At Apollo, we aim for a culture that emphasizes truth-seeking, being goal-oriented, giving and receiving constructive feedback, and being friendly and helpful. If you're interested in more details about what it's like working at Apollo, you can find more information here. We also build a coding agent security product called Watcher that secures agent deployments in companies. Our goal is to reduce the probability of catastrophic incidents by securing coding agents, learning about their real-world risks, and publishing our research on how to build these control systems most effectively. Equality Statement: Apollo Research is an Equal Opportunity Employer. We value diversity and are committed to providing equal opportunities to all, regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, or sexual orientation. HOW TO APPLY Please complete the application form with your CV. The provision of a cover letter is neither required nor encouraged. Please also feel free to share links to relevant work samples. About the interview process: Our multi-stage process includes a screening interview, a take-home test (3 hours), 3 technical interviews, and a final interview with Marius (CEO). There are no leetcode-style general coding interviews. You may use AI tools on the take-home; we judge the result the way we'd judge any contributor's work, so you are responsible for the quality of everything you submit. If you want to prepare, we suggest building simple monitors for coding agents and running them on your own Claude Code / Cursor / Codex / etc. traffic. Your Privacy and Fairness in Our Recruitment Process: We are committed to protecting your data, ensuring fairness, and adhering to workplace fairness principles in our recruitment process. To enhance hiring efficiency, we use AI-powered tools to assist with tasks such as resume screening. These tools are designed and deployed in compliance with internationally recognized AI governance frameworks. Your personal data is handled securely and transparently. All resumes are screened by a human and final hiring decisions are made by our team. If you have questions about how your data is processed or wish to report concerns about fairness, please contact us at info@apolloresearch.ai.

Location: London & San Francisco Workplace: onsite THE OPPORTUNITY    Join our new AGI safety product team and help transform AI control research into practical tools that directly reduce risks from AI. As an Research Scientist (Control), you’ll work closely with Marius (CEO & currently leads the monitoring efforts), other control researchers and product engineers.    We are currently building Watcher,  a monitoring tool for coding agents. Our monitoring research agenda attempts to translate compute into safety at scale. You will join a small team and will have significant ability to shape the team & tech, and have the ability to earn responsibility quickly.  You will like this opportunity if you're passionate about using empirical research to make AI systems safer in practice. You enjoy the challenge of translating theoretical AI risks into concrete detection mechanisms. You thrive on rapid iteration and learning from data. You want your research to directly impact real-world AI safety. KEY RESPONSIBILITIES TLDR: you will design & implement control protocols (see e.g. [Greenblatt et al, 2023] ) and test them on real-world production systems at scale. Research & Development Design and conduct experiments to test monitor effectiveness across different failure modes and agent behaviors Build and maintain evaluation frameworks to measure progress on monitoring capabilities Build and maintain high-quality datasets to train and test monitors on Iterate on monitoring approaches based on empirical results, balancing detection accuracy with computational efficiency Contribute newly discovered coding agent failure modes to Apollo's shared failure mode library (owned by the AI Security & Control Researcher/Engineer) as they surface during monitor design, evaluation, and iteration Stay current with research on AI safety, agent failures, and detection methodologies Stay current with research into coding security and safety vulnerabilities Fine-tuning & Monitor Development Fine-tune open-source models to create efficient monitors for high-volume production environments Design and build agentic monitoring systems that autonomously investigate logs to identify both known and novel failure modes Incorporate adversarial findings from red-teaming campaigns into monitor design and evaluation, closing the loop between attack and defense JOB REQUIREMENTS Must-haves 2+ years of experience conducting empirical research with large language models or AI systems Strong experience with AI coding agents. For example, having extensively used and compared frontier coding agents, or having designed / developed coding agents Experience with LLM-as-a-judge setups or AI monitoring more broadly Experience designing and running experiments, analyzing results, and iterating based on empirical findings e.g. prompting, scaffolding, agent design, fine-tuning, or RL Strong Python programming skills Demonstrated ability to work independently on open-ended research problems Good-to-haves Familiarity with AI safety concepts, particularly agent-related risks Familiarity with computer security, e.g. security testing and secure system design Experience fine-tuning language models or working with smaller open-source models Previous work building developer tools or monitoring systems Publications or contributions to AI safety or ML research Experience with production log systems or production log analysis We want to emphasize that people who feel they don't fulfill all of these characteristics but think they would be a good fit for the position nonetheless are strongly encouraged to apply. REPRESENTATIVE PROJECTS Hierarchical monitoring for coding agent security : Design a multi-layer monitoring system for detecting security vulnerabilities introduced by coding agents. Start by cataloging common security failure modes (e.g., hardcoded credentials, SQL injection vulnerabilities, insecure API calls). Build specialized monitors for each category, then create a hierarchical system where fast, efficient first-pass monitors flag potentially problematic code for deeper investigation by more sophisticated monitors. Design a backtesting strategy for Watcher: Validate the system on synthetic test cases and real agent outputs, iterating to optimize the tradeoff between detection rates and false positives while maintaining low latency for most monitoring decisions. Fine-tune an open-source model to be a great monitor: Take an open-source model and fine-tune it on our large dataset of coding agent failures with high-quality ground truth labels. Test different fine-tuning techniques and measure generalization to our held-out data. Compare against prompted baselines on accuracy, cost and latency. The goal is to fine-tune models to lift the pareto frontier of monitors. BENEFITS This role offers market competitive salary, equity, and competitive benefits. Salary: San Francisco : $204,000 – $385,000; London : £136,000 – £258,000. We will be looking to meaningfully raise salaries soon. Flexible work hours and schedule Unlimited vacation Unlimited sick leave Up to 6 months of paid parental leave Comprehensive health, dental and vision insurance Retirement savings with competitive employer matching (e.g. 401(k) for US employees) Lunch, dinner, and snacks are provided for all employees on workdays Paid work trips, including staff retreats, business trips, and relevant conferences A yearly $1,000 (USD) professional development budget Relocation support and visa fees (if applicable) LOGISTICS Time Allocation : Full-time Location : This is an in-person role working out of our London or San Francisco office. We offer flexible working hours and wfh arrangements. Visa sponsorship: We sponsor visas in both the UK and US. Sponsorship isn't guaranteed for every role or candidate, but if we make you an offer, we'll work with you to find the right visa route. ABOUT THE TEAM The product team consists of research scientists: Victor Gillioz, Monika Jotautaitė, Dmitrii Volkov; product engineers: Jeremy Neiman, Zak Walters, Zen van Riel, Srdjan Miletic and Gustavo Bicalho; and our GTM lead: Kyle Dai. Marius Hobbhahn (CEO) advises the team. Furthermore you will interact with our other SWEs and researchers, since we intend to be "our own customer" by using our products internally for our research work. You can find our full team here. ABOUT APOLLO RESEARCH The rapid rise in AI capabilities offers tremendous opportunities, but also presents significant risks. At Apollo Research, we're primarily concerned with risks from Loss of Control, i.e. risks coming from the model itself rather than e.g. humans misusing the AI. We're particularly concerned with deceptive alignment / scheming, a phenomenon where a model appears to be aligned but is, in fact, misaligned and capable of evading human oversight.  We work on the science of scheming, detection of scheming (e.g. building evaluations), and scheming mitigations (e.g. anti-scheming). We also work on control and monitoring research (see our scalable monitoring agenda). We work closely with many frontier AI companies, such as OpenAI, Anthropic, Google, Meta, Thinking Machines and others, e.g. to test their models and collaborate on the science of scheming. At Apollo, we aim for a culture that emphasizes truth-seeking, being goal-oriented, giving and receiving constructive feedback, and being friendly and helpful. If you're interested in more details about what it's like working at Apollo, you can find more information here. We also build a coding agent security product called Watcher that secures agent deployments in companies. Our goal is to reduce the probability of catastrophic incidents by securing coding agents, learning about their real-world risks, and publishing our research on how to build these control systems most effectively. Equality Statement: Apollo Research is an Equal Opportunity Employer. We value diversity and are committed to providing equal opportunities to all, regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, or sexual orientation. HOW TO APPLY Please complete the application form with your CV. The provision of a cover letter is neither required nor encouraged. Please also feel free to share links to relevant work samples. About the interview process: Our multi-stage process includes a screening interview, a take-home test (3 hours), 3 technical interviews, and a final interview with Marius (CEO). There are no leetcode-style general coding interviews. You may use AI tools on the take-home; we judge the result the way we'd judge any contributor's work, so you are responsible for the quality of everything you submit. If you want to prepare, we suggest building simple monitors for coding agents and running them on your own Claude Code / Cursor / Codex / etc. traffic. Your Privacy and Fairness in Our Recruitment Process: We are committed to protecting your data, ensuring fairness, and adhering to workplace fairness principles in our recruitment process. To enhance hiring efficiency, we use AI-powered tools to assist with tasks such as resume screening. These tools are designed and deployed in compliance with internationally recognized AI governance frameworks. Your personal data is handled securely and transparently. All resumes are screened by a human and final hiring decisions are made by our team. If you have questions about how your data is processed or wish to report concerns about fairness, please contact us at info@apolloresearch.ai.

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are looking for an AI Agent Security Architect to function as the primary technical authority for Replit’s autonomous and AI agent security blueprint. In this critical role, you will design, implement, and maintain the runtime defense systems, guardrail frameworks, and sandboxing architectures that govern AI agents executing code, invoking tools, and reasoning across our platform. You will be a key technical contributor—leading high-impact AI security initiatives and bridging the gap between non-deterministic AI behavior and rigorous cybersecurity controls for both engineering and executive leadership. What You'll Do - AI Agent Security Strategy & Technical Execution - AI Agent Security Blueprint: Define the long-term vision and architectural patterns for securing autonomous agent workflows, Model Context Protocol (MCP) integrations, multi-turn reasoning loops, and multi-agent coordination. - Runtime Guardrails & Policy Enforcement: Architect and deploy dynamic input/output guardrail systems, semantic firewalls, and real-time intent verification filters to prevent goal hijacking, system prompt leaks, and indirect prompt injections. - Agent Execution & Tool Sandboxing: Partner with Infrastructure and AppSec teams to design secure, short-lived, micro-isolated environments (e.g., microVMs, WebAssembly, container sandboxes) where agents can dynamically execute code, run shell commands, and interact with host operating systems safely. - Agentic Threat Modeling & Red Teaming: Conduct specialized threat modeling against non-deterministic systems. Lead automated and manual AI red-teaming initiatives to uncover vulnerabilities in RAG context pipelines, vector stores, and tool-calling interfaces. - Identity, Delegation & Least Privilege: Architect fine-grained permission models and step-up Human-in-the-Loop (HITL) authorization patterns for agents acting on behalf of users—ensuring agents never exceed the delegated privileges of the end user or misuse API keys. - Context & Memory Boundary Security: Design strict data isolation and poisoning prevention controls for vector databases, retrieval-augmented generation (RAG) pipelines, and long-term conversation memories across multi-tenant workloads. - Risk Management & Cross-Functional Enablement - Maintain the AI Security Source of Truth: Define, document, and maintain authoritative secure design patterns and SDKs for engineering teams building internal or customer-facing AI agent capabilities. - Contribution to Risk Register: Identify, quantify, and document non-deterministic and agentic security risks (e.g., OWASP Top 10 for LLMs & AI Agents, MITRE ATLAS), ensuring they are accurately represented in the Cybersecurity Risk Register. - Auditability & Observability: Design tamper-evident logging and telemetry standards for agent reasoning chains, tool execution history, and context assembly to support incident response, forensics, and GRC requirements. - Compliance & Sales Enablement: Partner with GRC to translate complex AI security controls into enterprise-ready audit documentation (e.g., ISO 42001, NIST AI RMF, EU AI Act readiness) and support Sales on complex enterprise security inquiries regarding AI safety. Required Skills & Experience - 6+ years of experience in security engineering or security architecture, with at least 2+ years dedicated specifically to AI/ML security, LLM application security, or securing agentic frameworks. - Deep understanding of agentic architectures and protocols (e.g., Model Context. Protocol (MCP), LangChain, AutoGen, CrewAI, ReAct frameworks, and vector database technologies). - Hands-on expertise with threat vectors unique to agentic AI: Indirect Prompt - Injection, Goal Hijacking, Tool Parameter Tampering, Data Poisoning, and Context Contamination. - Strong background in applying safety standards and risk frameworks such as OWASP Top 10 for LLMs & AI Agents, NIST AI RMF, and MITRE ATLAS. - Proficiency in Python, Go, or TypeScript/JavaScript with a proven track record of reviewing code and building functional security tooling or guardrails. - Experience authoring, maintaining, and evangelizing technical security architecture documentation. - Exceptional ability to communicate complex non-deterministic AI risks to both deep technical engineers and executive stakeholders. - Proven track record of contributing to an enterprise Cybersecurity Risk Register. Bonus Qualifications - Experience designing runtime sandboxing and isolation technologies (e.g., Firecracker, gVisor, Docker, WebAssembly) for dynamic code execution environments. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Location: North America, EU, UK AI Security Researcher / Research Engineer Remote or hybrid - London preferred but North America, EU, UK accepted About Brave: Brave is on a mission to protect the human right to privacy online. We’ve built a free web browser that blocks creepy ads and trackers by default, a private search engine with a truly independent index, private AI assistant, latest privacy and security features, and a private ad network (opt-in!) that directly rewards you for your attention. Already over 120 million people regularly use Brave for a faster, more private web. Millions more switch every month. The internet is a sea of ads, hackers, and echo chambers. Big Tech makes huge profits off our data, and tells us what’s true and what’s not. Brave is fighting back. Join us! Summary We are looking for a researcher/research engineer to help mitigate the security risks that come with building AI systems-especially LLM-powered web agents and chatbots. In this role, you'll design and implement secure-by-design architectures, audit our LLM-powered web agent (https://brave.com/blog/ai-browsing/) and chatbot, and help set Brave's direction on how we identify, measure, and reduce security risk across AI products. Responsibilities Design and execute adversarial evaluations to uncover failure modes in LLM-powered web agents and chatbots (e.g., prompt injection, tool abuse, data exfiltration) Analyze model behavior (including internal thoughts) to understand and forecast security risks in frontier models Develop and prototype security-focused training and fine-tuning techniques Augment web agents with security principles including information flow control, privilege control and contextual security Partner with engineers and (privacy, ML, and Cryptographic) researchers to translate findings into product changes, tests, and measurable security improvements Help define a forward-looking security strategy and policy for building and responsibly releasing web agents—advocating for user protection You may be a good fit if you have Demonstrated experience working on Secure AI (prompt injection attacks and security guardrails) Strong publication record in AI security, ML security, or closely related areas A track record of shipping products and features inside a fast-moving environment Strong coding skills in Python and familiarity with ML frameworks like PyTorch or JAX Experience training, fine-tuning, and evaluating large language models Deep familiarity with large language models and web agents, how they work, and how they are trained Experience applying security principles (e.g., information flow control, access control/least privilege) Demonstrated success in bringing clarity and ownership to ambiguous technical problems A Ph.D. in computer science is highly preferred, but we may consider some exceptions with industry experience Skills That Will Set You Apart from the Competition Knowledge of AI Systems (pipelines, security evaluation, etc.) Open source projects on security/privacy Experience with confidential computing and ZKP/SMPC protocols Ph.D. in computer science from a top-tier school A strong publication record in premier systems, performance, or ML Work experience in industry is desirable Working at Brave - What we offer Ability to work at an exciting and well-funded international startup headquartered in San Francisco Cutting-edge technology, allowing you to work with state-of-the-art tools and software solutions Competitive compensation and plenty of room for personal growth Great international exposure and team atmosphere We are looking to hire in London but would consider an exceptional candidate in the rest of Europe. NO AGENCIES or RECRUITERS PLEASE - Unfortunately, we cannot work with third parties on these searches.