Location: United States
Action1 is an autonomous patch management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in 5 minutes, it just works and is always free for the first 200 endpoints, with no functional limits. By pioneering autonomous OS and third-party application patching, Action1 helps organizations eliminate routine work, reduce ransomware and security risks, and protect the digital employee experience. It provides real-time vulnerability assessment and remediation across remote and on-site endpoints without requiring a VPN, while peer-to-peer patch distribution reduces bandwidth use on local networks.
In 2026, Action1 was recognized as the fastest-growing founder-led cybersecurity company in America on the Inc. 5000. Action1 is led by industry veterans Alex Vovk and Mike Walters, American entrepreneurs who founded Netwrix, which has grown into an industry-leading, multibillion-dollar cybersecurity company.
We are looking for a Dev Manager to lead the engineering team responsible for integrations between our product and external systems, including the Integrations Store. You will combine engineering leadership with hands-on technical expertise to deliver secure, reliable integrations that fit our customers' workflows.
What you'll do:
Lead and develop a team of engineers, providing technical direction, mentoring, and regular feedback.
Own delivery outcomes within the agreed scope, provide practical estimates, and make capacity and priority tradeoffs visible.
Delegate ownership to engineers and, as the team grows, team leads; distinguish near-term delivery from long-term capability development. Keep the role to no more than three clearly defined focus areas, with team leads taking ownership as capacity grows.
Work with Product Management to define priorities, plan delivery, and translate customer needs into integration capabilities.
Oversee the design, development, and maintenance of integrations, including:
- Connectors to third-party applications and services.
- An Integrations Store for discovering and managing available integrations.
- Data mapping, validation, and synchronization between systems.
- Authentication, authorization, and secure credential handling.
- Monitoring, troubleshooting, and recovery from integration failures.
Guide technical decisions within the assigned domain from solution design through development and production rollout, coordinating cross-cutting architecture and security decisions with their designated owners.
Establish reusable integration patterns that handle retries, rate limits, duplicate events, and API version changes reliably.
Own automated pipelines for building, testing, validating, and deploying integrations.
Improve integration reliability, performance, and observability, and guide the team in resolving production issues.
Coordinate with other engineering teams and external partners to manage dependencies and compatibility.
Apply AI technologies where they improve integration development, testing, or support, with appropriate validation of outputs.
Requirements
What we're looking for:
Experience leading software engineers and owning the delivery and operation of production systems.
Strong software engineering fundamentals and the ability to contribute to technical problem-solving.
Excellent knowledge of Node.js, JavaScript, and TypeScript.
Experience building and operating AWS services in production.
Hands-on experience designing and maintaining APIs and integrations with external systems.
Understanding of distributed systems, asynchronous processing, data consistency, and failure recovery.
Proficiency in SQL and experience with data modeling, aggregation, and query performance.
Experience with secure authentication and authorization for integrations.
Strong communication skills and the ability to align engineering work with product priorities.
Professional working proficiency in English for leading an English-speaking team and collaborating across functions.
Nice to have:
Experience writing automated integration and contract tests.
Proficiency in SQL.
Experience with runtime isolation and sandboxing for sensitive execution.
Experience in B2B SaaS, security, compliance, or data governance.
Experience building high-load products with numerous endpoints.
Experience maintaining integrations across multiple third-party API versions.
Benefits
Fully remote work with flexibility to support your work-life balance.
A collaborative environment that empowers you to own your domain and implement best practices.
Stable income, benefits, flexible working hours, and opportunities for career advancement.
Friendly, professional colleagues who are eager to support you and help you grow.
Engaging challenges and opportunities to make a meaningful impact.
Location: Limassol, Cyprus
The System & Infrastructure Administrator is responsible for the day-to-day administration, support, security, and reliable operation of the company’s corporate IT environment. The role ensures that user access, infrastructure, internal services, networks, endpoints, and core business systems remain available, secure, and properly maintained to support daily business operations.
Responsibilities
Manage the full employee access lifecycle (Joiner–Mover–Leaver) across Microsoft 365, Active Directory, GitLab, 1C-related systems, Slack, ClickUp, Vaultwarden, VPN, file storage, and other corporate services.
Provision and revoke accounts, access, licences, MFA, SSO, VPN access, equipment, and company assets; update access promptly when employees change roles or leave.
Administer Microsoft 365/Entra ID, Windows Server, Active Directory, Group Policy, DNS, DHCP, file services, Linux systems, and SMB-based shared storage.
Maintain server and virtualisation infrastructure, storage, backups, internal services, and remote-access solutions.
Administer office networks, Wi-Fi, VLANs, VPNs, firewalls, switches, routers, DNS records, domains, and TLS certificates.
Monitor infrastructure and backup jobs, perform regular recovery tests, apply patches and updates, and troubleshoot incidents.
Operate endpoint protection, EDR, vulnerability-management, logging, and SIEM tools; triage alerts and escalate security incidents when required.
Provide infrastructure-level support for SWIFT, 1C-related systems, corporate websites, and internal web services.
Provide L2–L3 support for employee endpoints and workplace technology, including advanced troubleshooting, hardware replacement, OS and application issues, access-related problems, encryption, VPN connectivity, and escalated technical incidents.
Manage the lifecycle of laptops, peripherals, IT assets, software licences, subscriptions, repairs, and approved purchases.
Maintain technical documentation, asset and access records, recovery procedures, and operational runbooks; automate repetitive tasks where appropriate.
Requirements
3+ years of hands-on experience in system administration, infrastructure support, or corporate IT operations.
Strong practical knowledge of Windows Server, Active Directory, Group Policy, Microsoft 365/Entra ID, DNS, DHCP, and access management.
Working knowledge of Linux administration and troubleshooting.
Strong understanding of TCP/IP, VLANs, routing, NAT, VPNs, Wi-Fi, firewalls, NAS, and SMB.
Experience with virtualisation, Proxmox, ZFS, LVM, storage systems, backup systems, and recovery procedures.
Experience with Docker, GitLab CI, and container registries.
Understanding of RBAC, least privilege, MFA, SSO, privileged and service accounts, access reviews, patching, endpoint security, and incident escalation.
General knowledge of cloud providers and cloud concepts, including compute, storage, networking, IAM, monitoring, backups, shared responsibility, and basic cost awareness.
Experience supporting employee devices at L2–L3 level and working with an ITSM/helpdesk system.
Basic automation skills in PowerShell, Bash, Python, Ansible, or APIs.
Good written English and the ability to maintain clear technical documentation.
Nice to Have
Hands-on experience with AWS, including IAM, EC2, VPC, S3, Route 53, CloudWatch, or AWS Backup.
Experience operating or troubleshooting Kubernetes clusters.
Experience with SIEM, EDR, vulnerability scanners, PKI, certificate automation, or secrets-management systems.
Experience supporting 1C, SWIFT, financial systems, Microsoft Intune, or ITAM/CMDB platforms.
Benefits
Competitive salary;
Annual performance bonus;
Access to our Limassol offices, including daily drinks and snacks, as well as parking facilities;
Working hours are from 9:00 to 18:00, with a shorter day on Fridays until 16:30;
24 working days of paid annual leave, in addition to statutory public and bank holidays in Cyprus;
14 working days of paid sick leave per calendar year;
Work permit sponsorship and full support with all related arrangements;
The opportunity to participate in corporate sports activities and events, and receive corporate gifts.
Location: San Francisco, California; New York, New York
Workplace: Hybrid
WHO WE ARE
Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.
Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work.
ABOUT THE ROLE
Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build.
We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion.
You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next.
We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters
WHAT YOU'LL ACHIEVE
- Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up.
- Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety.
- Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful.
- Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements.
- Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes.
- Help define and track metrics such as coverage, MTTD, and alert quality.
- Join a shared on-call rotation for incident response.
SKILLS YOU'LL NEED TO BRING
- We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you.
- 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role.
- Have written or tuned detections that run in production, and care about signal quality and cutting noise.
- Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly.
- An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect.
- Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs.
- Have used SIEM, EDR, or SOAR tools in any size of environment.
- Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end.
NICE TO HAVE
- Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry.
- Experience running SIEM, EDR, or SOAR platforms at large scale.
- Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections).
- Experience applying LLMs or agent-style tooling to security workflows.
- Experience securing AI-enabled systems or endpoint tooling.
- Kubernetes or container detection experience.
- Background in threat intelligence, malware analysis, or digital forensics.
- Contributions to the security community through research, tooling, CTFs, or talks.
- Experience at a high-growth startup or AI company.
Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $185,000 - $280,000 per year.
By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550 and and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528.
#LI-Onsite
A NOTE ON AI
You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on.
EQUAL OPPORTUNITY & ACCOMMODATIONS
We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
Location: Dublin, Ireland
Workplace: Hybrid
WHO WE ARE
Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.
Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work.
ABOUT THE ROLE
Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build.
We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion.
You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next.
We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters
WHAT YOU'LL ACHIEVE
- Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up.
- Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety.
- Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful.
- Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements.
- Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes.
- Help define and track metrics such as coverage, MTTD, and alert quality.
- Join a shared on-call rotation for incident response.
SKILLS YOU'LL NEED TO BRING
- We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you.
- 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role.
- Have written or tuned detections that run in production, and care about signal quality and cutting noise.
- Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly.
- An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect.
- Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs.
- Have used SIEM, EDR, or SOAR tools in any size of environment.
- Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end.
NICE TO HAVE
- Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry.
- Experience running SIEM, EDR, or SOAR platforms at large scale.
- Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections).
- Experience applying LLMs or agent-style tooling to security workflows.
- Experience securing AI-enabled systems or endpoint tooling.
- Kubernetes or container detection experience.
- Background in threat intelligence, malware analysis, or digital forensics.
- Contributions to the security community through research, tooling, CTFs, or talks.
- Experience at a high-growth startup or AI company.
Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role's scope and complexity, and the candidate's experience and expertise, and may vary from the range provided below. The estimated base salary range for this role is €75,000–€142,000 per year.
By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74.
#LI-Onsite
A NOTE ON AI
You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on.
EQUAL OPPORTUNITY & ACCOMMODATIONS
We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
Location: Bangalore
Workplace: Hybrid
About the role
We’re looking for an experienced Senior Backend Software Engineer with 4+ years of experience to help build and evolve this product. Strong hands-on experience with Go (Golang) is a must. You’ll be an early contributor to a new and rapidly evolving product area, working on complex backend and security challenges at significant scale while having meaningful input into the architecture.
What you’ll do
- Design, extend, and optimize large-scale, highly scalable, fault-tolerant backend systems processing billions of events from hundreds of thousands of endpoints in real time, with sub-second latency requirements.
- Build security capabilities that protect sensitive customer data as it flows into and out of LLMs, GenAI applications, AI tools, and agents.
- Contribute to the architecture and evolution of Cyberhaven’s AI Security platform.
- Solve real-world scaling and distributed systems problems through performance analysis, profiling, optimization, and troubleshooting.
- Build and ship production backend services using Go (Golang).
- Work with a modern microservices-based stack including Go, Kubernetes, BigTable, BigQuery, Spanner, Redis, Docker, and Etcd.
- Build integrations and connectors at the API level with SaaS and AI platforms commonly used in enterprises, including GenAI and LLM-based applications.
- Write secure-by-design, hardened software that can withstand real-world attacks while processing untrusted data and communicating with hundreds of thousands of endpoints over the internet.
- Collaborate closely with engineers, product teams, and distributed teams across India, Europe, and the US.
Who you are
- You have 4+ years of software engineering experience, with a strong track record of building backend systems that are actively used at scale.
- You have strong hands-on experience with Go (Golang) and have built and shipped production backend services using Go.
- You have experience building and operating distributed systems, microservices, and Kubernetes-based applications in production.
- You have worked with databases at significant scale. Experience with GCP services such as BigTable, BigQuery, or Spanner is a plus.
- You have experience profiling, troubleshooting, and optimizing distributed applications that use large databases, event streams, or streaming platforms.
- Experience building API-level integrations or connectors with enterprise SaaS applications is a plus. Experience with AI/LLM platforms is especially relevant.
- You understand the importance of reliability, performance, and security when building systems that process large volumes of sensitive or untrusted data.
- You have excellent verbal and written communication skills in English and are comfortable collaborating frequently with distributed teams in Europe and the US.
- You thrive in fast-paced environments, enjoy tackling ambiguous technical challenges, and like shipping with velocity.
- You have a customer-centric mindset and value direct feedback from customers.
- You are based in Bangalore.
Joining Cyberhaven means joining the team building Data Security for the Agentic Enterprise. Traditional tools fall short. Cyberhaven traces the full lifecycle of your data, adapting protection to changing context, so protection moves with the way people actually work, not against it. AI Changed Work. We Protect It.
Backed by $250M from leading investors like Khosla and Redpoint, our team includes leaders who built industry-defining technologies at CrowdStrike, Palo Alto Networks, Meta, Google, and more. This role lets you shape the future of data security, working alongside people driven to protect workflows, not just data, for customers who cannot afford to slow down to stay safe.
AI Tools Disclosure: As part of Cyberhaven's hiring process, we use recruiting tools that include AI-powered features to help with tasks like scheduling, note-taking, workflow automation, and other recruiting activities ("AI Tools"). The AI Tools may process information you provide during the application and interview process. When AI-assisted interview note taking is used, candidates are notified in advance and have the option to opt out of the AI-assisted interview note taking.
Cyberhaven is committed to creating a diverse environment and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
Location: Paris
Workplace: Hybrid
ABOUT VOODOO
Founded in 2013, Voodoo is a tech company that creates mobile games and apps with a mission to entertain the world. Gathering 800 employees, 7 billion downloads, and over 200 million active users, Voodoo is the #3 mobile publisher worldwide in terms of downloads after Google and Meta. Our portfolio includes chart-topping games like Mob Control and Block Jam, alongside popular apps such as BeReal and Wizz.
TEAM
Our Corporate teams support the company’s performance and growth whilst putting people at the core of everything they do. As a French tech leader and global successful company, our Corporate teams are constantly looking for ways to innovate and increase organization efficiency to keep Voodoo ahead of the market. Voodoo’s Corporate function is composed of three teams: HR, Legal and Finance, working together to drive Voodoo’s success.
ROLE
We're looking for an IT Administrator - AI & Cybersecurity to join our Corporate team. In this role, you'll own the intersection of IT operations, cybersecurity and AI platform administration, reporting directly to the IT Manager.
IT & SaaS Administration
- Administer the core SaaS stack - Okta (SSO, SCIM, lifecycle, policies), Google Workspace, Slack, Notion, GitHub Enterprise Cloud and 100+ applications across multiple legal entities
- Own the MDM estate (Jamf and Intune) across macOS, iOS and Windows: enrolment, compliance baselines, patching and disk encryption
- Act as the L2/L3 escalation point for internal support, handling endpoint, identity and SaaS incidents that L1 cannot resolve
- Automate manual run work through scripting, APIs and AI agents where they genuinely add value
Cybersecurity
- Drive the identity hardening roadmap: session lifetimes, adaptive and phishing-resistant MFA, privileged access management and admin role reviews
- Own OAuth and third-party app governance across Google Workspace and Okta: inventory, risk-scoring and approval workflows
- Control SaaS data exposure - publicly and externally shared files, orphaned shares - and build the tooling to support it
- Contribute to the ZTNA rollout, geo-based access controls and detection & response alongside the SOC and SIEM
AI Platform Administration
- Administer enterprise AI platforms (Claude, Google Gemini & Vertex AI, OpenAI and others): tenants, SSO, licences, usage analytics and budget control
- Strengthen the AI governance framework: acceptable-use rules, data classification boundaries, DLP and logging - and detect shadow AI usage
- Administer connectors, MCP servers and agent integrations
PROFILE
- 5+ years of experience in IT administration, infrastructure or IT security in a fast-moving, multi-geography environment
- Deep hands-on expertise with IdP administration - Okta strongly preferred - and Google Workspace at enterprise scale
- Solid MDM experience across macOS and Windows (Jamf and/or Intune)
- Demonstrable cybersecurity practice: IAM hardening, SaaS security posture management, OAuth risk and incident response - you have shipped security work, not just studied it
- Automation is a reflex: proficiency in scripting (Python, Bash, PowerShell) and working with REST APIs and workflow tools
- Practical experience with enterprise AI platforms and a genuine understanding of the risks introduced by models, agents and connectors accessing corporate data
- Able to communicate security trade-offs clearly to executives and technical workarounds to developers
- Fluent English is required, French is a plus
- Nice to have: security certifications (Security+, CISSP, Okta Certified), ZTNA/SASE or SSPM exposure, cloud IAM on GCP or AWS, ITSM platform experience
BENEFITS
- Competitive salary based on experience
- Swile Lunch voucher
- Gymlib (100% covered by Voodoo)
- Premium healthcare coverage with SideCare, 100% covered for you and your family
- Wellness activities in our Paris office
- Remote Fridays
Location: Buenos Aires, Argentina; Medellín, Colombia; Bangalore, India; Guadalajara, Mexico; Lahore, Pakistan
Workplace: fully
We’re a remote, product-focused startup building AI- and algorithm-driven systems, and we’re looking for a strong Backend Django Engineer who loves clean data models, well-designed APIs, and clever algorithms.
You’ll own core backend features end-to-end: from modeling the data to implementing the logic and exposing it through fast, reliable services that ship to users quickly, working with a small distributed team across several countries.
💰
$100 Bonus Opportunity:
Candidates who successfully complete the coding assessment and meet our quality standards may be invited to an additional evaluation stage. Candidates who successfully pass this stage and are selected to proceed to the final interview will receive a
$100 bonus
. To be considered for the assessment, please submit your resume through this job application. If your resume is approved, we’ll send you the coding assessment with further instructions.
What You’ll Do
Design and implement
backend services
and APIs
using
Python
+ Django
(and DRF or similar).
Model and evolve our domain in the database with
clean, well-structured schema
s and relationships.
Implement
algorithmic/AI logic
in the backend (e.g., scoring, ranking, routing, decision rules).
Write
pragmatic, production-ready code
that’s easy to reason about and iterate on.
Optimize for
correctness and performance
: efficient queries, smart indexing, and lean responses.
Work with the team to turn product ideas into
concrete technical designs and endpoints.
Help shape how we build things: patterns, conventions, and how we ship and iterate as we grow.
What We’re Looking For
Strong experience building backend applications with
Python + Django
.
Solid understanding of
relational data modeling
and
SQL
(we use PostgreSQL).
Comfortable designing and building
RESTful APIs
(bonus if you’ve used DRF or similar
frameworks).
Experience working on
non-trivial business logic or algorithms
(e.g., decision flows,
scoring rules, optimization logic).
Good instincts around
performance
: understanding query behavior, avoiding obvious
pitfalls, and using caching when it counts.
A
startup mindset
: comfortable with ambiguity, moving fast, and iterating based on real-
world feedback.
Ability to work
independently in a remote environment
and communicate clearly.
Bonus Points For
Experience in
startups, side projects, or hackathons
where you’ve had to ship scrappy solutions fast.
Background in
algorithms, optimization, or data-heavy systems.
Experience with
Google Cloud Platform (GCP)
in production.
Familiarity with
Redis
(caching, queues) and
PostgreSQL
at some scale.
Exposure to
containers and orchestration
(Docker, Kubernetes) and/or serverless on GCP.
This role is a
central piece of our backend roadmap
, and we’re aiming to fill it quickly once we meet the right person. If it resonates with you,
go ahead and apply now.
Send us your resume to start the assessment process (and get a chance at the $100 bonus).
Location: Madrid, Spain
Workplace: hybrid
Are you ready to join our digital revolution journey?
At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.
Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.
With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career.
We are looking for an experienced and operationally sharp Security Operations & Incident Response Analyst (L3) to join Aleph's global IT Security team.
Reporting to the Global CISO, you will be the first line of defence when incidents occur and the engine behind the team's threat detection and response capabilities. You will own the end-to-end incident response process, lead threat hunting and intelligence activities, and manage the vulnerability and identity governance programmes — ensuring Aleph is both able to detect threats quickly and respond to them effectively across a complex, globally distributed environment.
What you'll do:
Incident Response
Own and coordinate the
end-to-end incident response process
: identification, triage, containment, eradication, recovery, and post-incident review (lessons learned).
Serve as the primary point of contact for security incidents escalated from IT Operations, the Security Engineer, and external sources.
Maintain and continuously improve
incident response playbooks
for the most relevant threat scenarios (ransomware, phishing, account compromise, data breach, insider threat, etc.).
Manage the
security incident log and register
: track all incidents, document timelines and actions, and produce trend analysis and reporting for the CISO.
Coordinate with external
SOC or MDR providers
where applicable: review daily reports, validate alert quality, and manage escalation workflows.
Data Breach Management
Lead
data breach investigations
: scope the breach, gather and preserve evidence, assess PII exposure, and coordinate response with Legal, Privacy, and HR.
Produce breach investigation reports with findings, root cause, and recommendations.
Threat Hunting & Intelligence
Conduct
proactive threat hunting
across the environment: develop hypotheses based on threat intelligence, search for indicators of compromise (IoCs), and investigate anomalous behaviour.
Manage the
Threat Intelligence function
: track relevant threat actors, TTPs (MITRE ATT&CK), and sector-specific threat campaigns; integrate intelligence into SIEM/XDR detection rules and hunting queries.
Produce threat intelligence summaries and briefings for the CISO and relevant stakeholders.
Vulnerability Management
Own the
vulnerability management programme
: schedule and execute periodic vulnerability scans across infrastructure, endpoints, and cloud environments.
Analyse scan results, prioritise findings by risk and exploitability, and coordinate remediation with IT Operations within agreed SLAs.
Track remediation progress, produce vulnerability metrics, and report status to the CISO.
Validate remediation effectiveness through re-scanning and spot-checks.
Identity & Access Management (IAM)
Manage
periodic access reviews
: coordinate with system owners and HR to review and certify user permissions across critical systems, ensuring least privilege is maintained.
Oversee the
Privileged Access Management (PAM)
programme: define PAM policies, monitor privileged account usage, and review access rights for administrator-level accounts.
Investigate and respond to identity-related anomalies and access policy violations.
What we are looking for:
3–5 years in a SOC analyst, incident response, or security operations role, with at least 1–2 years at L3 level is a plus.
Experience implementing or managing IAM and PAM solutions
Experience working within international or multinational environments.
Hands-on experience with incident response engagements (internal or consulting) is strongly valued.
Relevant certifications:
GCIH, GCFE, GCFA, CEH, CompTIA CySA+
, or equivalent. OSCP is a plus.
Strong hands-on experience with
SIEM platforms
(alert triage, rule writing, query development) and
EDR/XDR tools
.
Solid knowledge of the
MITRE ATT&CK framework
and its application to threat hunting and incident response.
Experience conducting
vulnerability scans
using tools such as Tenable Nessus, Qualys, Rapid7, or similar.
Familiarity with
IAM and PAM
concepts and platforms (e.g. CyberArk, BeyondTrust, Azure PIM, or equivalent).
Experience with
digital forensics and incident response (DFIR)
methodologies: evidence collection, log analysis, and timeline reconstruction.
Knowledge of
threat intelligence platforms
and feeds (e.g. MISP, VirusTotal, threat intel feeds).
Understanding of
ISO 27001 incident management controls, NIS2 incident reporting obligations, and PCI DSS requirement 12.10
.
Calm and decisive under pressure.
Strong investigative mindset with structured problem-solving approach, excellent documentation skills.
Ability to communicate incident status and findings clearly to both technical teams and executive stakeholders.
Collaborative and proactive, comfortable working asynchronously across time zones.
English
: full professional proficiency (C1/C2) — primary working language.
Spanish
: professional proficiency is a plus.
In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is EUR 48,000 EUR.
In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.
#Aleph
Why Join Us?
Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.
We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.
#ALEPH
Location: Remote - Americas
Who We Are:
Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure
for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more.
Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts.
Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it.
Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator.
Our Team Members:
We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond!
We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply.
Your Role:
Alpaca is already the infrastructure layer that hundreds of partners build on for execution. Nobody else is both the execution layer and the data layer - and that makes us the natural one-stop shop for brokerage plus market data. We're hiring a Lead Product Manager to own that second half: define and grow Alpaca's market data business as a standalone, revenue-generating product line.
We're seeking a Lead Product Manager, Market Data to define and own Alpaca's market data strategy - both as a capability that powers our platform and as a standalone, revenue-generating product line.
This role is equal parts strategy and delivery. You'll decide what data we source, how we package and price it, what we build versus buy - and then ship the APIs, feeds, and tooling that partners and internal teams depend on every day.
What You'll Walk Into
You won't be starting from zero - you'll be owning live problems:
Multiple new exchange onboardings in flight, each with its own licensing, entitlement, and redistribution constraints.
A pricing and packaging model that needs rethinking as we expand across asset classes and geographies.
Partners asking for data we don't serve yet - consolidated feeds, historical datasets, derived analytics - you'll be building those requests against cost and commercial upside.
Internal teams (trading, algo routing, compliance, clearing) consuming market data with no product owner ensuring coverage keeps pace.
Things You Get To Do
Negotiate or inform negotiations on exchange licensing, redistribution rights, and entitlements as Alpaca onboards new exchanges and asset classes - you'll talk to vendors and global venues directly.
Assess build-vs-buy for data infrastructure: where do we source from third parties, where do we invest in proprietary collection and normalization, and where do we create derived or value-added data products.
Build the commercial model: define pricing and packaging (real-time vs. delayed, depth-of-book tiers, historical datasets, derived analytics) and work with sales to grow market data revenue.
Own the competitive position: understand how dedicated market data providers price and differentiate, and identify where Alpaca's bundled brokerage-plus-data model creates a defensible edge.
Own the developer experience for market data APIs (REST, WebSocket/SSE, historical endpoints) - coverage, latency, reliability, and documentation that developers actually want to read.
Lead partner discovery: understand what data capabilities are table-stakes vs. differentiating for neobrokers, RIAs, hedge funds, and crypto exchanges, and turn that into prioritization.
How We Take Care of You:
Competitive Salary & Stock Options
Health Benefits
New Hire Home-Office Setup: One-time USD $500
Monthly Stipend: USD $150 per month via a Brex Card
Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.
Recruitment Privacy Policy
Location: Remote | North America or Europe
Workplace: Remote
ABOUT SQUADS
Squads is a financial technology company building products and APIs for the stablecoin economy. We build on open infrastructure, global money, and internet capital markets to deliver better financial services to businesses, individuals, and developers.
Our products span the company’s mission: Squads Multisig helps teams secure and manage assets on Solana; Altitude gives businesses a global account to run their financial operations; and Fuse brings stablecoins and tokenized assets to personal finance.
More than 450 teams use Squads Multisig to secure over $10 billion in value. Our investors include Haun Ventures, Multicoin Capital, Electric Capital, Coinbase Ventures, Toly, Mert, and others.
THE ROLE
You’ll own identity and endpoint security across Squads, working closely with our Head of Security. That means making sure the right people have the right access, company devices meet a consistent security baseline, and new tools can be adopted with a clear understanding of their risks.
This is a hands-on role. You’ll run the day-to-day systems, respond when something looks wrong, and build the access reviews, standards, and processes we’ll need as the company grows. We’re looking for someone who thinks like an attacker, makes sound calls under pressure, and can help the team move quickly while keeping the bar high.
WHAT YOU’LL OWN
IDENTITY & ACCESS
- Administer our identity provider and SSO, enforce MFA and phishing-resistant authentication, and improve how access is granted and removed
- Build periodic access reviews and apply least privilege across critical systems
- Manage access provisioning and offboarding for employees and contractors
ENDPOINTS & IT OPERATIONS
- Own MDM and EDR coverage across the device fleet, with clear configuration standards and security baselines
- Handle device provisioning, access requests, and the IT work that keeps the team operating securely
- Automate repetitive security and IT workflows where it improves coverage or reduces manual work
RISK & RESPONSE
- Partner with the Head of Security on vendor risk assessments
- Assess new SaaS tools and AI integrations before adoption, and give teams practical guidance on how to use them safely
- Act as a first responder for identity and endpoint incidents: investigate, contain, document, and escalate when needed
- Help define and maintain security policies as the program matures
YOU MIGHT BE RIGHT FOR THIS IF
- You’ve owned identity and endpoint systems in practice, including the messy work of getting coverage and adoption across a team
- You spot how an attacker could use a weak access path, unmanaged device, or new integration before it becomes an incident
- You can distinguish a real risk from a theoretical one and explain your recommendation clearly
- You’ve responded to incidents and can stay calm, gather facts, and make the next call under pressure
- You write guidance that non-technical teammates can follow
- You’ve helped build a security function early, when the process and tooling still needed to be defined
- You’re comfortable handling an access request or laptop issue one hour and improving a company-wide control the next
REQUIREMENTS
- Hands-on experience operating an enterprise identity platform, including SSO, MFA, and access policies
- Experience managing MDM and EDR tooling across a device fleet
- Experience responding to security incidents, compromises, or suspected breaches
- Ability to assess vendor and integration risk, including risks introduced by AI tools
- Scripting ability in Python or Bash for automation and basic tooling
- Strong written communication and the judgment to work independently
- Experience with blockchain or Web3 threats, cloud security, SIEM and detection engineering, or AI agents used in security operations is a plus.
WHY THIS MIGHT BE INTERESTING
Squads builds financial products for businesses, individuals, and developers on new money rails. The security work spans all of them. You’ll have ownership over the systems people use every day, a direct hand in how the company adopts new tools, and the chance to build controls that scale with the business.
You’ll work closely with the Head of Security in a small team where good judgment has an immediate effect. If you like building the security program while also operating it, you’ll have room to do both here.
Small team, high standards. Learn more about our core values here https://squads.xyz/company.
Location: United States of America
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 6M endpoints and 17M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
Reports to: Engineering Manager
Location: Remote US
Compensation Range: $200,000 to $220,000 base plus bonus and equity
What You’ll Do:
Huntress is looking for a highly strategic and collaborative Staff Software Engineer to drive the technical vision and architectural evolution of the Huntress Core Platform.
Our Core Platform contains the foundational components that power the entire Huntress product suite, including the notification system, onboarding, authentication, integrations, and APIs. While you will remain deeply hands-on developing the most complex features for the platform, your scope expands beyond standard delivery. You will act as the technical anchor for your team, solving our most complex scaling challenges and eliminating cross-team dependencies. You will design the systems that empower all other engineering teams to build faster and more securely, acting as a technical thought leader who ensures our architecture anticipates future growth as we scale to
protect the 99%
.
Responsibilities:
Design, implement and mentor engineers on the most complex features the team builds
Partner directly with the Engineering Manager to steer the team’s technical direction, improve overall team function, and set the standard for engineering excellence
Take ownership of cross-team dependencies, actively collaborating with multiple engineering teams to eliminate roadblocks and ensure smooth feature delivery.
Drive the Architectural Decision Record (ADR) process for major technical changes that impact the wider codebase or require alignment across multiple functions
Focus on the entire lifecycle of the system, including evolution, configuration and technical risk management
Mentor and coach engineers across the team, acting as a positive role model who promotes collaboration and engagement
What You Bring To The Team:
10+ years of experience developing complex software products, with a proven track record of acting as the senior technical anchor for a team
5+ years of programming in Ruby on Rails, ideally with experience managing and scaling large monoliths
Strong architectural experience, including a history of driving technical design decisions (ADRs) and managing system lifecycles, configuration and technical risk
Experience with AWS or other public cloud environments, Linux-based infrastructure and advanced database management at scale
Excellent technical, diagnostic, and troubleshooting skills
Ability to grasp new tools and technologies quickly
Ability to prioritize and execute multiple tasks at a time in a fast-paced environment, often operating independently
Demonstrated ability to take highly ambiguous requirements or multi-team initiatives and decompose them into actionable work for the team
Exceptional communication skills, with the ability to build strong relationships and coordinate smoothly across multiple teams, product managers, and leadership
Experience partnering directly with Engineering Managers or Product Leaders to set team-level technical strategy and balance tech debt with product delivery
Experience with AI coding tools and workflows, with the ability to help the wider team adopt them effectively, responsibly, and pragmatically
What We Offer:
100% remote work environment - since our founding in 2015
Generous paid time off policy, including vacation, sick time, and paid holidays
12 weeks of paid parental leave
Highly competitive and comprehensive medical, dental, and vision benefits plans
401(k) with a 5% contribution regardless of employee contribution
Life and Disability insurance plans
Stock options for all full-time employees
One-time $500 reimbursement for building/upgrading home office
Annual allowance for education and professional development assistance
$75 USD/month digital reimbursement
Access to the BetterUp platform for coaching, personal, and professional growth
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to
accommodations@huntresslabs.com
. Please note that non-accommodation requests to this inbox will not receive a response.
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our
Candidate Privacy Notice
for more details on our practices and your data privacy rights.
#BI-Remote
Location: Paris, France
Workplace: hybrid
TeamViewer provides a leading Digital Workplace platform that connects people with technology—enabling, improving and automating digital processes to make work work better. Our software solutions harness the power of AI and shape the future of digitalization.
We believe that our diverse teams and strong company culture are key to the success of our products and technologies, that hundreds of millions of users around the world and around 645,000 customers across all industries rely on. With more than 1,900 employees worldwide, we celebrate the unique perspectives and talents that each individual brings to the table and foster a dynamic work environment where new ideas thrive. Are you ready to join our team and make an impact?
Responsibilities
Technical Expertise & Demonstrations
Become a subject matter expert on TeamViewer’s IT and DEX product portfolio.
Deliver engaging product demonstrations, workshops, and webinars tailored to customer pain points.
Articulate the technical and business value of our solutions to both technical and non-technical audiences.
Discovery & Solution Design
Conduct detailed discovery sessions to understand customer challenges and objectives.
Design and propose customized solutions that align with customer needs and leverage TeamViewer’s capabilities.
Develop solution proposals, statements of work (SOWs), and technical documentation.
Proof of Value (POV/POC) & Pilot Management
Lead POV/POC and pilot engagements to validate solution effectiveness in customer environments.
Provide hands-on technical guidance and support throughout the validation process.
Analyze results and deliver actionable recommendations.
Sales Enablement & Collaboration
Partner with sales teams throughout the sales cycle, providing technical expertise and support.
Respond to RFx documents with accurate and compelling technical responses.
Collaborate with Product Management, Engineering, and Customer Success to ensure customer satisfaction and continuous improvement.
Thought Leadership & Market Awareness
Stay current on industry trends, competitive offerings, and emerging technologies.
Provide feedback to internal teams to influence product roadmap and innovation.
Requirements
Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience).
Fluent French & English language skills, as well as fluent Italian or Spanish language skills.
2+ years in technical pre-sales, solutions engineering, or enterprise IT consulting.
Deep understanding of enterprise IT environments, including endpoint management, remote connectivity, and DEX platforms.
Experience with SaaS applications such as RMM, ITSM, Asset Management, and Observability tools.
Hands-on experience with APIs, scripting, virtualization, cloud computing, and security protocols.
Proven ability to engage with C-level stakeholders and translate complex technical concepts into business value.
Strong presentation, communication, and documentation skills.
Willingness to travel up to 30% of the time.
Exceptional interpersonal skills – you excel at building trust and rapport with stakeholders at all levels, from IT professionals to C-level executives. You’re confident presenting complex solutions in a clear, compelling way.
Collaborative mindset with independent drive – you thrive both as a self-starter and as a team player. You know how to work effectively with sales professionals and cross-functional teams to achieve shared goals.
Professional presence and attention to detail – you bring a polished, reliable approach to every customer interaction, ensuring high-quality outcomes and experiences.
What we offer
Onsite Onboarding
in our HQ office for an optimal start
Great compensation and benefits packages
including company achievement bonus or sales bonus and regular salary reviews
Premiums for the private pension plan (
BAV
) up to the maximum amount are topped up by TeamViewer
Public transport friendly
offices
Option to
lease an e-bike
(Germany only)
Special terms
for local gyms
Access to
Corporate Benefits platform
with many
discounts
Regular
Team events
and company-wide celebrations
Open door policy
, no dress code rules, frequent all Hands and Leadership Lunches
Hybrid
and
Flexible
work time
Work From Abroad Program
allowing up to 40 days of work outside your contracting country
We celebrate
diversity
as one of core values, join and drive one of the c-a-r-e initiatives together with us!
TeamViewer is an equal opportunities employer and is committed to building an inclusive culture where everyone feels welcome and supported. We C-A-R-E and understand that our diverse, values-driven culture makes us stronger. As we continue to grow as a company, we also focus on enabling our employees to grow both personally and professionally. We are proud to have an open and embracing workplace environment that will empower you to be your best no matter your gender, civil or family status, sexual orientation, religion, age, disability, education level, or race.
If you require any accommodations or adjustments during the application or hiring process, including interview or onboarding support, please reach out to your Talent Acquisition Partner, who will be happy to support you.
Location: European Union, Kazakhstan, Georgia, Armenia, Serbia
Company Intro
At
Toloka AI
we create data that powers leading GenAI models and innovations. We work with frontier labs, big tech, renowned AI startups, enterprises and non-profit research organizations worldwide. We use a combination of Experts + Crowd + Tech Platform to teach AI models to reason and evaluate their efficacy and safety. We have experts in more than 50 different domains—from doctors and lawyers to physicists and engineers—and boast one of the most diverse global crowds,
representing over
100 countries and speaking 40+ languages
. We are a well-funded startup with an enviable portfolio of clients including
Anthropic
,
Amazon
,
Microsoft
,
poolside
,
Recraft
, and
Shopify
.
Recently, we secured strategic investment led by
Bezos Expeditions
with participation from
Mikhail Parakhin
,
CTO of Shopify
and board advisor to leading GenAI companies, who now serves as our Chairman of the Board. Our remote-first team is globally distributed around the world:
USA
,
UK
,
the Netherlands
,
Serbia
, and more. We are headquartered in Amsterdam.
About the Position
Toloka is growing rapidly, adding new platforms and infrastructure across multiple cloud environments. We are hiring a senior, hands-on security engineer to own infrastructure security and vulnerability management: Kubernetes and service-mesh security, cloud hardening, and vulnerability remediation.
This is a senior, self-directed role.
It requires the ability to define scope and drive execution independently, with ownership of core security tooling and processes from day one.
What you'll actually do
Own vulnerability management.
Operate and maintain the vulnerability-management platform. Ensure container images are scanned and patched on a defined cadence. Maintain supply-chain scanning tooling and its severity-classification configuration. Define and enforce remediation SLAs.
Own cloud security across multiple providers.
AWS, GCP, and Azure hardening, logging, and service-account governance.
Own Kubernetes and service-mesh security.
Operate the service mesh and maintain the policy-as-code rollout so that policy is enforced automatically.
Audit and secure infrastructure in newly added environments.
Review build pipelines and infrastructure in newer parts of the business as they come online, and remediate findings.
Contribute to security architecture and design review.
Review new integrations and internal systems, including AI agents running in production, for security risk.
Support workforce and endpoint security.
Contribute to VDI and browser-isolation initiatives as the program matures.
Use agentic tooling in your workflow.
Use coding agents for first-pass review of infrastructure-as-code, container configuration, and cloud policy, verifying findings against source configuration before acting on them.
Key Priorities for the First 6 Months
The first six months focus on establishing full ownership of infrastructure and vulnerability management.
Weeks 1–2
- Onboard to the cloud environment, Kubernetes architecture, and existing security tooling.
Month 1
- Establish ownership of the vulnerability-management process; findings triaged and remediated on a defined cadence.
Month 2
- Complete configuration of supply-chain scanning tooling; implement automated image scanning and patching; deploy initial policy-as-code rules.
Month 3
- Complete policy-as-code rollout in at least one environment; begin infrastructure audits in newly added environments.
Month 4
- Close outstanding cloud logging and service-account gaps; establish and enforce a documented multi-cloud hardening baseline.
Months 5–6
- Full ownership of infrastructure and cloud security as a domain; independently deliver security-architecture design reviews.
Core Tech Stack
Kubernetes and service mesh, policy-as-code tooling (Kyverno/OPA), Terraform, AWS/GCP/Azure, vulnerability-management and supply-chain scanning platforms, container tooling, CI/CD, and Git. Detections and access rules are managed as code through pull requests. Familiarity with coding/agentic tools for infrastructure review is expected.
What We Evaluate
Production experience hardening cloud infrastructure
- IAM, logging, service accounts, network security, on at least one major cloud provider (multi-cloud experience is a plus).
Kubernetes and container security
- service mesh (Cilium, Istio, or similar) and policy-as-code (Kyverno, OPA, or similar).
Vulnerability-management experience
- SCA/SAST tooling and SLA-driven remediation practice.
Fluency with coding agents
- experience using agentic tools for infrastructure-as-code review or investigation work, and verifying their output.
Ability to work independently at a senior level
- defining scope and priorities without detailed direction.
Clear written and verbal communication
- able to run design reviews and communicate risk to engineers and leadership.
Nice to Have, None Required
Experience securing multi-tenant or multi-identity-domain environments; supply-chain security tooling (SBOM, Socket, JFrog, or similar); secure-SDLC or AppSec experience; Terraform/IaC at scale; relevant certifications (e.g. AWS/GCP/Azure security specialties, CKS).
What We Can Offer
Contract (B2B) collaboration
, with a path into a project team if things go well;
Flexible, fully remote schedule (
40 hours per week
);
Work at the leading edge of AI development, alongside a dedicated and dynamic team of experts;
Projects with customers that are AI industry leaders and well-known household names;
Friendly community.
[Important Notice] Scam Alert Regarding Fake Job Postings
It has come to our attention that an individual or group is fraudulently impersonating Toloka to post fake jobs and solicit personal information from applicants.Please be aware:
Official Communication:
Our recruiting team will
only
contact you from an official "
toloka.ai
" email address. We will NEVER use Gmail, Yahoo, Tolokainc, toloka.inc, or other personal or seemingly business email accounts.
Our Process:
We will
never
ask for your bank account details, credit card number, or any fees as part of the application or interview process.
Official Listings:
All legitimate job openings are posted on our official careers page:
https://toloka.ai/careers#job-list
What to do:
If you see a suspicious job posting or have been contacted by someone you suspect is a scammer, please do not provide any personal information. Instead, report the incident to us directly at
security@toloka.ai
and report the profile/post to LinkedIn.We are taking this matter very seriously and are working with the appropriate parties to resolve it.
Thank you for your vigilance!
To learn how we collect, use, disclose, and store personal data, check out our
Privacy Notice
.
Location: New York, NY
Workplace: Hybrid
ABOUT THE COMPANY
Rain is the global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Our technology allows partners to move, store, and use stablecoins instantly and compliantly through global payment cards, rewards, on/offramps, wallets, and cross-border rails. As both a Visa and Mastercard Principal Member, Rain issues cards that work at more than 175 million merchant locations in over 220 countries and territories. Built natively for stablecoins and trusted by more than 100 organizations worldwide, Rain delivers secure, scalable infrastructure that makes money move freely and instantly around the world.
You will have the opportunity to deliver massive impact at a hypergrowth company backed by some of the top investors in fintech, crypto, and SaaS. In January 2026, we closed a $250M Series C led by ICONIQ, valuing Rain at $1.95B, with Sapphire Ventures, Dragonfly, Bessemer Venture Partners, Galaxy Ventures, FirstMark, Lightspeed, Norwest, and Endeavor Catalyst also participating. If you're curious, bold, and excited to help shape a borderless financial future, we'd love to talk.
OUR ETHOS
We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and impact the roadmap and vision of our company.
About the Role
AI agents are already booking travel, subscribing to software, running procurement end to end, and moving money on behalf of users — much of it through Rain. Our Agent Control Layer is the governing surface for that activity: it enforces approved counterparties, amounts, merchants, and task scope at initiation, before a transaction ever occurs, rather than reconciling damage after the fact.
We are hiring a Senior Product Manager to own that platform. This is a 0-to-1 role inside a category being defined in real time. You will own the developer-facing surface — APIs, SDKs, controls, docs — that teams building agents use to give them spending power safely. McKinsey projects $3–$5 trillion in global agentic commerce by 2030. The primitives that make it trustworthy have not been built yet. You will build them.
You will report to the Head of Product and work daily with engineering, risk and compliance, network partnerships, and the developers shipping on us.
What you'll do
• Define the primitives for agent authority: spend scopes, merchant and counterparty allowlists, velocity and amount ceilings, task-bound credentials, human-in-the-loop approvals, and clean revocation.
• Own scoped virtual cards for agents — cards provisioned for a single merchant, amount, and task, retired the moment the task completes.
• Extend the rest of Rain's stack (wallets, virtual accounts, onramps, offramps, cross-border payments) to agent initiators within the parameters our customers define.
• Treat the API as the product. Own endpoint design, error semantics, idempotency, webhooks, sandbox and simulation tooling, SDKs, and reference agents.
• Own documentation and the onboarding path with the same rigor as the product itself. Time-to-first-authorized-agent-transaction is your metric.
• Run a tight design-partner loop with agent builders — read their integration code, sit in their debugging sessions, ship against what you find.
• Build the roadmap from first principles: form a thesis on where agentic commerce goes next, sequence bets accordingly, and kill what isn't working quickly.
• Partner with risk and compliance on Know Your Agent — agent identity, attestation, delegated authority, auditability, and dispute handling in a world where the cardholder wasn't the one who clicked.
• Represent Rain's technical point of view in Agentic Payments Alliance working groups and with Visa, Mastercard, and stablecoin partners as standards take shape.
• Write the specs, launch posts, and positioning that teach the market what controlled agentic payments actually means.
You’ll likely succeed if you have
• 8+ years in product management, with meaningful time on a developer-facing platform, API, or infrastructure product. You have shipped something engineers chose to build on.
• Technical depth. You read API diffs, write your own queries, prototype against your own endpoints, and hold your own in an architecture review. You don't need to have been an engineer; you do need engineers to take you seriously.
• 0-to-1 instincts. You have taken a product from a blank page to real usage in an ambiguous market, and you're comfortable with a roadmap that changes because the ground moved.
• Payments or fintech fluency, or the obvious appetite to acquire it fast. Authorization flows, issuing, interchange, chargebacks, settlement, KYC/KYB - you know these, or you'll learn them in weeks rather than quarters.
• Judgment under risk. Every control you design trades capability against loss. You can reason about that tradeoff explicitly and defend where you landed.
• Strong writing. At Rain, specs, docs, and launch narratives are the job, not overhead.
• Bias for motion. You would rather ship a narrow thing this month and learn from it than scope a broad thing for two quarters.
Bonus attributes
• Hands-on experience building or deploying AI agents - tool use, orchestration frameworks, MCP, evals.
• Stablecoin or onchain payments background: settlement, custody, treasury operations, or wallet infrastructure.
• Experience working directly with card networks, issuing processors, or sponsor banks.
• Time at an early-stage company during a period of fast scaling.
THINGS THAT ENABLE A FULFILLING, HEALTHY AND HAPPY EXPERIENCE AT RAIN:
Unlimited time off 🌴 Unlimited vacation can be daunting, so we require Rainmakers to take 10 days minimum for themselves.
Flexible working ☕ We support a flexible workplace – work from home, come into an office, or both. We want everyone to work in an environment where they're their most confident and productive selves. New Rainmakers receive a stipend to set up a comfortable home workspace.
Easy to access benefits 🧠 For US Rainmakers, we cover 95% of your health, dental, and vision plan costs and 90% for your dependents, plus a 100% company-subsidized life insurance plan.
Retirement goals💡 Plan for the future with confidence. We offer a 401(k) with a 4% company match.
Equity plan 📦 Every Rainmaker gets an equity option plan so we all benefit from our success.
Health and Wellness 📚 High performance begins from within. Rainmakers receive a monthly stipend to be used for eligible health and wellness spending like gym memberships/fitness classes, massages, acupuncture - whatever recharges you!
In-office meals 🍜 Rainmakers working from the office enjoy lunch and dinner on us, covered with a DoorDash credit.
Team summits ✨ Summits play an important role at Rain. Time together helps us build relationships and a common destiny. Expect team and company offsites, both domestic and international.
Location: US Remote; New England; Atlanta; North Carolina; New York; Boston; Florida
Cyberhaven is looking for a Chief of Staff for Engineering to collaborate and perform as an operating partner and force multiplier for engineering leadership, driving operating cadence, cross-organizational execution, and data-driven decision making across the entire engineering org. This role is accountable for turning strategic priorities into clear execution plans, and for giving leadership the visibility, metrics, and follow-through they need to run engineering like a well-oiled machine.
This is a hybrid role that blends program management, project management, and executive operations: the person in this role will sit close to engineering leadership, represent their priorities across the org, and be the connective tissue between strategy and day-to-day execution. Influence and impact come from judgment, trust, and cross-functional credibility rather than direct authority.
This role also serves as the primary architect of engineering leadership's monthly and quarterly business reviews, all-hands content, org planning, and leadership offsites providing decision support, surfacing risk, and driving follow-through on the company's highest-priority engineering initiatives.
This role goes well beyond traditional chief of staff work. It requires strong executive presence to represent leadership credibly in front of the org and external stakeholders, deep comfort with data and metrics to turn fragmented signals into clear decision support, and an AI-forward mindset to automate the reporting and operating mechanisms that let Cyberhaven scale how it plans, tracks, communicates, and reviews its work.
WHAT YOU'LL DO
STRATEGIC PARTNERSHIP AND EXECUTIVE SUPPORT
- Act as a trusted advisor and thought partner to engineering leadership, helping translate strategic priorities into clear execution plans, success criteria, and operating mechanisms across the org
- Own the engineering leadership operating cadence, including staff meetings, monthly and quarterly business reviews, org planning, and leadership offsites, setting agendas, preparing materials, and driving follow-through on decisions and action items
- Represent engineering leadership's priorities across the organization, ensuring alignment between engineering, product, and go-to-market teams on key initiatives
- Prepare executive-facing communications, board and all-hands content, and cross-functional updates on behalf of engineering leadership
- Act as a sounding board and extension of leadership on sensitive or ambiguous organizational topics, including headcount planning, org design, and prioritization tradeoffs
- Build trust and credibility across engineering, product, and business stakeholders to effectively drive alignment without formal authority
PROGRAM AND PROJECT MANAGEMENT
- Own end-to-end planning, execution, and coordination across complex, multi-team programs and time-sensitive strategic projects for engineering leadership
- Improve predictability in Cyberhaven's release and planning model by tracking scope changes, readiness risks, and cross-team dependencies
- Build and maintain review cadences, status updates, and action follow-up systems that surface execution risk and areas needing intervention across teams and programs
- Support high-priority or ambiguous engineering initiatives that need additional structure, executive visibility, and follow-through, often stepping in where no clear owner exists
- Improve data hygiene and governance in systems like Jira and related planning artifacts so that ownership, status, and progress signals are reliable
DATA AND METRICS-DRIVEN OPERATIONS
- Define and standardize success metrics across quality, release health, velocity, and team health to drive greater predictability and accountability
- Turn operational signals from across the org into clear, data-backed reporting and decision support for engineering leadership
- Own the metrics and narrative behind monthly and quarterly business reviews, ensuring leadership has accurate, timely, and actionable data
- Bring a data-driven lens to org health, from delivery metrics to team sentiment, to help leadership spot risk early
AI-FORWARD AUTOMATION
- Build AI-assisted dashboards and reporting workflows that improve visibility into program health, release scope, delivery risk, and team performance
- Create automations that connect tools like Jira, Notion, GitHub, and Slack to surface planning, execution, release, and other delivery signals
- Automate recurring chief of staff and program management processes such as status collection, follow-up tracking, review preparation, and stakeholder reporting
- Use these workflows to improve business review inputs, leadership updates, and recurring status reporting while reducing manual status chasing
WHO YOU ARE
- 7+ years of experience in a role combining program management, project management, and executive or leadership support
- Prior experience as a Chief of Staff or Engineering Leadership roles a plus
- Strong executive presence and the judgment to represent leadership credibly across the org and with external stakeholders
- A data-driven, metrics-driven approach to decision making, with the ability to turn fragmented operational signals into clear reporting and insight
- Proven ability to drive accountability, coordination, and follow-through across engineering and product teams without direct authority
- Strong written and verbal communication skills, including experience owning monthly and quarterly business reviews, executive-facing updates, and cross-functional status reporting
- Comfort using automation and AI to improve reporting quality, operating efficiency, and recurring workflow execution
- Good judgment in prioritization, escalation, and leadership support in ambiguous or fast-moving situations
- Experience owning QBRs, executive reporting, all-hands content, or org planning processes
- Familiarity with DORA-style metrics, SLO/SLA thinking, release hygiene, and delivery scorecards
- Experience building AI-assisted dashboards, automations, or reporting systems
- Experience working in security, SaaS, endpoint, platform, or infrastructure-heavy environments
- Experience supporting globally distributed engineering organizations
- Prior experience transitioning from a technical or program management background into a Chief of Staff or executive operations role
- Located in the Eastern Timezone to support our Global team.
Joining Cyberhaven means joining the team building Data Security for the Agentic Enterprise. Traditional tools fall short. Cyberhaven traces the full lifecycle of your data, adapting protection to changing context, so protection moves with the way people actually work, not against it. AI Changed Work. We Protect It.
Backed by $250M from leading investors like Khosla and Redpoint, our team includes leaders who built industry-defining technologies at CrowdStrike, Palo Alto Networks, Meta, Google, and more. This role lets you shape the future of data security, working alongside people driven to protect workflows, not just data, for customers who cannot afford to slow down to stay safe.
AI Tools Disclosure: As part of Cyberhaven's hiring process, we use recruiting tools that include AI-powered features to help with tasks like scheduling, note-taking, workflow automation, and other recruiting activities ("AI Tools"). The AI Tools may process information you provide during the application and interview process. When AI-assisted interview note taking is used, candidates are notified in advance and have the option to opt out of the AI-assisted interview note taking.
Cyberhaven is committed to creating a diverse environment and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
Location: Netherlands
At Catawiki, every day brings the extraordinary! Whether it’s
Daniel Ricciardo’s Formula 1 Car
, a
Woolly Mammoth’s Skeleton
,
Lady Gaga's Jumpsuit
or
Usain Bolt’s running shoe
, we encounter exceptional objects every day.
We’re a one-of-a-kind marketplace for buying and selling special objects. Each week, more than 100,000 unique items are auctioned, all carefully curated by our passionate in-house experts.
Having sold over 25 million unique objects, our mission is to become the world’s most popular destination for special objects. As a growing, diverse and sustainable scale-up, we proudly live by three core values. If these values resonate with you, we’d love to explore how you can join us.
Taking ownership and driving impact
Being open to change and feedback
Being passionate about our mission and our customers.
About the role
As IT Support Lead, you will play a central role in delivering a reliable, secure, and high-quality technology experience for Catawiki employees. You will lead the day-to-day IT support function, ensuring colleagues receive timely and effective assistance while continuously improving our processes, service standards, and employee experience.
This is a hands-on leadership role combining technical support, operational ownership, team development, and stakeholder management. You will remain closely connected to day-to-day support while helping the team work consistently and effectively.
You will oversee the employee IT lifecycle from onboarding to offboarding, with a focus on frontline service delivery, endpoint support, eSIM services, IT inventory, logistics, workplace technology, and operational improvements.
What you’ll do
IT Support Leadership & Employee Experience
Lead the daily IT support operation, ensuring incidents and requests are prioritised, tracked, communicated, and resolved effectively.
Provide hands-on support across hardware, software, identity, access, network, and collaboration tools.
Serve as an escalation point for complex technical issues and employee-impacting incidents.
Establish and maintain high standards for IT support quality, responsiveness, documentation, and customer experience.
Coach, mentor, and support IT colleagues, helping them develop their technical skills and adopt consistent ways of working.
Monitor support trends, service levels, recurring issues, and employee feedback to identify improvement opportunities.
Build and maintain a knowledge base of technical documentation, how-to guides, and FAQs.
Proactively improve the employee IT experience through scalable processes, automation, and user-friendly solutions.
Help ensure a smooth and consistent employee experience throughout onboarding, internal transfers, and offboarding.
IT Systems Support & Service Operations
Act as the primary operational contact for employees requiring support with core IT systems and workplace technology.
Support the day-to-day operation of Okta, Google Workspace, Slack, Jira/Confluence, Jamf, and other business applications.
Handle user-facing support, troubleshooting, access requests, onboarding activities, and issue escalation in line with established processes and policies.
Carry out approved operational tasks such as user provisioning, access changes, device enrolment, software deployment, and equipment configuration.
Escalate complex platform issues, recurring problems, and system risks with clear documentation and impact assessment.
Support the testing, rollout, and adoption of system changes, upgrades, and new tools.
Maintain accurate support documentation, operating procedures, and knowledge-base articles.
Gather employee feedback and recurring support insights to help improve system configuration, processes, and usability.
Manage eSIM services, including provisioning, activation, replacement, deactivation, troubleshooting, and lifecycle administration.
Manage relationships with eSIM providers and ensure reliable service, clear ownership, and effective issue resolution.
IT Operations, Inventory & Logistics
Own IT asset management, including procurement, inventory, allocation, repairs, replacement, and lifecycle management.
Maintain accurate records of laptops, mobile devices, accessories, eSIMs, software licences, and other IT equipment.
Coordinate equipment delivery, collection, storage, repairs, replacement, and secure disposal.
Ensure employees receive the right equipment, connectivity, and access at the right time.
Manage relationships with hardware, software, eSIM, logistics, and other IT service providers.
Track orders, deliveries, stock levels, warranties, repairs, and supplier performance.
Identify opportunities to improve IT inventory controls, logistics processes, and equipment availability.
Support office technology, including Wi-Fi, printers, meeting-room equipment, conference-room AV, and other workplace infrastructure.
Coordinate and contribute to IT projects such as office moves, system upgrades, technology rollouts, and infrastructure improvements.
Security, Compliance & Risk Management
Help enforce IT security policies, standards, and procedures across the organisation.
Maintain strong controls around identity, access, devices, software, eSIMs, and company data.
Respond to and remediate security incidents, alerts, and vulnerabilities in collaboration with the broader IT and security teams.
Support access reviews, device compliance checks, audits, and vulnerability assessments.
Promote security awareness and help employees adopt secure working practices.
Ensure IT processes are documented and aligned with relevant compliance and data-protection requirements.
Escalate potential security risks promptly and help ensure appropriate follow-up actions are completed.
Service Improvement & Stakeholder Management
Develop and improve IT support processes, workflows, service catalogues, escalation paths, and operating procedures.
Use support data and employee feedback to identify recurring issues and improvement opportunities.
Partner with IT and business stakeholders on system changes, process improvements, and technology rollouts.
Communicate clearly during incidents, changes, and service disruptions, keeping stakeholders informed.
Contribute to IT planning and prioritisation by providing insight from day-to-day employee support.
Help create a consistent and scalable IT service as Catawiki continues to grow.
Promote a culture of ownership, collaboration, knowledge sharing, and continuous improvement.
What you’ll bring
3–5 years of experience in IT support, workplace technology, IT operations, or a related field.
Experience leading, mentoring, or managing people, ideally with 2–3 years in a team-lead or people-management capacity.
A track record of combining hands-on technical support with operational ownership and team leadership.
Strong experience supporting users across macOS, Google Workspace, Slack, Jira, Okta, Jamf, and related workplace technologies.
Experience managing the employee IT lifecycle, including onboarding, offboarding, access requests, and equipment provisioning.
Experience with mobile connectivity, eSIM administration, telecom providers, or related IT services is a strong advantage.
Experience managing IT assets, inventory, logistics, vendors, and office technology.
Ability to work effectively within established processes for system changes, access management, and incident escalation.
A practical understanding of IT security principles, device compliance, access controls, and incident response.
Strong organisational skills and the ability to prioritise effectively in a fast-paced environment.
Excellent problem-solving skills, with a focus on root-cause analysis and sustainable solutions.
A customer-focused mindset and the ability to build trust with employees at all levels.
Strong communication and stakeholder-management skills in English, both written and verbal. Additional Portuguese language skills are a plus.
The ability to coach and support colleagues, share knowledge, and create clarity in a changing environment.
A proactive, resilient, and collaborative approach, with a strong sense of ownership.
A hands-on mentality and willingness to be physically present in the office four days a week.
A passion for learning and staying current with emerging IT, security, and workplace technology trends.
Why You'll Love Working with Us
Create a visible impact
by working at scale in a global organisation serving millions of customers across 80+ categories. In our flat structure, every role has a broad scope and directly impacts both our customers and the business.
Learn and grow
through our Learning & Development initiatives, including clear development plans and mentorship programmes to support your career progression.
A culture of connection defines us
. We’re a passionate, diverse team of 800+ Catawikians representing 60+ nationalities. We foster an inclusive and queer-friendly environment where everyone is encouraged to bring their full self to work.
Celebrate life’s moments with us.
You’ll receive a €100 Catavoucher when you join, a €50 Catavoucher on your birthday, and an extra day off each year to “Pursue Your Passion
”
. We also offer additional leave for key work anniversaries and important life events. Benefits may vary by location.
Our Offices and Way of Working
Our vibrant offices in Amsterdam and Lisbon are designed to inspire collaboration. Most Catawikians operate in a hybrid setup, combining office-based and remote work, with a minimum of two days per week in the office, unless a role is explicitly stated as fully remote or fully office-based.
Interested?
Apply with an English CV and Cover Letter. By applying, you agree to
Catawiki’s Applicant Privacy Policy.
If you’re excited about this role but don’t meet every requirement, we still encourage you to apply anyway. You may be just the right candidate for this or other roles.
We may use artificial intelligence (AI) tools to support the review of your application. AI may help us assess how your experience matches the requirements of the role, but hiring decisions are always made by our recruitment team
Location: Zurich, Switzerland
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
As a Senior Machine Learning Engineer on the Applied AI team at Nebius Token Factory, you will own model and endpoint optimization from model artifacts through production deployment. Your work will span model internals, quantization and model compression, speculative decoding, KV-cache optimization, inference engines, serving architecture, and benchmarking to improve latency, throughput, memory efficiency, GPU utilization, and cost per token while preserving quality and reliability.
You will work with kernel and platform engineers to investigate serving problems, compare configurations, and resolve performance and quality regressions. You will evaluate model- and engine-level optimizations together with distributed inference designs, including request routing, scheduling, prefill/decode coordination, and multi-node GPU execution. Your improvements will be validated through reproducible benchmarks and safe production rollouts under real-world workloads.
Your responsibilities
Own optimization projects for specific model families, customer endpoints, or serving backends.
Compare inference engines and recommend serving configurations suited to individual workloads.
Diagnose model-quality and performance regressions during production rollouts.
Improve LLM and VLM endpoint latency, throughput, memory efficiency, GPU utilization, quality, and cost per token.
Deploy, configure, benchmark, and extend engines such as vLLM, SGLang, TensorRT-LLM, Triton Inference Server, and NVIDIA Dynamo.
Develop production model-compression workflows covering quantization, quantization-aware training, distillation, low-bit serving, and accuracy recovery.
Implement or integrate speculative decoding, draft-model approaches, KV-cache optimization, prefix caching, chunked prefill, continuous batching, and disaggregated prefill/decode serving. For prefill–decode disaggregation (PDD), evaluate KV-cache transfer, worker placement, and capacity balancing to determine which workloads benefit from the architecture.
Design and improve LLM request routers and scheduling policies that balance worker utilization, queueing, request characteristics, and KV-cache locality while meeting latency and reliability targets.
Scale dense and mixture-of-experts inference across multiple GPU nodes. Select and tune tensor, pipeline, data, and expert parallelism—including wide expert parallelism (WideEP)—with attention to hardware topology, expert load balance, and communication overhead.
Build reproducible benchmark harnesses measuring TTFT, TPOT, tokens per second per GPU, p95/p99 latency, GPU memory, reliability, and cost per token. Validate architecture choices under representative traffic and consistent GPU budgets.
Collaborate with GPU kernel and platform engineers to trace bottlenecks across model code, kernels, runtime, scheduler, gateway, and cluster layers.
Produce design documents, performance reports, rollout plans, and customer-facing technical explanations.
Must-haves
Strong engineering skills in Python and PyTorch.
Hands-on experience deploying or optimizing LLM, VLM, or high-throughput transformer inference.
Practical knowledge of at least one modern inference stack, such as vLLM, SGLang, TensorRT-LLM, Triton Inference Server, NVIDIA Dynamo, Ray Serve, KServe, or an equivalent internal system.
A strong understanding of transformer inference bottlenecks involving KV cache, attention, memory bandwidth, batching, parallelism, and long-context serving.
Ability to quantify trade-offs among latency, throughput, quality, utilization, and cost.
Experience designing or optimizing distributed inference system architecture, with hands-on work in one or more areas such as request routing, distributed scheduling, PDD, multi-node inference, or expert parallelism.
Strong communication and collaboration skills across research, kernel, infrastructure, product, and customer teams.
Nice-to-haves
Experience with quantization-aware training, post-training quantization, FP8, INT8, INT4, NVFP4, MXFP4, AWQ, GPTQ, or SmoothQuant.
Experience with distillation, speculative decoding, EAGLE, Medusa, multi-token prediction, or related inference acceleration methods.
Experience supporting agentic workloads involving tool calling, structured outputs, streaming APIs, high concurrency, and multi-step orchestration.
Familiarity with CUDA or Triton; the role does not require kernel engineering to be the candidate’s primary specialization.
Contributions to open-source projects such as vLLM, SGLang, TensorRT-LLM, FlashInfer, LMCache, PyTorch, Triton, Ray, or KServe.
Implementation experience with cache-aware request routing, PDD, or WideEP, including diagnosing communication bottlenecks and load imbalance.
Familiarity with GPU communication libraries and interconnects, such as NCCL, NVLink, InfiniBand, or RoCE.
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: Amsterdam, Netherlands; Berlin, Germany; Israel; Remote - Europe
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
As a Senior Machine Learning Engineer on the Applied AI team at Nebius Token Factory, you will own model and endpoint optimization from model artifacts through production deployment. Your work will span model internals, quantization and model compression, speculative decoding, KV-cache optimization, inference engines, serving architecture, and benchmarking to improve latency, throughput, memory efficiency, GPU utilization, and cost per token while preserving quality and reliability.
You will work with kernel and platform engineers to investigate serving problems, compare configurations, and resolve performance and quality regressions. You will evaluate model- and engine-level optimizations together with distributed inference designs, including request routing, scheduling, prefill/decode coordination, and multi-node GPU execution. Your improvements will be validated through reproducible benchmarks and safe production rollouts under real-world workloads.
Your responsibilities
Own optimization projects for specific model families, customer endpoints, or serving backends.
Compare inference engines and recommend serving configurations suited to individual workloads.
Diagnose model-quality and performance regressions during production rollouts.
Improve LLM and VLM endpoint latency, throughput, memory efficiency, GPU utilization, quality, and cost per token.
Deploy, configure, benchmark, and extend engines such as vLLM, SGLang, TensorRT-LLM, Triton Inference Server, and NVIDIA Dynamo.
Develop production model-compression workflows covering quantization, quantization-aware training, distillation, low-bit serving, and accuracy recovery.
Implement or integrate speculative decoding, draft-model approaches, KV-cache optimization, prefix caching, chunked prefill, continuous batching, and disaggregated prefill/decode serving. For prefill–decode disaggregation (PDD), evaluate KV-cache transfer, worker placement, and capacity balancing to determine which workloads benefit from the architecture.
Design and improve LLM request routers and scheduling policies that balance worker utilization, queueing, request characteristics, and KV-cache locality while meeting latency and reliability targets.
Scale dense and mixture-of-experts inference across multiple GPU nodes. Select and tune tensor, pipeline, data, and expert parallelism—including wide expert parallelism (WideEP)—with attention to hardware topology, expert load balance, and communication overhead.
Build reproducible benchmark harnesses measuring TTFT, TPOT, tokens per second per GPU, p95/p99 latency, GPU memory, reliability, and cost per token. Validate architecture choices under representative traffic and consistent GPU budgets.
Collaborate with GPU kernel and platform engineers to trace bottlenecks across model code, kernels, runtime, scheduler, gateway, and cluster layers.
Produce design documents, performance reports, rollout plans, and customer-facing technical explanations.
Must-haves
Strong engineering skills in Python and PyTorch.
Hands-on experience deploying or optimizing LLM, VLM, or high-throughput transformer inference.
Practical knowledge of at least one modern inference stack, such as vLLM, SGLang, TensorRT-LLM, Triton Inference Server, NVIDIA Dynamo, Ray Serve, KServe, or an equivalent internal system.
A strong understanding of transformer inference bottlenecks involving KV cache, attention, memory bandwidth, batching, parallelism, and long-context serving.
Ability to quantify trade-offs among latency, throughput, quality, utilization, and cost.
Experience designing or optimizing distributed inference system architecture, with hands-on work in one or more areas such as request routing, distributed scheduling, PDD, multi-node inference, or expert parallelism.
Strong communication and collaboration skills across research, kernel, infrastructure, product, and customer teams.
Nice-to-haves
Experience with quantization-aware training, post-training quantization, FP8, INT8, INT4, NVFP4, MXFP4, AWQ, GPTQ, or SmoothQuant.
Experience with distillation, speculative decoding, EAGLE, Medusa, multi-token prediction, or related inference acceleration methods.
Experience supporting agentic workloads involving tool calling, structured outputs, streaming APIs, high concurrency, and multi-step orchestration.
Familiarity with CUDA or Triton; the role does not require kernel engineering to be the candidate’s primary specialization.
Contributions to open-source projects such as vLLM, SGLang, TensorRT-LLM, FlashInfer, LMCache, PyTorch, Triton, Ray, or KServe.
Implementation experience with cache-aware request routing, PDD, or WideEP, including diagnosing communication bottlenecks and load imbalance.
Familiarity with GPU communication libraries and interconnects, such as NCCL, NVLink, InfiniBand, or RoCE.
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Limassol, Cyprus
ГибридSan Francisco, California; New York, New York
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.