Вакансии

Location: Remote-Friendly, United States; San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Team The Security Engineering team's mission is to safeguard our AI systems and maintain the trust of our users and society at large. Whether we're developing critical security infrastructure, building secure development practices, or partnering with our research and product teams, we are committed to operating as a world-class security organization and keeping the safety and trust of our users at the forefront of everything we do. What You’ll Do: Conduct red and purple team engagements simulating advanced threat actors across our cloud infrastructure, endpoints and bare metal deployments. Penetration test specific, high value deployments. Contribute to AI-assisted security testing tooling and workflows. Work cross functionally with other security and engineering teams, particularly on AI-specific attack scenarios. Document and present findings to technical and executive audiences, translating attack narratives into actionable risk insights that inform security roadmaps. Who You Are: 5+ years of hands-on experience in red teaming and offensive security operations Deep expertise in at least two of: macOS security, Linux Security, Cloud security (GCP/AWS/Azure), Kubernetes, CI/CD pipelines Track record of discovering novel attack vectors and chaining vulnerabilities creatively Experience conducting adversarial simulations against well-defended environments Strong engineering skills (Python, Go, or similar) Ability to write clear findings that drive action, helping teams understand risk and prioritize fixes Collaborative approach, working in close collaboration with the blue team Strong candidates may also have experience with: Prior work at organizations with state actor threat models Interest in AI safety and how security engineering contributes to responsible AI developments Background testing AI/ML systems or agentic workflows Familiarity with detection engineering and SIEM/EDR platforms from the defensive side Experience with data center security or hardware-based attacks Deadline to apply: None. Applications will be received on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $300,000 — $320,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: MA - Boston - Office , US - Headquarters - Maryland - Columbia Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Role: The Associate Services Architect is a content-focused role responsible for creating, updating, and maintaining technical content for the Professional Services Portfolio. This role blends technical aptitude with content development and communication skills, working under the mentorship of a Senior Services Architect or Manager to design, draft, and update consulting service offerings, training content, and enablement material. This position is specifically scoped around portfolio maintenance: keeping existing courses, labs, and collateral current as products evolve, and absorbing update-tier and Tier-1 support work so that Senior Services Architects can focus their time on strategic development and net-new offerings. The role receives structured intake and mentoring support from their manager and works closely with the broader Services Architecture team. Your Opportunity: Content Creation & Maintenance: Content Updates: Design, draft, and update consulting service offerings, enablement content, educational material, and technical presentations for webinars and events. Maintenance Backlog: Own update-tier fixes and content refreshes for existing courses and labs, keeping material current as Tenable products evolve. Collateral Support: Create collateral for new offerings and evaluate existing offerings and content for accuracy and relevance. Services Offerings: Help create and support the development of consulting services offerings. Delivery & Review: Pre-Production Training: Deliver pre-production training sessions to evaluate product suitability and gather early feedback. Live Demonstrations: Create live demonstration recordings for the Tenable product suite. Content Review: Perform content reviews with peers in Services, Technical Support, Customer Success, and Product Management to ensure quality and alignment with customer needs. Quality Assurance: Review and validate updated course materials and lab environments to ensure technical accuracy and consistency before release. Service Offerings Review: Participate in the review and validation of new consulting service offerings to ensure alignment with portfolio standards and technical feasibility. Strategic Engagement & Support: Customer & Partner Engagement: Engage with customers and partners to analyze market trends and the competitive landscape. Cross-Functional Problem Solving: Work closely with all departments to identify and resolve problems, gathering information to support data-driven decisions. Tier-1 Support Coverage: Provide first-line responses to Customer Care escalations on assigned courses, triaging and resolving routine issues before they require senior architect time. Staying Current: Remain abreast of corporate direction and strategy, product roadmaps, messaging, and emerging trends in the security industry. Project & Process Management: Independent Delivery: Independently manage assigned projects on schedule, escalating risks and dependencies early. Process Improvement: Remain abreast of educational frameworks, content development approaches, and technologies that may reduce costs or shorten development timelines. Other Duties: May perform other duties and responsibilities that management may deem necessary from time to time. What You’ll Need: Security Foundations: 1–3 years of overall experience in Information Security, or equivalent training/education/services. Vulnerability Management Exposure: Some exposure to vulnerability management concepts; prior experience with the Tenable product suite is a plus. Content or Training Background: Experience in technical writing, instructional design, or training delivery is beneficial but not required. Services Experience: Prior experience in professional services or consulting environments is highly valued. Education: B.S. degree in Computer Science or a related field preferred; equivalent experience considered. Technical Foundations: Working knowledge of TCP/IP networking; foundational understanding of Windows and Linux operating systems. Security Tools Familiarity: Familiarity with security assessment tools such as Nessus, Kali Linux, or Metasploit is a plus. Emerging Domains: Exposure to web application security, container security, or cloud environments (AWS/Azure) is a plus but not required at this level. Communication: Strong written and verbal communication skills. Collaboration: Strong interpersonal skills with the ability to work effectively with internal and external stakeholders. Autonomy with Support: Able to work remotely as part of a geographically distributed team, with structured mentoring and support from their manager. Ability to work remotely in a self-directed manner Physically able to participate in training sessions, presentations and meetings Some Tenable office travel may be required #LI-Hybrid #LI-MS1 This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs. US Pay Range $65,000 — $87,000 USD We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Location: MA - Boston - Office , US - Headquarters - Maryland - Columbia Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc Your Role: Build and lead a high-velocity production engine that transforms technical concepts into elite, field-ready service and training offerings across the Professional Services Portfolio. This role owns the full collateral and course-delivery lifecycle - from initial brief through go-to-market launch -  and is accountable for the platforms, governance, and creative/technical talent that keep the portfolio's content current, on-brand, and field-ready. The role carries a dual mandate: lead the production engine and serve as the primary link between Production and Sales Enablement/Go-to-Market (GTM), ensuring the portfolio is properly represented in the field. The ideal candidate has managed a diverse staff of technical and creative resources, can work with minimal supervision, and can implement the process changes required to continually mature the team's launch and collateral operations. Technical fluency in network security and vulnerability management is required to evaluate content accuracy and guide the team's technical output. Your Opportunity: Strategic Leadership & GTM Alignment Brand Evolution: Lead the overhaul of Tenable's corporate “house style” across all One Tenable and Prime assets, and own the Tier 1/2 rebrand timeline. The Face of Production: Serve as Professional Services lead for Prime Weekly TV, coordinating with SMEs to deliver high-quality broadcast content on a recurring cadence. Go-to-Market Liaison: Act as the bridge between Production, Sales Enablement, and Prime leadership so the collateral roadmap aligns with go-to-market goals and the portfolio is properly represented to the field. Launch Management: Plan, coordinate, and execute service and training offering launches, including go-to-market and marketing strategy. Operational Excellence & Platform Governance The Assembly Line: Design and manage scalable, repeatable workflows that take content from initial brief to final delivery, replacing ad hoc production with a governed process. Platform Management: Own the LMS and training delivery platforms, the global PS collateral library, and access management for all portfolio assets. Curriculum Development: Create and maintain appropriate training curricula, collateral and video recordings. Governance: Implement rigorous quality and content review standards for all technical and marketing assets, balancing innovation with the ongoing maintenance of existing offerings. Cross-Team Collaboration: Partner with Services Architects, Portfolio Program Management, and Domain Specialists to design, develop, and maintain professional service and training collateral. People Leadership & Performance Global Team Management: Build and lead a diverse, cross-timezone team of technical and creative professionals spanning multimedia design, technical writing, and video production. Data-Driven Leadership: Establish and track day-to-day production metrics -  throughput, quality, and cycle time -  to hold the team accountable to clear output standards. Talent Development: Foster a high-performance culture capable of adapting to rapid shifts in corporate direction, messaging, and strategy. Quality & Stakeholder Management Content Standards: Perform content reviews to assure the technical accuracy, brand alignment, and quality of all portfolio collateral before release. Stakeholder Interface: Serve as the primary point of contact for internal stakeholders (Sales, Product Marketing, Theatre leadership) regarding production requests and timelines. Risk & Dependency Management: Identify launch dependencies and production bottlenecks early, and escalate or resolve blockers before they affect GA dates. What You'll Need: 8+ years of related experience managing people, projects, and cross-functional processes, ideally in a professional-services or training-content environment 3+ years of direct people-management experience leading creative and/or technical production staff Experience with go-to-market, marketing, or sales-enablement processes for service or training offerings Exposure to the full content/product delivery lifecycle: requirements analysis, design, production, review, and launch B.S. or M.S. in Computer Science, Instructional Design, Communications, or a related field preferred Working knowledge of network security and vulnerability management; familiarity with Tenable.io, Tenable.sc, and Nessus strongly preferred Experience administering an LMS and managing a content/collateral library at scale Familiarity with data and dashboarding tools (e.g., Tableau) to track portfolio health and production metrics Strong written and verbal communication skills; comfortable presenting to senior stakeholders Strong initiative and the ability to work remotely, both self-directed and as part of a geographically distributed team Ability to manage multiple concurrent launches in an agile, frequently shifting environment This role may require you to work in a hybrid/on-site capacity at our headquarters in Columbia MD or Boston MA. This position is US-based only Ability to work remotely in a self-directed manner Ability to sit and work at a computer for extended periods Physically able to participate in training sessions, presentations and meetings Some Tenable office travel may be required #LI-Hybrid #LI-MM1 This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs. US Pay Range $130,000 — $173,333.33 USD We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Location: Kyiv; Lviv; Vinnytsia Workplace: onsite Ajax Systems is an international technology company and the largest security systems manufacturer in Europe. Ajax products are trusted by more than 4.5 million end users and 330,000 PRO users across over 180 countries. The company offers comprehensive solutions for protecting residential and commercial properties of various sizes. Today, the Ajax portfolio includes 280 devices for intrusion protection, video surveillance, fire safety, and comfort and automation. Every year, we demonstrate exponential growth both in the size of our team and in the number of users worldwide.   Ajax Systems operates a full-cycle production model, from idea generation and prototyping to mass production and global sales. Each department fully covers a specific operational need of the business. The company’s specialists are involved at every stage — from the production line in Ukraine to the logistics center in Poland, from where products are shipped to distributors worldwide. Now we are looking for a hands-on Cyber Security Specialist to strengthen our security posture and operational resilience. You will be at the forefront of our cybersecurity defense, responsible for incident monitoring and investigation, the deployment and improvement of security solutions, and ensuring our corporate processes and infrastructure meets compliance standards. If you are passionate about building secure systems, incidents investigation and translating technical findings into efficient mitigation actions, this role is for you. Key Responsibilities: Security systems support and improvements: Participate in security architecture improvement, provide support for the full lifecycle of security systems — from design and deployment to enhancement and technical support. Security Monitoring & Incident Response: Improve security monitoring processes and practices, participate in security events monitoring and triaging detected events. Develop and refine SIEM detection rules, investigate anomalies and identify root-cause of incidents, develop and execute mitigation plans to neutralize threats. Conduction Security Assessments: Conduct technical security assessments of corporate IT systems to identify compliance deviations and vulnerabilities. Participate in risks assessments, mitigation measures design and implementation. Compliance & Governance: Participate in improvement of security procedures, policies, and operational instructions. Collaborate with stakeholders on security processes implementation and improvement to ensure readiness for external security audits (e.g., ISO 27001, SOC2). Consultancy & Support: Partner with internal teams to define security requirements for new systems and solutions, provide expert guidance on implementing security controls. Participate in security requests processing, security awareness trainings preparation and conduction. Reporting & Strategy: Participate in preparation of reports for management, definition and description of security strategy. Required Technical Skills & Qualifications: Experience: 5+ years in CyberSecurity with a strong focus on SOC operations and security systems implementation. Core Proficiency: Hands-on experience with SIEM systems (Splunk/QRadar/Logsign/Wazuh), MDM solutions (Jamf/Crowdstrike/JumpCloud/Zoho), EDR/XDR solutions (SentinelOne/ESET/Defender), Cloud security monitoring (M365, GWS, AWS), and Firewall/WAF technologies (Cisco/PaloAlto/Fortinet/Ubiquiti). Domain Knowledge: Strong understanding of On-Premise and Cloud architectures, network security protocols, endpoint and application security. Practical experience in industry security best practices implementation (CIS, OWASP, NIST). Security assessment: Practical experience performing IT systems and application security assessments and reports preparation. Security governance: Experience in preparation of security reports, procedures and instructions for reporting. Practical knowledge of ISO 27001 technological controls implementation. Language Proficiency: Intermediate (B1-B2) English level required for working with technical documentation, cross-regional communication with colleagues and partners. Preferred Skills & Certifications: Certifications: Vendor-specific security certifications (e.g., Google, MIcrosoft, Cisco, Palo Alto PCNSE, Fortinet NSE) are highly valued. Frameworks: Practical knowledge of ISO 27001 organizational controls implementation. Why Join Us: Impact: Take ownership of security projects from concept to deployment. Culture: Work in a "zero bullshit" environment that values technical excellence and autonomy. Growth: Access to corporate English training and professional development/certification support. Health care: medical insurance. Beta Access: Get hands-on experience with new Ajax security systems before they reach the market. Innovation: Help shape the future of "Made in Ukraine" reliability.

Location: Zürich, CH About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Team The Security team protects Anthropic's AI systems and maintains the trust of our users and society. About the Role At Anthropic, we are pioneering new frontiers in AI that have the potential to greatly benefit society. However, developing advanced AI also comes with risks if not properly safeguarded. As a Research Engineer, you'll help to safely advance the capabilities of our models in incident response, security analysis, vulnerability remediation, and other areas of defensive cybersecurity. This role blends research and engineering, requiring you to both develop novel approaches and realize them in code. Your work will include designing and implementing RL environments, conducting experiments and evaluations, delivering your work into production training runs, and collaborating with other researchers, engineers, and cybersecurity specialists across and outside Anthropic. This role requires ML experience combined with domain expertise in cybersecurity. You might be an ML researcher with a history of cybersecurity work, or a security professional with a background in ML. Responsibilities Partner with researchers and safety teams across Anthropic to understand their analytical needs and build solutions Develop agentic integrations that allow AI systems to autonomously investigate and act on analytical findings Contribute to the strategic direction of the team, including decisions about what to build, what to partner on, and where to invest This role may require participation in an on-call rotation. You may be a good fit if you Have experience with machine learning. Have experience in cybersecurity research. Have strong software engineering skills. Can balance research exploration with engineering implementation. Are passionate about AI's potential and committed to developing safe and beneficial systems. Strong candidates may also have Professional experience in security engineering, fuzzing, detection and response, or other applied defensive work. Experience participating in or building CTF competitions and cyber ranges. Academic research experience in cybersecurity or other experimental & research background. Familiarity with RL techniques and environments. Familiarity with LLM training methodologies. Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of the role We are seeking a Staff Security Research Engineer to join our Application Security Team to conduct cutting-edge security research on GitLab's AI-powered DevSecOps capabilities. As GitLab transforms software development through intelligent collaboration between developers and specialized AI agents, we need security researchers who can proactively identify and validate vulnerabilities before they impact our platform or customers. In this role, you'll be at the forefront of security research, working with our GitLab DevSecOps platform, Duo Agent Platform, GitLab Duo Chat, and AI workflows that represent the future of human/AI collaborative development. You'll develop novel testing methodologies (including for AI agent security), conduct hands-on penetration testing, and translate emerging threats into actionable security improvements. Your research will directly influence how we build and secure the next generation of AI-powered DevSecOps tools, ensuring GitLab remains the most secure software factory platform on the market. This position offers the unique opportunity to help shape security and AI security practices in one of the world's largest DevSecOps platforms, working with engineering teams who are pushing the boundaries of what's possible with AI-assisted software development. You'll have access to cutting-edge AI systems and the freedom to explore creative attack scenarios while contributing to the security of millions of developers worldwide. This role reports to the Senior Manager of Application Security What you'll do: Conduct security research in two or more specialty areas. Identify novel, systemic, and chained vulnerabilities in GitLab, where individual weaknesses combine for outsized impact. Validate security vulnerabilities through hands-on testing, developing proof-of-concept exploits that demonstrate real-world attack scenarios. Assess emerging industry vulnerability classes against the GitLab codebase in your areas of expertise, and drive remediation of the class rather than the instance. Conduct security research into GitLab's AI and agentic surfaces, and participate in defining the security requirements that engineering teams build against. Build the tooling and automation that scales security research, including agent-assisted vulnerability discovery across our codebase. Research the security posture of open source tools and dependencies integrated with GitLab, report findings to their maintainers, and track mitigation following our responsible disclosure guidelines . Solve technical problems of high scope, complexity, and ambiguity. Define and implement security technical and process improvements. Contribute to the team roadmap. Provide actionable and constructive feedback to the engineering teams that need to act on your findings. Mentor and advise other individual contributors within the team, and sometimes outside of it. Share knowledge and novel vulnerability types with the security community. What you'll bring 7+ years of experience in security research, penetration testing, or offensive security roles Hands-on experience discovering and exploiting vulnerabilities. Be a subject matter expert (SME) of at least two technical areas impacting the security of the product. Proficiency in one or more of Ruby, Go, Python, TypeScript, or Rust. Experience in AI frameworks is an asset. Ability to read and analyze code across multiple languages and codebases. Understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation Experience leading technical objectives in cross-functional teams Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner. Ability to translate complex technical findings into clear risk assessments and remediation recommendations Strong analytical and problem-solving skills with creative thinking about attack scenarios Nice to have: Published security research or conference presentations; Background in software engineering with distributed systems expertise; Security certifications such as OSCP, OSCE, GPEN, or similar; Experience with GitLab or similar DevSecOps platforms About the team Security Researchers are a part of our Application Security team, who address complex security challenges facing GitLab and its customers to enable GitLab to be the most secure software factory platform on the market. We focus on systemic product security risks and work cross-functionally to mitigate them while maintaining Engineering's development velocity. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $168,000 — $238,000 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of the role We are seeking a Principal Security Researcher to join our Application Security Team to conduct cutting-edge security research on GitLab's AI-powered DevSecOps capabilities. As GitLab transforms software development through intelligent collaboration between developers and specialized AI agents, we need security researchers who can proactively identify and validate vulnerabilities before they impact our platform or customers. In this role, you'll be at the forefront of security research, working with our GitLab DevSecOps platform, Duo Agent Platform, GitLab Duo Chat, and AI workflows that represent the future of human/AI collaborative development. You'll develop novel testing methodologies (including for AI agent security), conduct hands-on penetration testing, and translate emerging threats into actionable security improvements. Your research will directly influence how we build and secure the next generation of AI-powered DevSecOps tools, ensuring GitLab remains the most secure software factory platform on the market. This position offers the unique opportunity to shape security and AI security practices in one of the world's largest DevSecOps platforms, working with engineering teams who are pushing the boundaries of what's possible with AI-assisted software development. You'll have access to cutting-edge AI systems and the freedom to explore creative attack scenarios while contributing to the security of millions of developers worldwide. This role reports to the Senior Manager of Application Security. What you'll do Conduct and lead security research projects across multiple functional areas. Identify novel, systemic, and chained vulnerabilities in GitLab, where individual weaknesses combine for outsized impact. Validate security vulnerabilities through hands-on testing, developing proof-of-concept exploits that demonstrate real-world attack scenarios. Assess emerging industry vulnerability classes against the GitLab codebase, and drive remediation of the class rather than the instance. Lead security research into GitLab's AI and agentic surfaces, and define the security requirements that engineering teams build against. Build and direct the tooling and automation that scales security research, including agent-assisted vulnerability discovery across our codebase. Research the security posture of open source tools and dependencies integrated with GitLab, report findings to their maintainers, and track mitigation following our responsible disclosure guidelines . Solve technical problems of the highest scope, complexity, and ambiguity. Help shape the team and sub-department roadmap. Lead the integration of security research results into the engineering and business functions that need to act on them. Teach, mentor, and advise other domain experts and individual contributors across several teams. Share knowledge and novel vulnerability types with the security community. What you'll bring 10+ years of experience in security research, penetration testing, or offensive security roles Strong ability in discovering and exploiting vulnerabilities in large codebase and complex systems Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust. Ability to read and analyze code across multiple languages and codebases Strong knowledge of AI frameworks Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation At ease in establishing and driving complex remediation initiatives involving cross-functional teams Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner. Ability to translate complex technical findings into clear risk assessments and remediation recommendations Strong analytical and problem-solving skills with creative thinking about attack scenarios Nice to Have: Published security research or conference presentations; background in software engineering with distributed systems expertise; experience with GitLab or similar DevSecOps platforms About the team Security Researchers are a part of our Application Security team, who address complex security challenges facing GitLab and its customers to enable GitLab to be the most secure software factory platform on the market. We focus on systemic product security risks and work cross-functionally to mitigate them while maintaining Engineering's development velocity. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $203,200 — $275,000 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Amsterdam, Netherlands; Belgrade, Serbia; Berlin, Germany; Limassol, Cyprus; London, United Kingdom; Madrid, Spain; Munich, Germany; Paphos, Cyprus; Prague, Czech Republic; Remote, Germany; Warsaw, Poland; Yerevan, Armenia At JetBrains, code is our passion. Ever since we started back in 2000, we have strived to create the strongest and most effective developer tools in the world. Today, we are evolving beyond standalone tools toward a unified, AI-native platform for software development. AI is no longer just an assistant inside the editor – it is becoming an active participant in how software is planned, built, reviewed, and operated across teams and organizations. This shift brings challenges that cannot be solved at the level of individual tools alone, challenges that involve governance, security, cost control, observability, and coordination between humans and autonomous agents. The JetBrains Platform team (JCP) is building the foundation that connects developer workflows, team-level collaboration, and organizational control into a single coherent system. The platform is both deeply integrated with JetBrains products and designed to work across teams, products, and environments. We’re now looking for an experienced Software Engineer to join an identity management and access team in JCP. The team owns several services responsible for authentication and authorization, as well as for managing organizations, user memberships, groups, and workspaces. All these form a foundational dependency for the rest of the platform. We also supply and support robust authentication components used by YouTrack, IDE Services, License Vault, Qodana, and other JetBrains products. In this role, you will: Own the entire SDLC: codebase, architecture, and operations Maintain and evolve the services in Kotlin and a little bit of Go, ensuring reliability and performance as the platform grows Design and implement new features across the identity, organization, membership, group, and workspace domains Review and integrate PRs from other platform teams Manage integrations with other JCP platform components and connected applications We will be happy to have you on our team if you: Have 7+ years of JVM development experience, preferably with Kotlin Know how to approach performance problems on JVM and Postgres Are experienced in building and operating SaaS production services in a distributed, multi-tenant environment Can fluently navigate a modern devops stack: K8S, OpenTelemetry, Grafana Have a track record of taking over and improving existing production services Nice to have: Prior experience with identity management protocols, such as OAuth 2.0, OIDC, SAML 2.0, or SCIM 2.0 If you have designed and evolved domain models for organizational or identity systems Cybersecurity experience: estimating risks, recognizing common vulnerability antipatterns, and promoting best SSDLC practices Hands-on experience with Go Why join JetBrains? Strong base salary. We offer competitive pay that reflects your skills and experience. Flexible work location. Enjoy the freedom to work from home or from the office. Remote work. Spend up to 30 days per year working remotely from abroad. Extra time off. More days to relax, recharge, and do the things you love. Medical insurance allowance. Enjoy peace of mind for you and your family Learning and development opportunities. Access to conferences, courses, and language classes. Relocation support. We help make your move as smooth and stress-free as possible. (depending on location) Language classes. Pick up the local language or sharpen your English skills. Fuel your day. Enjoy a hot meal or receive a lunch allowance on workdays. Mental health support. To help you feel your best, we provide easy access to professional mental health services. Sports benefit. Enjoy an on-site gym or sports club stipend. Internal events. Join company-wide celebrations and team gatherings. *Some benefits may vary depending on location. #LI-KT1 We are an equal opportunity employer We know great ideas can come from anyone, anywhere. That’s why we do our best to create an open and inclusive workplace – one that welcomes everyone regardless of their background, identity, religion, age, accessibility needs, or orientation. We process the data provided in your job application in accordance with the Recruitment Privacy Policy.

Location: Goma, DRC About GiveDirectly What if the most effective way to fight poverty was also the simplest: give people money and trust them to decide what they need? Since 2011, GiveDirectly has proven that idea at scale. We’ve delivered more than $1B in cash directly to 2+ million people living in poverty and crisis across 15 countries, and rigorous research shows the results: healthier kids, stronger businesses, sturdier homes, and more resilient families and local economies. Cash is now widely recognized as one of the most scalable, cost-effective, and dignified forms of aid. Our ambition goes beyond our own programs. We want cash to become the benchmark for aid, much as the index fund became the benchmark for investing, so that every aid dollar is held to one question: is this doing more good than giving the money directly to people living in poverty? We’re growing fast, and this is a rare and important moment to join. We expect to hit $1B in revenue in 2026 with significant growth forecast for 2027. At the same time we are building a new technology stack and operating model designed for a roughly 10x change in scale, and we are actively pursuing partnerships with major funders to move even more money in bigger ways, to people who need it. We are known for our extensive integration of technology into field processes; our quantitative approach to performance measurement; and our commitment to rigorous, independent, experimental evaluation of our impact, with multiple Randomized Control Trials completed and others in progress. How we work Our team spans 20+ countries and 69 languages. Our culture is candid, analytical, and non-hierarchical. We expect high ownership and give people real responsibility early. Our values are central to how we hire, work, and grow, and they are deliberately opinionated: Recipients first. Recipients’ preferences come before those of donors or ourselves. Team next. We optimize for organizational success, not individual success. Be proactively candid. We say what we believe and share information openly. Create positive energy. We aim to be a source of energy for colleagues, not a drain. Think rigorously; act quickly. We reason from first principles, then act rather than debate. Know yourself and grow. We own our imperfections and seek feedback to grow. Accept reality. Propose solutions. We focus on what can change and bring solutions, not just problems. Be productively ambitious. We take risks for step-change impact, not incremental progress. If they describe how you like to work and they energize you, this could be a great fit. Want to learn more? Read and listen: We are one of Time100’s Most Influential Companies of 2026, and our work has been covered by The Economist , NPR , TED , and The Washington Post . We're now preparing to deliver billions of dollars a year to people in extreme poverty, if funding allows. Read our CEO's essay on what that will take. About GiveDirectly in the DRC GiveDirectly DRC was established in 2018 to enable cash transfers to poor and rural populations via mobile phones, thereby promoting food security, poverty reduction, and financial inclusion. We aimed to demonstrate the operational feasibility and cost-effectiveness of transferring large volumes of money digitally in one of the world's least developed countries. Since its inception four years ago, GiveDirectly DRC has used mobile phones to transfer over $14 million to more than 65,000 beneficiaries in four provinces: South Kivu, North Kivu, Ituri, and Kinshasa. GiveDirectly's activities in the DRC have expanded to include, among other things: compelling proofs of concept for mobile-based cash transfers; and the implementation of innovative technologies to target disadvantaged urban populations in Kinshasa, in collaboration with the DRC's social protection agency, the DRC Social Fund. The delivery of contactless cash to beneficiaries in Beni and Bunia affected by the economic consequences of COVID-19. You will be joining Give Directly DRC at an exciting time in its history, as we are establishing and hope to launch several new programs and strengthen our partnership with the DRC government. About the Role As Senior Manager, Programs (DRC), you'll help bring GiveDirectly's programs in the Democratic Republic of Congo to life — owning their end-to-end execution, from operational design to on-the-ground delivery. You'll blend strategic thinking with hands-on problem-solving: designing systems that work, catching risks before they escalate, and using data to drive continuous improvement. You'll also lead people, managing a team of managers and field staff, while partnering closely with the Program Director and Country Director to shape what comes next. It's a role for someone who's energized by both the big picture and the operational details that make it real. What You’ll Do: Develop detailed project management plans for all our programs and drive them through successful end-to-end execution Design operational models for new programs — including targeting, payments, and customer service — and define, monitor, and report on key operational and efficiency indicators Identify operational vulnerabilities, such as fraud or reputational risk, and implement mitigation solutions aligned with the risk framework set by the Program Director Analyze program-level data to diagnose the causes of underperformance and drive continuous quality improvement Partner with Tech and Data teams to design surveys and ensure data integrity in Salesforce Directly manage a team of managers, with oversight of field teams and call centre at multiple levels Support the Program Director and Country Director in scoping new programs, including operational feasibility and risk assessment. Manage partner relationships with key operational partners with oversight of scoping, contracting and ensuring the terms of our agreements are respected. Develop materials for engagement with donors and other external stakeholders in order to represent our work externally. Requirements: Minimum 6 years of experience managing and implementing programs within international NGOs or a comparable operational environment; experience in cash or money transfer programming is an asset Work experience in the DRC, or strong knowledge of the DRC context, is highly desirable Experience in team management, including recruitment, team building, and development Strong analytical thinking, with a proven ability to use data to identify problems and improve programs Experience using technology and digital tools to drive results and operational innovation Proven instinct for risk management and creative problem-solving in complex operational environments A high degree of autonomy and resilience, with the ability to thrive in a fragile, rapidly changing environment Strong alignment with GiveDirectly's values Excellent written and oral communication skills, including ability to communicate fluently in English and French with high level stakeholders Professional proficiency in French and English required; knowledge of Congolese Swahili and/or Lingala is an asset Compensation At GiveDirectly, we strive to pay our employees generously and equitably. We use an accredited third party salary aggregator to calculate what we believe to be competitive pay based on role, location, and cost of living. We also have a no negotiation policy to ensure we are paying staff equitably across roles. Read more about our compensation philosophy here . Unless otherwise noted, the benefits stipend may be used to cover benefits or taken as additional taxable income. Base Salary: $94,500 Bonus at Target Performance: 10% (~$9,450, with potential for upside. For reference, with the organization’s current performance multiplier, this amount would be $11,057 in 2025) Estimated Total Compensation at Target: $103,950+ This role is onsite in Goma, DRC. We welcome candidates based in the DRC as well as those willing to relocate to be based in the DRC. #LI-REMOTE Working at GiveDirectly GiveDirectly is an Equal Opportunity Employer. All qualified applicants are considered for employment without regard to the person’s race, color, religion, national origin, sex, sexual orientation, age, marital status, veteran status, disability, or any other characteristic protected by applicable law. Flagging for US applicants: We invite you to " Know Your Rights " as an applicant. Commitment to Safeguarding As a global organization working with communities to eliminate extreme poverty, GiveDirectly takes the safeguarding of its recipients, staff, and partners seriously. To that end, GiveDirectly is a member of the Misconduct Disclosure Scheme , and will systematically check with previous employers about any abuse or misconduct related matters involving potential new hires. We may also employ other robust pre-hire screens, including in-depth reference checks, criminal background checks, and sanctions screens. These efforts help us continue to build and maintain trust with the communities we work with, and prevent abuse to our recipients and staff. **GD is committed to observing all local, national and international laws that protect people and basic human rights of all. GD is committed to a policy of “zero tolerance when it comes to preventing,  reporting, or responding to any form of abuse or  exploitation.” and expects anyone who works for GD to uphold the protection and safeguarding of our recipients as a priority.** Reasonable Accommodations We are committed to fostering an inclusive and accessible work environment. If you require any accommodations during the application or interview process, or to perform the essential functions of the role, please email us at careers@givedirectly.org with the email subject “Accommodation Needed”. We will work with you to ensure reasonable accommodations are made to support your needs. Want to put your best foot forward on your GiveDirectly application? Take a look at our Candidate Application Prep Guide ! Referrals Know the right person for this role? Please consider referring them . We offer a reward of $3,000 for a Senior Manager or above role, and $500 for a Manager role, paid if we end up hiring your referral. Thank you for sending great people our way!

Location: Toronto; San Francisco; London; New York; Montreal Workplace: Remote WHO ARE WE? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! As a Senior Security Engineer you will: - Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues - Lead security operation functions – including vulnerability management, SAST, DAST, detection engineering, and incident response – in CI/CD and cloud-native production environments - Integrate security into our applications throughout the software development lifecycle - Collaborate with product and development teams, driving the success of larger projects to ensure that software is built and deployed securely without compromising agility and speed - Driving and supporting bug bounty program, application security reviews and threat modeling, including code review and dynamic testing - Assess and integrate security tools to automate and scale security processes, i.e: evaluate open-source vs vendor solutions - Gather and analyze security metrics to address security issues with cross-team dependencies - Be a problem solver who is empathetic to developer concerns and will employ constructive and flexible approach to building innovative solutions You may be a good fit if: - 5+ years previous experience in Application/Product Security or Security Operations with a strong focus on security tool onboarding and optimization - You have an understanding of vulnerability management, network security, cloud security concepts, and industry best practices across many fields of security - You are comfortable with ambiguity and are able to make informed decisions with little data - You employ a flexible and constructive approach when solving problems - You are able to make trade-offs between build vs. buy decisions - help build solutions and able to review what tools are available - You understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences - You have a deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls - You’re a hands-on security engineer interested in automating controls FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS: - A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch. - Full health and dental benefits, including a separate budget for mental health. - RRSP matching, 401K, Pension Scheme. - 100% Parental Leave top-up for up to 6 months, for either parent. - Annual enrichment benefits: Arts & culture, fitness/wellness, quality time, and a workspace improvement credit. Education & learning stipend for conferences, courses, and coaching. - 6 weeks of paid vacation (30 working days!) - Budget for traveling to other offices if you are remote, plus an annual company offsite. HOW AND WHERE WE WORK: - Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon. - For those in the office: a daily lunch program, plenty of snacks, and regular community and social events. - For those not near an office: a co-working benefit so you can work alongside others in your city. - Everyone receives a $500 home office stipend to set up your workspace properly. If any of the above doesn’t line up exactly with your experience, we still encourage you to apply. We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs. We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider. Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.

Location: United States; Canada Workplace: OnSite WHO ARE WE? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! AS A MANAGER OF SECURITY ENGINEERING, YOUR KEY RESPONSIBILITIES INCLUDE: - Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues - Execute the long-term vision for the Security team in alignment with Cohere’s product and business goals. - Collaborate closely with leadership to prioritize high-impact initiatives and strategic customer engagements. - Vulnerability Management: Develop and implement enterprise-wide vulnerability management processes and tooling, including identification, prioritization, remediation tracking, and reporting, including customer artifacts - Static Application Security Testing (SAST): Establish SAST programs, integrate tools into CI/CD pipelines, and analyze results to identify and remediate security flaws in source code - Dynamic Application Security Testing (DAST): Implement DAST methodologies, configure scanning tools, and conduct regular assessments of running applications - Penetration Testing: Lead and oversee internal and external penetration testing engagements, including web application, API, network and agentic AI platform including managing our bug bounty program - Security Architecture Review: Collaborate with development teams to review and validate security architecture and design patterns - Secure SDLC Integration: Embed security practices throughout the software development lifecycle, working closely with engineering and product teams - Team Leadership: Lead and grow a high-performing team of Security engineers through hiring, coaching, and mentorship - Metrics and Reporting: Establish key security metrics, generate regular reports for leadership, and communicate security posture to stakeholders - Compliance and Standards: Ensure application security practices align with industry standards (OWASP Top10 for LLMs, ISO 27001) and regulatory requirements YOU MAY BE A GOOD FIT IF: - You have 8+ years of previous experience in Application Security / Security Engineering with a strong focus on vulnerability management, SDLC and bug bounty programs. - Proven experience with SAST, DAST, and penetration testing methodologies and tools - Proficiency with programming languages (Python, GoLang, etc.) and web technologies - Experience with cloud platforms (AWS, GCP, Azure) and container security - Excellent communication and interpersonal skills with ability to influence technical and non-technical stakeholders - Experience building and managing high-performing security teams - You are comfortable with ambiguity and are able to make informed decisions with little data. - You employ a flexible and constructive approach when solving problems. - You are able to make trade-offs between build vs. buy decisions—help build solutions and be able to review what tools are available. - You understand secure engineering best practices, can articulate problem statements, and propose solutions to both technically savvy and non-technical audiences. - You have a deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls. APPLY: If you are passionate about solving complex revenue challenges in a dynamic AI environment and want to join a team that values technical excellence and innovation, we encourage you to apply. WORKING LOCATION: Remote US or Canada FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS: - A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch. - Full health and dental benefits, including a separate budget for mental health. - RRSP matching, 401K, Pension Scheme. - 100% Parental Leave top-up for up to 6 months, for either parent. - Annual enrichment benefits: Arts & culture, fitness/wellness, quality time, and a workspace improvement credit. Education & learning stipend for conferences, courses, and coaching. - 6 weeks of paid vacation (30 working days!) - Budget for traveling to other offices if you are remote, plus an annual company offsite. HOW AND WHERE WE WORK: - Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon. - For those in the office: a daily lunch program, plenty of snacks, and regular community and social events. - For those not near an office: a co-working benefit so you can work alongside others in your city. - Everyone receives a $500 home office stipend to set up your workspace properly. If any of the above doesn’t line up exactly with your experience, we still encourage you to apply. We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs. We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider. Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.

Location: Poland; United Arab Emirates; Brazil; Argentina; Spain; Serbia Imunify360 is a leading developer of Linux infrastructure and security solutions. Our flagship product, Imunify360, is a comprehensive security suite that protects thousands of shared hosting environments, VPS, and dedicated servers worldwide. Our clients include industry giants such as Dell, GoDaddy, IBM, and Zoom, with over 4,500 customers globally. The company has more than 250 employees. We are looking for an engineer-architect to build a new product from scratch . This is not a position within an existing team—you will single-handedly create a runtime protection layer for Node.js applications. The hosting market is rapidly adopting Node.js, and modern applications are increasingly generated by users with AI tools and little technical security expertise. Your mission is to make protection automatic, transparent to client code, and effective in real time. This is a role with the highest level of ownership (Senior / Staff / Architect level), where you will make key architectural decisions and take full responsibility for the outcome. Responsibilities Define the technical approach for building runtime protection inside the Node.js process. Design the detection logic to identify and block attacks during application execution. Build and launch the first version of the product in real production environments. Ensure the protection works without requiring changes to client code and without breaking legitimate applications. Continuously improve the product based on telemetry, production feedback, and real-world incidents. Achieve target values across four key metrics: Runtime overhead False positives False negatives Customer escalation volume Requirements The top priority is Security, not just Node.js. Security experience outweighs general backend tenure. Must-have: Experience in Security Engineering or Security Research (deep understanding of attack vectors and defense methods). Have independently built and shipped a product/solution from scratch (end-to-end ownership: from idea to production). Ability to take an ambiguous problem, define a solution, and deliver a working result without constant supervision. Experience designing architecture and making key technical decisions (Staff/Architect level is a strong plus). English language: Intermediate or higher (written and spoken — all interviews are conducted in English). Nice-to-have: Security experience specifically in the context of Node.js (vulnerability analysis, securing, researching Node.js applications). Experience with Linux in production and development environments. Knowledge of Runtime Protection, WAF, instrumentation, malware analysis, and Incident Response. Experience in managed hosting / VPS domains. Experience with AI coding agents (Copilot, Cursor, etc.). Important: If you are a Security Engineer / Researcher who doesn't code on a daily basis, you must be comfortable using AI-assisted development tools and be capable of building an MVP with their help. Who you are (mindset): Builder: You genuinely enjoy creating something new and seeing it run in production. High ownership: You don't wait for tasks to be assigned — you define the approach and own the results. Practioner: You write code (yourself or with AI), not just review and coordinate. You understand Detection Engineering — how detection rules behave at scale across thousands of servers and the true cost of false positives. We do NOT consider candidates who: Have only theoretical or research experience without shipping real products. Have general Node.js development experience but lack a security component. Reside in countries with complex B2B tax reporting requirements (USA, UK, Canada, Germany, France, and others — to be clarified during screening). Have frequent job changes (every 1–2 years) without valid reasons. Benefits Format: 100% remote work anywhere in the world. Legal setup: B2B only (contract with your sole proprietorship or company). Budget: Up to $12,000 gross/month (before taxes, under a B2B agreement). Company: A stable, established international product company with 15+ years in the market. Role: A key position in building a new product line from the ground up.

Location: London Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. THE ROLE Checkout.com http://Checkout.com is scaling a multi-cloud environment at pace, and security architecture is central to how we do it safely. As Senior Cloud Security Engineer, you'll work closely with Engineering, GRC, Technology Risk, and Security Operations to embed security into every design decision and to make sure we can see what's happening across the estate once it's live. You'll help embed security within the design phase and ongoing operations of our multi-cloud posture, define guardrails and policy-as-code standards, and support the strengthening of our SIEM and detection capability. You'll take on the most complex and ambiguous cloud security challenges in the business, and hold engineers to best practices. This isn't a tool-monitoring role. You're here to lead security-by-design, set best-practice standards, and raise the bar. What You'll Be Doing - Develop and enforce reference security architectures, patterns, and blueprints for secure cloud adoption across AWS, Azure, and GCP. - Conduct security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift. - Partner with Engineering teams to embed security guardrails early in design, ensuring compliance and resilience without adding friction. - Evaluate engineering and platform architecture proposals, identifying security gaps and seeing remediation through to completion. - Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS. - Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most against CIS, NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes. - Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate. - Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support business decision-making. Skills and Experience We're Looking For We're looking for someone with strong technical expertise and a genuine passion for security. Here's what we need: - Risk-based decision-making and adherence to regulatory and internal security standards (PCI DSS, NIST, SOC 2, ISO 27001, CIS). - Broad knowledge across security domains and their capabilities within AWS, Azure, and GCP, with 6+ years' hands-on experience and SME depth in at least one platform. - Kubernetes (EKS/AKS/GKE), API security, and IaC security (e.g. Terraform, CloudFormation, ARM templates). - Securing user and non-user access at scale, including Azure Policy and cloud-native IAM controls. - Demonstrated ability to provide clear, security-focused guidance, combined with excellent communication and senior-stakeholder engagement skills, and experience mentoring other engineers. Nice to Have - CISSP, CCSP, or equivalent certifications. - AZ-500, AWS Certified Security, Google Professional Cloud Security Engineer, or equivalent cloud security certification. - Microsoft Certified: Azure Solutions Architect Expert, or Google Professional Cloud Architect. - Experience integrating ATT&CK Navigator into SOC workflows. Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Location: London Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. THE ROLE You will be a hands-on operator at the heart of the Cyber Security team, helping to run, harden, and continuously improve the day-to-day machinery of security. Where the Detection & Threat Engineer defines what "good" looks like, you help make it real, turning standards, runbooks, and tooling into reliable, repeatable operational practice. This is a delivery-focused role for an experienced practitioner. You will spend your time in the tooling, in the tickets, and in the detail: enhancing the platforms the team depends on, tightening procedures, and making sure findings, alerts, and remediation work actually get closed out rather than left to drift. You will partner closely with Senior Detection & Threat Engineers, Application Security, Information Security, Security Operations, and Engineering executing against the standards they set, feeding operational insight back up, and progressively taking ownership of the tooling and procedures that keep security operations running. WHAT YOU'LL BE RESPONSIBLE FOR - Supporting and enhancing security tooling SIEM, EDR, DLP, vulnerability management, and automation platforms including configuration, tuning, and day-to-day maintenance - Building and improving operational procedures, runbooks, and playbooks so the team's response is consistent and repeatable - Triaging and handling security alerts, escalating high-severity events, and contributing to incident response under the direction of senior engineers - Tracking, coordinating, and driving pentest and vulnerability findings through to remediation across engineering teams (ownership, action plans, status, closure) - Maintaining the accuracy and hygiene of security data asset inventories, finding trackers, and remediation records - Supporting detection deployment and validation, and feeding operational feedback into detection tuning to reduce noise and alert fatigue - Assisting with scripting and automation to remove manual toil from recurring operational tasks - Producing clear operational reporting and metrics on findings, remediation progress, and tooling health WHAT WE'RE LOOKING FOR - 5+ years of hands-on experience in a Security Operations, SOC, or equivalent operational security role - Practical experience operating modern security tooling SIEM (e.g. Sentinel), Data Loss Prevention (DLP) tools, EDR, and vulnerability management platforms - Solid understanding of security operations workflows: alert triage, incident handling, and vulnerability/finding remediation lifecycles - Comfort with scripting to support automation and tooling (e.g. Python, KQL) - Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closure - Working knowledge of cloud environments (e.g. AWS, Azure and GCP) and how security operations apply across cloud and SaaS - Familiarity with common frameworks and standards such as PCI DSS, NIST CSF, SOC 2, ISO 27001, CIS Benchmarks, and MITRE ATT&CK - A pragmatic, ownership-minded operator: methodical, detail-oriented, and focused on getting things fixed rather than just logged Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Location: United States - Remote Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. THE ROLE, IN A NUTSHELL: As a Senior Partner Manager on our Technology Partnerships team, you will own the Chainguard integrations program: how we evaluate, scope, certify, and maintain integrations, and how we prioritize them against customer demand and company strategy. You will drive that work across partner engineering, Product, and a dedicated Solutions Engineer, and you will be the person partners work with from first conversation through launch. This is a senior individual contributor role reporting to the VP, Alliances. WHAT YOU'LL DO: Own the technology partner integrations program, including the standards for how integrations are evaluated, scoped, certified, and maintained Own the integration roadmap and prioritize it against customer demand, technical feasibility, and company strategy Run the program end to end: partner intake, qualification, scoping, agreements, build coordination, certification, launch, and ongoing lifecycle Drive integrations to completion across partner engineering, Chainguard Product, and Solutions Engineering Own the partner relationship on the integration side, including joint reviews and accountability to committed timelines Work with Legal on partner agreements and the terms that govern partner access to Chainguard data Track the health of the integration portfolio and escalate what is stalled or degraded Bring partner requirements back to Product with the context needed to inform the roadmap Coordinate integration launches with Alliances, Product Marketing, and the field WHAT WE'RE LOOKING FOR: 6+ years in technology partnerships, partner management, integration program management, or partner solutions Technical enough to scope an integration and evaluate a partner's proposed design. This role does not build or test, but you should not depend on others to know where a program stands Working knowledge of containers, Kubernetes, and cloud native infrastructure Familiarity with vulnerability management tooling and how scanners work Program management experience. You have taken ambiguous, multi-stakeholder work and given it a process and an owner Experience with partner agreements and commercial terms alongside Legal Experience in a technology partner ecosystem, and an understanding of how ISVs decide where to invest Ability to communicate technical information to both technical and non-technical audiences Ability to travel up to 15% of the time BONUS EXPERIENCE: Experience at a security vendor building a scanner, CNAPP, or vulnerability management product Experience building a partner certification or technical partner program Familiarity with coordinated vulnerability disclosure About Us We live and breathe our company values: We are customer obsessed — We focus on delivering solutions to our customers that create value and make their lives better. We have a bias for intentional action — We prioritize, plan, try things, and fail fast. We don't take ourselves too seriously (but we do serious work) — We are solving an important problem which takes focus, but we also like to enjoy the journey. We trust each other and assume good intentions — We're transparent with decisions to empower team members to make well informed decisions. A few of the benefits we offer: Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs. Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!). 100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck. ∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset. 18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year. If your experience is close but doesn't fulfill all requirements, please apply. We're building the best team in technology and are focused on hiring "Chainguardians" with unique backgrounds, perspectives, and experiences. Chainguard is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. By submitting your application, you acknowledge that Chainguard will process your personal data in accordance with Chainguard's Global Candidate Privacy Notice . ©2026 Chainguard. All Rights Reserved.

Location: US - Remote - Massachusetts , US - Headquarters - Maryland - Columbia Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Role: Tenable is seeking a talented and dynamic product marketing leader to help extend the company’s leadership across the cloud security (CNAPP) and operational technology (OT) security markets. Tenable is the Exposure Management company. More than 40,000 organizations around the world rely on us to help them understand and reduce cybersecurity risk. Our goal is to arm every organization, no matter how large or small, with the visibility and insight to answer four critical questions at all times: Where are we exposed? Where should we prioritize based on risk? Are we reducing our exposure over time? How do we compare to our peers? In this role, you will lead product marketing for Tenable’s Cloud Exposure (CNAPP) and Operational Technology (OT) solutions, with Product Marketing Managers aligned to each area reporting to you. These are two distinct buyer worlds, and a core part of this role is understanding those differences well enough to build credible, differentiated messaging for each, while also connecting both to Tenable's broader exposure management narrative so customers see one coherent platform story. Reporting to the Senior Director of Product Marketing, you will interface and regularly collaborate with a variety of departments across Tenable and play a key role in successfully executing product launches, enablement programs and demand generation campaigns for both the cloud security and OT businesses. You will leverage analytics, establish benchmarks, and gain feedback to identify program success and opportunities for improvement. Your Opportunity: Perform market research and analysis using primary (customer, partner) and secondary (analyst, sales) sources across both the cloud security and OT markets; use this to inform product, pricing, and go-to-market strategies Develop distinct buyer personas, solution messaging, and content strategy for the cloud security market and the OT security market Ensure cloud and OT positioning reinforces Tenable's overall exposure management platform narrative Create clear and compelling content for sales collateral, solution briefs, blog posts, website, webcasts, trade shows, and related activities to drive market demand and awareness for both businesses Identify key technology partnership / co-marketing opportunities and new routes to market Lead new product and solution launches across cloud security and OT Take ownership of results by measuring the effectiveness of campaigns and launch activities with data-driven insights and performance tracking Actively participate in analyst relations and public relations initiatives Participate in webcasts, events and other demand generation activities Guide and contribute to sales and partner enablement across both product areas Serve as a voice of the sales team to the product development organization Manage and develop Product Marketing Managers aligned to cloud security and OT, including setting priorities and ensuring alignment across both go-to-market strategies Recruit, onboard and train new hires Provide mentorship, guidance and career development to members of the team Create an inclusive, supportive environment where all team members can do their best work Evaluate performance of the team, including quarterly performance feedback for each team member; complete annual reviews and recommend rewards (merit/promotion/equity) based on performance for the review period Partner with manager on budget requests and spending for strategy and team development needs Provide input on yearly budget for planned strategy as well as for the team (T&E, etc.) Must have ability to travel in the US up to 20% of time What You’ll Need: Bachelor’s degree or equivalent work experience required 12+ years of high-tech product marketing or similar experience; 7+ years’ experience as a direct people manager Hybrid: Ability to commute to our Columbia, MD headquarters OR Boston, MA office - 3 days per week. Demonstrable knowledge of cloud security and vulnerability management trends, along with working knowledge of the operational technology (OT) field and broader trends in OT-heavy industries such as manufacturing and utilities Your written and oral communication skills are superb, and you can explain complex concepts clearly to a variety of audiences You are able to collaborate in a highly matrixed environment with many different stakeholders, including all levels of management You have the ability to blend strategic thinking with creative execution You possess excellent organizational skills and strong follow-through You thrive in fast-paced, collaborative environments where change is the norm and the bar for quality is set high You have the capacity to balance multiple projects with aggressive deadlines at the same time And Ideally: Master’s degree Working knowledge of both the CNAPP/cloud security market and the OT security landscape, including relevant compliance frameworks #LI-Hybrid #LI-LP1 This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs. US Pay Range $188,000 — $250,666.67 USD We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Location: Remote - US About Backblaze Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. Backblaze is seeking a highly analytical, systems-oriented Director of Security Operations to drive the planning, forecasting, deployment, and optimization of hardware infrastructure across our global cloud storage platform. Role Overview The Director of Security Operations leads the organization's day-to-day cybersecurity operations across traditional and AI-enabled environments. Reporting to the CISO, the Director leads Security Operations while partnering closely with the Director of Security Architecture & Engineering. This is a hands-on technical leadership role requiring experience implementing and operating security controls as well as leading teams, incidents, and security programs. Key Responsibilities Lead security monitoring, incident response, threat hunting, security analytics, vulnerability management, adversary emulation, identity security, and operational resilience. Establish operational priorities, service objectives, metrics, playbooks, and processes based on organizational risk and business needs. Serve as incident commander for significant cybersecurity events and ensure lessons learned drive improvements to controls and operations. Drive responsible adoption of AI-assisted detection, investigation, vulnerability analysis, threat hunting, and response capabilities. Ensure effective security monitoring and response for AI applications, autonomous agents, workloads, and non-human identities. Use automation to reduce manual work and compress detection, analysis, containment, and remediation timelines. Partner with Security Architecture & Engineering to ensure controls are effectively designed, implemented, operationalized, monitored, and validated. Develop security talent and provide the CISO with clear reporting on incidents, exposure, operational performance, risk, and program maturity. Qualifications Experience leading Security Operations, Incident Response, Detection Engineering, Vulnerability Management, IAM, or related cybersecurity functions. Demonstrated hands-on experience implementing and operating security controls across cloud, infrastructure, applications, identity, endpoints, and networks. Strong technical understanding of security analytics, detection engineering, exposure management, adversary emulation, and identity security. Experience leading significant cybersecurity incidents and cross-functional response activities. Experience implementing security automation and AI-assisted operational capabilities. Strong leadership, mentoring, communication, and executive presentation skills. Experience in cloud-native or large-scale distributed environments and familiarity with modern cybersecurity and AI-risk frameworks is preferred. Backblaze Perks: Healthcare for family, including dental and vision Competitive compensation and 401K RSU grants for full-time employees ESPP program Flexible vacation policy Maternity & paternity leave MacBook Pro to use for work plus a generous stipend to personalize your  workstation Childcare bonus (human children only) Fertility treatment and support Learning & development program Commuter benefits Culture that supports a healthy work-life balance To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors, including candidate location, skills, depth of work experience, and relevant licenses/credentials, and may vary from the amounts listed below. The base pay range for this position is $205,000 - $230,000 At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer. To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.

Location: Remote-Friendly, United States; San Francisco, CA | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role We're hiring Cyber Evaluations Engineers to build and run the evaluations that measure cyber-relevant capabilities and safeguard robustness in our models. You'll design new evals, run per-release robustness testing, and dig into data on jailbreaks and prompt bypasses to understand where our safeguards hold up and where they don't. You'll also design many of the probes that detect cyber abuse in production and help shape the overall detection architecture alongside the policy team. Key responsibilities Design and run capability, uplift, and safety evaluations to assess cyber-relevant risk in new models Execute per-release safeguard-robustness testing ahead of major model launches Analyze evaluation results and communicate findings clearly to the team and to stakeholders Design, prototype, and tune detection probes for cyber misuse Work with the cyber policy team to turn policy lines into a layered, robust abuse-detection architecture, and measure its precision and coverage over time Build and maintain internal tooling used to run and score evaluations Collaborate with policy and engineering partners to translate eval findings into safeguard improvements Minimum qualifications Experience building or running evaluations, benchmarks, or test suites for software or ML systems, including delivering results on short, fixed timelines Hands-on cybersecurity experience (e.g., CTF participation, vulnerability research, exploit development, or security research) Proficiency in Python Strong ability to communicate evaluation results with multiple cross-functional stakeholders or potential policy stakeholders Preferred qualifications Deep offensive-security or security-research experience, including experience building AI security benchmarks Experience analyzing adversarial or abuse data (e.g., jailbreaks, prompt bypasses, intrusion or fraud telemetry) Experience working onsite with government partners on testing or evaluation engagements Experience with AI/ML evaluation frameworks Familiarity with coordinated vulnerability disclosure practices Experience testing pre-release or pre-deployment software or models under confidentiality constraints Experience authoring detection content (e.g., Sigma, YARA, Suricata, SIEM rules) or building ML-based abuse detection Active secret security clearance or higher, or eligibility to obtain one The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $300,000 — $405,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.