Вакансии

Location: Singapore, Singapore Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Opportunity We are seeking a highly motivated Technology and Security Risk Manager within the Second Line of Defence (2LOD). You will be responsible for continuously refining and scaling the Technology and Security oversight program, guiding first-line of defence (1LOD) execution, and providing independent risk challenge. You will be a key member of OKX's Risk team, helping to shape and scale the firm’s 2LOD Security & Data Risk programs. You’ll work closely with stakeholders including Engineering, Product, Risk, Compliance and Internal Audit. You will play a key role in developing and implementing a comprehensive Technology and Security Risk Management program. This includes 2LOD oversight of technology defects, issues, and incidents, Risk and Control Self-Assessments (RCSA), key risk indicators (KRIs) and reporting. The ideal candidate has a strong understanding of Technology Risk (including Technology Resilience, Change Management, SDLC, CI/CD pipeline, and software quality assurance) and Cybersecurity (covering internal and external threat vectors, control weaknesses, and organisational cyber hygiene). We are looking for a candidate with a strong drive for improvement and career growth. What You’ll Be Doing Collaborate with internal stakeholders across the company to proactively identify, escalate, assess, and mitigate Technology and Security risks, ensuring adherence to the Technology Risk Policy. Providing oversight of Technology and Security Risk incidents and issues, and partnering with 1LOD stakeholders to enhance related processes and ensure effective oversight Lead the Technology Risk and Control Self-Assessment (RCSA) process from a 2LOD perspective, ensuring adherence to the ERM RCSA methodology, and providing effective challenge and oversight of 1LOD Security risks and controls. Support the Security Key Risk Indicators (KRIs) definition, monitoring, and reporting. Supporting the implementation and ongoing enhancement of Governance, Risk, and Compliance (GRC) systems to enable effective risk oversight Advocate and support the implementation of Risk Management frameworks for technology stakeholders, serving as a trusted advisor for the first line. Stay up to date on emerging trends and regulations in the digital asset space, proactively identifying and addressing new risk considerations. What We Look For In You 8+ years in information security, with a strong security architecture or technical security background; fintech, crypto or cloud-native experience preferred. Practical experience designing, implementing or reviewing cloud, IAM, cryptographic, network or application security controls. Experience in risk oversight, or readiness to transition, with the technical judgement to challenge controls and recommend proportionate improvements. Ability to threat-model systems and assess technical evidence, including architecture diagrams, IAM policies, logging configurations and dependencies. Working knowledge of cloud resilience, multi-region/AZ failover, RTO/RPO and disaster recovery testing. Familiarity with NIST CSF, ISO 27001, SOC 2 and relevant privacy requirements, including GDPR and PDPA, and their application to technical controls. Ability to independently assess and test controls, evaluate incidents and drive remediation with engineering and security teams; GRC platform experience desirable. Clear written and verbal communication, translating technical findings into prioritised actions for business stakeholders and governance committees. Strong stakeholder management skills, providing constructive challenge and collaborating across functions and geographies. A proactive, adaptable approach, with confidence taking ownership and improving practices in a fast-paced environment. A relevant degree or equivalent practical experience; CISSP, CCSP, cloud security/architecture, CISA or CISM qualifications desirable. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Strasbourg, France We currently have a vacancy for a Senior Security Engineer to offer his/her services as an expert remotely. In the context of the first assignment, the successful candidate will be integrated in the team of the company that will closely cooperate with a major client’s IT team on site. Your tasks Develop, implement, maintain, test, and continuously improve cybersecurity solutions, products and services; Integrate cybersecurity technologies into the organization's infrastructure, ensuring secure configuration, optimal performance and operational resilience; Implement, monitor, and maintain security controls, procedures, patches, and system hardening measures to address vulnerabilities and ensure compliance with security policies; Assess, monitor, and report on the security posture and performance of systems, services, and cybersecurity solutions, recommending improvements where appropriate; Provide cybersecurity support and technical guidance to users, customers, and internal stakeholders; Collaborate closely with Operations and cross-functional teams to implement, maintain, and optimize security-related processes and operational activities; Develop scripts, automation, and software components to support cybersecurity operations, improve efficiency, and enhance security capabilities; Identify, troubleshoot, and resolve security-related issues, ensuring timely remediation and continuous service improvement; Prepare technical documentation and communicate security updates, recommendations, and progress to relevant stakeholders; Work collaboratively with team members and business stakeholders to deliver secure, reliable, and resilient technology solutions. Requirements University degree in IT or relevant discipline, combined with minimum 10 years of working experience in software systems security, cyber security and information security practices; Proven experience designing, developing, and delivering end-to-end authentication, authorization and data protection solutions for enterprise environments; Proven experience with enterprise security technologies and protocols, including SSL/TLS, X.509, SAML, OAuth, OpenID Connect, JWT, AWS KMS, KMIP, and PKCS#11; Experience designing, developing and securing both on-premises and cloud-based security solutions; Experience securing complex enterprise environments, including data centers and distributed infrastructures; Experience applying Secure Software Development Lifecycle (SSDLC) principles and security-by-design practices; Experience working in Agile software development environments and using modern collaboration and DevSecOps tools; Knowledge of programming and scripting for developing, automating, and integrating cybersecurity solutions; Knowledge of Linux and Unix operating systems, including secure configuration, administration and system hardening. Knowledge of network architecture and security, including TCP/IP, HTTP/HTTPS, IPsec, routing protocols, firewalls, routers and switches; Knowledge of cryptographic concepts and algorithms, including AES, GCM, PBKDF2, HMAC, SHA-2 and key management principles; Knowledge of operating system security, network security, security controls and modern cybersecurity technologies. Excellent command of the English language. Benefits If you are seeking a career in an exciting and dynamic company, where you will offer your services as part of a team of a major European Institution, operating in an international, multilingual and multicultural environment where you can expect real chances to make a difference, please send us your detailed CV in English, quoting reference . We offer a competitive remuneration (either on contract basis or remuneration with full benefits package), based on qualifications and experience. All applications will be treated as confidential. EUROPEAN DYNAMICS (ED) ( www.eurodyn.com ) is a leading Software, Information and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Stockholm, London, Nicosia, Hong-Kong, Valetta, etc). The company employs over 1000 engineers, IT experts and consultants (around 3% PhD, 36% MSc and 53% BSc or equivalent). We design and develop software applications using state-of-the-art technology. The group generates annual revenues in the range of EURO 40 million, with an EBITDA in the range of 20%. The value of our contract portfolio exceeds EURO 250 million. EUROPEAN DYNAMICS is a renowned supplier of IT services to government institutions, multinational corporations, public administrations and multinational companies, research and academic institutes. As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion. EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published in www.eurodyn.com/privacy . By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorise ED to process your personal data for the purposes of the company's recruitment opportunities, in line to the Policy.

Location: Strasbourg, France; Italy We currently have a vacancy for a Security Officer to offer his/her services as an expert remotely. In the context of the first assignment, the successful candidate will be integrated in the team of the company that will closely cooperate with a major client’s IT team on site. Your tasks Develop, implement, and oversee the organization's information security, IT risk management, and governance frameworks; Advise on security strategy, policies, standards, architecture, resilience, and operational security requirements; Develop and maintain the Information Security Management Framework (ISMF), translating business objectives into effective security controls and risk management processes; Establish and monitor IT governance, risk, compliance, audit, and reporting processes to ensure adherence to regulatory and organizational requirements; Conduct security risk assessments, vulnerability assessments, IT security audits, and business continuity planning, recommending appropriate mitigation measures; Develop and maintain security policies, procedures, standards, documentation, and operational guidelines; Lead enterprise-wide security initiatives, promoting security awareness and ensuring the consistent application of security standards across projects, systems, and services; Provide technical leadership in identifying and resolving complex security issues and implementing effective security controls; Manage industrial and personnel security clearance processes and liaise with relevant security authorities where required; Support strategic technology planning by advising on current and emerging cybersecurity risks, technologies, and best practices. Requirements University degree in IT or relevant discipline, combined with minimum 8 years of relevant working experience; At least 7 years of experience in a combination of risk management, information security and IT; Experience in contract, vendor, and managed services procurement and management; Hands-on experience with cloud computing technologies and virtualized environments; Experience working in Agile software development and DevSecOps environments; Excellent knowledge of information security, risk management and business continuity frameworks and standards (e.g., ISO/IEC 27001 and related standards); Knowledge of cybersecurity principles, security best practices, tools and technologies; A professional security management certification will be considered an asset; Excellent command of the English language. Benefits If you are seeking a career in an exciting and dynamic company, where you will offer your services as part of a team of a major European Institution, operating in an international, multilingual and multicultural environment where you can expect real chances to make a difference, please send us your detailed CV in English, quoting reference . We offer a competitive remuneration (either on contract basis or remuneration with full benefits package), based on qualifications and experience. All applications will be treated as confidential. EUROPEAN DYNAMICS (ED) ( www.eurodyn.com ) is a leading Software, Information and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Stockholm, London, Nicosia, Hong-Kong, Valetta, etc). The company employs over 1000 engineers, IT experts and consultants (around 3% PhD, 36% MSc and 53% BSc or equivalent). We design and develop software applications using state-of-the-art technology. The group generates annual revenues in the range of EURO 40 million, with an EBITDA in the range of 20%. The value of our contract portfolio exceeds EURO 250 million. EUROPEAN DYNAMICS is a renowned supplier of IT services to government institutions, multinational corporations, public administrations and multinational companies, research and academic institutes. As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion. EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published in www.eurodyn.com/privacy . By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorise ED to process your personal data for the purposes of the company's recruitment opportunities, in line to the Policy.

Location: Athens, Greece Are you a passionate and driven Junior Cyber-Security Engineer looking for an exciting new challenge? EUROPEAN DYNAMICS is seeking a talented individual to join our team and play a crucial role in ensuring the security and integrity of our cutting-edge projects. This is your chance to contribute to the success of a dynamic organization and advance your career in a collaborative and innovative environment. What You'll Do: Assist in the Design, implementation and support of security services, solutions, and infrastructure; Develop and implement tools to assist in the detection, prevention, and analysis of security threats; SIEM Operations (setup, monitoring, reporting); Vulnerability scanning, monitoring and reporting; Assist with the development of reports and documentation. Requirements Must-Have Qualifications: University degree (AEI/ TEI); Linux and Windows administration; Good knowledge of network, systems, and application intrusion techniques; Technical documentation skills; Excellent command of English, both written and spoken. Nice-to-Have Qualifications: Experience in developing, designing, and planning security concepts with Firewalls, IDS/IPS, and VPN systems; MSc in Information/Cyber Security; Familiarity with the ISO27001 Security Standard. Benefits We believe in rewarding talent and dedication. Here's what you can expect as part of our team: Competitive full-time salary; Private Health Coverage on the Company’s group program; Flexible Working Hours; Top-of-the-Line Tools; Professional Development: Benefit from language courses, specialized training, and continuous learning opportunities; Career Growth: Work with some of the most innovative and exciting specialists in the industry; Dynamic Work Environment: Thrive in a setting that offers challenging goals, autonomy, and mentoring, fostering both personal and company growth. If you want an exciting challenge, work with some of the coolest technologies, and enjoy your time doing it, then join us! Submit your detailed CV in English, quoting reference: ( JCSE/11/26 ). You may also consider all our other open vacancies by visiting the career section of our website ( www.eurodyn.com ) and follow us on Twitter (@EURODYN_Careers) and LinkedIn. EUROPEAN DYNAMICS (ED) ( www.eurodyn.com ) is a leading European Software, Information, and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Berlin, Stockholm, London, Nicosia, Valetta, Vienna, Den Haag, Hong Kong, etc.) The company employs over 1100 engineers, IT experts, and consultants (around 3% PhD, 41% MSc, and 54% BSc). We design and develop software applications using integrated, state-of-the-art technology. Our current IT projects have a value exceeding 300 million EURO. EUROPEAN DYNAMICS is a renowned supplier of IT services to European Union Institutions, international organizations, European Agencies, and national government Administrations in 40 countries and 4 continents. As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, colour, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion. EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published at www.eurodyn.com/privacy . By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorize ED to process your personal data for the purposes of the company's recruitment opportunities, in line with the Policy.

Location: Athens, Greece Are you an experienced ICT Security Manager fluent in English, looking for an exciting new opportunity? We currently have a vacancy for a dynamic professional to join our team in Athens, with occasional onsite missions at client premises across Europe. What You'll Do: Responsible for ensuring security in IT operations and infrastructure; Maintain security tools and technology; Monitor and audit security policy compliance; Security assessments of information systems; Provide guidance in the implementation of IS security policies; Drive Security specifications for information systems; Define security incident response plans. Requirements University degree in related subjects or at least 7 years of relevant professional experience; Minimum 5 years of experience as an IT security manager on top of the above requirement; Strong experience with quality control procedures, management, and execution of vulnerability testing and corrective measures in IT Systems; Experience with IT-Projects based on Agile Methodologies; Excellent command of English, both written and oral; Ability to integrate in an international environment and to cooperate well in a team; IT Security certification (CISM, CISSP, CISA) would be an asset. Benefits We believe in rewarding talent and dedication. Here's what you can expect as part of our team: Competitive full-time salary; Private Health Coverage on the Company’s group program; Flexible Working Hours; Top-of-the-Line Tools; Professional Development: Benefit from language courses, specialized training, and continuous learning opportunities; Career Growth: Work with some of the most innovative and exciting specialists in the industry; Dynamic Work Environment: Thrive in a setting that offers challenging goals, autonomy, and mentoring, fostering both personal and company growth. If you want an exciting challenge, work with some of the coolest technologies, and enjoy your time doing it, then join us! Submit your detailed CV in English, quoting reference: ( ICTSM/11/26 ). You may also consider all our other open vacancies by visiting the career section of our website ( www.eurodyn.com ) and follow us on Twitter (@EURODYN_Careers) and LinkedIn. EUROPEAN DYNAMICS (ED) ( www.eurodyn.com ) is a leading European Software, Information, and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Berlin, Stockholm, London, Nicosia, Valetta, Vienna, Den Haag, Hong Kong, etc.) The company employs over 1100 engineers, IT experts, and consultants (around 3% PhD, 41% MSc, and 54% BSc). We design and develop software applications using integrated, state-of-the-art technology. Our current IT projects have a value exceeding 300 million EURO. EUROPEAN DYNAMICS is a renowned supplier of IT services to European Union Institutions, international organizations, European Agencies, and national government Administrations in 40 countries and 4 continents. As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, colour, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion. EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published at www.eurodyn.com/privacy . By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorize ED to process your personal data for the purposes of the company's recruitment opportunities, in line with the Policy.

Location: Athens, Greece We are seeking a Cyber Security Engineer, who specializes in the deployment and configuration of advanced security tools and methodologies, to expand our Information Security team. Your role will involve leveraging state-of-the-art technologies to strengthen security defenses, using AI-based penetration testing, managing CTI sharing platforms, managing SIEM and IDS/IPS, orchestrating responses with NG-SOAR systems, and engaging in simulation training on cyber-range platforms. This individual should also be fluent in English and willing to serve as an expert in Athens, Greece. The successful candidate will have the opportunity to join a high-performing team comprised of diverse experts working collaboratively towards common objectives. We are searching for someone who exemplifies qualities such as responsiveness, integrity, and reliability and possesses excellent analytical, problem-solving, and organizational skills. Additionally, the ability to work effectively within a team is crucial, as this role involves supporting projects funded by the European Commission and national research frameworks. Initiative, flexibility, and a strong sense of responsibility are qualities we highly value in our ideal candidate. What You'll Do: Design, deploy, and manage AI-based penetration testing initiatives/frameworks to proactively identify vulnerabilities and mitigate potential security threats; Configure, manage, optimize, and maintain CTI sharing platforms such as MISP and OpenCTI, ensuring robust and timely threat intelligence distribution; Implement NG-SIEM solutions/technologies, based on tools such as ELK stack, Graylog, Wazuh, Grafana, Velociraptor, InfluxDB/Telegraf; Deploy, fine-tune, and oversee NG-SOAR platforms/solutions such as Shuffle, Wazuh, TheHIVE, Cortex, and IRIS, streamlining and enhancing incident response capabilities/activities; Configure and maintain behavioral IDS/IPS systems, including Snort, Suricata, and SecurityOnion, to detect and prevent malicious activities; Stay up-to-date with the latest security trends, tools, and practices, including CACAO Standards (STIX 2.1, TAXII) for threat intelligence and sharing; Contribute to the technical documentation; Collaborate with interdisciplinary teams to ensure seamless security operations and incident management. Requirements University degree in Computer Science, Information Security, or related field; preferably with postgraduate qualification at MSc or PhD level; Minimum of 5 years of experience in cyber security engineering, working directly with technical teams with proven track record; Experience in software design and development; Demonstrated experience in deploying and configuring: CTI sharing platforms such as MISP and OpenCTI; NG-SOAR platforms/technologies (Shuffle, Wazuh, TheHIVE, Cortex); NG-SIEM technologies including ELK, Graylog, Wazuh, Grafana, Velociraptor, InfluxDB/Telegraf; IDS/IPS solutions such as Snort, Suricata, and SecurityOnion. Familiarity with CACAO Standards (STIX 2.1, TAXII) is a strong plus; Exceptional problem-solving skills and the ability to work in a dynamic, fast-paced environment; Excellent command of English and Greek, both written and oral; Good interpersonal, organization, and communication skills, with the ability to work in a diverse team environment; Good analytical skills, as well as a proactive attitude towards solving problems; At least 2 years experience specifically in National and European research programs. Benefits We believe in rewarding talent and dedication. Here's what you can expect as part of our team: Competitive full-time salary; Private Health Coverage on the Company’s group program; Flexible Working Hours; Top-of-the-Line Tools; Professional Development: Benefit from language courses, specialized training, and continuous learning opportunities; Career Growth: Work with some of the most innovative and exciting specialists in the industry; Dynamic Work Environment: Thrive in a setting that offers challenging goals, autonomy, and mentoring, fostering both personal and company growth. If you want an exciting challenge, work with some of the coolest technologies, and enjoy your time doing it, then join us! Submit your detailed CV in English, quoting reference: ( CS/11/26 ). You may also consider all our other open vacancies by visiting the career section of our website ( www.eurodyn.com ) and follow us on Twitter (@EURODYN_Careers) and LinkedIn. EUROPEAN DYNAMICS (ED) ( www.eurodyn.com ) is a leading European Software, Information, and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Berlin, Stockholm, London, Nicosia, Valetta, Vienna, Den Haag, Hong Kong, etc.) The company employs over 1100 engineers, IT experts, and consultants (around 3% PhD, 41% MSc, and 54% BSc). We design and develop software applications using integrated, state-of-the-art technology. Our current IT projects have a value exceeding 300 million EURO. EUROPEAN DYNAMICS is a renowned supplier of IT services to European Union Institutions, international organizations, European Agencies, and national government Administrations in 40 countries and 4 continents. As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, colour, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion. EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published at www.eurodyn.com/privacy . By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorize ED to process your personal data for the purposes of the company's recruitment opportunities, in line with the Policy.

Location: Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Staff Security Governance Engineer, you will be the individual contributor who owns how GitLab writes, maintains, communicates, and measures its security policies and standards. You will turn emerging regulations, including AI regulation, into clear requirements that engineering, product, and legal teams can act on, and you will use automation to keep governance lightweight and continuous rather than a point-in-time exercise. You will sit on the Security Governance team within Security Assurance and work closely with Security Compliance, Security Risk, and GRC Engineering. You will report to the Director, Customer Trust & Security Governance. What you'll do Policies and standards Own the end-to-end lifecycle of GitLab's security policies, standards, procedures, and guidelines: drafting, stakeholder review, approval, publication, annual review, and retirement. Define and run the exception management process, including risk-based approvals, expiry tracking, and trend reporting that shows where policies need to change. Run policy attestation and investigate non-adherence. Keep policies clear, practical, and aligned with how GitLab's engineering teams work in a DevSecOps environment. Regulatory and framework alignment Monitor emerging regulations and standards (e.g., EU AI Act, NIST AI RMF, ISO 42001, sector or regional requirements) and partner with Legal well ahead of compliance deadlines to assess impact and update policy. Maintain mappings between our policies and frameworks such as SOC 2, ISO 27001, ISO 42001, FedRAMP, and NIST CSF, so requirements are written once and reused. Measurement and assurance Define KPIs for policy adherence and report trends to Security leadership. Run targeted internal assessments of adherence and drive remediation to closure. Support audit activities by coordinating evidence, testing, and remediation management. Customer trust Support customer questionnaires and customer meetings, and help turn recurring customer requests into better policies and self-service content. Automation and AI Identify and implement automation and AI-assisted workflows for policy management, evidence collection, control monitoring, and assessment work, in partnership with GRC Engineering. Technical leadership Act as a technical and program leader across Security, Product, Legal, and Engineering, influencing without direct authority. Mentor other team members and help set the direction of the Security Governance roadmap. What you'll bring 10+ years in security governance, GRC, or IT risk, with hands-on ownership of a policy and standards lifecycle and measurable outcomes, ideally at a global technology company. Working knowledge of SOC 2, ISO 27001, ISO 42001, FedRAMP, and NIST CSF, including how to put them into practice, not only how to read them Experience creating and maintaining an enterprise Information Security Management System (ISMS), ideally including hands on involvement in ISO 27001 certification or recertification. Understanding of cloud, SaaS, and DevSecOps practices, and the ability to write policy that engineers will follow. A risk-based mindset that balances compliance with real security risk. Demonstrated use of automation or AI to reduce manual GRC work. Strong written and verbal communication, including translating technical concepts for engineers, executives, auditors, and customers. Experience collaborating with Security, Product, Legal, and Engineering. Certifications such as CISSP, CISM, CISA, or similar are highly desirable. What success looks like First 30 days: Assessed the current policy library and exception process, built relationships with key stakeholders, and proposed a prioritized roadmap. First 90 days: Uplift the existing security policy library to align with NIST CSF, ISO 27001/27017/27018/42001, and PCI-DSS. First 120 days: A refreshed review cadence is in place, exception reporting is running, and can demonstrate a measurable improvement in policy adherence. First six months: Develop Policy as Code and collaborate with Security, Product, Legal, and Engineering for implementation into existing workflows. About the team The Security Assurance organization helps GitLab build and maintain trust by strengthening how we approach security, compliance, and risk. Security Governance sits within it and owns customer trust, security awareness, policies and standards, and other governance functions. Our counterparts are Security Compliance, Security Risk, and GRC Engineering. You will join a small team of four direct reports under the Director, where each person has broad scope and visible impact. We work remote-first and asynchronously, and we write things down and share them openly, so you'll draft and revise policies and standards in the open with input from Security, Legal, Product, and Engineering. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $168,000 — $238,000 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Renton, Washington, United States We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. Job Overview Wizards of the Coast has built a centralized platform, AI, and IT team that serves shared technology across Wizards of the Coast (WOTC) and Hasbro. We are led by the belief that providing industry-leading tools, innovative technology, and excellent support allows our teams to focus on delivering outstanding player experiences first and foremost. Wizards is looking for someone who is a world-class leader of platform and cloud security, with a focus on securing AI workloads. You will be partnering closely with other enterprise and platform teams to lead how we secure our developer and AI platforms across the company. This person needs to be able to understand how to interact with and handle partner expectations while balancing security, ease of use, and broadest impact across the company. The developers on the team use research-driven development to find the best solutions and mix of technologies in the rapidly growing field of AI. Our team values work-life balance while delivering high-quality technology. If this sounds exciting to you, we encourage you to apply. Location and Work Arrangement This role is based at our Renton, Washington office and follows a hybrid schedule designed to support in-person collaboration. Employees are expected to work onsite on Tuesdays, Wednesdays, and Thursdays, with the flexibility to work remotely or onsite on Mondays and Fridays. What You'll Do Deliver operational security procedures for testing, validating, and securing cloud and AI workloads Run red teaming processes for agentic, large language model (Large Language Model (LLM)), machine learning, and other AI workloads Partner with security team on internal tools, processes, and validation procedures for AI and developer products Run red-team processes for AI workloads Build out our automated software review/patch/remediation processes Partner with internal teams to build our next level secure developer platform What You'll Bring 7+ years in driving cloud security Experience deploying AI SaaS tools, AI cloud workloads Deep knowledge of what good Software Development Life Cycle (SDLC) patterns look like Experience with managing and deploying organizational cloud solutions Thoughtful leadership fostering collaboration and mutual support Who We Are We’re a team of creators, storytellers, and innovators united under the Hasbro family and home to beloved brands, AAA digital games studios and immersive experiences that spark imagination across generations. Together, we’re committed to a culture rooted in creativity, excellence, curiosity, and inclusion, and where every employee is empowered to think boldly, act with integrity, and spark joy for all. Hasbro About the Company – Hasbro Wizards of the Coast Who We Are – Wizards of the Coast Equal Opportunity Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. Accommodations If you have a disability and need reasonable accommodation during the hiring process, please inform your recruiter anytime throughout the process. Notice Regarding Hasbro’s use of AI in the Recruitment Process We use Greenhouse’s AI-powered Talent Matching tool to compare your application against our job requirements. How it works: Talent Matching compares information from your resume and application responses with job-related criteria established and weighted by Hasbro’s recruiting and hiring teams. Depending on the role, these criteria may include relevant skills, work experience, prior job titles, and industry experience. The tool then assigns a match category to help organize applications for review. Human oversight: Talent Matching supports — but does not replace — human review. It does not automatically advance or reject candidates or make employment decisions. Hasbro’s recruiters and hiring managers review applications and remain responsible for all hiring decisions. Greenhouse has published the results of an independent bias audit of Talent Matching. View the Greenhouse Talent Matching audit results . #Wizards The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package. Pay Range $163,000 — $244,600 USD Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include: Health & Wellness Time Off to Recharge Financial Well-being Life & Family Support Volunteer and Community Initiatives Learning & Development Exclusive Perks Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.

Location: United Arab Emirates Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. We are looking for a Deputy Regional Information Security Officer to own ICT security, operational resilience, and regulatory compliance across a portfolio of entities at different stages of maturity, from established licensed operations to new markets launching under frameworks. This is not a support function. You will be the named security officer for your entities, accountable to their boards and their regulators. This is a high visibility, high trust role for a security governance professional who thrives at the intersection of technology, compliance, and financial services, and who is energised by applying established group frameworks to the local needs of a growing regulated entity. Payward is one of the world's most trusted and secure digital asset platforms, operating across a growing network of regulated entities spanning Europe, the Middle East, and Asia Pacific. As we expand into new markets and deepen our regulatory footprint, the demand for embedded, senior-level ICT security leadership at the entity level has never been higher.   THE OPPORTUNITY - Prepare, contribute and report to regional risk governance and board committee meetings, highlighting control status, risk exposure, and readiness - Execute risk assessments and control testing across UAE operations in line with VARA cybersecurity guidelines and security best practices - Maintain and review Business Impact Assessments (BIA), integrating findings into global resilience planning - Contribute to Business Continuity Plan (BCP) documentation, testing, and updates, including entity-specific scenarios - Collaborate with Group Security and IT to: - Align UAE-specific regulatory controls with global policies and control frameworks - Contribute to the development of security policies to meet international and UAE compliance requirements - Conduct security control validation and document evidence for internal/external audits - Participate in remediation planning for audit findings and track progress to closure - Support the RISO in preparing and submitting regulatory documentation to regulators - Prepare and present security and resilience reports for internal governance committees and local entity management - Assist in responses to regulatory examinations, including due diligence and compliance queries - Liaise with compliance and legal teams to interpret regulatory changes and propose control adaptations - Participate in the regional incident response process, assist with post-incident reviews, and support continuous improvement activities - Coordinate with cross-functional stakeholders to embed security requirements into operational processes WHAT YOU WILL DO - Regulatory Governance - Serve as the named ICT security officer for your appointed entities, with formal accountability for security risk, ICT governance, and resilience oversight at board level - Prepare and present security, risk, and resilience materials to entity boards, with material review and coaching from the Global RISO Lead beforehand - Act as the primary point of contact for VARA and other relevant regulatory authorities on ICT and security matters -- including examinations, inspections, licensing interactions, and ongoing supervisory dialogue - Support entity go live processes by implementing and localizing established group ICT governance frameworks for new market launches, ensuring they meet UAE regulatory requirements and entity specific needs - As the portfolio evolves, engage with additional regulatory frameworks with support from the broader RISO team - ICT Risk and Security - Lead ICT and security risk assessments for your appointed entity, escalating material risks through local governance and the Global RISO Lead - Maintain and adapt entity level policies and procedures to align with group standards and UAE regulatory requirements - Coordinate control testing, evidence documentation, and audit preparation with global security and compliance teams - Manage the classification, escalation, and regulatory reporting of ICT-related incidents within the timeframes required by applicable regulators - Operational Resilience - Lead business impact assessments, critical function mapping, and business continuity planning at the entity level - Oversee continuity and recovery testing, ensuring outputs meet regulatory expectations and feed back into global resilience planning - Maintain oversight of ICT third-party dependencies and outsourcing arrangements in line with regulatory requirements - Group Liaison - Act as a key local liaison between UAE entities, the RISO team, Group Security, and Compliance - Drive local implementation of group frameworks, policies, and resilience standards, adapting them where jurisdiction-specific requirements demand - Represent entity priorities in group-led security initiatives and governance forums WHAT YOU BRING - 7+ years of experience in information security governance, ICT risk management, or regulatory compliance in a regulated financial services, fintech, or virtual asset environment - Direct experience as a named regulatory contact, involvement in regulatory examinations, supervisory interactions, licensing processes, or equivalent - Familiarity with UAE regulatory frameworks. Experience with VARA or other virtual asset / crypto-native regulatory regimes is a significant advantage and strongly preferred - Demonstrated ability to implement, adapt, and maintain compliance or governance frameworks within a regulated environment - Experience conducting risk assessments, business impact analyses, and resilience planning at the entity level - Familiarity with ICT outsourcing and third-party risk management within group structures - Ability to translate technical risk into board-level narrative and regulatory-grade documentation - Comfortable operating across multiple jurisdictions simultaneously, each at a different stage of regulatory maturity - Strong project management skills and the ability to drive outcomes across cross-functional, globally distributed teams - Certifications such as CISSP, CISM, CRISC, CISA, or ISO27001 Lead Implementer preferred - Familiarity with EU frameworks such as DORA and MiCA is strongly preferred WHY THIS ROLE - You will hold a named role within a regulated entity with accountability and board-level visibility - You will operate at the frontier of virtual asset regulation -- VARA is one of the most advanced and fastest-evolving crypto regulatory frameworks in the world, and you will be shaping how Kraken meets it from day one of market entry - You will build ICT governance programs from scratch for new market entries, not inherit and maintain what others have set up - Exposure to local governance forums, regulators, and senior stakeholders, with remote guidance and preparation support from the Global RISO Lead - The scope of this role is intentionally designed to grow -- as Kraken's entity footprint expands, so does the portfolio and the regulatory breadth you will be exposed to, potentially including Asian and EU frameworks such as DORA - You will join a remote-first, international team shaping the future of crypto asset governance and resilience across some of the world's most demanding regulatory environments Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on X https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Задачи: — Внедрение и развитие системы многофакторной аутентификации; — Организация харденинга ИТ-активов и контроль соответствия политикам безопасности; — Оптимизация работы системы антивирусной защиты; — Выстраивание многоуровневой системы учетных записей. Требования: — Архитектурное мышление в области сетевой безопасности и средств защиты сети; — Технические компетенции в организации харденинга ИТ-инфраструктуры; — Опыт работы со средствами защиты информации (средства АВЗ, NGFW, сканер уязвимостей, PAM, WAF и пр.); — Опыт построения процессов информационной безопасности «с нуля» или кардинальной перестройки; — Готовность к найму, обучению и управлению; — Умение выстраивать коммуникации с разработчиками, инженерами ИТ и ИБ, администраторами и топ-менеджментом; — Способность аргументировать решения с учетом потребностей бизнеса на основе риск-ориентированного подхода; — Системное мышление, аналитический подход, самостоятельность. Будет плюсом: — Практический опыт работы с продуктами Kaspersky (EPP, EDR, KSC); — Опыт внедрения сложных систем защиты (NTA, SIEM, IDM и пр.); — Опыт в DevOps-среде, работа с контейнеризацией и оркестрацией (Docker, Kubernetes); — Наличие сертификатов (CISSP, OSCP, вендорские сертификаты и др.). Условия: — Оформление по ТК с первого дня; — Конкурентный уровень дохода (обсуждается индивидуально); — Работа в аккредитованной IT-компании; — Плавный онбординг с поддержкой отдела обучения, необходимыми материалами и обратной связью; — Компенсация 70% расходов на образование, полезное для работы (после испытательного срока); — ДМС со стоматологией после прохождения испытательного срока.

Требования к кандидату: — 1+ years of experience in Information Security, Security Engineering, Data Security, DLP, or a related technical role. — Experience creating and tuning security policies — Basic scripting skills in Python or Bash — English B1+

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the team Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward a fundamentally different kind of GRC: one that directs Claude, with the right humans in the loop, to challenge and evidence the performance of controls continuously rather than through periodic audits. Within Security GRC, Compliance & Audit Programs runs the integrated audit across our frameworks and maintains the Common Control Framework, the single set of controls that the whole program is built on. This role sits in Audit & Assurance and owns the framework and the assurance view across every control domain. About the role As part of the Security Audit & Controls team,  you will own the CCF across every control domain, from access and change management to logging, encryption, and people controls: which controls we have, what each one says, how each maps to the frameworks and commitments we hold, and whether each one is actually working. You'll work with control owners and GRC Partners to draft and validate control descriptions and activities that describe reality rather than policy intent, build the monitoring that shows operating effectiveness continuously instead of once a year, and drive what monitoring finds to closure with control owners. Building with Claude is a normal part of the job: drafting and mapping controls, testing evidence, and monitoring control health, with you deciding where human judgment stays in the loop. This is an individual contributor role for someone who works well independently, writes clearly, and gets satisfaction from a control set that is accurate, tested, and trusted by auditors and engineers alike. Key responsibilities Own the Common Control Framework: the canonical control set, its mappings to SOC 2, ISO 27001/42001, HIPAA, FedRAMP, and customer commitments, and the change process for adding, retiring, or rewording controls Draft and validate control descriptions and control activities with control owners, so each control states who does what, how often, in which system, and what evidence proves it Design and run continuous monitoring of control efficacy: define the metrics and automated tests that show operating effectiveness, tune out false positives, surface failures to owners before an auditor does, and build the controls maturity model that shows where each control domain stands and what it takes to move up a level Verify remediation and carry it into steady state: GRC Partners lead remediation in their domains and control owners implement the fixes. This role advises on control design and implementation, confirms fixes against what the auditor actually asked for, and keeps one source of truth for control and finding status. Once a fix holds, it works with the partner to standardize the evidence pull and, where appropriate, automate it or build continuous Map new frameworks and commitments onto the CCF as we commit to them, and support gap assessments when a new framework, certification, product, or entity comes into scope, using the CCF as the baseline and writing the requirements for each delta Support the integrated audit and customer audits: readiness checks, walkthrough preparation, evidence request lists, and the readout of external findings back to GRC Evaluate evidence reliability, including the completeness and accuracy of system-generated reports and AI-generated evidence, and set the standard for what audit-ready evidence looks like here Build with Claude: automate control mapping, evidence testing, and monitoring, and verify machine-drafted control language before it becomes the record Minimum qualifications Several years in IT audit, security compliance, or controls assurance, including hands-on ownership of a control framework or control library across more than one framework (for example SOC 2, ISO 27001, FedRAMP, HIPAA) Working command of audit mechanics: scoping, walkthroughs, sampling, design versus operating effectiveness, deficiency evaluation, and evidence reliability Experience writing control descriptions, control activities, and test procedures that other teams and external auditors relied on Experience with continuous controls monitoring or automated evidence collection, whether you built it, ran it, or audited it Enough technical fluency to read a runbook, a configuration, or a pipeline definition and judge whether it enforces what the written control claims Clear writing, because your control language and status reports are what auditors, engineers, and leadership work from Ability to get control owners and partner teams to prioritize and close work without having authority over them Preferred qualifications Have designed or rebuilt a common controls framework and led the remapping of existing frameworks onto it Have stood up continuous controls monitoring or automated evidence programs and can speak to coverage, false-positive rates, and what changed as a result Have applied LLMs to assurance work, such as control drafting, framework mapping, evidence testing, or monitoring Have defined or assessed controls for AI systems or agents operating in production, or for home-built internal systems Have provided requirements for a homegrown GRC platform and worked with the engineers who build it You don't need to Have done everything on this list. The scarce combination this role exists for is framework ownership plus the judgment to tell whether a control actually works Write production code. The bar is fluency sufficient to read, query, and challenge Hold every certification. CISA, CISSP, or similar are welcome and not required Have prior AI-industry experience Logistics Education requirements: We require at least a Bachelor's degree in a related field or equivalent experience. Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas. However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Deadline to apply: None. Applications will be received on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $270,000 — $345,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Remote, Canada; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role GitLab's Security Risk function is responsible for reducing risk across the security division: third-party risk (TPRM), annual security risk assessments, quarterly risk reporting, and remediation of security findings. As a Senior Security Risk Engineer, you'll take ownership of risk identification, quantification, and remediation tracking across the business, and you'll be a driving force behind automating and modernizing how the team does this work using AI and scripting. Reporting to the Security Risk Manager, you will bring expertise on risk methodology, risk-based thinking, and AI-enablement. In this role, you'll partner closely with Security, Legal, IT, Product, and Engineering to translate technical findings and vendor risk into business-relevant risk statements and risk treatments. You’ll help surface emerging risks, and report top risks to leadership. Some examples of our projects: Building and maintaining a risk register that translates technical vulnerabilities, control gaps, and third-party risk findings into quantified, business-relevant risk statements. Driving cross-functional remediation of security findings and risk issues to closure, tracked against SLAs. Driving automation and AI-enabled improvements for risk and GRC workflows so the team can spend less time on manual work and more time on high-value risk analysis and program maturity. What you'll do Own risk identification, analysis, and prioritization across third-party risk (TPRM), security risk assessments, and security findings, using an established risk framework (e.g., NIST RMF, ISO 31000, or NIST 800-39). Translate technical vulnerabilities, control gaps, and risk findings into clear, quantified risk statements that non-security stakeholders and leadership can act on. Drive remediation of findings and risk exceptions to closure, partnering with Engineering, IT, Product, and Legal, and escalating stalled or high-severity items. Mature and maintain a risk register and quarterly reporting cadence that gives leadership clear visibility into open risk, remediation progress, and trends. Own and mature AI risk management, including AI impact assessments, AI risk assessments, and risk treatments, to support ISO 42001 certification. Design, develop, and implement key risk indicators and supporting metrics for top risks in the risk register. Identify manual, repetitive steps in risk and TPRM workflows and personally build the automation, scripting, or AI-enabled tooling to remove them. Contribute to the roadmap for the risk program, incorporating new frameworks, regulatory changes, and lessons learned from past assessments. Monitor the internal and external risk landscape (new frameworks, threat trends, business changes) to identify and escalate emerging risks before they become findings. What you'll bring 5+ years of experience in security risk management, working with security-centric risk management or compliance frameworks (e.g., NIST RMF, NIST 800-39, ISO 31000). Familiarity with AI governance frameworks (e.g., ISO 42001, NIST AI RMF) is a plus. Experience designing and executing qualitative and quantitative risk analyses that translate technical risks into measurable business impact. A track record of driving risk assessments, risk registers, and remediation efforts to closure across IT, Procurement, Internal Audit, Legal, Product, and Engineering, in a heavily regulated or multi-entity environment. Experience interpreting technical control requirements and translating them for both technical and non-technical stakeholders. Demonstrated bias toward automation: you've personally built scripts, workflows, or AI-enabled tooling that reduced manual risk or GRC work, not just evaluated tools conceptually. Comfort operating with ambiguity, managing multiple concurrent assessments, and reprioritizing under tight deadlines. Exceptional written and verbal communication skills with demonstrated ability to translate security risks into business risks. Strong understanding of cloud security, SaaS security models, and DevSecOps practices. Relevant certifications (e.g., CISSP, CISM, CISA, CRISC) are preferred but not required. About the team The Security Assurance organization helps GitLab build and maintain trust by strengthening how we approach security, compliance, and risk across the company. The Security Risk team sits within that group and owns third-party risk (TPRM), security risk assessments, and remediation of security findings. The Security Risk Team performs thorough, collaborative, and efficient risk assessments as well as drive risk reduction so that GitLab can achieve its goals while maintaining a high level of security. Security Risk counterparts are Security Compliance, Security Governance and Security Enablement functions. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $139,200 — $189,000 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Warsaw, Mazowieckie, Poland; Sofia City, Bulgaria; Limassol, Cyprus Workplace: hybrid Capital.com's Product Security team protects our web and mobile applications, infrastructure, and external perimeter in a highly regulated environment. As Senior/Staff Application Security Engineer, you will raise the bar for application security across the organisation. This role is measured by leverage: how well you design, automate, and scale security processes so that many engineering teams can build securely by default. You will lead security architecture reviews and threat modelling, increasingly with the help of AI tooling, and turn one-off security work into repeatable, self-service capabilities. The role combines deep hands-on offensive and defensive security expertise with the engineering mindset needed to automate at scale. You will work closely with development, QA, DevOps, and platform teams. Responsibilities: Security Architecture & Threat Modelling: Lead security architecture reviews and threat modelling for new and existing systems, using AI tools to make reviews faster, more consistent, and scalable across teams Act as a security force multiplier by influencing the standards, patterns, and guardrails that let teams move fast and stay secure Security Automation & Tooling: Design, build, and automate scalable security processes that engineering teams can self-serve, covering secure design review, threat modelling, testing, and remediation workflows Integrate and automate security checks across the SDLC and CI/CD pipelines (SAST, DAST, SCA, secrets, and IaC scanning), tuned for strong signal and low friction Own and evolve security tooling such as DefectDojo and SAST, DAST, and SCA platforms, maximising automation, coverage, and integration Apply AI and LLM-based tooling to architecture review, threat modelling, code review, and vulnerability triage, and help define how the team adopts these tools safely Security Testing & Vulnerability Management: Conduct and oversee security assessments of web and mobile applications, APIs, and cloud infrastructure, including manual testing and PoC development Run vulnerability scans across internal infrastructure and the external perimeter, then analyse findings, define remediation, and track issues to closure Support and triage the Bug Bounty Program and external vulnerability reports, automating triage where possible Participate in and help lead red teaming and offensive security exercises Enablement: Drive knowledge sharing on secure development, mentor engineers, and deliver training for development and QA teams Requirements: Experience: 5+ years in application or product security, or equivalent depth, with a track record of senior or staff-level impact Demonstrable experience leading security architecture reviews and threat modelling (e.g. STRIDE, attack trees, data-flow analysis) across multiple teams or products Proven ability to automate and scale security processes by building tooling, integrations, and self-service workflows that reduce manual effort Technical: Strong hands-on security testing skills, including code review and web, mobile, and API application security assessments, as well as the ability to triage and validate external vulnerability reports and bug bounty submissions Strong software engineering ability in at least one language (e.g. Python, Go, JavaScript), with the ability to build automation, not just scripts Deep understanding of the OWASP Top Ten, secure design, and secure coding best practices Experience with SAST, DAST, SCA, and vulnerability management platforms, and integrating them into CI/CD Strong understanding of modern application architectures: REST APIs, microservices, cloud-based systems, and containers Practical experience applying AI and LLM tooling to security work, or clear enthusiasm and aptitude to do so Collaboration: Excellent communication and influencing skills: you can explain security concepts to technical and non-technical stakeholders and drive change without direct authority A self-starter who enjoys solving complex problems, building leverage through automation, mentoring others, and strengthening security culture Nice to have: Experience securing the AI harness: hardening LLM and agent pipelines, prompts, tool and MCP integrations, and model endpoints against prompt injection, data leakage, and insecure agent actions Experience securing Kubernetes, including cluster hardening, RBAC, network policies, admission control, workload isolation, and image and supply-chain security Experience securing AWS infrastructure, including IAM, network and account architecture, key and secret management, and CSPM Experience building AI-assisted security tooling or internal self-service security platforms Experience mentoring or technically leading a security team Offensive or advanced security certifications such as OSAI, OSEP, OSCP, or OSWE What you'll get in return: You will join the company, that cares about work and life balance Annual Bonus based on the performance review cycle Generous Annual Leave Policy Medical Insurance and Pension fund, with additional benefit packages based on the location Hybrid working model (3 days from our modern office and 2 days fully remotely) Comprehensive Workation Policy with 30 more remote days available. Possibility of taking two additional days of paid leave per year to dedicate to volunteering efforts.

Location: Warsaw, Mazowieckie, Poland; Sofia City, Bulgaria; Limassol, Cyprus Workplace: hybrid Capital.com builds and operates web and mobile trading platforms, public and partner APIs, and the backend services behind them, all in a highly regulated environment. As Application Security Architect, you will be the senior design authority for the security of these products. You will set the direction for how we secure software at scale: you will own secure-by-design patterns and standards, lead threat modelling and architecture reviews, and define the application security baseline that engineering teams build against. Working closely with the Product Security team and the Director of Product Security, you will guide AppSec processes and set the vision for your area without direct line management. You will treat security as a shared outcome rather than a gate, balancing strong protection with developer experience and delivery speed, and you will earn adoption through enablement rather than mandates. Responsibilities: Security Architecture & Standards: Define and maintain secure-by-default reference architectures for common patterns: web apps, mobile backends, microservices, public and partner APIs, and event-driven services Own core application security architecture decisions: authentication and authorisation, session management, API security, secrets management, multi-tenant isolation, and security logging and auditing Lead the redesign of user authentication and the delivery of security features into the product Develop and roll out application security standards, secure-coding guidelines, configuration standards, reusable design patterns, and architecture decision records (ADRs) that engineers can apply without a security expert in the room Define internal policies for the safe use of AI-assisted and vibe-coding tools Define security requirements for acquired technology and guide its secure integration Threat Modelling & Design Review: Establish and run a threat-modelling operating model, covering scope, cadence, templates, and facilitation, proportionate to each product's risk tier Own the security review stage of the new product approval process, covering architecture design and configuration Lead design reviews for high-impact initiatives: new products, new auth flows, payment and sensitive-data flows, platform migrations, and major refactors Identify design-level risks and agree practical, prioritised mitigations with engineering teams Secure SDLC, DevSecOps & Supply Chain: Assess the current state of application security, propose improvements, and drive the secure SDLC strategy with Engineering and Security leadership Oversee AppSec processes and own the tooling strategy (SAST, DAST, IAST, SCA, and secrets scanning), including how findings flow back to engineering Embed security controls as guardrails in CI/CD through policy-as-code, with agreed enforcement and escalation paths Partner with DevOps to organise repository management and prevent supply-chain attacks, covering safe component usage, dependency management, SBOMs, and build integrity Improve the security of our internal tools Requirements: Experience: 8+ years in technology, including 5+ years in a dedicated application or product security role, with a strong engineering background and hands-on architecture or design ownership Proven track record creating, documenting, and rolling out security standards, patterns, and best practices across a complex engineering organisation Deep, demonstrable threat-modelling experience across product portfolios Technical: Experience designing and implementing a secure SDLC in a cloud-native environment. Strong AWS knowledge is required, and exposure to GCP or other clouds is welcome Strong command of OWASP standards (Top 10, ASVS) and DevSecOps practice, including AppSec tooling (SAST, DAST, IAST, SCA, secrets scanning) and vulnerability management Deep understanding of modern distributed architectures: microservices, REST and GraphQL APIs, event-driven systems, OAuth2/OIDC, and containerised workloads (Docker, Kubernetes). You should be able to reason about their trust boundaries, attack surface, and data flows across web and mobile clients Collaboration: Exceptional ability to influence and align engineering teams without direct authority, and to brief both engineers and executives Pragmatism and strategic thinking: you balance the ideal with the achievable, protect delivery throughput, and turn long-term direction into an actionable plan Clear written communication through diagrams, ADRs, and patterns, plus a track record of mentoring and cross-functional collaboration Nice to have: Experience in fintech, trading, brokerage, or another regulated environment Awareness of relevant regulatory and compliance drivers: FCA and CySEC operational resilience, GDPR, and PCI DSS Software supply-chain security, including SBOMs and artifact and build integrity Experience securing AI-integrated product features, or using AI to scale an AppSec programme Experience building or running a Security Champions programme CSSLP, GIAC GDSA, or a hands-on offensive security certification. Certifications are valued but secondary to demonstrated experience What you'll get in return: You will join the company, that cares about work and life balance Annual Bonus based on the performance review cycle Generous Annual Leave Policy Medical Insurance and Pension fund, with additional benefit packages based on the location Hybrid working model (3 days from our modern office and 2 days fully remotely) Comprehensive Workation Policy with 30 more remote days available. Possibility of taking two additional days of paid leave per year to dedicate to volunteering efforts.

Location: Remote; San Francisco; New York Workplace: Remote Patreon is a media and community platform where over 300,000 creators give their biggest fans access to exclusive work and experiences. We offer creators a variety of ways to engage with their fans and build a lasting business including: paid memberships, free memberships, community chats, live video, and selling to fans directly with one-time purchases. Ultimately our goal is simple: fund the creative class. And we're leaders in that space, with: - $10 billion+ generated by creators since Patreon's inception - 100 million+ free memberships for fans who may not be ready to pay just yet, and - 25 million+ paid memberships on Patreon today. We're continuing to invest heavily in building the best creator platform with the best team in the creator economy and are looking for a Security Engineer to support our mission. This role is Fully Remote (US only), or can be based in New York or San Francisco (where it is open to those who are able to be in-office 3 days per week on a hybrid work model.) About the Team Patreon’s security team works to protect Patreon creators and their fans. The team deals with all facets of Patreon’s security, including application security, infrastructure security, and internal/corporate security. We’re a small but effective team. We write code to solve security problems and work closely with our partners across the engineering organization. We also understand the importance of balancing security risks against business needs. We strive for honest and effective communication and focus on pragmatically reducing risk over checking boxes. The security team is part of Patreon’s Risk Engineering org, which also includes our Safety Engineering and Identity and Access teams. Collectively, the risk org tackles a range of problems including content moderation, internal tooling, identity verification, access control, and account security. About the Role In this role, you’ll be a member of our Security team. You’ll split your time between contributing to security projects and responding to security investigations, vulnerabilities, or questions. The work spans application security, infrastructure security, and internal/corporate security. It includes both proactive and reactive security work. You’ll be part of an on-call rotation and help respond to security incidents and investigations. You’ll write code – both to support security work and to improve the security of the Patreon platform. You’ll work closely with other members of the security team, the wider Risk engineering org, and cross functional partners in engineering, legal, and IT. Your work will help reduce known risks and will protect the security, privacy, and trust of Patreon creators and their fans. What you’ll need: - You have two or more years of experience reducing security risks in the application, infrastructure, or corporate security spaces. You can create a threat model and to explain why a given risk matters and what we might do to reduce it. - You have deeper knowledge (three or more years) in at least one security or security-adjacent domain (infrastructure security, application security, cloud security, corporate/IT security, cryptography, privacy, etc.) - You can develop software (Python, Rust, Golang, or a similar language). You have experience working in a modern software development environment (git, CI/CD, LLM coding tools, etc.) - You have experience using AI tools (LLMs, ML models, etc) to identify and address security issues (software vulnerabilities, detection and response, etc.) - You’re energized by fast iteration: shipping MVPs, testing hypotheses, and evolving products based on what creators and fans respond to. - You take pride in creating elegant solutions to messy, real-world problems and balancing pragmatic trade-offs between security risks and business needs. - You believe in Patreon’s mission: giving creators control over their work and building communities that feel good to be in. - Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or a related field, or the equivalent Bonus if you have: - Experience working on large scale Internet platforms that allow users to upload content. - Past contributions to large scale, production code bases. - Experience responding to security incidents, investigating incident impact, and building out incident mitigations. We hire talented and passionate people from different backgrounds because workplace diversity and inclusion is critical to our ability to serve creators worldwide. If you’re excited about a role but your past experience doesn’t match with every bullet point outlined above, we strongly encourage you to apply anyway. If you’re a creator at heart, are energized by our mission, and share our company values, we’d love to hear from you. About Patreon Patreon powers creators to do what they love and get paid by the people who love what they do. Our team is passionate about making this mission and our core values come to life every day in our work. Through this work, our Patronauts: - Put Creators First | They’re the reason we’re here. When creators win, we win. - Build with Craft | We sign our name to every deliverable, just like the creators we serve. - Make it Happen | We don’t quit. We learn and deliver. - Win Together | We grow as individuals. We win as a team. Patreon is proud to be an equal opportunity employer. We provide employment opportunities without regard to age, race, color, ancestry, national origin, religion, disability, sex, gender identity or expression, sexual orientation, veteran status, or any other protected class. If you need a reasonable accommodation during the interview process, please let us know via email at accommodations@patreon. Patreon offers a competitive benefits package including and not limited to salary, equity plans, healthcare, flexible time off, company holidays and recharge days, commuter benefits, lifestyle stipends, learning and development stipends, patronage, parental leave, and 401k plan with matching. Patreon operates under a hybrid work model, where employees based in office locations are expected to come into the office three days per week, excluding sick time and paid leave. The goal of this policy is to be intentional about the in-person time we spend together to strengthen the feeling of community at Patreon. Candidates hired into remote-eligible roles are not expected to meet the same requirements. At Patreon, we believe in fair and transparent pay. In compliance with New York and California pay transparency laws, we are sharing the expected salary range for this role. The posted salary range is dependent on the location and the level. This range may encompass multiple levels within the role’s job family. The final offer will be based on candidate’s experience, skills, competencies, and geographic location, aligning with the appropriate job level within Patreon’s leveling framework. For remote employees located outside CA and NY, salary may vary based on location and local market conditions. Patreon reserves the right to modify or update compensation and benefits at any time.

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters WHAT YOU'LL ACHIEVE - Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up. - Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. - Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful. - Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements. - Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes. - Help define and track metrics such as coverage, MTTD, and alert quality. - Join a shared on-call rotation for incident response. SKILLS YOU'LL NEED TO BRING - We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you. - 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role. - Have written or tuned detections that run in production, and care about signal quality and cutting noise. - Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly. - An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect. - Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs. - Have used SIEM, EDR, or SOAR tools in any size of environment. - Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end. NICE TO HAVE - Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry. - Experience running SIEM, EDR, or SOAR platforms at large scale. - Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections). - Experience applying LLMs or agent-style tooling to security workflows. - Experience securing AI-enabled systems or endpoint tooling. - Kubernetes or container detection experience. - Background in threat intelligence, malware analysis, or digital forensics. - Contributions to the security community through research, tooling, CTFs, or talks. - Experience at a high-growth startup or AI company. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $185,000 - $280,000 per year.   By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550 and and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528.   #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: Dublin, Ireland Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters WHAT YOU'LL ACHIEVE - Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up. - Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. - Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful. - Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements. - Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes. - Help define and track metrics such as coverage, MTTD, and alert quality. - Join a shared on-call rotation for incident response. SKILLS YOU'LL NEED TO BRING - We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you. - 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role. - Have written or tuned detections that run in production, and care about signal quality and cutting noise. - Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly. - An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect. - Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs. - Have used SIEM, EDR, or SOAR tools in any size of environment. - Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end. NICE TO HAVE - Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry. - Experience running SIEM, EDR, or SOAR platforms at large scale. - Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections). - Experience applying LLMs or agent-style tooling to security workflows. - Experience securing AI-enabled systems or endpoint tooling. - Kubernetes or container detection experience. - Background in threat intelligence, malware analysis, or digital forensics. - Contributions to the security community through research, tooling, CTFs, or talks. - Experience at a high-growth startup or AI company. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role's scope and complexity, and the candidate's experience and expertise, and may vary from the range provided below. The estimated base salary range for this role is €75,000–€142,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.