Вакансии

Location: Global We are the creators of a new fintech era! Our mission is to change this world by making blockchain accessible to everyone in everyday life. WhiteBIT is a global team of over 1,200 professionals united by one mission — to shape the new world order in the Web3 era. Each of our employees is fully engaged in this transformative journey. We work on our blockchain platform, providing maximum transparency and security for more than 8 million users worldwide. Our breakthrough solutions, incredible speed of adaptation to market challenges, and technological superiority are the strengths that take us beyond ordinary companies. Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT and VISA. The future of Web3 starts with you: join us as an Application Security Engineer! Requirements 2+ years of experience in Application Security, Product Security, or a related security role. Strong knowledge of web application security, OWASP Top 10, common attack techniques, and secure coding practices. Hands-on experience with threat modeling, security architecture reviews, vulnerability assessment, and penetration testing. Ability to review source code and identify security vulnerabilities. Experience with SAST, DAST, SCA, secrets scanning, and vulnerability-management tools. Understanding of CI/CD pipelines and experience integrating security checks into the SDLC. Knowledge of API security, authentication, authorization, and common security protocols. Familiarity with cloud, container, or Kubernetes security. Basic knowledge of Web3 and smart contract security. Basic scripting or programming skills, preferably in Python or another relevant language. Ability to clearly communicate security risks and remediation guidance to technical and non-technical stakeholders. Responsibilities Perform application security assessments, source-code reviews, and penetration testing. Participate in threat modeling and security architecture reviews for new and existing products. Triage Bug Bounty submissions: validate and reproduce vulnerabilities, assess their severity and business impact, identify duplicates and false positives, communicate with researchers, and coordinate remediation with engineering teams. Identify, prioritize, and track vulnerabilities throughout the remediation process. Provide developers with clear remediation guidance and secure coding recommendations. Support the integration and operation of SAST, DAST, SCA, secrets scanning, and other security tools within CI/CD pipelines. Participate in defining and reviewing security requirements throughout the software development lifecycle. Validate security-tool findings and help reduce false positives. Support investigations and remediation of application-related security incidents. Contribute to application security standards, guidelines, and reusable security controls. Help deliver security training and promote secure development practices across engineering teams. Collaborate with developers, DevOps, QA, product teams, and other security specialists. Monitor emerging application security threats and contribute to improving AppSec processes. Ukrainian (Native) English (B1) Working terms Immerse yourself in Crypto & Web3: Master cutting-edge technologies and become an expert in the most innovative industry. Work with the Fintech of the Future: Develop your skills in digital finance and shape the global market. Take Your Professionalism to the Next Level: Gain unique experience and be part of global transformations. Drive Innovations: Influence the industry and contribute to groundbreaking solutions. Join a Strong Team: Collaborate with top experts worldwide and grow alongside the best. Work-Life Balance & Well-being: Modern equipment. Comfortable working conditions, and an inspiring environment to help you thrive. 24 calendar days of paid leave. Additional days off for national holidays. With us, you’ll dive into the world of unique blockchain technologies, reshape the crypto landscape, and become an innovator in your field. If you’re ready to take on challenges and join our dynamic team, apply now and start a new chapter in your career! Let’s Build the Future Together! WhiteBIT offers all candidates an equal opportunity to join the team. All hiring decisions are made without regard to race, national origin, gender identity or sexual orientation, age, religion, disability, medical condition, marital status, familial status, veteran status, or any other legally protected characteristic of an individual. Your privacy matters to us. You can learn more about how we handle your personal data with regard to your application in our Candidate Privacy Notice .

🔎 Maqsad: Kiberxavfsizlik sohasida professional jamoa shakllantirish hamda mas’uliyatli, intizomli va bilimga chanqoq shogirdlarni tayyorlash. Shogirdlik davomida nazariy bilimlar bilan birga amaliy ko‘nikmalar ham rivojlantiriladi.

Location: United Kingdom, Remote Workplace: remote Olo is a leading SaaS platform accelerating digital transformation in the restaurant industry, by helping customers deliver more personalised and profitable guest experiences. As a result, our digital ordering, payment, and guest engagement solutions enable brands to do more with less and make every guest feel like a regular.   Reporting to the Security Engineering Director, the Staff Security Engineer will act as technical lead of the Olo Security Blue Team and work on security defences that allow our systems to keep running while protecting the data of our clients and their customers.   Additionally, you will help in the identification and prioritisation of future project initiatives based on risk and execute cross-functional projects with a high degree of ownership and excellence, all while actively mentoring other team members and elevating the collective team’s capabilities and skill sets. If you are passionate about reducing risk while supporting innovation, we encourage you to apply!   You can work remotely from anywhere in the United Kingdom. How you’ll make an impact Guide and coach Olo’s Blue Team on Information Protection, Incident Detection and Response and Service Delivery. You will provide strategic and technical oversight to the team and the program. Technically lead a team of security engineers and analysts who hunt, detect, and respond to internal and external threats. Collaborate with customers and partners to strengthen their security posture. Drive ongoing optimisations by implementing new technologies, replacing technologies, addressing evolving threats, scaling practices and automating security activities. Ultimately you will keep team member and customers data safe by identifying and mitigating vulnerabilities and risks by providing actionable guidance to product teams. Information Protection Lead Olo’s Information Protection program including the selection, testing, implementation and maintenance of security tools and services, security awareness, service provider management and the ongoing testing of those controls. Oversee Vulnerability Management program including vulnerability assessments, risk scoring and vulnerability resolution. Oversee Threat Hunting program to detect and mitigate advanced threats. Manage non-event driven security reviews, including concept reviews, design reviews, patching, firewall rules and system configuration checks. Apply Web application and API security principles and techniques, such as zero trust, RBAC, authentication, authorization, auditing, rate limiting, challenges, etc., to protect our cloud-based services from unauthorized access and abuse. Incident Detection and Response Oversee Incident Detection and Response program including ownership of incident response processes, tools and services and the ongoing continuous improvement of those controls. Coordinate the detection and response to attacks through all incident phases. Ensure incident reports are accurate, detailed and relevant. Monitor, detect, and remediate misconfigurations and security risks across our cloud environments. Participate in a 24/7 on-call rotation. Security Services Oversee Security Services program including security support requests, risk assessments, vendor assessments, PCI and SOC audit support and service provider management. What We'll Expect from You 5+ years of Security Engineering, Security Operations or Security Architecture experience. CISSP, GCIH or similar certification preferred. Experience acting as technical lead to distributed teams consisting largely of remote engineers. Experience complying with PCI-DSS and other compliance and regulatory standards. Experience with attacker tactics, techniques and procedures. Knowledge of information technology, evolving threats, attack patterns, incident response and cyber security standards. Experience developing and leading incident response, remediation and mitigation activities, and providing status updates and reports. Experience analyzing security events to discern events that qualify as a legitimate security incident as opposed to non-incidents (ie. incident investigation, implementing countermeasures, and conducting incident response). Deep understanding of operating system, networking and application concepts. Experience hardening Windows, MacOS, Linux Containers and Kubernetes. Familiarity with AWS security best practices and Infrastructure-as-Code. Experience deploying and maintaining security technologies. (e.g. Access Proxies, API Gateway, Anti-Malware, Application Control, Cloud Security Posture, Data Leak Prevention, Data Mapping, Endpoint Detection & Response, Intrusion Detection System, File Integrity Monitoring, Firewalls, Mobile Device Management, Multi Factor Authentication, SIEM, Static Inspection, Vulnerability Assessment, Web Proxies, WAF and Zero Trust). Adept at working with internal Product & Engineering, Legal, People & Culture, Finance and GTM teams and external partners, auditors and customers. Ability to work during critical incidents or to support coverage requirements. About Olo Olo is a leading restaurant technology provider with ordering, payment, and guest engagement solutions that help brands increase orders, streamline operations, and improve the guest experience. Each day, Olo processes millions of orders on its open SaaS platform, gathering the right data from each touchpoint into a single source—so restaurants can better understand and better serve every guest on every channel, every time. Over 800 restaurant brands trust Olo and its network of more than 400 integration partners to innovate on behalf of the restaurant community, accelerating technology’s positive impact and creating a world where every restaurant guest feels like a regular. Learn more at olo.com. Applicant Privacy Notice (United Kingdom)

Location: Москва Требуется инженер по кибербезопасности. Обязанности * пилотирование, внедрение и администрирование СЗИ * обеспечение безопасности рабочих станций * автоматизация задач администрирования * участие в проведении технических аудитов КБ * реагирование на инциденты КБ, взаимодействие с SOC * управление уязвимостями  * харденинг систем, разработка стандартов КБ Требования * понимание основ и технологий кибербезопасности, знание основных стандартов в области КБ - ISO 27001, NIST 800-53, OWASP, лучших практик, модели MITRE * опыт защиты конечных устройств (Antivirus, EDR, MDM) * опыт внедрения и администрирования СЗИ (AntiVirus, NGFW, AntiDDOS, WAF, SIEM, PAM, MDM, DLP) * опыт разработки требований КБ к информационным системам * знание ОС Windows и Linux на уровне администратора * готовность разбираться и работать в новых инструментах и с новыми технологиями. Будет плюсом: * опыт работы с облаками, опыт программирования, опыт харденинга ОС и прикладного ПО, опыт проведения тестов на проникновение Условия * Инновационные, амбициозные проекты и задачи, которые развивают: всегда есть возможность прокачать свои навыки в работе и профессионально расти; * Среда для обмена знаниями – высокая экспертиза внутри команды; * Сплоченная команда, работающая над общими задачами и умеющая хорошо отдыхать; * Нашу культуру создают сами сотрудники – мы их слышим и помогаем создавать и поддерживать корпоративные комьюнити по интересам * Стабильная заработная плата и годовой бонус; * **Удаленный или гибридный формат работы.** Офис - Новослободская 16; * Более 400 образовательных программ СберУниверситета для профессионального и карьерного развития;  * Расширенный ДМС, льготное страхование для семьи и корпоративная пенсионная программа; * Гибкий дисконт по ипотечному кредиту, равный 1/3 ключевой ставки ЦБ; * Подписка Прайм с возможностью использования трёх близких; * Вознаграждение за рекомендацию друзей в команду Сбера.

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Reinforcement learning is how Claude learns to reason, write code, and act autonomously over long horizons. At frontier scale, an RL run is a large distributed system: training, sampling, and environment execution run concurrently across a large fleet of accelerators and hosts. As an engineer in RL Engineering, you'll work on keeping that system secure as it scales. This is a hands-on engineering role. You'll work in the RL codebase and the infrastructure underneath it, alongside the engineers and researchers who build and use it. The system is large and changes as fast as the research does, so security work here has to keep up with that pace without costing performance or velocity. We're hiring from two backgrounds: security engineers who want to work on large-scale ML systems, and ML systems or research engineers who want to work on security. Strong candidates have depth in one and real interest in the other. Key responsibilities Design, build, and operate security controls for RL training systems and the infrastructure they run on Work across the stack (orchestration, environments, training, inference) wherever the work is needed Review designs and code across the RL stack, find security problems, and fix them Build shared libraries and tooling that other RL engineers and researchers build on Build the observability needed to understand what these systems are doing Work with researchers and performance engineers to make sure security changes preserve training correctness and performance Write clear design documents for what you build Minimum qualifications Strong software engineering skills in Python and at least one systems language such as Rust, C++, or Go Experience designing, building, and operating large-scale distributed systems or security systems in production Strong understanding of security fundamentals Working knowledge of Linux, containers, and cloud infrastructure Experience debugging complex problems across many hosts and services Ability to reason about tradeoffs between security, performance, and reliability Strong written communication, including design documents Preferred qualifications Experience running ML training or inference infrastructure at scale Experience with infrastructure security, such as isolation, access control, networking, or identity Experience with container orchestration such as Kubernetes, and with sandboxed or virtualized code execution at scale Experience building observability for large fleets Experience supporting research teams or other fast-moving internal users Familiarity with reinforcement learning or large language model training workloads The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $405,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: USA (Remote); Canada (Remote) Workplace: Remote Mysten Labs’ mission is to advance the internet through step-function improvements in what technology makes possible. We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value. Our work spans on-chain finance and the emerging agent economy. Through Sui, Move, and our broader technology stack, we’re building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact. Mysten Labs is looking for a hands-on Security Engineer with strong application security fundamentals and a track record of finding and fixing real vulnerabilities. You’ll own bug bounty programs and external audits, secure our code and software supply chain, and build tooling that protects Mysten’s products and users across the Sui ecosystem. Responsibilities - Run Mysten's bug bounty programs: triage, severity, responses, internal escalations, fix validation, and the budget and payouts. Turn recurring report classes into automated checks. - Own audit engagements: scope and schedule external audits, act as the technical counterpart during the engagement, and track findings through remediation and fix validation. - Conduct code and design reviews of systems built by Mysten, its subsidiaries and partners (Rust, TypeScript, Move). Drive issues to conclusion, including investigation and incident response, and run variant analysis so each bug class is closed everywhere it occurs. - Own software supply chain security: dependency and CI/CD malware defenses, Endor Labs, the code security service (GitHub controls, merge bots), and the ongoing code security self-auditing service. Detect and respond to compromised packages, maintainers and build pipelines, and secure the provenance and signing of what Mysten ships. - Build and improve anti-scam and anti-abuse tooling for the Sui ecosystem: detect phishing sites, malicious dApps, drainer contracts and other threats that target Sui users, and work with wallet teams on mitigations. - Build security tooling: LLM-driven triage and review agents, and static and dynamic analysis (taint, call graphs, fuzzing) wired into CI and code review. Build in known-clean checks so people trust the results.   MINIMUM QUALIFICATIONS - Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience. - 3+ years of hands-on experience in security engineering, application security or product security, with a track record of finding real vulnerabilities (bug bounty reports, audit findings, CVEs or published research). - Strong Web2 security fundamentals: XSS, CSRF, SSRF, authorization flaws, injection, deserialization, software supply chain failures, cryptographic failures. - Proficiency in one or more of Rust, TypeScript, Python or Move, and experience reviewing and writing security-sensitive code. - Hands-on knowledge of software supply chain attack surface: package ecosystems (npm, crates.io http://crates.io, PyPI), CI/CD (GitHub Actions workflow injection, token exposure, unpinned actions), and build provenance. - Solid understanding of applied cryptography fundamentals and the common ways cryptographic systems are misused in practice. - Experience on either side of a bug bounty program or an audit engagement. - Strong written and verbal communication, including the ability to influence teams you have no formal authority over. - Interest in the web3 space is required.   PREFERRED QUALIFICATIONS - Smart contract or wallet security: Move, Solidity or Rust-based chains; Sui's object and capability model is a plus. - Static or dynamic program analysis: CodeQL, Semgrep, taint analysis, fuzzing, symbolic execution. - Experience building security tooling with LLM agents (Claude Code skills or comparable), and a clear sense of where models help and where deterministic tooling has to do the work. - Anti-phishing, anti-fraud or trust & safety experience: domain and content monitoring, crawling, classifiers, threat intelligence. - Knowledge of recent crypto incidents and the defect classes behind them: drainer kits, DeFi frontend compromises, package-registry compromises. - Notable bug bounty rankings, CVEs, publications or conference talks. Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information. Regarding the recent rash of technology job scams: Be aware that emails from genuine Mysten Labs group recruiters will always come from the @mystenlabs.com http://mystenlabs.com domain or related subdomains (e.g., mystenlabs.com/careers http://mystenlabs.com/careers). Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers http://www.mystenlabs.com/careers. To support an efficient and fair hiring process, we may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers. Our team is remote first and we are hiring across the world. Here at Mysten Labs, you’ll be joining a world-class team with tremendous growth potential as we bring the next billion users to web3. We raised a $300M Series B round from top Silicon Valley led venture funds like Jump Crypto, Andreessen Horowitz (a16z), Binance Labs, Redpoint, Lightspeed, Coinbase Ventures, Electric Capital, Standard Crypto, NFX, Slow Ventures, Scribble Ventures, Samsung Next, Lux Capital, among other investment firms and strategic partners. Come join us and build the future of web3!

Location: Anywhere in France Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. 🛡️ THE ROLE Most GRC roles are about keeping auditors happy. This one is about earning our members' trust: every day, they share their diagnoses, their claims and their care with us. You'll join Alan's security team to help run our compliance and risk work across ISO 27001, HDS and DORA, across a growing number of countries and regulators. We just earned our HDS certification, and there's much more to build, including how we govern AI across our products: assessing AI risks, setting the controls, and keeping up with the AI Act. You'll learn alongside experienced security engineers, with a dedicated coach from day one. You'll take on real ownership early, and your scope grows as we scale from 1M to many millions of members. And you'll learn how we work at Alan: teams own their risks and controls, we automate wherever we can, and we focus on real outcomes, not paperwork. 🚀 WHAT YOU'LL DO - Keep our certifications on track. You run the day-to-day of the ISO 27001 and HDS audit cycles: collecting evidence, preparing internal audits, and following up on corrective actions until they're closed. - Turn regulations into practical actions. With Legal and the DPO, you help translate requirements like DORA, HDS, and GDPR into clear tasks for the teams, and track that they get done. - Learn the health sector rules. You build your knowledge of health-specific frameworks (ANS, HDS) and help apply them to how we handle health data. - Contribute to risk management. You help build and update our risk mapping, including AI risks, and follow up on the treatment plans with the teams who own them. - Support the teams who own the controls. You keep the controls framework up to date, answer teams' questions, and help explain security clearly to every stakeholder, from engineers to managers. - Support incident governance. You help classify and document incidents, keep Business continuity and Disaster recovery plans up to date, and prepare inputs for DORA incident reports. - Automate what slows us down. You spot repetitive compliance tasks and automate them with scripts, tools or AI. 🏗️ WHAT YOU'LL HELP BUILD - One compliance backbone: A single control system for several regulators in several countries, so Alan can scale without rebuilding compliance each time. - An automated evidence engine: evidence collected straight from engineering systems with scripts and AI, so audits run continuously instead of as a quarterly rush. You'll work closely with Legal, the DPO, Internal Audit and Risk, and day to day with engineering and operations teams. ⭐ WHAT WE'RE LOOKING FOR - You want to do the work yourself and grow with it: a permanent, hands-on role where you build things for the long run. - 2+ years in security, GRC or compliance (an audit background is fine if you want to move into building). - You've played a key part in a certification or audit cycle (ISO 27001, HDS, SOC 2 or similar). - You're curious about how things work technically, and you've automated at least one manual task (a script, a tool, an AI workflow). - You're fluent in French and English, and comfortable presenting in both. - You learn fast, ask for feedback, and go into the details when it matters. 🌍 HOW WE WORK Location: You must be legally eligible to work from France, Belgium or Spain. Remote work: We offer remote work flexibility. Contract type: Permanent contract only (no freelancing). 🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. 🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info. YOU WANT TO KNOW MORE ABOUT ALAN? 🙌 Perks & Benefits https://alan.com/en/careers/a/salary-equity: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. 🤘A strong culture https://alan.com/en/about/a/leadership-principles: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work

Location: Hamburg adjoe builds the technologies behind mobile apps growth and monetization. With our core product Playtime Arcade, we’ve become the global leader in rewarded advertising, an ad unit built on a simple premise: users earn real in-app rewards for engaging with new apps. The result is one of the most effective value exchanges in adtech, connecting advertisers and publishers with over 770 million users annually. Ensuring Authenticity for Billions of Daily Rewards Industry reports suggest 25 percent of global mobile ad spend is lost to fraudulent activities like click farms, fake installs, SDK spoofing, and emulator farms. At adjoe, we define our platform through trust and proactive engineering. We build high-performance defenses that guarantee accurate reward attribution, ensuring every interaction is authentic. This creates a sustainable value exchange that empowers our partners to grow with confidence. The Anti-Fraud team develops systems that detect and prevent malicious activity at scale. Our custom Android and iOS SDKs analyze device integrity for modifications like Xposed frameworks, Magisk modules, and jailbroken devices. Supporting these, Go microservices and DynamoDB deliver millisecond-level responses, while Kafka and SQS process billions of daily events in real time. This infrastructure protects publisher margins and ensures a trustworthy platform for all users. YOUR MISSION & WHO WE ARE LOOKING FOR: - AdTech Domain & Anti-Fraud Core Requirement You bring a solid foundation in the AdTech ecosystem (publishers, advertisers, SDK attribution, monetization) and direct exposure to cheating in mobile games. Joining our Anti-Fraud Operations unit, you will act as the primary technical PoC for Support, Sales, and BI teams, owning complex fraud escalations and translating business edge cases into technical fixes. - Investigative Mindset & Root-Cause Analysis You possess eagle-eyed curiosity and an investigative, hacker mindset. When publisher margins drop, external platforms (iOS/Android) shift, or campaigns misbehave, you won't wait for step-by-step instructions—you will connect messy clues, reproduce exploit scenarios, and trace non-obvious fraud patterns to their source. - AI-Empowered Big Data Interrogation You will leverage AI tools alongside Trino SQL, ScyllaDB, and DynamoDB to rapidly query and analyze billions of daily telemetry events. You will direct AI to accelerate complex data analyses, build models, and surface bad actors in real time without getting bogged down in manual query assembly. - Observability, Profiling & Microservice Debugging You will monitor platform health and debug system anomalies using Kibana, Grafana, and Go profiling tools like Pyroscope and pprof. You will trace real-time pipeline bottlenecks and API glitches across Kafka, SQS, and Go microservices to catch bugs or platform misconfigurations. - Cross-Functional Fraud Mitigation & Pragmatic Engineering You bring a functional software development background in backend engineering (preferably Go) alongside experience with AWS cloud infrastructure, allowing you to comfortably navigate backend code logic. Collaborating with Backend, Mobile, and Data Science teams, you will use AI to draft clean code fixes, propose new detection rules, and take full responsibility for deploying verified mitigations that protect publisher margins. 🌎 WE WELCOME APPLICATIONS FROM TALENT WORLDWIDE AND PROVIDE RELOCATION SUPPORT TO HAMBURG, GERMANY FOR THOSE READY TO JOIN OUR TEAM. What’s in It for You? At adjoe, you’re not here to just close JIRA tickets, you’re helping build the infrastructure behind one of the most impactful platforms in adtech. The systems you work on will reach hundreds of millions of users and power billions of decisions every day. - Go Big. Own projects with impact on 770M users and push adtech boundaries. - Move Fast. Ship solutions multiple times a day, learn from results, and keep momentum. - Be Direct. Solve problems openly and collaborate across teams. - Thrive Together. Grow with a diverse, global team of people from over 40 different countries that learn from each other. - Have Fun. Celebrate wins, enjoy daily victories, and bring your energy. We welcome applications from people who will contribute to the diversity of our company.

Location: Remote We are the creators of a new fintech era! Our mission is to change this world by making blockchain accessible to everyone in everyday life. WhiteBIT is a global team of over 1,200 professionals united by one mission — to shape the new world order in the Web3 era. Each of our employees is fully engaged in this transformative journey. We work on our blockchain platform, providing maximum transparency and security for more than 8 million users worldwide. Our breakthrough solutions, incredible speed of adaptation to market challenges, and technological superiority are the strengths that take us beyond ordinary companies. Our official partners include the National Football Team of Ukraine, FC Barcelona, Lifecell, FACEIT and VISA. The future of Web3 starts with you: Requirements 4–6+ years of experience in Information Security, GRC, Risk Management, Compliance, IT Audit, or a related field. Strong practical knowledge of information security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, CCSS or similar. Experience working with applicable regulatory requirements such as NIS2, DORA, GDPR, or other relevant regulations. Hands-on experience conducting information security risk assessments, control assessments, gap analyses, and compliance reviews. Experience supporting or coordinating internal and external audits, certifications, and regulatory assessments. Ability to independently manage compliance initiatives, track remediation activities, and follow up with control owners. Experience developing, reviewing, and maintaining security policies, standards, procedures, controls, and related documentation. Understanding of common information security domains, including access management, vulnerability management, incident management, third-party risk, business continuity, cloud security, and data protection. Experience working with third-party/vendor risk assessments and security due diligence. Experience responding to customer security questionnaires, RFIs/RFPs, or customer compliance requests. Ability to translate regulatory, contractual, and security requirements into clear and actionable controls for technical and business teams. Strong stakeholder management skills and experience collaborating with Security, IT, Engineering, Legal, Privacy, Procurement, and business teams. Strong analytical skills and ability to identify, assess, document, and communicate security and compliance risks. Excellent written and verbal communication skills, including the ability to explain GRC topics to both technical and non-technical stakeholders. Strong organizational skills and ability to manage several compliance, risk, and audit activities in parallel. Ability to work independently, prioritize effectively, and take ownership of GRC activities from identification through remediation and closure. Professional working proficiency in English. Nice to have: Experience in SaaS, cloud-based, technology, or other highly regulated environments. Experience with GRC platforms or compliance automation tools such as ServiceNow GRC, OneTrust, Vanta, Drata, AuditBoard, or similar. Familiarity with cloud platforms such as AWS, Azure, or GCP from a governance and compliance perspective. Relevant professional certifications such as CISA, CISM, CRISC, CISSP, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor. Experience participating in or leading compliance improvement and control maturity initiatives. Responsibilities Own and coordinate day-to-day GRC activities across information security, risk management, compliance, and assurance. Conduct information security risk assessments, identify control gaps, document risks, and track remediation actions with relevant owners. Support the implementation, maintenance, and continuous improvement of security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, and other applicable standards. Monitor relevant regulatory and contractual requirements and help translate them into practical security controls and compliance activities. Coordinate and support internal and external audits, certification activities, customer assessments, and regulatory reviews. Maintain and improve security policies, standards, procedures, control documentation, risk registers, and other GRC documentation. Perform control assessments and periodically evaluate the effectiveness of implemented security controls. Track audit findings, compliance gaps, risks, and remediation plans through to closure. Support third-party and vendor security risk assessments, including due diligence and ongoing risk reviews. Manage and respond to customer security questionnaires, security reviews, and compliance-related requests in collaboration with relevant teams. Partner with Security, IT, Engineering, Legal, Privacy, Procurement, and business stakeholders to ensure security and compliance requirements are understood and implemented. Provide guidance to control owners on compliance requirements, risk treatment, evidence collection, and remediation activities. Identify opportunities to improve and automate GRC processes, evidence collection, reporting, and compliance monitoring. Develop and maintain GRC metrics, dashboards, and reporting to provide visibility into risks, compliance status, audit findings, and remediation progress. Support security awareness and compliance initiatives where relevant. Stay informed about changes in security standards, regulations, and industry practices and assess their potential impact on the organization. Working terms Immerse yourself in Crypto & Web3: Master cutting-edge technologies and become an expert in the most innovative industry. Work with the Fintech of the Future: Develop your skills in digital finance and shape the global market. Take Your Professionalism to the Next Level: Gain unique experience and be part of global transformations. Drive Innovations: Influence the industry and contribute to groundbreaking solutions. Join a Strong Team: Collaborate with top experts worldwide and grow alongside the best. Work-Life Balance & Well-being: Modern equipment. Comfortable working conditions, and an inspiring environment to help you thrive. 24 calendar days of paid leave. Additional days off for national holidays. With us, you’ll dive into the world of unique blockchain technologies, reshape the crypto landscape, and become an innovator in your field. If you’re ready to take on challenges and join our dynamic team, apply now and start a new chapter in your career! Let’s Build the Future Together! WhiteBIT offers all candidates an equal opportunity to join the team. All hiring decisions are made without regard to race, national origin, gender identity or sexual orientation, age, religion, disability, medical condition, marital status, familial status, veteran status, or any other legally protected characteristic of an individual. Your privacy matters to us. You can learn more about how we handle your personal data with regard to your application in our Candidate Privacy Notice .

Location: Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is seeking an experienced Deputy SOC Manager for its Security Operations Center (SOC). This role is a technical-leaning leadership position that owns the SOC's capability: the strategy and standards the regions run to, the technology the SOC runs on, and how the SOC gets better over time. This role reports to the SOC Manager, under the Detection and Response function within the CISO Office. You are welcome to work in our offices in Tel Aviv, Israel. Your responsibilities will include: Help define the SOC's strategy and roadmap with the SOC Manager, and turn it into priorities the regions can execute. Use operational metrics across regions to find where the SOC is weak and drive the improvements that fix it. Work with the Regional SOC Managers on resource allocation and consistency across regions, so each region runs to the same standard. Own SOC processes and runbook governance, keeping procedures current, consistent, and followed. Apply AI and automation to cyber defense, making the SOC faster and its analysts more effective, with judgment about where it belongs. Mentor the Regional SOC Managers and senior analysts as a peer and sounding board, developing the SOC's next layer of leadership. Own how the SOC handles high-severity incidents: the escalation criteria, the coordination process, and the post-incident review, without running individual incidents. Support hiring and onboarding, participating in interviews and shaping the analyst ramp-up. Share the SOC Manager's accountability for the SOC's performance, stepping in across all of its responsibilities when needed. We expect you to have: 8-10 years in security operations, including at least 2 years managing people. Technical Expertise Solid understanding of SOC tooling and workflows (EDR, SIEM, SOAR) at the depth needed to lead analysts and challenge investigations. Working knowledge of investigation methodology and the incident lifecycle. Understanding of attacker TTPs (MITRE ATT&CK) sufficient to assess investigation quality. Familiarity with cloud and cloud-native environments as they relate to SOC coverage. Certifications such as GCIH, GSOM, or CISM are an advantage. Leadership & Communication Builds trust across teams, leading the SOC from transparency and consistency rather than authority. Calm during high-severity incidents, with the judgment to keep the team on the right priorities. Genuine investment in people, developing managers and analysts while holding a fair, high bar. Fluent in English, written and verbal, comfortable working with international teams and stakeholders Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: United States At Reltio®, an SAP Company, we believe data should fuel your success in the enterprise AI era. Our  Context Intelligence Platform turns fragmented data into a trusted, connected context so AI agents and systems can act with expert-level judgement at enterprise scale. Reltio’s cloud-native SaaS platform harmonizes, unifies, and governs data across sources and formats—including unstructured data—in real time, turning them into data assets that can be mobilized in milliseconds to any application, user, or AI agent. Trusted by more than 200 of the world’s largest brands across industries such as life sciences, financial services, healthcare, and technology, we fuel frictionless operations and help enterprises accelerate  innovation and reduce risk. At Reltio, our values guide everything we do. With an unyielding commitment to prioritizing our “Customer First”, we strive to ensure their success. We embrace our differences and are “Better Together” as One Reltio. We are always looking to “Simplify and Share” our knowledge when we collaborate to remove obstacles for each other. We hold ourselves accountable for our actions and outcomes and strive for excellence. We “Own It”. Every day, we innovate and evolve, so that today is “Always Better Than Yesterday”. If you share and embody these values, we invite you to join our team at Reltio and contribute to our mission of excellence. Reltio has earned numerous awards and industry and analyst recognition for our technology, our culture and our people. Reltio was founded on a distributed workforce and offers flexible work arrangements to help our people manage their personal and professional lives. If you’re ready to work on unrivaled technology where your desire to be part of a collaborative team is met with a laser-focused mission to enable digital transformation with connected data, let’s talk! Job Summary: As a senior individual contributor on the Application Security team, the Staff Application Security Engineer will help to define and drive Reltio’s application and product security architecture across a distributed, cloud-native SaaS platform. This role helps in the technical direction for securing how Reltio designs, builds, and ships software—helps to define the strategy and roadmap for secure SDLC, shift-left automation, and the secure adoption of API-driven and AI/agentic technologies. The Staff Application Security Engineer will partner with the Engineering, DevOps, Product, and Release Management teams to embed security as a foundational part of software design and delivery. The successful candidate will set standards, mentor and uplevel other security and engineering staff, lead complex threat modeling and architecture reviews, and develop novel techniques to identify and stop application- and AI-layer attacks—protecting Reltio’s intellectual property and customer data globally. Job Duties and Responsibilities: Security Architecture & Technical Leadership Serve as the senior application security subject matter expert, providing guidance on industry best practices, secure design patterns, and defense-in-depth strategies for the product security architecture. Helps to define and drive the overall application/product security architecture, vision, strategy, and roadmap across Reltio’s platform and services. Influence engineering architecture and roadmap decisions without direct authority, driving risk-based consensus across teams. Mentor and uplevel application security engineers and development teams, raising the secure-coding maturity of the broader organization. Secure Development Lifecycle & Shift-Left Embed security throughout the SDLC, from design through deployment, and define secure coding standards and best practices adopted across teams. Drive shift-left initiatives by providing guidance, tooling, paved-road patterns, and remediation support that enable engineers to build securely from the outset. CI/CD Pipeline Security Design and implement security controls within CI/CD pipelines, enabling automated security testing and vulnerability detection at scale. Operationalize SAST, SCA, DAST, and secrets scanning as policy-driven, low-friction gates; partner with release management on secure deployment checks and policy compliance. Threat Modeling & Risk Assessment Lead threat modeling sessions for complex, high-impact systems to identify and mitigate security risks early in design and architecture phases. Perform technical risk assessments of new technology and ensure solutions meet secure architecture designs; assess, measure, and clearly communicate risk impact to stakeholders. Vulnerability Management Analyze and validate remediation of application security findings from SAST, SCA, DAST, API testing, penetration tests, and manual assessments. Drive risk-based prioritization of fixes, reduce false positives, and provide clear, actionable remediation guidance with proper pre-release validation. API Security Partner with engineering to ensure secure API design and implementation; identify and mitigate authentication/authorization issues, data exposure, rate-limiting gaps, and OWASP API Top 10 risks. AI & Agentic Security (Guardrails, MCP, LLM) Helps to define AI security guardrails for Reltio’s AI and multi-agent platforms, addressing prompt/output validation, insecure model usage, data leakage, and tenant-isolation concerns. Establish security standards for Model Context Protocol (MCP) servers and tools—covering tool authorization, scoping, and abuse prevention—and lead threat modeling of agentic workflows (autonomous tool use, indirect prompt injection, excessive agency). Develop new and novel defense techniques to detect and stop advanced application- and AI-layer adversary tactics, and evaluate AI-assisted security tooling to scale detection and remediation. Penetration Testing & Security Validation Perform and oversee application, API, and AI/agent penetration testing; build and curate test payloads (including prompt-injection and guardrail bypass suites) and validate control effectiveness. Training, Collaboration & Continuous Improvement Deliver secure-coding, API, and AI-security guidance and hands-on support during code and design reviews. Partner with DevOps, QA, Engineering, Product, and Release Management to integrate security requirements throughout development and release. Stay current on emerging application, API, and AI/agentic security threats and continuously improve security processes, tooling, and overall posture. Investigate security events and incidents leveraging security tooling, and support customer-facing security communications as needed. Skills You Must Have: 8+ years of experience in application security or software development, including significant time in a cloud-native or SaaS environment. Demonstrated technical leadership as a senior individual contributor: setting standards, driving cross-team initiatives, and influencing architecture without direct authority. Hands-on experience with secure coding practices and modern application development; proficiency leading secure code reviews. Strong understanding of cloud well-architected frameworks, application development, and deployment workflows. Strong understanding of application security vulnerabilities (OWASP Top 10) and prevention strategies. Strong understanding of API security principles and the OWASP API Top 10. Experience integrating security into CI/CD and release management processes (e.g., Jenkins, ArgoCD, or similar). Experience with application security testing methodologies—SAST, SCA, and DAST—integrated into CI/CD pipelines. Experience with AI security concepts, including guardrails, prompt and output validation, data protection, and MCP security. Hands-on experience with web technologies such as Java, Java Spring Boot, JavaScript, Node.js, C#, modern UI frameworks, microservices, and cloud-native/serverless architectures. Experience with AWS, GCP, and/or Azure, and securing containerized environments and Kubernetes. Hands-on experience with Burp Suite Pro for web and API testing. Experience with modern application security platforms, with Wiz preferred (other AppSec tools acceptable). Strong communication and presentation skills, with the ability to educate, collaborate, and drive risk-based consensus. Self-starter with a history of driving technical initiatives; adaptable, agile, and effective in global, distributed teams. Skills That Are Nice to Have: Hands-on experience securing LLM applications and multi-agent systems, including agentic guardrail frameworks (e.g., NeMo Guardrails, AWS Bedrock Guardrails) and MCP gateway/tool security. Experience building or operationalizing AppSec automation/orchestration (SAST/SCA/secrets + AI analysis) and defect-management integration (e.g., DefectDojo). Experience with commercial AppSec/SCA platforms such as Wiz Code, Veracode, Checkmarx, Cycode, or SonarQube. Experience developing and operationalizing a vulnerability management or product security program at scale. Experience with industry frameworks such as SOC 2, HITRUST, or ISO 27001, and supporting audit/customer-assurance processes. Applying ML/AI techniques to enhance security detection, anomaly identification, and automated risk prioritization. Relevant security and cloud certifications. At Reltio, we carefully consider a wide range of compensation factors to determine your personal top of market. We rely on market indicators to determine compensation and your specific job family, background, skills, and experience to get it right. These considerations can cause your compensation to vary and will also be dependent on your location. Overall Market Range $145,000 — $207,000 USD Reltio is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Reltio is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.

- Обеспечение информационной безопасности информационных систем, сервисов и цифровой инфраструктуры Университета. - Мониторинг событий информационной безопасности и выявление потенциальных угроз и инцидентов.

Location: Москва Требуется сотрудник в направление аудита фокусных компаний группы «Сбер» центра кибербезопасности группы. Обязанности ### Вам предстоит: * проведение комплексных аудитов (оценка процессов и технических контролей) ИТ и КБ в компаниях группы * разработка отчетов с рекомендациями по результатам аудитов для проверяемых компаний и руководства блока * разработка, согласование и контроль исполнения планов мероприятий по результатам аудита * участие в разработке и развитии методологии управления кибербезопасностью группы (дочерних и зависимых обществ банка) * консультирование работников банка / подразделений кибербезопасности ДЗО по вопросам кибербезопасности, процедурам аудита и т.д. * проведение обучающих сессий для компаний группы в части кибербезопасности * проведение выездных технических аудитов КБ по поручению руководства. Требования ### Что для нас важно: * высшее образование по специальности «Информационная безопасность» или «Информационные технологии» * знание российских и международных стандартов в области КБ (ISO 27001, NIST, CIS, 152-ФЗ, 187-ФЗ, приказы ФСТЭК и ФСБ и т д.) * навыки проведения технического аудита по КБ * знание методов защиты сетей и сетевых протоколов (OSI, стек TCP/IP) * знание основных принципов и методов атак на информационные системы, понимание способов защиты * глубокие знания основных угроз для веб-приложений и способов защиты * глубокие знания в части защиты конечных устройств семейства Windows и \*nix * практические навыки формирования отчетных материалов и разработки организационно-распределительных документов * знание и опыт построения основных процессов КБ (управления инцидентами, управление уязвимостями, управления изменениями и т.д.) * широкий кругозор в ИТ и КБ с углубленной экспертизой в нескольких областях * опыт работы от 5 лет в области КБ или ИТ * инструментальное владение AI для анализа, генерации и автоматизации. Условия ### Мы предлагаем: * комфортный современный офис * офисный формат работы * ежегодный пересмотр зарплаты, годовая премия * корпоративный спортзал и зоны отдыха * более 400 образовательных программ СберУниверситета для профессионального и карьерного развития * программа адаптации и помощь руководителя на старте * расширенный ДМС, льготное страхование для семьи и корпоративная пенсионная программа * гибкий дисконт по ипотечному кредиту, равный 1/3 ключевой ставки ЦБ * подписка Прайм с возможностью совместного использования на трёх близких * вознаграждение за рекомендацию друзей в команду Сбера.

Location: Remote - Colombia ; Remote - Costa Rica ; Remote - Mexico About Backblaze Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $136M ARR and is the leading specialized storage cloud, managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We’re seeking a Red Team Security Engineer to join our team! About the Role The Red Team Security Engineer continuously validates whether vulnerabilities, configurations, identities, applications, infrastructure, and AI-enabled systems can be exploited by realistic adversaries. The role combines traditional offensive security with AI-assisted and agentic adversary emulation to validate exposure and continuously improve defensive controls. Key Responsibilities Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents. Validate whether vulnerabilities and configuration weaknesses identified are reachable and practically exploitable. Develop and execute realistic attack paths across web applications, APIs, cloud infrastructure, identity systems, endpoints, and other enterprise services. Use AI-assisted and agentic techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled offensive testing. Test AI applications and agents for prompt injection, tool abuse, excessive privilege, identity compromise, and other emerging attack classes. Validate compensating controls and mitigations before or after deployment. Conduct purple-team exercises with Security Analytics and Security Operations to validate telemetry, detection, and response effectiveness. Translate offensive findings into actionable improvements to architecture, configuration, detections, and response capabilities. Qualifications Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering. Strong web, API, cloud, identity, operating-system, and network security fundamentals. Experience validating practical exploitability and developing realistic attack paths. Strong understanding of MITRE ATT&CK and modern adversary techniques. Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, and MITRE ATLAS. Scripting or software-development experience. Experience safely using automation or AI-assisted techniques in offensive-security workflows. Experience assessing cloud-native or AI-enabled systems, conducting purple-team exercises, or simulating autonomous adversaries is preferred. At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here. At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer. To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.

Задачи: — Сбор и анализ информации о физических и юридических лицах из открытых источников; — Выявление рисков и оценка достоверности данных; — Подготовка аналитических отчетов; — Участие в расследовании инцидентов по линии безопасности; — Контроль за соблюдением комплаенса. Требования: — Опыт работы от 2 лет (OSINT / безопасность); — Опыт в сфере iGaming будет преимуществом.

Own our detection coverage across Defender XDR, Entra ID, Sentinel, Microsoft Graph, Azure, and Microsoft 365 — from raw signal through to shipped, tuned detections. Build and maintain a living map of Microsoft security signal: what exists, known ingestion lag, where it lands, what gates it, how long it's kept, and how far you can trust it.

Location: Poland; Brazil; Peru; Sweden; Argentina; Romania; Cyprus; Czech Republic; Hungary; Mexico; Chile; Bulgaria Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM xStocks brings real-world assets on-chain as tokenized securities that are regulated, fully-backed, and tradable across multiple blockchains. Built within Payward, the xStocks team runs the infrastructure that issues, custodies, and settles these instruments across EVM, Solana, TON, Tron, and more. The platform moves real value, so security is not a feature bolted on at the end. It is a property of everything the team ships. This is a hybrid engineering and security seat built for someone who is genuinely both: you ship products alongside the engineering team when the security queue is quiet, and you own security work end to end when it lands. You report into engineering and partner closely with the Payward security, CISO, and compliance functions. THE OPPORTUNITY - Own security deliverables end to end. Coordinate and review smart-contract audits, respond to security questionnaires and due-diligence requests, support CISO and compliance initiatives, and turn findings into tracked, closed-out fixes. - Run offensive assessments against our own platforms. Pentest the web apps, APIs, backend services, and on-chain components, and build the tooling to do it repeatedly rather than once. - Continuously assess posture. Threat-model new and existing systems, review architecture and key-management flows, and maintain a living view of the risks and their mitigations. - Review code for security. Be a default reviewer on changes touching auth, cryptography, custody, signing, and fund movement across our chains. - Harden the platform. Improve secrets handling, IAM and least-privilege, dependency and supply-chain hygiene, and detection and logging for security-relevant events. - Secure custody and signing workflows. Review and harden transaction signing flows, MPC and HSM integrations, signer permissions, admin roles, approval policies, and break-glass procedures. - Contribute to product engineering. Pick up regular backlog work in TypeScript so you stay close to the codebase you are defending. - Support incidents. Help with detection, triage, response, and post-mortems, and feed the lessons back into the program. WHAT YOU BRING - An engineer first. You write and review production code comfortably, TypeScript and Node.js in our stack, and you understand systems deeply enough to break them. - Strong application and infrastructure security fundamentals. The OWASP-class vulnerability landscape, authn and authz, injection, SSRF, supply-chain risk, and secure design. You have done real offensive work in pentesting, vuln research, or red-team. - Applied cryptography and blockchain security. Symmetric and asymmetric primitives, hashing, signatures, and key management, plus the security model of EVM, Solana, and ideally TON or Tron. You can read a smart contract and reason about how it fails. - Ownership. You can take an ambiguous security item, an audit, a questionnaire, or an incident, and drive it to closure without being managed through it. - Clear communication. You can explain a risk to engineers, to a CISO, and to an auditor, and tailor the message to each. - An automation instinct. You do not want to catch the same issue manually twice, so you turn findings into tests, alerts, controls, documentation, or platform improvements. - Risk judgment. You can tell a theoretical issue from a material one, and communicate severity, likelihood, impact, and remediation tradeoffs clearly. NICE TO HAVE - Experience commissioning or remediating third-party smart-contract audits. - Familiarity with custody and signing infrastructure such as HSMs, MPC, and ForDefi-style providers, and with on-chain transaction security. - Cloud security depth in GCP or AWS, IAM, and container and runtime hardening. - Detection engineering and security observability, including SIEM and log-based detections. - Relevant certifications such as OSCP, OSWE, or GWAPT. - Prior work in a regulated fintech or tokenization/DeFi environment. Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on X https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Анализ кода и поведения вредоносных программ под Windows и Linux, реверс‑инжиниринг; Отслеживание актуальных угроз, кампаний и техник атакующих (публичные отчёты, threat intelligence, свежие образцы);