Вакансии

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters WHAT YOU'LL ACHIEVE - Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up. - Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. - Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful. - Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements. - Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes. - Help define and track metrics such as coverage, MTTD, and alert quality. - Join a shared on-call rotation for incident response. SKILLS YOU'LL NEED TO BRING - We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you. - 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role. - Have written or tuned detections that run in production, and care about signal quality and cutting noise. - Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly. - An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect. - Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs. - Have used SIEM, EDR, or SOAR tools in any size of environment. - Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end. NICE TO HAVE - Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry. - Experience running SIEM, EDR, or SOAR platforms at large scale. - Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections). - Experience applying LLMs or agent-style tooling to security workflows. - Experience securing AI-enabled systems or endpoint tooling. - Kubernetes or container detection experience. - Background in threat intelligence, malware analysis, or digital forensics. - Contributions to the security community through research, tooling, CTFs, or talks. - Experience at a high-growth startup or AI company. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $185,000 - $280,000 per year.   By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550 and and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528.   #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: Dublin, Ireland Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters WHAT YOU'LL ACHIEVE - Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up. - Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. - Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful. - Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements. - Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes. - Help define and track metrics such as coverage, MTTD, and alert quality. - Join a shared on-call rotation for incident response. SKILLS YOU'LL NEED TO BRING - We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you. - 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role. - Have written or tuned detections that run in production, and care about signal quality and cutting noise. - Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly. - An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect. - Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs. - Have used SIEM, EDR, or SOAR tools in any size of environment. - Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end. NICE TO HAVE - Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry. - Experience running SIEM, EDR, or SOAR platforms at large scale. - Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections). - Experience applying LLMs or agent-style tooling to security workflows. - Experience securing AI-enabled systems or endpoint tooling. - Kubernetes or container detection experience. - Background in threat intelligence, malware analysis, or digital forensics. - Contributions to the security community through research, tooling, CTFs, or talks. - Experience at a high-growth startup or AI company. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role's scope and complexity, and the candidate's experience and expertise, and may vary from the range provided below. The estimated base salary range for this role is €75,000–€142,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: Paris Workplace: Hybrid ABOUT VOODOO Founded in 2013, Voodoo is a tech company that creates mobile games and apps with a mission to entertain the world. Gathering 800 employees, 7 billion downloads, and over 200 million active users, Voodoo is the #3 mobile publisher worldwide in terms of downloads after Google and Meta. Our portfolio includes chart-topping games like Mob Control and Block Jam, alongside popular apps such as BeReal and Wizz. TEAM The Engineering & Data team builds innovative tech products and platforms to support the impressive growth of their gaming and consumer apps which allow Voodoo to stay at the forefront of the mobile industry. The Engineering & Data team plays a key role in Voodoo's long-term strategy. It enables Voodoo to both accelerate product diversification and provide a state of the art growth-engine to distribute and scale our games. They create innovative solutions that drive growth with a pragmatic approach, ranging from simple searching to complex machine learning systems. ROLE We’re looking for a Senior Security Engineer to join our Engineering & Data team. In this role, you’ll be responsible for a wide variety of topics: - Security Engineering & Guardrails: Architect, construct, and maintain automated security guardrails and paved paths to foster secure-by-default development environments. - Shift-Left Architecture Guidance: Collaborate with development teams during the early ideation and design phases to embed secure coding practices and architecture from inception. - Continuous & Automated Assessment: Develop automated, continuous assessment capabilities that replace manual reviews and scale seamlessly across the business unit. - Hands-on Code Contribution: Work directly alongside engineers to contribute code for security fixes and paved-path solutions, ensuring security remains the simplest route. - Self-Service Tooling: Partner with developers to build scalable, self-service security tools that empower teams to detect and remediate risks independently. - Preventive & Detective Controls: Implement robust preventive and detective controls to deliver ongoing assurance rather than point-in-time security checks. - Strategic Collaboration & Incident Response: Drive long-term security strategy with key stakeholders while actively participating in periodic on-call rotations for incident support. - AI-Driven Security Innovation: Utilize AI technologies and methodologies to streamline threat detection, accelerate security evaluations, and advance scalable system protection. PROFILE (MUST HAVE) - 5+ years of experience troubleshooting systems, analyzing logs, and automating complex tasks via command-line tools - 5+ years of experience identifying security vulnerabilities, assessing risks, and constructing mitigation strategies - 5+ years of hands-on experience with scripting, software development, and security-focused code reviews across standard programming languages - Demonstrated expertise in recognizing industry-standard security vulnerabilities, understanding threat vector patterns, and applying effective remediation techniques - Proven track record in a leadership or guidance role, such as a technical lead, mentor, or engineering team lead - Proficiency in applying threat modeling and comprehensive risk identification methodologies - Proven track record securing microservices, service-oriented architectures, and web services - Experience with identity provider servers and authentication protocols (such as OAuth2, OIDC, SAML) - Experience with penetration testing (pentest) and vulnerability assessments - Self-starter with strong ownership, accountability, and ability to work autonomously and collaboratively across teams and organizations in a fast-paced environment. PROFILE (NICE TO HAVE) - Advocate for security standards with clarity and empathy. - Familiarity with AI/ML workflows and agents. OUR STACK Terraform, Kubernetes, Prometheus, ArgoCD, CircleCI, GitHub Actions, Atlantis, Grafana, Claude Code, Trivy, Conftest / OPA, AWS IAM Identity Center (SSO), Okta, AWS Secrets Manager, AWS KMS, AWS WAFv2, AWS Shield, AWS ACM, AWS GuardDuty, Sealed Secrets, Kyverno, cert-manager BENEFITS - Competitive salary based on experience - Swile Lunch voucher - Gymlib (100% covered by Voodoo) - Premium healthcare coverage with SideCare, 100% covered for you and your family - Wellness activities in our Paris office - Remote Fridays

Мы — технологический стартап, делаем детекцию прокси и VPN по сетевым отпечаткам и DNS-скоринг для антифрода (Не РКН). Разработка своя, продукт продаётся, есть клиенты. Название и сайт покажем на первом созвоне — не хотим, чтобы конкуренты читали нашу вакансию раньше кандидатов. Бэкенд на Go — микросервисы, аутентификация, API-ключи, сборщики данных — и исследования: почему резолвер ответил так, где протекает прокси, что видно по DNS-запросам. Про многое из этого в интернете не написано — придётся ставить стенд и смотреть. Хорошая вакансия для тех, кто пришёл в Golang из сетей или ИБ: профильное образование, первая работа на Go уже была — и хочется наконец применить сети всерьёз. Главное — чтобы горели глаза на безопасность, сети и исследования и хотелось в этом расти. Задачи: — разработка микросервисов на Go с аутентификацией, парсинг данных, сбор данных — исследование сетевых протоколов и DNS-запросов, выявление прокси и VPN — постановка стенда для анализа и диагностики сетевых ответов Требования: — год коммерческой разработки на Go (микросервисы с аутентификацией, парсинг данных, Docker/compose) — глубокие знания сетей: модель OSI, DNS, резолвинг, TCP/UDP — профильное образование очно (ИБ, телеком) или опыт работы в сетях — Linux на уровне администратора: настройка серверов, сети, DNS, HTTPS — дотошность и аккуратность в документации и проверке кода, особенно при использовании ИИ — понимание VPN/Proxy и базовая ИБ-грамотность будет плюсом Не подойдёт: — студенты очной формы — те, кому нужен ментор и жёсткое ревью для роста — те, кто делегирует задачи без контроля результата Условия: — удалённая работа, фултайм, самозанятость — география: Россия или Беларусь — зарплата от 70 до 170 тыс. рублей на руки (возможны выплаты в USDT) Дополнительно: — R&D и перспективы роста: погружение в сервисы анализа сетевых протоколов, участие в исследованиях и разработке новых методов детекции в сфере anti-fraud — тестовое задание: анализ ситуации с резолвингом имени через Cloudflare DNS с ответом от Google Для отклика заполните анкету по ссылке.

Задачи: — искать уязвимости в системах и инфраструктуре; — проводить внутренние security assessments; — автоматизировать процессы безопасности; — внедрять security controls в инфраструктуру и инженерные процессы; — отслеживать новые уязвимости и техники атак.

Задачи: — Проектировать и автоматизировать средства контроля, механизмы обнаружения и инструменты для улучшения информационной безопасности инфраструктуры и продуктов Algolia — Исследовать, оценивать и рекомендовать новые технологии, методы и фреймворки информационной безопасности — Проектировать, внедрять и поддерживать системы мониторинга и устранения проблем информационной безопасности для защиты данных клиентов и систем Algolia — Сотрудничать с инженерными и продуктовыми командами для интеграции информационной безопасности в новые функции, системы и конвейеры разработки — Способствовать улучшению стандартов, процессов и лучших практик информационной безопасности в компании — Проводить оценку рисков и моделирование угроз для основных систем, сервисов и сторонних поставщиков — Участвовать и иногда возглавлять мероприятия по реагированию на инциденты информационной безопасности и анализу после инцидентов — Поддерживать текущие и новые инициативы по информационной безопасности и соответствию (например, SOC 2, Type II, ISO 27001, C5, GDPR) — Управлять и развивать программы публичного багбаунти и раскрытия уязвимостей Algolia Требования: — 3–6 лет опыта в инженерии информационной безопасности, защите инфраструктуры или смежных технических областях — Владение скриптингом или автоматизацией на одном из языков: Python, Bash, Go или аналогичных — Предпочтение опыту работы с Kubernetes — Глубокое понимание принципов информационной безопасности для современных облачных сред (AWS, GCP, Azure) и дата-центров — Опыт эксплуатации, настройки и управления системами логирования/SIEM, обнаружения угроз, управления позицией безопасности, EDR, SAST, SOAR, CTI и другими системами информационной безопасности, предпочтительно с опытом работы с Crowdstrike или Obsidian — Знание распространённых угроз, векторов атак и стратегий их смягчения — Хорошее понимание компьютерных систем, сетей и низкоуровневых протоколов с точки зрения информационной безопасности — Опыт обнаружения инцидентов, реагирования и управления уязвимостями — Отличные коммуникативные навыки для объяснения рисков и концепций информационной безопасности технической и нетехнической аудитории — Способность работать совместно с вице-президентом по информационной безопасности и самостоятельно достигать бизнес-целей — Свободное владение английским языком Желательно: — Опыт масштабирования программ информационной безопасности в быстрорастущих SaaS-компаниях — Сертификаты или эквивалентное обучение по облачной информационной безопасности (например, AWS Security Specialty, GCP Professional Security Engineer) — Опыт работы с системами управления секретами, такими как Hashicorp Vault — Участие в сообществах информационной безопасности, багбаунти, open-source инструментах или CTF — Опыт в области инженерии конфиденциальности, моделирования угроз или безопасного проектирования ПО Условия: — Гибкая модель работы с возможностью полностью удалённой или гибридной работы — Работа в международной команде с офисами в Париже, Нью-Йорке, Лондоне, Сиднее и Бухаресте — Конкурентная годовая зарплата в диапазоне £66,080–£91,800 — Культура, ориентированная на обучение, сотрудничество и инновации в области информационной безопасности — Поддержка профессионального развития и возможность влиять на безопасность систем, используемых миллионами пользователей

Location: Estonia - Remote Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work. Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you. Our vision: A world where everyone is free to focus on their most purposeful work, together. About the Role: You'll work alongside diverse, cross-border teams and supportive colleagues who share knowledge and want to see you succeed. Salesforce, Marketo, Salesloft, and a growing web of integrated SaaS tools run large parts of Wrike's business. As that footprint grows, we're hiring a dedicated analyst to bring stronger visibility, governance, and risk understanding to this business systems estate — partnering closely with the teams who own and use these tools. Your Impact: Own security for Wrike's business systems SaaS tools such as Salesforce, Marketo, Salesloft, and the integrations that connect them, covering permissions, sharing rules, connected apps, OAuth scopes, and integrations. Build and maintain clear visibility into what data lives in these systems, why it's there, and how it flows between integrated tools. Partner with RevOps, Marketing, Legal and others to embed security into how these platforms are configured, extended, and connected to third-party services. Translate security and business-continuity issues into clear, actionable terms for non-technical stakeholders. Ensure business systems handling personal data hold up against privacy frameworks including GDPR and CCPA, in close collaboration with Legal and Compliance. Chase data-flow and permission questions to ground truth which means following through until the answer and its implications are genuinely clear. Your Qualifications: Your primary expertise is in Salesforce administration and business systems security. Everything else listed here is context you'll operate in. Depth in the primary domain matters more than breadth across all of them. Salesforce administration experience with a strong security lens. This means permissions, sharing rules, connected apps, and integration patterns. Solid understanding of how business systems interconnect and why that matters for data exposure and business continuity. Able to communicate issues precisely to both technical and non-technical audiences. Working knowledge of privacy frameworks such as GDPR and CCPA at minimum. You don't need to tick every box! We're looking for depth in business systems security and the drive to grow across the rest. Standout Qualities: Certified Salesforce Administrator credential. Security+, ISC2 CC, or an equivalent security certification. Experience auditing or governing SaaS-to-SaaS integrations Exposure to data security posture management (DSPM) or data classification in SaaS environments. You use AI as a force multiplier — to move faster, think wider, and go deeper — but your security instincts and judgement are your own. You don't outsource thinking to a tool. Demonstrated tenacity in chasing complex data flows and access permissions across multi-tool integrations to a definitive answer. Team Dynamics: You will be joining Wrike's 15-member global Security team led by Maksim Pekuryn, Director of Security. You will report directly to Swen Groeneveld, Head of Security Operations, whose 8-person sub-team includes Security Engineers, Application Security, and SOC specialists. You'll also work closely with cross-functional partners in RevOps, Marketing, and Legal. Our Work Style: Tech stack: Salesforce, Marketo, Salesloft, OAuth integrations, connected apps, and related business SaaS tooling. Collaborative environment working closely with RevOps, Legal, and Marketing teams. Hybrid mode. Benefits & Perks: 28 calendar days of paid vacation Sick Leave Compensation (5 Paid Uncertified Sick Days) Parental Leave: 18 Weeks Maternity / 4 Week Paternity 2 Volunteer Days Health Insurance (Employees + Dependents) Life Insurance Plan Utility Allowance (30 EUR/month, subject to taxation) Fitness Plan (800 EUR/year) Full-remote & On-demand access to Co-working space What's Next? Recruiter Screen (30 mins) Department Interview / Technical Discussion (60 mins) Cultural Interview with Hiring Manager, CISO, and HRBP Your recruitment buddy will be Aleksandar Chernev , Senior Technical Recruiter. #LI-AC1 Who Is Wrike and Our Culture We’re a team of innovators and creators who solve the complex work problems of today and tomorrow. Hybrid work mode Wrike is our people, not a place. With 1,000+ employees collaborating across nearly every time zone, we support talent through 10 global hubs — Australia, Costa Rica, Cyprus, Czechia, Estonia, France, India, Ireland, Japan, and the United States — offering flexible ways of working that include remote work, hybrid environments, and co-working spaces across many locations. While flexibility looks different across teams and regions, employees located near certain hubs — particularly in Prague (CZ), Nicosia (CY), Bangalore (IN), and Rennes (FR) — are generally expected to collaborate in person around 2–3 days per week, balancing the flexibility of distributed work with opportunities for in-person collaboration and connection. Our persona 💡  Smart: We love what we do, and we’re great at it because this is our domain. Our combined knowledge in this space is unmatched. 💚  Dedicated: We get up every day focused on helping our customers win. We’re committed to helping our teammates win, too! 🤗  Approachable: We're friendly, easy to get along with, considerate, and helpful. Our culture and Values 🤩 Customer-Focused We care about our customers. We understand the customer journey, experience, and value derived from Wrike. Decision-making and action-taking are done with the customer in mind. 🤝 Collaborative We work as one and win together, each bringing unique strengths that contribute to diversity of thought for better outcomes. Leveraging our own work management platform, we foster an environment of creative collaboration and shared achievement. 🎨 Creative We strive to succeed through continuous innovation. It’s our pursuit of novel concepts that helped us create a market category. We continue to cultivate a workplace that fosters creative thinking as a means of transcending conventional boundaries and empowers us to break new ground to deliver extraordinary work management solutions. 💪 Committed We believe in ownership at all levels of the organization, by owning workflows from start to finish. Each member of our team is an integral part of this commitment, establishing work as a platform for personal growth and transformation, as well as collective success and growth. Check out our LinkedIn Life Page , Company culture page , Instagram , Wrike Engineering Team , Medium , Meetup.com , Youtube for a feel for what life is like at Wrike.

Location: Nicosia Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work. Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you. Our vision: A world where everyone is free to focus on their most purposeful work, together. About the Role: You'll work alongside diverse, cross-border teams and supportive colleagues who share knowledge and want to see you succeed. Salesforce, Marketo, Salesloft, and a growing web of integrated SaaS tools run large parts of Wrike's business. As that footprint grows, we're hiring a dedicated analyst to bring stronger visibility, governance, and risk understanding to this business systems estate — partnering closely with the teams who own and use these tools. Your Impact: Own security for Wrike's business systems SaaS tools such as Salesforce, Marketo, Salesloft, and the integrations that connect them, covering permissions, sharing rules, connected apps, OAuth scopes, and integrations. Build and maintain clear visibility into what data lives in these systems, why it's there, and how it flows between integrated tools. Partner with RevOps, Marketing, Legal and others to embed security into how these platforms are configured, extended, and connected to third-party services. Translate security and business-continuity issues into clear, actionable terms for non-technical stakeholders. Ensure business systems handling personal data hold up against privacy frameworks including GDPR and CCPA, in close collaboration with Legal and Compliance. Chase data-flow and permission questions to ground truth which means following through until the answer and its implications are genuinely clear. Your Qualifications: Your primary expertise is in Salesforce administration and business systems security. Everything else listed here is context you'll operate in. Depth in the primary domain matters more than breadth across all of them. Salesforce administration experience with a strong security lens. This means permissions, sharing rules, connected apps, and integration patterns. Solid understanding of how business systems interconnect and why that matters for data exposure and business continuity. Able to communicate issues precisely to both technical and non-technical audiences. Working knowledge of privacy frameworks such as GDPR and CCPA at minimum. You don't need to tick every box! We're looking for depth in business systems security and the drive to grow across the rest. Standout Qualities: Certified Salesforce Administrator credential. Security+, ISC2 CC, or an equivalent security certification. Experience auditing or governing SaaS-to-SaaS integrations Exposure to data security posture management (DSPM) or data classification in SaaS environments. You use AI as a force multiplier — to move faster, think wider, and go deeper — but your security instincts and judgement are your own. You don't outsource thinking to a tool. Demonstrated tenacity in chasing complex data flows and access permissions across multi-tool integrations to a definitive answer. Team Dynamics: You will be joining Wrike's 15-member global Security team led by Maksim Pekuryn, Director of Security. You will report directly to Swen Groeneveld, Head of Security Operations, whose 8-person sub-team includes Security Engineers, Application Security, and SOC specialists. You'll also work closely with cross-functional partners in RevOps, Marketing, and Legal. Our Work Style: Tech stack: Salesforce, Marketo, Salesloft, OAuth integrations, connected apps, and related business SaaS tooling. Collaborative environment working closely with RevOps, Legal, and Marketing teams. Hybrid mode. Benefits & Perks: 25 calendar days of paid vacation Sick Leave Compensation (5 Paid Uncertified Sick Days) Parental Leave: 18 Weeks Maternity / 4 Week Paternity 2 Volunteer Days Medical Insurance (Employees + Dependents) Hybrid Working Model School Allowance (Up to €600/month for school aged kids) Simcard w/ Unlimited Internet Access for active employees Office Lunch Allowance (via Wolt) on Wednesdays / Thursday What's Next? Recruiter Screen (30 mins) Department Interview / Technical Discussion (60 mins) Cultural Interview with Hiring Manager, CISO, and HRBP Your recruitment buddy will be Aleksandar Chernev , Senior Technical Recruiter. #LI-AC1 Who Is Wrike and Our Culture We’re a team of innovators and creators who solve the complex work problems of today and tomorrow. Hybrid work mode Wrike is our people, not a place. With 1,000+ employees collaborating across nearly every time zone, we support talent through 10 global hubs — Australia, Costa Rica, Cyprus, Czechia, Estonia, France, India, Ireland, Japan, and the United States — offering flexible ways of working that include remote work, hybrid environments, and co-working spaces across many locations. While flexibility looks different across teams and regions, employees located near certain hubs — particularly in Prague (CZ), Nicosia (CY), Bangalore (IN), and Rennes (FR) — are generally expected to collaborate in person around 2–3 days per week, balancing the flexibility of distributed work with opportunities for in-person collaboration and connection. Our persona 💡  Smart: We love what we do, and we’re great at it because this is our domain. Our combined knowledge in this space is unmatched. 💚  Dedicated: We get up every day focused on helping our customers win. We’re committed to helping our teammates win, too! 🤗  Approachable: We're friendly, easy to get along with, considerate, and helpful. Our culture and Values 🤩 Customer-Focused We care about our customers. We understand the customer journey, experience, and value derived from Wrike. Decision-making and action-taking are done with the customer in mind. 🤝 Collaborative We work as one and win together, each bringing unique strengths that contribute to diversity of thought for better outcomes. Leveraging our own work management platform, we foster an environment of creative collaboration and shared achievement. 🎨 Creative We strive to succeed through continuous innovation. It’s our pursuit of novel concepts that helped us create a market category. We continue to cultivate a workplace that fosters creative thinking as a means of transcending conventional boundaries and empowers us to break new ground to deliver extraordinary work management solutions. 💪 Committed We believe in ownership at all levels of the organization, by owning workflows from start to finish. Each member of our team is an integral part of this commitment, establishing work as a platform for personal growth and transformation, as well as collective success and growth. Check out our LinkedIn Life Page , Company culture page , Instagram , Wrike Engineering Team , Medium , Meetup.com , Youtube for a feel for what life is like at Wrike.

Note: Best Opportunity For Freshers to Start his Career in IT Sector

Location: Madrid, Spain Workplace: hybrid Are you ready to join our digital revolution journey?    At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.   Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.   With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career. We are looking for an experienced and operationally sharp Security Operations & Incident Response Analyst (L3) to join Aleph's global IT Security team. Reporting to the Global CISO, you will be the first line of defence when incidents occur and the engine behind the team's threat detection and response capabilities. You will own the end-to-end incident response process, lead threat hunting and intelligence activities, and manage the vulnerability and identity governance programmes — ensuring Aleph is both able to detect threats quickly and respond to them effectively across a complex, globally distributed environment. What you'll do: Incident Response Own and coordinate the end-to-end incident response process : identification, triage, containment, eradication, recovery, and post-incident review (lessons learned). Serve as the primary point of contact for security incidents escalated from IT Operations, the Security Engineer, and external sources. Maintain and continuously improve incident response playbooks for the most relevant threat scenarios (ransomware, phishing, account compromise, data breach, insider threat, etc.). Manage the security incident log and register : track all incidents, document timelines and actions, and produce trend analysis and reporting for the CISO. Coordinate with external SOC or MDR providers where applicable: review daily reports, validate alert quality, and manage escalation workflows. Data Breach Management Lead data breach investigations : scope the breach, gather and preserve evidence, assess PII exposure, and coordinate response with Legal, Privacy, and HR. Produce breach investigation reports with findings, root cause, and recommendations. Threat Hunting & Intelligence Conduct proactive threat hunting across the environment: develop hypotheses based on threat intelligence, search for indicators of compromise (IoCs), and investigate anomalous behaviour. Manage the Threat Intelligence function : track relevant threat actors, TTPs (MITRE ATT&CK), and sector-specific threat campaigns; integrate intelligence into SIEM/XDR detection rules and hunting queries. Produce threat intelligence summaries and briefings for the CISO and relevant stakeholders. Vulnerability Management Own the vulnerability management programme : schedule and execute periodic vulnerability scans across infrastructure, endpoints, and cloud environments. Analyse scan results, prioritise findings by risk and exploitability, and coordinate remediation with IT Operations within agreed SLAs. Track remediation progress, produce vulnerability metrics, and report status to the CISO. Validate remediation effectiveness through re-scanning and spot-checks. Identity & Access Management (IAM) Manage periodic access reviews : coordinate with system owners and HR to review and certify user permissions across critical systems, ensuring least privilege is maintained. Oversee the Privileged Access Management (PAM) programme: define PAM policies, monitor privileged account usage, and review access rights for administrator-level accounts. Investigate and respond to identity-related anomalies and access policy violations. What we are looking for: 3–5 years in a SOC analyst, incident response, or security operations role, with at least 1–2 years at L3 level is a plus. Experience implementing or managing IAM and PAM solutions Experience working within international or multinational environments. Hands-on experience with incident response engagements (internal or consulting) is strongly valued. Relevant certifications: GCIH, GCFE, GCFA, CEH, CompTIA CySA+ , or equivalent. OSCP is a plus. Strong hands-on experience with SIEM platforms (alert triage, rule writing, query development) and EDR/XDR tools . Solid knowledge of the MITRE ATT&CK framework and its application to threat hunting and incident response. Experience conducting vulnerability scans using tools such as Tenable Nessus, Qualys, Rapid7, or similar. Familiarity with IAM and PAM concepts and platforms (e.g. CyberArk, BeyondTrust, Azure PIM, or equivalent). Experience with digital forensics and incident response (DFIR) methodologies: evidence collection, log analysis, and timeline reconstruction. Knowledge of threat intelligence platforms and feeds (e.g. MISP, VirusTotal, threat intel feeds). Understanding of ISO 27001 incident management controls, NIS2 incident reporting obligations, and PCI DSS requirement 12.10 . Calm and decisive under pressure. Strong investigative mindset with structured problem-solving approach, excellent documentation skills. Ability to communicate incident status and findings clearly to both technical teams and executive stakeholders. Collaborative and proactive, comfortable working asynchronously across time zones. English : full professional proficiency (C1/C2) — primary working language. Spanish : professional proficiency is a plus. In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is EUR 48,000 EUR. In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.   #Aleph Why Join Us?   Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.     We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.    #ALEPH

Location: United States, Remote Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Are you a curiosity driven technologist who can quickly understand how an AI system works, identify where it could be misused or fail, and help a team find a practical path forward? Sony Interactive Entertainment is seeking a Senior AI Security Risk Analyst to provide hands-on security support for AI systems, agents, workflows, tools, and integrations across SIE. Role Summary: In this role, you will operate at the intersection of modern AI technology, security risk, architecture, and enablement. You will conduct AI security reviews using SIE’s established security risk assessment methodology, policies, standards, and control expectations, adapting their application to AI-enabled and agentic systems and identifying where AI-specific guidance or controls are needed. You will coordinate risk-focused design and architecture input and translate AI-specific weaknesses into decision-ready recommendations and engineering actions. You will serve as an approachable security partner, working cross-functionally with teams across SIE’s business units and functions to support a diverse range of AI use cases, systems, and technologies. You will work especially closely with Responsible AI & Governance and coordinate expertise across Information Security teams and IT & Engineering organizations. This is a highly collaborative, fast-moving role for someone who enjoys working directly with teams, navigating ambiguity, and using AI tools themselves. You will be the primary hands-on practitioner in an emerging AI Security capability, partnering with the AI Security strategy lead and specialist teams across SIE. What you’ll be doing: Lead hands-on security risk reviews of AI use cases and systems from early design through launch readiness. Assess end-to-end designs to identify material security risks, control gaps, data lineage and classification, and operational concerns. Translate findings into practical, risk-based recommendations and partner with stakeholders to track resolution. Serve as a trusted security partner by providing early consultation, education, and reusable guidance. Coordinate with Responsible AI & Governance, relevant security and technical teams to deliver consistent, well-informed reviews. Use security tooling and discovery insights to identify emerging risks, engage owners, and support appropriate remediation. Document reviews and findings within SIE GRC systems. Improve AI security requirements, review practices, reference patterns, and supporting tools as technologies and risks evolve. Track portfolio trends, communicate significant risks and recurring gaps, and escalate matters requiring additional expertise or risk authority. What We’re Looking For: 6+ years of experience building, integrating, assessing, or securing technical systems, including significant recent hands-on work with generative AI. Strong working knowledge of modern AI application stacks and the ability to interrogate designs, trace data and system interactions, and identify meaningful security weaknesses. Sound understanding of security fundamentals - including identity, permissions, data protection, integrations, and monitoring – and ability to apply these to AI-enabled and agentic systems as well as mapping back to existing security policies and frameworks. A practical builder mindset, with experience using AI tools, APIs, cloud services, code, or automation to explore systems and improve workflows. Proven ability to build trust and influence across engineering, product, creative, business, and security teams. Familiarity and ability to stay current with emerging AI technologies, evolving security risks, AI risk frameworks, and industry trends. Strong communication, empathy, and sound judgment, with the creativity to challenge assumptions, navigate ambiguity, and build trust while operating independently in a fast-moving environment. Bachelor's degree or equivalent Desirable: Experience with AI red teaming, adversarial testing, threat modeling, or security evaluations of LLM and agentic systems. Experience with cloud-based AI platforms, third-party AI services, or enterprise security tooling. Experience in gaming, interactive entertainment, creator technology, or similarly innovative product environments. Experience reviewing complex technical designs and translating identified weaknesses into practical, prioritized recommendations that support timely delivery. Relevant certifications are desirable and may include GIAC AI Platform Security (GAIPS), CISSP, CRISC, IAPP AI Governance Professional (AIGP), CCSK, CCSP, or equivalent AI, cloud, or security credentials. At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. The estimated base pay range for this role is listed below. $167,500 — $251,300 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: Remote, Canada; Remote, Israel; Remote, Poland; Remote, United Kingdom; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role We are hiring a Staff Product Security Architect to join our Security Platforms and Architecture organization at GitLab. Rather than operating as a purely consultative body, Security Architecture at GitLab functions as a hands-on technical driver. Our mission is to embed proactive guidance directly into modern developer workflows and automated coding environments, embedding security standards into the software development process from the outset. We strive to enable teams to deliver secure, resilient software seamlessly while minimizing reliance on manual security gates. In this role, you will collaborate closely with product engineering organizations, spearhead architectural strategy for critical capabilities, and serve as the primary Security Owner driving risk reduction for key entries within our risk management framework. Your daily work will span architectural design reviews, technical prototyping, and establishing scalable patterns that enable engineering teams to execute autonomously. What you’ll do Partner with engineering and product leadership across GitLab, developing enough context in their domains to anticipate security problems rather than react to them Lead security architecture and design work for strategic initiatives, and provide direction to the cross-functional teams delivering them Identify, assess, and prioritise systemic security risks, and act as Security Owner for high-priority items in the Product Security Risk Register, co-executing remediation with the teams who own the code Codify recurring security decisions into reusable artifacts — guardrails, standards, design patterns,skills, and reference threat models — delivered into developer and AI coding tool workflows Build proofs of concept and prototypes to unblock engineering teams and shorten the distance between a security requirement and a working implementation Conduct security architecture reviews for large or strategic projects, and coordinate with Application Security so that review coverage is comprehensive and correctly prioritised Threat model new and existing systems, and establish the patterns that let teams threat model their own work Work with Security Research on proactive exploration of unknown risks in GitLab's architecture Anticipate emerging security challenges and propose architectural responses before they reach implementation Mentor security engineers across the division, and represent security architecture to engineering audiences What you’ll bring Depth in application security architecture, including authentication and authorization models, privilege escalation, multi-tenant isolation, and trust boundary analysis Experience securing distributed systems, including service-to-service authentication, secrets handling, and the failure modes of security decisions made across process boundaries Working knowledge of software supply chain security: build and release integrity, artifact provenance, and dependency risk A track record of proactive architecture work — identifying risk before it becomes an incident, and designing something that prevents a class of problem rather than an instance of one Demonstrated ability to build trusted relationships with engineering leadership and influence technical direction through expertise rather than gatekeeping Experience defining security standards or patterns that teams adopted without being compelled to The ability to operate strategically while remaining hands-on, including reading unfamiliar code, building prototypes, and contributing changes Clear written communication, and the ability to make a security argument to an engineering audience that does not already agree with it A view on how security guidance should be authored and delivered for AI coding tools, not only for humans About the team Security Architects are a part of our Security Platforms and Architecture team, who address complex security challenges facing GitLab and its customers to enable GitLab to be the most secure software factory platform on the market. Composed of Security Architecture , Security Research , and Application Security, we focus on systemic product security risks and work cross-functionally to mitigate them while maintaining Engineering’s development velocity. In FY27, we're implementing a new organizational model where each architect is dedicated to a specific functional area of GitLab's product, enabling deeper context, stronger relationships, and more proactive security guidance. As the Core DevOps architect, you'll be part of a team that includes architects focused on AI and the Sec Section, creating opportunities for collaboration on cross-cutting security challenges while maintaining specialized expertise in your domain. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $168,000 — $238,000 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

В команду RedCore ищем специалиста с практическим опытом работы с системами физической безопасности. Что важно: — опыт работы с CCTV, системами контроля доступа (ACS) и охранной сигнализацией — самостоятельный монтаж, настройка, обслуживание и устранение неисправностей — опыт работы с Ajax или аналогичными системами — понимание IP-сетей и сетевого оборудования: PoE, коммутаторы, маршрутизаторы — русский и английский языки — греческий будет плюсом Условия: — работа из офиса на Кипре — полный рабочий день

Location: US - Remote - Massachusetts , US - Headquarters - Maryland - Columbia Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc Your Role: As an AI Security Engineer on Tenable's Information Security team, you will help shape and mature our approach to securing AI both within Tenable's products and across the enterprise. AI introduces a new class of risk at the intersection of application security, cloud risk, and data governance, and you will be on the front lines of defining how we assess, test, and address it. You will apply hands-on AI engineering experience alongside deep product security and application security skills to design security controls for AI systems, lead assessments, and help engineering teams ship AI features securely. You will establish security standards for responsible AI use, influence decisions across the organization, and build tooling that raises our security posture. This role is ideal for a practitioner who has spent real time building with AI systems, looking under the hood of model internals, and wants to channel that experience into a security specialty. Your Opportunity: Design, implement, and maintain end-to-end security controls across the AI/ML lifecycle. Conduct safety research, inspecting model internals (e.g., detecting hidden deception, latent knowledge, or unwanted concepts across layers) as a core methodology. Perform AI safety assessments and threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks. Design and implement robust security guardrails, controls, and boundary mechanisms for Large Language Models (LLMs), Small Language Models (SLMs), and open-source models. Act as a subject matter expert in AI safety research by inspecting model internals to detect hidden deception, latent knowledge, or unwanted concepts, ensuring highly transparent and aligned AI outputs. Continuously monitor the AI landscape for novel vulnerabilities and attack techniques, applying deep engineering experience to proactively defend enterprise AI deployments. Develop security reference architectures for AI deployment patterns, including MCP servers and agentic AI workflows and harnesses. Deploy controls to ensure model integrity, governance, and proper access control across models and feature stores. Build AI-driven tooling to strengthen cybersecurity posture across identity, incident management, vulnerability management, third-party risk, and emerging AI threat vectors. Perform AI safety, security assessments, threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks. Collaborate with software engineers, and product teams to integrate security best practices into AI development, training, validation, and deployment processes. Drive Secure Software Development Lifecycle (SSDLC) and DevSecOps practices for AI-powered products, including threat modeling, security testing, penetration testing, and CI/CD pipeline security automation. Create security guidance, documentation, and training for internal engineering and development teams; develop metrics that drive desired security behaviors and outcomes. Research emerging trends in AI security and contribute to innovative solutions that support Tenable's AI initiatives. What You'll Need: 5 or more years of professional experience in information security or application security, with at least 1–2 years focused on securing AI/ML systems. Master’s Degree in Computer Science, Cybersecurity, Data Science, or a related field preferred; advanced degree preferred. Deep understanding of AI-specific security threats, including adversarial ML, data poisoning, prompt injection, model inversion, model evasion, and inference attacks. Strong coding experience in Python and/or Go. Experience with frameworks & libraries such as PyTorch, Hugging Face Transformers, TensorFlow or similar. Experience using specialized interpretability and probing tools/libraries such as TransformerLens, NNsight, Captum, or LIT (Learning Interpretability Tool). Familiarity with mechanistic & Architectural Concepts: inspecting internal model states, residual streams, attention patterns, activation steering, Sparse Autoencoders (SAEs), or feature attribution. Strong understanding of the ML/AI lifecycle and the security risks associated with each stage. Knowledge of cloud security platforms: AWS, Azure, or GCP including AI/ML-related services. Knowledge of data security principles, including encryption, masking, and tokenization. Knowledge of SSDLC, DevSecOps, and security testing practices, including SAST, DAST, SCA, and threat modeling. Knowledge of application security architecture best practices and patterns, including modern web applications, Docker, and microservices. Ability to work cross-functionally across engineering, product, and business teams. Strong written and verbal comAAmunication skills; able to clearly translate complex AI security risks for both technical and non-technical audiences. Strong problem-solving skills, attention to detail, and ability to lead projects with end-to-end ownership. Self-motivated and effective working independently and across distributed teams. And Ideally: Hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments. Familiarity of AI security frameworks and standards, including OWASP LLM Top 10 and the NIST AI Risk Management Framework. Experience with application security assessment tools (Burp Suite, ZAP, Tenable WAS, etc). Familiarity with AI governance frameworks (EU AI Act, NIST AI RMF, etc.). Background in cloud security or large-scale SaaS product environments. Security certifications: CISSP, CSSLP, SANS GIAC, CEH, or AI-focused security certifications are a plus, but not necessary. #LI-Hybrid #LI-MS1 This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs. US Pay Range $122,500 — $163,166.67 USD We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Location: Remote, Canada; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Security Analyst on GitLab’s Product Security Vulnerability Operations team, you will help protect GitLab customers by triaging security reports, supporting vulnerability management operations, and coordinating clear communications with security researchers, customers, and internal teams. You will work closely with PSIRT engineers, Vulnerability Management, Security Engineering, Legal, Customer Success, Support, and Communications. This role is an excellent opportunity for an early-career security prfessional who is curious, organized, detail-oriented, and excited to build expertise in product security response. This role is open to candidates across North America, though we encourage applications from those based on the West Coast US or West Coast Canada (British Columbia) as the team is looking to expand coverage in the Pacific Time Zone. What you’ll do Triage incoming bug bounty reports, including reviewing report quality, validating findings, assessing potential impact, identifying duplicates, and routing reports to the appropriate teams. Triage vulnerabilities identified through vulnerability management activities and help track them through assessment, remediation, and closure. Work with PSIRT engineers and development teams to gather technical details, reproduce issues, and clarify affected products, versions, and configurations. Support severity assessment using frameworks and terminology such as CVE, CVSS, CWE, and OWASP. Communicate professionally and respectfully with security researchers participating in coordinated vulnerability disclosure and bug bounty programs. Support GitLab’s role as a CVE Numbering Authority by preparing information for CVE assignment, maintaining accurate records, and helping coordinate CVE-related activities. Represent GitLab as an acting CNA representative in CVE-related discussions and operations, escalating questions and coordinating with the appropriate internal and external stakeholders. Draft and coordinate customer-facing communications about security vulnerabilities, fixes, mitigations, and release information in partnership with PSIRT, Legal, Customer Success, Support, and Corporate Communications. Maintain accurate issue records, timelines, researcher communications, remediation status, and follow-up actions. Monitor queues and operational metrics to identify trends, aging items, recurring issues, and opportunities to improve response quality and consistency. Create and improve runbooks, procedures, templates, and other documentation that make vulnerability handling more efficient and transparent. Participate in incident handoffs, root cause analysis documentation, lessons-learned activities, and product security reviews. Build technical and operational expertise in PSIRT, bug bounty, vulnerability management, and coordinated vulnerability disclosure. What you’ll bring Early-career experience or equivalent education in cybersecurity, software engineering, information technology, or a related field. Relevant internships, coursework, labs, research, customer support, or practical security projects are welcome. Foundational understanding of software vulnerabilities and security concepts, including web applications, APIs, CI/CD environments, authentication, and authorization. Familiarity with security terminology such as CVE, CVSS, CWE, OWASP Top 10, and coordinated vulnerability disclosure. Strong attention to detail and the ability to organize and prioritize multiple reports or work items. Clear written and verbal communication skills, with the ability to explain technical topics to both technical and non-technical audiences. Experience with a bug bounty or vulnerability disclosure platform such as HackerOne or Bugcrowd. Experience reviewing security reports, participating in capture-the-flag exercises, performing vulnerability research, or working with security tooling. Familiarity with CVE assignment, CNA processes, security advisories, or vulnerability databases. Nice to have: Basic scripting, log analysis, issue tracking, or data analysis experience; experience writing technical documentation, customer communications, support responses, or operational procedures. About the team The GitLab Product Security Vulnerability Operations is a globally distributed team that helps ensure GitLab delivers secure applications customers can trust. VulnOps serves as a central point of contact for external security researchers and helps govern the policies, processes, and guidelines used to address vulnerabilities in GitLab’s supported products. Team members collaborate across regions using documented processes, automation, and structured handoffs to support vulnerability resolution and ongoing operational improvements. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $115,000 — $150,000 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Remote Workplace: Remote We are building AI to simulate the world through merging art and science. We believe that world models are at the frontier of progress in artificial intelligence. Language models alone won’t solve the world’s hardest problems – robotics, disease, scientific discovery. Real progress requires models that experience the world and learn from their mistakes, the same way that humans do. And this kind of trial and error can be massively accelerated when done in simulation, rather than in the real world. World models offer the most clear path to general-purpose simulation, changing how stories are told, how scientific progress is made and how the next frontiers of humanity are reached. Our team consists of creative, open minded, caring and ambitious people who are determined to change the world. We aspire to continuously build impossible things and our ability to do so relies on building an incredible team. If you are driven to do the same, we'd love to hear from you. *Titles posted to our careers page are updated regularly to best advertise the role and expected seniority, but internally we have a flat titling system with two types of titles: one for individual contributors and one for people managers. ABOUT THE ROLE *Open to hiring remote — we also have offices in New York, San Francisco, Seattle, London, Paris, and Tel Aviv. Runway is hiring an Infrastructure Security Engineer to secure the platform our models are trained and served on. The role covers Kubernetes platform security, cloud identity and access, software supply chain, tenant isolation in the serving layer and the research infrastructure behind our models. Securing a company that trains and serves frontier video models is a different problem from securing a typical SaaS product. The environment includes research compute, large training datasets, a fast-moving build pipeline, and engineers who work inside AI-assisted tooling every day. Each of those changes what an attack looks like and what the platform has to enforce to stop it. This is a hands-on engineering role on the Security team. You'll write policy, tooling and infrastructure code, work in the platform team's repositories, and ship controls that hold up in production. WHAT YOU'LL DO - Design and ship security controls in our Kubernetes ecosystem: admission policy, RBAC, workload identity, network policy and runtime hardening across every cluster we run - Harden the software supply chain from dependency intake through build and deploy, including package firewalling, artifact signing and provenance, and admission controls that block what doesn't pass - Own cloud IAM and identity architecture: least-privilege roles, short-lived credentials and workload federation - Secure research infrastructure and training pipelines, including access to model weights and datasets, without slowing down the people using them - Threat model new platform components before they ship and turn the findings into concrete requirements the owning team can act on - Build guardrails for AI agents and developer tooling operating inside our infrastructure - Write infrastructure as code and policy as code, and treat security configuration with the same review and rollout discipline as any other change - Give the incident response team what they need when infrastructure is involved: fast answers about how a system works and what to shut off WHAT YOU'LL NEED - Hands-on experience securing Kubernetes in production: you've written admission policies, debugged RBAC and workload identity problems and understand how a cluster gets compromised - Working knowledge of cloud IAM and networking on at least one major cloud platform, including how identity federation and short-lived credentials actually work - Experience with infrastructure as code and GitOps-style deployment, and the habit of shipping security changes through the same pipeline as everything else - Comfort writing Python, Typescript, Rust or another language to build tooling, not just scripts - An understanding of software supply chain attacks and the controls that stop them: signing, provenance, SBOMs, admission enforcement - Clear writing. Design docs, threat models and explanations to engineers who don't work in security are all part of the job - Judgment about which controls to enforce, which to recommend and how to roll out a breaking change without breaking the company EVEN BETTER IF YOU HAVE - Experience securing GPU or HPC-style compute, training pipelines or research environments - Experience with policy engines and admission controllers (Kyverno, OPA Gatekeeper, Falco or similar) - Multi-tenant isolation design in a cloud environment: ABAC, scoped credentials, per-tenant boundaries - Experience producing security architecture evidence for SOC 2, ISO 27001 or other audits and customer assessments - Open source contributions or published work in cloud or Kubernetes security Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. Our salary ranges are based on competitive market rates for our size, stage and industry, and salary is just one part of the overall compensation package we provide. There are many factors that go into salary determinations, including relevant experience, skill level and qualifications assessed during the interview process, and maintaining internal equity with peers on the team. The range shared below is a general expectation for the function as posted, but we are also open to considering candidates who may be more or less experienced than outlined in the job description. In this case, we will communicate any updates in the expected salary range. Lastly, the provided range is the expected salary for candidates in the U.S. Outside of those regions, there may be a change in the range, which again, will be communicated to candidates. WORKING AT RUNWAY Great things come from great teams. https://www.youtube.com/watch?v=kwmj4ato2kw&ab_channel=Runway We’d love to hear from you. We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed. So regardless of race, gender identity or expression, sexual orientation, religion, origin, ability, age, veteran status, if joining this mission speaks to you, we encourage you to apply. More about Runway - Universal World Simulator https://runwayml.com/world-simulator.html - GWM-1 https://runwayml.com/research/introducing-runway-gwm-1 - Gen-4.5 https://runwayml.com/research/introducing-runway-gen-4.5 - General World Models https://runwayml.com/research/introducing-general-world-models - Robotics SDK https://runwayml.com/research/introducing-runway-gwm-1#robotics-section - Conversational Real-time Agents https://runwayml.com/research/introducing-runway-gwm-1#avatars-section - Runway Studios https://runwayml.com/studios We're excited to be recognized as a best place to work: Crain's https://www.crainsnewyork.com/awards/best-places-work-2023 | InHerSight https://www.inhersight.com/companies/best/city/new-york-city-ny | BuiltIn NYC https://builtin.com/awards/new-york-city/2024/best-places-to-work | INC https://www.inc.com/best-workplaces/2024

Location: USA (Remote); Canada (Remote) Workplace: Remote Mysten Labs’ mission is to advance the internet through step-function improvements in what technology makes possible. We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value. Our work spans on-chain finance and the emerging agent economy. Through Sui, Move, and our broader technology stack, we’re building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact. We’re looking for a Senior Security Engineer to help protect the Sui ecosystem. You’ll uncover vulnerabilities, build monitoring tools, and assess economic risk across DeFi protocols. Working closely with external protocol teams and Mysten’s own DeFi products, including DeepBook, you’ll help address risks before they become incidents and strengthen security across the ecosystem Responsibilities - Build and run continuous monitoring of the Sui DeFi ecosystem for security and economic risk: oracle issues, misconfigurations/bad economic parameters, solvency and bad-debt exposure under price shocks, liquidation capacity against on-chain liquidity depth, accounting-versus-positions reconciliation, invariants. - Extend security team tooling, both precise static analysis tooling and proprietary agent skills. - Measure and drive compliance with the DeFi security recommendations across supported protocols: run the recurring compliance cycle, fill the protocol report card, validate security claims (audits, custody, upgrade governance, oracle dependencies) against on-chain reality, track remediation commitments, and escalate when a protocol regresses or fails to disclose an incident. Partner with the ecosystem and finance owners of the process. - Hunt for critical vulnerabilities in the highest-TVL Sui protocols and get them fixed before they are exploited: full-package audits, variant analysis across forks, pre-execution review of multisig upgrade payloads, and forensics after incidents anywhere in the ecosystem. - Be the security team's point of contact for external DeFi teams and for Mysten's own DeFi products such as DeepBook: due diligence, incident coordination, and post-mortems that feed back into the recommendations and the monitors. - Write it down: findings, reports, and runbooks that a protocol engineer can act on and a non-technical stakeholder can understand, with every claim traceable to bytecode, chain state, or data. Minimum Qualifications - Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience. - 3+ years of hands-on experience in security engineering, smart contract security, or DeFi risk engineering, with a track record of building tools that ran in production and of finding real vulnerabilities (audit findings, bug bounty reports, published research, or incident work). - Strong understanding of DeFi mechanics and their failure modes: lending markets (LTV, liquidation thresholds and bonuses, close factors, bad debt), AMMs and concentrated liquidity, perpetuals, liquid staking, oracles (staleness, confidence, TWAP, multi-source aggregation), flash loans, and MEV. - Proficiency in TypeScript and Python, and comfort with Rust. Ability to write SQL over large datasets and to work with blockchain indexers and data warehouses. - Experience reading smart contract code at source or the bytecode or disassembly level, or evident ability to learn it quickly. Move experience is a plus, not a requirement; Solidity or Rust smart contract experience transfers. - Rigor: you verify claims against bytecode and chain state, build known-clean checks into your tools, and say what you did not verify. - Strong written and verbal communication, including the ability to influence external teams you have no formal authority over - Interest in the web3 space is required. Preferred Qualifications - Sui and Move experience: the object and capability model, package upgrades and version gates, programmable transaction blocks, the Sui GraphQL and gRPC APIs. - Knowledge of the recent DeFi exploit history on Sui and other chains: named incidents, oracle compromises, and the defect classes behind them. - Experience building analysis or monitoring tools with LLM agents (Claude Code skills or comparable), and a clear sense of where models help and where deterministic tooling must do the work. - Static or dynamic program analysis experience: taint analysis, call graphs, symbolic execution, fuzzing, formal verification. - Quantitative or economic modeling experience: stress testing, liquidity modeling, risk parameters for lending markets. - Publications, conference talks, CVEs, or bug bounty rankings. Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information. Regarding the recent rash of technology job scams: Be aware that emails from genuine Mysten Labs group recruiters will always come from the @mystenlabs.com http://mystenlabs.com domain or related subdomains (e.g., mystenlabs.com/careers http://mystenlabs.com/careers). Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers http://www.mystenlabs.com/careers. To support an efficient and fair hiring process, we may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers. Our team is remote first and we are hiring across the world. Here at Mysten Labs, you’ll be joining a world-class team with tremendous growth potential as we bring the next billion users to web3. We raised a $300M Series B round from top Silicon Valley led venture funds like Jump Crypto, Andreessen Horowitz (a16z), Binance Labs, Redpoint, Lightspeed, Coinbase Ventures, Electric Capital, Standard Crypto, NFX, Slow Ventures, Scribble Ventures, Samsung Next, Lux Capital, among other investment firms and strategic partners. Come join us and build the future of web3!

Location: United States - Remote Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. The role in a nutshell: We're looking for a Senior Security Engineer  to engineer and secure our multi-cloud environment,  the same cloud infrastructure that powers our product. This is a cloud-native, AI-obsessed company, and our cloud is the platform our product runs on. How we design, harden, and evolve it directly shapes what we can build and how fast we can build it safely. As open source software increasingly feeds AI agents as well as human engineers, securing that supply chain end-to-end is core to our mission. You'll formally report to the Sr Director of Cyber Resiliency and spend time embedded in project pods building alongside our product engineering partners. We're a late-stage startup, which means priorities, tooling, and scope can shift quickly. What you'll do: Engineer and maintain cloud environments built to be secure, resilient, and optimized for performance Partner hands-on with internal engineering teams to embed security into the architecture and tooling developers use every day Work closely with our IAM counterparts to design and enforce secure identity and access strategies across all cloud environments Harden cloud platforms against emerging threats while keeping them resilient and highly available Lead cloud-centric disaster recovery exercises Bring a DevOps mindset by building automation, pipelines, and guardrails using Terraform/IaC and Kubernetes Help secure the infrastructure behind AI-driven pipelines and agentic workflows as they become a growing consumer of the software supply chain Act as a trusted advisor and collaborator to product engineering translating requirements into secure practical infrastructure that other teams will rapidly adopt Adapt architecture and priorities as the company scales,  reworking plans as needs, tooling, or team structure shift Assist during relevant incident response investigations What we're looking for: Outstanding interpersonal and communication skills Strong, hands-on GCP or AWS engineering experience required Experience with Azure also a plus Solid DevOps background: comfortable using Terraform/IaC, Kubernetes (GKE), and CI/CD pipelines A track record of designing systems that are secure, resilient, and built to accelerate engineering velocity Comfort with ambiguity and rapid change: prior experience at a fast-moving or late-stage startup is a strong plus Base Salary Range $137,000 — $160,000 USD About Us We live and breathe our company values: We are customer obsessed — We focus on delivering solutions to our customers that create value and make their lives better. We have a bias for intentional action — We prioritize, plan, try things, and fail fast. We don't take ourselves too seriously (but we do serious work) — We are solving an important problem which takes focus, but we also like to enjoy the journey. We trust each other and assume good intentions — We're transparent with decisions to empower team members to make well informed decisions. A few of the benefits we offer: Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs. Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!). 100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck. ∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset. 18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year. If your experience is close but doesn't fulfill all requirements, please apply. We're building the best team in technology and are focused on hiring "Chainguardians" with unique backgrounds, perspectives, and experiences. Chainguard is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. By submitting your application, you acknowledge that Chainguard will process your personal data in accordance with Chainguard's Global Candidate Privacy Notice . ©2026 Chainguard. All Rights Reserved.