Location: Europe
We are toogeza, a Ukrainian recruiting company that is focused on hiring talents and building teams for tech startups worldwide. People make a difference in the big game, and we may help to find the right ones.
We are looking for a Security Engineer / DevSecOps professional to implement and improve security controls across our corporate infrastructure and new digital services, including AI solutions.
Our environment combines Windows and Linux systems, private and cloud infrastructure, SaaS platforms, and internally developed applications and integrations.
You will work closely with the CISO, DevOps, IT Operations, and project teams to identify technical risks, implement safeguards, automate security tasks, and verify that controls work effectively. We value practical engineering skills, independent problem-solving, and experience translating governance requirements into technical implementation.
Reports to: Head of Cybersecurity (CISO)
Role type: Hands-on individual contributor
What you will do:
Security monitoring and detection
- Develop and implement a security monitoring roadmap, including requirements, architecture, and integration priorities.
- Contribute to the selection and evolution of our SIEM/XDR architecture.
- Integrate log sources and maintain reliable, complete, and useful security telemetry.
- Develop and test detection rules, correlation logic, and threat-hunting queries.
- Support incident investigation and improve response procedures.
Vulnerability management
- Implement a repeatable process for vulnerability discovery, validation, prioritisation, remediation tracking, and retesting.
- Assess exploitability and business impact, considering exposure, asset criticality, and potential attack paths.
- Develop remediation plans with IT and DevOps, track progress, and verify that fixes are effective.
Secure service delivery and hardening
- Review the security of service architectures, configurations, integrations, and CI/CD pipelines.
- Develop technical checklists covering access controls, role models, credentials and secrets, network connectivity, external integrations, encryption, and logging.
- Implement and automate secure configuration baselines.
- Work with DevOps to assess security readiness before production launches and address identified risks.
- Plan and validate security changes with attention to service availability and rollback options.
Security automation and AI-assisted engineering
- Build scripts and integrations for event analysis, configuration checks, vulnerability management, and reporting.
- Use AI coding assistants and agent tools to support engineering tasks.
- Validate generated code and findings, and protect credentials, access permissions, and corporate data throughout these workflows.
AI security and governance implementation
- Develop and apply security assessment checklists for corporate LLM services, AI assistants, agents, and their integrations.
- Assess access to data and tools, execution isolation, and scenarios that could adversely affect information or systems.
- Address risks such as prompt injection, data leakage, excessive permissions, and authorisation failures.
- Translate agreed AI governance requirements into technical controls and verification steps.
Security validation
- Conduct authorised tests of attack scenarios and vulnerability exploitability.
- Verify whether monitoring and protection tools detect or prevent the tested activity.
- Use findings to improve configurations, detection coverage, and response procedures.
What we are looking for:
- Practical experience in Security Engineering, DevSecOps, or infrastructure/DevOps roles with substantial responsibility for production security.
- Ability to own technical tasks from investigation and planning through implementation and validation.
- Hands-on SIEM/XDR experience, including log onboarding, queries, detection rules, and alert investigation.
- Practical experience with vulnerability management and system or service hardening.
- Strong understanding of Linux, Windows Server/Active Directory, networking, authentication, and access controls. Deeper expertise in one environment is welcome, supported by working knowledge of the other.
- Understanding of cloud, container, API, and CI/CD security, including secrets management.
- Ability to review code, Infrastructure as Code, and configurations, and propose actionable improvements.
- Scripting and automation skills using Python, PowerShell and/or Bash, APIs, and Git.
- Practical use of AI tools for engineering tasks, with a disciplined approach to checking their output.
- Ability to validate security weaknesses, explain their impact, and work constructively with technical teams on remediation.
- English proficiency sufficient for technical documentation and vendor support.
Experience working with governance
- You should be comfortable translating security policies, risk decisions, and agreed requirements into configurations, technical checklists, and acceptance criteria.
- This includes documenting control gaps, remediation plans, and compensating measures; providing evidence that controls have been implemented and tested; and escalating unresolved risks or exceptions through the agreed process.
- The CISO sets security direction and priorities and coordinates risk decisions with accountable stakeholders. Your role is to provide technical analysis, implementation, and verification.
Nice to have:
- Experience with Cortex XDR, Microsoft Sentinel, or Wazuh; familiarity with XQL or KQL.
- AWS or Azure security, Terraform, Ansible, and GitLab CI/CD.
- Palo Alto, Google Workspace, Microsoft 365/Entra ID, or privileged access management solutions.
- Experience implementing or testing AI agents, retrieval-augmented generation (RAG), or corporate LLM services.
- Penetration testing, red teaming, adversary emulation, or purple teaming experience.
- Experience providing technical evidence for audits or implementing controls within an ISMS/ISO 27001 programme.
- Experience building practical security processes in a small team.
How you will work
You will partner with experienced DevOps and IT engineers, explain security issues with clear technical evidence, and help develop workable solutions. Priorities will be agreed with the CISO, with delivery sequenced according to risk and team capacity.
We value demonstrated hands-on contribution and the ability to deliver verified improvements. Experience with every technology listed above is not required.
What can we offer you?
- Make a real impact on security. Take ownership of key security engineering initiatives, help shape security practices, and see the direct results of your work across the company’s infrastructure and digital services.
- Build and improve, not just maintain. Get hands-on experience developing security monitoring, vulnerability management, and automation solutions, with the opportunity to influence technical approaches and tooling.
- Combine offensive and defensive security. Apply a Purple Team mindset by identifying and validating vulnerabilities, testing detection capabilities, and turning findings into practical security improvements.
- Explore AI Security and emerging technologies. Work with AI-powered security tools and contribute to securing new AI services, assistants, and integrations as the company expands its use of AI.
- Expand your technical expertise. Gain exposure to diverse environments, including private cloud infrastructure, Linux and Windows systems, cloud platforms, and modern DevOps practices.
- Work closely with security leadership. Collaborate directly with the Cybersecurity Lead (CISO) and experienced DevOps and IT engineers, with room for technical initiative, knowledge sharing, and professional growth.
- Flexible remote work, with occasional in-person team meetings and collaboration sessions.
- €600 learning and development budget to support your professional growth.
- Flexible benefits allowance for sports, mental well-being, and leisure activities: €50/month for employees in Ukraine and other European locations, or €150/month for employees in Cyprus.
- Medical insurance to support your health and well-being.
- Coworking space reimbursement of up to €200/month in Europe.
Take full ownership of our IT security environment, policies, and risk management. Manage key security tools including FortiGate firewalls, CrowdStrike Falcon, and ManageEngine.
Location: Europe, Remote
About Zencoder
At
Zencoder.ai
, we build and orchestrate AI agents that ship real work - code, research, operations, and more. What started as developer tooling is becoming a platform where people and agents collaborate across knowledge work tasks.
The Opportunity
We’re looking for a hands-on Senior or Staff Security Engineer to lead and own security across the company.
Part of the job is the work every company needs and too few do well: hardened cloud infrastructure, least-privilege access, secure delivery, vulnerability management, penetration testing, and incident response. The threats in this space are increasing exponentially. The other part is an evolving domain with no playbook. Our product runs agents that read untrusted content, execute code, and hold credentials. Attackers now use AI to probe and fuzz faster than before. Prompt injection, data exfiltration through allowed channels, cross-session access, and insecure agent-written code reaching production are real risks for us today, not research topics.
We want someone who will help us close the obvious gaps without being asked, and finds the problems nobody has written down yet.
You'll work closely with our ITOps, platform and product engineers. Teams own their services and platform owns the monorepo pipeline. Your job is to improve our security posture without slowing delivery: build automated controls into existing workflows rather than rely on slow, blocking manual AppSec reviews. You'll test whether those controls hold, address critical risks, and take responsibility for security outcomes, not just recommendations.
Key Responsibilities
This is a hands-on role - you'll be in the code, infra, and pipelines yourself.
Set security priorities and drive fixes through to verified completion;
Find application vulnerabilities through code review, penetration testing and agent-specific red-team exercises;
Work with ITOps, platform and product engineers to harden infrastructure and build security into delivery pipelines;
Build detection for user and agent activity, and lead incident response.
Essential Qualifications
Strong application security background - you can spot exploitable flaws, and explain the fix;
Hands-on penetration testing and offensive security experience across web applications, APIs, and cloud infrastructure;
Solid infrastructure and cloud security fundamentals: IAM, network segmentation, containers and isolation, secrets management, logging;
Experience building detections and running incident response, not only reviewing them;
Real fluency with AI coding agents and LLM-based systems - how they work, where they fail, and how they can be manipulated;
Enough software engineering skill to build your own tooling, automation, and test harnesses;
Sound judgment under pressure: you can weigh a risk against a release, decide, and explain the decision to engineers and founders.
Nice to Have
Experience securing sandboxed or multi-tenant code execution environments;
Red-team, bug bounty, or CTF track record;
Experience with security programs and compliance frameworks (ISO 27001, SOC 2) in a small company.
Why Join Zencoder?
Impact
AI is reshaping how work gets done, and you'll be at the forefront of that shift, building a product that enables teams to get more done with AI. We use our own products every day, so you'll see how your work lands right away.
AI-First
We use AI to expand what one person can accomplish. You'll constantly rethink how you work: what to hand over to AI, and where your own judgment matters most.
Ownership
We keep the team small and give people real scope, autonomy, and equity. You'll take initiative, make decisions, and see your work through to real outcomes, raising the bar with every iteration.
High Talent Density
A small team of highly capable people moves faster and builds better. You'll work directly with senior teammates and our founder, Andrew Filev, in a flat structure where ideas win on merit, not titles.
Remote-First
We hire globally, prioritizing talent over location, so you can work where you're most productive. Prefer in-person? We have a hub in Barcelona with weekly co-working.
Zencoder is an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
We are looking for a responsible and detail-oriented Fraud Specialist to manage notifications from acquiring banks and processors, communicate with merchants, and ensure full compliance with international card schemes.
Location: Remote
Workplace: Remote
Blockstream https://blockstream.com/ was founded in 2014 by Dr. Adam Back https://en.wikipedia.org/wiki/Adam_Back and a group of fellow cryptographers and engineers who are passionate about Bitcoin and its potential to change the world. Today, Blockstream is the leading Bitcoin company, providing cutting-edge infrastructure solutions for enterprises, institutions, and individual Bitcoin users. We develop industry-leading Bitcoin self-custody solutions, Bitcoin-based financial products, second-layer scaling technologies, and enterprise-grade blockchain infrastructure.
We’re looking for an experienced Security Architect to design, implement, and oversee secure systems and applications across Blockstream’s enterprise products and infrastructure.
The ideal candidate is a full-stack engineer with a strong backend focus, deep understanding of secure application design, and prior experience building or securing platforms in fintech, banking, or blockchain. You’ll partner closely with product, DevOps, and engineering teams to ensure Blockstream’s systems and data are protected from evolving threats — without compromising innovation or performance.
What You’ll Be Doing (Responsibilities):
- Define and drive security architecture across applications, services, and infrastructure.
- Partner with engineering teams to design and implement secure software systems, focusing on backend and data security.
- Conduct threat modeling, risk assessments, and security reviews for new and existing products.
- Develop and enforce secure coding practices, frameworks, and review processes.
- Collaborate with DevOps on cloud and container security, CI/CD hardening, and access controls.
- Evaluate and integrate security tools for code scanning, vulnerability management, and incident response.
- Guide and mentor engineers on best practices for secure application development.
- Stay ahead of emerging security trends, compliance standards, and attack vectors — particularly in fintech and blockchain domains.
What We Look For in You (Required Qualifications):
- 10+ years of experience in software engineering or security architecture roles.
- Strong full-stack background with deep backend security expertise (Python, Go, C/C++, Rust, or similar languages).
- Demonstrated experience designing and securing systems for enterprise fintech, banking, or blockchain environments.
- Knowledge of cryptography, authentication, and key management.
- Hands-on experience with cloud security (AWS, GCP, or similar).
- Familiarity with threat modeling, secure SDLC, and modern application security frameworks (OWASP, NIST, ISO 27001).
- Excellent communication skills — able to clearly articulate risks and solutions to both technical and non-technical stakeholders.
Nice To Haves (Preferred Qualifications):
- Experience with Bitcoin, Lightning, or blockchain protocols.
- Contributions to open-source security tools or projects.
- Security certifications (CISSP, OSCP, CEH, or equivalent) are a plus but not required.
🔒 Stay Safe from Job Scams
All official Blockstream communication will come from an @blockstream.com email address. We will never ask you to share sensitive information or purchase equipment during the hiring process. If in doubt, contact us at hr@blockstream.com. Learn more about avoiding job scams here https://consumer.ftc.gov/consumer-alerts/2022/05/want-work-home-spot-scams-first.
Location: US - Headquarters - Maryland - Columbia
Who is Tenable?
Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!
What makes Tenable such a great place to work?
Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!
Your Role:
As an AI Security Engineer on Tenable's Information Security team, you will help shape and mature our approach to securing AI both within Tenable's products and across the enterprise. AI introduces a new class of risk at the intersection of application security, cloud risk, and data governance, and you will be on the front lines of defining how we assess, test, and address it.
You will apply hands-on AI engineering experience alongside product security and application security skills to design security controls for AI systems, lead assessments, and help engineering teams ship AI features securely. You will establish security standards for responsible AI use, influence decisions across the organization, and build tooling that raises our security posture.
This role is ideal for a practitioner who has spent time building or tinkering with AI systems, looking under the hood of model internals, and wants to channel that experience into a security specialty.
Your Opportunity:
Design, implement, and maintain end-to-end security controls across the AI/ML lifecycle.
Assist in the implementation of robust security guardrails, controls, and boundary mechanisms for Large Language Models (LLMs), Small Language Models (SLMs), and open-source models.
Continuously monitor the AI landscape for novel vulnerabilities and attack techniques, applying deep engineering experience to proactively defend enterprise AI deployments.
Assist in developing security reference architectures for AI deployment patterns, including MCP servers and agentic AI workflows and harnesses.
Deploy controls to ensure model integrity, governance, and proper access control across models and feature stores.
Build AI-driven tooling to strengthen cybersecurity posture across identity, incident management, vulnerability management, third-party risk, and emerging AI threat vectors.
Perform AI safety, security assessments, threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks.
Collaborate with software engineers, and product teams to integrate security best practices into AI development, training, validation, and deployment processes.
Create security guidance, documentation, and training for internal engineering and development teams; develop metrics that drive desired security behaviors and outcomes.
Assist in researching emerging trends in AI security and contribute to innovative solutions that support Tenable's AI initiatives.
What You'll Need:
2 or more years of professional experience in information security or application security, with at least a demonstrated interest on securing AI/ML systems.
Bachelor’s Degree in Computer Science, Cybersecurity, Data Science, or a related field preferred.
Awareness of AI-specific security threats, including adversarial ML, data poisoning, prompt injection, model inversion, model evasion, and inference attacks.
Knowledge of data security principles, including encryption, masking, and tokenization.
Knowledge of SSDLC, DevSecOps, and security testing practices, including SAST, DAST, SCA, and threat modeling.
Knowledge of application security architecture best practices and patterns, including modern web applications, Docker, and microservices.
Ability to work cross-functionally across engineering, product, and business teams.
Strong written and verbal communication skills; able to clearly translate complex AI security risks for both technical and non-technical audiences.
Strong problem-solving skills, attention to detail, and ability to lead projects with end-to-end ownership.
Self-motivated and effective working independently and across distributed teams.
And Ideally:
Hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments.
Basic coding experience in Python and/or Go.
Experience with frameworks & libraries such as PyTorch, Hugging Face Transformers, TensorFlow or similar.
Strong understanding of the ML/AI lifecycle and the security risks associated with each stage.
Experience with application security assessment tools (Burp Suite, ZAP, Tenable WAS, etc.)
Knowledge of cloud security platforms: AWS, Azure, or GCP including AI/ML-related services.
Security certifications: CISSP, CSSLP, SANS GIAC, CEH, or AI-focused security certifications are a plus, but not necessary.
#LI-Hybrid
#LI-MS1
This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs.
US Pay Range
$102,500
—
$136,500 USD
We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact
Recruiting@Tenable.com
for further assistance.
Tenable Data Consent Statement
Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you:
General Applicant Privacy Notice
California Applicant Privacy Notice
EU/EEA/UK Applicant Privacy Notice
Location: Thessaloniki, Greece
CENSUS is an internationally acclaimed Cybersecurity services provider. We support the needs of multiple industries, providing IT and OT security assessment services to public and private organizations around the world, including international financial institutions and Fortune 500 companies. Powered by cutting-edge research, scientific analysis, and real-world engineering, we deliver unparalleled security assessment services for software, devices, infrastructure, and organizations. Learn more about CENSUS at census-labs.com.
About the Role
CENSUS is looking for a Vulnerability Researcher specializing in modern web browsers and browser exploitation.
The role focuses on identifying, analyzing, and demonstrating security vulnerabilities in complex browser components such as rendering engines, JavaScript engines, IPC systems, sandboxing mechanisms, and platform integrations.
Responsibilities
Research security vulnerabilities in modern browsers such as Firefox, Chromium-based and WebKit-based browsers.
Perform source-code auditing of large C/C++ codebases to identify memory-safety, logic, sandbox, and privilege-boundary vulnerabilities.
Investigate JavaScript engine internals such as V8, SpiderMonkey, or JavaScriptCore.
Analyze browser sandbox boundaries and investigate sandbox escape vulnerabilities.
Reverse engineer browser binaries and security-relevant operating-system components.
Debug crashes and memory-corruption issues using tools such as WinDbg, GDB, LLDB, AddressSanitizer, and related tooling.
Develop fuzzers, harnesses, and automation for vulnerability discovery.
Study exploit mitigations such as ASLR, DEP/NX, Control Flow Guard, CET, CFI, MTE/MIE, pointer authentication, and sandboxing.
Develop proof-of-concept exploits to validate vulnerabilities and understand their practical impact.
Produce clear technical reports describing vulnerability root cause, exploitability and affected components.
Required Skills
Strong knowledge of C/C++ and x64/aarch64 assembly.
Excellent understanding of memory management, pointers, object lifetime, and concurrency.
Strong knowledge of operating-system internals, particulary Android and iOS.
Experience with reverse engineering tools such as IDA Pro, Ghidra, Binary Ninja, or similar.
Familiarity with browser architecture and multi-process sandbox designs.
Experience analyzing large codebases.
Knowledge of common memory-corruption vulnerability classes and exploitation techniques.
Familiarity with debugging and sanitization tools such as ASan, UBSan, WinDbg, GDB, or LLDB.
Ability to independently investigate complex technical problems and document findings clearly.
Preferred Skills
Experience researching Chrome, Firefox, Safari.
Experience developing browser exploits or participating in vulnerability disclosure / bug-bounty programs.
Experience with coverage-guided fuzzing tools such as libFuzzer, AFL++, or custom fuzzing frameworks.
Familiarity with modern exploit-development techniques including heap manipulation, arbitrary read/write primitives, information leaks, and control-flow manipulation.
Knowledge of compiler-generated mitigations and browser hardening mechanisms.
What We Offer
Please note that some of the benefits listed below are applicable only to full-time employees in locations where CENSUS has a legal entity.
The chance to be part fast-growing, global cybersecurity company
A collaborative, purpose-driven team with a strong learning mindset
Competitive salary and benefits, such as but not limited to:
Birthday Paid Day off
Coffee, lunch and office snacks free of charge
Private Medical and Life Insurance covering employees & family members
Funded certifications & postgraduate programs
Recognition programs including a welcome gift, a new year celebration gift, referral bonus and long service vouchers
Exposure to international teams, leaders, and challenges
Opportunities for professional growth, development, innovation, and more!
Apply today to start the conversation with the People & Culture Team.
CENSUS is an equal opportunity employer. The Company does not discriminate on the basis of race, color, creed, pregnancy, religion, gender, national origin, age, disability, marital, or any other legally protected status. The Company also makes reasonable accommodations for disabled employees. Finally, the Company prohibits the harassment of any individual based on their protected status. This policy applies to all areas of personnel actions including recruitment, hiring, training, promotion, compensation, benefits, transfer, and social and recreational programs.
LI | Remote
Location: Lisbon, Portugal
About the Role
iCapital is looking to hire a Cyber Security Operations Associate to join the Information Security team. This role is a first responder for reviewing and responding to cyber security alerts. The Associate will work alongside the security engineering team to provide situational awareness through detecting, containing and resolving cyber security threats using a comprehensive set of cyber security technologies including IDS, IPS, DLP, SIEM, AWS and firewall technologies.
Responsibilities
Monitor and respond to security events and alerts from a variety of signals.
Triage incidents quickly and effectively, escalating priorities to the appropriate business units.
Perform routine tasks to measure and report on the state of cyber security defenses at the company.
Develop and curate security detections through the security technology stack.
Take charge of responding to and remediating cyber security intrusions.
Compile and maintain detailed incident response reports.
Assist in developing and updating security procedures, playbooks, and knowledge bases.
Conduct open-source threat intelligence research to seek out and investigate new indicators of compromise for application.
Qualifications
3-4 years security related experience or in a similar field
Bachelor’s degree in information security, information technology or computer science preferred
Experience in Splunk or other SIEM; Search and analysis, log aggregation etc.
Basic understanding of Agile Frameworks
Knowledge of common cyber threats, attack vectors, and security frameworks (NIST, MITRE ATT&CK)
Good understanding of TCP/IP protocols
Knowledge of Linux, Windows and macOS operating systems
Experience with cloud infrastructure systems like AWS is preferred
Fast learner with desire to always learn combined with the ability to multi-task
Attentive, organized, and detail-oriented
Solid problem-solving and analytical skills
Excellent communication skills
We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday).
Benefits
iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO).
For additional information on iCapital Network, please visit
https://www.icapitalnetwork.com/about-us
Twitter: @icapitalnetwork | LinkedIn:
https://www.linkedin.com/company/icapital-network-inc
Location: Remote-Friendly (Travel Required) | San Francisco, CA
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
Claude is trained and served on hardware in data centers Anthropic operates and in sites partners build and run for us. DCSE secures that footprint: the sites, the hardware moving through them, and the people and vendors who touch it. You'll be the engineer who owns autonomous systems across that footprint as one security domain, from both sides: drones, ground robots and automated vehicles for patrol, inspection and moving hardware, including the security of that automation inside secure areas, and the detection systems that tell us what is flying over or operating near a site uninvited.
You set the approach, select and integrate the platforms and sensors, write the requirements vendors build to, and run what you ship, from the operating model where operators assign missions and machines carry them out to the playbook that turns a detection into an identified track and a well-evidenced handoff to whoever holds authority over the airspace. Interdiction is not part of this role. The goal is security that runs itself: coverage, fleet health and evidence verified continuously, with tools and AI agents doing the routine triage. We favor simple, standard controls and tools that can be verified over elaborate ones. We use Claude throughout our engineering workflow and expect you to as well.
You'll work with the rest of DCSE, including its physical security systems engineers and the engineers on its security monitoring platform, with Anthropic's data center operations and legal teams, and directly with site operators, equipment vendors and aviation and public safety authorities. The role is based in San Francisco, with remote applicants in the US considered, and involves regular travel to data center sites, which are critical infrastructure.
Key responsibilities
Autonomous security and inspection systems:
own the drones, ground robots and other autonomous platforms for perimeter patrol, incident response and infrastructure inspection: platform selection, operating model, operator qualification, maintenance, and the data path from machine to analyst
Tools, automation and AI agents:
build the integrations that carry detections, tracks, telemetry and fleet health into the team's security monitoring platform, and the tools and agents that triage detections, check fleet health and assemble evidence. When a review keeps costing people time, you build the tool or agent that retires it
Detection of uncrewed systems:
engineer the sensing that tells us what is flying over or operating near a site, what it is and who needs to know: sensor selection and evaluation against live targets, per-site coverage, classification and false-alarm handling, and the playbook from first detection to handoff, with evidence retained
Security of site automation:
engineer the controls on automated vehicles, robots and similar machines that move hardware or work inside secure areas: identity and access, network isolation, what they may record and where it goes, fail-secure behavior, their place in chain of custody, and acceptance before they enter a site
Regulatory and site constraints:
establish what we may sense, fly, drive, record and retain at each site, partner-operated sites included, under the aviation, spectrum, privacy and safety rules that apply there, with the waivers and approvals that extend it and coordination with local authorities set up before it is needed
Health monitoring:
define and test heartbeats, loss-of-coverage and lost-link alarms and fail-secure behavior, so a silent sensor or machine shows as a fault, not a quiet day
Vendor requirements and acceptance:
write the requirements, evaluate against live flights and runs, and hold vendors to what they ship
Minimum qualifications
Have engineered autonomous or sensing systems in the field (drones, ground robots, automated vehicles, or RF, radar or optical detection sensors): selected, integrated or secured them for an operation other people relied on, and verified what they actually do against real targets or runs rather than a datasheet
Have integrated systems you did not build (vendor APIs, SDKs, appliances, machine and sensor telemetry) into a platform that outlives any one of them
Read and review code, design the data systems behind security tooling, and build automation (often with AI coding agents) using Git and code review
Have done this work hands-on for data centers, critical infrastructure or a large hardware fleet
Have designed inside a regulatory or safety constraint (aviation, spectrum, privacy, machine safety or similar) and can show the decision it drove
Own a domain end to end: set the approach, carry it through with vendors, site operators, partners and authorities, and run it as something people depend on every day
Preferred qualifications
Remote pilot certification (for example FAA Part 107) and experience flying beyond visual line of sight under a waiver or exemption
Experience with counter-drone (counter-UAS) detection, airspace surveillance or air traffic data systems
Experience running a robot, drone or automated-vehicle fleet in an industrial, logistics or data center setting: fleet management, mission planning, safety cases
Experience securing embedded, operational technology or robotic systems: device identity, network segmentation, update control, logging
Experience with physical security operations at large sites, with law enforcement or aviation authorities, or at sites you did not fully control: cloud, colocation or GPU cloud operators
Have built AI agents or automation that replaced recurring manual work
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$320,000
—
$405,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Zenus is looking for an Application Security Engineer AppSec to test applications and APIs, identify vulnerabilities, establish secure coding standards, and validate remediation.
Location: Remote
Workplace: Remote
ABOUT BUFFER
We create social media and brand-building software for small businesses, creators, and individuals. Our mission is to provide essential tools to help small businesses get off the ground and grow. Through exceptional customer service and uplifting content, we help our customers believe they can succeed and do good along the way.
Buffer is a fully distributed team, and we’ve always aimed to do things a little differently. Since the early days, we’ve focused on building one of the most unique and fulfilling workplaces by rethinking a lot of traditional practices. We also default to transparency, so you can read all about our metrics, and our successes and failures along the way on our Transparency Dashboard https://buffer.com/open.
We're united by Buffer's values https://buffer.com/about#values, and we hire and work from all over the world. We strive to create a diverse and inclusive work environment, and we are building a culture where underrepresented groups are welcome and can flourish. Please note that we do travel to work together in person once or twice per year, and those events are highly encouraged to build deeper connections among our small team.
As you get to know Buffer and consider joining the journey, you can learn more about Buffer on our Journey https://buffer.com/journey page. Still curious to learn more about the experience on the Buffer team? Feel free to read more from Kirsti https://buffer.com/resources/first-30-days-buffer/ and Sabreen https://buffer.com/resources/joined-3-days-before-the-retreat/ as they share their first experiences with Buffer, as well as from Hailley https://buffer.com/resources/8-years-at-buffer/, who captured why she still calls Buffer home after 8+ years.
While unusual at Buffer, we're looking for folks in a specific timezone range. This role is currently open to candidates based between UTC-3 and UTC+3. That gives you overlap with our current security engineer in Sri Lanka and most of our Engineering team, and lets the two of you share incident coverage so neither of you has to work through the night.
ABOUT THE ROLE
We're hiring a hands-on security engineer to be the tech lead for Buffer's Security team. You'll work alongside Adnan https://www.linkedin.com/in/adnanissadeen/, who has carried security at Buffer for years. Together, you’ll own security and compliance for a 15-year-old profitable company that is rebuilding itself around AI.
Two things make this the right moment. Buffer’s product surface is growing: in May, we launched a public GraphQL API with an MCP server and CLI. More than 35,000 organizations have connected an AI tool to Buffer, and we are planning to build a plugin ecosystem on top. Internally, we're becoming an AI-native organization: MCPs on our Claude Team plan, custom connectors, internal tools, and Roo, our own internal agent. We're small and lean, with few processes, and we run on trust around access and permissions. We don't want to lose that, but the surface now grows faster than one person can cover.
That means the usual security playbook won't work here. We don't buy enterprise plans for every tool, and we don't make people justify every access request. You’ll make the secure path the easy path to follow.
Your role will be to set the direction for security at Buffer and to do much of the work yourself. You'll decide which open security problems to address first, write code to fix some of them, and lead incidents when they happen. We're looking for an enabler and a team player, not a gatekeeper. This is a generalist role by design.
WHO YOU’LL WORK WITH
You’ll report to Miguel, https://www.linkedin.com/in/migueldavid/ Engineering Manager for the Infrastructure and Security teams.
Day-to-day, the Security team is you, Adnan, and Miguel. Adnan knows how everything at Buffer fits together and where the sharp edges are. Together, you’ll own planned security work as well as the work that keeps the lights on: the security inbox, requests from other teams, maintenance, and chores. You’ll lead the team’s direction and standards.
You will also work closely with product engineering teams to ensure that what we build meets a strong security bar. That means collaborating on tech spec reviews and growing the group of security champions across the teams.
Your peers from our Advocacy (customer support) and People teams will rely on you to support them with security and compliance needs that come up in their work, from customer security questions to vendor reviews and policy.
WHAT YOU’LL BE WORKING ON
- 🧭 Lead security at Buffer. Define the strategy and roadmap, set priorities, drive execution, and change how we work where it matters. If you see a problem outside your lane, say so and drive the fix.
- 🧰 Build. Identify the problem, define the solution, then build it with Adnan: tooling, automation, processes.
- 🔁 Put security in the development loop. Check on every PR, threat modeling in tech specs, dependency, secrets, and supply chain hygiene, and review steps that hold up as more of our code is written with AI agents.
- 🔐 Advance operational security. Secure our day-to-day operations to meet industry-wide standards while maintaining the flexibility afforded by Buffer’s high-trust environment.
- 💡 Keep the lights on. Security inbox, requests from other teams, maintenance and chores, shared with Adnan. Much of this is manual today, and we’d love you to automate what you can.
- 🚨 Lead incidents and take part in our engineering-wide on-call rotation. Set the standard for how we run a security incident, then hold the team to it. Run tabletops with the rest of Engineering, and ensure the gaps are fixed.
- 🤖 Secure the AI surface. Threat-model what we’re building, from agents with tool access to connectors and in-product AI, and set guardrails so Buffer can move fast on AI without guessing.
- 🐛 Run vulnerability disclosure. Triage reports from outside researchers, fix or route the real ones, and decide how the program grows.
- 🤝 Own compliance and customer trust. SOC 2 and Meta platform compliance are the big ones today. We want them to make Buffer safer, not only to pass audits, but also to automate evidence where you can. Security questionnaires reach us through Advocacy. Help answer them, and build what lets customers find answers on their own (a Trust Center, for example).
HELPFUL SKILLS AND EXPERIENCE
- You’ve been the senior security person somewhere without a CISO above you. You know what it means to set direction without a mandate and earn it through work.
- You have hands-on application and API security depth in a multi-tenant SaaS, ideally one with a public API: authorization models, OAuth and OIDC, session and auth flows, IDOR and SSRF, and threat modeling. You've found these bugs and fixed them, not only reported them.
- You write code. You can read and change a TypeScript codebase well enough to ship a fix and review someone else’s (legacy PHP and Python show up more rarely, too).
- You’ve led security incidents end-to-end, including the writing of status updates, customer comms, and postmortems that people act on.
- You’ve worked with AWS, Kubernetes, and Cloudflare, or similar, enough to reason about infrastructure risk with an infrastructure team. You don’t need to run it.
- You’ve run a SOC 2 or similar program, or worked closely with one, and you’d rather automate evidence collection than do it by hand.
- You've run or triaged a vulnerability disclosure or bug bounty program, and you can tell a real report from noise quickly.
- You have strong opinions, and you can hold them loosely. You are comfortable disagreeing with a senior engineer’s design, and working together to find the best solution (sometimes changing your mind when their argument is better).
- You’re fluent with modern AI tools, and you use them to multiply your output and your team’s. You’ve thought hard about securing systems that use them.
- You thrive in remote, async environments, and you follow through. You're clear in your thinking and generous with context, and you close the loop on what you commit to. Most of your influence here will be written.
- Bonus points if you’re already a Buffer user or familiar with social media management tools.
OUR TECH STACK
- Product. Node.js (TypeScript) across most services in a monorepo, backed by MongoDB; a REST API and PHP being retired for legacy services. iOS and Android apps. A public GraphQL API, MCP server, CLI, and connectors.
- Infrastructure. AWS (EKS, IAM, SQS, S3, CloudFront), Terraform, ArgoCD, GitHub Actions, Cloudflare (WAF, Zero Trust, Workers, DNS).
- Security and compliance. Vanta for SOC 2, Dependabot, gitleaks, AWS GuardDuty, Cloudflare WAF and Zero Trust, Action1 for device management, 1Password, and Google Workspace as the identity layer.
- Observability and incidents. Datadog, Sentry, incident.io http://incident.io, and PagerDuty.
- AI. Claude Team across the company, internal agents and MCP servers built in-house, in-product AI features.
APPLY FOR THE JOB
Do you believe you're a fit for this role and want to join the Buffer team? We'd love to hear about you!
Here's what our hiring process looks like:
1. Application. A short form with your CV, LinkedIn, a few yes/no questions, and an example of your writing.
2. Questionnaire. If there’s a match, we’ll email you a short set of questions to learn a bit more about you!
3. Interview process: Meet with several teammates across a few Zoom calls, starting with Miguel https://www.linkedin.com/in/migueldavid/, Engineering Manager for Infrastructure and Security, and the hiring manager for this role, and then a handful of other Buffer teammates and peers.
4. Take-home exercise. During our interview process, we'll ask you to do an asynchronous task so we can see your work in practice and discuss it live.
5. Meet the CEO. Get to know Joel https://www.linkedin.com/in/joelgascoigne/, our Founder CEO.
6. Collaboration period. Two paid days working with the team on a real project, so that we can each see what it's like to work together.
PRIVACY POLICY
By submitting the application, you consent to Buffer collecting and processing your personal data for recruiting purposes. Find more details in our Privacy Policy https://buffer.notion.site/Privacy-Policy-for-Applicants-230a7f5a00fd80e48478f09171d18a24?pvs=143.
Location: Remote-Friendly (Travel Required) | San Francisco, CA
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
Claude is trained and served on hardware in data centers Anthropic operates and in sites partners build and run for us. DCSE secures that footprint: the sites, the hardware moving through them, and the people and vendors who touch it. You'll be the engineer for one or more security domains end to end: design the controls, build the systems that enforce and verify them, and set the technical standard the rest of the team and our partners build to.
The engineering is in the controls and the tooling that proves them. The goal is security that runs itself: requirements kept as code and checked automatically, evidence, chain of custody and access continuously verified, and tools and agents in place of manual reviews. We favor simple, standard controls and tools that can be verified over elaborate ones. We use Claude throughout our engineering workflow and expect you to as well.
This is a foundational role: you'll shape how our security engineering is built and scaled. The team's physical security systems engineers design and test the site security systems themselves; this role engineers the controls around them and across the domains beyond the facility itself: hardware custody, media, personnel and vendors. You'll work with the rest of DCSE, Anthropic's compute, data center operations, legal, compliance and procurement teams, and directly with data center operators, hardware vendors and logistics providers.
The role involves regular travel to data center sites, which are critical infrastructure, and may include on-call for security events at them.
Key responsibilities
Security domains, end to end:
own one or more of physical security at partner-operated and Anthropic-operated sites, hardware supply chain and chain of custody, media protection and sanitization, personnel security and site access, third-party and vendor security assessment, and maintenance and contingency controls
Tools, automation and AI agents:
build the internal tools, automation and agents the team runs on: evidence collection, access reviews, asset and custody tracking, partner intake. When a process keeps costing people time, you build the tool that retires it
Security review for new sites, leases and vendors:
find the gaps in the design, the contract and the operator's procedures, write the security terms and exhibits, and verify the fixes after signing
Requirements and procedures as code:
write requirements and procedures that a partner can build to and an assessor can test, kept as code in a version-controlled repository
Site and supplier assessment:
assess sites and suppliers against those requirements, on site and from evidence; document deviations and engineer the compensating control where a requirement can't be met as written
Continuous compliance evidence:
tie controls to the compliance frameworks we and our partners are assessed against, with evidence always current so an assessment pulls from it directly
Security event response:
respond to security events at sites (intrusion alarms, custody breaks, access violations) with operations teams and site operators; write up what happened and fix the control that allowed it
Minimum qualifications
Have engineered a security control domain end to end: designed the controls, built or integrated the systems that enforce them, and verified they work
Read and review code, design the data systems behind security tooling, and build automation (often with AI coding agents) using Git and code review
Have done security work hands-on for data centers, critical infrastructure or a large hardware fleet, in at least one of the domains under Key responsibilities
Have applied a control framework such as NIST SP 800-53, ISO 27001 or SOC 2 to real systems and produced the evidence for it
Write requirements a third party can build to and an assessor can test: each states what must be true, how it is verified and what evidence shows it
Preferred qualifications
Experience across several of the domains above rather than one
Experience at sites you did not fully control: cloud, colocation or GPU cloud operators
Experience with federal assessment regimes based on NIST SP 800-53, including supply chain (NIST SP 800-161) and media sanitization (NIST SP 800-88) guidance; have produced evidence an assessor accepted
Have built governance, risk and compliance (GRC) or evidence automation: automated control checks, asset or custody tracking, questionnaire and assessment pipelines, docs-as-code workflows
Have run incident response at physical sites: alarms, investigations, after-action fixes
Have worked in live data halls and on active construction sites, and can follow a method of procedure
Experience redlining contract security language with legal and procurement counterparts
Experience with international sites: per-country personnel screening and staffing restrictions, data residency, and export controls on hardware
Have built AI agents or automation that replaced recurring manual security work
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$320,000
—
$405,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: United States (Remote); Canada (Remote)
Workplace: Remote
ROLE SUMMARY
Join our dynamic team as a Staff Application Security Engineer, where you'll play a pivotal role in securing the Temporal development pipeline, product, and customer execution environment. In this position, you'll work closely with software engineering teams and customers to build security deeply into our platform across multiple clouds. You'll also build production ready AI assisted security workflows with the right guardrails. We're looking for individuals who are passionate about enabling engineering teams to build and ship securely, serving as trusted security partners across the organization.
WHAT YOU’LL DO
- Collaborate with product and engineering teams to integrate security principles into the design and architecture of products.
- Lead complex threat modeling and risk assessments to identify vulnerabilities and potential attack vectors across the full product surface.
- Drive strategy, influence architecture, and set direction for security across multiple teams or org-wide.
- Manage the Secure Development pipeline including code security and 3rd party library supply chain security.
- Stay current on emerging standards and guidance (e.g. OWASP Top 10 for LLMs, MCP security specifications) and translate these into actionable internal policy.
- Own responsibility disclosed vulnerabilities in both Cloud and Open Source products.
- Able to participate in on-call rotation.
WHAT YOU’LL BRING
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
- 7+ years in application or product security or a related role.
- Proven partnership with engineering teams, bringing security expertise to the planning and development process.
- Ability to write production-quality code in at least one programming language, with a history of development beyond simple scripting.
- Knowledge of encryption, authentication, and secure communication protocols.
- Familiarity with tools like SAST, DAST, and penetration testing frameworks.
- A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages
- Excellent communication and ability to explain complex security concepts to non-technical stakeholders.
- Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control.
- Demonstrated experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention.
NICE TO HAVE
- Distributed computing and related vulnerability experience.
- Familiarity with Go.
- Running a Security Champions program.
- Open Source automation or automation projects.
- Expertise in other areas of security.
- Security conference talks or published research.
Temporal Technologies is an Equal Opportunity Employer. Temporal Technologies does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need. We embrace and celebrate differences and diversity.
Temporal is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. If you need to request a reasonable accommodation, please let your Recruiter know so we can assist.
Location: Australia
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 6M endpoints and 17M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
Reports to: Senior Manager, Security Operations Center
Location: Remote Australia
Compensation Range: $110,000 to $140,000 AUD base plus bonus and equity
What You’ll Do:
You’re a hands-on SOC Analyst who thrives on detecting and responding to cybercrime. You’ll triage Active Hands-On Keyboard intrusions, track attackers through networks, and help remove them before they achieve their objectives. You’ll contextualise endpoint telemetry, analyse logs, leverage forensic artifacts, and understand malware to uncover the full scope of an intrusion.
You give a $ht about protecting customers and improving how the team operates, taking ownership of investigations and acting on the information available. You bring Warrior Spirit to complex incidents, staying resilient and composed under pressure. You are Outcome-Obsessed, measuring your work by the threats contained, customers protected, and actionable remediation delivered. Alongside alert triage and intrusion response, you’ll support sales, collaborate with Product to shape Huntress’ MDR service and platform, and have opportunities to contribute across Incident Response, Security Operations, Threat Hunting, and Detection Engineering. We’ll also support you in sharing your work through blogs, conference talks, webinars, and research publications that build your personal brand and the broader security community.
This role follows Perth time (AWST), Monday to Friday, 8:00 am to 4:00 pm. Applicants based elsewhere in Australia are welcome, provided you are able to work these hours converted to your local time.
Responsibilities:
Triage, investigate, respond to, and remediate alerts generated by the Huntress platform.
Review EDR/SIEM telemetry, log sources, and forensic artifacts to determine the root cause of attacks where possible and provide the remediation needed to remove the threat.
Perform dynamic analysis of malware when required to extract indicators of compromise or determine a file’s malicious intent.
Contribute to and refine detection capabilities and queue hygiene through crafting and tuning signals to address emerging threats.
Investigate activity in Microsoft 365 and Google Workspace and deliver actionable remediation advice for compromised tenants.
Continue to grow your skills and knowledge through real-world intrusion data, paid training opportunities, and responsible use of AI tools to support research, summarise findings, and accelerate routine analysis while validating outputs.
Support customer success by assisting our SOC Support team with customer/partner escalations related to threat-related and SOC-relevant questions.
Help through partnering with Product and Engineering Teams to continue to evolve Human Led Agentic workflows
What You Bring To The Team:
You have 2+ years of experience in SOC, Incident Response, Managed Detection and Response, or Digital Forensics roles.
You have demonstrated experience with at least one of Windows, Linux, or macOS, including attack surfaces, malware analysis, and basic threat actor tools and techniques.
You understand common system administration skills and how threat actors abuse them to achieve their goals, including Active Directory, PowerShell, Group Policy, and local account creation.
You are familiar with the techniques and tactics in MITRE ATT&CK, including credential dumping, lateral movement, persistence mechanisms, and exfiltration techniques.
You have a working knowledge of core networking concepts, including common ports and protocols, NAT, public and private IP addresses, and VLANs.
You have a passion for forensics and enjoy digging into logs, processes, and artifacts to understand intrusions and outmaneuver attackers.
You communicate clearly in writing and verbally, simplify complex technical findings for diverse audiences, and demonstrate self-guided learning that keeps your skills current.
You use AI to work faster and smarter in day-to-day security analysis, applying sound judgment and validating its output before acting on it.
You enjoy working with a fun, supportive team, bring a genuine team-player mindset, and help deliver great outcomes with a smile, a laugh, and a dash of witty (but accurate) memes.
A desire to hold your manager accountable for delivering ice cream at the Australian Security Offsite.
What We Offer:
Fully remote work
At least one annual trip to the US for Summer Summit, with additional local events in Australia!
New starter home office set up reimbursement ($800 AUD)
12 weeks paid parental leave for both primary and secondary carers
Monthly digital allowance for personal phone and internet costs ($185 AUD)
Monthly home office tech stipend to upgrade or replace equipment ($40 AUD)
Subsidised private health insurance through our preferred provider
Stock options for
all
full-time employees
Access to the BetterUp platform for coaching, personal, and professional growth
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to
accommodations@huntresslabs.com
. Please note that non-accommodation requests to this inbox will not receive a response.
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our
Candidate Privacy Notice
for more details on our practices and your data privacy rights.
#BI-Remote
Europe, Remote
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
УдалённоRemote-Friendly (Travel Required) | San Francisco, CA; The role is based in San Francisco, with remote applicants in the US considered, and involves regular travel to data center sites, which are critical infrastructure
УдалённоleadWhile unusual at Buffer, we're looking for folks in a specific timezone range; This role is currently open to candidates based between UTC-3 and UTC+3
Canada - Remote
United States - Remote
УдалённоseniorRemote-Friendly (Travel Required) | San Francisco, CA
United Kingdom - Remote
УдалённоUnited States (Remote); Canada (Remote)
Applicants based elsewhere in Australia are welcome, provided you are able to work these hours converted to your local time
Автоотклики