Вакансии

Location: Global Remote Workplace: Remote ABOUT MATTER LABS Matter Labs builds private settlement infrastructure that lets regulated institutions settle directly with each other without exposing data, ceding control, or waiting days. Global finance moves $4 quadrillion a year on systems designed for paper and telex. The institutions that built them - from clearing houses to exchanges to the world's largest banks, institutions are now actively replacing them. Our core product, Prividium, gives each institution its own private settlement environment (a Prividium Zone) with independent governance and built-in interoperability across counterparties, asset classes, and jurisdictions. Settlement happens through zero-knowledge proofs: one party proves a transaction is valid without revealing any underlying data to the counterparty. The only private settlement infrastructure built on zero-knowledge cryptography. Founded in 2018. Backed by a16z and Union Square Ventures. A fully remote team of around 70 with eight years of production zero-knowledge infrastructure behind us, now pointed at the biggest problem in institutional finance. THE ROLE You will protect ZKsync's core: smart contracts, ZK circuits, and blockchain nodes. Your reviews, threat models, and incident work decide whether vulnerabilities are found by us or by attackers. The role owns internal security reviews of critical components, threat modeling, adversary research, and the security side of incident response, and it carries broad license to spot gaps and fix them beyond any assigned list. It is a hands-on individual contributor role for someone who wants to know how things break and applies that instinct ethically where the stakes are high. WHAT YOU'LL DO - Break things on purpose. Threat-model and review Solidity contracts, blockchain state transition functions in Rust, and other critical systems before an attacker gets the chance. - Own protocol components. Take responsibility for the secure architecture and implementation of the components you adopt, from design review through production. - Track the adversary. Follow hacks, exploits, and new attack vectors across the industry and convert the lessons into concrete improvements in our systems. - Scale security through others. Embed secure-design practice across development teams and influence architecture decisions early, without formal authority. - Use AI on defense. Apply modern AI systems to scale security work, while accounting for attackers using the same tools. - Respond when it counts. Join security investigations and incident response, often under time pressure with incomplete information. WHAT WE LOOK FOR Each of these is a demonstrated capability, shown through work you have done: - A record in security engineering or security research: threat modeling, security-focused code review, or vulnerability research on production systems, with findings you can walk through mechanism by mechanism. - Proficiency in strongly typed languages such as C++, Go, or Scala. Rust and Solidity are our primary languages, and prior experience with them is not required. - Deep grounding in algorithms and data structures, including their computational and memory complexity, with experience implementing them from scratch. - Protocol-level debugging and root-cause analysis on complex distributed systems. - Working knowledge of recent security incidents in the blockchain space and the prevention techniques behind them. - Clear written and spoken English, the company's working language. If you meet most of these and believe you can do this job, apply anyway. NICE TO HAVE Hands-on experience with Solidity smart contracts, ZK circuits, or core blockchain protocols. Public security research, audit reports, bug-bounty results, or CTF history all count as evidence. WORK MODEL & PAY - Competitive base salary. Matter Labs applies no geographic pay discounts. - Performance-based variable compensation with a defined annual target is additional. The plan may pay in ZK tokens or cash. A long-term token incentive is also additional and is paid in ZK tokens, with new-hire grants vesting over four years and a one-year cliff. - Fully Remote. Occasional travel to team gatherings and industry events. - Freedom & ownership culture: no time tracking (where legally applicable), minimum bureaucracy-only results matter.

Location: Lisbon, Portugal About the role: We are looking for a technically strong Senior Application Security practitioner ready to take on real ownership. You will work directly with the Head of AppSec, contributing to the Secure Design practice and helping drive shift-left security across the organization. What You'll Do Help build and mature the Secure Design and Threat Modeling program by defining methodology, review standards, and sign-off criteria across the organization Drive shift-left security initiatives, embedding security earlier in the development lifecycle through design reviews, developer enablement, and security gating in CI/CD Own API security as a discipline Support offensive security initiatives Build and maintain security automation in Python, tooling that scales AppSec capacity Work directly with developers on SAST and SCA remediation, scan optimization, and reducing friction in the security feedback loop Contribute to AI-assisted security pipelines; define escalation paths, SLAs, and accountability structures for vulnerability management What We're Looking For Hands-on experience across secure design, threat modeling, API security, and offensive security Offensive security capability with penetration testing experience and solid understanding of real-world attack and API exploitation patterns Deep familiarity with OWASP Top 10 in practice API security depth, experience assessing REST and GraphQL APIs Python proficiency, comfortable building automation tools that others will depend on Experience in shift-left programs: security in CI/CD, developer enablement, design review processes Understanding of web application and API security Comfortable reading code across languages and engaging with engineering teams at technical depth Familiarity with cloud-native environments and attack surface management Demonstrated ability to influence across engineering and product and operate at architecture level Relevant certifications are a plus: OSCP, OSWE, GWEB, CSSLP, CISSP, CEH Exposure to AI-assisted security tooling or LLM security is a differentiator Experience as a developer and fluency in Ruby, Python, and Scala are a plus We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday). Benefits iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO). For additional information on iCapital Network, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc

Location: San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role The Detection & Response (D&R) team plays a critical role in protecting our systems, users, and data from security threats. We’re looking for an experienced Technical Program Manager to own and evolve incident management within D&R. This is a senior-level specialization on the Technical Program Manager ladder, focused on how we detect, respond to, and learn from security and operational incidents. You’ll be the driving force behind maturing and scaling our incident response lifecycle—from detection and triage through containment, remediation, and post-incident review. Critically, some of the highest-impact work in this role happens after the immediate response: gathering data on incident trends, reporting on patterns and root causes, and working cross-functionally across engineering, security, infrastructure, and product teams to ensure that broad fixes and systemic improvements are actually implemented. You won’t just manage incidents—you’ll make sure we get meaningfully better after each one. Responsibilities Own the end-to-end D&R incident management program: detection workflows, response processes, escalation paths, communication standards, and remediation tracking. Serve as incident commander for security incidents, driving clear coordination across executive, engineering, security, legal, and other appropriate stakeholders. Establish and run incident commander rotations within D&R, ensuring clear ownership and effective coordination during incidents of varying severity. Drive post-incident accountability by defining how action items are captured, assigned, tracked, and completed across teams—ensuring follow-through on both tactical fixes and strategic improvements. Gather, analyze, and report on incident trends and patterns to surface systemic risks, recurring root causes, and areas where the organization is most vulnerable. Translate trend analysis into actionable cross-functional initiatives: partner with engineering, infrastructure, security, and product teams to prioritize and implement broad fixes and preventive improvements that address root causes rather than symptoms. Lead incident review forums (post-mortems, retrospectives) and ensure learnings are captured, socialized, and acted upon across the organization. Develop and maintain D&R incident response documentation, playbooks, runbooks, and training materials; keep them current as the threat landscape and our systems evolve. Partner with detection engineering to improve alert fidelity, reduce noise, and shorten time-to-detection for security events. Define, develop, and track incident management KPIs and report regularly to D&R and Security leadership. Support broad cross-functional training and initiatives to uplevel security awareness across the company (e.g. Tabletop exercises, training, talks). You may be a good fit if you: Have 7+ years of experience in technical program management, incident management, or security operations, with significant time spent in a detection & response or security incident response context. Have led or built incident response programs at a technology company, ideally in a high-growth or security-intensive environment. Have a demonstrated track record of turning incident data into organizational improvements—not just writing post-mortems, but driving the cross-functional work to implement systemic fixes. Are comfortable participating in on-call responsibilities and leading incident response during high-severity security events, including off-hours. Have experience building and scaling operational processes from the ground up in environments where structure didn’t previously exist. Excel at driving accountability and follow-through across multiple teams without direct authority—you know how to influence, track, and close the loop. Have strong analytical skills and experience with incident trend analysis, metrics reporting, and data-driven prioritization. Are highly organized with a knack for bringing structure to ambiguous, fast-moving situations. Have excellent communication skills, especially under pressure and when coordinating across technical and non-technical stakeholders, including executive leadership. Thrive in fast-paced environments where priorities shift and you’re often working with incomplete information. Deadline to apply: None. Applications will be received on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $290,000 — $365,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco, CA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Claude is now good at security work. It finds and fixes vulnerabilities in real codebases, triages alerts, and reasons about how an attacker would move through a system, and it improves with every model we ship. Many security platforms build on Claude and we shipped our first security product this year (Claude Security). You'll lead the cybersecurity product at Anthropic. That means setting the strategy, deciding what we build and where we partner, shipping products, and being the company's voice with CISOs, security vendors, and researchers. Some of this is 0→1 (our first-party products are a few months old and the next ones don't exist yet) and some of it is scaling what already works. Security touches nearly every team at the company. Key responsibilities Set Anthropic's cybersecurity product portfolio strategy and be accountable for the results. Ship security products. Vulnerability discovery and remediation in Claude Code today and a broader set of capabilities in the future. Represent Anthropic on security externally, with CISOs, vendors, researchers, governments, and press. Partner with research. Know where the model falls short on security tasks and help build a plan to improve. Work with safeguards and policy on model access for Cybersecurity. Keep the cross-functional threads moving across research, engineering, sales, safeguards, policy, legal, and comms. Minimum qualifications You've spent meaningful time in security, whether building security products, running a security team, or doing the work yourself in application security, detection and response, vulnerability research, or offensive security. You've built products or businesses from scratch and taken them to paying customers. You design for where the models will be rather than where they are. You treat what the model can't do yet as a research target with a reliability bar, and you know what to ship in the meantime. You have strong product judgment and enough technical depth to read a finding and tell whether it's real. You're willing to do the unglamorous work. You communicate well with CISOs, researchers, and executives alike. Preferred qualifications 12+ years of experience building and shipping products, especially in the security space . Fluency with AI products: evaluations, model behavior as part of the product surface Technical background or experience working closely with infrastructure/platform teams Strong technical judgment with ability to go deep on security and infrastructure topics Structured thinking and ability to break down complex compliance requirements into shippable features The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $385,000 — $460,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Doha, Qatar NetWitness provides advanced threat detection, investigation, and response capabilities that help organizations detect sophisticated threats, investigate incidents, and protect critical IT and OT environments. Job Summary We are seeking a highly skilled Senior Cybersecurity & Operational Technology Specialist to join the NetWitness team and support customers in Qatar and the broader region. This role requires the ability to work in Qatar and provide onsite support to customers as needed, including complex investigations, cybersecurity assessments, consulting engagements and incident response. The role will also support the sales team as a senior technical advisor, helping customers understand NetWitness technologies and services, define requirements, scope engagements and develop technical solutions and proposals. Key Responsibilities Partner with local sales teams to develop technical solutions, proposals and customer engagement plans Lead comprehensive reviews of customer cybersecurity posture across IT and OT environments. Evaluate customer environments to identify vulnerabilities, security gaps, and opportunities to improve cyber resilience. Translate assessment findings into actionable improvement plans, helping customers mature their security defenses. Design and implement secure OT network architectures using segmentation, zero-trust principles, and industry recognized models such as the Purdue Model. Conduct detailed cybersecurity assessments and threat modeling on physical industrial control systems (ICS), SCADA and other OT environments. Develop and execute specialized OT incident response playbooks that prioritize process safety and plant availability. Assist with aligning environments with recognized cybersecurity frameworks, including IEC 62443 and NIST SP 800-82. Develop and maintain OT risk assessments and translate technical findings into actionable risk priorities for customers executive stakeholders. As part of the job, the resource will deliver cybersecurity consulting services both remotely and in-person. Deliver proactive services including compromise assessments, gap analysis, threat hunting, incident readiness reviews and customer training. Conduct digital forensics investigations on endpoints, networks, memory, OT and cloud environments using industry standard tools. Lead incident response engagements, including triage, malware analysis, threat hunting, and root cause determination. Develop forensic reports, timelines, and executive summaries for customers and stakeholders. Develop or customize tools and scripts to improve investigation process. Collaborate with cross-functional teams to mitigate threats and recommend remediation strategies. Provide onsite support to customers in Qatar on short notice and travel regionally or internationally for customer engagements and incident response as required. Mentor junior analysts and contribute to team knowledge-sharing initiatives. Requirements 7+years of cybersecurity experience and significant hands-on experience in digital forensics and incident response. Demonstrated hands-on experience securing or assessing OT/ICS environments, including industrial networks, segmentation, incident response, and security architecture. Strong working knowledge of OT cybersecurity frameworks and standards, including IEC 62443 and NIST SP 800-82. Strong executive-level and customer-facing communication skills, with the ability to translate complex technical findings into business and operational risk. Relevant cybersecurity certifications such as GCFA, GCFE, GCIH, GNFA, GREM, CISSP, CISA, OSCP, or equivalent are strongly preferred. Fluency in English and Arabic (spoken and written). Must currently reside in Qatar or can legally work in Qatar and provide onsite customer support as required.

Location: Remote About GiveDirectly What if the most effective way to fight poverty was also the simplest: give people money and trust them to decide what they need? Since 2011, GiveDirectly has proven that idea at scale. We’ve delivered more than $1B in cash directly to 2+ million people living in poverty and crisis across 15 countries, and rigorous research shows the results: healthier kids, stronger businesses, sturdier homes, and more resilient families and local economies. Cash is now widely recognized as one of the most scalable, cost-effective, and dignified forms of aid. Our ambition goes beyond our own programs. We want cash to become the benchmark for aid, much as the index fund became the benchmark for investing, so that every aid dollar is held to one question: is this doing more good than giving the money directly to people living in poverty? We’re growing fast, and this is a rare and important moment to join. We expect to hit $1B in revenue in 2026 with significant growth forecast for 2027. At the same time we are building a new technology stack and operating model designed for a roughly 10x change in scale, and we are actively pursuing partnerships with major funders to move even more money in bigger ways, to people who need it. We are known for our extensive integration of technology into field processes; our quantitative approach to performance measurement; and our commitment to rigorous, independent, experimental evaluation of our impact, with multiple Randomized Control Trials completed and others in progress. How we work Our team spans 20+ countries and 69 languages. Our culture is candid, analytical, and non-hierarchical. We expect high ownership and give people real responsibility early. Our values are central to how we hire, work, and grow, and they are deliberately opinionated: Recipients first. Recipients’ preferences come before those of donors or ourselves. Team next. We optimize for organizational success, not individual success. Be proactively candid. We say what we believe and share information openly. Create positive energy. We aim to be a source of energy for colleagues, not a drain. Think rigorously; act quickly. We reason from first principles, then act rather than debate. Know yourself and grow. We own our imperfections and seek feedback to grow. Accept reality. Propose solutions. We focus on what can change and bring solutions, not just problems. Be productively ambitious. We take risks for step-change impact, not incremental progress. If they describe how you like to work and they energize you, this could be a great fit. Want to learn more? Read and listen: We are one of Time100’s Most Influential Companies of 2026, and our work has been covered by The Economist , NPR , TED , and The Washington Post . We're now preparing to deliver billions of dollars a year to people in extreme poverty, if funding allows. Read our CEO's essay on what that will take. Priority application deadline: Applications will be reviewed on a rolling basis. Early applications are heavily encouraged. We’re growing at incredible speed, and expect to hit $1B in revenue in 2026 with significant growth forecast for 2027. We’re hiring a Chief Technology Officer to lead the building and rebuilding of the technology, systems and ways of working that will enable a sustained $5B+ p/a operation. You will build software that safely and securely moves billions of dollars to millions of vulnerable people in some of the poorest and highest need parts of the world. This will require applying excellent engineering, team building and organizational judgment to complex, high-stakes operations: identity and fraud management, machine learning on large but imperfect datasets (cell phone data, satellite imagery, government registries), mobile money integrations, low-connectivity environments, rapidly evolving requirements all in diverse regulatory environments and country contexts. You’ll need to keep our legacy technology stack stable and performant, while in parallel building new systems from the ground up for our next level of scale. You will lead engineering, data, security and enterprise technology – with a small, mighty and rapidly growing engineering team of ~15, and the expectation that this can at least double to ~30 in the next 12 months if you want it to. You’ll report to a CEO with deep experience running technology companies, and partner with our VP Product. This role is remote, with working hours between US Eastern Time and East African Time, and some preference for candidates in our office hubs of New York, London, or Nairobi. What we’re looking for: An exceptional hirer, manager and organizer of technical talent. Proven record identifying, hiring, developing and retaining excellent engineers and engineering leaders, and creating team processes that consistently deliver software with quality and velocity. Deep technical judgment, applied close to the work. You can evaluate major designs, pressure-test architecture and build-vs-buy decisions, and recognize when a team is heading the wrong way, without becoming the primary implementer. Low-ego: you’ll investigate a problem yourself when that’s what the situation requires. Business judgment and decisiveness under ambiguity. You’re not just a technical leader, you’re also a business executive. You understand the business, are a strong cross-functional partner, and have a history of good judgment when navigating tradeoffs of long vs. short term, speed, reliability, security, flexibility, cost, technical quality, and user impact. AI first. You have a point of view on where AI meaningfully changes engineering productivity and organizational capability, and you’ve moved a team from experimentation to real, measured use. You can set the tools, culture, goals, and guardrails that leverage the opportunities and mitigate the risks of an AI first engineering culture. Embody and set an example for GD values. We take our values incredibly seriously, and expect our leaders to embody, nurture, and promote them in the way they work and the teams they build. Advantages, not requirements. Experience in an operationally complex or regulated domain (fintech, payments, humanitarian response, global development); systems involving financial controls, fraud risk, identity, or sensitive recipient data; operating across multiple countries, particularly lower-income or infrastructure-constrained ones; leading both modern product engineering and enterprise technology. What you’ll do Define our technology vision and target stack. Own the technical strategy for technology-first delivery at $5B+/year: architecture, platforms, build-vs-buy, and what we retire. Work with executive, product, finance, risk, and data leaders to turn program and product strategy into a sequenced, credible portfolio of technical investments. Balance a demanding portfolio. You'll manage six workstreams that all matter and won't all move at once: (1) building our new cash delivery stack (remote-first verification, fraud prevention, massive volume) (2) stabilizing our legacy stack until switchover, then managing the migration; (3) donor-facing fundraising products; (4) our global emergency cash system (and eventual white-labelling of that product); (5) enterprise technology; (6) internal tooling, platform, and cybersecurity. Deciding sequencing and staffing across these (and saying "not yet" credibly) is the job. Build and grow an exceptional technology organization. Recruit outstanding engineering and technology talent, design the org GiveDirectly needs at its next stage of scale (engineering, product, data, security, infrastructure, enterprise systems), and create the accountability, decision rights, and career paths to sustain high talent density. Grow the engineering team from 15 to ~30 with a lean but durable management structure. Own the technical direction and quality bar. Guide consequential decisions on integrations, data, security, reliability, and technical debt. Ensure our systems can safely support a major increase in transaction volume, geographic reach, and organizational dependence on technology. Set a pragmatic quality bar appropriate to high-stakes financial delivery while preserving speed. Lead across organizational boundaries. Serve as a member of GiveDirectly’s executive team, reporting to the CEO and bringing technology into major strategic and operating decisions. Help non-technical leaders understand technical constraints and costs, build credibility with country and functional leaders by understanding their realities, and force clarity when priorities, ownership, or tradeoffs are ambiguous. Travel. Approximately 4–6 trips per year, including visits to GiveDirectly countries of operation. Compensation At GiveDirectly, we strive to pay our employees generously and equitably. We use an accredited third party salary aggregator to calculate what we believe to be competitive pay based on role, location, and cost of living. We also have a no negotiation policy so pay is consistent across comparable roles. Total Compensation (US) of $366,000 – $518,000 comprised of: Base Salary: $300,000 – $375,000 Bonus: $45,000-$112,000 (bonus is % based and decided based on org-wide performance, we will share full methodology during the hiring process) Annual Benefits Stipend: ~$21,000 Total Compensation (UK) of £225,000 – £317,000 comprised of: Base Salary: £193,400 – £241,700 Bonus: £29,000 – £72,500 (bonus is % based and decided based on org-wide performance, we will share full methodology during the hiring process) Annual Benefits Stipend: £2,760 Total Compensation (Kenya) of $333,000 – $467,000 comprised of: Base Salary: $282,500 – $353,100 Bonus: $42,000 – $106,000 (bonus is % based and decided based on org-wide performance, we will share full methodology during the hiring process) Annual Benefits Stipend: $8,453 If you are not based in one of the countries listed above, we will share an estimated salary benchmark for the country you are based in during the hiring process. Working at GiveDirectly GiveDirectly is an Equal Opportunity Employer. All qualified applicants are considered for employment without regard to the person’s race, color, religion, national origin, sex, sexual orientation, age, marital status, veteran status, disability, or any other characteristic protected by applicable law. Flagging for US applicants: We invite you to " Know Your Rights " as an applicant. Commitment to Safeguarding As a global organization working with communities to eliminate extreme poverty, GiveDirectly takes the safeguarding of its recipients, staff, and partners seriously. To that end, GiveDirectly is a member of the Misconduct Disclosure Scheme , and will systematically check with previous employers about any abuse or misconduct related matters involving potential new hires. We may also employ other robust pre-hire screens, including in-depth reference checks, criminal background checks, and sanctions screens. These efforts help us continue to build and maintain trust with the communities we work with, and prevent abuse to our recipients and staff. **GD is committed to observing all local, national and international laws that protect people and basic human rights of all. GD is committed to a policy of “zero tolerance when it comes to preventing,  reporting, or responding to any form of abuse or  exploitation.” and expects anyone who works for GD to uphold the protection and safeguarding of our recipients as a priority.** Reasonable Accommodations We are committed to fostering an inclusive and accessible work environment. If you require any accommodations during the application or interview process, or to perform the essential functions of the role, please email us at careers@givedirectly.org with the email subject “Accommodation Needed”. We will work with you to ensure reasonable accommodations are made to support your needs. Want to put your best foot forward on your GiveDirectly application? Take a look at our Candidate Application Prep Guide ! Referrals Know the right person for this role? Please consider referring them . We offer a reward of $3,000 for a Senior Manager or above role, and $500 for a Manager role, paid if we end up hiring your referral. Thank you for sending great people our way!

Location: Oakland, California, United States, AMER From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About Us Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. ​ During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites. About the Role Fivetran + dbt is building data pipelines to power the modern data stack for thousands of companies. We’re looking for a high-performance, experienced hands-on technical program manager(TPM) in the security domain to be part of an Engineering team. In this role, you will be responsible for leading and managing security-related initiatives across the organization. It involves collaborating with cross-functional teams to ensure the successful planning, execution, and delivery of security programs. The TPM will act as a bridge between technical teams and business stakeholders, ensuring alignment with organizational goals while mitigating security risks. The work is very diverse. Fivetran is a multi-cloud environment operating on AWS, GCP, and Azure. You will help select security tools, implement improvements within our environments, and assist in developing new processes to increase our security posture. This is a full-time position based out of our Oakland, CA office. Our hybrid work model offers a blend of remote flexibility and in-person collaboration, including two days in the office each week to connect and build as a team. Technologies You’ll Use Bash, Python, JS, BigQuery, Looker, Sigma, Azure, AWS, GCP, Terraform, Docker, Kubernetes, Github, Buildkite, SonarQube, Grafana, Prisma, Synk, Signal Sciences, AI Tools What You’ll Do This is the primary person in engineering responsible for executing the security vulnerability management program for engineering, including infrastructure, code, and dependency vulnerabilities. Collaborate with Security and Engineering teams to ensure vulnerabilities are identified, prioritized, and patched. Provide technical oversight and accountability to ensure the effective delivery of security fixes. Enhance processes by evaluating tools, recommending improvements, and driving automation for faster resolution. Usage of AI in defining the roadmap for a proactive security approach based on risk assessment/rating Running the Dependency management and image hardening programs Using AI to contribute to the remediation of code and infrastructure vulnerabilities Establish and lead a code scanning program in collaboration with infrastructure, engineering, and security teams to ensure seamless integration and sustainable security practices. Dedicate up to 20% of the time to assessing business systems to identify vulnerabilities and compliance gaps proactively. Develop a scanning and detection plan and establish policies and standards for internal data access tools to improve overall system security. Advocate for tools and solutions that support shift-left strategies, driving early integration of security and testing in the development lifecycle. Skills We’re Looking For Over 5 years of experience in technical program management with a strong focus on security engineering, vulnerability management, cloud security, and application security. Proficient in applying program management methodologies, tools, and best practices to deliver complex security initiatives. Exceptional skills in prioritization, organization, and multitasking to manage multiple programs effectively. Proven ability to work collaboratively with cross-functional teams, including product teams, SRE/QE engineers, and developers, to embed a security-first mindset into workflows and practices. Deep understanding of key security domains, including application/infrastructure security, data privacy, threat modeling, vulnerability management, and secure software development lifecycle (SDLC). Strong grasp of security concepts and principles, including network security, encryption, authentication, and authorization. Hands-on experience with SAST/DAST tools, agent-based firewalls, IDS/IPS technologies, and automation tools for security orchestration. Experience with scripting languages for automating security processes. Proficient in researching and validating vulnerabilities while proposing effective remediation or mitigation strategies. Strong familiarity with OWASP principles and best practices for securing web applications, including the OWASP Top 10 vulnerabilities and Application Security Verification Standard (ASVS) Up-to-date knowledge of market trends, emerging technologies, and best practices in cloud security Strong analytical, problem-solving, and communication skills to address security challenges, coupled with the ability to influence and collaborate effectively with engineering teams in enhancing security measures and mitigating vulnerabilities in a dynamic, fast-paced environment. #LI-HYBRID #LI-EM1 The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role.  Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process. Oakland Pay Range $158,284 — $197,855 USD Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.

Location: Remote Workplace: Remote ABOUT US Parity is one of the world’s most experienced companies building the core infrastructure behind blockchain — the system that allows information and value to be shared securely without needing an intermediary. We’re laying the foundation for a better web which respects the freedom and data of individuals, and empowers developers to build better, more trustworthy online services. Our remote-first, global team develop open-source software that anyone can use or improve. This includes Polkadot https://polkadot.network/, Polkadot SDK https://substrate.io, and Kusama https://kusama.network/ — key parts of the Web3 tech stack, the next generation of the internet. Our mission is to make Polkadot the most active and innovative community in blockchain, powering a new era of connected and decentralised applications. ABOUT THE TEAM Parity’s Security Engineering team is at the forefront of protecting the Polkadot ecosystem by designing and implementing secure software, auditing code for vulnerabilities, and building cutting-edge ML tools to automate security analysis. We work closely with development teams to embed security best practices across our open-source stack, ensuring that our blockchain infrastructure is robust, resilient, and secure by design. ABOUT THE ROLE As a security-focused software engineer, you will go beyond traditional application security - you’ll audit and ideally write secure Rust code where needed, conduct deep manual and automated code audits, and leverage machine learning to enhance security across our ecosystem. This is an opportunity to shape the security landscape of the next generation of decentralized applications and protocols. - Assist in developing Secure Software – Write and optimise Rust code to build security-critical components and tools. - Code Auditing & Vulnerability Analysis – Perform deep manual and automated code reviews to identify and mitigate security vulnerabilities. - ML-Powered Security – Design and implement machine learning models for automated security analysis, anomaly detection, and threat mitigation. - Bug Bounty & Vulnerability Management – Manage bug bounty submissions, triage security reports, and collaborate with ethical hackers to resolve issues. - Secure Development Best Practices – Work with engineering teams to integrate security best practices into the software development lifecycle. - Threat Modeling & Risk Assessment – Identify and assess security risks in our blockchain infrastructure, smart contracts, and core software. - Stay Cutting-Edge – Research and implement the latest advancements in secure coding, ML-driven security, and blockchain security. WHAT WE'RE LOOKING FOR - Experience with secure coding practices and memory safety concepts. - Background in code auditing, vulnerability analysis, or exploit development. - Experience triaging and resolving bug bounty reports. - Knowledge of machine learning techniques applied to security (e.g., anomaly detection, fuzzing, automated threat detection). - Familiarity with cryptographic principles, blockchain security, or decentralized systems. - Strong problem-solving skills and an offensive security mindset. If you're excited about writing secure software, auditing code, and pioneering ML-driven security solutions for Web3, we’d love to hear from you! ABOUT WORKING WITH US Joining Parity means joining team mates who are genuinely excited about the impact their projects are having, and the opportunity to grow alongside some of the brightest minds in the Web3 space! You’ll work remotely and flexibly, while still getting to meet your team mates throughout the year at team and company-wide retreats. Upon receiving an offer, all candidates undergo a background check through Zinc https://zincwork.com/candidates, our trusted third-party provider. Team members will be taken on as a contractor via our UK entity. View our Applicant Notice https://www.parity.io/applicant-notice/ to see how we use your data. Parity is an Equal Opportunity Employer. We welcome diversity in our global team and care about everyone in our collective feeling included and welcome. Is this position not quite your match? Browse https://www.parity.io/jobs/ our other open roles.

Location: San Francisco, CA; New York, NY Workplace: OnSite ABOUT US At LangChain, our mission is to make intelligent agents ubiquitous. We build the foundation for agent engineering in the real world, helping developers move from prototypes to production-ready AI agents that teams can rely on. We began as widely adopted open-source tools and have grown to also offer a platform for building, evaluating, deploying, and operating agents at scale. With $125M raised at Series B from IVP, Sequoia, Benchmark, CapitalG, and Sapphire Ventures, we’re at a stage where we’re continuing to develop new products, growth is accelerating, and all team members have meaningful impact on what we build and how we work together. LangChain is a place where your contributions can shape how this technology shows up in the real world. Today, our platform includes LangSmith (Observability, Evaluation, Deployment, Fleet, and Sandboxes), our open source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement. We have 100M+ monthly open source downloads, 6,000+ active LangSmith customers, and 5 of the Fortune 10 use LangSmith in production (+ 35% of the Fortune 500 overall), including teams at Klarna, Clay, Coinbase, Workday, Lyft, Cloudflare, Harvey, Rippling, Vanta, LinkedIn, Monday.com, Nvidia, and Bridgewater. ABOUT THE TEAM The Security team ensures that while AI moves at breakneck speed, everyone driving the racecar is wearing a seatbelt. We secure LangChain's core platform and protect AI agents from emerging threats. We work across the stack so developers can confidently ship from prototype to production without compromising on safety or privacy. ABOUT THE ROLE You'll be the hands-on detection and response engineer responsible for how we see, stop, and learn from threats across LangChain's production platform, cloud infrastructure, and the services that host and execute agentic workloads. You'll partner closely with Product Security to turn threat models, vulnerabilities, and incidents into telemetry, detections, and durable defenses. Your primary focus is engineering: building detection, investigation, and response systems that scale the Security team's impact beyond what manual operations allow. We are looking for engineers who think like builders, not just operators — strong software skills are a must. This role participates in an incident on-call rotation, but its core focus is engineering systems that reduce risk, speed up investigations, and make incidents less frequent and less costly. Location/City: San Francisco or NYC WHAT YOU'LL DO - Own the detection lifecycle: Translate threat models, incidents, and attacker behavior into telemetry requirements and detections-as-code. Validate coverage, measure signal quality, tune false positives, and continuously test whether defenses work. - Build security monitoring and telemetry: Design the telemetry pipeline end-to-end across cloud (GCP/AWS), Kubernetes, and the LangSmith/LangGraph control plane. Instrument services, define the signals that matter, and make security data reliable and useful. - Engineer investigations and threat hunting: Build tools and workflows for proactive hunting, evidence collection, incident scoping, and containment. Turn investigation findings into new detections and lasting improvements. - Use agents to scale the team: Build reliable internal AI agents and automation that triage alerts, enrich findings, gather evidence, scope incidents, and accelerate routine security work. Design human-in-the-loop controls and evaluations so automation is safe, observable, and trustworthy. - Lead incident response and participate in on-call: Triage, scope, contain, and remediate security incidents, then drive postmortems that produce durable engineering changes. - Partner with Product Security: Turn product threat models and vulnerability findings into production monitoring, and feed real-world detection and incident learnings back into secure design. WHAT YOU'LL BRING - 5+ years in security engineering, with meaningful experience in detection engineering, security operations, or incident response — and the software skills to build your way out of repetitive work. - Strong software engineering in Python or Go (TypeScript a plus). You design maintainable systems and write production code, not just one-off scripts. - Cloud and Kubernetes detection depth: Experience with GCP or AWS logging, Kubernetes audit and runtime telemetry, workload identity, and turning raw signals into actionable detections. - Detection and adversary expertise: The ability to model realistic attacker behavior, hunt across complex systems, test detection coverage, and distinguish meaningful signal from noise. - Hands-on incident response: You've participated in on-call, led incidents, and written postmortems that changed how a team operates. - Experience building reliable automation or developer-facing systems: You can design APIs and workflows, instrument what you build, evaluate quality, and operate it in production. - A pragmatic product mindset: You can identify users and requirements, prioritize the highest-leverage problems, define success, and ship iteratively. NICE TO HAVE - Experience building or operating AI agents for security workflows such as alert triage, investigation, evidence collection, or human-in-the-loop response. - Proficiency using AI tooling to accelerate security investigations and engineering work. - Understanding of AI threats, adversarial testing, and the security boundaries of LLM and agent workloads. - Exposure to SOC 2 or ISO 27001 monitoring and evidence automation. - Experience with infrastructure as code such as Terraform or Helm. - Experience securing both SaaS and self-hosted or air-gapped deployments. Annual salary range: $185,000- $250,000 USD Compensation Philosophy: We offer competitive compensation that includes base salary, variable compensation for relevant roles, meaningful equity, benefits, and perks. We are hiring for this role across a range of scope, and the compensation band reflects that. Your offer depends on what we learn about your impact, craft, leadership, and communication during the interview process. We will tell you early where you’re tracking and talk comp with you before offer stage. Team members in the EU, UK, and APAC receive locally competitive benefits aligned with regional norms and regulations. BENEFITS Benefits include medical, dental, and vision coverage, flexible vacation, a 401(k) plan, meals on in-office days in the US and more.

Location: France - Remote; Germany - Remote Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. Partner Sales Engineer (PSE) About Chainguard Chainguard is building the future of secure software supply chains by delivering secure-by-default container images, helm charts and language libraries alongside developer tools that eliminate vulnerabilities before software reaches production. We partner with cloud providers, VARs/SIs, and technology platforms to help organizations adopt secure software development practices at scale. We are looking for a Partner Solutions Engineer (PSE) to help enable and scale our partner ecosystem by building technical champions, developing integrations, and accelerating partner-led adoption of Chainguard solutions. This role combines technical depth, partner enablement, and go-to-market collaboration. Our partner engagement model follows the BEPIC framework: Belief – Build technical conviction in Chainguard Executive Sponsorship – Align with partner leadership Propensity to Embed – Integrate Chainguard into partner architectures Integrated Value Proposition – Deliver compelling joint solutions Cadence – Maintain consistent partner engagement What You'll Do Build Partner Technical Champions Enable technical teams across cloud providers, VARs/SIs, and technology partners through workshops, training programs and paths, and hands-on labs. Develop reusable partner assets including reference architectures, demos, and solution playbooks. Drive Integrations and Architecture Work with partners and internal teams to design secure cloud-native architectures that incorporate Chainguard into DevOps, platform engineering, and security workflows. Collaborate with product and engineering teams to bring partner integrations to life. Develop Joint Partner Solutions Co-create partner-led services and offerings that help customers adopt Chainguard solutions. Partner closely with Sales and Partner Managers to identify deals, accelerate the sales cycle, help with adoption, and grow partner-influenced revenue across the company. Support Strategic Partner Relationships Engage with partner technical leaders and executives to align on technical roadmaps and solution strategies. Broadcast partners' progress to field teams internally and encourage the close collaboration of Chainguard - Partner SEs for maximum joint value proposition and have a strong influence over product direction. Maintain Strong Partner Engagement Run ongoing enablement sessions, workshops, and joint technical activities to ensure partners remain engaged and capable of delivering Chainguard solutions.  Initiatives to cultivate strong bonds with new and existing partners. What We're Looking For 5+ years in Solutions Engineering, Partner Solutions Architecture, or Sales Engineering Experience with cloud platforms (AWS, Azure, or GCP) Hands-on experience with containers, Kubernetes, or cloud-native infrastructure Familiarity with DevSecOps, platform engineering, or cloud security Experience enabling partners through technical training or solution development Strong ability to communicate complex technical topics to both engineers and business stakeholders Ability to travel up to 50% Nice to Have Technical evangelism and storytelling — able to inspire partner technical teams and clearly communicate complex concepts to both engineers and business stakeholders High emotional intelligence and relationship building — able to build trust, read partner dynamics, and engage effectively with stakeholders from engineers to executives Collaborative leadership — skilled at aligning cross-functional teams and partners to drive joint solutions and shared outcomes If you're passionate about cloud-native technology, open source, security, and partner ecosystems, we'd love to hear from you. About Us We live and breathe our company values: We are customer obsessed — We focus on delivering solutions to our customers that create value and make their lives better. We have a bias for intentional action — We prioritize, plan, try things, and fail fast. We don't take ourselves too seriously (but we do serious work) — We are solving an important problem which takes focus, but we also like to enjoy the journey. We trust each other and assume good intentions — We're transparent with decisions to empower team members to make well informed decisions. A few of the benefits we offer: Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs. Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!). 100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck. ∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset. 18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year. If your experience is close but doesn't fulfill all requirements, please apply. We're building the best team in technology and are focused on hiring "Chainguardians" with unique backgrounds, perspectives, and experiences. Chainguard is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. By submitting your application, you acknowledge that Chainguard will process your personal data in accordance with Chainguard's Global Candidate Privacy Notice . ©2026 Chainguard. All Rights Reserved.

Location: Home Based - Americas; Home Based - APAC; Home based - EMEA With more than 10 billion pulls , Canonical's container images are trusted by developers worldwide to build and run software securely and at scale. That trust rests on our commitment to hardened, production-ready images. We are advancing the state of the art with a new generation of Ubuntu-based container images we call "rocks": minimal images engineered for performance and usability and backed by long-term security commitments. As a member of the team, you will own the path from upstream source to published image, turning open source software into tested, signed, and continuously maintained artifacts that developers can deploy with confidence. This is fast-paced, multi-disciplinary software engineering. Because most of the software we package originates from third-party upstreams, you will work across a broad range of container technologies and hundreds of open source projects, often in several programming languages, integrating and maintaining them so they are easy to consume on Ubuntu. Automation is central to the role: you will build the pipelines that package, build, test, and publish images at scale. Your seniority in this role will reflect your software engineering experience and your ability to mentor and guide more junior colleagues. Location: This is a globally remote role This role entails Build and maintain a growing portfolio of high-quality, hardened container images Design and operate automated CI/CD pipelines that build, test, scan, sign, publish, promote, and retire images across environments and architectures Write tooling and tests to assess security compliance and cloud-native compatibility Work closely with the community and partners to share container expertise and keep our portfolio current with new features, patches, and applications Collaborate with our product security, platform, infrastructure, and customer-facing teams Contribute technical input to the team's decision-making Set the standard for quality, defining image standards that span security, compatibility, performance, size, and developer experience Grow our knowledge base and write about the work we do Work in a collaborative, agile, and globally distributed environment Mentor colleagues and contribute to hiring Work from home with global travel of up to 15% for internal and external events What we are looking for in you Proficiency in Bash and Python Experience working with CI/CD systems (e.g. GitHub Actions, Jenkins) Experience building container images Command of at least one container management or orchestration tool (e.g. Docker, Podman, or Kubernetes) Hands-on experience with Linux systems, package management, build systems, release engineering, or artifact pipelines Clear communication and end-to-end ownership, spanning design, review, documentation, operation, and cross-team collaboration A commitment to sharing knowledge and helping those around you grow A genuine appetite for learning and for working outside your comfort zone A Bachelor's degree or equivalent in Computer Science, a STEM field, or a similar discipline An exceptional academic track record from both high school and university Business level written and spoken English. Sincere personal motivation aligned with our mission. International travel 2-4 times a year for company events up to two weeks long. 0-7 years relevant experience. In addition we expect that you will match our values, by being: Precise, taking care to deliver correctness and clarity. Reliable, delivering high quality work that builds trust and confidence. Accessible, collaborating to build products and systems that are usable. Adroit, blending enthusiasm, knowledge, adaptability, style and character. Nice-to-have skills A security-oriented maintenance mindset: you can investigate dependency and vulnerability findings, assess their impact, and deliver a safe fix An understanding of software supply chain security, with some experience generating and consuming artifacts such as SBOMs, signatures, provenance, or CVE reports Familiarity with GitOps principles and workflows Familiarity with additional languages such as Go or Rust Hands-on experience building minimal and distroless container images Knowledge of the OCI specifications Familiarity with security or compliance frameworks such as CIS, NIST, FedRAMP, or DISA STIG Evidence of contributions to open source projects A passion for embedding security across all stages of the engineering lifecycle (DevSecOps), and an interest in using AI or agentic development responsibly and safely Relevant Linux, container, or cloud-native certifications (such as CKS or DCA) are welcome If your experience is close but does not match every requirement, we encourage you to apply. We value transferable experience from Linux packaging, release engineering, build systems, platform engineering, and open-source maintenance. What we offer colleagues We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. Distributed work environment with twice-yearly team sprints in person Personal learning and development budget of USD 2,000 per year Bi-annual compensation review Company recognition rewards 40 days annual leave per annum, including public holidays and our All Company holiday periods Maternity and paternity leave Team Member Assistance Program & Wellness Platform Opportunity to travel to new locations to meet colleagues, with Priority Pass for lounge access About Canonical Canonical is a pioneering tech firm at the forefront of the global move to open source. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. We are founder-led, profitable, and growing. Powered by worldwide distributed collaboration since our inception in 2004, we believe tech and business leadership can emerge anywhere. We have no central headquarters. Most of us work from home, but we are exceptionally disciplined about this. We have very high expectations of all colleagues, and are champions of excellence. Working here is a step into the future and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical is an equal opportunity employer We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration .

Location: Germany - Remote Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. The role, in a nutshell: As a Customer Success Manager at Chainguard, you will be the post-sales primary point of contact for our customers. You will be responsible for taking lead on customer engagements across onboarding, implementation, and adoption. In this role, you will work closely with Solutions Architects, Technical Support, Product Management, Engineering and Sales to ensure the successful onboarding and support of your customers. You are their day-to-day contact, building relationships with customers and driving outcomes, adoption, and delivering time-to-value. What you’ll do: Success Planning & Value: Drive business success planning by partnering with customers, pre-sales, and post-sales teams to align on requirements, goals, and challenges. Provide thought leadership on change management for large, scaled rollouts. Support the full Business Value Realization cycle to ensure customers can demonstrate and prove value internally. Customer Advocacy: Act as the voice of the customer within the organization, advocating for customer needs and requirements to internal teams.  This means being a team player and having strong collaboration skills - this role must align with many different internal teams, influence them to act toward customer needs. Issue Management: Collaborate with Technical Support and Customer Engineering teams to ensure timely resolution to customer issues. Product Expertise: Develop hands-on technical knowledge of Chainguard and stay up-to-date with industry trends, new features, and best practices so you can help customers optimize their use of Chainguard. Training & Education: Collaborate with customers and our Edu team to ensure customers are educated on product features, best practices, and security principles. Account Management: Develop relationships with multiple levels of customer stakeholders from technicians to CISOs. Work closely with sales teams to identify the best path to renew and expand customers while minimizing churn risks. What we're looking for: 5+ years experience in enterprise, customer facing roles collaborating with both technical and business teams - Customer Success, Professional Services, Technical Account Management or a combination of those plus Sales, Solutions Engineering, or Technical Support. Relevant domain knowledge of one or more of the following: Supply Chain Security, DevSecOps, AppSec, security infrastructure, containers, regulatory compliance requirements, vulnerability management, software development lifecycle. This is a strategic and proactive role, our expectation is that this person will take full ownership of their customer portfolio and act with a high level of autonomy.  This includes making key decisions to drive effective customer outcomes; deciding when to include our executive team or c-suite in customer escalations, how to de-risk or de-escalate customer issues and conflict, and advocating to internal teams including sales, product, engineering, etc. An entrepreneurial mindset - you will be often build entirely new process or practices to ensure we best serve customers. Demonstrates a strong commitment to continuous personal and professional development, actively seeking opportunities to enhance skills, expand knowledge, and advance within their career and field. Driven, high emotional intelligence, and strong priority management skills Strongly Preferred: Previous early-stage startup experience Passion for technology & cybersecurity Relevant hands-on technical experience, in one or more of the following domains: cloud computing environments (AWS, GCP, Azure), containers, Linux, Supply Chain Security, DevSecOps, AppSec, security, security infrastructure, regulatory compliance requirements, vulnerability management, software development lifecycle About Us We live and breathe our company values: We are customer obsessed — We focus on delivering solutions to our customers that create value and make their lives better. We have a bias for intentional action — We prioritize, plan, try things, and fail fast. We don't take ourselves too seriously (but we do serious work) — We are solving an important problem which takes focus, but we also like to enjoy the journey. We trust each other and assume good intentions — We're transparent with decisions to empower team members to make well informed decisions. A few of the benefits we offer: Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs. Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!). 100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck. ∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset. 18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year. If your experience is close but doesn't fulfill all requirements, please apply. We're building the best team in technology and are focused on hiring "Chainguardians" with unique backgrounds, perspectives, and experiences. Chainguard is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. By submitting your application, you acknowledge that Chainguard will process your personal data in accordance with Chainguard's Global Candidate Privacy Notice . ©2026 Chainguard. All Rights Reserved.

Location: UK, London Workplace: OnSite Here at Humanoid, we believe in a future where robots amplify human potential. That’s why we’ve set out on a mission to build the world’s most capable, commercially-scalable, and safe humanoid robots. We’re bringing that mission to life with HMND‑01 - our rapidly developed humanoid platform being deployed in real industrial environments - and we’re growing the team to take it even further. ABOUT THE ROLE As IT Operations & Cyber Lead, you will manage Humanoid’s corporate IT environment, ensuring it is secure, reliable, and scalable as the company grows. This is a hands-on leadership role, combining responsibility for end-user computing, identity and access management, corporate networking, and cyber security operations. You will partner closely with: - Engineering team, who manage product infrastructure (AWS, CI/CD, robotics environments); - ITSM Lead, who manages service process, management and support - The IT Director, to align on overall strategy, operational reliability, governance, and security maturity with business growth. WHAT YOU'LL DO - Own Humanoid’s corporate IT environment – covering endpoints, networks, identity, and security – ensuring reliability, scalability, and compliance. - Lead end-user computing and identity management, including device lifecycle, MDM, SSO/MFA, and access provisioning in partnership with ITSM. - Implement, operate and continually improve cyber defences across endpoints and SaaS platforms: vulnerability management, EDR/SIEM, and incident response. - Manage vendors and core infrastructure partners, ensuring cost-effective delivery, timely patching, and contract governance. - Maintain secure, high-performance connectivity for offices, labs, and remote users; coordinate with Engineering on network separation and integration. - Define and enforce IT and security standards, policies, and backup / recovery procedures that meet ISO 27001 / SOC 2 / GDPR expectations. - Monitor and report IT and security health, highlighting risks, incidents, and KPIs to the IT Director, and feed improvements into the IT roadmap. WHAT WE'RE LOOKING FOR - Proven experience leading IT operations and cyber operations in high-growth or technology-driven organisations. - Hands-on expertise in: - Identity & Access Management (Google Workspace, Azure AD, Okta or similar) - Endpoint Management (Intune, Jamf, or similar) - Corporate Networking (LAN / Wi-Fi / VPN / firewalls) - Cyber Security Operations (EDR, SIEM, vulnerability management, incident response) - Demonstrated ability to define and enforce standards and processes that combine agility with control. - Strong vendor and stakeholder-management capability. - Excellent communication skills; able to bridge technical and non-technical audiences. - Comfortable in a start-up/scale-up environment — pragmatic, adaptable, and ownership-driven. Desirable - Experience supporting ISO 27001 or SOC 2 certification efforts. - Experience automating IT workflows via scripting (PowerShell, Python, or equivalent). - Exposure to robotics, IoT, or AI product environments. - Knowledge of ITIL-based service processes. - Familiarity with secure development or DevSecOps concepts. WHAT WE OFFER - Competitive equity: stock options with meaningful upside as we scale. - 30+ paid days off, including 23 days of annual leave, all UK bank holidays, and additional company closure days (including Christmas–New Year shutdown). - Private healthcare, including virtual and in-person care. - Pension scheme with 8% total contribution (5% employee, 3% employer) on full earnings. - Free daily breakfast, catered lunch, and snacks in-office. - Work at the frontier - collaborate daily with world-class engineers, researchers, and product experts building the next generation of AI and humanoid robotics. - Real ownership - direct access to founding leadership, meaningful input on product direction, and the ability to drive key initiatives from day one.

Location: Salt Lake City, Utah, United States About the Role iCapital is seeking a Cyber Case Manager to join the Global Information Security team within Cyber Security Operations. As the Security Operations Center (SOC) continues to grow, dedicated ownership of the case lifecycle has become essential to ensuring incidents and investigations are consistently tracked and driven to closure. The Cyber Case Manager serves as the single point of accountability for that lifecycle – from intake through resolution – ensuring every case is owned, prioritized, progressing, and documented. This individual-contributor will report to the Security Operations leader. Responsibilities Own the end-to-end lifecycle of security cases including intake, ownership assignment, progress tracking, and driving cases to resolution and closure. Serve as the single point of accountability for case status across the SOC, maintaining an accurate, prioritized, real-time view of all open incidents and investigations. Exercise authority to assign, reprioritize, and escalate cases across SOC Analysts, Threat Detection Engineering, and Incident Response to keep work moving and eliminate stalled cases. Enforce case-handling SLAs and quality standards; proactively identify aging, blocked, or at-risk cases and escalate to the Security Operations Leader. Coordinate cross-functional workstreams spanning incident response, DFIR, insider-threat cases, vulnerability-remediation tracking, audit and GRC findings, and eDiscovery and legal-hold requests. Manage case documentation and evidence integrity – ensuring timelines, actions, decisions, and artifacts are captured consistently and remain audit-ready. Integrate case workflows with SIEM/SOAR so alerts, enrichment, and automated actions flow into and out of the case record without manual re-keying. Produce case metrics and leadership reporting, including MTTD, MTTR, backlog, aging, closure rates, and SLA adherence for SOC leadership and stakeholders. Build and continuously improve case-management processes, intake criteria, and runbooks to increase throughput and reduce manager overhead. Facilitate case reviews, shift and regional handoffs, and post-incident lessons-learned, ensuring action items are tracked to completion. Leverage the SOC’s SIEM and SOAR platforms, with Jira and Confluence as the system of record. Collaborate with Legal, Compliance, Human Resources, SOC Analysts, Security Engineering, Cloud Security, Incident Response, and business stakeholders to support sensitive investigations, maintain confidentiality and chain of custody, and strengthen iCapital’s overall cyber resiliency. Participate in incident-driven after-hours coordination as needed to keep high-priority cases moving. Qualifications 3–6 years of experience in cyber security operations, incident response, or security case and program management Bachelor’s degree in information security, computer science, or information technology is preferred Experience in a regulated industry; financial services or fintech is preferred Hands-on experience managing incident or case queues in a SOC or incident response environment Working knowledge of SIEM and SOAR platforms and how alerts and cases flow through them Proficiency with Jira and Confluence for workflow management, tracking, and documentation Strong understanding of the incident response lifecycle and frameworks such as NIST and MITRE ATT&CK Demonstrated ability to coordinate across teams and drive work to closure through influence and follow-through, without direct reporting authority over those teams Familiar with handling sensitive investigations, evidence handling, and chain-of-custody principles Exceptional organization, prioritization, and attention to detail while managing many concurrent cases Excellent written and verbal communication skills, with the ability to report status clearly to both technical and executive audiences Relevant certifications (i.e. GCIH, GCFE, PMP, ITIL, or Splunk and SOAR) are preferred Experience with dedicated case-management or SOAR platforms (i.e. ServiceNow SIR, TheHive, Splunk SOAR and Phantom) Exposure to insider-threat, DFIR, eDiscovery, legal-hold, or GRC and audit workflows Familiar with cloud environments, AWS is preferred and knowledge of Agile frameworks is preferred Benefits The base salary range for this role is $100,000 to $130,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO). We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday. For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/ iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Location: San Francisco, CA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role We're looking for a Capabilities Researcher to join the team building Claude Security. In this role, you'll identify which security capabilities in frontier models are ready to build on, measure how well they perform, and work out how to make them useful to customers who are not security experts. Frontier models have become substantially more capable at security work over recent generations, and they continue to improve with each release. That progress creates a set of practical questions: which capabilities are reliable enough to depend on, how they perform in realistic conditions, how they behave when an adversary is involved, and where their limits are. You'll be responsible for answering those questions through fast prototyping and rigorous evaluation, and your findings will shape what the team decides to build. You'll also work on making those capabilities usable. Together with engineers on the team, you'll design the scaffolding, tooling, and defaults that let a strong model capability do useful work for a non-expert, and you'll stay involved as it becomes a product. This is a research role on a product team, with a broad charge and real latitude in what you investigate. It suits someone who already has ideas about what AI should be able to do for security teams and wants the models, the time, and the engineering support to pursue them. Responsibilities Prototype rapidly to find define the AI frontier for cybersecurity work Design evaluations that measure model performance on the work security teams actually do Build the datasets, harnesses, and scoring those evaluations depend on Engage with the cybersecurity community to help define where AI can make the most impact Work with engineers and researchers to operationalize promising capabilities into something customers can rely on Track how model capabilities for security are changing, and what that means for what we build next Share findings that inform product direction, and partner with product leadership on priorities You may be a good fit if you: Have deep expertise in one or more security domains, such as vulnerability research, exploit development, reverse engineering, malware analysis, incident response, or offensive security Have built AI-powered tools or capabilities for security work Can get from an idea to a working prototype quickly, and abandon the ones that don't hold up Are comfortable designing rigorous evaluations and interpreting the results honestly Can write and communicate clearly about technical findings Have 7+ years of experience in security research, security engineering, or a closely related field Strong candidates may also have: Published research, CTF results, CVEs, or open source security tooling Experience with model evaluation, benchmarking, or red teaming Experience building agentic applications Familiarity with the safety considerations of AI in security contexts Deadline to apply: None. Applications will be reviewed on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $405,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Warsaw, Poland; Prague, Czechia; Sofia, Bulgaria; Bucharest, Romania; Madrid, Spain; Tbilisi, Georgia CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information https://cloudlinux.com/ Imunify360 Security Suite is a product of CloudLinux Inc., the maker of the #1 OS in security and stability for hosting providers. Imunify is an innovative security solution designed specifically for shared and VPS/Dedicated servers. The automated, easy-to-use solution with the six-layer approach to security delivers comprehensive and complete attack prevention. The mission We protect web hosting providers and the sites running on their infrastructure through a defense-in-depth stack: web-server-layer WAF, runtime application self-protection for PHP, deep application integrations (WordPress plugins and similar), a malware scanner with cleanup capability, and network-layer firewalls and IP reputation. The pieces talk to each other, and the threat intelligence they generate at scale powers detection across the stack. Node.js is the segment of the hosting market growing fastest, and the next layer we want to build for it is runtime protection inside the Node.js process itself. Most Node.js workloads on managed hosting today are AI-generated web apps deployed by non-technical owners who can't, won't, and shouldn't be expected to patch their own code or audit their own dependencies. We're going to defend those apps anyway — at runtime, without their cooperation, without breaking them. You'll build that runtime protection layer end-to-end. What you'll own The product. A brand-new product line, yours to define — what we intercept, what we don't, what the customer-visible surface looks like. The technical approach. Instrumentation strategy, deployment shape, programming language — all open. You'll consult with our architects but the direction is yours. Implementation, end to end. You'll have the full tooling stack we provide — LLM subscriptions, modern dev infrastructure, the works. Use what makes you fast. Methodology. How you build conviction in your detection logic — your call. Cross-layer signal. Our existing stack produces threat intelligence at unmatched scale: tens of millions of monitored sites, petabyte-scale malware sample storage, real-time domain and URL reputation, IP-level attack feeds. These are available for you to plug into. Use what helps. How we'll measure success The product is held to four numbers: runtime overhead, false positives, false negatives, and customer-escalation volume. They reflect what hosting providers and their customers care about. Hit them well and the product runs inside a meaningful slice of the modern Node.js web. What we're looking for An experienced researcher or engineer who can build and iterate on a brand-new product, driving both the research and the development. The hard part of this work is knowing what's malicious, what's vulnerable, and what's just an unusual but legitimate pattern — and being right about it across the long tail of frameworks, libraries, and customer code we'll encounter in production. Requirements Must have: Proven experience building and shipping a new product, security solution, major feature, or technical system from scratch. Strong evidence of end-to-end technical ownership, from initial investigation and architecture through implementation, release, and production iteration. Strong web application security knowledge and current knowledge of practical exploitation. A working sense of how detection rules behave at scale — what catches attackers without flagging the long tail of legitimate code. Ability to start as the PM, architect, lead engineer, and QA for this product. You ask for resources or help when you need them; you don't wait to be told what to do. Comfort directing AI coding agents to high-quality output. Nice to have: Prior work on runtime-protection products, application firewalls, or instrumentation tooling. Background in malware analysis or incident response. Familiarity with managed-hosting environments. Public security research, vulnerability disclosures, or detection rulesets you've authored. Familiarity with the Node.js runtime and the JavaScript ecosystem. What it's not Not a scope-and-handoff role — you drive the work and own the outcome. Not a "platform team will productize this later" role — you ship to real customer fleets and watch the telemetry quickly. Not a spec-and-review role — you are hands-on every day. Why this matters Most managed-hosting customers are not developers. They cannot patch their apps. They cannot audit their dependencies. They will keep deploying vulnerable code from AI assistants because that's how modern web apps get built now. The textbook advice — "secure your code, audit your dependencies" — does not apply to them. If we don't intercept exploits at runtime, nobody will. The numbers you hit on detection, performance, and false positives will materially affect how much of the modern web stays online when the next exploit class drops. Benefits What's in it for you? A focus on professional development. Interesting and challenging projects. Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide. Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves. Compensation for private medical insurance. Co-working and gym/sports reimbursement. Budget for education. The opportunity to receive a reward for the most innovative idea that the company can patent. By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.

Location: United States, Remote Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Reporting to the Director of Global Vulnerability Management, you will serve as a Senior Security Research Engineer and technical lead within SIE’s Global Vulnerability Management team. You will lead complex work that advances our Threat Exposure Management capability and supports our transition to a Continuous Threat Exposure Management operating model, while remaining directly engaged in vulnerability research, analysis, security validation, prioritization, and remediation support. You will partner across Information Security, engineering, technology, and business teams to improve how SIE discovers, prioritizes, validates, and mobilizes action on security risks. You will translate annual TEM goals into defined workstreams, delivery plans, success measures, and repeatable operating practices that improve visibility, decision-making, remediation outcomes, and program scale. Responsibilities Lead complex Global Vulnerability Management workstreams that advance SIE’s Threat Exposure Management capability and transition toward a Continuous Threat Exposure Management operating model across discovery, prioritization, validation, and mobilization. Translate annual TEM goals into defined delivery plans, milestones, success measures, dependencies, and repeatable operating practices. Monitor progress, identify barriers, and adjust execution to improve outcomes. Lead hands-on vulnerability research and technical analysis to confirm security conditions, eliminate false positives, characterize exploitability and business impact, and provide actionable remediation or mitigation guidance. Improve the discovery and assessment of vulnerabilities across SIE network, cloud, endpoint, application, container, and other technology environments. Develop risk-based prioritization using vulnerability and threat intelligence, exploitation evidence, asset and business context, control effectiveness, and remediation considerations. Lead security validation activities and develop proofs of concept when appropriate to distinguish material risk, evaluate defensive controls, and support informed decisions. Partner with Information Security teams and technology owners to mobilize remediation, clarify ownership, establish effective handoffs, resolve barriers, and measure progress through remediation, mitigation, or accepted disposition. Evolve GVM platforms, integrations, data, analytics, automation, and AI-enabled workflows to improve coverage, data quality, consistency, decision speed, and operational scale. Communicate vulnerability trends, material risks, remediation progress, and program outcomes to technical, operational, and leadership audiences through clear reports and recommendations. Mentor engineers and partner teams, contribute to technical standards and procedures, and improve the quality of vulnerability analysis, validation, documentation, and delivery. Maintain current knowledge of relevant vulnerabilities, exploitation techniques, threat activity, security technologies, and industry practices. Some travel may be required. Qualifications 8+ years of relevant experience in information security, information technology, systems engineering, or a related field, including substantial experience in vulnerability management, security research, or exposure management. Bachelor’s degree or equivalent in computer science, information security, or a related discipline. Experience leading complex technical workstreams across multiple teams, translating objectives into delivery plans, and achieving measurable outcomes without relying on direct reporting authority. Hands-on experience with vulnerability research, technical analysis, security validation, risk-based prioritization, and remediation or mitigation guidance. Experience assessing vulnerabilities across several technology domains, such as operating systems, networks, cloud services, applications, endpoints, containers, databases, or hybrid infrastructure. Experience with vulnerability discovery, assessment, validation, or exposure-management platforms and their supporting integrations. Knowledge of adversarial tactics, exploitation techniques, threat intelligence, and attack frameworks such as MITRE ATT&CK, with the ability to apply that information to vulnerability prioritization. Experience using scripting, programming, APIs, or automation to improve security analysis and operational workflows. Relevant technologies may include Python, SQL, Bash, PowerShell, JavaScript, or comparable languages. Experience analyzing and contextualizing security data to connect technical findings with asset, service, business, threat, control, and remediation information. Familiarity with software engineering practices such as version control, testing, code review, CI/CD, reusable components, and controlled production releases. Ability to communicate complex security conditions, priorities, tradeoffs, and recommendations clearly to technical, operational, and leadership audiences. Experience mentoring engineers or analysts and influencing technical practices across teams. Desired qualifications Experience helping evolve a traditional vulnerability-management function toward a TEM or CTEM operating model. Experience with continuous security validation, adversarial exposure validation, exploit research, or proof-of-concept development. Experience securing cloud, container, application, or build-pipeline environments and integrating security capabilities into engineering workflows. Experience with security-data and analytics platforms such as Snowflake, Domo, or comparable technologies. Experience applying automation, advanced analytics, or AI-enabled capabilities to vulnerability analysis, prioritization, validation, or remediation workflows. At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. This is a flexible role that can be remote, with varying pay ranges based on geographic location. For example, if you are based out of Seattle, the estimated base pay range for this role is listed below. $175,500 — $263,300 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: Remote (US) About Ondo Ondo Finance is building institutional-grade financial infrastructure for tokenized real-world assets. We operate at the intersection of traditional finance and on-chain systems, which means our product surface has to hold up against both the ordinary threats that hit any high-value fintech and the specific ones that follow value on-chain. About the Role We are hiring a Senior Security Engineer - Product Security to own how we ship secure products at Ondo. You will be a security partner for our product engineering teams, driving threat modeling, owning secure code reviews for new products or feature expansions, maintaining and tuning AppSec tooling, and improving the existing SSDLC. You can expect to take ownership of the bug bounty program, new feature to existing product reviews, and similar broad ownership of critical functions paired to a dedicated ProdSec lead. An AI-native approach is welcome, paired with AI-driven approaches should expect to be justified by describing how doing so enables risk outcomes. This is a hands-on IC role. You will read code, run threat models, review architecture proposals, own tooling, and push engineering teams to build products that are secure by default. You partner closely with adjacent security function like AppSec, Infrasec, and SecOps. What You’ll Do Drive threat modeling for new features, integrations, and architectural changes across the product surface. Push threat models past templates into decisions that engineering teams actually implement. Own secure code review for high-risk changes — authentication, session management, cryptographic paths, wallet and signing flows, RPC and third-party integrations, permission and consent surfaces. Expand the AppSec tooling stack and treat “reducing false positives” as a first-class deliverable. AI-native integrations are welcome. Design and evolve our secure SDLC: where security fits in the dev workflow, what triggers a review, what a lightweight security sign-off looks like versus a full one, and how do we validate controls. Run our responsible disclosure and bug bounty program. Set scope, triage inbound reports, decide payouts, and drive findings to closure with engineering. Support and own appropriate scope for the intake and closure of findings from external audits and pentests — coordinate with audit vendors (Coinspect, Cantina, NCC Group, and others), organize findings into our internal risk register, and drive remediation with engineering owners. Partner with engineering leads to align o secure-by-default patterns - libraries, templates, sensible defaults, and paved-road implementations of anything security-relevant. Threat model blockchain-integrated components like wallet flows, RPC integrations, signing infrastructure, on-chain admin actions triggered from off-chain systems in partnership with engineers who own the on-chain code. Contribute to hiring, mentoring, and pushing the technical bar on the Security team. What We’re Looking For 5+ years in Product Security or Application Security, including senior IC time at a fast-moving product company. Deep secure code review skills in at least one modern stack (TypeScript / JavaScript, Python, or Go). Ability to move across stacks at the level required to threat model. Strong threat modeling skills, appropriate to experience - you can drive a real threat model with an engineering team, not just fill in a template. In practice, we look for core understanding of industry-relevant TTPs and IoCs and strong intuitions on how to apply those lessons learned to our products. Practical experience owning or majorly contributing to an AppSec tooling program. You have shipped rules, tuned noise, and measured impact. Comfortable running or building a bug bounty / responsible disclosure program end-to-end assuming properly resourced to do so. Strong working knowledge of modern web and API security - session and auth flows, OAuth and OIDC, browser security model, common web/API vulnerability classes, and their less-common variants. Comfortable reading Terraform, cloud IAM policies, and CI/CD configuration well enough to reason about how a product vulnerability crosses into an infra risk. Strong engineering partnership skills - you engage constructively, understand the “why” before proposing risk controls, you know when to accept risk, and you write things down. Willing to grow into blockchain-adjacent product security on the job, including the specific attack surface introduced by wallet, signing, and on-chain-integration code. Blockchain Exposure Note This role firmly lives in Web2 prodsec. But, it also requires someone who understands what “Web2 vs Web3” terminology means. In other words, how our products interact with blockchains creates unique threat models that all product security teammates must grasp. At a minimum, by Day 1 you should have strong intuitions about how blockchains will make your prodsec experience unique, you should grasp the common terminologies, and you should be able to discuss with colleagues several incident post-mortems that demonstrate how Web2 compromises lead to Web3 funds losses. You do not need to be an expert in smart contract auditing, blockchain security architectures, or decentralized consensus-driven risk controls. Nice to Have Prior work at a crypto, fintech, or other company where products handle high-value or irreversible actions. Familiarity with wallet, signing, or key-management flows. Reading-level familiarity with Solidity or Rust, target: when ProdSec intersects with smart contracts or other on-chain applications, you can parse what the code is likely doing, and work with blockchain security subject matter experts from there. Bug bounty history - reports, CVEs, or published write-ups. Familiarity with browser-extension security, mobile app security, or account-abstraction wallet designs. Public output - talks, blog posts, open-source tools, CVEs. How We Work The Security team values a high trust team environment where respectful candor can thrive. We expect senior engineers to have an opinionated take on how to accomplish a task, accept feedback from the team and other external stakeholders and return it in kind, and to always assume positive intent. Professionalism, ethics, and enabling stakeholders towards common goals are important always.