Вакансии

Location: Prague Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work. Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you. Our vision: A world where everyone is free to focus on their most purposeful work, together. About the Role: You'll work alongside diverse, cross-border teams and supportive colleagues who share knowledge and want to see you succeed. Salesforce, Marketo, Salesloft, and a growing web of integrated SaaS tools run large parts of Wrike's business. As that footprint grows, we're hiring a dedicated analyst to bring stronger visibility, governance, and risk understanding to this business systems estate — partnering closely with the teams who own and use these tools. Your Impact: Own security for Wrike's business systems SaaS tools such as Salesforce, Marketo, Salesloft, and the integrations that connect them, covering permissions, sharing rules, connected apps, OAuth scopes, and integrations. Build and maintain clear visibility into what data lives in these systems, why it's there, and how it flows between integrated tools. Partner with RevOps, Marketing, Legal and others to embed security into how these platforms are configured, extended, and connected to third-party services. Translate security and business-continuity issues into clear, actionable terms for non-technical stakeholders. Ensure business systems handling personal data hold up against privacy frameworks including GDPR and CCPA, in close collaboration with Legal and Compliance. Chase data-flow and permission questions to ground truth which means following through until the answer and its implications are genuinely clear. Your Qualifications: Your primary expertise is in Salesforce administration and business systems security. Everything else listed here is context you'll operate in. Depth in the primary domain matters more than breadth across all of them. Salesforce administration experience with a strong security lens. This means permissions, sharing rules, connected apps, and integration patterns. Solid understanding of how business systems interconnect and why that matters for data exposure and business continuity. Able to communicate issues precisely to both technical and non-technical audiences. Working knowledge of privacy frameworks such as GDPR and CCPA at minimum. You don't need to tick every box! We're looking for depth in business systems security and the drive to grow across the rest. Standout Qualities: Certified Salesforce Administrator credential. Security+, ISC2 CC, or an equivalent security certification. Experience auditing or governing SaaS-to-SaaS integrations Exposure to data security posture management (DSPM) or data classification in SaaS environments. You use AI as a force multiplier — to move faster, think wider, and go deeper — but your security instincts and judgement are your own. You don't outsource thinking to a tool. Demonstrated tenacity in chasing complex data flows and access permissions across multi-tool integrations to a definitive answer. Team Dynamics: You will be joining Wrike's 15-member global Security team led by Maksim Pekuryn, Director of Security. You will report directly to Swen Groeneveld, Head of Security Operations, whose 8-person sub-team includes Security Engineers, Application Security, and SOC specialists. You'll also work closely with cross-functional partners in RevOps, Marketing, and Legal. Our Work Style: Tech stack: Salesforce, Marketo, Salesloft, OAuth integrations, connected apps, and related business SaaS tooling. Collaborative environment working closely with RevOps, Legal, and Marketing teams. Hybrid mode. Benefits & Perks: 5 Weeks of paid vacation Sick Leave Compensation 5 Paid Uncertified Sick Days 2 weeks fully paid w/ medical certificate, additional 4 weeks paid at 80% salary rate Parental Leave (fully paid): 18 Weeks Maternity / 4 Week Paternity 2 Volunteer Days Meal Vouchers (CZK 220 per working day) Annual Prague Travel Card (Lítačka) Hybrid Working Model Benefit budget with flexible options, including a MultiSport card, Canadian Medical membership, contributions to a pension savings plan and additional choices available through Benefit Plus What's Next? Recruiter Screen (30 mins) Department Interview / Technical Discussion (60 mins) Cultural Interview with Hiring Manager, CISO, and HRBP Your recruitment buddy will be Aleksandar Chernev , Senior Technical Recruiter. #LI-AC1 Who Is Wrike and Our Culture We’re a team of innovators and creators who solve the complex work problems of today and tomorrow. Hybrid work mode Wrike is our people, not a place. With 1,000+ employees collaborating across nearly every time zone, we support talent through 10 global hubs — Australia, Costa Rica, Cyprus, Czechia, Estonia, France, India, Ireland, Japan, and the United States — offering flexible ways of working that include remote work, hybrid environments, and co-working spaces across many locations. While flexibility looks different across teams and regions, employees located near certain hubs — particularly in Prague (CZ), Nicosia (CY), Bangalore (IN), and Rennes (FR) — are generally expected to collaborate in person around 2–3 days per week, balancing the flexibility of distributed work with opportunities for in-person collaboration and connection. Our persona 💡  Smart: We love what we do, and we’re great at it because this is our domain. Our combined knowledge in this space is unmatched. 💚  Dedicated: We get up every day focused on helping our customers win. We’re committed to helping our teammates win, too! 🤗  Approachable: We're friendly, easy to get along with, considerate, and helpful. Our culture and Values 🤩 Customer-Focused We care about our customers. We understand the customer journey, experience, and value derived from Wrike. Decision-making and action-taking are done with the customer in mind. 🤝 Collaborative We work as one and win together, each bringing unique strengths that contribute to diversity of thought for better outcomes. Leveraging our own work management platform, we foster an environment of creative collaboration and shared achievement. 🎨 Creative We strive to succeed through continuous innovation. It’s our pursuit of novel concepts that helped us create a market category. We continue to cultivate a workplace that fosters creative thinking as a means of transcending conventional boundaries and empowers us to break new ground to deliver extraordinary work management solutions. 💪 Committed We believe in ownership at all levels of the organization, by owning workflows from start to finish. Each member of our team is an integral part of this commitment, establishing work as a platform for personal growth and transformation, as well as collective success and growth. Check out our LinkedIn Life Page , Company culture page , Instagram , Wrike Engineering Team , Medium , Meetup.com , Youtube for a feel for what life is like at Wrike.

Location: Remote - US About Backblaze Backblaze is the object storage leader in the open cloud movement, fueling customersuccess with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. Backblaze is seeking a Senior Technical Program Manager. Role Overview: We are seeking a Sr. Technical Program Manager to join a growing Security team, with focus on program delivery, driving portfolio management and operating model practices for Backblaze. Key Responsibilities: Lead end-to-end planning and execution of enterprise security programs (e.g., vulnerability management, incident response readiness, identity and access management, data protection, cloud security) from initiation through delivery Communicate technical security concepts and program status clearly to both technical teams and non-technical stakeholders Develop and maintain detailed program plans, timelines, budgets, and resource allocation across multiple concurrent security initiatives Identify, track, and mitigate program risks and dependencies, escalating blockers to leadership with clear options and recommendations Drive cross-functional coordination between engineering, product, legal, and third-party vendors to ensure security controls are implemented on schedule Establish and report on program goals, dashboards, and status updates for executive and board-level audiences Manage the intake, prioritization, and tracking of security findings, vulnerabilities, and remediation efforts across teams Support incident response coordination, including post-incident reviews and follow-up action tracking Continuously improve program management processes, tooling, and governance frameworks specific to security operations Foster a culture of transparency and trust, apply lean value-driven approach, manage by influence, support and empower technical teams through servant leadership In partnership with other TPMs, participate in implementation of continuous cross-functional process improvement initiatives Qualifications: Required Experience & Technical Qualifications: Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience); Master's degree a plus 8+ years of technical program management experience, including 3+ years managing security-focused programs Strong understanding of security domains: vulnerability management, threat modeling, identity and access management, network security, cloud security, and incident response Familiarity with regulatory and compliance frameworks such as SOC 2, ISO 27001, NIST CSF, GDPR, HIPAA, or FedRAMP Relevant security certifications, such as: CISSP (Certified Information Systems Security Professional) CISM (Certified Information Security Manager) PMP (Project Management Professional) or PgMP (Program Management Professional) CRISC (Certified in Risk and Information Systems Control) CCSP (Certified Cloud Security Professional) Cloud security certifications (e.g., AWS Certified Security – Specialty, Microsoft Certified: Security Operations Analyst Associate) Other qualifications: Ability to adapt agile management principles to a variety of development environments Proven ability to manage multiple complex, cross-functional programs simultaneously in a fast-paced environment Excellent written and verbal communication skills, with the ability to translate technical risk into business impact for executive audiences Strong analytical and risk-assessment skills, with experience using program management and ticketing tools Demonstrated ability to build trust and influence without direct authority across engineering, legal, and executive teams High attention to detail, sound judgment under pressure, and comfort operating with ambiguity during active incidents Experience with Atlassian & Google product suites a plus Backblaze Perks: Healthcare for family, including dental and vision Competitive compensation and 401K RSU grants for full-time employees ESPP program Flexible vacation policy Maternity & paternity leave MacBook Pro to use for work, plus a generous stipend to personalize your workstation Childcare bonus (human children only) Fertility treatment and support Learning & development program Commuter benefits Culture that supports a healthy work-life balance At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here. To provide greater transparency to candidates, we share base pay ranges for all US- based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors, including candidate location, skills, depth of work experience, and relevant licenses/credentials, and may vary from the amounts listed below. The expected salary range for this role is $130,000 - $150,000. At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio- economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer. To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice

Задачи: - Вести проекты на Solana от архитектуры до деплоя - Создавать production-grade программы с приоритетом безопасности - Решать сложные архитектурные вопросы в новой экосистеме - Проводить независимые обсуждения дорожной карты с клиентами - Повышать стандарты команды через код-ревью и наставничество - Представлять OpenZeppelin в экосистеме Solana - Использовать ИИ как основной инструмент в работе по безопасности - Сотрудничать в межкомандных исследованиях и анализе угроз Требования: - Опыт разработки production Solana программ от 3 лет - Умение вести многоквартальные технические проекты - Глубокое знание SVM, включая модель аккаунтов, PDA и бюджетирование вычислений - Вклад в стандарты Solana (SIDs, SPL) - Опыт работы с foundation или protocol командами - Владение Anchor и низкоуровневым runtime программированием - Ориентация на безопасность с опытом аудита и укрепления кода - Использование ИИ-инструментов типа Claude Code, Cursor или аналогичных - Хорошие навыки английского языка Условия: null

Location: Remote, Canada; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Professional Services Technical Architect, Security at GitLab, you'll lead the design and implementation of secure enterprise solutions for Professional Services clients across AMER. You'll assess complex security architectures, guide security tool and CI/CD migrations, including legacy tools such as Jenkins, and implement GitLab security capabilities to help customers meet compliance frameworks such as NIST 800-53, ISO 27001, and SOC 2. This role requires depth in secure reference architecture design across cloud security, identity management, vulnerability management, and deployment choices such as GitLab SaaS and Self-Managed, as well as the judgment to translate that depth for engineering and executive audiences. Working closely with Professional Services Engineers, Engagement Managers, and Program Managers, you'll provide technical leadership throughout the Professional Services engagement lifecycle, from pre-sales security scoping through delivery and enablement. What you'll do Design and lead secure GitLab solution implementations for Professional Services client engagements, including security risk assessments and threat modeling. Advise customers on GitLab SaaS, Self-Managed, and Dedicated architecture choices in light of their security and compliance requirements. Lead technical discovery to understand customer security, compliance, and infrastructure needs, and use that insight to guide implementation plans and deliverables. Lead migrations from legacy source code management and continuous integration and continuous delivery (CI/CD) tooling, including application security tools such as Snyk, Checkmarx, Veracode, SonarQube, and GitGuardian, to GitLab CI/CD and GitLab security scanners. Support Professional Services Engagement Managers with security-related statements of work (SOWs), sales scoping, and pre-sales planning. Coordinate security implementation work across cross-functional teams and share customer needs with GitLab Product teams to inform security features and roadmap decisions. Mentor Professional Services and partner consultants, and create security-focused delivery kits, documentation, training materials, case studies, and enablement sessions. Partner with Training, Support, Customer Success, and Professional Services Program Managers to plan and deliver engagements. What you'll bring Technical expertise Experience delivering secure enterprise architectures across application security, cloud security, secure cloud infrastructure, and DevSecOps practices. Experience migrating source code management and continuous integration and continuous delivery (CI/CD) platforms with security controls. Experience advising on GitLab SaaS, Self-Managed, and Dedicated deployment tradeoffs for security and compliance needs. Hands-on experience with configuration management and infrastructure as code tooling, including Ansible and Terraform. Experience integrating security controls into CI/CD pipelines. Deep knowledge of GitLab security scanning capabilities, including Advanced Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Dependency Scanning, Secret Detection, and Container Scanning. Experience migrating application security tooling, including Snyk, Checkmarx, Veracode, SonarQube, and GitGuardian, to GitLab Security Scanners. Experience planning and executing security tool migrations, mapping findings between platforms, managing dismissed and accepted risk findings, and building migration validation frameworks. Security and compliance Knowledge of security frameworks and standards, including ISO 27001, NIST 800-53, SOC 2, GDPR, and FedRAMP. Understanding of current security threats, including supply chain security, generative artificial intelligence (AI) and large language model (LLM) security risks, and zero-trust architecture. Working knowledge of the OWASP Top 10 for LLM Applications and how these risks apply to AI-assisted development tools such as GitLab Duo. Ability to communicate technical concepts, tradeoffs, and recommendations to technical and non-technical stakeholders. Ability to work independently and collaboratively in an all-remote, asynchronous environment. Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $164,880 — $277,560 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: United States (Remote) Workplace: Remote ABOUT ONEPAY OnePay is the consumer fintech trusted by millions of Americans to make money better. Our financial system is broken. High fees, low rates, and too few ways to actually grow your money. We’re fixing it. And we’re moving fast. We’re an all-in-one financial services platform that brings together banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto in one place. We also partner with employers, HCM providers, gig platforms, and others to deliver embedded financial services to millions of employees and frontline workers. We’re backed by Walmart, the world’s largest retailer, and Ribbit Capital, one of fintech’s most respected investors, giving us rare scale, distribution, and the opportunity to build something truly category-defining. But what really sets OnePay apart is how we move. Our customers don’t have time to wait… and neither do we. This place moves fast, and we’re looking for people who are: - Ready to run - Hungry and driven by urgency - Exceptional at what they do, with low ego - Comfortable operating in motion THE ROLE As a Security and Threat Operations Engineer at OnePay, your work will have a direct impact on protecting our fast-moving fintech environment. You will turn production signals into actionable detection, response, and hardening initiatives, partnering closely with Product Security, Platform Security, and Engineering teams. Your efforts will enable us to proactively identify, monitor, and stop compromised behaviors across OnePay's products and infrastructure, ensuring the continued safety and trust of our business and customers. You will: - Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments. - Review traffic patterns across APIs, authentication flows, and WAF telemetry to identify malicious activity, abuse patterns, and anomalous behavior. - Use AI responsibly as a force multiplier for triage, analysis, and workflow automation, while helping define guardrails for AI-enabled systems. - Help operate OnePay's vulnerability management program by triaging, prioritizing, and driving remediation for findings from Wiz, vulnerability scanning, and related workflows. - Develop Python-based tooling and automation to improve investigations, enrichment, response, and operational scale. - Partner with Product Security to translate threat models, security reviews, and product risks into production detections and response playbooks. - Investigate security events end to end, including triage, scoping, containment support, and follow-through on remediation. - Support vulnerability management and operational security practices in ways that align with PCI and SOC 2 expectations. - Participate in proactive threat hunting, detection improvement, and a 24x7 security incident response on-call rotation. YOU BRING - 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response, ideally in a cloud-native or product-focused environment. - Strong experience investigating suspicious activity in web, API, authentication, and infrastructure telemetry, with the ability to distinguish attacker behavior from normal production noise. - Demonstrated ability to review traffic and event patterns for signs of malicious activity, fraud, account abuse, credential attacks, reconnaissance, and exploitation attempts. - Strong Python programming skills and the ability to write maintainable code for automation, enrichment, analysis, and security operations tooling. - Experience building and tuning detections in a SIEM or detection platform and working with observability and logging systems such as CloudWatch, Datadog, or similar platforms. - Experience operating or supporting a vulnerability management program, including triage, prioritization, remediation tracking, and stakeholder coordination. - Familiarity with cloud and application security findings from platforms such as Wiz, including CNAPP, runtime, code, and vulnerability scanning use cases. - Experience with at least one major cloud provider, preferably AWS. - Working knowledge of identity and access systems, modern authentication flows, and the security implications of internet-facing applications and APIs. - Strong understanding of threat modeling, risk prioritization, and practical security controls across applications, infrastructure, and cloud environments. - Practical experience using AI tools in security workflows, along with sound judgment about AI-specific risks such as prompt injection, data leakage, excessive tool access, and weak auditability. - Excellent analytical, communication, and cross-functional collaboration skills, especially in environments where security needs to move quickly with product and engineering teams. - Drive and proactivity - everyone here is a builder and executor TOOLS WE USE We use Node and TypeScript on the server, leveraging the NestJS framework within a microservice-oriented architecture running on Kubernetes and AWS. On the client side, we build and ship product features for iOS, Android, and web platforms using React Native. We also embrace AI-assisted development, so engineers have their choice of Claude Code or Cursor to fit their workflow. While you don't need experience with our exact stack, familiarity with modern software engineering practices will help you ramp up quickly. WHAT WE OFFER - Competitive base salary, stock options, and health benefits from Day 1 - 401(k) plan with company match - Remote-friendly (US), flexible time off (FTO), and opportunities for growth - A high-growth, mission-driven, inclusive culture where your work has real impact STANDARD INTERVIEW PROCESS Our process varies by role. Most candidates go through: - AI-assisted initial screen - Interview with Talent Partner - Technical or Hiring Manager Interview - Team Interview - Executive Interview - Offer! EQUAL EMPLOYMENT OPPORTUNITY To build technology and products that are used and loved by people and solve real-world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us at talent@onepay.com.

Location: New York, NY (HQ) Workplace: Hybrid ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. ABOUT THE ROLE Corporate Security at Ramp owns the security of our internal environment: the device fleet, the identity and access layer, and the AI tools employees use for their work. We are hiring a Systems Engineer to build and operate the controls across these systems. The role is hands-on, writing code and building agentic loops wherever possible rather than solving problems manually. You will help manage device configuration and patching via configuration-as-code, authentication and authenticator policies in Okta, network and gateway enforcement in Cloudflare, and the controls around our enterprise Claude and OpenAI deployments. These systems overlap heavily in practice, and the work is largely about integrating them and automating what would otherwise be manual administration. You will report to the Corporate Security lead and work closely with IT, Security Engineering, and AI DevX. WHAT YOU'LL DO - Maintain update policies for both OS and software, and monitor the fleet so that newly introduced applications are brought into the patching cadence - Build automation for endpoint security agent remediation across EDR, DLP, VPN, and similar tooling — detecting missing, stale, or unhealthy agents and bringing devices back into compliance - Maintain device configuration baselines as code, including drift detection and hardening standards - Configure authentication and authenticator policies in Okta: SSO, MFA and authenticator enrollment, device trust, and conditional access - Remediate identity posture gaps surfaced by ISPM tooling: stale accounts, orphaned service principals, over-scoped OAuth grants, MFA gaps, and excess privileges - Implement and operate controls for enterprise AI usage, including identity-aware access, logging and retention, DLP where appropriate, and enforcement - Automate across these platforms using their APIs, build reporting on control coverage, and document how the controls you build are operated WHAT YOU NEED - 3–5 years of experience in Client Platform Engineer/Endpoint Engineering, Identity Access & Management, or Corporate Security - Hands-on macOS management at scale: MDM (Jamf, Fleet, Kandji, or equivalent) and macOS update mechanisms - Working knowledge of an identity provider (Okta or similar): SSO, authentication and authenticator policies, SCIM provisioning, and conditional access - Scripting ability in Python, Go, or Bash, and experience automating against platform APIs - Experience with EDR and endpoint vulnerability management (CrowdStrike or similar) - Ability to evaluate tradeoffs between technical enforcement, policy, and user friction, and to explain those tradeoffs clearly NICE TO HAVE - osquery and Fleet, or other query-based fleet visibility tooling - Identity posture management (ISPM) tooling, or access review and governance platforms - Cloudflare Zero Trust, or other proxy, DNS, or network-layer enforcement, including TLS inspection - Exposure to AI and LLM security concerns: agent authorization, tool calls, model gateways, data leakage through AI tooling - Infrastructure-as-code and CI/CD experience (Terraform, GitHub Actions) - Windows fleet management alongside macOS - Compliance frameworks (SOC 2, PCI) as they apply to endpoints and access BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Bitmanager.ai — AI-стартап в категории conversational AI agents, создающий платформу для голосовых и текстовых AI-агентов в клиентских коммуникациях.

Location: Toronto; Calgary; Boston; Canada; Seattle; New York; Vancouver; California; Ottawa; Montreal Workplace: Remote WHO ARE WE? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! WHY THIS ROLE Enterprises hand Cohere their most sensitive data and put our models inside workflows they can't afford to get wrong. Securing that means working on problems the industry hasn't settled yet, what authorization means when an agent acts on a user's behalf, how to contain tools that consume untrusted input, and whether tenant boundaries hold when a model can be steered by the data it reads. The established playbooks only take you so far. We're hiring a Senior Product Security Engineer to work these problems alongside the engineers building the products, reviewing architecture and code, threat modeling before implementation, testing what ships, and turning what you learn into defaults other teams inherit. This is a hands-on engineering role, not an advisory one. WHAT YOU’LL DO - Lead security reviews. Review architecture, code, and security-sensitive changes. Identify both individual vulnerabilities and the recurring design patterns behind them. - Secure AI-powered products. Evaluate risks such as prompt injection, unsafe tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and sandbox escapes. - Threat model new capabilities. Identify trust boundaries, abuse cases, and high-impact failure modes before implementation. Translate findings into practical, prioritized mitigations. - Perform hands-on testing. Investigate suspected vulnerabilities, develop proofs of concept, assess exploitability and impact, and partner with engineers through remediation. - Build scalable guardrails. Develop secure defaults, approved patterns, reusable controls, review requirements, and automated checks that reduce recurring risks. - Strengthen engineering capability. Pair with engineers, document practical guidance, and help product teams develop durable security expertise. - Influence risk decisions. Explain technical findings, business impact, and remediation options clearly to engineers, product leaders, and executives. YOU MAY BE A GOOD FIT IF - You have strong software engineering fundamentals and can independently understand, test, and contribute fixes to production codebases. - You are proficient in at least one of Python, Go, or TypeScript. - You have led security reviews or threat models for complex production systems and can point to meaningful design or risk improvements that resulted. - You understand common vulnerability classes and their underlying design failures, including injection, authorization flaws, IDOR, SSRF, unsafe deserialization, race conditions, cryptographic misuse, and software supply-chain risks. - You understand modern application architecture, including web applications, APIs, OAuth/OIDC, cloud platforms, containers, Kubernetes, and CI/CD systems. - You can reason rigorously about untrusted input, authorization, isolation, identity, delegation, and data boundaries. Direct experience with agentic AI systems is valuable but not required. - You have driven security improvements involving multiple engineering teams, including situations where influence mattered more than authority. - You communicate clearly with both technical and non-technical audiences. NICE TO HAVE - Experience building or operating security tooling such as SAST, DAST, SCA, custom linters, or policy-as-code. - Experience securing multi-tenant SaaS, enterprise software, or systems that process sensitive customer data. - Offensive security experience through penetration testing, red teaming or security research. - Experience operating or participating in a vulnerability disclosure or bug bounty program. - Contributions to open-source security projects, published research, conference talks, or credited vulnerability discoveries. FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS: - A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch. - Full health and dental benefits, including a separate budget for mental health. - RRSP matching, 401K, Pension Scheme. - 100% Parental Leave top-up for up to 6 months, for either parent. - Annual enrichment benefits: Arts & culture, fitness/wellness, quality time, and a workspace improvement credit. Education & learning stipend for conferences, courses, and coaching. - 6 weeks of paid vacation (30 working days!) - Budget for traveling to other offices if you are remote, plus an annual company offsite. HOW AND WHERE WE WORK: - Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon. - For those in the office: a daily lunch program, plenty of snacks, and regular community and social events. - For those not near an office: a co-working benefit so you can work alongside others in your city. - Everyone receives a $500 home office stipend to set up your workspace properly. If any of the above doesn’t line up exactly with your experience, we still encourage you to apply. We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs. We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider. Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.

Задачи: — Разрабатывать инструменты, сервисы и автоматизации для задач кибербезопасности. — Активно использовать LLM в ежедневной работе (Claude, Cursor и другие AI-инструменты). — Автоматизировать процессы безопасности и избавляться от ручной работы. — Создавать детекторы, проверки и security automation. — Участвовать в разработке внутренней платформы для кибербезопасности. Требования: — Python будет одним из основных инструментов, но важнее умение разбираться в сложных задачах, быстро осваивать новые технологии и находить нестандартные подходы к их решению. — Специалисты с сильным техническим бэкграундом и продуктовым мышлением, которым интересно создавать инструменты и сервисы, приносящие реальную пользу другим командам.

Location: Valencia Workplace: OnSite ROLE HIGHLIGHTS: - Job Title: Security Officer - Department: ICEYE Security Spain - Location: Valencia, Spain - Reports to: CEO, ICEYE Spain - Employment type: Permanent - Working type: On-Site - Employment is subject to applicable security screening and clearances WHY THIS ROLE MATTERS:   In this position you will build and own the classified information security posture that lets ICEYE Spain operate within the required classification, coordinating the efforts to achieve and maintain “Reservado Nacional” security clearance, and its NATO and EU equivalents. You are the person who will build the defensible, audit-ready security framework for ICEYE Spain. You will design it, run it, and represent it to the appropriate authority. You are also the trusted advisor that will support the Spain CEO as the first point of contact for Security matters. This is a role for a builder; someone that is confident in defining, maintaining and communicating the security framework that enables ICEYE’s continued growth and meeting our obligations to our customers.   WHO WE ARE ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth.   ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system.   ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future.   Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific. YOUR DAY-TO-DAY RESPONSIBILITIES - Own the roadmap. Define and execute the twelve-month plan to take ICEYE Spain from current state to fully cleared operations at the required national classification levels — including facility security clearance, personnel clearances, IT accreditation, and the operational processes that sit underneath. - Be the appointed security officer. Act as the company's official security officer, representing ICEYE with relevant national authorities. Lead all interactions with the national industrial security / accreditation body and represent ICEYE Spain in front of regulators with credibility and precision. - Build the framework. Partner with the Global Security team to implement policies, SOPs, secure areas, accreditation pathways toward higher classifications and the audit trail that evidences this. - Run the clearance pipeline. Be the person coordinating Personnel Security Clearances across the local organisation in close coordination with Global Security to ensure the business is ahead - Enable the business. Translate security requirements and support appropriate handling of classified information for ICEYE Spain WHAT SUCCESS LOOKS LIKE - Ensure ICEYE Spain holds and maintains a valid Facility Security Clearance and operates accredited environments at the required national level - ICEYE’s local team holds required personnel clearances to participate in our priority programmes. - ICEYE Spain are able to participate in classified procurements and requirements are clearly known and communicated to internal stakeholders - ICEYE Spain team are trained in all appropriate security processes required - You will have built the Audit-ready documentation, local procedures and SOPs, with rehearsed incident-response and Crisis handling measures in place   WHAT WE’RE LOOKING FOR MUST HAVES: - 10+ years experience of working with a variety of security challenges and demands, from IT, to physical security elements. - Real world hands on experience is essential - Deep, hands-on knowledge of the national classified information regime: the governing legislation, regulations, and industrial security manual/handbook, and the practical workings of national security oversight for ICEYE Spain - Track record as a security officer (or directly equivalent) inside a defence, intelligence, aerospace, or critical-infrastructure organisation in Spain. Consulting experience is preferred. - Experience of scaling its classification level is necessary. - Working fluency in NATO and EU classification frameworks (e.g. NATO SECRET, EU SECRET) and how they interlock with national classification levels. - Credibility with national authorities. You have collaborated closely with the relevant National Security, MoD, defence-procurement, and cyber/IT-security authorities in Spain - Currently held Security Clearance is essential - In possession of (or eligible for) Reservado Nacional personal security clearance, and ideally the equivalent EU/ESA/EC Secret) - Strong grasp of IT security accreditation paths for classified systems — the national baseline security standards, approved classified-IT regime, and formal accreditation/approval process for higher classifications such as ISO 9001, NATO/APAQ PECAL - Fluent in English, with native Spanish, with the ability to brief at executive, authority, and working level.   APPLICATION PROCESS - Intro conversation with Talent Acquisition (30 min) - Interview with Country Director of Operations (45 min) - Hiring manager interview with the CEO, ICEYE Spain (45 min) - Technical case: a take-home roadmap exercise. Demonstrate your vision to build from current state to the highest target classification level, including facility, personnel, and IT accreditation — presented and defended in person to a panel (90 min) - Interview with ICEYE’s Chief Security Officer (45 min) - Final conversation with the Global CEO of ICEYE WORKING AT ICEYE At ICEYE, you’ll join a diverse and highly engaged team united by the ambition to make the impossible possible. As a global scale-up, we combine speed and ambition with the opportunity to take real ownership from day one. Your growth, wellbeing, and success are a priority, with continuous professional development, training opportunities, and a culture where collaboration is how we win. HOW WE WORK (OUR VALUES) Make the impossible possible: We set ambitious goals and stay calm under pressure. We bring grit, optimism, and ownership when things get hard, and we keep moving until we find a way. - Be curious: Go deep, ask questions, listen carefully, and think critically. Understand the “why” behind decisions. - See the big picture: Stay close to what’s happening across the company so you can make better decisions. Consider how your work affects others. - Drive effective teamwork: Create psychological safety, invite different perspectives, and build inclusive teams. There are no bad questions. - Act as one team: We win together. We match tasks to the right owner and stay agile as priorities shift. - Have fun: What we do matters—and it should be enjoyable. Celebrate progress, take pride in results, and share the wins. BENEFITS Our benefits are designed to support your health and wellbeing, at work and beyond. We keep improving them based on employee feedback, and offerings vary by location. Talent Acquisition will confirm what applies for this role and location during the process.   OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION We want ICEYE to be a place where people can be themselves and do great work. Different backgrounds and perspectives make us stronger, which is why we work to create an environment where people feel included, respected, and able to speak up. Whatever your background, we want you to bring your authentic self to the table. We’re committed to fair, inclusive hiring and equal opportunity. Everyone is welcome to apply. If you need any adjustments or support during the recruitment process, tell us—we’ll do our best to help. Apply now to start your ICEYE journey, and help us continue to make the impossible possible together. Read more about ICEYE and working with us at iceye.com http://iceye.com.

Banco Plata is a major fintech platform in Latin America operating under the Open Finance principle. Languages required: Spanish (fluent), English (professional working proficiency).

Задачи: — Владение и обеспечение соблюдения стандартов безопасности поставщиков Nebius, включая перевозчиков, 3PL, экспедиторов, охранные компании и поставщиков последней мили. — Обновление требований к безопасности поставщиков в соответствии с политикой NGSCS и мировыми лучшими практиками. — Обеспечение формального подключения всех поставщиков к стандартам безопасности NGSCS с документированным принятием требований. — Взаимодействие с руководством NGSCS, юридическим отделом и отделом закупок для включения требований безопасности в контракты и соглашения. — Проведение регулярных, внеплановых и запланированных проверок соответствия на объектах поставщиков по всему миру. — Оценка соответствия поставщиков стандартам TAPA FSR, TAPA TSR и специфическим требованиям NGSCS. — Документирование результатов проверок, выявление системных рисков и эскалация проблем с предложениями по устранению. — Выдача официальных уведомлений о корректирующих действиях, отслеживание их выполнения и повторные проверки. — Эскалация серьезных или повторяющихся нарушений с рекомендациями по санкциям, приостановке или замене поставщика. — Ведение глобального реестра соответствия поставщиков. — Основной контакт NGSCS по вопросам безопасности поставщиков, проведение регулярных обзоров и оценок эффективности. — Поддержка процесса подключения новых поставщиков через оценку их безопасности. — Подготовка регулярных отчетов о соответствии поставщиков, выявление тенденций и рекомендации по улучшениям. — Внедрение инноваций в области безопасности цепочки поставок. Требования: — Значительный опыт в области обеспечения безопасности цепочки поставок, аудита поставщиков или контроля стандартов безопасности. — Подтвержденный опыт проведения физических проверок безопасности и оценки соответствия в многосторонних средах. — Опыт управления процессами корректирующих действий с эскалацией и разрешением. — Глубокое знание стандартов безопасности цепочки поставок, включая TAPA FSR и/или TAPA TSR. — Знание физических мер безопасности, применимых к логистике (контроль доступа, видеонаблюдение, проверка персонала, защитные пломбы, цепочка хранения). — Напористый и прямой стиль общения, способность требовать ответственности от поставщиков. — Высокая организованность и внимание к деталям. — Способность самостоятельно работать в разных географических регионах с минимальным контролем. — Свободное владение английским языком (устным и письменным). Желательно: — Опыт работы в правоохранительных органах, военной безопасности или корпоративном аудите безопасности. — Опыт работы с цепочками поставок высокоценных или критически важных инфраструктур (например, дата-центры, AI-оборудование, полупроводники, электроника). — Опыт работы в глобальных функциях безопасности с много региональными сетями поставщиков. — Знакомство с технологиями безопасности (GPS-трекинг, геозонирование, контроль доступа, защитные пломбы). — Дополнительные языки, релевантные регионам NGSCS (нидерландский, иврит, мандарин). Операционные ожидания: — Значительные международные командировки для проведения проверок на местах. — Готовность к быстрому реагированию и работе вне стандартного рабочего времени. — Работа в глобальной среде с координацией по часовым поясам. — Подчинение руководителю глобальной безопасности цепочки поставок с полномочиями независимого и бескомпромиссного обеспечения стандартов. Условия: — Конкурентная компенсация. — Возможности карьерного роста и обучения. — Гибкость и самостоятельность в работе. — Международная среда и талантливые команды.

Location: San Francisco, CA • New York, NY • United States Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As a Security Scientist, you will leverage your data analysis skills and help identify and drive impactful projects to improve the safety and security of Figma's product, platform, and our IT systems. The mission of the Figma Security team is to help Figmates ship the most secure and safe product to our users. We are looking for security scientists with a strong grasp of security and anti-abuse fundamentals. You will partner closely with teams in Security Engineering as well as teams across the company to focus on systemic security and safety improvements and risk reduction. You will also apply your security expertise and analytical skills to support and participate in security design reviews and consulting, incident response, and risk management. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Collaborate cross-functionally across the company to understand existing security and anti-abuse problems and work with engineering, product, data science, and other teams on solutions Understand attacker and user behavior on the Figma platform and inside Figma through creation of new datasets, metrics, experimentation, etc., and guide strategy and decision making Build detections, tune signal quality, and measure coverage across Figma's products, platforms, and internal systems, turning attacker behavior into durable, data-driven detections Lead and support security investigations, developing the datasets, tooling, and analysis that help us scope incidents, understand root cause, and reduce time to detect and respond Translate threat intelligence into action, operationalizing intel on relevant threat actors and techniques to prioritize detection coverage, harden high-risk surfaces, and guide security strategy Conduct investigations and design reviews to identify current and new attack vectors against Figma products and services Advocate for security and secure practices throughout Figma We'd love to hear from you if you have: Strong understanding of real-world security, anti-abuse, and detection and response challenges Fluency in SQL, with proficiency in Python, R, or a similar scripting language Experience working with distributed data processing systems and frameworks such as Hive, Redshift, Presto, Snowflake, or Spark Strong knowledge of statistical methods and experimental design Excellent judgment and creative problem-solving skills While it's not required, it's an added plus if you also have: A self-starting mindset along with strong communication and collaboration skills At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you're excited about this role but your past experience doesn't align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. Pay Transparency Disclosure Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law. Annual Base Salary Range: $140,000 — $348,000 USD At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status , or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com . These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: Holding interviews in an accessible location Enabling closed captioning on video conferencing Ensuring all written communication be compatible with screen readers Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice . Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles: Candidates may submit up to 5 applications during any rolling 30-day period. Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection. Once the applicable days has passed, candidates are welcome to apply again.

Location: Remote About us OpenZeppelin is the security standard onchain finance is built on. Founded in 2015, our mission is to accelerate the world's transition to an open financial system, built on open standards and secured by rigorous research. Our open-source Contract Libraries have facilitated over $35 trillion in onchain value and are used by 10 of the top 10 tokenized money market funds and 9 of the top 10 stablecoins by market cap. We combine AI-native security tooling with deep research and a decade of audit expertise to support leading institutions and crypto-native teams shaping the next generation of digital assets like DTCC, Fidelity, Coinbase, Uniswap, Aave, the Ethereum Foundation, and many more across the full secure development lifecycle. Please note: Always refer to OpenZeppelin's official job page for the most accurate information about our open roles, as we have seen multiple third party job sites posting inaccurate information. The IT & Security Team The Information Security function operates independently under our Legal team and owns everything that keeps the OpenZeppelin organization secure. That means managing our Security, Privacy & IT Program end-to-end: our SOC 2 and ISO 27001 posture, vendor and privacy risk, incident response, our bug bounty programs, and the identity, endpoint, and access systems the whole company depends on. It is also the team our customers meet during security diligence. As our enterprise relationships deepen, increasingly with banks and other regulated institutions, our own program must be as credible as the security we deliver to customers. Today that program is established and audit-ready. The next chapter is turning it into an enterprise-grade security function that stands up to the scrutiny of the most demanding enterprise customers, partners, and regulators, while safely accelerating our adoption of AI across the company. What you'll be doing You will own the strategy, design, and continuous maturation of OpenZeppelin's Information Security Program, and be accountable for managing the team executing it. You can issue-spot security and privacy risks before they materialize, explain the principles behind security and compliance controls to auditors and enterprise security teams, and calibrate our security program proportionate to risk. IT and infrastructure: Oversee identity and access management, provisioning and onboarding/offboarding, end-user security (MDM, endpoint protection, security training), physical security, disaster recovery, business continuity, and data backup, using automation and AI-powered workflows to make IT and security operations scale faster than headcount. Strategy, governance and budget: Set the strategic direction, multi-year roadmap, and risk posture of the Information Security Program; deliver on department OKRs; and own the IT and technology budget, with ultimate responsibility for technology procurement. AI security and governance: Own the secure adoption of AI across the company: evolve our AI governance framework, review and approve AI tools and agentic workflows, and secure our agentic infrastructure (identity, least-privilege tool and data access, secrets handling, monitoring, auditability). Manage frontier model providers as critical vendors, covering security and data-handling diligence, retention and training-use commitments, DPAs and subprocessor flow-downs. Meet emerging obligations such as the EU AI Act, so we can make transparent, defensible commitments to enterprise customers about how our products and internal AI usage handle their data. Compliance, audit and enterprise trust: Own our audit, certification, and attestation strategy and execution (penetration testing, SOC 2 Type 2, ISO/IEC 27001, successor frameworks) alongside internal security audits; run a third-party and vendor risk management program; and serve as the external face of our security program with customer security teams, regulated financial institutions, and auditors. Privacy and data governance: Maintain a comprehensive data map of how data flows into, through, and out of the organization, including flows to model providers and through agentic workflows, with data classification, records of processing, and a vendor/subprocessor inventory. Own privacy compliance in partnership with Legal: GDPR, CCPA/CPRA, DPAs and contractual security commitments, and privacy-by-design reviews of new products and features. Security operations and incident response: Own the incident response program end-to-end, including playbooks, tabletop exercises, post-incident reviews, and breach-notification obligations in partnership with Legal. Manage our bug bounty programs, and partner with development teams to embed security best practices in the SDLC and our software offerings. You have 10+ years of Security and IT experience, including 3+ years leading a IT Security and GRC function (not solely IT operations) in a high-growth tech company, with demonstrated ownership of strategy, not just execution. A demonstrated trajectory toward CISO: you have owned a security program end-to-end, presented to executives or boards, and can articulate the "why" behind every control you have implemented. Experience securing or governing AI/LLM-enabled products or enterprise AI adoption including agentic systems and third-party model-provider risk, with an ability to apply privacy and data-protection laws and practices (e.g., GDPR, CCPA/CPRA) in the AI context. Nice to have 5+ years working in blockchain or a FinTech with an enterprise client base (e.g., financial services), including navigating rigorous third-party security diligence. Logistics: Our interview process takes place on Google Meet or Zoom and tends to consist of the following stages: Recruiter Call (30 minutes) Hiring Manager Call (30 minutes) Team Interview (30 minutes) Leadership Interview (30 minutes) Paid work test (up to 20 hours of paid work) Reference checks Benefits Meet your teammates at company gatherings around the world 😎 Enjoy the flexibility of fully remote work 🌎 Take the time you need with flexible time off 🏝 Grow your family with 8 weeks of paid leave for primary caregivers, 4 weeks for secondary caregivers, and a one-time $3,600 baby bonus 💙 Build your ideal home office with up to $500 in equipment support 🪑 Stay covered with medical insurance 🏥 Keep growing with learning and development opportunities 🧠 Get a monthly stipend for your preferred co-working space 💻 At OpenZeppelin , we are an equal opportunity employer and we value different perspectives. We are committed to building a diverse workforce. This includes but is not limited to gender, race, sexual orientation, religion, national origin and other characteristics that make each one of us unique. In this uniqueness, we find the most value. Come join us! Use of AI as part of the recruiting process As part of OpenZeppelin’s recruitment process, we may use automated tools, including artificial intelligence, to assist in reviewing applications and assessing candidate qualifications. These tools are used to support our People team by identifying relevant skills and experience, and are not used to make decisions solely by automated means. All hiring decisions involve human review. Any personal data provided as part of your application will be processed in accordance with OpenZeppelin’s Data Privacy Notice . If you have questions about this recruitment process or would like to request human review of your application, please contact us at talent@openzeppelin.com.

We are seeking an elite, hands-on Senior Security Compliance Consultant (SOC 2 & GRC Specialist) to lead a critical, company-wide SOC 2 Type II audit readiness initiative. In this strategic engagement, you will perform comprehensive gap analyses, assess existing security controls, design robust compliance workflows, and drive cross-functional teams toward audit completion. The ideal candidate brings a proven track record in GRC frameworks, control mapping, evidence automation, and policy development. Utilizing automated compliance platforms such as Sprinto, you will build repeatable compliance processes, validate technical controls, and ensure a seamless audit experience across the entire organization. General Information (About the Client): Our client is a fast-scaling, cloud-native technology platform committed to maintaining enterprise-grade trust, security, and data privacy. To support their rapid commercial growth and enterprise sales pipeline, they are establishing a formal, highly disciplined security governance model. They operate a modern, cloud-first environment where compliance is treated not as a passive checklist, but as an active, automated operational advantage. By leveraging modern GRC platforms and fostering a security-conscious culture, they provide an empowering environment for compliance experts to drive real architectural and procedural improvements. Tasks and Deliverables: SOC 2 Readiness & Gap Analysis: Conduct a thorough assessment of existing technical and operational security controls, pinpointing compliance gaps and building an actionable remediation roadmap. Control Design & Implementation: Author, refine, and operationalize security controls, policies, and procedures aligned with SOC 2 Trust Services Criteria (TSC) and PCI DSS standards. Automated Evidence Collection: Lead evidence-gathering workflows using automated GRC tooling (Sprinto), ensuring all technical artifacts, access logs, and policy attestations are validated and audit-ready. PCI DSS Guidance: Provide expert advisory on maintaining PCI DSS alignment alongside SOC 2, ensuring overlapping control requirements are mapped efficiently to reduce operational drag. Cross-Functional Coordination: Collaborate with engineering, DevOps, HR, and IT teams to embed compliance workflows into daily operations without slowing down feature execution. Auditor Interface & Readiness: Serve as the primary liaison during the audit preparation phase, coordinating directly with external auditors to present evidence, resolve findings, and ensure a successful audit cycle. Required Experience: SOC 2 Mastery: Proven track record of leading end-to-end SOC 2 readiness, gap remediation, and audit preparation initiatives for cloud-native or B2B SaaS companies. GRC & PCI DSS Acumen: Deep familiarity with Governance, Risk, and Compliance (GRC) frameworks, risk assessment methodologies, and PCI DSS compliance requirements. Tooling Proficiency (Sprinto): Direct, practical experience leveraging automated compliance and evidence-collection platforms, specifically Sprinto (or equivalent modern platforms like Vanta/Drata). Policy & Control Mapping: Exceptional capability to author clear, enforceable security policies and translate abstract regulatory requirements into concrete engineering controls. Cross-Functional Facilitation: Strong stakeholder management skills with a history of driving accountability across distributed engineering, product, and operations teams.

Location: London 500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating. Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down. With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better. The job This role unites Security and Infrastructure under a single organizational mandate to ensure security practices align directly with rapid engineering execution and platform scalability. Flo Health protects the data of over 80 million monthly active users, holding ISO 27001 and ISO 27701 certifications alongside privacy-first features such as Anonymous Mode. The VP of Security & Infrastructure is accountable for maintaining and elevating these security, privacy, and architectural standards across the organization. We are building organisation where secure is the default path and the fast path. Core Ownership & Responsibilities 1. Security Strategy & Governance Security Stategy and Roadmap: Develop, evolve and communicate Flo’s security strategy and roadmap, promoting strong shared security ownership culture. Security Programme: Oversee all aspects of Flo’s security programme, risk management, security architecture, product security, and security operations, including embedded security engineering functions. Data Protection & Governance: Define and enforce standards for storing, protecting, and deleting personal and health data across production systems, analytics warehouses, AI model training sets, backups, and search indexes. Regulatory & Compliance Engineering: Deliver and oversee the performance of technical controls, automated evidence extraction, and ongoing compliance for ISO 27001, ISO 27701, SOC 2 Type 2, HIPAA, EU AI Act, and Cyber Resilience Act. Third-Party & Supply-Chain Risk: Establish evaluation criteria and ongoing governance controls for vendors, SDKs, and external partners accessing internal environments or data. Vulnerability Management: Oversee the management life cycle of code, third party and platform vulnerabilities, ensuring remediation paths are transparent, risk-based, and tracked to closure. Security Operations & Incident Response: Oversee detection engineering, continuous threat monitoring, and serve as the accountable executive for major incident escalations. 2. Platform & Infrastructure Engineering Cloud & Developer Infrastructure: Own GCP and AWS multi-account architecture, Kubernetes, Terraform, and developer platform delivery to drive down lead times and change failure rates. Secure SDLC: embed technical security requirements across the development lifecycle, optimising automated security controls within CI/CD pipelines, and ensuring well informed platform and product security architecture decisions drive strong protection, resilience and scalability. Corporate IT & Access Controls: Manage IT service provision, including identity, hardware devices, collaboration tools and joiner-mover-leaver lifecycle workflows through automated, self-service access controls. 3. User Identity & AI Security Product Identity & Access Management: Direct cross-functional roadmaps for user facing security services and account safety, including authentication, sessions management, and cryptography,while balancing conversion metrics with security controls. AI & Machine Actor Security: Establish governance, scoping, permissioning, appropriate security guardrails and auditing for AI-assisted engineering agents and consumer-facing AI features. 4. External Trust and Transparency Advocate for Security In FemTech: Set and continually raisethe bar as market leader, executing transparent and proactive external communications and raising Flo's security profile through external events and industry engagement. Key Qualifications & Technical Requirements Leadership Experience: Proven track record of managing combined or parallel Security and Production Infrastructure functions at consumer scale (tens of millions of active users). Product Integration: Demonstrated experience partnering with Product, Design, and Mobile/Backend Engineering teams to ship user-facing features to roadmap. Audit Track Record: Successful execution and ongoing maintenance of ISO 27001, SOC 2, HIPAA, or equivalent certification frameworks through external audits. Data Privacy Systems: Deep technical experience implementing GDPR, automated data deletion, retention policies, DPIAs, and cross-border transfer controls programmatically. AI Governance & Security: Practical implementation experience securing AI models, autonomous code/development agents, and automated permission/audit systems. Preferred Qualifications: Experience with consumer sign-in optimization, health/biometric data protection, in-house offensive security engineering, and mobile platform security. Annual Salary Range (ranges may vary based on skills and experience) £200,000 — £220,000 GBP How we work We’re a mission-led, product-driven team. We move fast, stay focused and take ownership – from brief to build to impact. Debate is encouraged. Decisions are shared. We care about craft, ship with purpose, and always raise the bar. You’ll be working with people who take their work seriously, not themselves. It takes commitment, resilience, and the drive to keep going when things get tough. Because better health outcomes are worth it. What you'll get We support impact with meaningful reward. Here’s what that looks like: Competitive salary and annual reviews Opportunity to participate in Flo’s performance incentive scheme Paid holiday, sick leave, and female health leave Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents Accelerated professional growth through world-changing work and learning support In-person collaboration and work in a hybrid model, with 3 days per week spent in the office 5-week fully paid sabbatical at 5-year Floversary Flo Premium for friends & family, plus more health, pension and wellbeing perks Diversity, equity and inclusion Our strength is in our differences. At Flo, hiring is based on merit, skill and what you bring to the role – nothing else. We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities. Read our privacy notice for job applicants .

Location: Remote-Friendly, United States; San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Team The Security Engineering team's mission is to safeguard our AI systems and maintain the trust of our users and society at large. Whether we're developing critical security infrastructure, building secure development practices, or partnering with our research and product teams, we are committed to operating as a world-class security organization and keeping the safety and trust of our users at the forefront of everything we do. What You’ll Do: Conduct red and purple team engagements simulating advanced threat actors across our cloud infrastructure, endpoints and bare metal deployments. Penetration test specific, high value deployments. Contribute to AI-assisted security testing tooling and workflows. Work cross functionally with other security and engineering teams, particularly on AI-specific attack scenarios. Document and present findings to technical and executive audiences, translating attack narratives into actionable risk insights that inform security roadmaps. Who You Are: 5+ years of hands-on experience in red teaming and offensive security operations Deep expertise in at least two of: macOS security, Linux Security, Cloud security (GCP/AWS/Azure), Kubernetes, CI/CD pipelines Track record of discovering novel attack vectors and chaining vulnerabilities creatively Experience conducting adversarial simulations against well-defended environments Strong engineering skills (Python, Go, or similar) Ability to write clear findings that drive action, helping teams understand risk and prioritize fixes Collaborative approach, working in close collaboration with the blue team Strong candidates may also have experience with: Prior work at organizations with state actor threat models Interest in AI safety and how security engineering contributes to responsible AI developments Background testing AI/ML systems or agentic workflows Familiarity with detection engineering and SIEM/EDR platforms from the defensive side Experience with data center security or hardware-based attacks Deadline to apply: None. Applications will be received on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $300,000 — $320,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security and control commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward continuous assurance, to challenge and evidence the performance of controls continuously rather than through periodic audits. As Anthropic scales to meet public-company standards, the Sarbanes-Oxley (SOX) control environment over our technology stack is one of the most consequential things this team owns. As part of Security GRC's technical controls assurance function, you will be the voice on what the IT general controls must achieve to support SOX 404 compliance. In partnership with Internal Audit, you will define control requirements and acceptance criteria for the in-scope engineering systems and infrastructure that underpin financial reporting. You will pair with engineering as they design and implement against those requirements, and validate that what ships actually meets the bar before Internal Audit and our external auditors test it. You are the product owner for control design methodology and continuous control monitoring, initially around ITGCs, but extending into other areas of security and compliance to drive visibility where and when we need it. Key responsibilities Define control requirements and acceptance criteria across the core ITGC domains of logical access, change management, computer operations, and program development for SOX in-scope systems, including home-built platforms where the control has to be designed into the system rather than bolted on. Set the bar for in-scope systems from day one. As financially significant systems are built, migrated, or replaced, define what the system must provide (auditability, segregation of duties, change control, immutable logging, evidence retention) before go-live, so controls are not retrofitted after the fact. Pressure-test changes for SOX impact during design. Review major infrastructure, system, and agent framework changes for control impact while decisions are still cheap, and maintain a clear view of which changes alter the SOX scope, key control population, or evidence requirements. Own second-line control monitoring and evidence readiness. Stand up continuous controls monitoring and automated evidence collection for ITGCs (control testing, walkthrough preparation, population and completeness validation, and mapping to the common controls framework). Materially raise automated evidence coverage and cut audit prep time. Drive control deficiency remediation with cross functional partners. Track and root-cause ITGC deficiencies surfaced by monitoring, Internal Audit, or external audit; partner with engineering owners on remediation design; and assess whether remediation actually closes the gap before re-testing. Assess scope changes through a SOX lens. When new products, entities, systems, or integrations come into scope, provide technical and compliance assessment of their impact on control design, evidence requirements, and engineering effort before commitments are made. Maintain alignment with the broader compliance portfolio. Where SOX ITGCs overlap with SOC 2, ISO 27001/42001, or other frameworks, ensure controls are designed once and evidenced once, and that changes made for one framework do not silently break another. Minimum qualifications Thrive at the pace of a hypergrowth company. You're comfortable making calls with incomplete information and reprioritizing as scope shifts. Have led or been a senior contributor to an ITGC program through SOX 404 readiness and/or at a public company, with a working command of PCAOB AS 2201, COSO 2013, and how external auditors scope, test, and evaluate technology controls and deficiencies. Have genuine engineering fluency, possibly from an earlier engineering career: you can read code and Terraform, follow a CI/CD pipeline end to end, and challenge a design on its technical merits. Have programming skills in Python or at least one systems language such as Go, Rust, or C/C++. Have deep familiarity with developer platform, release engineering, cloud infrastructure, or ERP/financial systems control domains. Understand the role of the second line: you can advise and challenge engineering without taking ownership of their controls, and you know where the line sits between your monitoring and Internal Audit's independent testing. Are a strong collaborator and communicator across Finance, Engineering, Internal Audit, and external auditors. Use Claude and other LLMs as daily working tools, and have grounded, specific views on which SOX assurance workflows AI can run today and which it can't yet. Translate SOX and framework language into acceptance criteria engineers can build against, and translate engineering reality back into assurance language auditors and leadership can rely on. Default to getting the requirement designed into the system rather than papering over the gap with procedure. Preferred qualifications A combination of audit or advisory experience (Big 4 or equivalent, ideally IT audit) with in-house experience at an AI-forward tech company, in either order. Taken a company through a first-year SOX 404(a) and 404(b) assessment, including a first external ITGC audit. Defined or assessed controls over home-built financially significant systems, usage-based billing, or revenue metering pipelines. Defined or assessed controls for AI/ML systems or agents acting in production environments. Stood up continuous controls monitoring or automated evidence programs. Experience with SOC 1 reliance, service organization control mapping, and complementary user entity controls. CISSP, CISA, CPA, or equivalent certification. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $410,000 — $510,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.