Вакансии

Location: Petten, Netherlands; Pondicherry, India; Aachen, Germany; Abidjan, Côte d'Ivoire; Abu Dhabi, United Arab Emirates; Ahmedabad, India; Alexandria, Egypt; Algiers, Algeria; Alkmaar, Netherlands; Almaty, Kazakhstan; Amersfoort, Netherlands; Amsterdam, Netherlands; Antalya, Türkiye; Astana, Kazakhstan; Athens, Greece; Augsburg, Germany; Aya Napa, Cyprus; Bad Homburg, Germany; Baden-Baden, Germany; Baku, Azerbaijan; Bangkok, Thailand; Barcelona, Spain; Batumi, Georgia; Belgrade, Serbia; Bergisch Gladbach, Germany; Berlin, Germany; Bernau, Germany; Bielefeld, Germany; Birmingham, United Kingdom; Bishkek, Kyrgyzstan; Boca Raton, United States; Bolzano, Italy; Bordeaux, France; Boston, United States; Bramsche, Germany; Bratislava, Slovakia; Bromolla, Sweden; Brussels, Belgium; Bryanston, South Africa; Bucharest, Romania; Bucuresti, Romania; Budapest, Hungary; Buenos Aires, Argentina; Cairo, Egypt; Cape Town, South Africa; Cebu City, Philippines; Chemnitz, Germany; Chicago, United States; Santiago, Chile; Beijing, China; Chișinău, Moldova, Republic of; Bogota, Colombia; Colombo, Sri Lanka; Columbus, United States; Copenhagen, Denmark; Costa Rica; Havana, Cuba; Dakar, Senegal; Dallas, United States; Dammam, Saudi Arabia; Darmstadt, Germany; Davao City, Philippines; Delhi, India; Detroit, United States; Mirpur, Bangladesh; Djibouti; Dnipro, Ukraine; Douala, Cameroon; Dresden, Germany; Dubai, United Arab Emirates; Dublin, Ireland; Dusseldorf, Germany; Düsseldorf, Germany; Guayaquil, Ecuador; Emmen, Switzerland; London, United Kingdom; Erevan, Armenia; Essen, Germany; Fatorda, India; Helsinki, Finland; Florida City, United States; Frankfurt, Germany; Freiburg, Germany; Gatineau, Canada; Geoergsmarienhütte, Germany; Görlizt, Germany; Göttingen, Germany; Greifswald, Germany; Grenoble, France; Guadalajara, Mexico; Guatemala; Gżira, Malta; Halle, Germany; Hamburg, Germany; Hannover, Germany; Heinsberg, Germany Workplace: remote At TechBiz Global , we are providing recruitment service to our TOP clients from our portfolio. We are currently looking for a DFT & Post-Silicon Validation to join one of our clients' team Are you passionate about Design for Testability (DFT) for complex SoCs and SoC chiplets in package? We need you! As a Senior DFT and Post-Silicon Lead, you will own the DFT implementation process, ensuring seamless integration with test and post-silicon validation teams. You will work with cutting-edge technology, collaborating closely with external IP providers, EDA vendors, and internal teams to deliver high-quality, high-performance SoCs or SiPs for mass production. Key Responsibilities Leadership & Team Management Lead and mentor the DFT and Post-Silicon engineering teams to drive innovation and efficiency. Provide technical direction, ensuring alignment with organizational goals. Foster a culture of continuous improvement and collaboration. DFT Strategy & Execution Define and implement DFT architectures to improve testability, debug capabilities, and manufacturability. Ensure proper insertion of DFT features such as scan chains, BIST (Built-In Self-Test), and JTAG interfaces. Optimize DFT methodologies to minimize test time, reduce cost, and improve quality/yield. Test Development & Implementation Develop and implement test plans and test strategies at silicon, package, and system levels. Define and develop automated test solutions for production and characterization. Ensure test coverage for all product development stages, from pre-silicon to mass production. Guarantee high yield on the final solution while considering chiplet complexities. Cross-Functional Collaboration Work closely with design, validation, packaging, and operations teams to ensure seamless integration of testing and manufacturability. Collaborate with product management to ensure alignment with customer requirements and timelines. Process Improvement & Innovation Continuously explore and implement new DFT methodologies and manufacturing processes. Lead initiatives for cost reduction, efficiency improvements, and quality enhancements in test and production. Reporting Structure Reports to: Physical Implementation Team Manager Receives reports from: DFT and Post-Silicon team members Bachelor’s, Master’s, or PhD in Computer Science, Electrical Engineering, or a related field. Proven experience with multiple tape-outs of high-performance SoCs or SiPs for mass production. Strong background in post-silicon test optimization and yield analysis. Experience in defining and implementing test strategies for high-volume production. Proficiency in RTL and testbench development using SystemVerilog and Verilog. Strong scripting skills (Shell, Tcl, Python3). Hands-on experience with Tessent and SSN methods integrated with leading EDA design flows for advanced technology nodes is a plus.

Location: United States Workplace: Remote At ClickUp, we're building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an AI-native company. Every team member is expected to leverage AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what's possible. 🚀 JOB SUMMARY   We are looking for a GTM DevOps Engineer to join our Business Systems team and own the reliability, automation, and delivery infrastructure behind our Go-To-Market (GTM) technology stack. This role sits at the intersection of platform reliability and CI/CD engineering, ensuring that our critical business systems — including Salesforce, NetSuite, MuleSoft, Workato, and an expanding portfolio of AI-powered workloads — are deployed consistently, operate resiliently, and scale with the business.   You will partner closely with Business Systems developers, architects, and business stakeholders to build and maintain the pipelines, monitoring frameworks, and operational standards that keep our GTM systems healthy and our release cycles fast and predictable. As our team builds and deploys AI agents across GCP Cloud Run and AWS Bedrock AgentCore, you will serve as the infrastructure and deployment owner for these workloads — bringing engineering discipline to an environment where AI-generated code is increasingly entering production. This is a hands-on engineering role for someone who thrives in complexity, takes ownership of platform uptime, and brings a software engineering mindset to business application operations — directly supporting GTMSOE's broader mission of operational excellence across the GTM org.   KEY RESPONSIBILITIES   CI/CD & RELEASE ENGINEERING   - Design, build, and maintain CI/CD pipelines for Salesforce (SFDX/Salesforce CLI), NetSuite (SuiteScript/SuiteBundler), MuleSoft (Anypoint Platform), and Workato; establish branching strategies, environment promotion standards, and release gating processes across all GTM platforms. - Extend CI/CD practices to cover AI agent workloads deployed on GCP Cloud Run and AWS Bedrock AgentCore — including containerized builds, deployment pipelines, and automated validation gates. - Implement safe rollout patterns — including feature toggles, phased launches, automated validation, smoke tests, and rollback procedures — to reduce deployment risk on business-critical changes.   PLATFORM RELIABILITY & OBSERVABILITY   - Own SLA/SLO definitions for core GTM systems; standardize monitoring, alerting, and runbook patterns across quote-to-cash and GTM integrations, with proactive health checks and synthetic monitoring for critical flows (e.g., Salesforce ↔ NetSuite, Workato). - Extend observability coverage to GCP Cloud Run workloads — Cloud Scheduler jobs, agent pipelines, and integration microservices — and AWS-hosted agent infrastructure. - Conduct root cause analysis (RCA) for platform incidents and drive post-incident reviews with actionable remediation plans.   CLOUD INFRASTRUCTURE & ENVIRONMENT MANAGEMENT   - Manage sandbox, staging, and production environment lifecycles across GTM platforms — including refresh cycles, data masking, environment segmentation, and promotion standards that balance speed with reliability. - Own cloud infrastructure for Business Systems-operated workloads on GCP (Cloud Run, Cloud Scheduler, Cloud Secret Manager, GCS, Artifact Registry) and AWS (Lambda, S3, EventBridge, Secrets Manager, Bedrock AgentCore); apply IaC practices to make provisioning repeatable and auditable. - Establish base image pinning, dependency vulnerability scanning, and supply chain security practices for containerized workloads — particularly AI-generated codebases deployed via tools like Cursor or Claude Code. - Define and enforce patch management and container runtime ownership for vibe-coded and agentic workloads entering production.   SECRETS, ACCESS & SECURITY POSTURE   - Establish and enforce a consistent secrets management standard across all Business Systems workloads — GCP Secret Manager, AWS Secrets Manager, and equivalent — eliminating credential exposure via environment variables, source code, or client-side contexts. - Define and maintain API key rotation policies in alignment with security standards (high-severity keys: quarterly; vendor keys: annually at minimum). - Partner with Security and IT on IAM scoping, least-privilege service accounts, VPC configuration, and public/private endpoint governance for Cloud Run and Bedrock deployments. - Maintain a centralized registry of deployed workloads — GitHub repos, deployment URLs, architecture docs, data classification, and observability dashboard links — accessible to AppSec and infrastructure teams.   AUTOMATION & TOOLING   - Build internal tooling, automation scripts, and automated testing frameworks (unit, integration, regression) to reduce toil and increase deployment confidence; continuously evaluate new tooling to improve developer experience. - Develop or enforce GitHub repository templates for Cloud Run deployments that cover security audits, deployment configuration, API integration, and MCP server patterns — serving as a reusable foundation for AI-assisted builds.   GOVERNANCE, STANDARDS & COLLABORATION   - Define where self-service deployment and administration are appropriate versus where stronger change control and operational guardrails are required; serve as the DevOps SME, enabling developers to operate with autonomy within those boundaries. - Document and maintain operational runbooks, architecture decision records (ADRs), and deployment standards as living artifacts. - Collaborate with IT, Data Engineering, Security, and business stakeholders on cross-functional initiatives that touch the GTM platform.   QUALIFICATIONS   EXPERIENCE   - 4+ years in a DevOps, Site Reliability Engineering (SRE), or Platform Engineering role - 2+ years of hands-on experience deploying and managing Salesforce environments (SFDX, Salesforce CLI, scratch orgs, sandboxes, change sets, or pipeline-based deployments) - Experience with at least one additional GTM/ERP platform, such as NetSuite, MuleSoft, or Workato, in an operational or deployment capacity - Demonstrated experience building and maintaining CI/CD pipelines using tools such as GitHub Actions, GitLab CI, Jenkins, or Copado - Hands-on experience with GCP services — Cloud Run, Cloud Scheduler, Cloud Secret Manager, Artifact Registry, GCS — in a deployment or operations context - Experience with AWS services in an integration or operations context — Lambda, S3, SQS, Secrets Manager, CloudWatch; familiarity with Bedrock AgentCore or similar managed agent hosting infrastructure is a strong plus - Experience managing containerized workloads, including image lifecycle, dependency scanning, and supply chain security practices - Experience with incident management, on-call processes, and writing post-incident reviews   SKILLS & COMPETENCIES   Technical   - Strong scripting skills in Python, Bash, or Node.js for automation and tooling - Proficiency with Git, branching strategies, and version control best practices - Understanding of API-based integration patterns (REST, SOAP, event-driven) as they apply to MuleSoft, Workato, or similar iPaaS tools - Hands-on familiarity with secrets management across GCP Secret Manager and AWS Secrets Manager; strong grasp of security best practices in CI/CD contexts (least-privilege IAM, no hardcoded credentials, key rotation) - Monitoring and observability tooling experience (Datadog, Splunk, Google Cloud Monitoring, CloudWatch, or similar) - Infrastructure-as-code proficiency — Terraform or CloudFormation; experience applying IaC to Cloud Run or Lambda-based workloads preferred - Familiarity with container security practices: base image pinning, vulnerability scanning (e.g., Artifact Registry, Trivy), and dependency management for AI-generated codebases   Operational & Mindset   - Ownership: Takes full accountability for platform uptime, deployment quality, and the operational health of GTM infrastructure end-to-end. - Velocity: Operates with a bias for action — ships iteratively, reduces toil systematically, and keeps release cycles fast and predictable. - AI & Automation mindset: Actively leverages AI-assisted tooling and automation to accelerate delivery, improve reliability, and reduce manual overhead across the GTM stack. - Collaboration: Fluent cross-functional partner to developers, architects, Security, IT, and business stakeholders — enables autonomy without becoming a bottleneck. - Growth: Continuously evaluates new tooling, patterns, and practices to raise the bar on platform engineering and developer experience.   WHAT YOU'LL WORK WITH   - Salesforce: Core GTM CRM platform; this role owns deployment pipelines, environment management, and release reliability across orgs. - NetSuite: ERP platform integrated into the quote-to-cash flow; managed via SuiteScript/SuiteBundler within CI/CD standards. - MuleSoft (Anypoint Platform): Integration middleware; this role maintains deployment pipelines and observability for MuleSoft-managed flows. - Workato: iPaaS automation platform; monitored and deployed within the broader GTM reliability framework. - GCP (Cloud Run, Cloud Scheduler, Secret Manager, Artifact Registry, GCS): Primary cloud platform for AI agent workloads and integration microservices. - AWS (Lambda, S3, EventBridge, Secrets Manager, Bedrock AgentCore): Secondary cloud environment for agent hosting and integration operations. - GitHub Actions / GitLab CI / Copado: CI/CD tooling used to build, validate, and promote changes across GTM platforms. - Terraform / CloudFormation: IaC tooling for repeatable, auditable infrastructure provisioning. - Datadog / Splunk / Google Cloud Monitoring / CloudWatch: Observability and alerting stack across GTM and cloud workloads. Equal Opportunity Employer ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. Privacy Notice ClickUp collects and processes personal data in accordance with applicable data protection laws. You can find further details by viewing our Global Candidate Privacy Notice. https://clickup.com/careers-terms/candidate-privacy-notice If you are a Philippine Job Applicant, please also see our Philippine Data Privacy Notice https://t333.s.clickup-attachments-stg.com/t333/d9a53ce2-6d2c-48cd-84b1-ed4e525f9613/Philippine%20Data%20Privacy%20Notice_2024.pdf?view=open for further details. Visa Sponsorship Please note we are unable to sponsor or take over sponsorship of an employment visa for roles outside of engineering and product at this time. Sponsorship for engineering and product roles is not guaranteed, but is instead based on the business needs for that specific role at that time. Please reach out to the recruiter with any questions. Fraud Alert ClickUp Talent Acquisition will only initiate contact via an @clickup.com http://clickup.com email or through our official careers portal on clickup.com http://clickup.com. We will never request fees, payments, or sensitive personal information. Please disregard any offers received outside these channels and report them to support@clickup.com. AI Processing Notice ClickUp may use artificial intelligence and machine learning technologies to help review and screen candidates' employment applications against role-related criteria. These tools support, but do not replace, human decision‑making. If you have questions or need an accommodation in the recruitment process, please contact us at AskPeople@ClickUp.com.

Location: Sta. Rosa, Laguna Workplace: OnSite Duties and Responsibilities - Customer Onboarding - Conducts customer due diligence and KYC (know-your-customer) - Checks the legitimacy of the proof of identity and escalates immediately if suspected counterfeit or suspicious. - Validates the completeness and accuracy of customer information on the customer information sheet/account opening form. - Conducts signature verification. - Photocopies the proof of identity and files it together with the account opening form. - Creates the customer profile and opens the account in the Core Banking System (CBS) - Secures appropriate approval for the creation completed. - Releases passbook / chequebook / Time Deposit Certificate, as applicable, depending on the product availed by the customer. - Scans the Account Opening Document Set. - End-Of-Day (EOD) generation of report of all accounts opened and submits EOD report to the Service Delivery Head. - Customer Information Update – validation of customer documents presented to support the update if customer-initiated request or performs update of customer profile as part of the periodic review. - Conducts Enhanced Due Diligence as necessary. - Maintains Customer’s Account in the system based on customer’s request or bank-initiated activities. - Preparation of Customer Notifications and monitor its delivery status. - Fire-Proof Cabinet / Vault Custodianship - Safekeeps accountable forms and records the utilization of accountable forms. - Safekeeping of Account Opening Documents, together with the proof of deposit, in a secured and organized manner during the branch banking hours. - Act as dual custodian to safekeep or release the cheques received in a fire-proof cabinet/vault for deposit to the Depository Bank by the Teller. - Customer Interaction such as but not limited to: - Attends to customer queries at the branch. - Responds to Customer Inquiry via email. - Resolves customer complaint. - Call-out (TD Maturity, Bounced Cheques, etc.) - Release and Monitoring of Bounced Cheques Pick up and/or Replacement - Debit Cards Handling - Release of Debit Cards to Customers and Tagging in the System - Blocking of Card – Lost / Stolen - Destruction of aged card - All files shall be safekept in the designated filing cabinet and shall be within the retention period. - Ensure completion of tasks assigned within the agreed turnaround-time. - Other processes that may arise related to Account Services. - Timely reports concerns identified and possible issues that might have impact to branch operations. - Acts as reliever when somebody goes on leave based on the relief arrangement within the team. - Organizes team files (soft and hard copy) and adheres to the record retention policy. - Identifies processes/systems for improvement but ensuring controls are in place. - Initiates projects for the betterment of the team and the company as a whole. - Participates on UAT/UVT for new or enhancement of systems that will have impact to the team. - Participates in Business Continuity Plan (BCP) Activities. - Prompt identification and escalation of issues noted and propose resolution to the immediate supervisor. - Performs tasks that maybe assigned from time to time other than the basic responsibilities listed above. - Assists in combatting money laundering by ensuring processes required are in place. - Complies with regulatory requirements like BSP, AMLC, PDIC, BIR and other governing bodies. - Strict adherence to company’s policies and code of conduct. EDUCATION & COMPETENCIES - University degree on Banking & Finance, or any related Business Course - With at least 3 years of relevant experience in a banking industry - Strong knowledge and experience in teller services or branch operations - Sufficient knowledge of BSP regulations - Good communication skills - Problem-solving skills in a well-structured manner - Ability to work with different culture, race, or ethnic group. - Can work independently with minimal supervision. - Acceptable risk management skills and ability to mitigate identified risks. - Good interpersonal skills - Keen attention to details - Organize, innovative and results oriented. - Ability to multi-task in a fast-paced environment - Positive attitude knows how to find ways to address different circumstances. - With official Signature Verification, KYC / CDD Training / Seminars attended.

Location: APAC - Remote; Kuala Lumpur, Malaysia About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. Job responsibilities Red-blue confrontation drill Responsible for developing and executing penetration testing, red-blue confrontation, and practical attack and defense drills that simulate real attack scenarios, identifying potential security risks in enterprise networks, applications, cloud environments, work networks, and core business systems. Lead or participate in red-blue confrontation exercises to evaluate the defense team's ability in attack detection, alarm analysis, traceability analysis, emergency response, and recovery. Based on the real attack chain design exercise scenario, covering extranet breakthrough, web vulnerability exploitation, phishing entrance, privilege escalation, lateral movement, Data Discovery, privilege maintenance, and defense bypass stages. Combining the attack review results, promote the continuous optimization of security detection rules, response processes, asset governance, and security base lines. Attack Surface Analysis and Threat Research Identify enterprise network exposure, internet assets, cloud assets, APIs, supply chain components, and third-party access risks, evaluate attack paths, and provide mitigation recommendations. Monitor and collect threat intelligence, track vulnerability exploitation trends, APT attack methods, red team toolchain changes, and apply them to enterprise attack and defense exercises. Combining business scenarios to model attack paths and discover feasible attack chains from external exposure surfaces to core assets. Tracking AI-related security risks, including security issues in large-scale model applications, RAG systems, Agent systems, plug-in/tool calls, MCP services, AI code generation, and automated workflows. AI Security and Large Model Attack and Defense Responsible for the security evaluation of AI applications, intelligent agent systems, RAG Knowledge Base, AI Agent toolchain, and model services within the enterprise. Research and verify large-scale model-related attack techniques, including Prompt Injection, Jailbreak, Indirect Prompt Injection, data leakage, unauthorized tool invocation, security risks caused by model illusions, RAG poisoning, vector library pollution, sensitive information leakage, etc. Design AI red team test cases and evaluation framework, and conduct security verification on model input and output, context isolation, permission control, tool call chain, and data access boundary. Participate in the construction of AI security protection plan, including prompt word security policy, content security detection, tool call permission constraints, sensitive data desensitization, audit tracking, Agent sandbox isolation and security evaluation benchmark construction. Explore the application of AI in red team automation, vulnerability analysis, attack path planning, PoC verification, and report generation, and promote the platformization, automation, and intelligence of attack and defense capabilities. Tool and platform development Develop and optimize Red Team-specific tools and scripts for vulnerability mining, information collection, privilege escalation, lateral movement, credential analysis, traffic disguise, defense bypass, and automated report generation. Research and validate new attack techniques, and simulate real threats in combination with enterprise business scenarios. Build or participate in the construction of automated security evaluation platform, integrated vulnerability scanning, audio fingerprint recognition, asset mapping, PoC verification, attack path analysis, AI Agent arrangement and other capabilities. Combining LLM/Agent technology to explore automated penetration testing, intelligent vulnerability verification, code security auditing, and red team task scheduling. Security evaluation and reporting Conduct security evaluations on critical business systems, internal networks, cloud environments, work end points, API services, and AI applications, and output detailed technical reports, attack paths, impact analysis, and repair recommendations. Output AI security evaluation reports for AI applications, including attack examples, risk levels, exploitable paths, data leakage risks, permission boundary issues, and governance recommendations. Assist in improving enterprise security protection mechanisms, promote optimization of WAF, EDR, SIEM, NDR, HIDS, zero trust, identity permissions, and log auditing capabilities. Transform attack and defense discovery into security detection rules, base line specifications, develop security requirements, and continuous governance mechanisms. XFN collaboration Collaborate with the blue team, security operation, infrastructure, R & D, algorithm, data, and business teams to complete attack review, vulnerability repair, detection rule optimization, and security capability building. Provide security support to other departments of the enterprise, including emergency response drills, development security consulting, AI application pre-launch security review, and security training. Participate in the security design review of AI applications and security products, and promote the advance of security capabilities in R & D, testing, and Pushonline. Job requirements Basic skills Proficient in basic knowledge of cyber security, including TCP/IP protocol, network architecture, identity authentication, access control, principles and configurations of common security devices. Proficient in common attack techniques and red team toolchains, such as Sliver, Cobalt Strike, NPS, Burp Suite, Metasploit, Nmap, Masscan, Frida, Impacket, etc. Familiar with mainstream operating systems Windows, Linux, macOS security mechanism, log system, permission model and common use. Familiar with common web frameworks, API architectures, microservice structures, containers, and security risks in Kubernetes environments. Offensive and defensive technical capabilities Proficient in penetration testing and red team processes, including information collection, vulnerability scanning, vulnerability exploitation, intranet penetration, privilege escalation, lateral movement, privilege maintenance, Data Discovery, and trace cleaning. Familiar with the working principles and adversarial methods of enterprise-level security products, including WAF, EDR, SIEM, NDR, HIDS, zero-trust gateway, bastion host, and identity authentication system. Possess independent vulnerability analysis and PoC writing capabilities, able to reproduce, verify, and assess the impact of public vulnerabilities and 0day/1day risks. Proficient in one or more programming/scripting languages, such as Python, Go, Bash, PowerShell, JavaScript, etc., with experience in tool development and automation platform construction. AI security capabilities Familiar with the basic architecture of large-scale model applications, familiar with technical forms such as Prompt, RAG, Embedding, vector databases, Agent, Function Calling, MCP, plugin systems, etc. Understand or practice AI security testing methods, including Prompt Injection, Jailbreak, RAG data poisoning, sensitive information leakage, unauthorized tool invocation, model output security, Agent permission escape, etc. Able to design security test cases for AI applications, evaluate model input/output, context isolation, data boundaries, permission control, and tool invocation chain risks. Experience in using AI to assist security work, including vulnerability analysis, code auditing, intelligence analysis, attack path planning, report generation, or automated testing. Familiar with AI application security governance ideas, including model call auditing, prompt word security, sensitive data protection, content security detection, permission minimization, and sandbox isolation. Experience requirements More than 5 years of experience in red team, penetration testing, security research, or offensive and defensive exercises. Candidates with experience in large-scale enterprise attack and defense drills, red-blue confrontation, HW/major support, cloud attack and defense, or intranet penetration are preferred. Candidates with experience in AI security, large-scale model security, intelligent agent security, automated penetration testing platform or security tool platform construction are preferred. Familiar with enterprise security construction system, able to promote defense capability, detection capability, and governance process optimization from an attack perspective. Other capabilities Priority will be given to those who hold security-related certifications such as ♀ P, OSCE, CISSP, CISP, CEH, CISSP, CCSP, etc. Possess strong document writing and expression abilities, able to output high-quality technical reports, review documents, attack chain analysis, and security construction plans. Possess good problem analysis ability, learning ability, teamwork ability, and stress resistance. Be sensitive to new technologies, new Attack Surfaces, and new tools, and be able to proactively research and share internally. Bonus points Familiar with Cloud Computing Platform security and cloud attack and defense technologies, such as AWS, Azure, GCP, Tencent Cloud, Alibaba Cloud, etc. Familiar with Kubernetes, containers, Service Mesh, CI/CD, DevSecOps and supply chain security. Possess experience in zero trust, secure operation, threat hunting, Attack Surface management, and vulnerability management platform construction. Familiar with MCP Server, AI Agent framework, RAG system, vector database, LLM API gateway, model security evaluation framework. Experience in Automated Red Team, AI Penetration Testing, Intelligent Vulnerability Verification, Agent Orchestration, Security Knowledge Base or Security RAG System Construction. Experience in vulnerability submission, CVE, technical articles, open source projects, topic sharing, or tool release in the security community. Familiar with security frameworks such as MITRE ATT & CK, OWASP Top 10, OWASP LLM Top 10, NIST AI RMF, etc. Why Join Us At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.

Location: Yerevan Workplace: OnSite About the role Teza is a systematic trading firm building quantitative strategies across multiple asset classes. We are looking for a DevOps Engineer to own and evolve our infrastructure platform — the systems that our quants, developers, and traders rely on every day. Our infrastructure team is at an inflection point. We have a working platform that supports active trading and research, and we are now investing in making it more robust, observable, and developer-friendly. The successful candidate will have significant influence over the direction of our infrastructure — shaping tooling choices, establishing standards, and building systems that scale with the firm. Location Yerevan, Armenia, Austin, Texas or London, UK What We're Building Toward As a team, we are working toward the following goals. You will play a central role in defining the approach and driving execution: - Full-stack observability** across all internal services — unified metrics, centralized logging, distributed tracing, and actionable alerting — so that engineers and traders have clear, real-time visibility into system health and performance. - Reliable, self-service compute orchestration** spanning Slurm (HPC/ML workloads), Hadoop (batch data processing), and Airflow (workflow scheduling) — enabling researchers and data engineers to run workloads at scale without infrastructure bottlenecks. - Mature secrets management** for trading credentials, API keys, certificates, and service-to-service authentication — with rotation policies, auditing, and tight integration into deployment workflows. - Unified release pipelines** that bring consistency to how diverse applications — trading strategies, data pipelines, and real-time trading systems — move from development to production, each with their own build, test, and deployment needs. - A well-maintained platform foundation** where shared services — identity management, GitHub Actions runners, VPN, observability tooling — stay current and reliable without disrupting active trading. - Strong security posture** across production and research environments — network segmentation, access controls, vulnerability management, and compliance — that evolves alongside the platform rather than being bolted on after the fact. Requirements - Experience building and operating internal platform services for development teams (CI/CD, compute, monitoring, developer tooling) — not just consuming them. - Strong proficiency in Linux systems administration and container orchestration (Docker, Kubernetes, or similar). - Deep understanding of the software development lifecycle and how infrastructure supports engineering teams — from local development through CI to production deployment. - Familiarity with ML and data-intensive workflow requirements: GPU scheduling, large dataset access patterns, experiment tracking, and reproducible compute environments. - Proficiency with at least one major cloud provider (AWS, GCP, or Azure) including networking, IAM, and managed services. - Experience designing and operating hybrid infrastructure — cloud, on-premises, and colocation environments — with an understanding of the tradeoffs between them. - Hands-on programming ability in Python or another scripting language, sufficient to build tooling, automation, and infrastructure-as-code — not just run playbooks. - Solid understanding of core network protocols and services: DNS, LDAP, SMTP, TLS, HTTP, and SSH. - Practical knowledge of infrastructure security: firewall management, access control models (zero-trust, bastion hosts), vulnerability scanning, patch management, and audit logging. Nice to Have - Experience in a trading firm or other environment with strict uptime and latency requirements. - Familiarity with infrastructure-as-code tools (Terraform, Pulumi, Ansible). - Experience with log aggregation and SIEM systems. - Understanding of compliance frameworks relevant to financial services. Benefits - Health, visual and dental insurance - Flexible sick time policy

Location: Spain; Georgia; Serbia; Poland; Cyprus; Portugal; Armenia Workplace: remote The Project At Findev, we're building an AI-powered application modernization practice for major global financial institutions. The work: take legacy enterprise applications — monoliths, on-prem deployments, decade-old frameworks — and move them to modern platforms (Kubernetes, cloud-native, containerized). Hundreds of applications, each with its own stack, quirks, and business constraints. Most happen to be Java, but not all. AI tools (Agentic AI, LLM agents, automated analysis pipelines) are the primary instruments in this workflow. They handle volume — codebase scanning, dependency mapping, migration code generation. But the hard part isn't the code transformation. It's the decisions : what to migrate, where to migrate it, which strategy to use (rehost, replatform, refactor, rebuild), and how to sequence it without breaking production systems that handle real money. That's where you come in.

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. ABOUT THE ROLE We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks. You will also serve as a technical infrastructure responder during security incidents, deploying real-time cloud or network countermeasures to protect our production ecosystem. WHAT YOU'LL DO CORE RESPONSIBILITIES - Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure. - Posture Management & Visibility: Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines. - Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production. - Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build automated base-image patching and rolling upgrade pipelines. - Compliance-Driven Tracking: Track, document, and manage infrastructure vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of infrastructure remediation timelines and exception approvals. - Executive Reporting & Alerting: Escalate and report critical production exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize infrastructure risk trends and cloud compliance posture. - Remediation Collaboration: Partner with SRE, DevOps, and Platform teams to provide clear infrastructure mitigation paths. Assist in writing, reviewing, or modifying cloud configuration templates directly when necessary to resolve security flaws. - Incident Response Support: Assist Incident Response teams during active cloud or host-level breaches. Help develop and implement immediate, real-time cloud, network, or IAM configuration countermeasures to contain threats. REQUIRED SKILLS & EXPERIENCE - Experience: 5 years of experience in Cloud Security, DevSecOps, or Systems Engineering roles. - Cloud Infrastructure Depth: Strong foundational experience working with multi-cloud environments (Deep GCP expertise preferred, with working knowledge of AWS or Azure). - Posture Management & Scanning Tooling: Hands-on experience operating modern infrastructure security platforms such as Wiz, Orca, Prisma Cloud, Lacework, or cloud-native options (GCP Security Command Center). - IaC and Automation Fluency: Strong proficiency with Infrastructure as Code platforms (Terraform, Pulumi) and GitOps deployment workflows. Ability to evaluate and configure IaC scanners like Checkov, Tfsec, or KICS. - Containerization & Orchestration: Deep understanding of Docker/container security and Kubernetes architectures (e.g., GKE, EKS), including runtime security, network policies, and workload identity. - Compliance Awareness: Understanding of how infrastructure configurations and vulnerability management map to security compliance frameworks like SOC 2, ISO 27001, CIS Benchmarks, or NIST. WHAT WE VALUE - Systems Thinking: The ability to see the "big picture" and understand how security decisions impact the entire stack. - Technical Influence: The ability to drive technical alignment across the organization through expertise and collaboration rather than direct authority. - Autonomy: Comfortable leading major technical initiatives and driving outcomes with minimal oversight. - Problem-Solving Mindset: A passion for breaking down complex security challenges into elegant, scalable engineering solutions. This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Location: Malmö About Neo4j: Neo4j is the graph intelligence platform that transforms data into knowledge to power the next generation of intelligent applications and AI systems. It includes enterprise-ready knowledge graphs for accurate, explainable, and governed AI; the most comprehensive, trusted, and easy-to-deploy graph capabilities across any environment and data source; and an unmatched ecosystem trusted by 84 of the Fortune 100 and supported by the world’s largest graph community. Intelligence that works. Results that matter. Built to work everywhere and integrate with everything across every cloud for dynamic, personalized, and autonomous AI systems. We deliver quicker results, contextual knowledge, and solutions that impact customers and employees across the business. Our Vision: At Neo4j, we have always strived to help the world make sense of data. As business, society and knowledge become increasingly connected, our technology promotes innovation by helping organizations to find and understand data relationships. We created, drive and lead the graph database category, and we’re disrupting how organizations leverage their data to innovate and stay competitive. The Role Join the team behind Neo4j Graph Analytics for Snowflake , our Snowflake Native App that brings the full power of Neo4j Graph Data Science directly into customers' Snowflake accounts, with no data movement required. You'll work on a product that lives natively inside Snowflake: a containerized Java + Python runtime, a SQL-first API, and a release pipeline that ships graph analytics to enterprise data platforms. Our customers are data engineers and data scientists across financial services, supply chain, telco, and beyond, who use it to run PageRank, community detection, pathfinding, and node embeddings against the warehouses where their data already lives. This is a hands-on, mid-to-senior role at the intersection of graph analytics, cloud-native distribution, and DevOps , with a meaningful say in the platform's technical direction. What You'll Do Build and evolve the Neo4j Graph Analytics for Snowflake application, embedding Neo4j Graph Data Science into the Snowflake platform. Design and improve our SQL-facing API : stored procedures, UDFs, and the surface area customers call from their warehouses. Own significant parts of the build, release, and deployment pipeline : Snowflake CLI, Gradle, container images, and the Java/Python runtimes that execute inside Snowpark Container Services. Improve the platform's security posture : caller's rights vs. owner's rights stored procedures, restricted caller's rights (RCR), grants, and proactive image scanning. Collaborate with customers and Solution Engineers to turn real-world requirements into scalable features. Contribute to operational excellence : runbooks, release processes, observability, and reproducible dev environments. What You'll Bring 4+ years of professional experience building and shipping production-quality software. Strong SQL skills and real experience integrating with cloud data warehouses (Snowflake, BigQuery, Redshift, Databricks, or similar). Solid grounding in at least one of Java or Python , and willingness to be effective in both. A genuine DevOps mindset : comfortable owning build pipelines, container images, releases, and the operational side of a product. Experience designing software for performance, scalability, and predictable cost on cloud infrastructure. Bonus Points Hands-on experience with Snowflake , especially Native Apps, Snowpark Container Services, or building stored procedures and UDFs at scale. Familiarity with Docker , OCI image registries, and security scanning tooling (Semgrep, Snyk, Trivy, etc.). Understanding of graph theory and graph algorithms (centrality, community detection, pathfinding, embeddings), or strong curiosity to learn them. Background in distributed systems , JVM performance tuning, or columnar/analytical query engines. Experience working in a distributed, remote-first team and shipping to enterprise customers. #Li-Hybrid Why Join Neo4j? Neo4j is, without question, the most popular graph intelligence platform in the world. We have customers in every industry globally, and our products are a proven product/market fit. Joining our team is an opportunity to shape the future of data and analytics. Below are just a few exciting facts about Neo4j. Neo4j is one of the fastest-scaling technology companies in this industry. It recently surpassed $200M in annual recurring revenue (ARR), doubling its ARR over the past three years. Raised the biggest funding round in database history ($325M Series F). Backed by world-class investors like Eurazeo, GV (formerly Google Ventures), and Inovia Capital, Neo4j has raised over $600M in funding and is currently valued at over $2Bn. This puts Neo4j among the most well-funded database companies in history. 84% of the Fortune 100 and 58% of the Fortune 500 use Neo4j. Examples include Boston Scientific , BT Group , Caterpillar , Cisco , Comcast , Department for Education UK , eBay , NBC News , Novo Nordisk , Worldline , and others . Co-founder and CEO Emil Eifrem has built an amazing culture that prides itself on relationships, inclusiveness, innovation, and customer success. Countless industry awards . Massive enterprises and individual developers/data scientists love Neo4j. A strong sense of community and ecosystem is built around the platform. A recent Forrester Total Economic Impact™ Study cited Neo4j as delivering 417% ROI to customers. Research shows that members of underrepresented communities are less likely to apply for jobs when they don’t meet all the qualifications. If this is part of the reason you hesitate to apply, we’d encourage you to reconsider and give us the opportunity to review your application. At Neo4j, we are committed to building awareness and helping to improve these issues. One of our central objectives is to provide an inclusive, diverse, and equitable workplace for everyone to develop their potential and have a positive, career-defining experience. We look forward to receiving your application. Neo4j Values: Neo4j is a Silicon Valley company with a Swedish soul. We foster collaboration and each of us is empowered to contribute and put our innovative stamp on projects. We hire candidates who reflect the following Neo4j core values: (we)-[:VALUE]->(relationships) (we)-[:FOCUS_ON]->(userSuccess) (we)-[:THRIVE_IN]->(:Culture {type: [‘Open’, ‘Inclusive’]}) (we)-[:ASSUME]->(:Intent {direction:’Positive’}) (we)-[:WELCOME]->(:Discussions {nature: ‘IntellectuallyHonest’}) (we)-[:DELIVER_ON]->(ourCommitments) Neo4j is committed to protecting and respecting your privacy. Please read the privacy notice regarding Neo4j's recruitment process to understand how we will handle the personal data that you provide. More information at www.neo4j.com . ©2026 Neo4j, Inc., Neo Technology®, Neo4j®, Cypher®, Neo4j Bloom™, Neo4j Graph Data Science Library™, Neo4j® Aura™, and Neo4j® AuraDB™ are registered trademarks or a trademark of Neo4j, Inc. All other marks are owned by their respective companies.

Location: London About Neo4j: Neo4j is the graph intelligence platform that transforms data into knowledge to power the next generation of intelligent applications and AI systems. It includes enterprise-ready knowledge graphs for accurate, explainable, and governed AI; the most comprehensive, trusted, and easy-to-deploy graph capabilities across any environment and data source; and an unmatched ecosystem trusted by 84 of the Fortune 100 and supported by the world’s largest graph community. Intelligence that works. Results that matter. Built to work everywhere and integrate with everything across every cloud for dynamic, personalized, and autonomous AI systems. We deliver quicker results, contextual knowledge, and solutions that impact customers and employees across the business. Our Vision: At Neo4j, we have always strived to help the world make sense of data. As business, society and knowledge become increasingly connected, our technology promotes innovation by helping organizations to find and understand data relationships. We created, drive and lead the graph database category, and we’re disrupting how organizations leverage their data to innovate and stay competitive. The Role Join the team behind Neo4j Graph Analytics for Snowflake , our Snowflake Native App that brings the full power of Neo4j Graph Data Science directly into customers' Snowflake accounts, with no data movement required. You'll work on a product that lives natively inside Snowflake: a containerized Java + Python runtime, a SQL-first API, and a release pipeline that ships graph analytics to enterprise data platforms. Our customers are data engineers and data scientists across financial services, supply chain, telco, and beyond, who use it to run PageRank, community detection, pathfinding, and node embeddings against the warehouses where their data already lives. This is a hands-on, mid-to-senior role at the intersection of graph analytics, cloud-native distribution, and DevOps , with a meaningful say in the platform's technical direction. What You'll Do Build and evolve the Neo4j Graph Analytics for Snowflake application, embedding Neo4j Graph Data Science into the Snowflake platform. Design and improve our SQL-facing API : stored procedures, UDFs, and the surface area customers call from their warehouses. Own significant parts of the build, release, and deployment pipeline : Snowflake CLI, Gradle, container images, and the Java/Python runtimes that execute inside Snowpark Container Services. Improve the platform's security posture : caller's rights vs. owner's rights stored procedures, restricted caller's rights (RCR), grants, and proactive image scanning. Collaborate with customers and Solution Engineers to turn real-world requirements into scalable features. Contribute to operational excellence : runbooks, release processes, observability, and reproducible dev environments. What You'll Bring 4+ years of professional experience building and shipping production-quality software. Strong SQL skills and real experience integrating with cloud data warehouses (Snowflake, BigQuery, Redshift, Databricks, or similar). Solid grounding in at least one of Java or Python , and willingness to be effective in both. A genuine DevOps mindset : comfortable owning build pipelines, container images, releases, and the operational side of a product. Experience designing software for performance, scalability, and predictable cost on cloud infrastructure. Bonus Points Hands-on experience with Snowflake , especially Native Apps, Snowpark Container Services, or building stored procedures and UDFs at scale. Familiarity with Docker , OCI image registries, and security scanning tooling (Semgrep, Snyk, Trivy, etc.). Understanding of graph theory and graph algorithms (centrality, community detection, pathfinding, embeddings), or strong curiosity to learn them. Background in distributed systems , JVM performance tuning, or columnar/analytical query engines. Experience working in a distributed, remote-first team and shipping to enterprise customers. #Li-Hybrid Why Join Neo4j? Neo4j is, without question, the most popular graph intelligence platform in the world. We have customers in every industry globally, and our products are a proven product/market fit. Joining our team is an opportunity to shape the future of data and analytics. Below are just a few exciting facts about Neo4j. Neo4j is one of the fastest-scaling technology companies in this industry. It recently surpassed $200M in annual recurring revenue (ARR), doubling its ARR over the past three years. Raised the biggest funding round in database history ($325M Series F). Backed by world-class investors like Eurazeo, GV (formerly Google Ventures), and Inovia Capital, Neo4j has raised over $600M in funding and is currently valued at over $2Bn. This puts Neo4j among the most well-funded database companies in history. 84% of the Fortune 100 and 58% of the Fortune 500 use Neo4j. Examples include Boston Scientific , BT Group , Caterpillar , Cisco , Comcast , Department for Education UK , eBay , NBC News , Novo Nordisk , Worldline , and others . Co-founder and CEO Emil Eifrem has built an amazing culture that prides itself on relationships, inclusiveness, innovation, and customer success. Countless industry awards . Massive enterprises and individual developers/data scientists love Neo4j. A strong sense of community and ecosystem is built around the platform. A recent Forrester Total Economic Impact™ Study cited Neo4j as delivering 417% ROI to customers. Research shows that members of underrepresented communities are less likely to apply for jobs when they don’t meet all the qualifications. If this is part of the reason you hesitate to apply, we’d encourage you to reconsider and give us the opportunity to review your application. At Neo4j, we are committed to building awareness and helping to improve these issues. One of our central objectives is to provide an inclusive, diverse, and equitable workplace for everyone to develop their potential and have a positive, career-defining experience. We look forward to receiving your application. Neo4j Values: Neo4j is a Silicon Valley company with a Swedish soul. We foster collaboration and each of us is empowered to contribute and put our innovative stamp on projects. We hire candidates who reflect the following Neo4j core values: (we)-[:VALUE]->(relationships) (we)-[:FOCUS_ON]->(userSuccess) (we)-[:THRIVE_IN]->(:Culture {type: [‘Open’, ‘Inclusive’]}) (we)-[:ASSUME]->(:Intent {direction:’Positive’}) (we)-[:WELCOME]->(:Discussions {nature: ‘IntellectuallyHonest’}) (we)-[:DELIVER_ON]->(ourCommitments) Neo4j is committed to protecting and respecting your privacy. Please read the privacy notice regarding Neo4j's recruitment process to understand how we will handle the personal data that you provide. More information at www.neo4j.com . ©2026 Neo4j, Inc., Neo Technology®, Neo4j®, Cypher®, Neo4j Bloom™, Neo4j Graph Data Science Library™, Neo4j® Aura™, and Neo4j® AuraDB™ are registered trademarks or a trademark of Neo4j, Inc. All other marks are owned by their respective companies.

Location: United States The Opportunity Flosum is looking for a visionary Senior Salesforce Administrator who lives and breathes the Salesforce ecosystem and wants to shape the future of how the world's largest enterprises build, secure, and scale on Salesforce. This is not a maintenance role. You will own the product roadmap for the only 100% Salesforce-native DevSecOps, Data Protection, and Security platform trusted by Fortune 100 companies, global brands like Hilton, Cargill, Barry Callebaut, Cushman & Wakefield, and AARP. You will work directly with the CEO and engineering leadership to define and ship products that create entirely new categories within the Salesforce ecosystem. We are at an inflection point. AI-driven DevOps (powered by Agentforce), agent-aware governance, zero-trust security orchestration, and intelligent data lifecycle management are transforming the Salesforce landscape. We need a product leader who sees around corners, understands where this space is heading, and has the conviction and execution chops to get us there first. About Flosum Flosum is the only enterprise-grade DevOps, Data Backup & Archive, Trust Center, and Data Seeding platform built 100% native on the Salesforce platform. As a Salesforce Summit Partner and the only native solution certified by Salesforce, we operate within the Salesforce trust boundary, which means zero data exposure, no third-party cloud processing, and full compliance with Salesforce security standards. Our customers are among the most demanding in the world: Fortune 500 enterprises in regulated industries (financial services, healthcare, government, life sciences) who require SOX compliance, zero-trust architecture, and audit-grade governance. We compete against Copado, Gearset, AutoRABIT, and Salto, and we win because our native architecture delivers security, speed, and extensibility that external tools simply cannot match. We recently integrated Salesforce Agentforce into our platform, making Flosum the first and only Salesforce-native AI DevOps solution. This is just the beginning of what we plan to build. What You Will Own Product Vision & Strategy Define and drive the multi-year product roadmap across Flosum's five product lines: DevOps, Backup & Archive, Trust Center, Data Seeding, and DevOps for Veeva. Identify whitespace opportunities in the Salesforce ecosystem where Flosum can create new categories or capture market share from competitors. Translate deep Salesforce platform knowledge (metadata architecture, deployment models, Agentforce, Data Cloud, multi-org environments) into product capabilities that enterprise customers will pay premium prices for. Stay ahead of Salesforce's own product direction (three releases per year) and position Flosum to capitalize on every platform shift. AI & Innovation Lead the next wave of AI-powered DevOps capabilities built on Agentforce, including intelligent deployment agents, AI-driven code review, automated security scanning, and predictive release management. Define how Flosum's extensibility platform enables customers to build custom AI-driven workflows within Salesforce's trust boundary. Pioneer agent-aware governance: preparing Salesforce governance frameworks for autonomous systems and AI agents. Customer & Market Insight Engage directly with Fortune 500 customers and prospects to deeply understand their pain points around Salesforce development, security, compliance, and data management. Translate complex enterprise requirements (SOX, zero-trust, multi-org, regulated industries) into elegant product solutions. Partner with Sales and Customer Success to influence deal strategy, conduct product demos for strategic accounts, and close competitive evaluations. Execution & Delivery Write detailed product requirements, user stories, and acceptance criteria. You do the work, not just delegate it. Partner with engineering to deliver on aggressive timelines. Own sprint planning, backlog prioritization, and release coordination. Define and track product KPIs: adoption, activation, expansion, NPS, competitive win rates. Requirements Who You Are We are looking for a missionary, not a mercenary. Someone who takes genuine ownership of outcomes, thinks independently, and is driven by a need to build something that matters, not just advance their career. 7+ years of product management experience in B2B SaaS, with at least 3 years focused on the Salesforce ecosystem or Salesforce-adjacent platforms. Deep technical understanding of the Salesforce platform: metadata-driven architecture, deployment pipelines, sandboxes, packaging, security models, Apex, Lightning, and the ISV partner ecosystem. Proven track record of shipping products that enterprise customers (Fortune 500, regulated industries) adopted and paid for. Not features; products. Experience with DevOps, CI/CD, release management, or security/compliance tooling is strongly preferred. You understand the competitive landscape: Copado, Gearset, AutoRABIT, Salto, and native Salesforce DX. You know where each is strong and where they are vulnerable. Strong perspective on how AI/ML (especially Salesforce Agentforce, Einstein, Data Cloud) will reshape the Salesforce development and governance landscape. Hands-on executor. You write PRDs, you talk to customers, you review wireframes, you sit in sprint reviews. You do not manage from a distance. Exceptional communication skills. You can present a product vision to a C-suite audience and write a technical specification for an engineering team in the same day. Intellectual curiosity and a bias toward action. When you see a problem, you solve it. When you don't know something, you go learn it. What Will Make You Exceptional in This Role You have experience building products in the Salesforce AppExchange ecosystem, ideally as an ISV or within a Salesforce-native product company. You have worked at the intersection of DevOps and security/compliance in regulated industries. You have led product-led growth initiatives within an enterprise product, designing self-serve onboarding, in-product conversion, and expansion mechanics. You have a point of view on the future of AI in Salesforce DevOps and can articulate a 3-year vision for how autonomous agents will change how enterprises build on Salesforce. You have experience going head-to-head against well-funded competitors and winning through product superiority rather than just marketing spend. What We Expect in the First 12 Months First 90 Days: Learn and Diagnose Achieve deep fluency in Flosum's five product lines and their technical architecture. Conduct 25+ customer and prospect interviews to build a firsthand understanding of enterprise pain points. Complete a competitive audit with specific, actionable recommendations on where Flosum should invest to win. Deliver your first product roadmap refresh with clear prioritization rationale. Months 3-6: Ship and Win Own and deliver at least one major product release that directly addresses a competitive gap or customer-requested capability. Establish a product-led feedback loop between Sales, CS, and Engineering that accelerates deal velocity and reduces churn. Define the next generation of Flosum's AI capabilities and present a detailed execution plan. Months 6-12: Scale and Lead Drive measurable improvement in competitive win rates against Copado and Gearset. Launch at least one net-new product capability that opens a new revenue stream or market segment. Establish Flosum as a thought leader in AI-driven Salesforce DevOps through content, speaking, and ecosystem engagement. Benefits Why Flosum Category-defining opportunity: You will shape the future of how enterprises build on Salesforce. This is not incremental; it is transformational. Direct CEO partnership: You will work shoulder-to-shoulder with a founder who is deeply technical, product-obsessed, and committed to building the best platform in the Salesforce ecosystem. Fortune 100 customer base: Your product decisions will directly impact how the world's largest and most complex organizations operate. AI inflection point: Agentforce and autonomous agents are rewriting the rules. Flosum is the first native platform to integrate these capabilities. You will define what comes next. Missionary culture: We hire people who want to make a dent, not pad a resume. If you are looking for a place where your work matters and your ideas are heard, this is it. Compensation & Benefits Competitive base salary + performance bonus Equity participation Comprehensive benefits (health, dental, vision, 401k) Hybrid flexibility (San Ramon, CA HQ) or remote for exceptional candidates Direct access to Salesforce ecosystem events, conferences (Dreamforce, TrailblazerDX), and customer engagements If you live in San Ramon, CA this can be a Hybrid position, but we're open to fully remote in other locations.

Location: United States The Opportunity Flosum is looking for a visionary Senior Salesforce Technical Business Analyst who lives and breathes the Salesforce ecosystem and wants to shape the future of how the world's largest enterprises build, secure, and scale on Salesforce. This is not a maintenance role. You will own the product roadmap for the only 100% Salesforce-native DevSecOps, Data Protection, and Security platform trusted by Fortune 100 companies, global brands like Hilton, Cargill, Barry Callebaut, Cushman & Wakefield, and AARP. You will work directly with the CEO and engineering leadership to define and ship products that create entirely new categories within the Salesforce ecosystem. We are at an inflection point. AI-driven DevOps (powered by Agentforce), agent-aware governance, zero-trust security orchestration, and intelligent data lifecycle management are transforming the Salesforce landscape. We need a product leader who sees around corners, understands where this space is heading, and has the conviction and execution chops to get us there first. About Flosum Flosum is the only enterprise-grade DevOps, Data Backup & Archive, Trust Center, and Data Seeding platform built 100% native on the Salesforce platform. As a Salesforce Summit Partner and the only native solution certified by Salesforce, we operate within the Salesforce trust boundary, which means zero data exposure, no third-party cloud processing, and full compliance with Salesforce security standards. Our customers are among the most demanding in the world: Fortune 500 enterprises in regulated industries (financial services, healthcare, government, life sciences) who require SOX compliance, zero-trust architecture, and audit-grade governance. We compete against Copado, Gearset, AutoRABIT, and Salto, and we win because our native architecture delivers security, speed, and extensibility that external tools simply cannot match. We recently integrated Salesforce Agentforce into our platform, making Flosum the first and only Salesforce-native AI DevOps solution. This is just the beginning of what we plan to build. What You Will Own Product Vision & Strategy Define and drive the multi-year product roadmap across Flosum's five product lines: DevOps, Backup & Archive, Trust Center, Data Seeding, and DevOps for Veeva. Identify whitespace opportunities in the Salesforce ecosystem where Flosum can create new categories or capture market share from competitors. Translate deep Salesforce platform knowledge (metadata architecture, deployment models, Agentforce, Data Cloud, multi-org environments) into product capabilities that enterprise customers will pay premium prices for. Stay ahead of Salesforce's own product direction (three releases per year) and position Flosum to capitalize on every platform shift. AI & Innovation Lead the next wave of AI-powered DevOps capabilities built on Agentforce, including intelligent deployment agents, AI-driven code review, automated security scanning, and predictive release management. Define how Flosum's extensibility platform enables customers to build custom AI-driven workflows within Salesforce's trust boundary. Pioneer agent-aware governance: preparing Salesforce governance frameworks for autonomous systems and AI agents. Customer & Market Insight Engage directly with Fortune 500 customers and prospects to deeply understand their pain points around Salesforce development, security, compliance, and data management. Translate complex enterprise requirements (SOX, zero-trust, multi-org, regulated industries) into elegant product solutions. Partner with Sales and Customer Success to influence deal strategy, conduct product demos for strategic accounts, and close competitive evaluations. Execution & Delivery Write detailed product requirements, user stories, and acceptance criteria. You do the work, not just delegate it. Partner with engineering to deliver on aggressive timelines. Own sprint planning, backlog prioritization, and release coordination. Define and track product KPIs: adoption, activation, expansion, NPS, competitive win rates. Requirements Who You Are We are looking for a missionary, not a mercenary. Someone who takes genuine ownership of outcomes, thinks independently, and is driven by a need to build something that matters, not just advance their career. 7+ years of product management experience in B2B SaaS, with at least 3 years focused on the Salesforce ecosystem or Salesforce-adjacent platforms. Deep technical understanding of the Salesforce platform: metadata-driven architecture, deployment pipelines, sandboxes, packaging, security models, Apex, Lightning, and the ISV partner ecosystem. Proven track record of shipping products that enterprise customers (Fortune 500, regulated industries) adopted and paid for. Not features; products. Experience with DevOps, CI/CD, release management, or security/compliance tooling is strongly preferred. You understand the competitive landscape: Copado, Gearset, AutoRABIT, Salto, and native Salesforce DX. You know where each is strong and where they are vulnerable. Strong perspective on how AI/ML (especially Salesforce Agentforce, Einstein, Data Cloud) will reshape the Salesforce development and governance landscape. Hands-on executor. You write PRDs, you talk to customers, you review wireframes, you sit in sprint reviews. You do not manage from a distance. Exceptional communication skills. You can present a product vision to a C-suite audience and write a technical specification for an engineering team in the same day. Intellectual curiosity and a bias toward action. When you see a problem, you solve it. When you don't know something, you go learn it. What Will Make You Exceptional in This Role You have experience building products in the Salesforce AppExchange ecosystem, ideally as an ISV or within a Salesforce-native product company. You have worked at the intersection of DevOps and security/compliance in regulated industries. You have led product-led growth initiatives within an enterprise product, designing self-serve onboarding, in-product conversion, and expansion mechanics. You have a point of view on the future of AI in Salesforce DevOps and can articulate a 3-year vision for how autonomous agents will change how enterprises build on Salesforce. You have experience going head-to-head against well-funded competitors and winning through product superiority rather than just marketing spend. What We Expect in the First 12 Months First 90 Days: Learn and Diagnose Achieve deep fluency in Flosum's five product lines and their technical architecture. Conduct 25+ customer and prospect interviews to build a firsthand understanding of enterprise pain points. Complete a competitive audit with specific, actionable recommendations on where Flosum should invest to win. Deliver your first product roadmap refresh with clear prioritization rationale. Months 3-6: Ship and Win Own and deliver at least one major product release that directly addresses a competitive gap or customer-requested capability. Establish a product-led feedback loop between Sales, CS, and Engineering that accelerates deal velocity and reduces churn. Define the next generation of Flosum's AI capabilities and present a detailed execution plan. Months 6-12: Scale and Lead Drive measurable improvement in competitive win rates against Copado and Gearset. Launch at least one net-new product capability that opens a new revenue stream or market segment. Establish Flosum as a thought leader in AI-driven Salesforce DevOps through content, speaking, and ecosystem engagement. Benefits Why Flosum Category-defining opportunity: You will shape the future of how enterprises build on Salesforce. This is not incremental; it is transformational. Direct CEO partnership: You will work shoulder-to-shoulder with a founder who is deeply technical, product-obsessed, and committed to building the best platform in the Salesforce ecosystem. Fortune 100 customer base: Your product decisions will directly impact how the world's largest and most complex organizations operate. AI inflection point: Agentforce and autonomous agents are rewriting the rules. Flosum is the first native platform to integrate these capabilities. You will define what comes next. Missionary culture: We hire people who want to make a dent, not pad a resume. If you are looking for a place where your work matters and your ideas are heard, this is it. Compensation & Benefits Competitive base salary + performance bonus Equity participation Comprehensive benefits (health, dental, vision, 401k) Hybrid flexibility (San Ramon, CA HQ) or remote for exceptional candidates Direct access to Salesforce ecosystem events, conferences (Dreamforce, TrailblazerDX), and customer engagements If you live in San Ramon, CA this can be a Hybrid position, but we're open to fully remote in other locations.

Location: China Workplace: OnSite ABOUT HUMAN ARCHIVE Human Archive is a research lab backed by Y Combinator focused on modeling human embodied intelligence. Humans are the most sophisticated biological systems we have ever observed, yet we still do not fully understand ourselves. Research into human physical intelligence — including the human hand, proprioception, and vision — remains largely unsolved. Our mission is to recover human embodied intelligence as a learned model. To achieve this, we build custom hardware products, deploy them globally at scale, and publish research. Today, our data is used for robotics and world modeling, but the broader opportunity is advancing scientific research into intelligence itself. Founded by Stanford and UC Berkeley researchers, we are lean, deeply technical, and operate at extreme speed, taking on unglamorous and conventionally impossible problems that directly unlock step-function gains in model capability. The deployment of capable humanoids at scale will permanently redefine human labor. Undesirable physical work will disappear, and human effort will shift toward a new era of abundant creativity. We are building the infrastructure to accelerate that transition by assembling the Human Archive mafia. You will own meaningful systems from day one and see your work directly impact model capabilities. This is a once-in-a-generation inflection point. If you want to help reshape physical labor and work on problems that matter at civilizational scale, join us. What you'll work on We're hiring an electrical engineer to lead PCB and power systems for our wearable capture hardware. Dense, high-speed, mixed-signal work in tight wearable form factors. Compute module integration - Custom carrier boards for ARM compute modules - Breakout and routing of high-speed interfaces from compact modules to custom peripherals - Bring-up coordination with firmware High-speed PCB design - End-to-end ownership of rigid-flex and high-density boards - High-bandwidth interfaces (MIPI CSI-2, SerDes, USB 3.x, PCIe, UFS) - EMI, crosstalk, and impedance control in space-constrained designs Power architecture and battery systems - Power Delivery Networks for double-digit-watt wearable loads - Battery management for field-swappable cell architectures - Fuel gauging and runtime estimation - Transient load behavior and power sequencing Sensor and peripheral integration - Multi-camera array electrical integration - Inertial, magnetic, acoustic, and environmental sensor wiring - Low-noise analog rails and shared precision clock distribution Bring-up, debugging, and validation - Board bring-up alongside firmware - Signal integrity, power integrity, and timing diagnosis - EMC pre-scans and compliance support Required technical experience - Strong PCB design in Altium, Cadence Allegro, or KiCad - High-speed digital design: differential pair routing, impedance control, stack-up - SI/PI simulation and validation - Compute module / SoM carrier board experience - Lab debugging instincts (scope, logic analyzer, network analyzer) Strong plus - Multi-camera array design (3+ concurrent cameras) - High-speed SerDes routing - ARM SoC carrier work (Qualcomm, NXP, or similar) - Wearable / body-worn product background - Hot-swap power design - FCC / CE / RoHS compliance and DFM handoff experience About this role You own electrical design end-to-end — schematic through bring-up through production-ready DFM. The interface stack is broad, the form factor is tight, and the boards you design end up on real users. Mistakes show up in the field within weeks. You'll iterate fast.

Location: East Coast - United States Workplace: remote About Zingtree Zingtree is the next-generation intelligent process automation platform reimagining customer experience operations for the world’s top support leaders. With 500+ customers, including Optum, Corpay, Sony, SharkNinja, and Allianz, we transform self-service, surface automation opportunities, and turn every agent into an expert. The Role We’re hiring a Senior DevOps / Platform Reliability Engineer to own the platform that powers our agentic CX product. You’ll build the CI/CD, infrastructure, and observability backbone that enables us to ship multi-agent systems safely to enterprise customers. If you want to operate a production AI platform and use AI to help operate it, this role is for you. In this role, you will collaborate with development, operations, and infrastructure teams to automate and streamline processes, build and maintain tools for deployment, monitoring, and operations, and troubleshoot issues across development and production environments. What You'll Do Own and evolve CI/CD pipelines using GitHub Actions and OIDC-based authentication for microservices and agentic workloads, with safe, fast, and reversible deployments. Automate infrastructure provisioning using Infrastructure as Code (IaC) tools such as Terraform and CloudFormation. Operate and scale our Kubernetes platform (EKS + Argo CD), including autoscaling, ingress, external-dns, cert-manager, External Secrets Operator, backups, runtime guardrails, and multi-tenant isolation for enterprise customers. Manage the edge and network perimeter, including Cloudflare (CDN, WAF, Bot Management, DDoS protection, Zero Trust / Access), CloudFront, API Gateway, ALB/NLB, Route 53, and network security controls. Operate the data and event tier, including Aurora MySQL, ElastiCache/Redis, S3, and MSK (Kafka), with responsibility for backups, point-in-time recovery (PITR), and multi-AZ disaster recovery aligned to defined RTO/RPO objectives. Build and maintain Lambda workloads where event-driven or serverless architectures are the right fit. Build observability as a product using Prometheus, Grafana, and OpenTelemetry, including telemetry for LLM and agentic systems such as token cost, tool-call latency, evaluation signals, and prompt/version tracking. Strengthen our security and compliance posture for SOC 2 and HIPAA, including least-privilege IAM, SCPs, secrets management, SAST/DAST, dependency and container scanning, image signing, AWS Config, Security Hub, GuardDuty, Inspector, and evidence automation. Drive FinOps initiatives, including tagging standards, Savings Plans and Reserved Instances, per-tenant and per-workload cost attribution, and LLM cost controls. Build and evolve our AI-native DevOps capabilities (see section below). Partner with engineering teams to define platform standards, service templates, deployment best practices, and operational SLOs. Monitor system performance and ensure reliability, scalability, and security across infrastructure and services. Collaborate with software engineering teams to support continuous integration and continuous delivery best practices. Document infrastructure, deployment processes, and operational standards to support knowledge sharing across the team. Agentic AI in DevOps You’ll help define how Zingtree uses agentic AI to operate and improve our platform using modern AI operational practices. Responsibilities include: Design and operate auto-remediation agents for common production toil such as certificate rotation, noisy pods, infrastructure drift, and flaky CI pipelines, with human-in-the-loop (HITL) controls for any destructive or customer-impacting actions. Use LLMs for incident triage and root cause analysis, including log and trace summarization, signal correlation, and first-draft postmortems that are always reviewed by humans. Connect AI agents to internal systems through the Model Context Protocol (MCP), including GitHub, Jira, PagerDuty, AWS, Kubernetes, Terraform, and related platforms, using scoped credentials, audit logging, and allow-listed access. Apply AI-driven observability techniques, including anomaly detection on metrics, LLM-based log clustering, and alert deduplication and summarization on top of Prometheus and OpenTelemetry. Establish operational guardrails such as prompt/version pinning, evaluation frameworks for agent behavior, cost and rate-limit controls, policy-as-code (OPA/Conftest) for AI-generated infrastructure changes, and clearly defined blast-radius controls. Define best practices for AI coding assistants such as GitHub Copilot, Claude, and Amazon Q in infrastructure repositories, including review workflows, prompt design, and restrictions on auto-merged changes. Treat AI components as production systems with SLOs, observability, on-call readiness, runbooks, and rollback strategies for agents and prompts. About You Required Qualifications 5+ years of experience in DevOps, SRE, or Platform Engineering operating production systems on AWS. Strong experience with CI/CD pipelines and tools such as GitHub Actions, GitLab CI, Jenkins, or CircleCI. Hands-on experience operating production EKS environments, including autoscaling, ingress, secrets management, and cluster upgrades. Strong AWS networking experience, including multi-account VPC design, subnets, routing, security groups, NACLs, Route 53, ACM, and load balancers. Deep experience with Terraform and GitHub Actions, ideally using OIDC-based cloud authentication. Experience with Aurora/RDS MySQL, Redis (ElastiCache), and S3, including backups, PITR, migrations, and lifecycle management. Strong observability experience using Prometheus, Grafana, and OpenTelemetry. Experience operating Argo CD at scale. Experience with Infrastructure as Code tools such as Terraform, CloudFormation, or Ansible. Experience managing Cloudflare services including WAF, Bot Management, Rate Limiting, and Zero Trust / Access, along with CloudFront. Experience operating Kafka/MSK at scale, including topics, consumer groups, and schema registries. Experience with Lambda and event-driven architectures. Comfortable working with Python, Bash, and Linux systems. Strong understanding of security best practices across IAM, KMS, secrets management, networking, and software supply chain security. Familiarity with vulnerability scanning and compliance tooling. Nice to Have Experience operating LLM or ML workloads in production, including LiteLLM, Bedrock, pgvector, prompt caching, or evaluation systems. Experience building or integrating MCP servers or deploying agent frameworks such as LangGraph or CrewAI in production environments. How We Work We bias toward automation over toil. If you do it twice, script it. If it pages twice, fix it. We’re a small team with high ownership. You’ll help define standards, not just follow them. Humans stay in the loop for anything risky. AI accelerates decision-making but does not replace judgment. We value blameless incident reviews, documented decisions, and fast feedback loops. What We Offer Competitive compensation packages Comprehensive health benefits: 100% of employee premiums covered 75%–80% of dependent premiums covered for most health, dental, and vision plans 401(k) plans to support retirement planning (no employer matching currently) Paid parental leave Unlimited PTO Flexible remote work from anywhere Up to $200/month co-working reimbursement Home office stipend: Up to $500 for home office setup $100/month for internet, phone, and related expenses Zingtree Values Lead with Action We are doers. We move quickly with purpose, take smart risks, learn fast, and focus on outcomes that benefit our customers and the business. People Really Matter We win as a team. We care deeply about our customers and employees, helping each other achieve professional growth and meaningful impact. Ownership Leads to Results When we commit, we deliver. We operate with integrity, accountability, and high standards. Expertise Creates Value We are learners. We continuously grow our knowledge, share expertise, and apply it to create meaningful results. Transparency Builds Trust We communicate openly, honestly, and respectfully. We share information that matters and build trusted relationships through clarity and empathy.

Location: London; Sofia About Us The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy, with a mission to deliver quality information and services worldwide. At the FT, curiosity thrives and ambitious thinking is rewarded. Here, you’re given the chance to reach millions, create work that matters and deliver impartial journalism in a polarised world. In our warm, collaborative culture, you’ll connect with a diverse community of experts who support your growth, career aspirations and wellbeing. Your future at the FT will be filled with opportunities that challenge and inspire you. With no fixed path, you’ll discover new skills and forge a career that can take you anywhere. Build a newsworthy career at the FT. Our Commitment to Diversity, Equity and Inclusion We believe in the power of unique perspectives and want all voices in our organisation to be heard, respected and valued. A supportive workplace is one where employees feel they can be themselves and operate to their full potential. We are committed to removing barriers for everyone, with a focus on addressing those faced by underrepresented groups. The Role Overview We’re looking for a Cyber Security Engineer to help improve application security across the FT’s cloud-native technology estate. This is a hands-on role focused on making secure engineering easier for product, platform and software engineering teams. Application security experience is essential for this role. You’ll help improve developer-friendly security guardrails across GitHub-based CI/CD pipelines, application repositories and engineering workflows. This includes working with SAST, software composition analysis, secret scanning, vulnerability management and secure coding guidance so that security findings are clear, actionable and owned by the right teams. You’ll work closely with engineers to support practical threat modelling, triage application vulnerabilities, improve security playbooks and help teams remediate issues in a pragmatic way. You do not need to be a deep AWS or cloud security specialist, but some exposure to AWS, cloud security or infrastructure-as-code security would be useful. We’re looking for someone with practical AppSec experience who wants to grow their impact - someone who enjoys working with engineers, improving tooling and helping security become part of normal delivery rather than a last-minute checkpoint. What you’ll bring to the role Application security experience: practical experience identifying, explaining and helping remediate application security risks in modern engineering environments. Developer-friendly security mindset: you enjoy working with engineers, explaining risks clearly and helping teams adopt secure practices without unnecessary friction. Vulnerability management experience: experience triaging and tracking application vulnerabilities from sources such as SAST, dependency scanning, secret scanning, penetration tests, bug bounty reports or third-party advisories. CI/CD and code security awareness: familiarity with security tooling in development workflows, such as SAST, software composition analysis, secret scanning or repository security controls. Threat modelling awareness: experience participating in, supporting or facilitating lightweight threat-modelling sessions for applications, services or new features. Automation mindset: ability to write scripts or small tools, ideally in Python, to reduce manual effort, improve visibility or make security workflows easier. Cloud security awareness: Some exposure to AWS, cloud security or infrastructure-as-code security would be useful, but is not essential. Growth mindset: willingness to keep developing across application security, cloud security, secure development and modern engineering practices. Required Experience, Essential Practical experience in application security. Experience working with software engineers to explain and remediate security issues. Familiarity with common web application security risks and secure coding practices. Experience with vulnerability triage, prioritisation and remediation tracking. Experience using or interpreting findings from tools such as SAST, software composition analysis, secret scanning or similar. Experience participating in or supporting threat-modelling activities. Ability to write scripts or small tools, ideally in Python, to automate tasks or improve visibility. Strong communication and collaboration skills. Familiarity with Agile or Scrum ways of working. Desirable Exposure to AWS security, cloud security or infrastructure-as-code security. Experience with Terraform or CloudFormation. Experience with container or Kubernetes security. Experience with bug bounty, penetration testing or security testing programmes. Experience with Splunk or similar logging/SIEM platforms. Exposure to AI security, such as LLM-enabled applications, AI-assisted development workflows or prompt/data leakage risks. Experience building dashboards, metrics or reports to support vulnerability management. Relevant security certifications or training, such as AWS security training, secure coding training, GIAC, ISC2, CREST or equivalent practical experience. What’s in it for you? Our benefits Our benefits vary by location but we are committed to providing best-in-class perks across all our offices. These include generous annual leave, medical cover, inclusive parental leave packages, subsidised gym memberships and opportunities to give back to the community. Full details of our benefits are available here. We currently operate a hybrid model which requires staff to work onsite 50% of the time, subject to role requirements & regular review. While flexible working requests will be considered, not all patterns are suitable for all roles. We believe this balanced approach supports flexibility and protects our culture, making collaboration and communication easier, building stronger relationships and team cohesion, and supporting peer learning.  We reserve discretion on reasonable notice to change this approach either generally or for specific individuals or teams. Accessibility We are a disability confident employer and Valuable 500 signatory. Please let us know if you require any reasonable adjustments/personalisation as part of the application process or to enable you to attend an interview. If you would like to discuss your requirements or have any questions, email talent@ft.com and a member of our team will be happy to help. Further information At the FT, we embrace innovation and the use of technology and appreciate that individuals may leverage AI tools as part of their job application process. Whilst we are happy for you to use AI to assist with your application, it is essential that all information provided is authentic and accurately represents your skills, experience, and qualifications. Candidates should be aware that the use of AI throughout the application process may be monitored to ensure a fair and transparent hiring process for all.

Location: London; Sofia About Us The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy, with a mission to deliver quality information and services worldwide. At the FT, curiosity thrives and ambitious thinking is rewarded. Here, you’re given the chance to reach millions, create work that matters and deliver impartial journalism in a polarised world. In our warm, collaborative culture, you’ll connect with a diverse community of experts who support your growth, career aspirations and wellbeing Your future at the FT will be filled with opportunities that challenge and inspire you. With no fixed path, you’ll discover new skills and forge a career that can take you anywhere. Build a newsworthy career at the FT. Our Commitment to Diversity, Equity and Inclusion We believe in the power of unique perspectives and want all voices in our organisation to be heard, respected and valued. A supportive workplace is one where employees feel they can be themselves and operate to their full potential. We are committed to removing barriers for everyone, with a focus on addressing those faced by underrepresented groups. The Role Overview We’re looking for a Senior Cyber Security Engineer to help mature application and cloud security across the FT’s cloud-native, AWS-hosted technology estate. This role has an approximate 50/50 focus across application security and cloud security, working closely with product, platform and engineering teams to make secure delivery easier by default. You’ll shape and improve developer-friendly guardrails across GitHub-based CI/CD pipelines, AWS environments and infrastructure-as-code workflows. This includes improving SAST, software composition analysis, secret scanning, IaC scanning, vulnerability management and AWS misconfiguration management so that findings are actionable, low-noise and owned by the right teams. Day to day, you’ll run practical threat-modelling sessions, review application and cloud designs, improve security playbooks, support vulnerability and misconfiguration remediation, and build automation that reduces toil. We’re looking for someone who has demonstrably improved security outcomes in real engineering environments, not just someone with theoretical knowledge of tools or frameworks. Depending on team structure, you may also mentor or line-manage one or two security engineers, while remaining hands-on and close to the technical work. What you’ll bring to the role Application and cloud security experience: practical experience across both application security and cloud security, ideally in AWS-hosted, cloud-native environments. Developer-friendly security mindset: you know how to work with engineers, explain risk clearly and design controls that help teams move securely without unnecessary friction. Vulnerability management at scale: experience improving how application vulnerabilities, dependency risks, bug bounty findings, penetration test findings and advisories are identified, prioritised, owned and remediated across engineering teams. Cloud misconfiguration & vulnerability management: experience identifying and reducing infrastructure-as-code and AWS vulnerabilities & misconfigurations at scale through pragmatic guardrails, tooling and clear remediation paths. Threat modelling: confidence running lightweight, practical threat-modelling sessions that lead to useful engineering decisions and risk reduction. CI/CD and code security: hands-on experience with security tooling such as SAST, software composition analysis, secret scanning and IaC scanning. Automation mindset: ability to write scripts or small tools, ideally in Python, to reduce toil, improve visibility and surface meaningful risk. Security leadership: ability to mentor other security engineers and influence engineers across the wider organisation. Depending on team structure, this may include line management. AI security awareness: experience of leveraging AI to improve and scale appsec and cloud sec controls would be useful, but is not essential. Key Responsibilities Improve application security guardrails Tune and evolve SAST, software composition analysis, secret scanning and related controls so they are actionable, low-noise and useful to engineering teams. Improve cloud and IaC security guardrails Help identify, prioritise and reduce AWS and infrastructure-as-code misconfigurations and vulnerabilities at scale. Drive vulnerability management Improve how application vulnerabilities, dependency risks, bug bounty findings, penetration test findings and third-party advisories are triaged, prioritised and remediated. Drive cloud misconfiguration management Help teams understand, own and remediate cloud security issues using pragmatic, developer-friendly workflows. Run practical threat modelling Facilitate lightweight threat-modelling sessions for new products, features, services and architectural changes. Build automation and tooling Create or improve scripts, integrations, dashboards and workflows that reduce manual effort and make risk easier to understand. Support secure architecture decisions Provide application and cloud security input into design reviews, AWS architecture decisions and larger technical changes. Partner with engineering teams Work closely with product, platform and software engineering teams to embed security into design, delivery and operational practices. Support incidents and lessons learned Provide application and cloud security expertise during incidents and feed lessons learned back into patterns, tooling and guidance. Mentor others Coach security engineers and engineering teams on practical security approaches. Depending on team structure, this may include line management of one or two security engineers. Required Experience, Essential: Strong practical experience in application security and cloud security, ideally with a balanced focus across both. Hands-on AWS security experience, including common misconfiguration patterns and practical remediation approaches. Experience improving vulnerability management across engineering teams, including prioritisation, ownership, remediation tracking and noise reduction. Experience in improving cloud or IaC misconfiguration management at scale in a developer-friendly way. Experience integrating, tuning or improving security tooling in CI/CD workflows, such as SAST, software composition analysis, secret scanning or IaC scanning. Experience running practical threat-modelling sessions that influence design, delivery or remediation decisions. Ability to write scripts or small tools, ideally in Python, to automate security workflows or improve visibility. Strong communication and collaboration skills, with the ability to influence engineers and technical leaders without relying on gatekeeping. Evidence of improving application security, cloud security or vulnerability management practices in a real engineering environment. Familiarity with Agile or Scrum ways of working. Desirable Experience with leveraging AI for AppSec and CloudSec. AWS Certified Security – Speciality or equivalent practical AWS security experience. Terraform or CloudFormation expertise. Incident-management or incident-response experience. Experience with Splunk or similar logging/SIEM platforms. Experience with security metrics, dashboards or reporting that helped drive measurable risk reduction. Experience mentoring or line-managing security engineers. What’s in it for You? Our benefits vary by location but we are committed to providing best-in-class perks across all our offices. These include generous annual leave, medical cover, inclusive parental leave packages, subsidised gym memberships and opportunities to give back to the community. Full details of our benefits are available here . We currently operate a hybrid model which requires staff to work onsite 50% of the time, subject to role requirements & regular review. While flexible working requests will be considered, not all patterns are suitable for all roles. We believe this balanced approach supports flexibility and protects our culture, making collaboration and communication easier, building stronger relationships and team cohesion, and supporting peer learning.  We reserve discretion on reasonable notice to change this approach either generally or for specific individuals or teams. Accessibility We are a disability confident employer and Valuable 500 signatory. Please let us know if you require any reasonable adjustments/personalisation as part of the application process or to enable you to attend an interview. If you would like to discuss your requirements or have any questions, email talent@ft.com and a member of our team will be happy to help. Further information At the FT, we embrace innovation and the use of technology and appreciate that individuals may leverage AI tools as part of their job application process. Whilst we are happy for you to use AI to assist with your application, it is essential that all information provided is authentic and accurately represents your skills, experience, and qualifications. Candidates should be aware that the use of AI throughout the application process may be monitored to ensure a fair and transparent hiring process for all.

Location: Remote Workplace: Remote WHO WE ARE Hi, we're DuckDuckGo, the online protection company and remote-first team of 400+ on a mission to raise the standard of trust online. Founded in 2008 and profitable since 2014, our annual revenue is in the hundreds of millions USD and millions use our browser on Mac https://spreadprivacy.com/introducing-duckduckgo-for-mac/, Windows https://spreadprivacy.com/windows-browser-open-beta/, iOS https://spreadprivacy.com/duckduckgo-privacy-browser-ios14/, and Android https://spreadprivacy.com/introducing-app-tracking-protection/, our search engine https://duckduckgo.com/, and the DuckDuckGo subscription https://duckduckgo.com/pro. We also offer private, useful, and optional AI, including Duck.ai https://duck.ai/, which lets you chat privately with ChatGPT, Claude, and other AIs, all in one place.   Our culture https://duckduckgo.com/how-we-work of trust, inclusivity, and empowered project management underpins everything we do, where each team member takes full ownership of their projects, from scoping and execution to postmortem. If you're seeking end-to-end ownership of your work, you've come to the right place! YOUR TEAM AND ROLE Working on the Security Functional Team, you'll play a pivotal role in ensuring our security capabilities keep pace with our rapid product development, including our expanding AI offerings like Duck.ai and agentic browsing, directly protecting our users across all our products. You'll also maintain incident detection and response capabilities for the company, and work on related projects. Recent projects include: - SERP security mitigations - Agentic browsing security mitigations - Agentic browser hardening - Browser and sync security audits As a Senior Security Engineer, App Sec, you'll execute on SERP security mitigations (XSS prevention, tooling development to help engineers write safer code), manage application security scanning infrastructure setup, build and maintain harnesses that get security fixes out automatically, harden our agentic browsing and DuckAI experiences against emerging threats (like prompt injection), conduct browser and sync security audits (special pages, DuckAI integrations, password manager, etc.), deliver on internal red-team operations (simulated attack scenarios), support security triage, and more! ABOUT YOU - 7+ years of experience in web or application security (performing security assessments, vulnerability research, penetration testing, or secure code review) - Recent experience creating security focused agentic harnesses - Experience influencing large feature designs to have security baked in from the start - Advanced programming or scripting experience with JavaScript. Any additional experience with our stack is a bonus: Swift/Kotlin/C#/JavaScript (native apps) or JavaScript/Perl/Go (search). - An understanding of the web security model (such as the Same Origin Policy); experience with CSP, CORS, SameSite cookies, sec-fetch-*, CORB, CORP, Sanitizer API, and Trusted Types is beneficial - Hands-on experience identifying and exploiting web vulnerabilities (XSS, CSRF, injection attacks, authorization flaws, etc.) - Familiarity with security testing tools and frameworks - Experience partnering and collaborating with Product Engineers, advising on security matters and helping teams ship secure code faster - Experience shaping how an organisation thinks about security - driving best practices, improving processes, and raising the bar across teams COMPENSATION Compensation is transparent across the organization, and all team members within the same professional level and global region receive the same compensation, plus stock options: - United States: $190,500 USD - United Kingdom: £134,600 GBP - Canada: CA$253,500 CAD - All other regions*: €157,350 EUR   *Team members outside the US, UK and Canada are currently paid $178,500 USD. Pay converts to the EUR amount above on January 1, 2027 for Spanish team members, and approximately February 1, 2027 in all other regions.   Eligibility for company-sponsored health benefits is limited to team members based in the United States. This program does not extend to team members located in other countries, such as Canada or the UK.   Our Team Member Support Guide https://duckduckgo.com/assets/hiring/team_support_guide.pdf explains how we prioritize your wellbeing including paid parental leave, office setup, and co-working allowances. HIRING PROCESS Hiring works best when it's a two-way street. Learn how we help you get to know DuckDuckGo, envision your future role here, and find out more about how we hire https://duckduckgo.com/how-we-hire. DIVERSITY, EQUITY AND INCLUSION DuckDuckGo provides equal work opportunities to all team members and applicants, and it prohibits discrimination and harassment of any type on the basis of race, color, ethnicity, caste, religion, age, sex (including pregnancy), national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by our policies or federal, state, or local laws. We want to ensure that our hiring process is accessible. If you need reasonable accommodation for any part of the application process because of a medical condition or disability, please send an email to careers@duckduckgo.com to let us know the nature of your request. PLEASE NOTE THAT: - You’ll be required to attend meetings on camera via video conferencing - Expect to travel at least two times a year: once for our all-hands meetup and again for a team retreat (each around 4-5 days). While extenuating circumstances may impact attendance, everyone is strongly encouraged to attend. - While we offer a flexible work arrangement with no core hours, expect an average full-time commitment of 40 hours per week. - A successful candidate must pass a background check as a condition of joining the team. - By applying for this role, you confirm that all information submitted is accurate and complete. You further acknowledge that providing false or fraudulent information during the application process is cause for denial of an offer, revocation of any existing offer, or other adverse action, up to and including termination after the start of your commencement of work. Disclosure Statement: Use of AI in Hiring Process As part of our commitment to enhancing our recruitment process, we utilize artificial intelligence (AI) technology to assist in reviewing and summarizing job applications and test projects, including those tools integrated into our recruitment vendor platforms. We use AI to flag potentially fraudulent applications, analyze and summarize applicants’ experience, interviews, and project performance, and help streamline our selection process. Key Principles: - Data Privacy: All information provided in your application will be handled in accordance with our Recruiting Privacy Policy https://duckduckgo.com/static-assets/files/pages/careers/DuckDuckGo-Recruiting-Privacy-Policy-effective-September-30-2025.pdf. We ensure that your personal information is protected and used solely for recruitment purposes. - Human Oversight and Accountability: The AI technology is designed to support our hiring team by providing insights and summaries of applications and evaluations of test projects against scoring rubrics. All final evaluations and hiring decisions, however, will be made by our hiring team, who will consider the AI's input alongside other factors. - Transparency: We believe in transparency regarding our hiring practices. If you have any questions about how AI is used in our recruitment process, please feel free to reach out to us. By submitting your application, you acknowledge and consent to the use of AI technology in our review process. If you would like to request an alternative selection process, please contact us at careers@duckduckgo.com. Thank you for your interest in joining DuckDuckGo! #LI-DNI

Location: Al Jubail, Saudi Arabia Eram Talent is currently seeking a proficient Document Controller for a key position based in Saudi Arabia. The Document Controller will be responsible for managing and maintaining all project documentation to ensure accuracy, availability, and compliance with company and industry standards. This role is crucial to support effective information flow and efficient project execution. The successful candidate will collaborate with project teams and stakeholders to organize, track, and control documents, ensuring that all records are up-to-date and accessible when needed. This position offers an excellent opportunity for professionals seeking to work in a dynamic environment within the energy, construction, or engineering sectors. Responsibility Implement & maintain document control processes and procedures. Develop and maintain the Document Management System. Manage all flows of documents either in electronic form or paper support. Make sure Document Management accordingly has established procedures or standards (document numberings, formats, issuance, review, dispatch, recording & archiving). Process incoming & outgoing documentation (registration in the DMS, internal distribution, archiving, transmit to clients & suppliers) Ensure control and coordination of maintenance activities documentation and data. Make sure all drawings/documentations are correctly identified, distributed and filed/stored. Perform general document control activities such as photocopying, scanning, analysis of suppliers document compliance with maintenance/projects standards regarding numbering and all other aspects related to document quality. Monitors technical documents review and approval in accordance with agreed schedule. Establish and maintain the Master Document Register in cooperation with the field maintenance team. Requirements Graduate of at least 4-year degree course in any field. 10 + years Document controller or Document Administration role Good oral and written English communications. He must possess the ability to multitask, and priorities tasks related to documents.

Location: Baku Workplace: onsite ABOUT YOU We are looking for a senior application security specialist to join a growing security team at Xsolla. This is a hands-on role where you will own security initiatives end-to-end - identifying, assessing, and driving remediation of security vulnerabilities across our products and infrastructure. You will lead day-to-day AppSec work - deep code reviews, vulnerability triage, threat modeling, and security testing - and set the standards for how this work is done. You are rigorous, pragmatic, and able to balance security risk against business velocity in a payment platform operating at scale. You will also mentor junior specialists and help raise the security bar across engineering teams. ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Own Vulnerability Management - Lead triage of bug bounty reports and scanner findings. Set severity standards, drive escalation policy, and ensure remediation SLAs are met across teams. Lead Security Assessments - Plan and conduct in-depth security assessments and penetration tests of web applications, APIs, and services. Define assessment scope and methodology. Drive Threat Modeling - Facilitate threat modeling sessions with engineering teams. Identify trust boundaries, data flows, and attack surfaces early in the design phase, and embed the practice into the SDLC . Own AppSec Tooling Strategy - Select, operate, and tune SAST , DAST , SCA , and secrets-scanning tooling. Design noise-reduction and auto-triage workflows; integrate security gates into CI/CD. Lead Secure Code Reviews - Perform security-focused code reviews across PHP, Python, and Go codebases. Define secure coding guidelines and review checklists for engineering teams. Mentor and Educate - Coach junior security specialists, run internal security training, and champion security awareness among developers. Write Clear Security Documentation - Document findings, reproduction steps, and remediation guidance in a way engineering teams can act on. Set the documentation standard for the team. What You Bring 4+ years in application security or a closely related security engineering role, with demonstrable ownership of AppSec programs or major initiatives. Deep Web Security Expertise - Expert-level understanding of vulnerability classes ( OWASP Top 10 and well beyond: SSRF , deserialization, request smuggling, OAuth/ OIDC flaws, business logic abuse). You understand root causes, exploitation chains, and realistic impact in production systems. Offensive Testing Proficiency - Extensive hands-on experience with Burp Suite and manual testing methodology. You can find vulnerabilities that scanners miss and chain low-severity issues into meaningful impact. Code Fluency - Comfortable reading and auditing code in at least one of: PHP, Python, Go, JavaScript. Able to trace data flows across services and spot vulnerable patterns without runtime access. Secure SDLC Experience - Practical experience embedding security into development workflows: security requirements, design review, CI/CD security gates, and developer enablement. Risk Communication - You can calculate and defend real severity, push back on inflated findings, and explain risk to both engineers and leadership in their own language. Analytical Thinking - You reason through problems methodically and can explain not just what a vulnerability is, but why it exists, how it is exploited, and what fixing it actually requires. Ownership and Follow-Through - You drive findings to resolution across team boundaries without being asked. Nice to Have Track record in bug bounty programs (accepted reports on major platforms) or notable CTF results; Strong automation skills - Python or Go for building internal security tooling; Experience securing cloud-native environments - GCP preferred; Kubernetes security a plus; Advanced certifications - OSWE , OSCP , BSCP , or GWAPT; Experience in payments, fintech, or other regulated environments ( PCI DSS familiarity); CVE credits, public security research, or conference talks. Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.