Вакансии

Location: United States & Canada Workplace: Remote About WorkOS 🚀 WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations. We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid. As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products. ABOUT THE SECURITY PLATFORM TEAM The Infrastructure Security team provides and supports the primitives that enable engineering to securely build applications and meet compliance obligations, while abstracting away the underlying complexity for the best possible developer experience. Our work centers on workload identity and authorization: how internal applications authenticate to each other and to the services they depend on, and how that access is granted and enforced. We're replacing static secrets with short-lived identity credentials, bringing identity-based authentication to the services engineers use every day, and unifying how authorization is managed across the company. We're a platform engineering team with a security mission. We measure success by the security outcomes we enable and by how much engineers enjoy building on what we ship — the secure path should be the easiest path. WHO WE'RE LOOKING FOR - A platform builder. You love building infrastructure that other engineers rely on every day, and you sweat the developer experience details that make adoption effortless. - Fluent in service-to-service auth. You know authentication and authorization deeply: JWTs, X.509 certificates, and when to reach for each. - A systems thinker. You reason carefully about bootstrapping, circular dependencies, availability, and failure modes, especially for infrastructure that everything else depends on. - A pragmatic migrator. You know that shipping the primitive is half the job. You can drive adoption across many teams, meet them where they are, and retire the legacy path. - A strong partner to engineering. You build trust with engineers by understanding their priorities and making security frictionless. - Excited about AI. You're embracing AI and automation to scale platform work and reduce toil. - Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you. RESPONSIBILITIES - Build workload identity infrastructure. Make short-lived identity credentials a default part of every application's runtime environment, in partnership with application platform owners. - Bring identity-based authentication to internal services. Work with the owners of major internal dependencies to support identity certificates, make them the golden path for newly onboarding applications, and drive migration of existing ones. - Eliminate static secrets. Replace all static passwords and service tokens with short-lived identity credentials, and build identity-authenticated egress proxies and API abstractions that inject and automatically rotate managed secrets for the external dependencies that still require them. - Unify authorization. Build a single interface and framework through which authorization policies are centrally managed and enforced. QUALIFICATIONS - 5+ years of experience in software engineering, with a focus on security-related platform, infrastructure, or distributed systems. - Strong working knowledge of secrets management, fine-grained authorization, and workload identity systems. - Familiarity with the Kubernetes ecosystem and authentication/authorization technologies such as JWTs, X.509 certificates, PKI, cert-manager, SPIFFE/SPIRE, and OPA. - Experience building and operating production infrastructure that other teams depend on, with attention to availability and failure modes. - Proven ability to drive cross-team adoption of platform capabilities or lead large-scale migrations. Benefits and Perks (US Only) 💖 At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.   - 401k matching - Competitive Equity - Healthcare, dental and vision coverage - FSA, ST/LT Disability, Voluntary Life - Carrot fertility benefits - 20 days paid vacation + 10 holidays + unlimited sick leave - 12 weeks fully paid parental leave - Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active - Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being - Commuter benefits for hybrid employees in SF/NYC - Unlimited token usage! Please inquire directly with our recruiting team for benefits available to those working outside the US.   Equal Opportunity Employer WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Location: United States & Canada Workplace: Remote About WorkOS 🚀 WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations. We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid. As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products. About the Security team The Security team at WorkOS is responsible for keeping the data and identities of hundreds of millions of users secure. Security is fundamental to our products, and customer trust is the foundation of our success. We are a highly collaborative group with a strong engineering mindset. Our security program is shaped by hands-on experience attacking and defending systems, and applying lessons from across the industry. We embrace the latest advancements in practices and tooling that make modern security teams effective. We are comfortable in code and collaborate often with engineering to create products that are secure by default. Who we’re looking for - Risk-focused and pragmatic. You excel at identifying and reasoning about security risk in real-world contexts. You prioritize ruthlessly, always asking: what's the most effective way to reduce risk right now and in the long term? - A builder who can break things. You're comfortable reading and writing code, and you have a passion for deeply understanding the products you secure. You think like an attacker to find subtle, high impact vulnerabilities and like a defender to design pragmatic, effective mitigations. - A strong partner to engineering. You build trust with engineers by understanding their priorities, making security frictionless, and finding ways to make the secure path, the easiest path. - Excited about AI. You're embracing AI and automation to scale security and reduce toil. - Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you. Responsibilities - Lead secure design efforts. Partner with engineering teams on secure design and code reviews. Identify and prioritize risks early in the product lifecycle. - Build secure by default systems. Develop paved paths that systemically reduce risk and make secure development the easiest path for engineers. - Perform offensive security testing. Conduct penetration tests and code audits on new and existing products from an adversarial lens. - Improve our security tooling. Integrate and improve our static analysis, supply chain security, and vulnerability management capabilities across engineering pipelines. - Operate our responsible disclosure program. Run and improve our program by furthering automation, validating submissions, and coordinating remediation. - Improve our products. Write and ship code to remediate vulnerabilities in production systems and improve the security posture of WorkOS products. - Work directly with customers. Help build our customers' trust by directly engaging with their security-related questions and concerns. Qualifications - 5+ years of experience in a security engineering or security-focused software engineering role. - Ability to execute across a wide range of security functions such as security assessments, penetration testing, responsible disclosure, security tooling integration, etc. - Familiarity with and experience using common industry tooling. - Proven ability to identify vulnerabilities in software, demonstrated through CVEs, bug bounty, blog posts, or prior work experience. - Strong written and verbal communication skills, particularly in partnering with engineering teams. - Comfortable reading and writing code, and able to effectively leverage AI during the process. - Bonus: Experience in the authentication and identity domain. - Bonus: Experience writing production level code, especially developing security features. Benefits and Perks (US Only) 💖 At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.   - 401k matching - Competitive Equity - Healthcare, dental and vision coverage - FSA, ST/LT Disability, Voluntary Life - Carrot fertility benefits - 20 days paid vacation + 10 holidays + unlimited sick leave - 12 weeks fully paid parental leave - Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active - Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being - Commuter benefits for hybrid employees in SF/NYC - Unlimited token usage! Please inquire directly with our recruiting team for benefits available to those working outside the US.   Equal Opportunity Employer WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Задачи: — Управление жизненным циклом уязвимостей в технологическом стеке Glean, включая обнаружение, приоритизацию, устранение, отчетность и измерение. — Усиление безопасности базовых образов ОС и обеспечение безопасности зависимостей открытого программного обеспечения, менеджеров пакетов и цепочки поставок ПО. — Интеграция SAST, DAST, сканирования зависимостей и автоматической проверки безопасности в CI/CD пайплайны. — Оценка, внедрение и разработка решений и инструментов безопасности, включая Google’s Assured OSS и аналогичные подходы. — Определение практик безопасного кодирования и продвижение их среди инженерных команд через руководство, обучение и наставничество. Требования: — Степень бакалавра в области компьютерных наук, кибербезопасности или смежной области, либо эквивалентный опыт. — Опыт работы в области безопасности приложений и управления уязвимостями не менее 8 лет. — Глубокое понимание уязвимостей программного обеспечения, включая CVE, OWASP Top 10 и риски цепочки поставок. — Опыт работы с инструментами SAST, DAST, сканирования зависимостей и управления уязвимостями (например, Snyk, GitHub Dependabot, Trivy, Clair, Burp Suite, OWASP ZAP). — Практический опыт облачной безопасности в AWS, GCP, включая контейнеры, Kubernetes и микросервисы. — Способность вести межфункциональные инициативы и продвигать безопасность среди инженерных команд. — Проактивность, прагматичность, умение решать проблемы и балансировать безопасность с производительностью и удобством использования. Условия: — Удаленная работа. — Годовой базовый оклад от $185,000 до $260,000, зависит от местоположения, уровня, знаний, навыков и опыта. — Возможность переменной компенсации, акций и социальных льгот. — Медицинское, офтальмологическое и стоматологическое страхование. — Щедрая политика отпусков. — Вклад в пенсионный план 401k. — Стипендия на улучшение домашнего офиса, ежегодные стипендии на образование и оздоровление. — Регулярные корпоративные мероприятия и ежедневные здоровые обеды. Дополнительно: — Компания поддерживает разнообразие и инклюзивность, не дискриминирует по различным признакам. — В процессе собеседования предусмотрено AI-ориентированное упражнение для оценки понимания и использования AI в работе. — Соблюдение международных норм по защите данных кандидатов (GDPR, CCPA и др.).

Location: San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role As part of the Anthropic security department, the compliance team owns understanding security and AI safety expectations, as established by regulators, customers and (nascent) industry norms (which we also seek to influence). The compliance team uses this understanding to provide direction to internal partners on the priorities of security and safety requirements they must meet. The compliance team assures regulators and customers that those expectations are met by earning security credentials and responding to direct inquiry about Anthropics security program from auditors, customers and partners. This opportunity is unique, as we work to secure today’s most novel and valuable asset types, we must build a new kind of compliance program, assuring the safety of artificial intelligence capabilities. Key responsibilities Understand how Anthropic's security and privacy capabilities across major cloud platforms implement common frameworks (e.g., NIST 800-53, NIST 800-171, ISO 27001, ISO 27701, CSA CCM, and SOC 2). Build scalable data center and hyperscaler processes and documentation systems that will support future expansion to additional geographies and compliance frameworks. Assess and mitigate security and operational risks, implementing corrective actions, and managing vendor compliance. Coordinate engagements with independent assessors to earn security and privacy certifications and attestations important to Anthropic customers and enterprise partnerships, and to meet regulatory obligations. Write, update and enact policies capturing security, privacy, and AI safety requirements. Maintain and enhance Anthropic's system of security controls through audit readiness, recordkeeping, and cross-functional communication. Minimum qualifications Have 8+ years of progressive experience in audit and compliance roles, with direct ownership of certification/attestation or security compliance implementation projects Have worked in cloud-native environments and understand security and privacy considerations for multi-cloud and hybrid architectures Can translate complex compliance requirements into actionable workstreams for technical and non-technical stakeholders Have integrated with common controls frameworks or GRC systems that scaled with organizational growth Write clear and useful security and privacy documentation for both external and internal audiences. Thrive in ambiguous, fast-paced environments where you'll need to build processes from scratch Are comfortable organizing time-bounded task management of delegated work streams across a diverse organization Are energized by being the subject matter expert who educates the organization on new compliance requirements and auditors on current security practices Preferred qualifications Have worked in AI/ML companies and understand unique security considerations for model development and deployment Have worked with cloud companies and understand cloud security controls and physical security requirements Bring experience from high-growth technology companies managing rapid compliance expansion Have some experience implementing automated enforcement of security controls (i.e., compliance as code) Possess relevant certifications (CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Auditor/Implementer) The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $270,000 — $345,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Задачи: — усиливать безопасность приложений RingCentral — безопасно внедрять AI-технологии Требования: — глубокое знание уязвимостей веб-приложений и способов их эксплуатации и устранения — опыт threat modeling, security design review и risk assessment — практический опыт с SAST, DAST, SCA, code review и penetration testing — понимание рисков LLM-приложений, AI-агентов, coding-ассистентов и MCP-серверов — навыки программирования или написания скриптов — умение давать инженерным командам понятные и практически применимые рекомендации — разговорный английский Будет плюсом: — опыт с LLM/RAG, AI-assisted security testing, WebRTC, видео- или аудиостримингом Условия: — график 4 дня в офисе в Софии, 1 день удалённо — релокационный пакет и помощь с документами

We are building a new capability that turns fragmented, noisy security logs into actionable insights. The position is full-time, 40 hours per week, with mostly remote work within Germany and monthly in-person collaboration at the Berlin office. The contract is fixed-term. Salary ranges from EUR 69,000 to 77,000 per year.

Location: Dubai, United Arab Emirates; Cairo, Egypt; India; Riyadh, Saudi Arabia Job Description We are looking for an experienced SAP Basis & Security Consultant to manage SAP technical administration, system performance, security, user access, and SAP landscape operations. The ideal candidate should have strong hands-on experience in SAP Basis as well as SAP Security and authorization management. Key Responsibilities: Perform SAP Basis administration across SAP environments. Manage SAP system installation, configuration, upgrades, patches, and system maintenance. Monitor SAP system performance, availability, and health. Manage SAP transports, jobs, users, RFCs, interfaces, and system connectivity. Handle SAP system copies, refreshes, backups, and recovery activities. Troubleshoot SAP technical and performance issues. Design and maintain SAP Security roles and authorizations. Manage user provisioning, role assignments, access requests, and authorization concepts. Perform SAP Security audits and support compliance requirements. Identify and resolve authorization issues and security risks. Support SAP GRC processes where applicable. Work with functional and technical teams to ensure secure and stable SAP operations. Support SAP upgrades, migrations, and cloud transformation projects when required. Requirements: 6+ years of experience in SAP Basis . Strong hands-on experience in SAP Security and Authorizations . Experience managing SAP landscapes across DEV, QA, and Production . Strong knowledge of SAP user administration, roles, profiles, authorizations, RFCs, transports, and system monitoring. Experience with SAP HANA administration is preferred. Experience with SAP S/4HANA is preferred. Knowledge of SAP GRC Access Control is an advantage. Experience with SAP cloud environments is an advantage. Strong troubleshooting and problem-solving skills. Good communication and stakeholder-management skills. Mandatory Certification: Valid SAP Cloud certification is mandatory. Candidate must hold a recognized SAP Cloud certification , preferably related to SAP S/4HANA Cloud, SAP BTP, or SAP Cloud Technology . Candidate must provide the certification name and certificate/credential ID .

Location: Remote Workplace: Remote Phantom https://phantom.com is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets that never close, including perpetuals, prediction markets, tokenized assets, stablecoins and memes. Phantom users are able to discover the markets that matter and the cultural moments that shape them, building conviction through real-time data and the verified performance of top traders. With self-custody and access to open networks at its core, Phantom lets them control their financial moves in the same app they use to safely store or spend money worldwide. Phantom has reached #1 in Google Play's finance category and consistently ranks in the top 50 apps across all categories. Check out our Forbes Fintech 50 https://www.forbes.com/sites/ninabambysheva/2026/02/23/inside-phantoms-battle-plan-to-win-the-crypto-fueled-superapp-war/ and CNBC and Statista's World's Top Fintech Companies 2026 https://www.cnbc.com/worlds-top-fintech-companies-2026/! We are around 180 people, fully remote, backed by a $150M Series C investment from a16z, Sequoia Capital and Paradigm. ROLE DESCRIPTION Security is core to Phantom’s product and the trust millions of users place in us. We’re building an AI-native security team that aggressively uses AI to expand the speed, depth, and reach of our work—from code review and threat modeling to vulnerability discovery and security automation. We’re looking for strong security engineers with high agency who can identify the risks that matter, build practical solutions, and take ownership from initial discovery through verified remediation. This is a hands-on, high-impact role spanning architecture, source code, testing, and production systems across Phantom’s mobile, web, and backend products. You’ll work directly with engineering and product teams, lead complex security initiatives, and build capabilities that scale across the company. At the Staff level, you’ll set technical direction and raise the bar for how Phantom designs, builds, and ships secure products. This role is fully remote and open to candidates based in the US, UK and Canada. RESPONSIBILITIES - Product Security Ownership: Partner with engineering teams to identify and address security risks across Phantom’s mobile applications, web products, APIs, and backend services. - Architecture and Threat Modeling: Lead security reviews for new products and major architectural changes, with particular attention to authorization boundaries, sensitive data, transaction integrity, key material, and third-party integrations. - Secure Product Development: Embed practical security controls into the software development lifecycle, from design and implementation through testing, release, and production operation. - Code Review and Security Testing: Perform AI assisted security code reviews and targeted testing of high-risk features. Build repeatable approaches that help find vulnerabilities before they reach production. - Security Tooling: Develop and improve tooling that gives engineers fast, actionable security feedback without creating unnecessary friction. Use automation and AI-assisted workflows where they materially improve coverage or speed. - Software Supply Chain Security: Harden CI/CD, build, and release systems against supply chain threats, including dependency risk, secrets exposure, build provenance, artifact integrity, and compromised developer or automation workflows. - Vulnerability Management: Triage findings from internal testing, researchers, bug bounty submissions, and third-party assessments. Work with owners to determine real-world impact and drive issues through verified remediation. - Incident Response: Support the investigation of product security incidents and suspicious activity. Turn lessons from incidents into durable improvements to product architecture, detection, and engineering standards. - Technical Leadership: Establish product security patterns and expectations across engineering. At the Staff level, lead ambiguous, cross-functional initiatives and influence architecture beyond any single product team. QUALIFICATIONS - 5+ years of experience in product security, application security, security engineering, or software engineering, including experience operating at a senior or staff level. - Strong understanding of web, mobile, API, and distributed-system security, including authentication, authorization, session management, cryptography, and common vulnerability classes. - Hands-on experience building or applying AI-assisted security tooling to test applications and APIs, combining automated analysis with source-code review and manual validation. - Demonstrated ability to review production code in one or more languages such as TypeScript, JavaScript, Rust, Python and Go. - Experience securing software supply chains and CI/CD systems, including dependencies, build infrastructure, secrets, artifacts, signing, and release integrity. - Experience threat modeling complex products and translating security risks into concrete engineering requirements. - Strong judgment when evaluating exploitability, business impact, and appropriate remediation. - Track record of partnering effectively with engineering and product teams while maintaining a high security bar. - Clear written and verbal communication, including the ability to explain technical risk to both engineers and non-security stakeholders. NICE TO HAVES - Experience securing consumer financial products, wallets, payments, or other systems where client integrity and transaction safety are critical. - Familiarity with blockchain systems, smart-contract interactions, transaction simulation, signing workflows, or self-custodial wallet architecture. - Experience securing browser extensions or native mobile applications. - Experience building and integrating application-security tooling, static or dynamic analysis, security test infrastructure, or policy-as-code controls. - Familiarity with AWS, Kubernetes, CI/CD systems, and cloud-native service architectures. - Experience working with bug bounty programs or coordinating external security assessments. The target base salary for this role will range between $200,000 to $250,000 with the addition of equity and benefits. This is determined by a few factors including your skillset, prior relevant experience, quality of interviews and market factors (such as location) at the point in time of offer. Why Work With Us Phantom's journey to becoming a global trading app began with making crypto easier to use. Today, we’re building on that foundation to help people discover the markets that matter, make informed financial moves, and safely store or spend their money worldwide. Joining Phantom means helping shape that next chapter: building products that bring the freedom of open markets to more people.   - Build for global impact: Create products used by tens of millions of people, making innovative financial markets more accessible to users around the world. - Make complexity feel simple: Solve meaningful challenges across design, engineering, and user experience to make discovering markets and managing money seamless. - Put users in control: Help build a future where people have greater freedom over their assets and financial decisions, with security and self-custody at the foundation. Benefits (only available to full-time employees) - Competitive salary and equity - Comprehensive insurance (medical/dental/vision): base plan 100% covered - Flexible hours and a long-standing, supportive remote environment - Unlimited vacation: Take time when you need it (and we really mean it!) - 401(k) retirement plan - Wellness stipend - Weekly meal stipend - Learning & Development stipend - Remote / WFH set-up stipend We strongly encourage candidates of all backgrounds to apply. We believe that our work is stronger with a variety of perspectives, and we’re eager to further diversify our company. If you have a background that you feel would make an impact at Phantom, please consider applying. We’re committed to building an inclusive, supportive place for you to do the best work of your career. By submitting your resume and application materials, you acknowledge and agree that Phantom Technologies, Inc. ("Phantom") collects and processes your personal information (including application materials, interview records, and related data) to evaluate your candidacy. Phantom may use AI-powered tools and third-party service providers for transcription, note-taking, scheduling, and other administrative tasks. Phantom does not sell your information and your materials will be handled securely and in accordance with applicable data protection laws.

Задачи: — Защищать серверы, сети, облачную инфраструктуру и веб-сервисы. — Выстраивать Zero Trust и безопасный доступ к внутренним системам. — Выявлять угрозы, расследовать инциденты и устранять уязвимости. — Работать над архитектурой безопасности вместе с DevOps и разработчиками. Требования: — От 3 лет в кибербезопасности и администрировании Zero Trust. — Практический опыт ZTNA — обязателен: Cloudflare Zero Trust, Teleport, Tailscale, CyberArk или аналоги. — Уверенный Linux, понимание сетей, TLS, VPN и сегментации. — Опыт с WAF, SIEM, IDS/IPS, управлением уязвимостями и расследованием инцидентов. — Знание OWASP Top 10, принципов управления доступом и безопасности Docker; Bash или Python для автоматизации. Условия: — Официальное трудоустройство. — Комфортный офис в Пафосе. — Сильная техническая команда. — Возможность влиять на архитектуру безопасности. — Рассматриваются кандидаты, которые уже на Кипре или готовы переехать для работы в офисе.

В рамках данной позиции необходимо разрабатывать и внедрять механизмы изоляции и контроля для агентных систем, включая создание песочниц для выполнения инструментов, строгую изоляцию контуров, установку лимитов на действия и реализацию функции аварийного отключения агентов. В задачи входит настройка детального аудита логов действий агентов в продакшене, а также разработка и настройка системы мониторинга аномального поведения с оповещениями о подозрительных паттернах. Требуется проводить моделирование угроз и threat modeling для новых сценариев агентов на этапе проектирования, а также разрабатывать архитектурные решения и фильтры для защиты от атак на LLM, таких как prompt injection, data exfiltration и jailbreak, включая внедрение строгой валидации выходных данных агентов. Необходимо организовывать и проводить атаки на собственные агентные системы для выявления уязвимостей до их эксплуатации злоумышленниками, а также проводить аудит безопасности агентных пайплайнов от команды LLM-инженеров до продакшен-выкатки. Контроль исходящих данных включает обеспечение соблюдения политик по использованию данных и инвентаризацию всех потоков информации, направляемой во внешние LLM-провайдеры. Важной частью работы является настройка IAM и управление секретами, проектирование и внедрение ролевой модели доступа для агентов, определение прав доступа и безопасное хранение с ротацией секретов. Также требуется опыт использования сканеров исходного кода (SAST/DAST), включая подбор, пилотирование, установку, администрирование и интеграцию в CI/CD-конвейер, а также помощь разработчикам в расшифровке результатов и устранении уязвимостей. Кандидат должен уверенно владеть Python, иметь глубокие знания Docker и Linux, а также понимание принципов работы CI/CD. Необходим практический опыт threat modeling, работа с системами управления секретами (например, HashiCorp Vault), внедрение IAM-моделей, настройка песочниц и изолированных окружений. Важно понимание работы LLM и агентных систем, опыт с фреймворками LangChain, LangGraph, MCP и знание принципов Claude Code. Кандидат должен быть готов не только проводить ревью кода, но и самостоятельно проектировать и создавать безопасных агентов.

What We Do: Huntress is a fully remote, global team focused on cybersecurity, founded in 2015 by former NSA cyber operators. They protect over 4 million endpoints and 7 million identities worldwide with enterprise-grade cybersecurity products designed alongside their Security Operations Center (SOC). What You’ll Do: - Triage, investigate, respond, and remediate various intrusions daily. - Review EDR telemetry, log sources, and forensic artifacts to determine root causes and provide remediation. - Perform tactical malware analysis. - Investigate suspicious Microsoft M365 activity and provide remediations. - Assist in escalations from Product Support for threat-related and SOC questions. - Contribute to detection engineering creation and tuning. - Participate in projects to improve outcomes for analysts and partners. - Collaborate in a mentored team environment. What You Bring To The Team: - 4+ years experience in SOC or Digital Forensics (DFIR). - Experience with Windows, Linux, and MacOS attack surfaces. - Knowledge of Threat Actor tools and techniques including MITRE ATT&CK Framework, PowerShell, Command Prompt, WMIC, Scheduled Tasks, SCM, Windows Domain and host enumeration, lateral movement, persistence, defense evasion, and other offensive TTPs. - Experience with static and dynamic malware analysis. - Working knowledge of Windows Administration or Enterprise Domain Administration including Active Directory, Group Policy, Domain Trusts. - Working knowledge of core networking concepts such as common ports/protocols, NAT, Public/Private IPs, VLANs. - Working knowledge of web technologies including web servers/applications and OWASP top 10. - Effective communication skills to explain complex events to less technical audiences. - Customer-focused decision making. - Strong curiosity and eagerness to learn. Preferred Qualifications: - Experience in MSP/MSSP/MDR roles. - Linux and MacOS investigative experience. - Experience with scripting languages like PowerShell, Python, Bash, PHP, JavaScript, or Ruby. - Experience with platforms like HackTheBox, TryHackMe, Blue Team Labs Online. - Experience with cloud investigations (M365, Azure, AWS, GCP). - Participation in cybersecurity competitions. - Familiarity with MSP tools such as RMMs. What We Offer: - 100% remote work environment. - Generous paid time off including vacation, sick time, and holidays. - 12 weeks paid parental leave. - Comprehensive medical, dental, and vision benefits. - 401(k) with 5% company contribution. - Life and disability insurance. - Stock options for full-time employees. - $500 one-time home office reimbursement. - Annual education and professional development allowance. - $75/month digital reimbursement. - Access to BetterUp coaching platform. Accommodations: - Reasonable accommodations available for application and selection process upon request. Huntress is committed to inclusivity and non-discrimination, except against hackers exploiting businesses.

Ищем энергичного и опытного специалиста, который поможет поддерживать культуру, делая информацию о кибербезопасности понятной и доступной для каждого сотрудника.

Ищем энергичного и опытного специалиста, который поможет поддерживать культуру, делая информацию о кибербезопасности понятной и доступной для каждого сотрудника.

Location: Remote-Friendly (Travel-Required) | San Francisco, CA | Seattle, WA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role: As part of Anthropic’s Global Safety, Intelligence, and Security (GSIS) team, the Security Technology Deployment Engineer will own the validation, standardization, and deployment of physical security technology across Anthropic’s rapidly expanding global office portfolio. This role bridges the gap between technology selection and production-ready operation — ensuring that every security platform deployed is rigorously tested, properly integrated with enterprise infrastructure, fully documented, and built for scale. You’ll define the installation standards, configuration baselines, and deployment processes that the broader team executes against — from access control migrations and intercom replacements to AI analytics onboarding and new application integrations. You’ll work across InfoSec, IT, Networking, and Identity Management to ensure every security application passes review, integrates with SSO, and is supported within Anthropic’s infrastructure before going live. Your work will directly determine whether Anthropic’s security technology stack scales reliably as the company grows from dozens of locations to a global enterprise footprint. Responsibilities: Validate and deploy new and replacement security technology platforms including access control systems, intercom solutions, video management, visitor management, and AI/analytics tools across all Anthropic locations Build and maintain staging environments for pre-production testing and validation of all security applications, hardware, firmware, and system configurations Define installation standards, configuration baselines, licensing structures, update procedures, and maintenance requirements for every deployed security platform Deploy integrations between security applications, validating that platforms communicate and share data correctly before transitioning to production Support colleagues’ security applications through InfoSec review processes, ensuring new tools meet Anthropic’s information security and compliance requirements Coordinate SSO integration for newly deployed security applications with Identity Management and IT teams Transition applications requiring custom integration or data pipeline development to the IT Engineering team with documented technical requirements for roadmap inclusion Initiate onboarding of deployed hardware and systems into Anthropic’s health monitoring platform to ensure operational visibility from day one Develop standardized deployment playbooks, checklists, configuration templates, and handoff documentation that enable repeatable installations across all current and future sites Evaluate security platforms for scalability, identifying capacity constraints, single points of failure, and architectural limitations before they impact operations at scale Coordinate with Networking, IT Infrastructure, and Facilities teams to ensure all infrastructure prerequisites (network, power, rack space, cloud resources) are met prior to deployment Execute structured handoffs to Project Management (for site programming), Break-Fix Support (for maintenance), and Access Control Administration (for ongoing system management), ensuring each team has the standards and documentation to execute independently You may be a good fit if you: Have 5+ years of hands-on experience deploying, validating, and managing enterprise physical security technology across a large or rapidly growing organization Have deployed security technology across 50 or more sites, or have demonstrated experience in a high-growth environment where deployment velocity and repeatability were essential Have built standardized deployment processes, playbooks, and configuration templates that enabled others to execute installations independently and consistently Have experience working across InfoSec, IT, Networking, and Identity Management teams to onboard and integrate security applications into enterprise environments Have supported SSO integration, InfoSec reviews, and enterprise application onboarding workflows for security tools Possess broad technology experience across access control, video management, intercoms, visitor management, AI/analytics, and alarm monitoring platforms Are a strong technical communicator who can define standards clearly enough that PMs, integrators, and service teams execute against them without ambiguity Have experience with IP networking, VLANs, PoE, and infrastructure requirements for security devices Are comfortable with 25% travel for site deployments, commissioning, and validation Strong candidates may have: Previous experience at a hyper-growth technology company or managing security technology programs for high-profile corporate environments Experience with Anthropic’s specific technology stack: Genetec Security Center, Axis cameras, Wavelynx, Commend Symphony Cloud, Alcatraz.ai , Ambient.ai , SureView, Envoy Industry certifications: Genetec, Axis, CCNA, PSP, CPP, or PMP Experience with OSDP, modern credential technologies, and encryption protocols for physical security systems Familiarity with scripting or automation (Python, PowerShell) for configuration management and deployment automation Experience with health monitoring and observability platforms Knowledge of SOC 2 compliance, GDPR, and physical security compliance frameworks Experience with change management, configuration control, and version-controlled infrastructure documentation Deadline to apply: None. Applications will be received on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $180,000 — $230,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

About the Team The Security Operations team protects CircleCI’s infrastructure, product, and customer data against evolving threats, working closely with engineering to maintain security and resilience. About the Role As a Security Operations Engineer, you will protect CircleCI’s infrastructure, product, and customer data from AI-driven attacks and defenses. This intermediate role involves ownership of security challenges, collaboration with Engineering, contributing to the security roadmap, and leveraging AI tools to detect, respond to, and automate security threats. What You’ll Do: Threat Detection & Incident Response — Monitor, investigate, and respond to security threats across cloud and application environments using security and AI-assisted tools. — Participate in risk assessments, incident response, post-incident reviews, and on-call support, improving controls and processes. Security Engineering & Architecture — Build and maintain security tooling, controls, and automation across cloud, application, and CI/CD environments following best practices. — Identify vulnerabilities and configuration risks, contribute to runbooks and compliance, and understand CircleCI’s security architecture. AI & Security — Incorporate AI-powered security tools into workflows and evaluate emerging technologies for detection, response, and automation. — Stay current on AI-specific security threats and contribute to responsible AI use in security operations. Cross-Team Partnership & Ownership — Partner with Engineering teams to understand security needs, provide guidance, and translate risks into actionable recommendations. — Contribute to security roadmap planning, technology evaluations, and documentation while building relationships across teams. What You’ll Bring: — 3+ years of security engineering or operations experience or equivalent expertise. — Hands-on experience with cloud, application, and CI/CD security in AWS, GCP, or Azure. — Experience with incident response and security tools including EDR, CNAPP, SASE, vulnerability scanners, and log analysis. — Ability to build and maintain security automation and tooling using Go, Python, or Terraform. — Strong security judgment and problem-solving skills. — Hands-on experience with AI/ML-powered security tools in production and understanding of AI’s role in security workflows. Bonus Skills (Nice to Have): — Familiarity with AI-specific threat categories like prompt injection and model supply chain risks. — Experience securing developer platforms, SaaS, or CI/CD infrastructure. — Relevant certifications such as CEH, AWS Security Specialty, Security+. — Contributions to process improvement, runbook development, or knowledge sharing. Accommodation CircleCI provides reasonable accommodation for individuals with disabilities during application and employment. About CircleCI CircleCI is the world’s largest CI/CD platform, processing over 3 million jobs daily, helping companies leverage AI in software delivery. Founded in 2011, headquartered in San Francisco with a global remote workforce, and venture-backed by multiple investors. Equal Opportunity CircleCI is an Equal Opportunity and Affirmative Action employer, not discriminating based on legally protected characteristics and considering applicants with criminal histories consistent with laws.

Задачи: — Проектировать, внедрять и управлять решениями и контролями безопасности для AWS и Kubernetes, включая методы изоляции для платформы RCE-as-a-Service. — Создавать, развёртывать и поддерживать инфраструктуру как код с использованием Terraform, обеспечивая высокие стандарты безопасности. — Проводить оценки безопасности, моделирование угроз и аудиты AWS и Kubernetes. — Сотрудничать с командами разработки и эксплуатации для внедрения лучших практик безопасности в CI/CD. — Мониторить и реагировать на инциденты безопасности в облаке, выявлять причины и рекомендовать меры по устранению. — Обеспечивать соответствие требованиям комплаенса (SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS). — Наставлять инженеров и продвигать культуру облачной безопасности в организации. Требования: — Опыт работы в облачной безопасности не менее 5 лет, глубокие знания AWS. — Профессиональные навыки в области безопасности Kubernetes: защита кластеров, RBAC, сетевые политики, управление уязвимостями контейнеров. — Экспертное владение Terraform. — Знание сервисов безопасности AWS (IAM, GuardDuty, Security Hub, CloudTrail, WAF). — Знакомство с CNAPP решениями (Wiz) и SIEM (Panther). — Понимание безопасного жизненного цикла разработки ПО, безопасности CI/CD и DevSecOps. — Желательны сертификаты AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), Terraform Associate. — Приветствуются сертификаты SANS или OffSec. — Отличные навыки решения проблем, коммуникации и лидерства. Условия: — Удалённая работа из США (SF, NYC или Remote). — Конкурентная зарплата и пакет вознаграждений, включая акции, медицинские льготы и гибкий отпуск. Дополнительно: — Работа в команде инженеров, тесное сотрудничество с командой безопасности. — Технологический стек включает Typescript, React, Apollo GraphQL, Redux, Express, Postgres, Redis, Kubernetes, Terraform, Helm, AWS.

Location: Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As a Customer Success Manager on Anthropic's Public Sector team, you will be the post-sales trusted advisor helping national security customers realize the value of Claude and turn their investment into mission impact. You'll combine your customer success expertise with technical fluency to drive adoption of Claude Code, the Claude API, and Claude for Government (C4G) on classified infrastructure delivered through a cleared cloud provider, while maintaining our high standards for safety, security, and discretion. Working closely with our Sales, Applied AI, Product, Engineering, and Policy teams, you'll guide customers from deployment through enablement, model migration, renewal, and expansion. You'll develop genuine partnerships with customers' AI leadership, platform and compute teams, security and accreditation officials, and mission operators—and with the cleared cloud providers and system integrators that deliver alongside us. Your understanding of their mission, how they accredit and govern capabilities on classified fabrics, and how they evidence value to oversight will help them deliver decision advantage. Drawing on both your national security expertise and technical knowledge, you'll serve as a strategic advisor throughout their journey with us—helping them navigate constraints that don't exist in commercial or federal civilian deployments: classified-fabric accreditation, fixed compute capacity, compartmentation, limited telemetry, and need-to-know discipline. Much of this work happens onsite, in the customer's spaces, on their systems. Your role focuses on driving consumption and adoption of Claude across mission workloads, standing up enablement and change management suited to a cleared, mission-driven workforce, identifying and hardening the workloads that matter most to the mission, and demonstrating value in unclassified terms that can leave the building and support renewal and expansion. The insights you gather will directly inform our research priorities, product roadmap, and national security strategy—making you a key voice in shaping how Anthropic builds and delivers AI systems for the most demanding missions. Key responsibilities: Partner with the account executive and Applied AI architect to deeply understand the customer's mission requirements and translate them into an account and success plan, ensuring alignment between mission objectives, the customer's investment, and technical implementation Serve as the primary post-sales advisor to the customer throughout their Claude adoption journey, from deployment through enablement, model migration, renewal, and expansion. You will need to build trusted relationships across the customer's senior stakeholders—AI leadership, platform and compute teams, security and accreditation officials, contracting, and mission operators—and coordinate internally across multiple teams and with cleared cloud providers to drive customer success Support customers building with Claude Code, the Claude API, and Claude for Government on classified infrastructure—managed configuration, capacity and throughput planning, and workload onboarding—with a working understanding of accreditation requirements (FedRAMP High, IL5/IL6, classified-fabric accreditation) Create and deliver compelling enablement and executive content tailored to different audiences. You will need to spread the gamut from hands-on Claude Code enablement for engineering teams (Train the Trainer, managed configuration as the "paved road," Center of Excellence development) up to mission-value conversations with senior agency leadership, in unclassified language that can leave the building Help the customer develop evaluation frameworks and measure adoption and value without direct telemetry—provider capacity reports, customer-run dashboards, workload registries, and agreed leading indicators—and guide model migration and release readiness: eval gates built from their workloads, staged cutovers off end-of-support models, and realistic expectations about what lands on their fabric and when Drive consumption and adoption: separate under-pacing from burst saturation of a fixed compute pool, smooth and onboard workloads before asking for capacity, discover new mission workloads across compartmented organizations, and document value realized in mission-outcome terms (decisions accelerated, coverage, timeliness, findings produced) Own Executive Business Reviews that function as discovery and alignment—leaving executives with sponsor commitments, mutual next steps, and a mission-outcome narrative that supports the renewal decision—and serve as the primary conduit between the customer, cleared cloud providers, and Anthropic Identify common adoption and integration patterns and hero workflows that demonstrate mission transformation, and contribute insights back to our Product, Engineering, Research, and Policy teams—while maintaining strict separation of classified and unclassified channels and escalating correctly (e.g., 'Claude cut a high-volume analytic triage queue from days to hours') Work onsite frequently at customer facilities for enablement, workshops, and relationship building, on the customer’s systems and within their security and need-to-know rules Maintain strong knowledge of the latest developments in LLM capabilities, agentic and Claude Code implementation patterns, and national security AI policy You may be a good fit if you have: Due to U.S. Government contract requirements, this position requires U.S. citizenship and an active TS/SCI security clearance with a current full-scope polygraph (a TS/SCI with CI polygraph may be considered where crossover is supportable) Must have prior experience working with US national security (defense and/or intelligence) agencies —ideally at the level of AI leadership, platform, and compute teams rather than a single program office—and a working knowledge of how national security agencies accredit, budget, govern compute, and measure mission (including the difference between FedRAMP High, IL5/IL6, and classified-fabric accreditation, and the role of cleared cloud providers and system integrators) 5+ years of experience in customer-facing roles such as Customer Success Manager, Technical Account Manager, Solutions Architect, or Consultant, with experience navigating complex stakeholder environments; able to work onsite at customer facilities in the National Capital Region 3-4 days per week Experience driving success with consumption-based products (tokens, throughput, capacity) as well as seat-based products, including measuring adoption and value when you cannot see usage directly Technical fluency with AI/ML concepts, API integration patterns, and agentic tooling such as Claude Code; familiarity with common LLM frameworks, tools, and evaluation approaches, and hands-on experience building something with an LLM API or coding agent, is a strong plus Exceptional ability to build relationships with and communicate technical concepts to diverse stakeholders, from engineering and platform teams to security and accreditation officials to senior national security leadership Judgment and discretion: never over-promises on dates, capabilities, or documentation; practices need-to-know as a reflex; keeps composure under political and competitive pressure; strategic mindset to identify mission transformation opportunities and translate them into actionable expansion plans Excitement for engaging in cross-organizational collaboration, working through trade-offs, and balancing competing priorities—advocating for customer needs across internal (Applied AI, Policy, Research, Security) and external (cleared cloud provider, system integrator, program office) stakeholders Passion for thinking creatively about how to use AI in a way that is safe and beneficial for the national security mission, and ultimately furthers the goal of advancing safe AI systems A knack for bringing order to chaos and an enthusiastic 'roll up your sleeves' mentality—you're a true team player The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $265,000 — $350,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Задачи: — Построение threat model для CoinJoin-протокола и всей системы. — Анализ возможных атак на coordinator и участников протокола. — Проектирование защиты от Sybil-атак и DoS. — Анализ возможных утечек метаданных. — Анализ privacy-свойств протокола. — Аудит механизмов authentication, authorization и rate limiting. — Анализ key-management архитектуры. — Security review Bitcoin transaction flow. — Code review критичных компонентов. — Анализ attack surface backend и инфраструктуры. — Подготовка рекомендаций по hardening. — Участие в security testing и подготовке к внешним аудитам. Требования: — Опыт application security, protocol security или security engineering. — Умение самостоятельно строить threat models. — Хорошее понимание сетевой безопасности. — Понимание DoS/DDoS и Sybil attack моделей. — Опыт security review backend-систем. — Понимание криптографических примитивов и digital signatures. — Опыт анализа key-management систем. — Умение проводить code review с точки зрения безопасности. — Понимание рисков metadata leakage и privacy-sensitive систем. Будет большим плюсом: — Глубокое понимание Bitcoin protocol. — Опыт security-аудита Bitcoin или других cryptocurrency-протоколов. — Знание UTXO, PSBT, SegWit, Taproot и Bitcoin transaction signing. — Опыт анализа CoinJoin или других privacy protocols. — Понимание blockchain analysis и deanonymization techniques. — Опыт аудита non-custodial систем. — Практический опыт Rust/C++/Go. Что важно в этой роли: Security engineer должен оценивать не только классические уязвимости backend-приложения, но и экономические, протокольные и privacy-атаки. Для CoinJoin особенно важны поведение злонамеренных участников, Sybil/DoS, корреляция активности и возможные утечки метаданных.