Location: United States, San Mateo, CA
Why Sony Interactive Entertainment?
Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity.
Sony Interactive Entertainment
Security Architecture | Cloud | AI Security | Enterprise Platforms
We are seeking a Staff Security Architect to help shape and secure the next generation of enterprise, cloud, platform, and AI-enabled technology. This role combines deep security architecture expertise with strong engineering judgment and the ability to influence technical direction across complex, global environments. The successful candidate will partner with engineering, infrastructure, product, and security teams to identify systemic risk, develop scalable security patterns, and guide secure adoption of emerging technologies, including generative AI and agentic systems.
Key Responsibilities
Design, review, and approve security architecture for enterprise, cloud, SaaS, platform, and application environments, balancing business objectives, engineering constraints, and risk.
Lead cloud security architecture across AWS, Google Cloud, and hybrid environments, including identity, network security, data protection, logging and monitoring, key management, workload isolation, security posture management, and the effective use of native and third-party cloud security controls.
Define and review security architecture for SaaS and PaaS platforms, including identity federation, privileged access, tenant configuration, data protection, API and integration security, logging, third-party risk, and secure adoption of enterprise SaaS services.
Drive security throughout the software delivery lifecycle, including source control, CI/CD pipelines, build systems, artifact repositories, infrastructure as code, secrets management, code and artifact signing, software provenance, deployment automation, and security controls for developer platforms.
Lead security architecture for AI-enabled systems, including generative AI, large language models, retrieval-augmented generation, AI agents, model-serving platforms, and AI-assisted developer workflows.
Design mitigations for risks such as prompt injection, insecure tool use, excessive agency, sensitive-data disclosure, model or supply-chain compromise, unsafe output handling, and abuse of AI services.
Define security requirements for AI data, models, prompts, embeddings, vector stores, APIs, tools, and agent identities, including least-privilege access, secrets management, encryption, isolation, provenance, logging, monitoring, and lifecycle controls.
Architect and improve identity, authentication, authorization, network security, key management, cryptography, application security, and production security controls across complex environments.
Identify security design gaps in existing and proposed systems; translate findings into practical architecture improvements, reference patterns, hardening standards, preventative controls, and responsible automation that improves repeatability and operational effectiveness.
Provide technical leadership across multi-disciplinary teams, clearly articulating risks, tradeoffs, and recommended solutions to engineering leaders, business stakeholders, and audiences without a security background.
Required Qualifications
15+ years of relevant experience in security architecture, security engineering, product security, cloud security, infrastructure security, or related disciplines, with demonstrated leadership at senior or staff level.
Deep knowledge of security architecture principles across cloud, application, network, identity, platform, infrastructure, and enterprise environments.
Hands-on experience designing or securing cloud-based and containerized environments, including major cloud platforms such as AWS or Google Cloud.
Strong understanding of modern identity and access management, PKI, OAuth/OIDC, SAML, TLS, VPNs, secrets management, key management systems, cloud KMS, and HSMs.
Expertise in network and application security controls such as WAFs, NGFWs, segmentation, DMZ design, DDoS mitigation, load balancing, proxies, intrusion detection/prevention, and host-based controls.
Experience with secure software development, threat modeling, CI/CD and developer platforms, application security, and engineering mitigations across the software lifecycle.
Working knowledge of AI/ML security concepts and the ability to evaluate security risks in generative AI, LLM, and agentic system architectures, including data flows, trust boundaries, model access, and tool integrations.
Strong critical thinking, risk prioritization, communication, and influence skills, with the ability to lead through ambiguity and work effectively across global, cross-functional teams.
Bachelor's degree in Computer Science, Mathematics, Engineering, Information Security, or equivalent practical experience.
Preferred Qualifications
Experience securing AI/ML platforms, generative AI applications, model gateways, RAG architectures, vector databases, or agentic workflows in production environments.
Experience with AI security evaluation, red teaming, adversarial testing, model abuse testing, or control validation for AI-enabled systems.
Experience securing large-scale Linux, distributed, multi-tenant, or high-availability production environments.
Development or automation experience in Python, C++, Java, or similar languages.
Recognized technical leadership through patents, publications, open-source contributions, conference participation, teaching, or security community involvement.
Penetration testing, adversarial security, or attacker-minded design experience.
Master's degree or Ph.D. in Computer Science, Mathematics, Engineering, Information Security, or a related field.
Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks.
Please refer to our Candidate Privacy Notice (where applicable) for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights.
Equal Opportunity Statement:
Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category.
We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.
Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.
Location: Zürich, CH
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
As Anthropic's models grow more capable, so does the interest of people who want to attack or misuse them. The Detection and Response (D&R) team spots those threats and responds to incidents across every layer of Anthropic's technology stack.
The team is early-stage, so you'll help build our detection and response capabilities from the ground up and work closely with our security and research teams.
Key responsibilities
Lead incident response across a range of domains, from external attacks to insider threats, spanning all layers of Anthropic's technology stack
Build and deploy tooling, including tools that use large language models, to improve how we detect and respond to threats
Create and tune detections, playbooks, and workflows to catch and respond to incidents quickly
Review incident response metrics and procedures, and drive improvements
Work across security and engineering teams
Take part in an on-call rotation
Minimum qualifications
Experience handling security incidents and investigating anomalies as part of a team
Working knowledge of EDR, SIEM, SOAR, or similar security tooling
A solid understanding of cloud environments and operations
Experience working with engineering teams in a SaaS environment
Proficiency with a scripting language such as Python and query languages such as SQL
Strong communication and collaboration skills
Able to lead projects with little guidance
Able to pick up new languages and technologies quickly
Preferred qualifications
7+ years of software engineering experience, or 7+ years of detection engineering, incident response, or threat hunting experience
Security operations or investigations involving large-scale Kubernetes environments
Experience analyzing attack behavior and prototyping high-quality detections
Experience with threat intelligence, malware analysis, infrastructure as code, or forensics
Experience contributing to a high-growth startup environment
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Требования:
— Опыт сопровождения CheckPoint и/или Cisco ASA/FirePower.
— Глубокое понимание TCP/IP, протоколов маршрутизации и модели OSI.
— Навык глубокого анализа сетевого трафика.
— Понимание аппаратной архитектуры сетевого оборудования и его ограничений.
— Опыт построения защищённых VPN.
— Знание Linux, систем мониторинга, Visio, Excel, PowerPoint.
Условия:
— Локация: Москва, удалённо, с посещением офиса раз в неделю.
ГибридМосква
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Задачи:
— Вести безопасность продукта и платформы.
— Усиливать безопасность облачной инфраструктуры.
— Руководить реагированием на инциденты.
Требования:
— Опыт работы с Kubernetes, управлением секретами, IAM.
— Знание Infrastructure-as-Code, CI/CD.
— Опыт в облачной безопасности и реагировании на инциденты.
Условия:
— Работа в офисе в Сиэтле.
— Зарплата от 180,000 до 240,000 USD в год.
Задачи:
— владение процессом end-to-end security engineering
— автоматизация мер безопасности
— руководство реагированием на инциденты
Требования:
— опыт в security engineering, включая автоматизацию и управление инцидентами
Условия:
— работа в офисе в Берлине
— зарплата от $100,000 до $150,000 в год
Location: Singapore
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
Nebius is looking for a
APAC
Regional Security Manager. In this role, you will be r
esponsible for the security strategy, governance, and operational oversight of all sites within a defined geographic region.
Your responsibilities will include:
Lead and oversee security operations across multiple sites and data centers in the region.
Ensure compliance with corporate security standards, policies, and regulatory requirements.
Manage regional security budgets, forecasts, and resource planning.
Support site security teams and guide risk mitigation and security best practices.
Lead regional incident management and escalation processes.
Drive security projects, audits, assessments, and continuous improvement initiatives.
Coordinate with internal stakeholders, vendors, and local authorities.
Report regional security performance, risks, and KPIs to senior leadership.
We expect you to have:
Proven experience managing large-scale security operations globally.
Deep understanding of data center security and compliance frameworks.
Strong leadership, strategic thinking, and communication skills.
Experience managing teams and influencing senior stakeholders.
Excellent English – Written and spoken
Working knowledge of spoken and written English
It will be an added bonus if you have:
Background in governmental security systems.
Familiarity with access control systems (ACS) and CCTV.
Experience in large, global organizations.
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: Poland
Workplace: remote
About airSlate
airSlate is a global SaaS technology company that develops no-code workflow automation, electronic signature, and document management solutions. Our award-winning products - SignNow, pdfFiller, DocHub, altaFlow, Instapage, and US Legal Forms - serve over hundreds of millions of users and more than one million customers worldwide, helping organizations of every size digitize processes, improve efficiency, and transform how they work.
We’re in an exciting phase of growth and transformation, with teammates in more than 20 countries across three continents and main hubs in the United States, Poland, Romania, Ukraine and Philippines.
At airSlate, we’re building value for customers and a culture where growth and innovation go hand in hand. We’re looking for people eager to shape products, scale a company, and thrive in a fast-moving environment.
About Cloud and Security team:
Our security team protects user data and keeps the airSlate platform stable. We work closely with product, engineering, and operations teams to reduce security risks at every stage, from design to production. We also monitor threats, run system audits, and help everyone in the company follow secure work practices.
And now, we are looking for a Senior Security Engineer (Cloud & AppSec) who is prepared to contribute to the next chapter of our company's growth.
The person will join our Security Engineering team of five and take on the responsibility of keeping our cloud infrastructure and products secure.
As Senior Security Engineer, you will help product and engineering teams build secure products, find and fix risks early, and respond quickly when something goes wrong.
What you'll be working on:
Secure our AWS and GCP environments: access management (IAM, least privilege, workload identities), network segmentation, encryption, and key and secrets management
Find and fix cloud misconfigurations and security risks before they cause problems
Set up security logging and monitoring, and investigate suspicious activity
Test the security of our web, mobile, and network-based applications
Run and improve our security scanning tools (SAST, DAST, SCA) and connect them to CI/CD pipelines
Help teams build secure products from the start by joining architecture reviews, threat modeling sessions, and risk assessments
Explain security findings clearly and work with engineers until the issues are fixed
Handle security incidents of different kinds (application, infrastructure, user-related): investigate, triage, contain, and write post-mortems
Prepare for SOC 2 and CASA audits and external assessments together with product and compliance teams
Configure and monitor our CDN
Work alongside a small, experienced, and proactive team that solves complex problems together
What we expect from you:
4+ years of professional experience in information security, application security, or a related field
Hands-on experience securing AWS and/or GCP
Practical experience with SAST, DAST, and SCA tools, including choosing, setting up, and integrating them into CI/CD
Experience in security testing of web, mobile, or network applications
Experience in incident response, from investigation to post-mortem
Good knowledge of secure development practices across the SDLC, including threat modeling
Working knowledge of Bash, Python, Go, or Terraform
Clear communication skills and the ability to explain risks so that teams act on them
English at B2 level or higher, written and spoken
What helps you rock:
Experience preparing for compliance audits such as SOC 2, CASA, PCI DSS, or NIST CSF
Previous experience as a DevOps engineer or developer
What we offer
Flexible working environment - Our teams operate across the globe. We value in‑person collaboration in our hubs, but we also embrace remote and hybrid working. You can work from one of our offices in the United States, Poland, Romania or Ukraine, or remotely from many countries.
Competitive compensation and stock options - We offer salaries that reflect local market conditions and experience, plus a performance-based bonus system and stock options so you share in the company’s growth.
Professional growth and learning - We invest in your development through courses, conferences, and access to learning resources. We encourage career growth and internal mobility, supporting teammates who want to explore new opportunities within airSlate.
Health and well‑being - We provide comprehensive benefits tailored to each country, including health coverage, wellness programmes and access to fitness options. We also dedicate quarterly company-wide Mental Health Days, when everyone takes time off to rest and recharge.
Family‑friendly culture - Family life is part of who we are, and we embrace it in many forms. From flexibility for parents to our airSlate Junior Club for kids, to company-wide family days and our pet-friendly approach, we’re committed to making work and life easier to balance.
Giving back - We support charitable initiatives around the world through the airSlate Care programme. Our current focus includes humanitarian aid in Ukraine and other regions, matching employee donations and supporting causes chosen by our teams.
Open communication - We encourage transparent dialogue at all levels. From team discussions to company-wide Q&A sessions with our CEO, we make sure everyone has the chance to be heard and to influence how we grow.
It is airSlate's policy to comply with all applicable equal employment opportunity laws by making all employment decisions without unlawful regard or consideration of any individual’s race, religion, ethnicity, color, sex, sexual orientation, gender identity or expressions, transgender status, sexual and other reproductive health decisions, marital status, age, national origin, genetic information, ancestry, citizenship, physical or mental disability, veteran or family status or any other basis protected by applicable national, federal, state, provincial or local law. airSlate's policy prohibits unlawful discrimination based on any of these impermissible bases, as well as any bases or grounds protected by applicable law in each jurisdiction. If you need assistance or an accommodation during the application process because of a disability, it is available upon request. airSlate is pleased to provide such assistance and no applicant will be penalized as a result of such a request. Pursuant to relevant law, where applicable, airSlate will consider for employment qualified applicants with arrest and conviction records.
Read our Recruitment Privacy Notice to Learn how we process your personal information.
Location: Worldwide
About CENSUS
CENSUS LABS is a cybersecurity engineering powerhouse specializing in
securing products and organizations. Our identity is rooted in
professionalism, engineering excellence, a scientific mindset, and
hacking demeanor. We are research-driven, enabling us to deliver a
diverse range of professional services.
CENSUS is trusted to conduct high-impact product security
engagements, helping our clients secure their solutions from design to
deployment, using realistic and risk-informed approaches. Our expertise
spans end-to-end systems, including Secure Communications, IoT, Medical
Devices, Mobile, and Vehicle Computing platforms.
Learn more about CENSUS at census-labs.com. **
VALID PASSPORT REQUIRED FOR SECURITY CLEARANCE PURPOSES**
About the Job
CENSUS’ bespoke cybersecurity services are driven by a talented team
of Security Engineers, Consultants, and Researchers whose work goes
beyond traditional security assessment. Under the mentorship of our
Engineering Managers, our consultants perform technical evaluations of
complex systems and deliver insights that drive measurable
improvements.
We are seeking a technically strong and detail-oriented Senior
Product Security Consultant to join our Cybersecurity Engineering team.
The ideal candidate will have extensive experience in product-level
security verification, threat model analysis, and product-level
testing.
You will be responsible for evaluating the security posture of
software and system products by validating architecture, threat models,
and security controls. You will participate in structured evaluation
projects aligned with industry and regulatory standards such as Common
Criteria, ISO/IEC 27002, or equivalent frameworks.
Key Responsibilities
Review and validate security documentation (e.g., Security Targets, threat models, trust boundaries, asset inventories).
Assess the completeness, accuracy, and risk coverage of various
threat models and risk assessment frameworks (STRIDE, LINDDUN, OWASP,
TARA, TAL, etc.).
Verify security requirement traceability across assets, trust boundaries, and system functions.
Conduct architectural and implementation-level reviews of security controls (e.g., encryption, access control, key management).
Perform targeted security testing (white-box and black-box) on
system APIs, client/mobile apps, backend services, and cloud
infrastructure.
Validate implementation of cryptographic controls, key lifecycle procedures, and secure communication protocols.
Evaluate the use of post-quantum cryptography and hybrid models in secure key management.
Analyze secure deployment configurations across containerized
platforms (Docker, Kubernetes), CI/CD pipelines, and cloud services.
Deliver comprehensive, standards-aligned technical reports based on evaluation findings.
Communicate product security risks clearly to both technical and non-technical audiences.
Minimum Qualifications
MSc or BSc in Computer Science, Electrical/Software Engineering, Cybersecurity, or a related technical discipline.
4+ years of experience in product security
, software evaluation, or penetration testing.
Proven ability to evaluate threat models, security requirements, and mitigation effectiveness.
Strong technical writing and documentation skills in English.
Excellent analytical skills and attention to detail.
Required
Skills
In-depth understanding of security architecture and common
system design patterns (e.g., API gateways, microservices, message
queues, service meshes).
Hands-on experience performing design-level security reviews and verifying implementation alignment with defined threat models.
Familiarity with structured security frameworks such as Common Criteria, FIPS 140, ISO 15408, OWASP ASVS, and MASVS.
Practical experience with security testing in diverse product environments (mobile, embedded, web/cloud, API).
Knowledge of authentication, authorization, identity, and
secrets management technologies (e.g., OAuth2, MFA, PKI, SSO, Cloud IAM,
HashiCorp Vault).
Proficiency in applied cryptography (e.g., mTLS, E2EE, AEAD, key derivation, key wrapping, remote attestation).
Ability to identify security vulnerabilities across platforms (e.g., OWASP Top 10, misconfigurations, transport security gaps).
Excellent documentation and communication skills, able to articulate technical risks and findings to diverse audiences.
Problem solving skills, analytical thinking, and willingness to learn/grow.
Nice-to-Have Skills
Ability to read and analyze source code for logic flaws in one or more language families:
Mobile: Swift, Obj-C, Kotlin, Java, Dart, JavaScript
Web/Cloud: Java, Python, Go, PHP, Ruby, C#, JavaScript
Native/Embedded: C, C++
Experience debugging or instrumenting applications across edge, embedded, or cloud platforms.
Familiarity with Zero Trust architectures, enclaves, and confidential computing technologies.
Exposure to fuzzing, symbolic execution, or static analysis techniques.
Experience collaborating with distributed teams across different time zones and cultures.
OUR Values & Core Competencies
Act with Integrity
We uphold the highest ethical standards and take full responsibility
in every action — whether securing systems, researching vulnerabilities,
or collaborating with clients. Trust is the foundation of our impact.
Collaborate with Trust
We bring together diverse perspectives across disciplines and
borders, knowing that collective intelligence leads to stronger, more
resilient outcomes.
Challenge with Curiosity
We question deeply, explore fearlessly, and pursue knowledge
relentlessly to uncover threats, solve root problems, and drive smarter
security decisions.
Innovate to Protect
We create with purpose — building secure, scalable, and
forward-looking solutions that safeguard people, organizations, and the
digital future.
Adapt with Precision
We move with speed and discipline — learning from failure, refining
our approach, and staying focused amid complexity and constant change.
Ready to Make an Impact?
📩 Apply today!
Location: Abu Dhabi, United Arab Emirates
About CENSUS
CENSUS is an internationally acclaimed Cybersecurity services provider. We support the needs of multiple industries, providing IT and OT security services to public and private organizations around the world, ranging from financial institutions and critical infrastructure to automotive and secure communications, including Fortune 500 companies. Powered by cutting-edge research, scientific analysis and in-depth engineering experience across various industries & technologies, CENSUS delivers unparalleled security consulting & assessment services for products (software, services, devices, and large-scale platforms), infrastructure, and organizations.
Learn more about CENSUS at census-labs.com. **
VALID PASSPORT REQUIRED FOR SECURITY CLEARANCE PURPOSES**
About the Job / Key Responsibilities
CENSUS’ bespoke cybersecurity services are built upon a talented pool of Security Engineers, whose role extends beyond mere adherence to industry best practices. Under the management and mentorship of our Technical Leads and Technical Project Managers, our Senior Security Engineers are entrusted with assessing the completeness and maturity of an extensive range of cybersecurity products and features. Along with capturing defects and inefficiencies, in-depth mitigation strategies are explored, presented, and re-evaluated post their integration, in a highly agile and adaptive service delivery model.
We are looking for talented & ambitious professionals to grow our
Product Security Professional Services
team and join our ongoing mission to deliver in-depth and top-tier cybersecurity services to our valued clients. As part of this role, you will use your knowledge and experience - in the
Embedded Systems Security domain
– to execute design reviews, implementation assessments and mitigation consulting activities scoped across products of various industries. You will work side-by-side with our clients’ development and security teams & partners, under engagements / projects that involve:
Reviewing product security designs, documenting missing security controls, and driving analysis for security improvements.
Executing and reviewing threat modelling, attack surface enumeration and attack tree creation activities for embedded system products.
Researching, reviewing, comparing, and proposing technologies that can satisfy the client’s established requirements, and aligning with their strategies.
Executing end-to-end security posture assessments via source code auditing, functional testing, fuzz testing and other applicable methodologies.
Verifying if output implementation is aligned with the products’ security architecture, requirements, and threat model.
Documenting and presenting product security risks in both technical- and business-oriented language.
Support a small team (2-3) of security engineers and consultants to successfully assess and research bleeding edge technologies and products.
Minimum Qualifications
MSc or BSc in Electrical Engineering, Computer Science, Computer Engineering, Electronics Engineering, or equivalent practical experience.
4+ years of experience
in embedded, general- or special-purpose computer
system-level
software
security
. Experience can be an engineering / development position (e.g., consumer or enterprise), an engineering-based consultancy role, an equivalent engineering-based role, or a combination of them.
Proven experience in developing, auditing, or testing security solutions for embedded, IoT, general computing or mobile / smartphone systems.
Key Skills
Experience with Embedded Systems, Linux, or Real Time Operating systems security concepts.
Experience with reviewing and researching system security architecture and engaged technologies.
Experience with ARM architecture and techniques to debug software running on these platforms.
Experience with C, C++, Rust, or Assembly (ARM) programming languages in the context of system software (bootloaders, drivers, kernel, system services, etc.).
Experience with secure boot, firmware & software integrity, OTA updates, and hardware-backed device attestation technologies.
Experience with cryptographic primitives and cryptographic best practices in the context of system security (inline crypto engines, storage encryption, attestation, HW key rooting, derivation, wrapping/unwrapping, etc.).
Experience in identifying and reporting security vulnerabilities on system software (memory corruption, side-channel attacks, business logic, etc.).
Familiarity with HW-backed security features for system hardening and security domains / trust-boundaries separation (MPU, MMU/IOMMU, NX, DAC/MAC, stack canaries, securing heap allocators, etc.).
Familiarity with TEE, TPM, SE, SPU, and other related technologies to isolate execution of security critical operations.
Experience of working with international teams in other regions and time zones worldwide.
Problem solving skills, analytical thinking, and willingness to learn/grow.
Proficient in English and excellent communication skills.
#LI-Onsite
Location: Worldwide
About CENSUS
CENSUS is an internationally acclaimed Cybersecurity services provider. We support the needs of multiple industries, providing IT and OT security services to public and private organizations around the world, ranging from financial institutions and critical infrastructure to automotive and secure communications, including Fortune 500 companies. Powered by cutting-edge research, scientific analysis and in-depth engineering experience across various industries & technologies, CENSUS delivers unparalleled security consulting & assessment services for products (software, services, devices, and large-scale platforms), infrastructure, and organizations.
Learn more about CENSUS at census-labs.com. **
VALID PASSPORT REQUIRED FOR SECURITY CLEARANCE PURPOSES**
About the Job / Key Responsibilities
CENSUS’ bespoke cybersecurity services are built upon a talented pool of Security Engineers, whose role extends beyond mere adherence to industry best practices. Our Technical Project Managers play a pivotal role in formulating and executing service delivery strategies that align with the rigorous quality standards set by CENSUS. Drawing from their robust technical background and leveraging their project & stakeholder management skills, TPMs serve as the primary facilitators empowering our clients to effectively maximize the potential of our assessment and advisory teams.
We are looking for talented & ambitious professionals to grow our
Product Security Professional Services
team and join our ongoing mission to deliver in-depth and top-tier cybersecurity services to our valued clients. As part of this role, you will use your technical background - in the
Application Security domain
– along with your
Project Management skills
to ensure a successful service delivery to our clients. You will work side-by-side with our clients’ development and security teams & partners, under engagements / projects that involve:
Working with our clients to understand their requirements and scope, size, & plan the corresponding technical activities to efficiently meet those (consulting, assessments, audits, evaluations, security architecture development, etc.).
Receiving high-level task & product descriptions and decomposing them to smaller & well-defined technical activities, which are then assigned to the corresponding security engineering & consulting teams.
Leading project’s technical team within the scope of the engagement.
Documenting and presenting product security risks in both technical and business-oriented language.
Conducting technical QA and presenting to both technical and business audiences, the technical team deliverables (findings, technical reports, observations, improvement recommendations, operational methodologies, etc.).
Building and developing relationships with cross-client teams and partners.
Owning & driving the continuous improvement of the technical quality of the project team deliverables.
Ensuring client satisfaction and business growth by communicating lessons learned and key success factors to the business development team.
Minimum Qualifications
MSc or BSc in Electrical Engineering, Computer Science, Computer Engineering, Electronics Engineering, or equivalent practical experience.
4+ years of experience
in application security related role. Experience can be an engineering / development position (e.g., consumer or enterprise), an assessment / consultancy role, an equivalent role in other engineering organizations, or a combination of them.
2+ years of experience
in technical project management in a role related to
product or information security
.
Key Skills & Preferred Qualifications
Experience with security concepts, cryptography, and protocols across various Application types (cloud, web, mobile, IoT / Embedded, etc.).
Experience with reviewing application security architectures & engaged technologies.
Experience with Mobile (iOS & Android), Cloud (GCP, AWS, Azure, etc.) or Web (Frontend & Backend) platforms.
Experience in reading source code, discerning business logic pitfalls, and identifying security flaws in at least one of the following groups of languages:
Mobile-relevant, such as Swift, Obj-C, Kotlin, Java, Dart, and JavaScript.
Web- and Cloud-relevant, such as Java, Ruby, Rust, Go, Python, PHP, C#, Lua, and JavaScript.
Experience with application authentication, authorization, identity, and access management methods, such as OAuth, SSO, JWT, PKI / Certificates, Cloud IAM, and Password-less authentication.
Familiarity with application security features and key management systems backed by secure hardware, such as Mobile Biometric authentication, Keystore / Keychain, TPM / vTPM, HSM and SE.
Familiarity with product security assessments and S-SDLC processes.
Experience with managing technical teams.
Experience with translating complex technical concepts into relevant messages suitable for various audiences (engineering and different tiers of management).
Experience with stakeholder management for security engineering deliverables.
Experience working with international teams located in other regions and time zones worldwide.
Excellent leadership, ownership, problem solving skills, and willingness to learn/grow.
Proficient in English and excellent communication skills.
Ability to travel
#LI-Onsite
About the Role:
Abnormal AI protects organizations from sophisticated email and collaboration attacks using behavioral AI. Security is core to the product and customer trust. The security organization operates a commercial cloud environment and a FedRAMP-authorized environment, pursuing rigorous federal authorizations.
You will report to the CISO and lead the Security Engineering organization. Responsibilities include building and scaling high-performing security teams, owning major security programs end to end, and operating autonomously in the CISO's absence, representing security to executive leadership, customers, and auditors. This role requires a deeply technical leader with a software engineering background who has grown into people leadership. You will write and review code and architecture and believe in partnership over policy enforcement.
Security Philosophy:
- Security reduces toil and aims to make the company faster and safer.
- Controls that add friction without reducing risk are defects.
- Invest in guardrails, golden paths, and secure-by-default infrastructure.
- Prefer preventing classes of problems over chasing individual findings.
- Emphasize partnership with engineering, IT, and business teams.
- Treat security problems as engineering problems: automated, measurable, code-reviewed, and continuously improved.
What You Will Do:
- Serve as deputy to the CISO with full authority in their absence.
- Lead, coach, and grow managers and senior engineers across Security Engineering and Security Operations.
- Own the security engineering roadmap including cloud security architecture (AWS-first), detection and response, identity, vulnerability management, and secure-by-default platform investments.
- Drive cross-functional programs with Engineering, IT, and Product, including AI security governance, data perimeter controls, and federal compliance initiatives.
- Set and defend engineering standards: everything as code, automated where possible, measured against outcomes.
- Build hiring pipelines, manage performance, promotions, and succession planning.
- Translate technical risk into business terms for executives and board, and align security strategy with business priorities.
Must Haves:
- 10+ years in security or software engineering, including 4+ years managing security teams with scope including managers of managers.
- Genuine software engineering background with production software experience.
- Proven record of building and scaling high-performing security teams.
- Deep technical fluency in cloud-native environments: AWS organizations, multi-account governance, Kubernetes, identity and access, detection engineering, modern SDLC security.
- Demonstrated cross-functional leadership and trust with engineering leaders.
- Strong written communication producing decision-ready documents.
- Executive presence comfortable presenting to C-level leadership, customers, and auditors.
Strong Signals:
- Current security engineering manager or senior manager at fintech, high-growth startup, or enterprise.
- Experience building paved-path or secure-by-default platforms reducing risk and developer friction.
- Experience with compliance-driven environments (FedRAMP, SOC 2, ISO 27001) without letting compliance define security.
- Experience securing AI/ML systems or governing AI adoption at scale.
- Experience operating with scarce security headcount and scaling via automation.
Compensation:
- Base salary range: $214,200 — $308,000 USD per year.
- Eligible for bonus, incentive compensation, equity, and comprehensive benefits.
Application:
Apply at https://weworkremotely.com/remote-jobs/abnormal-director-of-security-engineering
Location: Marousi, Greece
Are you interested in a career in Information Security and fluent in English? We currently have a vacancy for a motivated professional to join our team.
What You'll Do:
Assist with conducting IT risk assessments, Data Protection Impact Assessments (DPIAs), and drafting security plans.
Support ISO/IEC 27001 activities, including ISMS maintenance, documentation, and preparation for internal audits.
Help develop, review, and track enterprise information security policies and GRC (Governance, Risk, and Compliance) elements.
Collaborate on third-party vendor risk evaluations, security audits, and gathering security requirements for IT projects.
Requirements
University degree (or higher) in IT, Cybersecurity, or a related field, alongside 1 to 3 years of foundational experience in IT or information security roles;
Exposure to common security frameworks (particularly ISO/IEC 27001), risk methodologies, and privacy assessments (DPIAs);
Exposure to enterprise IT systems and/or Cloud environments.
Strong capacity for writing and presenting technical documentation, with an excellent command of written and oral English;
Ability to cooperate well and integrate seamlessly within an international team environment;
Security/IT/Cloud certifications would be considered a plus.
Benefits
We believe in rewarding talent and dedication. Here's what you can expect as part of our team:
Competitive full-time salary;
Private Health Coverage on the Company’s group program;
Flexible Working Hours;
Top-of-the-Line Tools;
Professional Development: Benefit from language courses, specialized training, and continuous learning opportunities;
Career Growth: Work with some of the most innovative and exciting specialists in the industry;
Dynamic Work Environment: Thrive in a setting that offers challenging goals, autonomy, and mentoring, fostering both personal and company growth.
If you want an exciting challenge, work with some of the coolest technologies, and enjoy your time doing it, then join us! Submit your detailed CV in English, quoting reference: (
JISC/11/26
).
You may also consider all our other open vacancies by visiting the career section of our website (
www.eurodyn.com
) and follow us on Twitter (@EURODYN_Careers) and LinkedIn.
EUROPEAN DYNAMICS (ED)
(
www.eurodyn.com
) is a leading European Software, Information, and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Berlin, Stockholm, London, Nicosia, Valetta, Vienna, Den Haag, Hong Kong, etc.) The company employs over 1100 engineers, IT experts, and consultants (around 3% PhD, 41% MSc, and 54% BSc). We design and develop software applications using integrated, state-of-the-art technology. Our current IT projects have a value exceeding 300 million EURO. EUROPEAN DYNAMICS is a renowned supplier of IT services to European Union Institutions, international organizations, European Agencies, and national government Administrations in 40 countries and 4 continents.
As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, colour, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion.
EUROPEAN DYNAMICS (ED)
adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published at
www.eurodyn.com/privacy
. By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorize ED to process your personal data for the purposes of the company's recruitment opportunities, in line with the Policy
Задачи:
— самостійний монтаж, налаштування, обслуговування та усунення несправностей систем фізичної безпеки
Требования:
— досвід роботи з CCTV, системами контролю доступу (ACS) та охоронною сигналізацією
— досвід роботи з Ajax або аналогічними системами
— розуміння IP-мереж та мережевого обладнання: PoE, комутатори, маршрутизатори
— володіння російською та англійською мовами
— знання грецької мови буде плюсом
Условия:
— робота в офісі на Кіпрі, Лимасол
— повний робочий день
Location: AU: Melbourne: (260 Burwood Rd); AU: Sydney (45 Clarence St)
Workplace: Hybrid
The role and its impact
When something goes wrong in security at Xero, our Response team are first on the scene. We're looking for a Senior Security Operations Analyst who loves incident response, enjoys building things, and wants a hand in shaping what a SOC looks like when AI agents are part of the team.
You'll lead our complex investigations and take command of medium and high impact incidents, keeping people calm, decisions moving and stakeholders in the loop. When things settle down, you'll make sure what we learnt changes something, whether that's a detection, a runbook or the way we train.
You'll also help us build. Our Analysts improve the queue as well as working it, so part of your time will go on creating automations and AI-assisted workflows that take repetitive work off the team and leave more room for the investigations that need a person.
The team and how they connect
Response is a follow-the-sun global team. You'll be in the Southern Hemisphere half, based in New Zealand or Australia, and at the end of your day you'll hand over to colleagues in the UK and North America, who hand back to us the next morning. You'll work business hours in your time zone and take a share of our on-call roster for after-hours incidents.
You won't be doing it on your own. You'll join a cohort of Senior Analysts who share the load on complex work and lead our initiatives, with a Lead Analyst alongside for the hardest problems. Our XFLT, a cross-functional leadership team of Security Operations Managers, our Lead Analyst and our Product Manager, sets the direction and clears the way, so there's always someone to think out loud with.
The team is currently working on / Initially, you will focus on
We're building towards an agentic SOC, where AI agents and automation carry more of the first pass, and analysts direct them and step in where judgement matters. We're working through it carefully: which low-risk work agents can take on, where the guardrails and human approvals belong, and how we'll know it's working. People still make the big calls, because our robots aren't that good yet.
You don't need to be an AI expert. We'd love you to be curious, to have tried a few things, and to want to help us get this right.
You’ll also:
- Lead complex investigations and step up as Incident Commander for medium and high impact incidents
- Be a go-to escalation point for our Graduate, Associate and Analyst crew, and coach them through the tricky stuff
- Run post incident reviews that lead to real change in detections, runbooks and training
- Lead initiatives with our Product Manager and Security Operations Managers, turning goals into work that gets delivered
- Build and improve automations and AI-assisted workflows, with guardrails and human sign-off where they matter
- Work with our Defence engineers on detection and response logic, and test new capabilities in real incidents
- Turn threat intelligence into practical action for Xero
- Give customers and internal teams clear, timely answers to their security concerns
Where and how you can work
We support a flexible working model that empowers you to balance your professional and personal life. You will have the option to work in a hybrid capacity, combining the focus of remote work with the collaboration of our office spaces and team boost days to foster connection and alignment.
Here are some of the things we're looking for
Incident response comes first for us, so we're looking for:
- Solid experience in security operations, and a real passion for incident response
- A track record of leading complex investigations and incidents through to resolution, including coordinating people and making calls under pressure
- Sound technical judgement and good knowledge of attack and defence techniques, particularly in cloud and SaaS environments
- Confidence writing queries in a SIEM or log platform
- Clear, calm communication and a generous approach to sharing what you know
It'd be great if you also have:
- Scripting skills (Python or similar) and experience building automations in a SOAR platform. We use Tines, and we're happy to teach it.
- Hands-on experience with AI tools in security work, or a clear view of where they help and where they don't
- Intermediate or advanced certifications in incident response, threat hunting or cloud security
- Experience in a distributed team working across time zones
If you're strong on incident response and the builder side is still growing, we'd still love to hear from you.
You'll do work that matters to millions of small businesses and their advisors, in a team that shares what it knows and backs each other up, with a real say in how an AI-powered SOC works in practice.
Apply even if your experience isn't a perfect match! At Xero, we hire based on your skills, passion, and the unique perspective you can bring to enhance our culture and team.
Location: USA - Remote
Workplace: Remote
About Us
Since 2013, we’ve been building a CRM that gets out of your way and helps your team sell more, faster. Now we’re building AI into every part of it, so Close does the busywork and your team does the selling. No manual data entry, no 10-click workflows. Just communication-first, AI-powered sales software designed to help you succeed and scale.
We're bootstrapped and profitable which means we answer to our customers and play by our rules. We're proud of our 130-person, 100% remote team, focused on building Close so that no small, scaling business fails because it can't figure out sales.
ABOUT THE ROLE
Close is a CRM built around the communication tools sales teams use every day: email, calling, SMS, workflows, reporting, and AI. Underneath that product is a broad technical surface — Python services and a large application backend, a TypeScript and React frontend, public APIs, Docker and Kubernetes, AWS infrastructure, and integrations with providers that handle sensitive customer data.
Security work happens across it all today, but the ownership is spread across Engineering, Infrastructure, and Security & Trust. We’re hiring our first dedicated Product Security Engineer to make that work systematic. You’ll report to the Backend Platform team manager within EPD (Engineering, Product, and Design), while working across the entire product and infrastructure surface. You’ll find vulnerabilities, determine which findings matter most, and drive them through remediation. Often you’ll fix the problem yourself. Other times you’ll give the owning team a clear reproduction, a practical path forward, and enough context to prioritize correctly.
You’ll analyze code, build proof-of-concepts, test running applications, tune or replace noisy tools, and automate the repetitive parts of vulnerability management. This is not a role where you forward scanner alerts and call the queue managed. Product and application security will be your responsibility. You’ll partner closely with our Infrastructure team on cloud security, access, and secrets, and with our Security & Trust Lead on GRC Engineering https://grc.engineering/, compliance (SOC 2) goals, audits, and corporate security.
This role is a new one at Close. You’ll have significant room to decide where better tooling, clearer ownership, and a small amount of code can reduce the most risk.
OUR STACK
Our backend is primarily Python, with Flask and FastAPI services and TaskTiger https://github.com/closeio/tasktiger and Temporal handling much of our asynchronous work. We expose REST https://developer.close.com/ and GraphQL APIs and store data in MongoDB, PostgreSQL, Elasticsearch, and Redis.
Our frontend is a large single-page TypeScript application built primarily with React. We bundle with Vite, target modern browsers, and test with Vitest, React Testing Library, Playwright, and Chromatic. The product updates in near real time and uses technologies including WebSockets and WebRTC. Our mobile application is built with React Native.
We build and test Docker images in CI/CD and continuously deploy them to Kubernetes on AWS. Our infrastructure uses managed services including EKS, MSK, and ElastiCache, alongside services running on EC2. Terraform and Ansible automate much of the underlying infrastructure, and our containerized local development environment lets engineers run the full system on their own machines.
For this role, our stack extends beyond simply backend or frontend: browser behavior, frontend state, API authorization, asynchronous processing, data access, third-party integrations, containers, and cloud configuration can all be part of the same attack path.
We love open sourcing our code and ideas on our GitHub https://github.com/closeio and on The Making of Close https://making.close.com/, our behind-the-scenes Product & Engineering blog. Check out our open source projects like SocketShark https://github.com/closeio/socketshark, TaskTiger https://github.com/closeio/tasktiger, LimitLion https://github.com/closeio/limitlion and ciso8601 https://github.com/closeio/ciso8601.
AI is both how we build and what we ship, and that's reshaped what engineering looks like. This is a transformation we’re embracing and find deeply exciting.
YOU ARE
- An application security engineer who writes code. You can move from reading an unfamiliar code path, to reproducing an exploit, to proposing or shipping a production-quality fix. Strong Python or TypeScript experience would be especially useful; fluency across both backend and frontend systems is even better.
- Skilled at finding vulnerabilities conventional scanners may miss. You use modern AI-assisted review pipelines, guided by expert judgment, to uncover subtle flaws in web apps and APIs—from authentication, authorization, and tenant isolation to injection, SSRF, unsafe data flows, and business logic. You can threat-model designs, white-box review code, and test running systems.
- Offensive-minded and operationally responsible. You know how to test like an attacker without being careless with customer data or production systems. You can turn a finding into a safe reproduction, assess exploitability and business impact, and retest the eventual fix.
- An automation builder. You have worked with some mix of SAST, DAST, software composition analysis, container scanning, secrets scanning, or cloud posture tooling. More importantly, you know how to tune tools, connect them to engineering workflows, and remove noise.
- AI-native and accountable. You use coding agents and LLMs to accelerate investigation, code review, and repetitive engineering work, but you verify their output. You think carefully about what happens when agents clone untrusted code, install dependencies, or receive access to credentials.
- Able to separate severity from priority. A score is an input, not a foregone conclusion. You consider reachability, existing controls, customer impact, and attack chains, then explain the risk in language that is legible to an engineer or business owner.
- Comfortable working across the business. You’ll collaborate with product engineers, Site Reliability Engineers, Security & Trust Lead, auditors, and external researchers without confusing partnership for pass-off ownership. You will follow findings to closure even when another team is responsible for the fix.
- Self-directed in a remote environment. You can take an ambiguous surface (say, secret rotation or dependency remediation) and learn how it works across multiple systems then turn it into a practical plan with measurable progress.
You do not need to arrive as the deepest expert in every part of this scope. You do need to be able to investigate an unfamiliar system, determine what matters, and bring the right people with you.
YOU WILL
The work spans hands-on application security, security automation, vulnerability management, and infrastructure partnership. Depending on where you find the greatest risk and leverage, projects could include:
- Build a recurring product security review program. Threat model new features, audit high-risk areas, review code, and build safe proof-of-concepts in isolated development environments. Work across our backend, frontend, APIs, and customer-facing integrations.
- Improve application security testing. Combine static analysis, dependency and secrets scanning, dynamic testing in development, and carefully scoped production testing. Use existing tools where they fit and build focused automation where they don’t.
- Own vulnerability intake and remediation. Triage findings from HackerOne, scanners, penetration tests, audits, customers, and internal research. Reproduce issues, assess exploitability and impact, track remediation, and verify fixes. Serve as technical lead for our bug bounty program while contract and budget ownership remain elsewhere.
- Turn security alerts into useful engineering work. Verify scanner coverage and automate ingestion, deduplication, enrichment, prioritization, and routing—so teams spend less time interpreting alerts and more time fixing important issues.
- Make dependency remediation safer and less manual. Improve scanning across our Python and TypeScript codebases, then build workflows to assess upgrades, stage pull requests, run checks, and route work without exposing credentials to untrusted packages or build steps.
- Make secrets routinely rotatable. Partner with service owners and Infrastructure to inventory application secrets, add graceful rotation paths, document provider-specific runbooks, and automate rotation where the provider and risk justify it. Expand our use of Vault-backed dynamic credentials and reduce the number of rotations that require a coordinated fire drill.
- Strengthen AWS security with Infrastructure. Evaluate and improve automated detection of risky configuration across identity, networking, compute, storage, containers, and registries. Turn findings into secure defaults, just-in-time access patterns, infrastructure guardrails, and actionable remediation—not build a second Infrastructure team.
- Support audits and raising the security floor. Partner with Security & Trust on external assessments, provide technical context, and ensure findings are fixed rather than rediscovered. Along the way, create documentation, paved roads, and lightweight training that helps engineers make safer choices without waiting for a security review.
- Take a key technical role in security incident response. Partner with Engineering and Infrastructure to coordinate investigation, containment, and remediation. Contribute to root-cause analysis and follow-up improvements, translating lessons learned into stronger controls and reduced recurrence.
Tech you’ll touch: Python, TypeScript, React, Flask, FastAPI, GraphQL, Docker, Kubernetes, AWS, Vault, GitHub Actions, MongoDB, PostgreSQL, Redis, Kafka, Elasticsearch and the security tooling you help us choose.
BENEFITS
- Compensation: Competitive pay plus an organization-wide goal-based bonus
- Paid Time Off: ~5 weeks of PTO to start. Plus a 1-week all-company Winter Holiday Break and paid US holidays. You'll earn 2 extra days for every year you're with Close.
- 80% Work Option: Work with your manager to choose between a standard 5-day week or a 4-day week at 80% pay
- Parental Leave: Paid leave for primary and secondary caregivers
- Sabbatical: A 1-month paid sabbatical every 5 years with the team
- Healthcare (US residents): Best-in-class health coverage with the majority of employee and dependent premiums covered. Two medical plans, plus Dental, Vision, HSA, FSA, and company-paid Long-Term Disability.
- 401k (US residents): We match your contributions up to 6%, vested immediately
OUR VALUES
Build a house you want to live in - Examine long-term thinking and action
No BS - Practice transparency and honesty, especially when it’s hard
Invest in each other - Build successful relationships with your coworkers and customers
Discipline equals freedom - Keep your word to yourself and others
Strive for greatness - Constantly challenge yourself and others
LEARN MORE
Listen to our CEO and Founder, Steli Efti, tell the story of Close’s journey in the $0-30m Blueprint https://www.close.com/blueprint.
Watch our culture video https://www.youtube.com/watch?v=maXKi1GN2MI from our 2023 team retreat in Milan. Every year our entire team gathers in person to build connection, foster cross-functional collaboration, and have fun. In 2027, we're headed to Dusseldorf, Germany!
Explore our product. Check out a demo https://www.close.com/demo-site!
OUR HIRING PROCESS
We ask a few role-specific questions as part of our application process. These questions are designed to help us learn more about you from the start, so please answer each one thoughtfully. We see this as an opportunity to get to know you beyond your resume.
We use AI tools daily at Close and expect candidates to do the same. In evaluating your application, we aim to get a sense for you - the way you think, how you communicate, the work you've done. Applications that read as fully AI-generated will not be considered.
Regardless of fit, you can expect to hear back from our team with an update on the status of your candidacy.
If you progress to the interview process, you'll receive a full outline of the role-specific steps in your first touchpoint with us. We do our best to make the hiring process clear and human.
Location: Foster City, CA
Workplace: Hybrid
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
Join us at the forefront of AI and cloud-native security as we work to secure one of the most innovative developer platforms in the world. As the Cloud Security Lead, you will shape the cloud and infrastructure security program that protects millions of developers, enables safe AI-assisted development, and ensures organizations can confidently bring our platform into enterprise environments.
In this role, you will own cloud security across GCP (primary) and supplemental environments in AWS and Azure, as well as containerized systems, SaaS platforms, and our multi-tenant AI infrastructure. You’ll improve our security posture through strong architecture, posture management, secure-by-default development practices, and close partnership with Engineering, Compliance, Security Architecture, and Platform teams.
This is a highly impactful, hands-on leadership role—perfect for someone who wants to solve complex security challenges at scale while influencing product, engineering, and go-to-market teams.
WHAT YOU’LL DO:
CLOUD SECURITY ENGINEERING
- Lead configuration hardening across GCP, with additional oversight of workloads and integrations running in AWS and Azure.
- Own and optimize CSPM platforms across multi-cloud environments—establishing configuration baselines, guardrails, and remediation workflows.
- Secure critical SaaS platforms, ensuring proper configurations, access controls, and engineering integrations.
- Lead infrastructure vulnerability management across multi-cloud systems, containers, registries, and platform services.
- Enhance security across containerized and Kubernetes (GKE/EKS/AKS) workloads, including runtime protections, network policies, and workload identity.
- Assess secure logging configurations across cloud/SaaS providers, ensuring audit logs, retention, and routing meet monitoring and architecture needs.
SECURE DEVELOPMENT & ARCHITECTURE ENABLEMENT
- Partner with engineering teams to make services secure by default, embedding security into development workflows, CI/CD pipelines, and cloud-native deployments.
CROSS-FUNCTIONAL RESPONSIBILITIES
- Collaborate with Security Monitoring, Compliance/GRC, Architecture, DevOps, Platform Engineering, and ML Infrastructure.
- Participate in communicating security advisories, best practices, and updates to Replit’s customers.
- Support incident investigations as a cloud security subject-matter expert.
REQUIRED SKILLS & EXPERIENCE:
- 7+ years of experience in cloud engineering, with 3+ years in a senior or lead role.
- Hands-on experience with CSPM tools (Wiz, Lacework, Prisma, Orca, SCC, etc.).
- Deep expertise in GCP security (IAM, VPC, KMS, GKE, Cloud Logging).
- Experience securing and governing SaaS platforms and identity integrations.
- Operational experience with infrastructure vulnerability management across cloud and container environments.
- Working knowledge of AWS and/or Azure security services and configurations.
- Experience with container and Kubernetes security across GKE, EKS, or AKS.
- Strong IaC security experience with Terraform, Pulumi, or similar tooling.
- Familiarity with compliance standards (SOC 2, ISO 27001, PCI DSS).
PREFERRED QUALIFICATIONS:
- Experience supporting engineering teams in building secure-first, cloud-native or PaaS environments.
- Background securing AI/ML pipelines, model-serving infrastructure, or developer platform services.
- Experience in high-growth technology or cloud-native product companies.
- Experience with securing AI/agentic systems and sensitive data pipelines.
- Automation/scripting with Python.
- Relevant certifications (e.g., GCP Professional Cloud Security Engineer, AWS/Azure security certs).
WHAT WE VALUE:
- Problem-solving mindset — Ability to break down complex security and operational challenges into clear engineering solutions.
- Autonomy — Comfortable leading initiatives, collaborating effectively, and driving outcomes with minimal oversight.
- Communication excellence — Able to translate deep technical concepts for engineers, executives, and enterprise customers.
- Continuous learning — Passion for staying current with AI security, cloud-native advances, and emerging threats.
- Automation-first approach — Belief in reducing operational toil and building scalable, self-healing systems.
This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday.
Full-Time Employee Benefits Include:
💰 Competitive Salary & Equity
💹 401(k) Program with a 4% match (US Only)
⚕️ Health, Dental, Vision and Life Insurance
🩼 Short Term and Long Term Disability
🚼 Paid Parental, Medical, Caregiver Leave
🏝 Flexible Time Off (FTO) + Holidays
🚗 Commuter Benefits (In-Office & US Only)
📱 Monthly Wellness Stipend
🧑💻 Autonomous Work Environment
🖥 In Office Set-Up Reimbursement (In-Office Only)
🚀 Quarterly Team Gatherings
☕ In Office Amenities (In-Office Only)
Want to learn more about what we are up to?
- Self-driving Company https://replit.com/blog/self-driving-company
- Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale
- AI Adoption https://replit.com/blog/ai-adoption
- Build Open-Source Apps https://replit.com/build/open-source-app-builder
Interviewing + Culture at Replit
- Operating Principles https://blog.replit.com/operating-principles
- Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
Location: London
DRW
is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk.
Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets.
We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it.
DRW
is a place of high expectations, integrity, innovation and a willingness to challenge consensus.
About the Role
DRW is building out its offensive security capability, and we’re looking for a Senior Offensive Security Engineer to lead the charge. In this role, you’ll plan and execute red team engagements, penetration tests, and adversary simulations against our trading infrastructure, corporate environment, and cloud platforms, acting as a trusted adversary who helps us find and fix weaknesses before anyone else does.
You’ll work closely with our security, infrastructure, and trading teams to translate what you find into real improvements, and you’ll help shape the methodology, tooling, and roadmap for offensive security at DRW as the function matures. This is a hands-on, high-trust role for someone who thinks like an attacker, communicates like a partner, and cares about making the firm measurably harder to compromise.
What You'll Do
Plan and execute red team engagements and adversary simulations against trading systems, corporate IT, and cloud environments, modeling realistic attacker tactics, techniques, and procedures (TTPs) mapped to frameworks such as MITRE ATT&CK
Conduct penetration tests across networks, web and internal applications, APIs, and cloud infrastructure, and report findings with clear, actionable remediation guidance
Design and build custom tooling, scripts, and exploits to emulate adversary behavior, test control effectiveness, and validate detection coverage
Partner with the Security Engineering and SOC teams in purple-team exercises to close gaps between what attackers can do and what defenders can see
Run social engineering and phishing simulations to assess and improve organizational security awareness
Identify, validate, prioritize, and track vulnerabilities and control weaknesses through to remediation in collaboration with infrastructure, platform, and application owners
Present engagement results and risk narratives to both technical teams and senior leadership in a way that drives action
Stay current on the threat landscape, emerging TTPs, and offensive tooling, and bring that knowledge back into DRW’s defenses
Assess the security of AI and LLM-integrated systems, including prompt injection, model manipulation, data poisoning, and abuse of agentic workflows, and work with teams building these systems to harden them
Leverage AI-assisted tooling to accelerate reconnaissance, vulnerability discovery, and exploit development, and evaluate new AI-powered offensive techniques as they emerge
Help define and mature DRW’s offensive security methodology, standards, and tooling, and mentor other engineers on the security team
What We're Looking For
5+ years of hands-on experience in offensive security, penetration testing, or red teaming, including full engagement lifecycle work: reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration
Strong scripting or programming ability for building and adapting offensive tooling
Solid understanding of networking fundamentals, Windows, macOS, and Linux internals, identity providers, and cloud platforms
Practical experience with common offensive security tools (e.g., Cobalt Strike, Metasploit, BloodHound, Burp Suite, Nmap) and a track record of building your own when the situation calls for it
Working knowledge of the MITRE ATT&CK framework, adversary emulation, and detection evasion techniques, along with enough understanding of defensive controls and tooling to help defenders improve
A track record of clear, precise reporting and communication and you can translate technical findings into risk that both engineers and executives understand
Experience with smart contract auditing and blockchain security
Familiarity with AI/ML security risks, including adversarial attacks on models, prompt injection, and the offensive and defensive implications of LLM-powered tooling
A collaborative mindset: you see red teaming as a way to make the whole organization more secure, not just to find flaws
For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at
https://drw.com/privacy-notice
.
California residents, please review the California Privacy Notice for information about certain legal rights at
https://drw.com/california-privacy-notice
.
#LI-BL1
seniorZürich, CH
Singapore
УдалённоseniorPoland
УдалённоseniorExperience collaborating with distributed teams across different time zones and cultures
seniorAbu Dhabi, United Arab Emirates; Experience of working with international teams in other regions and time zones worldwide
УдалённоleadExperience working with international teams located in other regions and time zones worldwide
УдалённоseniorГеография найма не уточнена
seniorUnited States - Remote
juniorMarousi, Greece
ГибридseniorYou'll work business hours in your time zone and take a share of our on-call roster for after-hours incidents; Experience in a distributed team working across time zones
ГибридleadСША; 💹 401(k) Program with a 4% match (US Only); 🚗 Commuter Benefits (In-Office & US Only); We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds
Автоотклики