Вакансии

Location: Remote-Friendly (Travel-Required) | San Francisco, CA | Seattle, WA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Application Security team secures the systems that build, serve, and increasingly are Claude — and as Anthropic's footprint grows, that mandate now extends to companies and codebases we bring in from outside. This role establishes that function. You'll own security due diligence and secure integration for Anthropic's acquisitions — assessing a target's security posture pre-close, writing the security risk readout for leadership, and after close, bringing acquired systems up to Anthropic's bar. Security has been part of every deal to date, but this is the first dedicated role for it: you'll formalize the playbook, the risk model, and the tooling, and make them repeatable. This is an AppSec role first. You'll be an active member of the Application Security team — same rituals, same on-run rotation, same tooling, working alongside engineers securing Anthropic's own agentic product surfaces. The expectation is the same too: we use Claude as our primary tool, and you're expected to automate the repeatable parts of diligence and integration as you go, so each acquisition is easier than the last. When deal flow is quiet, you'll pick up core AppSec project work; when it's active, M&A is your priority. We're upfront that the center of gravity here is M&A rather than core product security. It's burstier, more assessment-heavy, and operates on confidential, time-sensitive work. If you like parachuting into an unfamiliar codebase under time pressure and turning it into a clear risk picture for leadership, this is that job. Key responsibilities Lead pre-close security due diligence on prospective acquisitions — coordinate external penetration testing, threat-model the target's architecture, assess security controls, and deliver the security risk readout for leadership ahead of close and integration planning Drive post-close security integration — stand up static and dynamic analysis coverage on acquired codebases, track high- and critical-severity remediation to closure, fold acquired assets into bug bounty scope, and onboard repositories to Anthropic's automated vulnerability remediation and reporting systems Coordinate adjacent security engineering teams (supply chain, cloud, corporate security, detection & response) on their portions of each integration Work across a wide set of stakeholders on every deal — corporate development, legal, security leadership, and the engineering teams inheriting acquired systems internally; engineering and security counterparts at the target company externally — translating between them and keeping the security workstream legible to all of them Formalize and scale Anthropic's M&A security playbook — risk-scoring model, diligence runbook, integration checklist — and turn as much of it as possible into Claude-powered tooling rather than manual process Share the team's operational on-run rotation (bug bounty escalations, launch consults, incident response), swapping out during periods of active deal work Contribute to core AppSec projects between deals — secure design reviews, threat modeling for agentic systems, and the team's security automation roadmap Minimum qualifications Hands-on application and infrastructure security experience, including cloud and containerized environments Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript Practical threat-modeling and vulnerability-identification skills — you've found and reasoned about real bugs in real systems Comfort operating with high autonomy, ambiguity, and tightly-held confidential context Clear written and verbal communication across varied audiences — executives, legal and corporate development partners, and engineering counterparts at an acquired company Preferred qualifications 7+ years in application security, security consulting, or security architecture Prior M&A security due diligence, third-party security assessment, or technical due diligence experience Experience standing up or scaling SAST/DAST, bug bounty, or vulnerability management coverage across multiple codebases Track record of building security automation or tooling rather than relying solely on manual review Familiarity with using LLMs as a core part of your security workflow Experience securing agentic, code-execution, or LLM-integrated systems Representative projects Point Anthropic's internal LLM-driven code analysis and AI-assisted scanning at an acquired repository nobody here has seen, and turn the output into a prioritized remediation plan in days rather than weeks Design the risk-scoring framework Anthropic uses to compare security posture across acquisitions of different shapes and sizes Build the automation that onboards an acquired codebase to Anthropic's vulnerability dashboard, dependency auto-patching, and bounty scope without a human running a checklist Write the security risk memo for a live deal and present it to corporate development and security leadership The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Las Cruces, United States $51,376.00 - $66,352.00 Sign on Bonus – Yes Bonus Description $10,000 sign-on bonus paid in two equal installments after 90 days and 12 months of employment. Must Haves Registered in MRI with ARRT or certified by ARMRIT Has or can obtain a NM state MRI license BLS certification upon hire Schedule: this is a full-time position that will work in an outpatient setting. How you’ll contribute An MRI Technologist who excels in this role: Reviews patient history and physician's orders. Educates patient regarding procedures, equipment and exam to ensure patient's understanding and cooperation. When ordered, prepares and administers contrast media and/or medications within scope of practice. Monitors patient condition continually and reports/responds to changes in status as appropriate. Prepares equipment and supplies. Selects appropriate exposure factors and imaging parameters. Positions patient and performs imaging procedure(s). Analyzes results and identifies issues with the quality of imaging results. Takes appropriate action to resolve image quality issues, including repositioning patient and repeating procedure. Enters, transmits and reports scan results Salary: $51,376 – $66,352 / year

Location: Paris ABOUT MISTRAL Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. Role Summary We are seeking an Applied AI, Forward Deployed Engineer to build customer use cases on top of the Mistral stack. You will turn "we have agents" into "we shipped something a client uses." This role is about composing cybersecurity-related agentic workflows, configuring harnesses for real-world scenarios, and delivering value directly to clients. As a Forward Deployed Engineer at Mistral, you may also work on use cases outside cybersecurity, bringing the same context engineering, orchestration, and eval work to enterprise workflows in finance, manufacturing, defense, or the public sector. What You Will Do - Client-Facing Agentic Solutions - You'll individually help deploy into production use cases with considerable business impact across various industries, with cybersecurity client assignments as a priority - You'll work on state-of-the-art GenAI applications, driving a crucial technological transformation together with our customers - Tackle iconic use cases that no existing solution on the market can address - from custom configuration of cybersecurity harnesses for cloud defense, to optimizing agentic vulnerability scanning solutions, to customizing agentic red-teaming solutions or penetration testing scenarios - You'll work directly on client use cases, translating security requirements into agentic solutions - You'll be involved in pre-sales calls to understand potential clients' needs, challenges, and aspirations, providing technical guidance on our products and explaining Mistral technologies to various stakeholders - You'll collaborate with our product and science teams to continuously improve our product and model capabilities based on customer feedback How We Work in Applied AI - We care about people and outputs - What matters is what you ship, not the time you spend on it - Bureaucracy is where urgency goes to vanish. You talk to whoever you need to talk to. The best idea wins, whether it comes from a principal engineer or someone in their first week - Always ask why. The best solutions come from deep understanding, not from copying what worked before - We say what we mean. Feedback is direct, timely, and given because we care - No politics. Low ego, high standards - We embrace an unstructured environment and find joy in it About You - You are fluent in English - You have 2+ years as a technical individual contributor (data scientist or software engineer) on AI-based products - You have proven experience in AI or machine learning product implementation with APIs, back-end, and front-end interfaces - You have experience tackling advanced RAG, building agentic use cases, or fine-tuning LLMs - You have a deep understanding of the concepts and algorithms underlying machine learning and LLMs - You have strong technical coding skills in Python - You have strong communication skills, with an ability to explain complex technical concepts in simple terms to both technical and non-technical audiences Ideally, you have: - Contributed to open-source projects, in particular in the space of LLMs - Experience as a Customer Engineer, Forward Deployed Engineer, Sales Engineer, Solutions Architect, or Technical Product Manager - Hands-on experience building agents, LLM orchestration, context engineering, evals, and RAG systems - A bias toward action and delivery - you ship fast - The ability to operate independently with a customer-led mindset - The ability to reuse internal building blocks and components effectively - Strong problem-solving abilities and attention to detail - A collaborative attitude - Pentesting knowledge - Experience developing a cybersecurity product - Experience building agentic harnesses or multi-agent systems end-to-end - A strong background in evals and benchmarking of agent systems - Experience with security tooling or workflows - Prior work on production AI systems in regulated or high-stakes environments WHAT WE OFFER We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks. For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link. PRIVACY POLICY Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.

Location: Baku Workplace: onsite ABOUT YOU Xsolla seeks a security engineer to join a new security team during a critical build-out phase. You work across application security and infrastructure security - reviewing code, hardening cloud environments, supporting incident response, and partnering with engineering teams to improve security posture across the company. This is a generalist role well-suited to an early-team hire. You are comfortable working across domains rather than specializing in one, and you grow into deeper expertise as the team and program mature. You collaborate closely with the security program manager and work directly with engineering teams on secure design, findings, and remediation. Our tech stack includes GCP, vSphere/ESX, Kubernetes and container workloads, MariaDB, CockroachDB, Go, PHP, and Python. You do not need expertise in all of these, but you are comfortable navigating a mixed environment and learning what you need. As always true in job descriptions, there is an intangible value that is hard to capture. We look for a diverse set of perspectives and skills. Even if you don't match every requirement, we encourage you to apply if you think you can be highly successful in this role.   ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Perform Application Security Reviews - Conduct code reviews, run SAST / DAST and dependency scanning tools, and work with engineering to resolve findings. Participate in Threat Modeling - Contribute to threat modeling sessions for new features and architecture changes, helping identify risks early in the design process. Help Harden Cloud and Container Infrastructure - Work on GCP, Kubernetes, and IAM configurations to strengthen the security of our cloud and container environments. Participate in Pen Test Remediation - Help triage penetration test findings and work with engineering teams to implement fixes, coordinating closely with the security program manager. Partner with Engineering on Secure Design - Review architectures, advise on secure implementation patterns, and help teams make informed security decisions. Identify and Track Security Findings - Document findings, assess severity, and track them through the remediation lifecycle to resolution. Support Incident Response - Help investigate and document security events, contribute to root-cause analysis, and support containment efforts. Write Async Security Guidance - Produce advisories, best-practice documentation, and practical guidance that helps engineering teams build securely across time zones. Support Product Security - Work with partners on the security posture of customer-facing services, contributing to reviews and assessments as needed. What You Bring Foundational AppSec Knowledge - Understands common vulnerability classes, secure coding patterns, and how to conduct a meaningful code review. Cloud Environment Exposure - Has worked with GCP or a similar cloud provider and is comfortable with IAM , networking, and container concepts. Code Literacy - Reads and reviews code in one or more of: Go, Python, PHP. Does not need to be a software engineer, but can follow logic and spot issues. Security Tooling Familiarity - Has used or is familiar with SAST , DAST , or dependency scanning tools and understands how they fit into a development workflow. Strong Written Communication - Writes clear, concise async documentation - findings, advisories, guidance - that works across time zones and audiences. Collaborative Mindset - Partners effectively with engineering teams. Focuses on helping teams build securely rather than just identifying problems. Self-Directed with Growth Mindset - Eager to learn, comfortable with ambiguity, and able to make progress with minimal direction in a new and evolving team. Nice to Have Threat modeling experience; Hands-on Kubernetes or container security experience; Infrastructure security background - Linux, networking, vSphere/ ESX; Familiarity with NIST CSF , PCI , SOC 2, or ISO 27001 from a technical perspective; Detection engineering or incident response experience; Experience building security automation or internal tooling; Relevant certifications ( OSCP , GWAPT , CKS , or similar hands-on certs). Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.

Location: Baku Workplace: onsite ABOUT YOU We are looking for a junior application security specialist to join a growing security team at Xsolla. This is a hands-on role where you will work closely with senior specialists to identify, assess, and help remediate security vulnerabilities across our products and infrastructure. You will be involved in day-to-day AppSec work - code reviews, vulnerability triage, threat modeling, and security testing. You are curious, detail-oriented, and eager to develop deep expertise in application security. You do not need to have all the answers, but you ask the right questions and follow through. This is a strong learning environment. You will be exposed to real-world security challenges in a payment platform operating at scale, and supported by experienced security specialists who will help you grow.   ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Triage Security Findings - Assess incoming bug bounty reports and scanner findings. Evaluate validity, calculate real severity, and escalate appropriately with clear written summaries. Assist with Vulnerability Assessments - Participate in security assessments of web applications and APIs. Help identify and document risks in new features and existing systems. Write Clear Security Documentation - Document findings, reproduction steps, and remediation guidance in a way that engineering teams can act on. Support Threat Modeling - Participate in threat modeling sessions. Learn to identify trust boundaries, data flows, and attack surfaces in system designs. Monitor Security Tools - Help operate SAST , DAST , and dependency scanning tooling. Track findings, reduce noise, and support remediation workflows. Support Code Reviews - Review code for common vulnerability classes under guidance of senior specialists. Learn to identify security issues across PHP, Python, and Go codebases. Stay Current - Follow developments in the security community. Bring awareness of new vulnerability classes, CVEs, and attack techniques relevant to our stack. What You Bring Web Security Fundamentals - Solid understanding of common vulnerability classes: OWASP Top 10, CSRF , XSS , IDOR , SQL injection, open redirect, authentication and session management weaknesses. You understand root causes, not just names. Web and Browser Fundamentals - Solid understanding of how web applications work: HTTP request/response cycle, client-server model, REST APIs, how browsers handle same-origin policy, cookies and their attributes, and CORS . This is the foundation everything else builds on. Security Testing Tools - Hands-on experience with Burp Suite or similar web application security testing tools. You have used them to intercept, modify, and replay requests — not just run automated scans. Vulnerability Documentation - Able to reproduce a vulnerability and write it up clearly: reproduction steps, proof of concept, and impact statement. Findings that engineering teams cannot reproduce or understand do not get fixed. Secure Development Awareness - Familiarity with foundational secure coding concepts: input validation, output encoding, parameterized queries, and least privilege. Code Readability - Ability to read and follow code in at least one language relevant to web security - PHP, Python, JavaScript, or Go. You don't need to be a developer, but you need to follow logic and spot security-relevant patterns. Analytical Thinking - You reason through problems methodically. You can explain not just what a vulnerability is but why it exists, how it is exploited, and what fixing it actually requires. Clear Written Communication - You write findings and summaries that are precise, reproducible, and useful to the engineers who need to act on them. Curiosity and Initiative - You dig into problems rather than stopping at the surface. When something looks wrong, you investigate before concluding Nice to Have Participation in bug bounty programs or CTF competitions; Basic scripting ability for automation - Python or Bash; Familiarity with CI/CD pipelines and where security tooling fits; Exposure to cloud environments - GCP, AWS, or Azure; Relevant coursework or certifications - eWPT, CEH , PortSwigger Web Security Academy progress, or similar entry-level credentials. Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.

Location: Tel Aviv-Yafo, Tel Aviv District, Israel About Aidoc Aidoc is the market leader in healthcare AI and has developed the world's largest clinical frontier model, supporting nearly 50 million patients each year. Aidoc is deployed in more than 2,000 medical centers worldwide. Since our founding in 2016, Aidoc has raised over $500 million and achieved a record number of FDA-cleared solutions. Medical diagnosis is hitting a breaking point, where the number of physicians hasn't kept up with the rapidly growing patient load. This leads to misdiagnosis and treatment delays that result in hundreds of thousands of deaths every year. Aidoc assists clinicians by precisely highlighting diseases directly on medical images, preventing misdiagnosis and ensuring that urgent patients receive the immediate attention they need. About this role As a Senior Product Security Engineer, you will help ensure that security is built into the products, platforms, AI systems, and clinical workflows that support healthcare providers and patients at scale. This is a hands-on technical role focused on securing real systems in production, influencing architecture, and partnering closely with engineering, AI, DevOps, product, quality and regulatory. You will work across cloud-native services, medical imaging workflows, healthcare integrations, AI/ML pipelines, APIs, data flows, and regulated product development processes. Your work will directly support Aidoc's ability to deliver secure, reliable, and trusted clinical AI solutions to healthcare organizations worldwide. What Makes This Role Unique at Aidoc Clinical AI with real-world patient impact - Aidoc operates in an environment where security is not only about protecting systems and data. Security decisions can affect clinical workflows, care-team coordination, customer trust, and patient safety. Highly sensitive healthcare data - You will help protect medical imaging data, clinical metadata, PHI/PII, customer environments, and AI-driven workflows that require strong privacy, access control, data protection, and auditability. Security for AI/ML and medical imaging systems - The role extends beyond traditional AppSec into AI/ML security, data pipeline protection, inference integrity, model-related risks, and misuse scenarios in clinical workflows. Complex healthcare integrations - Aidoc integrates with hospital systems and healthcare workflows that may include PACS, EHR, VNA, RIS/worklists, scheduling systems, and communication platforms. You will help secure the data flows, authentication models, APIs, and deployment patterns behind these integrations. Engineering-driven security in a regulated environment - This is not a checkbox compliance role. However, because Aidoc operates in healthcare and clinical AI, security must be practical, evidence-based, and aligned with regulatory, customer, and quality expectations. Cloud-native scale and production ownership - You will work with modern cloud infrastructure, Kubernetes, containers, CI/CD pipelines, identity and access management, observability, vulnerability management, and software supply-chain controls. Responsibilities Secure product and clinical workflows end-to-end - Work directly with engineering and product teams to identify, prioritize, and remediate security risks across services, APIs, medical imaging workflows, AI outputs, data flows, and customer-facing product features. Drive secure-by-design architecture - Provide practical security guidance on authentication, authorization, tenant/customer isolation, encryption, secrets management, service-to-service communication, audit logging, and secure data handling. Strengthen cloud-native security - Improve security across cloud environments, Kubernetes, containers, IAM, network segmentation, workload identity, infrastructure-as-code, logging, monitoring, and cloud security posture management. Embed security into the development lifecycle - Integrate, tune, and operationalize security tooling across CI/CD pipelines, including SAST, SCA, IaC scanning, container scanning, secrets detection and build/release integrity controls. Own vulnerability management as an engineering system - Prioritize vulnerabilities based on exploitability, product exposure, customer impact, clinical risk, and regulatory relevance. Drive remediation with engineering teams and reduce recurring issues through root-cause improvements. Secure AI/ML-driven features and data pipelines - Partner with AI, data, and platform teams to identify risks related to training and inference data, model inputs and outputs, model misuse, data leakage, access to sensitive datasets, pipeline integrity, and production monitoring. Improve software supply-chain security - Reduce risk across open-source dependencies, third-party components, third-party algorithms, container images, build systems, artifact repositories, release pipelines, and deployment processes. Mentor and enable engineers - Help developers understand security risks, make secure design decisions, and take ownership of security in their code, services, and infrastructure. Communicate risk clearly - Translate technical security findings into clear risk, impact, and trade-off language for engineering, product, leadership, quality, regulatory, and customer-facing stakeholders. Requirements 5+ years of experience in Product Security, Application Security, Cloud Security, or a similar hands-on security engineering role. Strong hands-on experience securing production systems, not only performing assessments or reviews. Strong understanding of secure design, threat modeling, and architecture risk analysis. Deep knowledge of application security, including OWASP Top 10, API security, authentication, authorization, access control, secure session handling, input validation, and modern attack vectors. Experience securing distributed systems, APIs, web applications, backend services, and cloud-native architectures. Strong experience with cloud environments, especially AWS and/or Azure, including IAM, network security, encryption, logging, monitoring, and workload security. Experience with Kubernetes, containers, infrastructure-as-code, CI/CD pipelines, and modern DevOps workflows. Practical experience with security tooling such as SAST, SCA, IaC scanning, container scanning, secrets detection, SBOM tools, vulnerability scanners, and cloud security tools. Experience with vulnerability management, risk prioritization, remediation planning, and working with engineering teams to fix issues at scale. Strong understanding of software supply-chain security, including dependency risk, build/release integrity, artifact security, and third-party component governance. Experience working with modern development stacks such as Python, Java, JavaScript/TypeScript, React, microservices, APIs, and cloud-native services. Ability to influence engineers through technical credibility, practical guidance, and strong collaboration. Strong communication skills and the ability to explain security risks to technical and non-technical stakeholders. Working at Aidoc Our Perks: Be part of something big - using cutting-edge technologies to transform the Healthcare industry (while saving patients’ lives) We work in a hybrid model, with our new offices located at 34 HaMasger Street in Tel Aviv and parking for employees. Amazing and healthy breakfasts and lunches prepared daily by our personal chef! Stocked up kitchen & meal card Wellness: Aidoc employees-only gym, plus Pilates, Yoga, and functional workouts classes. Amazing culture - collaborative, transparent & fun! Attractive compensation package & benefits Aidoc is deeply committed to creating an inclusive workplace, and to the principle of equal opportunity for all individuals. We prohibit discrimination and harassment based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by law.

Location: Hong Kong, Hong Kong SAR; Singapore, Singapore OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Opportunity As a Technical Expert, you will lead the development of the company’s core security engineering and DevSecOps capabilities, with a strong focus on security product development, platform engineering, and SDK /Agent development . The ideal candidate should demonstrate deep security expertise, broad technical coverage, strong hands-on engineering capability, and exceptional influence in driving security governance across business teams . What You’ll Be Doing Lead the architecture and core development of the company’s end-to-end DevSecOps platform, security products, and SDKs/Agents , covering code, build, artifacts, images, deployment, and runtime security. Own the design and development of RASP / Java Agent runtime protection , leveraging ASM, ByteBuddy, and Java Instrumentation for bytecode enhancement, runtime hooks, detection and blocking engines, while continuously improving performance, stability, and compatibility. Build and integrate SAST, DAST, IAST, SCA, code security scanning, and image security scanning into CI/CD workflows, and drive deep integration of tools such as SonarQube and Coverity to form a closed loop of scanning, gating, remediation, and re-validation. Drive core application security protection and offensive/defensive capabilities across scenarios such as XSS, SQL injection, SSRF, deserialization, command execution, authentication/authorization flaws, privilege escalation, and API security . Advance AI-Native Security Engineering by applying LLMs and AI Agents to vulnerability analysis, rule generation, false-positive reduction, remediation suggestions, security knowledge management, and workflow automation, while building deep understanding of their architecture, principles, and security implications. Partner closely with business engineering teams to drive security standards, integration rules, quality gates, risk classification, remediation workflows, and overall security governance adoption. Collaborate with engineering, architecture, operations, QA, and business stakeholders to solve complex security problems and turn them into scalable product capabilities, engineering solutions, and governance mechanisms. What We Look For In You Strong fundamentals in computer science and security, with deep understanding of operating systems, networking, compilers/ JVM internals, distributed systems, application security, cloud-native security, and software supply chain security , with both breadth and depth in security technologies. Expert-level Java proficiency , especially in JVM internals, ClassLoader , Java Agent, ASM, ByteBuddy, bytecode instrumentation, profiling, and performance tuning ; proficient in Python or Golang as well. Proven hands-on experience with RASP, SAST, DAST, IAST, SCA, image security, and code security scanning , with the ability to independently design, integrate, and productionize security capabilities. Strong offensive and defensive security experience , with deep understanding of vulnerability root causes, exploitation techniques, detection logic, bypass methods, and remediation strategies in web, API, and microservice environments. Strong practical experience with LLMs and AI Agents , plus deep understanding of model architecture, agent design, tool invocation, context engineering, evaluation methods, and the impact of AI on both security engineering and attacker capabilities. Strong engineering and product mindset, capable of leading the design and implementation of security products, platform modules, and SDKs/Agents while balancing security effectiveness, performance overhead, integration cost, and operability . Strong ownership, communication skills, and cross-functional influence, with a proven ability to drive business teams on security governance, policy adoption, and remediation outcomes. Preferred Qualifications Background from top-tier Internet companies, cloud providers, or leading cybersecurity vendors ; Experience leading DevSecOps platforms, application security platforms, RASP systems, code scanning platforms, or cloud-native security platforms ; Strong experience in security product development, SDK /Agent development, vulnerability research, penetration testing, red/blue team exercises, or incident response ; Hands-on experience in AI + Security initiatives such as security copilots, intelligent rule generation, automated vulnerability analysis, or remediation recommendation systems. Perks & Benefits Competitive total compensation package L&D programs and education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Hong Kong, Hong Kong SAR; Singapore, Singapore OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Opportunity As a Technical Expert, you will own the core build-out of the company's R&D Efficiency Platform, proactively identifying and eliminating risks across the delivery pipeline through CI/CD, DevSecOps, Change Management, and AI-Native upgrades—reducing delivery cost while improving quality and efficiency via platformization and automation. What You’ll Be Doing Build core capabilities of the R&D Efficiency Platform and onboard business systems to improve overall engineering efficiency and delivery quality; Design and optimize CI/CD pipelines (GitLab, Pipeline, ArgoCD), driving standardization, automation, and observability; Drive the AI-Native evolution of CI/CD , introducing AI Agent / LLM for intelligent code review, pipeline self-healing, smart test orchestration, and change-risk prediction; Build DevSecOps capabilities , embedding Shift-Left Security across the lifecycle with SAST, DAST, SCA, image/secret scanning, and security gates to ensure supply-chain security; Establish standardized Change Management , covering requests, risk assessment, approvals (CAB), canary releases, rollback, and change traceability; Apply Kubernetes, microservice governance (Nacos, Apollo, Kong), and Aliyun / AWS cloud services to ensure platform stability and scalability. What We Look For In You Solid Computer Science fundamentals (OS, networking, distributed systems, data structures & algorithms); Proficient in DevOps toolchains , CI/CD, Kubernetes, and microservice stacks; Familiar with DevSecOps concepts and security toolchains, understanding supply-chain security and compliance; Knowledge of AI / LLM in engineering-efficiency and CI/CD scenarios, with an AI-Native engineering mindset; Familiar with the Java stack, with broad awareness of multi-language and business-side technologies; Strong product sense, ownership, and ability to work under pressure; Fluent English communication for efficient cross-regional collaboration. Perks & Benefits Competitive total compensation package L&D programs and education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Paris ABOUT MISTRAL Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. Role summary   As a Platform Security Engineer on the Security team, you will architect and maintain the security posture of our rapidly scaling AI infrastructure and application lifecycle. Security is not a gate but an enabler, and you will embed robust controls into our continuous integration and deployment pipelines, infrastructure environments, and developer workflows to protect our systems without sacrificing velocity. Your role exists to ensure that our research and engineering teams can move fast while staying secure. You will shape how security integrates with every layer of our stack, from code to cloud, making secure practices invisible to developers and automatic by default.     What you will do   - Drive threat modeling and risk prioritization exercises as the security counterpart in system-design reviews for core infrastructure and new products. - Own end-to-end vulnerability management across continuous integration and deployment pipelines and runtime environments, covering infrastructure and applications. - Secure our container orchestration deployments and containerized workloads, implementing advanced hardening to prevent lateral movement across distributed systems. - Define and enforce Infrastructure-as-Code security by building robust guardrails and integrating policy-as-code directly into deployment pipelines. - Design and execute a comprehensive security tooling strategy, managing solutions for cloud-native application protection, cloud security posture, static code analysis, dependency scanning, secrets management, and vulnerability tracking. - Champion developer enablement by building secure defaults, streamlining remediation workflows, and drafting actionable security guidelines. - Build foundational security automation to scale alongside hyper-growth, minimizing manual overhead while establishing a pragmatic security culture.   What we're looking for:   - Five or more years of experience in Platform Security, Security Engineering, or Cloud Security, ideally as an early security hire in a fast-scaling environment. - Deep understanding of container orchestration and container security, alongside strong experience securing Infrastructure-as-Code across major cloud providers. - Strong programming and scripting skills in languages such as Python or Go to build security automation and integrate diverse security tools into developer workflows. - Extensive experience deploying and tuning modern security tooling with a pragmatic approach to vulnerability management and threat modeling. - Strong communication skills with a proven track record of partnering with developers and researchers to embed secure defaults without creating engineering friction. WHAT WE OFFER We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks. For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link. PRIVACY POLICY Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.

Location: US - Remote - California - Bay Area, MA - Boston - Office , US - Headquarters - Maryland - Columbia Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc Your Role: Tenable's platform gets stronger every time it connects to something else: a cloud, a SIEM, a remediation tool, an AI agent. As a Principal Solutions Architect on the Technical Alliances team, you will be the senior technical architect behind those connections. Your work spans two connected areas. The first is Tenable's most strategic cloud alliance, AWS , where you are the primary technical voice for co-build, co-market and AWS Marketplace motions. The second is our broader Technology Ecosystem : frontier AI model providers, and the security, IT and AI vendors who integrate with Tenable One. There you design joint architectures, write sample integrations and MCP connectors, advise partner developers and product managers, and shape the multi-party solutions our customers buy. This is a high-visibility, individual-contributor seat with established relationships at AWS and across dozens of partners. You will work directly with partner CTOs and engineering leads, Tenable product and engineering, field SEs, and executive leadership. Why This Role: Work at the AI frontier. You will help define how Tenable exposure data powers agentic workflows through MCP, Amazon Bedrock and partner AI platforms, with launch partners already in motion. Breadth no single-product role offers. In a typical month you might advise a cloud security vendor on GraphQL export design, architect a three-way solution with a network and asset-intelligence partner, and brief AWS SAs on a joint reference architecture. Build, not just support. You own the reference architectures, sample code and enablement that let partners and field teams scale without you in the room. Visibility and impact. Your work shows up in AWS competencies, Marketplace pipeline, partner launches and executive reviews. What You'll Do: AWS Alliance: Serve as Tenable's primary technical liaison to AWS, building relationships with Partner SAs, Technical Account Managers, security service teams and educating them on the Tenable portfolio. Own the AWS technical enablement plan: design and deliver programs that keep Tenable field SEs and AWS customer-facing SAs aligned on Tenable solutions and joint architectures. Drive AWS competency and program workstreams, including design wins, delivery of competency attestation, technical validation and documentation. Lead AWS Marketplace technical strategy, including Partner Revenue Measurement (PRM) tagging, ACE co-sell ties and emerging AI co-sell motions. Advance Tenable's integrations with AWS-native services such as AWS Security Hub, and the narrative for Tenable on AWS agentic and AI architectures. Partner with alliance and field marketing on AWS events, EBCs and demand programs. What You'll Do: Technology Ecosystem: Act as the senior technical advisor to partner engineering teams and product managers building on Tenable Vulnerability Management, Security Center, Web App Scanning, Attack Surface Management, Cloud Security and OT APIs. Guide them on export design, filtering, rate limits, incremental sync and severity mapping. Write sample integrations, reference code and MCP connectors that show partners the right way to build on Tenable, and that Tenable teams can reuse. Extending Tenable's alliances work with frontier AI model providers, and other partners shaping how Tenable exposure data reaches their platforms and agent ecosystems. Participate in technical validation for the Tenable Technology Ecosystem Program, from partner onboarding through integration review and launch. Architect multi-party joint solutions and reference architectures with strategic partners, and present them to partner and customer technical executives. Lead technical discussions on AI and agentic integrations, including Tenable Hexa AI, MCP-based connectors and AI launch-partner programs. Own technical escalations on partner integrations, coordinating with Support, Product and Engineering through to resolution and root cause. Share partner and market feedback with Tenable product and engineering teams. Serve as backup for partner lab, NFR and API-access provisioning, and strengthen partner self-service capabilities, expanding them where possible. Across Both: Run concurrent workstreams with clear milestones, owners and deliverables, and report progress and risk to executive leadership. Use AI tools to accelerate research, enablement content, documentation and reporting. Success in the First 90 Days: 30 days: Working relationships with the Technical Alliances leadership team, key AWS Partner SAs and the top ecosystem partners; a clear view of competency status, co-sell pipeline and open partner integration work. 60 days: Delivering AWS enablement independently; owning a portfolio of ecosystem partners end to end, including validations and escalations. 90 days: A prioritized plan, agreed with leadership, to close gaps in AWS Marketplace coverage, SA enablement and partner developer experience. What You'll Need: 7+ years in solutions architecture, partner engineering, sales engineering or technical alliances, including 3+ years in a cloud or SaaS security context. Strong grounding in exposure and vulnerability management, and how it drives security outcomes: reducing cyber risk, prioritizing against real-world threats, and connecting findings across assets, identities and cloud to the decisions security teams make. Working knowledge of AWS services and Marketplace mechanics, and experience inside or alongside a hyperscaler partner ecosystem: co-sell, competencies or marketplace. Hands-on development skills: you build working integrations against REST and GraphQL APIs in Python or similar, and can stand up an MCP server or connector. A record of advising partner developers and product managers on integration design, and of building relationships from developer to CTO. Strong program management across multiple concurrent workstreams and cross-functional teams. Clear communicator who can adjust depth for developers, field SEs, partner executives and the C-suite. And Ideally: AWS certification (Solutions Architect Associate or Professional, or Security Specialty). Experience working with frontier AI model providers, or with agentic AI, LLM integrations or Amazon Bedrock, technically or as a go-to-market motion. Familiarity with security data standards such as OCSF, and with SIEM, SOAR, CNAPP or asset-intelligence integrations. Prior AWS competency applications, joint design wins or partner integration launches. Familiarity with Tenable One, Tenable Vulnerability Management, Tenable Hexa AI, Nessus or the competitive landscape. #LI-MS1 #LI-Hybrid This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs. US Pay Range $175,000 — $233,666.67 USD We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Location: United States or Canada- Remote MEET CASA Casa is the secure home for your bitcoin. We’re the leading provider of Bitcoin self-custody solutions, the ultimate blend of security, privacy, and control. Our team combines deep security expertise, human-focused design, and exceptional customer service to empower our clients and build lifelong relationships. THE ROLE Casa is looking for a DevSecOps Engineer to help secure our customers, their data, and our company. As a member of our Security team, you will report to our Chief Security Officer and play a crucial role in overseeing our security architecture and culture. It will also be a unique opportunity to help develop an evolving security program consisting of efficient processes, training materials, and methodologies for all employees. The successful candidate has experience developing scalable security controls and approaches in accordance with industry standards. Compensation: $125,000-155,000 USD WHAT YOU'LL DO: Handle internal security requests and make sure employees have the tools and access they need without over-provisioning Ensure that employees have access to the tools and systems they need while maintaining least privilege access principles Onboard and offboard employees across internal systems Oversee our MDM system and stay on top of alerts Review and assess new technologies (tools, code frameworks, third-party providers, internal apps) through a security lens Help shape and refine security best practices across the org Triage and work through vulnerabilities surfaced by pen testing, static analysis, responsible disclosures, and automated alerts Keep security documentation and training materials fresh and useful Automate security processes and alerts wherever you can find the leverage Participate in a shared on-call rotation for critical production security issues Stay abreast of the latest security events and trends Participate in regular security training and certification acquisition Ensure our software development lifecycle remains secure as we continue to evolve its processes. Write infrastructure-as-code to automate deployment and management using Terraform, Ansible, or similar tools Stay current on emerging threats, security trends, and what's happening across our stack and industry Investigate and resolve infrastructure incidents to keep things running smoothly WHO YOU ARE: You have security certifications or equivalent real-world experience You think like an attacker, and a hacker mindset is genuinely how you approach problems Deep background across multiple facets of security 5+ years implementing security in Linux-based infrastructures, AWS, and code Comfortable with open-source tooling, cloud environments, and multiple operating systems Experience building security solutions that actually scale Hands-on with one or more of: penetration testing, threat modeling, code analysis, system hardening, distributed patching, vulnerability scanning Familiar with hardening AI tooling to prevent security incidents Strong communicator who can present findings to both technical and non-technical audiences Bonus points for experience or genuine interest in cryptocurrency / cryptography WHY CASA? At Casa, our mission is to empower individuals to secure their digital sovereignty, and we empower our employees to do their best work. Ownership. Private key management is the beginning of a future you can truly own, and at Casa, everyone has a role. We offer equity opportunities so our employees can benefit from what we are building together Community. Inclusivity is important to us. We value each other and our contributions. Our team, known as the Casa Space Fleet, brings out the best in everyone while having plenty of fun along the way Rest and Relaxation . We believe in the power of personal time, so we offer as much flexible time as you need. We encourage you to take at least 3 weeks off a year Health Benefits. We provide medical coverage with FSA options, dental, vision, and access to mental health providers Setup for Remote Success. Our team is both decentralized and effective. We reimburse up to $400 for anything you need to set up your home office Investment Avenues . We partner with resources so you can invest a portion of your paycheck in Bitcoin, and we also have the more traditional 401(k) option Maternity/Paternity Leave . We provide 12 weeks for maternity / 4 weeks for paternity *As Casa is a fully remote company hiring candidates around the world, our perks and benefit packages may adjust based on your location Casa is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, veteran status, genetic data, or other legally protected status

Location: Sliema, Malta Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Opportunity A unique and highly-impactful role at one of the fastest-growing global cryptocurrency exchanges. In this role, you will be working alongside the KYB team and you will be responsible for customer Know Your Business (KYB) cases that have been identified through our onboarding systems for potential money laundering, terrorist financing, Bank Secrecy Act violations and other AML or fraud related. This individual must have prior know-your-business and sanctions compliance experience. What You’ll Be Doing Complete comprehensive reviews of incoming customer onboarding cases and ensuring that the application of KYB principles are consistent with the Company’s KYB policy and customer risk assessment . Reviewing KYB documents obtained from the customer, utilising our validation tools and reputable sources to verify the AML documentation. Requesting appropriate CDD / EDD documentation from customers to ensure that the AML onboarding process is complete in line with our AML policies and procedures. Follow up on pending CDD/EDD requests ensuring that communication is issued with the relevant SLA's. Investigating possible matches generated by the scanning application that the Company uses to screen customers against sanctions , PEP 's and adverse media news and ensuring the appropriate action is taken. Provide information to management in respect of AML/CDD issues arising. Maintain delivery of a high quality service level to customers and other departments ensuring all queries are dealt with in a professional manner and escalating where appropriate. Support the enhancement of our CDD function and maintain procedures Manage specific projects, which may arise from time to time. What We Look For In You Completion of tertiary higher education such as Higher Diploma, Degree and onwards. You have two or more years’ experience in AML and CDD/EDD review or in a KYB work domain You are a ‘team player’ who can work well within the function to deliver a quality service. You have excellent communication and writing skills, and are attentive to details. Willing to work on a shift schedule between Monday to Friday and some late finishes of up to 10:00 PM. Excellent command of spoken and written English is required. Perks & Benefits Competitive total compensation package L&D programs for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! #LI-GB1 #LI-HYBRID Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Spain; United Kingdom; Serbia; Germany Who we are Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in minutes—it just works and is always free for the first 200 endpoints with no functional limits. By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment without requiring a VPN, Action1 eliminates routine IT labor, helps prevent ransomware and security risks, and protects the digital employee experience. In 2025, Action1 was recognized by Inc. 5000 as the fastest-growing private software company in America . The company is founder-led by Alex Vovk and Mike Walters , entrepreneurs who previously founded Netwrix, a multi-billion-dollar cybersecurity company. The Role We are looking for a Product Security Engineer to join the team responsible for securing Action1’s multi-tenant SaaS product. In this role, you will work closely with engineering, product, and security teams to identify risks early, support vulnerability handling, improve secure development practices, and help make product security practical, clear, and actionable. This is a hands-on role for someone who understands both software engineering and cybersecurity, enjoys working directly with developers, and wants to help build security into the product without slowing teams down unnecessarily. What you’ll do Support PSIRT and vulnerability handling activities Validate, triage, track, and coordinate security reports Provide practical remediation guidance to engineering teams Help validate security fixes and reduce product security risks Review code, APIs, and architecture to identify security issues early Conduct threat modeling and security design reviews Improve security automation in engineering workflows Support SAST, SCA, secrets scanning, and other security controls Maintain SBOMs, dependency visibility, and remediation follow-up Support security assessments, vulnerability assessments, and penetration testing Maintain vulnerability handling playbooks, product security procedures, and incident response runbooks What we’re looking for 3+ years of experience in product security, application security, DevSecOps, or a related cybersecurity field Strong software engineering background and ability to work effectively with engineering teams Understanding of application, API, infrastructure, and software supply chain security risks Experience applying cloud security concepts and practices Understanding of IAM, network security, logging, monitoring, and secure cloud architecture patterns Familiarity with vulnerability management, incident response, security assessments, and secure SDLC practices Experience with threat modeling and security design reviews Strong communication skills, including professional communication with external researchers and vendors Ability to work independently and as part of a team in a fast-moving environment Nice to have Genuine interest in cybersecurity and motivation to grow as a product security expert Hands-on experience with AWS security controls, best practices, and architecture patterns Hands-on experience with C++ or JavaScript Experience with security testing and automation using scripting, APIs, CI/CD pipelines, or specialized tools Experience with threat modeling for SaaS, API, cloud, or on-prem product components Experience with SBOM generation, dependency visibility, or software supply chain security What we offer Fully remote work environment Opportunity to work on a real security product used by IT and security teams High ownership and direct impact on product security practices Close collaboration with engineering, product, and security teams Fast-growing software company with low bureaucracy and practical decision-making Opportunity to improve security processes, automation, and engineering workflows Supportive team that values clear thinking, ownership, and continuous learning

Location: Cairo, Egypt; Riyadh, Saudi Arabia; Dubai, United Arab Emirates; New Delhi, India; Tallinn, Estonia Müller’s Solutions is seeking an experienced ServiceNow Cloud Migration Lead to own and deliver the migration of a ServiceNow instance from a self-hosted (on-premise) environment to ServiceNow on GCP. This is a hands-on technical leadership role requiring deep platform knowledge and a structured delivery mindset. Key Responsibilities • Lead end-to-end migration planning: discovery, architecture, cutover, and post-migration validation • Conduct full assessment of the current on-prem instance (version, customizations, integrations, data volume) • Design the migration approach — clone-based lift, upgrade alignment, or phased rollout • Manage ServiceNow cloning, MID Server reconfiguration, and GCP connectivity • Audit and remediate custom scripts, flows, and integrations pre-migration • Coordinate with the client’s infrastructure and security teams on network, SSO, and firewall changes • Execute UAT support, regression testing, and hypercare post-go-live • Produce migration runbooks, risk registers, and cutover plans Requirements Required Skills • 5+ years on the ServiceNow platform; at least one completed cloud migration (on-prem → cloud) • Strong knowledge of ServiceNow architecture: MID Servers, instance cloning, upgrade paths • Hands-on experience with GCP networking concepts (VPC, Cloud Interconnect, DNS) • Proficiency in ServiceNow scripting (Business Rules, Script Includes, Flow Designer) • Integration experience: REST, SOAP, LDAP, SSO/SAML • Familiarity with ServiceNow PDI, instance hierarchy, and clone exclusion rules Nice to Have • CSA or CIS certification • Experience with ServiceNow Health Scan and ATF (Automated Test Framework) • Prior work in KSA/GCC enterprise environments

Location: Bacoor, Cavite Workplace: OnSite Duties and Responsibilities - Customer Onboarding - Conducts customer due diligence and KYC (know-your-customer) - Checks the legitimacy of the proof of identity and escalates immediately if suspected counterfeit or suspicious. - Validates the completeness and accuracy of customer information on the customer information sheet/account opening form. - Conducts signature verification. - Photocopies the proof of identity and files it together with the account opening form. - Creates the customer profile and opens the account in the Core Banking System (CBS) - Secures appropriate approval for the creation completed. - Releases passbook / chequebook / Time Deposit Certificate, as applicable, depending on the product availed by the customer. - Scans the Account Opening Document Set. - End-Of-Day (EOD) generation of report of all accounts opened and submits EOD report to the Service Delivery Head. - Customer Information Update – validation of customer documents presented to support the update if customer-initiated request or performs update of customer profile as part of the periodic review. - Conducts Enhanced Due Diligence as necessary. - Maintains Customer’s Account in the system based on customer’s request or bank-initiated activities. - Preparation of Customer Notifications and monitor its delivery status. - Fire-Proof Cabinet / Vault Custodianship - Safekeeps accountable forms and records the utilization of accountable forms. - Safekeeping of Account Opening Documents, together with the proof of deposit, in a secured and organized manner during the branch banking hours. - Act as dual custodian to safekeep or release the cheques received in a fire-proof cabinet/vault for deposit to the Depository Bank by the Teller. - Customer Interaction such as but not limited to: - Attends to customer queries at the branch. - Responds to Customer Inquiry via email. - Resolves customer complaint. - Call-out (TD Maturity, Bounced Cheques, etc.) - Release and Monitoring of Bounced Cheques Pick up and/or Replacement - Debit Cards Handling - Release of Debit Cards to Customers and Tagging in the System - Blocking of Card – Lost / Stolen - Destruction of aged card - All files shall be safekept in the designated filing cabinet and shall be within the retention period. - Ensure completion of tasks assigned within the agreed turnaround-time. - Other processes that may arise related to Account Services. - Timely reports concerns identified and possible issues that might have impact to branch operations. - Acts as reliever when somebody goes on leave based on the relief arrangement within the team. - Organizes team files (soft and hard copy) and adheres to the record retention policy. - Identifies processes/systems for improvement but ensuring controls are in place. - Initiates projects for the betterment of the team and the company as a whole. - Participates on UAT/UVT for new or enhancement of systems that will have impact to the team. - Participates in Business Continuity Plan (BCP) Activities. - Prompt identification and escalation of issues noted and propose resolution to the immediate supervisor. - Performs tasks that maybe assigned from time to time other than the basic responsibilities listed above. - Assists in combatting money laundering by ensuring processes required are in place. - Complies with regulatory requirements like BSP, AMLC, PDIC, BIR and other governing bodies. - Strict adherence to company’s policies and code of conduct. EDUCATION & COMPETENCIES - University degree on Banking & Finance, or any related Business Course - With at least 3 years of relevant experience in a banking industry - Strong knowledge and experience in teller services or branch operations - Sufficient knowledge of BSP regulations - Good communication skills - Problem-solving skills in a well-structured manner - Ability to work with different culture, race, or ethnic group. - Can work independently with minimal supervision. - Acceptable risk management skills and ability to mitigate identified risks. - Good interpersonal skills - Keen attention to details - Organize, innovative and results oriented. - Ability to multi-task in a fast-paced environment - Positive attitude knows how to find ways to address different circumstances. - With official Signature Verification, KYC / CDD Training / Seminars attended.

Location: Yerevan, Armenia; Kuala Lumpur, Malaysia We are seeking an In-House Corporate Attorney with substantial experience operating in the financial markets sector. The incumbent will play a critical role in supporting and maintaining the company’s fast pace towards its vision, strategy, and new operating model. This role will work across multiple jurisdictions, ensuring compliance with regulations while building commercially favourable relationships with our counterparties. This role will require specific experience with brokerages and securities law, with an emphasis on emerging markets. Key Responsibilities: Strategic Counsel: Provide legal counsel and guidance to various business units within our client on a broad range of legal matters, focusing on financial industry regulations and navigation of multi-jurisdictional regulatory matters. Reporting and Communication: Regularly inform the General Counsel of materially important information, developments, and strategic insights pertaining to global regulatory matters. With the ability to escalate matters that require immediate attention in a timely manner. Regulatory specialist knowledge: Advise on the company’s licencing, applications for regulatory approval, horizon scanning, Financial services knowledge of Regulated exchanges and Brokerage firms, with experience of regulatory analysis giving rise to change in operations, systems, reporting, trading and internal management structure; Understand and apply prescribed retail protection regulatory knowledge within financial services sector; Cross-jurisdictional exposure to regulatory legal analysis and legal Regulatory Strategy: Ability to develop long-term strategies that align business objectives with regulatory requirements. Understanding and application of worldwide project management for legal compliance implementation and regulatory change. Contract Review: Understand the company’s risk appetite to collaborate with internal stakeholders to review, draft, and negotiate contracts, agreements, and other legal documents pertinent to trading activities. Commercial Research: Conduct comprehensive legal research and analysis to ensure adherence to international financial industry regulations including securities and derivatives laws. Pro-actively offer legal insights from the research to lead the way on new product offerings, initiatives, and business strategies. Commercial knowledge of key documentation relating to brokerage/ financial services firm (Terms, trading platform agreements) Legislation and Policy Interpretation: Expertise in analyzing and interpreting legislation, regulations, and policy changes in emerging markets where our client has operations; Company Policies and Education: Assist in developing and implementing company policies and procedures to mitigate legal and regulatory risks associated with trading activities. Risk Management: Understand the company’s risk appetite and provide guidance on financial industry regulations, enabling the commercial side to make accurate and informed decisions. Requirements License and qualified attorney with a degree from an accredited law school. Proven relevant legal experience, showcasing strong expertise in trading firms, securities, and derivatives. Deep understanding of international financial industry regulations with a focus on securities and derivatives. Proficiency in contract drafting, negotiation, and comprehensive legal research. Collaborative mindset with proven capability to excel in cross-functional teams. Superior organizational, strategic planning, and communication skills with the ability to manage multiple concurrent projects. Ability to adapt effectively to a fast-paced and dynamic work environment. Exceptional analytical, problem-solving, and communication skills. instructing and managing external legal counsel and other junior lawyers Producing updates, training and presentations to team members, General Counsel and key stakeholders.

Location: Dublin Workplace: onsite Larian Studios is looking for a motivated and hands-on Junior Security Engineer to help strengthen and support the security posture of our global studio environment. This role is ideal for someone early in their cybersecurity career who wants exposure to infrastructure security, vulnerability management, monitoring, and operational security within the gaming industry.   You will work closely with IT, infrastructure, and development teams to support security operations, investigate threats, improve security controls, and help maintain best practices across the organisation. Responsibilities Assist in identifying, assessing, and mitigating vulnerabilities across infrastructure and applications Support the deployment and operation of security tools across multiple systems and environments Perform security monitoring, vulnerability scanning, and assist with log analysis to detect incidents and threats Support technical security audits and help provide actionable recommendations Assist in maintaining secure baseline configurations for Windows and Linux systems Participate in incident handling and escalation procedures Help educate staff on information security best practices Research and learn new technologies, tools, and security techniques Maintain up-to-date security documentation and operational procedures Participate in change management workflows to support secure implementations Requirements 1–3 years of experience in IT, infrastructure, or cybersecurity-related roles Basic understanding of cybersecurity principles and industry best practices Familiarity with vulnerability scanning or security monitoring tools Basic understanding of Windows and Linux operating systems Basic exposure to scripting or automation tools such as PowerShell, Bash, or Python Strong troubleshooting and analytical skills Good written and verbal communication skills in English Passion for cybersecurity and willingness to learn Ability to work collaboratively within a team environment This is a full-time, on-site role, requiring your presence in the office to support collaboration and creativity Nice to Haves Exposure to SIEM, IDS/IPS, endpoint protection, or vulnerability management tools Interest in learning security automation and scripting Experience supporting multi-site or international environments Cloud platform exposure (AWS, Azure, or GCP) Interest in gaming or gaming industry environments Understanding of networking fundamentals What we offer An international team of over 500 employees spread across 7 studios around the world, each of which have their own unique qualities, and maintain a small-studio feel An open, collaborative environment where ideas are welcome and encouraged A managerial team consisting of highly experienced game developers at the top of their fields Sharing hobbies and passions with like-minded colleagues Inclusive environment with many activities organized by the studios or the employees Commitment to making the best game possible for the fans, including listening to community feedback

Location: CH - Zurich, Switzerland The Security Team of Scopely Explore (formerly known as Niantic) seeks a Senior Security Engineer to improve the security posture of our software development lifecycle, applications, and build infrastructure. Scopely Explore, known for global hits like Pokémon GO, Monster Hunter Now, and Pikmin Bloom is now part of Scopely, home to games like Monopoly GO!, Stumble Guys, and Star Trek Fleet Command. Together, we engage billions of players worldwide, and we need your expertise to keep them safe! Do you want to help secure one of the most widely used gaming platforms on the planet? We seek creative and dedicated engineers with excellent technical judgment, strong interpersonal skills, and an eagerness to embrace new technologies. What You’ll Do Implement and maintain agentic or AI-enabled workflows to speed-up common security tasks. Perform security reviews and audits of platform and application software throughout design and launch. Provide guidance and expertise to product and operations teams across Scopely. Design, build and maintain automation and tooling that amplify the Security Team’s impact and improve the developer experience. Drive initiatives in security architecture, application scanning, fuzzing, and other proactive defenses. Contribute to hardening efforts across in-house libraries, CI/CD systems, and cloud/container environments. Be responsible for third-party library reviews and manage vulnerability remediation. Educate engineers on secure coding practices and help standardize security across teams. Engage in red-team exercises and coordinate with internal teams and external pentesting partners. Qualifications Bachelors in Computer Science or related field 5+ years of experience in a global company with cloud-centric infrastructure (preferably GCP). You have implemented services and applications with the help of AI tools like Claude, Codex, OpenCode or Gemini and are adept in the use of these tools and adjacent technologies (RAG, MCP, etc). You are capable of creating automation, agentic workflows and tooling to reliably solve problems that scale to the whole enterprise. You have in-depth experience in hardening distributed web services, cloud services and platform architectures. You can demonstrate strong programming skills (preferably Go or Java) and a deep understanding of common vulnerability classes and exploitation patterns across modern stacks. Excellent communication skills and experience collaborating across distributed teams. Bonus Points... Have participated in red-team operations or managed mitigation tracking. Possess deep familiarity with build systems, artifact repositories, or large-scale infrastructure. Have delivered privacy-focused solutions for user-facing services. Have experience in code quality management or security champion programs. Have worked in a customer-centric engineering culture and value pragmatic, scalable solutions. Can demonstrate hands-on experience or research in the area of AI security and safety. About Scopely Scopely is a leading video game and global interactive entertainment company, home to many of the world’s most beloved and enduring experiences, including two of the most successful mobile games of all-time “MONOPOLY GO!” and “Pokémon GO,” along with “Stumble Guys,” “Star Trek™ Fleet Command,” “MARVEL Strike Force,” “WWE Champions,” the Scrabble® franchise, “Yahtzee® With Buddies,” and many others. Across mobile, web, PC, and console, Scopely creates, develops, publishes, and live-operates one of the most diversified and award-winning portfolios in the games industry — bringing hundreds of millions of players together through a shared love of play. Founded in 2011, Scopely is powered by its exceptional team — including thousands of world-class gamemakers around the globe, a distinctive tenet-driven culture, and its proprietary technology platform, Playgami. Together, these strengths have fueled Scopely’s position as the #1 mobile games company in the U.S. and #2 globally, generating more than $10 billion in lifetime revenue. Whether building global sensations like “MONOPOLY GO!” from the ground up, or expanding through strategic acquisitions, including the FoxNext, GSN, and Scopely Explore games businesses — Scopely consistently delivers experiences players love today and return to for years to come. Recognized multiple times as one of the "100 Most Influential Companies in the World" by TIME magazine and one of Fast Company's "World's Most Innovative Companies" and “Best Workplaces for Innovators,” Scopely believes that video games can be a force for good — creating meaningful connections, vibrant communities, and making life better through play. Scopely has global operations and partners across four continents in more than a dozen countries worldwide. For more information, visit: https://www.scopely.com/ . Notice to Candidates: Scopely will never request payment or financial information during the application or hiring process. Please apply only through our official website and verify that all Talent Partner communications come from an email address ending in @ scopely.com . Should you have any questions or encounter any fraudulent requests/emails/websites, please immediately contact recruiting@scopely.com. Our job applicant privacy policies are available here: California Privacy Notice and EEA/UK Privacy Notice . Employment at Scopely is based solely on a person's merit and qualifications. Scopely does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law. We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state and local law.