Вакансии

Location: Paris Workplace: Hybrid ABOUT VOODOO Founded in 2013, Voodoo is a tech company that creates mobile games and apps with a mission to entertain the world. Gathering 800 employees, 7 billion downloads, and over 200 million active users, Voodoo is the #3 mobile publisher worldwide in terms of downloads after Google and Meta. Our portfolio includes chart-topping games like Mob Control and Block Jam, alongside popular apps such as BeReal and Wizz. TEAM The Engineering & Data team builds innovative tech products and platforms to support the impressive growth of their gaming and consumer apps which allow Voodoo to stay at the forefront of the mobile industry. The Engineering & Data team plays a key role in Voodoo's long-term strategy. It enables Voodoo to both accelerate product diversification and provide a state of the art growth-engine to distribute and scale our games. They create innovative solutions that drive growth with a pragmatic approach, ranging from simple searching to complex machine learning systems. ROLE We’re looking for a Senior Security Engineer to join our Engineering & Data team. In this role, you’ll be responsible for a wide variety of topics: - Security Engineering & Guardrails: Architect, construct, and maintain automated security guardrails and paved paths to foster secure-by-default development environments. - Shift-Left Architecture Guidance: Collaborate with development teams during the early ideation and design phases to embed secure coding practices and architecture from inception. - Continuous & Automated Assessment: Develop automated, continuous assessment capabilities that replace manual reviews and scale seamlessly across the business unit. - Hands-on Code Contribution: Work directly alongside engineers to contribute code for security fixes and paved-path solutions, ensuring security remains the simplest route. - Self-Service Tooling: Partner with developers to build scalable, self-service security tools that empower teams to detect and remediate risks independently. - Preventive & Detective Controls: Implement robust preventive and detective controls to deliver ongoing assurance rather than point-in-time security checks. - Strategic Collaboration & Incident Response: Drive long-term security strategy with key stakeholders while actively participating in periodic on-call rotations for incident support. - AI-Driven Security Innovation: Utilize AI technologies and methodologies to streamline threat detection, accelerate security evaluations, and advance scalable system protection. PROFILE (MUST HAVE) - 5+ years of experience troubleshooting systems, analyzing logs, and automating complex tasks via command-line tools - 5+ years of experience identifying security vulnerabilities, assessing risks, and constructing mitigation strategies - 5+ years of hands-on experience with scripting, software development, and security-focused code reviews across standard programming languages - Demonstrated expertise in recognizing industry-standard security vulnerabilities, understanding threat vector patterns, and applying effective remediation techniques - Proven track record in a leadership or guidance role, such as a technical lead, mentor, or engineering team lead - Proficiency in applying threat modeling and comprehensive risk identification methodologies - Proven track record securing microservices, service-oriented architectures, and web services - Experience with identity provider servers and authentication protocols (such as OAuth2, OIDC, SAML) - Experience with penetration testing (pentest) and vulnerability assessments - Self-starter with strong ownership, accountability, and ability to work autonomously and collaboratively across teams and organizations in a fast-paced environment. PROFILE (NICE TO HAVE) - Advocate for security standards with clarity and empathy. - Familiarity with AI/ML workflows and agents. OUR STACK Terraform, Kubernetes, Prometheus, ArgoCD, CircleCI, GitHub Actions, Atlantis, Grafana, Claude Code, Trivy, Conftest / OPA, AWS IAM Identity Center (SSO), Okta, AWS Secrets Manager, AWS KMS, AWS WAFv2, AWS Shield, AWS ACM, AWS GuardDuty, Sealed Secrets, Kyverno, cert-manager BENEFITS - Competitive salary based on experience - Swile Lunch voucher - Gymlib (100% covered by Voodoo) - Premium healthcare coverage with SideCare, 100% covered for you and your family - Wellness activities in our Paris office - Remote Fridays

Задачи: — искать уязвимости в системах и инфраструктуре; — проводить внутренние security assessments; — автоматизировать процессы безопасности; — внедрять security controls в инфраструктуру и инженерные процессы; — отслеживать новые уязвимости и техники атак.

Задачи: — Проектировать и автоматизировать средства контроля, механизмы обнаружения и инструменты для улучшения информационной безопасности инфраструктуры и продуктов Algolia — Исследовать, оценивать и рекомендовать новые технологии, методы и фреймворки информационной безопасности — Проектировать, внедрять и поддерживать системы мониторинга и устранения проблем информационной безопасности для защиты данных клиентов и систем Algolia — Сотрудничать с инженерными и продуктовыми командами для интеграции информационной безопасности в новые функции, системы и конвейеры разработки — Способствовать улучшению стандартов, процессов и лучших практик информационной безопасности в компании — Проводить оценку рисков и моделирование угроз для основных систем, сервисов и сторонних поставщиков — Участвовать и иногда возглавлять мероприятия по реагированию на инциденты информационной безопасности и анализу после инцидентов — Поддерживать текущие и новые инициативы по информационной безопасности и соответствию (например, SOC 2, Type II, ISO 27001, C5, GDPR) — Управлять и развивать программы публичного багбаунти и раскрытия уязвимостей Algolia Требования: — 3–6 лет опыта в инженерии информационной безопасности, защите инфраструктуры или смежных технических областях — Владение скриптингом или автоматизацией на одном из языков: Python, Bash, Go или аналогичных — Предпочтение опыту работы с Kubernetes — Глубокое понимание принципов информационной безопасности для современных облачных сред (AWS, GCP, Azure) и дата-центров — Опыт эксплуатации, настройки и управления системами логирования/SIEM, обнаружения угроз, управления позицией безопасности, EDR, SAST, SOAR, CTI и другими системами информационной безопасности, предпочтительно с опытом работы с Crowdstrike или Obsidian — Знание распространённых угроз, векторов атак и стратегий их смягчения — Хорошее понимание компьютерных систем, сетей и низкоуровневых протоколов с точки зрения информационной безопасности — Опыт обнаружения инцидентов, реагирования и управления уязвимостями — Отличные коммуникативные навыки для объяснения рисков и концепций информационной безопасности технической и нетехнической аудитории — Способность работать совместно с вице-президентом по информационной безопасности и самостоятельно достигать бизнес-целей — Свободное владение английским языком Желательно: — Опыт масштабирования программ информационной безопасности в быстрорастущих SaaS-компаниях — Сертификаты или эквивалентное обучение по облачной информационной безопасности (например, AWS Security Specialty, GCP Professional Security Engineer) — Опыт работы с системами управления секретами, такими как Hashicorp Vault — Участие в сообществах информационной безопасности, багбаунти, open-source инструментах или CTF — Опыт в области инженерии конфиденциальности, моделирования угроз или безопасного проектирования ПО Условия: — Гибкая модель работы с возможностью полностью удалённой или гибридной работы — Работа в международной команде с офисами в Париже, Нью-Йорке, Лондоне, Сиднее и Бухаресте — Конкурентная годовая зарплата в диапазоне £66,080–£91,800 — Культура, ориентированная на обучение, сотрудничество и инновации в области информационной безопасности — Поддержка профессионального развития и возможность влиять на безопасность систем, используемых миллионами пользователей

Location: Estonia - Remote Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work. Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you. Our vision: A world where everyone is free to focus on their most purposeful work, together. About the Role: Wrike relies on a dynamically changing set of integrated SaaS tools, and securing them requires dedicated, end-to-end ownership of their data security posture. Asking questions like what data is collected, why, how long it’s retained, and how it flows between systems. As Business Systems Security Analyst, you will own this space by establishing continuous data governance, SaaS integration governance, and identity & access management across our business systems. Helping Wrike stay proactive and prevention-focused rather than reactive. Your Impact: Own data governance across business systems: what’s collected, why, retention, and data flows between systems Govern SaaS integrations: inventory, risk assessment, and secure onboarding/offboarding of third-party tools Manage and review access provisioning and deprovisioning across integrated SaaS platforms, ensuring least-privilege principles are enforced throughout the identity lifecycle Oversee SSO configurations, OAuth scopes, and service account permissions across business-critical systems, identifying overprivileged accounts and stale access Monitor and help harden the security posture of business-critical SaaS platforms and their connected tools Conduct periodic access reviews and certifications for SaaS platforms, with a focus on privileged and third-party system accounts Conduct security reviews of integrations from a data flow perspective before they connect to business-critical systems, including evaluating IAM implications such as API keys, OAuth tokens, and service accounts Partner with system owners to remediate risks and embed security into business processes Focus on AI-driven integration workflows: MCP, A2A, and emerging agent-based protocols Your Qualifications: Experience securing SaaS business platforms and their integrations, including identity and access management across those environments Solid understanding of data governance principles: data classification, retention, and data flow mapping Technical hands-on skills: ability to independently investigate configurations, permissions, API connections, and logs across SaaS platforms Knowledge of integration best practices: secure API design, least-privilege service accounts, token/secret management, and integration lifecycle management Understanding of AI tooling and its security implications: how AI-powered tools access, process, and store business data Experience with third-party/vendor risk assessment and SaaS security posture management Ability to work cross-functionally with business system owners (Sales Ops, Marketing Ops, RevOps) Standout Qualities: Hands-on experience with SSPM tools or Salesforce security tooling Familiarity with OAuth/API integration security and supply-chain risk Experience with AI-driven data flows and integrations (e.g., MCP, A2A, agent-based workflows) Knowledge of Salesforce is a strong plus Team Dynamics: You will be joining Wrike's 15-member global Security team led by Maksim Pekuryn, Director of Security. You will report directly to Swen Groeneveld, Head of Security Operations, whose 8-person sub-team includes Security Engineers, Application Security, and SOC specialists. You'll also work closely with cross-functional partners in RevOps, Marketing, and Legal. Our Work Style: Tech stack: Salesforce, Marketo, Salesloft, OAuth integrations, connected apps, and related business SaaS tooling. Collaborative environment working closely with RevOps, Legal, and Marketing teams. Hybrid mode. Benefits & Perks: 28 calendar days of paid vacation Sick Leave Compensation (5 Paid Uncertified Sick Days) Parental Leave: 18 Weeks Maternity / 4 Week Paternity 2 Volunteer Days Health Insurance (Employees + Dependents) Life Insurance Plan Utility Allowance (30 EUR/month, subject to taxation) Fitness Plan (800 EUR/year) Full-remote & On-demand access to Co-working space What's Next? Recruiter Screen (30 mins) Department Interview / Technical Discussion (60 mins) Cultural Interview with Hiring Manager, CISO, and HRBP Your recruitment buddy will be Aleksandar Chernev , Senior Technical Recruiter. #LI-AC1 Who Is Wrike and Our Culture We’re a team of innovators and creators who solve the complex work problems of today and tomorrow. Hybrid work mode Wrike is our people, not a place. With 1,000+ employees collaborating across nearly every time zone, we support talent through 10 global hubs — Australia, Costa Rica, Cyprus, Czechia, Estonia, France, India, Ireland, Japan, and the United States — offering flexible ways of working that include remote work, hybrid environments, and co-working spaces across many locations. While flexibility looks different across teams and regions, employees located near certain hubs — particularly in Prague (CZ), Nicosia (CY), Bangalore (IN), and Rennes (FR) — are generally expected to collaborate in person around 2–3 days per week, balancing the flexibility of distributed work with opportunities for in-person collaboration and connection. Our persona 💡  Smart: We love what we do, and we’re great at it because this is our domain. Our combined knowledge in this space is unmatched. 💚  Dedicated: We get up every day focused on helping our customers win. We’re committed to helping our teammates win, too! 🤗  Approachable: We're friendly, easy to get along with, considerate, and helpful. Our culture and Values 🤩 Customer-Focused We care about our customers. We understand the customer journey, experience, and value derived from Wrike. Decision-making and action-taking are done with the customer in mind. 🤝 Collaborative We work as one and win together, each bringing unique strengths that contribute to diversity of thought for better outcomes. Leveraging our own work management platform, we foster an environment of creative collaboration and shared achievement. 🎨 Creative We strive to succeed through continuous innovation. It’s our pursuit of novel concepts that helped us create a market category. We continue to cultivate a workplace that fosters creative thinking as a means of transcending conventional boundaries and empowers us to break new ground to deliver extraordinary work management solutions. 💪 Committed We believe in ownership at all levels of the organization, by owning workflows from start to finish. Each member of our team is an integral part of this commitment, establishing work as a platform for personal growth and transformation, as well as collective success and growth. Check out our LinkedIn Life Page , Company culture page , Instagram , Wrike Engineering Team , Medium , Meetup.com , Youtube for a feel for what life is like at Wrike.

Location: Nicosia Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work. Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you. Our vision: A world where everyone is free to focus on their most purposeful work, together. About the Role: Wrike relies on a dynamically changing set of integrated SaaS tools, and securing them requires dedicated, end-to-end ownership of their data security posture. Asking questions like what data is collected, why, how long it’s retained, and how it flows between systems. As Business Systems Security Analyst, you will own this space by establishing continuous data governance, SaaS integration governance, and identity & access management across our business systems. Helping Wrike stay proactive and prevention-focused rather than reactive. Your Impact: Own data governance across business systems: what’s collected, why, retention, and data flows between systems Govern SaaS integrations: inventory, risk assessment, and secure onboarding/offboarding of third-party tools Manage and review access provisioning and deprovisioning across integrated SaaS platforms, ensuring least-privilege principles are enforced throughout the identity lifecycle Oversee SSO configurations, OAuth scopes, and service account permissions across business-critical systems, identifying overprivileged accounts and stale access Monitor and help harden the security posture of business-critical SaaS platforms and their connected tools Conduct periodic access reviews and certifications for SaaS platforms, with a focus on privileged and third-party system accounts Conduct security reviews of integrations from a data flow perspective before they connect to business-critical systems, including evaluating IAM implications such as API keys, OAuth tokens, and service accounts Partner with system owners to remediate risks and embed security into business processes Focus on AI-driven integration workflows: MCP, A2A, and emerging agent-based protocols Your Qualifications: Experience securing SaaS business platforms and their integrations, including identity and access management across those environments Solid understanding of data governance principles: data classification, retention, and data flow mapping Technical hands-on skills: ability to independently investigate configurations, permissions, API connections, and logs across SaaS platforms Knowledge of integration best practices: secure API design, least-privilege service accounts, token/secret management, and integration lifecycle management Understanding of AI tooling and its security implications: how AI-powered tools access, process, and store business data Experience with third-party/vendor risk assessment and SaaS security posture management Ability to work cross-functionally with business system owners (Sales Ops, Marketing Ops, RevOps) Standout Qualities: Hands-on experience with SSPM tools or Salesforce security tooling Familiarity with OAuth/API integration security and supply-chain risk Experience with AI-driven data flows and integrations (e.g., MCP, A2A, agent-based workflows) Knowledge of Salesforce is a strong plus Team Dynamics: You will be joining Wrike's 15-member global Security team led by Maksim Pekuryn, Director of Security. You will report directly to Swen Groeneveld, Head of Security Operations, whose 8-person sub-team includes Security Engineers, Application Security, and SOC specialists. You'll also work closely with cross-functional partners in RevOps, Marketing, and Legal. Our Work Style: Tech stack: Salesforce, Marketo, Salesloft, OAuth integrations, connected apps, and related business SaaS tooling. Collaborative environment working closely with RevOps, Legal, and Marketing teams. Hybrid mode. Benefits & Perks: 25 working days of paid vacation Sick Leave Compensation (5 Uncertified + 10 Certified Days) Parental Leave: Fully Paid Maternity / 4 Weeks Paid Paternity 2 Volunteer Days Medical Insurance (Employees + Dependents) Life Insurance (Employees) Provident Fund Hybrid Working Model School Allowance (Up to €600/month for school aged kids) Simcard w/ Unlimited Internet Access for active employees Office Lunch Allowance (via Wolt) on Wednesdays / Thursdays Work Permit, Blue Card & Naturalization Support What's Next? Recruiter Screen (30 mins) Department Interview / Technical Discussion (60 mins) Cultural Interview with Hiring Manager, CISO, and HRBP Your recruitment buddy will be Aleksandar Chernev , Senior Technical Recruiter. #LI-AC1 Who Is Wrike and Our Culture We’re a team of innovators and creators who solve the complex work problems of today and tomorrow. Hybrid work mode Wrike is our people, not a place. With 1,000+ employees collaborating across nearly every time zone, we support talent through 10 global hubs — Australia, Costa Rica, Cyprus, Czechia, Estonia, France, India, Ireland, Japan, and the United States — offering flexible ways of working that include remote work, hybrid environments, and co-working spaces across many locations. While flexibility looks different across teams and regions, employees located near certain hubs — particularly in Prague (CZ), Nicosia (CY), Bangalore (IN), and Rennes (FR) — are generally expected to collaborate in person around 2–3 days per week, balancing the flexibility of distributed work with opportunities for in-person collaboration and connection. Our persona 💡  Smart: We love what we do, and we’re great at it because this is our domain. Our combined knowledge in this space is unmatched. 💚  Dedicated: We get up every day focused on helping our customers win. We’re committed to helping our teammates win, too! 🤗  Approachable: We're friendly, easy to get along with, considerate, and helpful. Our culture and Values 🤩 Customer-Focused We care about our customers. We understand the customer journey, experience, and value derived from Wrike. Decision-making and action-taking are done with the customer in mind. 🤝 Collaborative We work as one and win together, each bringing unique strengths that contribute to diversity of thought for better outcomes. Leveraging our own work management platform, we foster an environment of creative collaboration and shared achievement. 🎨 Creative We strive to succeed through continuous innovation. It’s our pursuit of novel concepts that helped us create a market category. We continue to cultivate a workplace that fosters creative thinking as a means of transcending conventional boundaries and empowers us to break new ground to deliver extraordinary work management solutions. 💪 Committed We believe in ownership at all levels of the organization, by owning workflows from start to finish. Each member of our team is an integral part of this commitment, establishing work as a platform for personal growth and transformation, as well as collective success and growth. Check out our LinkedIn Life Page , Company culture page , Instagram , Wrike Engineering Team , Medium , Meetup.com , Youtube for a feel for what life is like at Wrike.

Note: Best Opportunity For Freshers to Start his Career in IT Sector

Location: Madrid, Spain Workplace: hybrid Are you ready to join our digital revolution journey?    At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.   Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.   With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career. We are looking for an experienced and operationally sharp Security Operations & Incident Response Analyst (L3) to join Aleph's global IT Security team. Reporting to the Global CISO, you will be the first line of defence when incidents occur and the engine behind the team's threat detection and response capabilities. You will own the end-to-end incident response process, lead threat hunting and intelligence activities, and manage the vulnerability and identity governance programmes — ensuring Aleph is both able to detect threats quickly and respond to them effectively across a complex, globally distributed environment. What you'll do: Incident Response Own and coordinate the end-to-end incident response process : identification, triage, containment, eradication, recovery, and post-incident review (lessons learned). Serve as the primary point of contact for security incidents escalated from IT Operations, the Security Engineer, and external sources. Maintain and continuously improve incident response playbooks for the most relevant threat scenarios (ransomware, phishing, account compromise, data breach, insider threat, etc.). Manage the security incident log and register : track all incidents, document timelines and actions, and produce trend analysis and reporting for the CISO. Coordinate with external SOC or MDR providers where applicable: review daily reports, validate alert quality, and manage escalation workflows. Data Breach Management Lead data breach investigations : scope the breach, gather and preserve evidence, assess PII exposure, and coordinate response with Legal, Privacy, and HR. Produce breach investigation reports with findings, root cause, and recommendations. Threat Hunting & Intelligence Conduct proactive threat hunting across the environment: develop hypotheses based on threat intelligence, search for indicators of compromise (IoCs), and investigate anomalous behaviour. Manage the Threat Intelligence function : track relevant threat actors, TTPs (MITRE ATT&CK), and sector-specific threat campaigns; integrate intelligence into SIEM/XDR detection rules and hunting queries. Produce threat intelligence summaries and briefings for the CISO and relevant stakeholders. Vulnerability Management Own the vulnerability management programme : schedule and execute periodic vulnerability scans across infrastructure, endpoints, and cloud environments. Analyse scan results, prioritise findings by risk and exploitability, and coordinate remediation with IT Operations within agreed SLAs. Track remediation progress, produce vulnerability metrics, and report status to the CISO. Validate remediation effectiveness through re-scanning and spot-checks. Identity & Access Management (IAM) Manage periodic access reviews : coordinate with system owners and HR to review and certify user permissions across critical systems, ensuring least privilege is maintained. Oversee the Privileged Access Management (PAM) programme: define PAM policies, monitor privileged account usage, and review access rights for administrator-level accounts. Investigate and respond to identity-related anomalies and access policy violations. What we are looking for: 3–5 years in a SOC analyst, incident response, or security operations role, with at least 1–2 years at L3 level is a plus. Experience implementing or managing IAM and PAM solutions Experience working within international or multinational environments. Hands-on experience with incident response engagements (internal or consulting) is strongly valued. Relevant certifications: GCIH, GCFE, GCFA, CEH, CompTIA CySA+ , or equivalent. OSCP is a plus. Strong hands-on experience with SIEM platforms (alert triage, rule writing, query development) and EDR/XDR tools . Solid knowledge of the MITRE ATT&CK framework and its application to threat hunting and incident response. Experience conducting vulnerability scans using tools such as Tenable Nessus, Qualys, Rapid7, or similar. Familiarity with IAM and PAM concepts and platforms (e.g. CyberArk, BeyondTrust, Azure PIM, or equivalent). Experience with digital forensics and incident response (DFIR) methodologies: evidence collection, log analysis, and timeline reconstruction. Knowledge of threat intelligence platforms and feeds (e.g. MISP, VirusTotal, threat intel feeds). Understanding of ISO 27001 incident management controls, NIS2 incident reporting obligations, and PCI DSS requirement 12.10 . Calm and decisive under pressure. Strong investigative mindset with structured problem-solving approach, excellent documentation skills. Ability to communicate incident status and findings clearly to both technical teams and executive stakeholders. Collaborative and proactive, comfortable working asynchronously across time zones. English : full professional proficiency (C1/C2) — primary working language. Spanish : professional proficiency is a plus. In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is EUR 48,000 EUR. In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.   #Aleph Why Join Us?   Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.     We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.    #ALEPH

В команду RedCore ищем специалиста с практическим опытом работы с системами физической безопасности. Что важно: — опыт работы с CCTV, системами контроля доступа (ACS) и охранной сигнализацией — самостоятельный монтаж, настройка, обслуживание и устранение неисправностей — опыт работы с Ajax или аналогичными системами — понимание IP-сетей и сетевого оборудования: PoE, коммутаторы, маршрутизаторы — русский и английский языки — греческий будет плюсом Условия: — работа из офиса на Кипре — полный рабочий день

Location: Hong Kong SAR About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. Responsibilities Regulatory Support & MIC-IT Enablement: Serve as the primary cybersecurity anchor for Spark. Work intimately with the ROs and MIC-IT to design, implement, and evidence the cybersecurity framework, ensuring senior management possesses full visibility and control over cyber risks as expected by the SFC. Pre-Launch & Independent Assessments: Take total ownership of preparing for, facilitating, and successfully passing the SFC-mandated pre-launch independent cybersecurity assessments. Remediate any findings swiftly and effectively prior to go-live. Cybersecurity Framework & Operations: Architect, deploy, and govern Spark’s comprehensive cybersecurity framework. Ensure strict alignment with ISO/IEC 27001, SFC guidelines, and industry best practices for network, application, and endpoint security. Incident Readiness & Response: Develop, test, and maintain robust Cyber Incident Response Plans (CIRP) and Disaster Recovery/Business Continuity Plans (DR/BCP). Lead tabletop exercises and ensure the organization is perpetually ready to detect, contain, and eradicate threats. Ongoing Cyber Controls: Establish a continuous monitoring environment. Oversee regular penetration testing, vulnerability scanning, threat intelligence gathering, and the implementation of Zero-Trust architecture across Spark’s infrastructure. Leadership & Cross-Functional Collaboration Strategic Alignment: Report directly to the CTO while operating with the independence necessary to challenge technical architectures from a security and risk perspective. Security Culture: Champion a security-first culture across the engineering, product, and operations teams at Spark. Develop and execute ongoing security awareness training for all employees. Vendor Risk Management: Oversee the security evaluation of third-party vendors, SaaS providers, and blockchain analytics platforms, ensuring external integrations do not compromise Spark’s internal security posture. Local Presence & Communication: Serve as the on-the-ground security leader in Hong Kong. Communicate complex security risks in clear, business-centric terms to the Board, C-suite, and regulators. Communication: Exceptional verbal and written communication skills in English (fluency in Mandarin is a strong plus given the Hong Kong location). Educational & Professional Qualifications Academic Background: Holds a relevant university degree (Bachelor’s required, Master’s preferred) in Cybersecurity, Computer Science, Information Technology, or a related highly technical discipline. Industry Certifications: Must possesses active, industry-recognized professional cybersecurity certifications such as CISSP, CISM, CISA, or CRISC. Specialized Credentials (Optional but Preferred): Additional certifications in cloud security (e.g., CCSP), offensive security (e.g., OSCP), or blockchain/smart contract security demonstrate a strong advantage. Extensive Security Tenure: 10+ years of dedicated experience in cybersecurity, risk management, or IT audit, with at least 3-5 years in a senior leadership or Head of InfoSec capacity within the financial services sector (TradFi, FinTech, or Digital Assets). SFC VASP /VATP Expertise: Demonstrates sufficient, highly relevant experience directly navigating Hong Kong SFC VASP / VATP (Type 1 & Type 7) license applications from a cybersecurity perspective. Digital Asset Security : Deep, hands-on operational experience with the unique threat vectors of the crypto industry. Proven expertise in securing Hot/Cold/Warm wallet infrastructures, Multi-Party Computation (MPC), Hardware Security Modules (HSMs), and node network security. Why Join Us At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.

Location: US - Headquarters - Maryland - Columbia Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc Your Role: As an AI Security Engineer on Tenable's Information Security team, you will help shape and mature our approach to securing AI both within Tenable's products and across the enterprise. AI introduces a new class of risk at the intersection of application security, cloud risk, and data governance, and you will be on the front lines of defining how we assess, test, and address it. You will apply hands-on AI engineering experience alongside deep product security and application security skills to design security controls for AI systems, lead assessments, and help engineering teams ship AI features securely. You will establish security standards for responsible AI use, influence decisions across the organization, and build tooling that raises our security posture. This role is ideal for a practitioner who has spent real time building with AI systems, looking under the hood of model internals, and wants to channel that experience into a security specialty. Your Opportunity: Design, implement, and maintain end-to-end security controls across the AI/ML lifecycle. Conduct safety research, inspecting model internals (e.g., detecting hidden deception, latent knowledge, or unwanted concepts across layers) as a core methodology. Perform AI safety assessments and threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks. Design and implement robust security guardrails, controls, and boundary mechanisms for Large Language Models (LLMs), Small Language Models (SLMs), and open-source models. Act as a subject matter expert in AI safety research by inspecting model internals to detect hidden deception, latent knowledge, or unwanted concepts, ensuring highly transparent and aligned AI outputs. Continuously monitor the AI landscape for novel vulnerabilities and attack techniques, applying deep engineering experience to proactively defend enterprise AI deployments. Develop security reference architectures for AI deployment patterns, including MCP servers and agentic AI workflows and harnesses. Deploy controls to ensure model integrity, governance, and proper access control across models and feature stores. Build AI-driven tooling to strengthen cybersecurity posture across identity, incident management, vulnerability management, third-party risk, and emerging AI threat vectors. Perform AI safety, security assessments, threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks. Collaborate with software engineers, and product teams to integrate security best practices into AI development, training, validation, and deployment processes. Drive Secure Software Development Lifecycle (SSDLC) and DevSecOps practices for AI-powered products, including threat modeling, security testing, penetration testing, and CI/CD pipeline security automation. Create security guidance, documentation, and training for internal engineering and development teams; develop metrics that drive desired security behaviors and outcomes. Research emerging trends in AI security and contribute to innovative solutions that support Tenable's AI initiatives. What You'll Need: 5 or more years of professional experience in information security or application security, with at least 1–2 years focused on securing AI/ML systems. Master’s Degree in Computer Science, Cybersecurity, Data Science, or a related field preferred; advanced degree preferred. Deep understanding of AI-specific security threats, including adversarial ML, data poisoning, prompt injection, model inversion, model evasion, and inference attacks. Strong coding experience in Python and/or Go. Experience with frameworks & libraries such as PyTorch, Hugging Face Transformers, TensorFlow or similar. Experience using specialized interpretability and probing tools/libraries such as TransformerLens, NNsight, Captum, or LIT (Learning Interpretability Tool). Familiarity with mechanistic & Architectural Concepts: inspecting internal model states, residual streams, attention patterns, activation steering, Sparse Autoencoders (SAEs), or feature attribution. Strong understanding of the ML/AI lifecycle and the security risks associated with each stage. Knowledge of cloud security platforms: AWS, Azure, or GCP including AI/ML-related services. Knowledge of data security principles, including encryption, masking, and tokenization. Knowledge of SSDLC, DevSecOps, and security testing practices, including SAST, DAST, SCA, and threat modeling. Knowledge of application security architecture best practices and patterns, including modern web applications, Docker, and microservices. Ability to work cross-functionally across engineering, product, and business teams. Strong written and verbal comAAmunication skills; able to clearly translate complex AI security risks for both technical and non-technical audiences. Strong problem-solving skills, attention to detail, and ability to lead projects with end-to-end ownership. Self-motivated and effective working independently and across distributed teams. And Ideally: Hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments. Familiarity of AI security frameworks and standards, including OWASP LLM Top 10 and the NIST AI Risk Management Framework. Experience with application security assessment tools (Burp Suite, ZAP, Tenable WAS, etc). Familiarity with AI governance frameworks (EU AI Act, NIST AI RMF, etc.). Background in cloud security or large-scale SaaS product environments. Security certifications: CISSP, CSSLP, SANS GIAC, CEH, or AI-focused security certifications are a plus, but not necessary. #LI-Hybrid #LI-MS1 This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs. US Pay Range $122,500 — $163,166.67 USD We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Location: Remote Workplace: Remote We are building AI to simulate the world through merging art and science. We believe that world models are at the frontier of progress in artificial intelligence. Language models alone won’t solve the world’s hardest problems – robotics, disease, scientific discovery. Real progress requires models that experience the world and learn from their mistakes, the same way that humans do. And this kind of trial and error can be massively accelerated when done in simulation, rather than in the real world. World models offer the most clear path to general-purpose simulation, changing how stories are told, how scientific progress is made and how the next frontiers of humanity are reached. Our team consists of creative, open minded, caring and ambitious people who are determined to change the world. We aspire to continuously build impossible things and our ability to do so relies on building an incredible team. If you are driven to do the same, we'd love to hear from you. *Titles posted to our careers page are updated regularly to best advertise the role and expected seniority, but internally we have a flat titling system with two types of titles: one for individual contributors and one for people managers. ABOUT THE ROLE *Open to hiring remote — we also have offices in New York, San Francisco, Seattle, London, Paris, and Tel Aviv. Runway is hiring an Infrastructure Security Engineer to secure the platform our models are trained and served on. The role covers Kubernetes platform security, cloud identity and access, software supply chain, tenant isolation in the serving layer and the research infrastructure behind our models. Securing a company that trains and serves frontier video models is a different problem from securing a typical SaaS product. The environment includes research compute, large training datasets, a fast-moving build pipeline, and engineers who work inside AI-assisted tooling every day. Each of those changes what an attack looks like and what the platform has to enforce to stop it. This is a hands-on engineering role on the Security team. You'll write policy, tooling and infrastructure code, work in the platform team's repositories, and ship controls that hold up in production. WHAT YOU'LL DO - Design and ship security controls in our Kubernetes ecosystem: admission policy, RBAC, workload identity, network policy and runtime hardening across every cluster we run - Harden the software supply chain from dependency intake through build and deploy, including package firewalling, artifact signing and provenance, and admission controls that block what doesn't pass - Own cloud IAM and identity architecture: least-privilege roles, short-lived credentials and workload federation - Secure research infrastructure and training pipelines, including access to model weights and datasets, without slowing down the people using them - Threat model new platform components before they ship and turn the findings into concrete requirements the owning team can act on - Build guardrails for AI agents and developer tooling operating inside our infrastructure - Write infrastructure as code and policy as code, and treat security configuration with the same review and rollout discipline as any other change - Give the incident response team what they need when infrastructure is involved: fast answers about how a system works and what to shut off WHAT YOU'LL NEED - Hands-on experience securing Kubernetes in production: you've written admission policies, debugged RBAC and workload identity problems and understand how a cluster gets compromised - Working knowledge of cloud IAM and networking on at least one major cloud platform, including how identity federation and short-lived credentials actually work - Experience with infrastructure as code and GitOps-style deployment, and the habit of shipping security changes through the same pipeline as everything else - Comfort writing Python, Typescript, Rust or another language to build tooling, not just scripts - An understanding of software supply chain attacks and the controls that stop them: signing, provenance, SBOMs, admission enforcement - Clear writing. Design docs, threat models and explanations to engineers who don't work in security are all part of the job - Judgment about which controls to enforce, which to recommend and how to roll out a breaking change without breaking the company EVEN BETTER IF YOU HAVE - Experience securing GPU or HPC-style compute, training pipelines or research environments - Experience with policy engines and admission controllers (Kyverno, OPA Gatekeeper, Falco or similar) - Multi-tenant isolation design in a cloud environment: ABAC, scoped credentials, per-tenant boundaries - Experience producing security architecture evidence for SOC 2, ISO 27001 or other audits and customer assessments - Open source contributions or published work in cloud or Kubernetes security Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. Our salary ranges are based on competitive market rates for our size, stage and industry, and salary is just one part of the overall compensation package we provide. There are many factors that go into salary determinations, including relevant experience, skill level and qualifications assessed during the interview process, and maintaining internal equity with peers on the team. The range shared below is a general expectation for the function as posted, but we are also open to considering candidates who may be more or less experienced than outlined in the job description. In this case, we will communicate any updates in the expected salary range. Lastly, the provided range is the expected salary for candidates in the U.S. Outside of those regions, there may be a change in the range, which again, will be communicated to candidates. WORKING AT RUNWAY Great things come from great teams. https://www.youtube.com/watch?v=kwmj4ato2kw&ab_channel=Runway We’d love to hear from you. We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed. So regardless of race, gender identity or expression, sexual orientation, religion, origin, ability, age, veteran status, if joining this mission speaks to you, we encourage you to apply. More about Runway - Universal World Simulator https://runwayml.com/world-simulator.html - GWM-1 https://runwayml.com/research/introducing-runway-gwm-1 - Gen-4.5 https://runwayml.com/research/introducing-runway-gen-4.5 - General World Models https://runwayml.com/research/introducing-general-world-models - Robotics SDK https://runwayml.com/research/introducing-runway-gwm-1#robotics-section - Conversational Real-time Agents https://runwayml.com/research/introducing-runway-gwm-1#avatars-section - Runway Studios https://runwayml.com/studios We're excited to be recognized as a best place to work: Crain's https://www.crainsnewyork.com/awards/best-places-work-2023 | InHerSight https://www.inhersight.com/companies/best/city/new-york-city-ny | BuiltIn NYC https://builtin.com/awards/new-york-city/2024/best-places-to-work | INC https://www.inc.com/best-workplaces/2024

Location: USA (Remote); Canada (Remote) Workplace: Remote Mysten Labs’ mission is to advance the internet through step-function improvements in what technology makes possible. We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value. Our work spans on-chain finance and the emerging agent economy. Through Sui, Move, and our broader technology stack, we’re building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact. We’re looking for a Senior Security Engineer to help protect the Sui ecosystem. You’ll uncover vulnerabilities, build monitoring tools, and assess economic risk across DeFi protocols. Working closely with external protocol teams and Mysten’s own DeFi products, including DeepBook, you’ll help address risks before they become incidents and strengthen security across the ecosystem Responsibilities - Build and run continuous monitoring of the Sui DeFi ecosystem for security and economic risk: oracle issues, misconfigurations/bad economic parameters, solvency and bad-debt exposure under price shocks, liquidation capacity against on-chain liquidity depth, accounting-versus-positions reconciliation, invariants. - Extend security team tooling, both precise static analysis tooling and proprietary agent skills. - Measure and drive compliance with the DeFi security recommendations across supported protocols: run the recurring compliance cycle, fill the protocol report card, validate security claims (audits, custody, upgrade governance, oracle dependencies) against on-chain reality, track remediation commitments, and escalate when a protocol regresses or fails to disclose an incident. Partner with the ecosystem and finance owners of the process. - Hunt for critical vulnerabilities in the highest-TVL Sui protocols and get them fixed before they are exploited: full-package audits, variant analysis across forks, pre-execution review of multisig upgrade payloads, and forensics after incidents anywhere in the ecosystem. - Be the security team's point of contact for external DeFi teams and for Mysten's own DeFi products such as DeepBook: due diligence, incident coordination, and post-mortems that feed back into the recommendations and the monitors. - Write it down: findings, reports, and runbooks that a protocol engineer can act on and a non-technical stakeholder can understand, with every claim traceable to bytecode, chain state, or data. Minimum Qualifications - Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience. - 3+ years of hands-on experience in security engineering, smart contract security, or DeFi risk engineering, with a track record of building tools that ran in production and of finding real vulnerabilities (audit findings, bug bounty reports, published research, or incident work). - Strong understanding of DeFi mechanics and their failure modes: lending markets (LTV, liquidation thresholds and bonuses, close factors, bad debt), AMMs and concentrated liquidity, perpetuals, liquid staking, oracles (staleness, confidence, TWAP, multi-source aggregation), flash loans, and MEV. - Proficiency in TypeScript and Python, and comfort with Rust. Ability to write SQL over large datasets and to work with blockchain indexers and data warehouses. - Experience reading smart contract code at source or the bytecode or disassembly level, or evident ability to learn it quickly. Move experience is a plus, not a requirement; Solidity or Rust smart contract experience transfers. - Rigor: you verify claims against bytecode and chain state, build known-clean checks into your tools, and say what you did not verify. - Strong written and verbal communication, including the ability to influence external teams you have no formal authority over - Interest in the web3 space is required. Preferred Qualifications - Sui and Move experience: the object and capability model, package upgrades and version gates, programmable transaction blocks, the Sui GraphQL and gRPC APIs. - Knowledge of the recent DeFi exploit history on Sui and other chains: named incidents, oracle compromises, and the defect classes behind them. - Experience building analysis or monitoring tools with LLM agents (Claude Code skills or comparable), and a clear sense of where models help and where deterministic tooling must do the work. - Static or dynamic program analysis experience: taint analysis, call graphs, symbolic execution, fuzzing, formal verification. - Quantitative or economic modeling experience: stress testing, liquidity modeling, risk parameters for lending markets. - Publications, conference talks, CVEs, or bug bounty rankings. Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information. Regarding the recent rash of technology job scams: Be aware that emails from genuine Mysten Labs group recruiters will always come from the @mystenlabs.com http://mystenlabs.com domain or related subdomains (e.g., mystenlabs.com/careers http://mystenlabs.com/careers). Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers http://www.mystenlabs.com/careers. To support an efficient and fair hiring process, we may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers. Our team is remote first and we are hiring across the world. Here at Mysten Labs, you’ll be joining a world-class team with tremendous growth potential as we bring the next billion users to web3. We raised a $300M Series B round from top Silicon Valley led venture funds like Jump Crypto, Andreessen Horowitz (a16z), Binance Labs, Redpoint, Lightspeed, Coinbase Ventures, Electric Capital, Standard Crypto, NFX, Slow Ventures, Scribble Ventures, Samsung Next, Lux Capital, among other investment firms and strategic partners. Come join us and build the future of web3!

Location: United States & Canada Workplace: Remote About WorkOS 🚀 WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations. We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid. As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products. About the Security team The Security team at WorkOS is responsible for keeping the data and identities of hundreds of millions of users secure. Security is fundamental to our products, and customer trust is the foundation of our success. We are a highly collaborative group with a strong engineering mindset. Our security program is shaped by hands-on experience attacking and defending systems, and applying lessons from across the industry. We embrace the latest advancements in practices and tooling that make modern security teams effective. We are comfortable in code and collaborate often with engineering to create products that are secure by default. Who we’re looking for - Risk-focused and pragmatic. You excel at identifying and reasoning about security risk in real-world contexts. You prioritize ruthlessly, always asking: what's the most effective way to reduce risk right now and in the long term? - A builder who can break things. You're comfortable reading and writing code, and you have a passion for deeply understanding the products you secure. You think like an attacker to find subtle, high impact vulnerabilities and like a defender to design pragmatic, effective mitigations. - A strong partner to engineering. You build trust with engineers by understanding their priorities, making security frictionless, and finding ways to make the secure path, the easiest path. - Excited about AI. You're embracing AI and automation to scale security and reduce toil. - Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you. Responsibilities - Lead secure design efforts. Partner with engineering teams on secure design and code reviews. Identify and prioritize risks early in the product lifecycle. - Build secure by default systems. Develop paved paths that systemically reduce risk and make secure development the easiest path for engineers. - Perform offensive security testing. Conduct penetration tests and code audits on new and existing products from an adversarial lens. - Improve our security tooling. Integrate and improve our static analysis, supply chain security, and vulnerability management capabilities across engineering pipelines. - Operate our responsible disclosure program. Run and improve our program by furthering automation, validating submissions, and coordinating remediation. - Improve our products. Write and ship code to remediate vulnerabilities in production systems and improve the security posture of WorkOS products. - Work directly with customers. Help build our customers' trust by directly engaging with their security-related questions and concerns. Qualifications - 5+ years of experience in a security engineering or security-focused software engineering role. - Ability to execute across a wide range of security functions such as security assessments, penetration testing, responsible disclosure, security tooling integration, etc. - Familiarity with and experience using common industry tooling. - Proven ability to identify vulnerabilities in software, demonstrated through CVEs, bug bounty, blog posts, or prior work experience. - Strong written and verbal communication skills, particularly in partnering with engineering teams. - Comfortable reading and writing code, and able to effectively leverage AI during the process. - Bonus: Experience in the authentication and identity domain. - Bonus: Experience writing production level code, especially developing security features. Benefits and Perks (US Only) 💖 At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.   - 401k matching - Competitive Equity - Healthcare, dental and vision coverage - FSA, ST/LT Disability, Voluntary Life - Carrot fertility benefits - 20 days paid vacation + 10 holidays + unlimited sick leave - 12 weeks fully paid parental leave - Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active - Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being - Commuter benefits for hybrid employees in SF/NYC - Unlimited token usage! Please inquire directly with our recruiting team for benefits available to those working outside the US.   Equal Opportunity Employer WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Задачи: — Управление жизненным циклом уязвимостей в технологическом стеке Glean, включая обнаружение, приоритизацию, устранение, отчетность и измерение. — Усиление безопасности базовых образов ОС и обеспечение безопасности зависимостей открытого программного обеспечения, менеджеров пакетов и цепочки поставок ПО. — Интеграция SAST, DAST, сканирования зависимостей и автоматической проверки безопасности в CI/CD пайплайны. — Оценка, внедрение и разработка решений и инструментов безопасности, включая Google’s Assured OSS и аналогичные подходы. — Определение практик безопасного кодирования и продвижение их среди инженерных команд через руководство, обучение и наставничество. Требования: — Степень бакалавра в области компьютерных наук, кибербезопасности или смежной области, либо эквивалентный опыт. — Опыт работы в области безопасности приложений и управления уязвимостями не менее 8 лет. — Глубокое понимание уязвимостей программного обеспечения, включая CVE, OWASP Top 10 и риски цепочки поставок. — Опыт работы с инструментами SAST, DAST, сканирования зависимостей и управления уязвимостями (например, Snyk, GitHub Dependabot, Trivy, Clair, Burp Suite, OWASP ZAP). — Практический опыт облачной безопасности в AWS, GCP, включая контейнеры, Kubernetes и микросервисы. — Способность вести межфункциональные инициативы и продвигать безопасность среди инженерных команд. — Проактивность, прагматичность, умение решать проблемы и балансировать безопасность с производительностью и удобством использования. Условия: — Удаленная работа. — Годовой базовый оклад от $185,000 до $260,000, зависит от местоположения, уровня, знаний, навыков и опыта. — Возможность переменной компенсации, акций и социальных льгот. — Медицинское, офтальмологическое и стоматологическое страхование. — Щедрая политика отпусков. — Вклад в пенсионный план 401k. — Стипендия на улучшение домашнего офиса, ежегодные стипендии на образование и оздоровление. — Регулярные корпоративные мероприятия и ежедневные здоровые обеды. Дополнительно: — Компания поддерживает разнообразие и инклюзивность, не дискриминирует по различным признакам. — В процессе собеседования предусмотрено AI-ориентированное упражнение для оценки понимания и использования AI в работе. — Соблюдение международных норм по защите данных кандидатов (GDPR, CCPA и др.).

Задачи: — усиливать безопасность приложений RingCentral — безопасно внедрять AI-технологии Требования: — глубокое знание уязвимостей веб-приложений и способов их эксплуатации и устранения — опыт threat modeling, security design review и risk assessment — практический опыт с SAST, DAST, SCA, code review и penetration testing — понимание рисков LLM-приложений, AI-агентов, coding-ассистентов и MCP-серверов — навыки программирования или написания скриптов — умение давать инженерным командам понятные и практически применимые рекомендации — разговорный английский Будет плюсом: — опыт с LLM/RAG, AI-assisted security testing, WebRTC, видео- или аудиостримингом Условия: — график 4 дня в офисе в Софии, 1 день удалённо — релокационный пакет и помощь с документами

Location: India About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is looking for a highly capable India Supply Chain Security Manager to own and lead all supply chain security operations across India. This role carries full dual-domain responsibility, covering both warehouse and transportation security, making it one of the most comprehensive country-level security mandates within the NGSCS structure. India represents a strategically significant and operationally complex market within the Nebius supply chain. Its scale, geographic diversity, regulatory environment, and logistics infrastructure present a unique set of security challenges that require a professional with deep local knowledge, strong operational judgment, and the ability to build and manage security standards across a wide network of logistics partners and facilities. Reporting to the APAC Supply Chain Security Manager, this individual will serve as the primary NGSCS authority for all supply chain security matters in India, establishing vendor relationships, enforcing security standards across warehouse and transportation partners, responding to security incidents, and maintaining full alignment with global NGSCS policies and procedures. Your responsibilities will include: Warehouse Security Own and lead warehouse security across all facilities in India, with full accountability for facility-level risk and performance Ensure the secure storage, handling, and integrity of high-value assets across all warehouse and staging facilities in the country Establish and enforce security requirements acrosslogistics partners operating warehouse and storage facilities, including 3PLs and co-located vendors Manage physical security standards across facilities, including access control, CCTV, guard force oversight, and alarm systems Conduct and oversee facility security assessments and audits, benchmarking against TAPA FSR and NGSCS standards Lead end-to-end response to warehouse security incidents (e.g., theft, loss, unauthorized access, inventory discrepancies), including coordination, investigation, and resolution Transportation Security Own and lead transportation security across all shipment lanes within India, with full accountability for in-transit risk and performance Ensure the secure handling, packaging, and movement of high-value assets across all transportation nodes, from origin to final delivery Establish and enforce security requirements across transportation partners, including carriers, freight forwarders, and last-mile delivery providers Conduct risk assessments across transportation routes, handoff points, and carrier operations, and implement effective mitigation strategies Manage GPS tracking, geofencing, and real-time monitoring of assets across active shipments within India Lead end-to-end response to in-transit security incidents (e.g., theft, loss, diversion, tampering), including coordination, investigation, and resolution Country Leadership & Regional Coordination Serve as the primary NGSCS authority and escalation point for all supply chain security matters in India Define, implement, and continuously evolve country-level security standards, controls, and procedures aligned with global NGSCS policies Maintain close coordination with the APAC Supply Chain Security Manager, providing regular visibility into country performance, risks, incidents, and emerging threats Navigate India's regulatory and compliance landscape, ensuring supply chain security operationsremain aligned with applicable local legal and industry requirements Monitor and report on country-level security performance, risks, and incidents across both warehouse and transportation domains Drive continuous improvement of security capabilities across the India vendor andlogistics partner network Operational Scope Full country ownership of both warehouse and transportation supply chain security across India, spanning a geographically large and operationally diverse market Regular engagement with 3PLs, carriers, facility managers, freight forwarders, and security vendorsoperating across India Travel within Indiarequired for facility site visits, route assessments, partner reviews, and incident response Operates as part of the broader NGSCS APAC structure, with close coordination with the APAC Supply Chain Security Manager We expect you to have: Minimum 7 years experience in supply chain security, logistics security, or a combined warehouse and transportation security role Proven experience operating across India, with strong understanding of the local logistics, regulatory, and security environment Strong experience working with both warehouse and facility security and in-transit transportation security operations Demonstrated experience working with Indianlogistics providers, 3PLs, carriers, and security vendors Demonstrated experience leading incident response across warehouse and transportation security events Familiarity with India's regulatory and compliance environment as it relates tologistics, security, and asset protection Ability tooperate independently with a high degree of ownership and accountability Strong stakeholder management and communication skills across internal and external partners Analytical and structured approach to risk assessment and problem-solving Fluent English (spoken and written); Hindi language proficiency preferred It will be an added bonus if you have: Experience in high-value or critical infrastructure supply chain security (e.g., data centers, AI hardware, electronics, technology hardware) Background in Indian law enforcement, military (security-related roles), or corporate security Familiarity with TAPA FSR, TAPA TSR, or equivalent supply chain security standards Familiarity with supply chain security technologies (e.g., GPS tracking, geofencing, access control systems, CCTV, tamper-evident sealing) Experience working within a global or regional organization with cross-border coordination requirements Understanding of thelogistics and security landscape across key Indian cities and corridors, including major distribution hubs and inter-city freight routes Operational Expectations Dual-domain responsibility across warehouse and transportation security may require availability outside standard working hours for incident response across either domain Operates within a global NGSCS environment requiring coordination across multiple time zones, including NGSCS teams in APAC, the EU, USA, Israel, and Taiwan Travel across India is a core part of this role, given the country's geographic scale and the distribution of facilities andlogistics partners Supported by the APAC Supply Chain Security Manager and NGSCS global leadership, with clear ownership of all supply chain security outcomes within India Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

We are building a new capability that turns fragmented, noisy security logs into actionable insights. The position is full-time, 40 hours per week, with mostly remote work within Germany and monthly in-person collaboration at the Berlin office. The contract is fixed-term. Salary ranges from EUR 69,000 to 77,000 per year.

Location: Dubai, United Arab Emirates; Cairo, Egypt; India; Riyadh, Saudi Arabia Job Description We are looking for an experienced SAP Basis & Security Consultant to manage SAP technical administration, system performance, security, user access, and SAP landscape operations. The ideal candidate should have strong hands-on experience in SAP Basis as well as SAP Security and authorization management. Key Responsibilities: Perform SAP Basis administration across SAP environments. Manage SAP system installation, configuration, upgrades, patches, and system maintenance. Monitor SAP system performance, availability, and health. Manage SAP transports, jobs, users, RFCs, interfaces, and system connectivity. Handle SAP system copies, refreshes, backups, and recovery activities. Troubleshoot SAP technical and performance issues. Design and maintain SAP Security roles and authorizations. Manage user provisioning, role assignments, access requests, and authorization concepts. Perform SAP Security audits and support compliance requirements. Identify and resolve authorization issues and security risks. Support SAP GRC processes where applicable. Work with functional and technical teams to ensure secure and stable SAP operations. Support SAP upgrades, migrations, and cloud transformation projects when required. Requirements: 6+ years of experience in SAP Basis . Strong hands-on experience in SAP Security and Authorizations . Experience managing SAP landscapes across DEV, QA, and Production . Strong knowledge of SAP user administration, roles, profiles, authorizations, RFCs, transports, and system monitoring. Experience with SAP HANA administration is preferred. Experience with SAP S/4HANA is preferred. Knowledge of SAP GRC Access Control is an advantage. Experience with SAP cloud environments is an advantage. Strong troubleshooting and problem-solving skills. Good communication and stakeholder-management skills. Mandatory Certification: Valid SAP Cloud certification is mandatory. Candidate must hold a recognized SAP Cloud certification , preferably related to SAP S/4HANA Cloud, SAP BTP, or SAP Cloud Technology . Candidate must provide the certification name and certificate/credential ID .