Вакансии

Location: United States, Los Angeles, CA Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Sony Interactive Entertainment is seeking an experienced and collaborative Regional Security Manager to lead physical security operations across the Americas (AMER) region. Reporting to the Director, Global Security Operations, this role will oversee a team responsible for regional security programs, incident response, crisis support, and operational readiness across SIE offices, studios, and events. The ideal candidate brings strong operational leadership, sound judgment, and the ability to build trusted partnerships across a global organization. This position plays a key role in helping create safe, secure, and resilient environments for employees, visitors, and business operations. What You’ll Do Regional Security Leadership Lead and support a regional team of security professionals across the AMER region. Partner with global security teams to help maintain consistent standards, processes, and operational practices. Contribute to the development and execution of regional security strategies aligned with business priorities. Use metrics and operational insights to evaluate effectiveness and identify opportunities for improvement. Support budget planning, resource management, and vendor oversight within the security function. Physical Security Operations Oversee physical security programs, policies, and procedures across offices and studio locations. Conduct risk assessments and coordinate security reviews to identify and address potential vulnerabilities. Collaborate with internal stakeholders and external partners to strengthen site security and emergency preparedness. Manage third-party security providers to ensure quality service delivery and alignment with organizational expectations. Provide guidance and operational support to regional sites on security best practices and compliance. Incident & Crisis Response Lead or support responses to workplace security incidents and safety-related matters. Partner closely with Workplace, Legal, HR/People, and other teams to support investigations and incident management. Prepare clear documentation, reporting, and recommendations following incidents or security reviews. Support emergency planning activities, tabletop exercises, and preparedness initiatives. Coordinate response efforts during significant incidents impacting employees, facilities, or operations. Event Security Support security planning and operational readiness for PlayStation events, activations, and executive engagements. Conduct event-related risk assessments and coordinate appropriate security measures. Provide on-site leadership and incident management support during key regional events. Collaboration & Communication Build strong partnerships with teams across HR, IT, Workplace, Legal, and other business functions. Communicate regularly with leadership regarding security priorities, risks, and operational updates. Maintain relationships with industry peers, security organizations, and external partners to stay informed on emerging trends and best practices. What We’re Looking For 8+ years of experience in physical security, corporate security operations, investigations, law enforcement, military, intelligence, or a related field. Demonstrated experience managing security initiatives across multiple locations or regions. Strong leadership and people management skills, including coaching and team development. Ability to assess complex situations, make informed decisions, and communicate effectively during incidents. Excellent collaboration and stakeholder management skills across diverse teams and functions. Experience managing vendors, contractors, or third-party security providers. Familiarity with crisis management, emergency response, and event security operations. Flexibility to support occasional evening/weekend work and regional travel as needed. Preferred Qualifications Experience in technology, gaming, entertainment, or other fast-paced global organizations. Industry certifications such as CPP (Certified Protection Professional) or similar credentials. Bachelor’s degree in Criminal Justice, Security Management, Emergency Management, Business, or a related field — or equivalent professional experience. Location: This position can be based in one of our California offices, including San Mateo, San Diego, Aliso Viejo, or Los Angeles. * Hybrid role with an expectation to work in-office on average 2 days per week #LI-GM1 At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. The estimated base pay range for this role is listed below. $150,700 — $226,100 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: United States, Aliso Viejo, CA Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Sony Interactive Entertainment is seeking an experienced and collaborative Regional Security Manager to lead physical security operations across the Americas (AMER) region. Reporting to the Director, Global Security Operations, this role will oversee a team responsible for regional security programs, incident response, crisis support, and operational readiness across SIE offices, studios, and events. The ideal candidate brings strong operational leadership, sound judgment, and the ability to build trusted partnerships across a global organization. This position plays a key role in helping create safe, secure, and resilient environments for employees, visitors, and business operations. What You’ll Do Regional Security Leadership Lead and support a regional team of security professionals across the AMER region. Partner with global security teams to help maintain consistent standards, processes, and operational practices. Contribute to the development and execution of regional security strategies aligned with business priorities. Use metrics and operational insights to evaluate effectiveness and identify opportunities for improvement. Support budget planning, resource management, and vendor oversight within the security function. Physical Security Operations Oversee physical security programs, policies, and procedures across offices and studio locations. Conduct risk assessments and coordinate security reviews to identify and address potential vulnerabilities. Collaborate with internal stakeholders and external partners to strengthen site security and emergency preparedness. Manage third-party security providers to ensure quality service delivery and alignment with organizational expectations. Provide guidance and operational support to regional sites on security best practices and compliance. Incident & Crisis Response Lead or support responses to workplace security incidents and safety-related matters. Partner closely with Workplace, Legal, HR/People, and other teams to support investigations and incident management. Prepare clear documentation, reporting, and recommendations following incidents or security reviews. Support emergency planning activities, tabletop exercises, and preparedness initiatives. Coordinate response efforts during significant incidents impacting employees, facilities, or operations. Event Security Support security planning and operational readiness for PlayStation events, activations, and executive engagements. Conduct event-related risk assessments and coordinate appropriate security measures. Provide on-site leadership and incident management support during key regional events. Collaboration & Communication Build strong partnerships with teams across HR, IT, Workplace, Legal, and other business functions. Communicate regularly with leadership regarding security priorities, risks, and operational updates. Maintain relationships with industry peers, security organizations, and external partners to stay informed on emerging trends and best practices. What We’re Looking For 8+ years of experience in physical security, corporate security operations, investigations, law enforcement, military, intelligence, or a related field. Demonstrated experience managing security initiatives across multiple locations or regions. Strong leadership and people management skills, including coaching and team development. Ability to assess complex situations, make informed decisions, and communicate effectively during incidents. Excellent collaboration and stakeholder management skills across diverse teams and functions. Experience managing vendors, contractors, or third-party security providers. Familiarity with crisis management, emergency response, and event security operations. Flexibility to support occasional evening/weekend work and regional travel as needed. Preferred Qualifications Experience in technology, gaming, entertainment, or other fast-paced global organizations. Industry certifications such as CPP (Certified Protection Professional) or similar credentials. Bachelor’s degree in Criminal Justice, Security Management, Emergency Management, Business, or a related field — or equivalent professional experience. Location: This position can be based in one of our California offices, including San Mateo, San Diego, Aliso Viejo, or Los Angeles. * Hybrid role with an expectation to work in-office on average 2 days per week #LI-GM1 At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. The estimated base pay range for this role is listed below. $150,700 — $226,100 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: Montpellier, France Workplace: Hybrid We’re a team of experts pushing the limits of what’s possible, united by our common goal to unlock true freedom through digital ownership, making technology accessible for all. We believe in a world where users, creators and enterprises manage their value with ownership and freedom. Our curiosity drives us to innovate, empowering individuals on a global scale. We believe change is constant and our team moves forward as one, with a culture of problem-solving where every employee is empowered and supported to challenge tradition and create solutions. Our mission is simple: to make self-custody accessible and give people the keys to their own financial futures. If you want to make a true impact, we want you to join us at Ledger. At Ledger, we’re proud to be the global platform for digital assets and Web3, with over 20% of the world’s crypto assets secured through our Ledger devices. With our headquarters in Paris, and offices in Vierzon, Grenoble, Montpellier, London, Portland, Geneva, Zurich and Central Singapore, we have a team of around 600 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets – including the Ledger hardware wallets line with more than 7.5 millions units already sold in 200 countries. The team To sustain the company's growth, Ledger is looking for an Engineering Manager to lead the Cloud Wallet team. This team is responsible for the backend services that power blockchain account management, transaction processing, and on-chain data aggregation across all Ledger wallet surfaces, from Ledger Live to the Ledger Enterprise platform. We believe in the power of functional programming to build robust and scalable platforms. We take time to share, challenge, and grow together through bi-weekly knowledge-sharing sessions, meetups, conferences, and open source contributions. What you’ll be doing - Lead and grow your team. Own hiring, onboarding, performance management, and the professional development of your engineers. Run regular 1:1s, support career growth, and build a high-performing, engaged team. - Drive technical delivery. Own the team's roadmap and PI planning commitments. Ensure on-time, high-quality delivery across the team's service portfolio and ongoing architectural initiatives while coordinating across dependencies with Coin Integration, Ledger Enterprise, Ledger Live, and Infrastructure teams. - Maintain operational excellence. Own SLIs/SLOs for team services. Lead incident response posture and observability standards for production-critical systems. - Architect for scale and reliability. Partner with tech leads and staff engineers to drive sound technical decisions on a polyglot stack (TypeScript, Scala) handling high throughput, multi-chain complexity, and strict reliability requirements. Review ADRs and ensure architectural coherence. - Champion engineering practices. Drive strong standards on CI/CD, testing (including end-to-end on testnets), code review quality, technical debt management, and AI-assisted engineering workflows. - Contribute to org-level initiatives. Participate in cross-BU architectural working groups, PI planning, and engineering efficiency programs. You will collaborate cross-functionally with: - The Blockchain platform team for data model alignment, indexing and event streaming - The Coin Integration team for coin module ownership and new blockchain integrations - The Ledger Enterprise team for enterprise wallet features and operational alignment - The Ledger Live / Wallet XP teams as consumers of the team's backend APIs - The Infrastructure and SRE teams for platform reliability and scalability - The Product team for roadmap prioritization and customer-driven requirements - The Security team for vulnerability analysis and compliance What we’re looking for - Proven experience (3+ years) managing backend engineering teams in a product-driven, distributed environment - Strong technical background in backend systems. You can credibly challenge architectural decisions, review design documents, and unblock engineers on hard technical problems - Experience operating services at scale and familiarity with high-availability architectures, event-driven systems, and observability tooling (RabbitMQ, PostgreSQL, Flink, NATS, Datadog or equivalent) - Comfortable with polyglot stacks. The team works across TypeScript and Scala; you don't need to be an expert in both but need enough depth to lead effectively - Track record of navigating complex multi-team dependencies and influencing across organizational boundaries without direct authority - Excellent written and verbal communication skills in English - Bonus points: exposure to blockchain or crypto infrastructure (account indexing, transaction lifecycle, UTXO vs account-based models), and a genuine interest in the Web3 space

Location: Serbia Who we are: Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in minutes, it just works—and is always free for the first 200 endpoints, with no functional limitations. By pioneering autonomous OS and third-party patching, peer-to-peer patch distribution, and real-time vulnerability assessment without requiring a VPN, Action1 eliminates routine IT labor, helps prevent ransomware and other security risks, and protects the digital employee experience. In 2025, Action1 was recognized by the Inc. 5000 as the fastest-growing private software company in America. Action1 is founder-led by Alex Vovk and Mike Walters, entrepreneurs who previously founded Netwrix, a multibillion-dollar cybersecurity company. The Role We are looking for a Product Security Engineer to join the team responsible for securing Action1’s multi-tenant SaaS platform. In this role, you will work closely with engineering, product, and security teams to identify risks early, support vulnerability handling, strengthen secure development practices, and make product security practical, clear, and actionable. This is a hands-on role for someone who understands both software engineering and cybersecurity, enjoys working directly with developers, and wants to build security into the product without slowing teams down unnecessarily. What you'll do: Support Product Security Incident Response Team (PSIRT) and vulnerability-handling activities Validate, triage, track, and coordinate security reports Provide practical remediation guidance to engineering teams Help validate security fixes and reduce product security risks Review code, APIs, and system architecture to identify security issues early Conduct threat modeling and security design reviews Improve security automation within engineering workflows Support SAST, SCA, secrets scanning, and other security controls Maintain software bills of materials (SBOMs), dependency visibility, and remediation follow-up Support security assessments, vulnerability assessments, and penetration testing Maintain vulnerability-handling playbooks, product security procedures, and incident response runbooks Requirements What we are looking for: 3+ years of experience in product security, application security, DevSecOps, or a related cybersecurity field Strong software engineering background and the ability to work effectively with engineering teams Understanding of application, API, infrastructure, and software supply chain security risks Experience applying cloud security concepts and practices Understanding of identity and access management, network security, logging, monitoring, and secure cloud architecture patterns Familiarity with vulnerability management, incident response, security assessments, and secure software development lifecycle practices Experience with threat modeling and security design reviews Strong communication skills, including professional communication with external security researchers and vendors Ability to work independently and collaboratively in a fast-moving environment Nice to have: Genuine interest in cybersecurity and motivation to grow as a product security expert Hands-on experience with AWS security controls, best practices, and architecture patterns Hands-on experience with C++ or JavaScript Experience with security testing and automation using scripts, APIs, CI/CD pipelines, or specialized tools Experience conducting threat modeling for SaaS, API, cloud, or on-premises product components Experience with SBOM generation, dependency visibility, or software supply chain security Benefits What we offer: A fully remote work environment The opportunity to work on a real-world security product used by IT and security teams High ownership and a direct impact on product security practices Close collaboration with engineering, product, and security teams A fast-growing software company with low bureaucracy and practical decision-making The opportunity to improve security processes, automation, and engineering workflows A supportive team that values clear thinking, ownership, and continuous learning

Location: Remote; Serbia; Poland Workplace: Remote We are looking for a Senior Penetration Tester to strengthen the security of high-load products by identifying vulnerabilities across applications, infrastructure, cloud environments, and payment flows. In this role, you will work closely with engineering, product, fraud, and compliance teams to improve security posture through offensive security assessments and practical remediation. Responsibilities: - Plan and execute penetration testing activities across web applications, APIs, mobile applications, internal and external infrastructure, and AWS cloud environments - Perform offensive security exercises, including red team and assumed-breach scenarios covering privilege escalation, lateral movement, persistence, and data exfiltration - Assess the security of cloud-native services, Kubernetes environments, microservices, and CI/CD pipelines - Identify vulnerabilities affecting payment systems, wallets, KYC/AML processes, bonus mechanisms, affiliate tracking, and other business-critical workflows - Work with Product, Engineering, AppSec, Payments, and Fraud teams to prioritize findings and support remediation efforts - Develop custom scripts and internal tools to improve testing capabilities where standard solutions are insufficient - Contribute to threat modeling activities and support secure-by-design initiatives - Review penetration testing plans, reports, and provide technical guidance to junior and middle security specialists - Research emerging vulnerabilities, MITRE ATT&CK techniques, security advisories, and translate them into actionable improvements - Support security assessments for new products, releases, and market launches, including effort estimation and pre-certification activities - Act as a security advisor for technical and business stakeholders on offensive security matters Requirements: - 4+ years of hands-on experience in penetration testing or offensive security - Proven practical experience in at least three of the following areas: - Web applications / APIs - Internal networks - External infrastructure - Cloud environments (AWS/GCP) - Mobile applications (iOS/Android) - OSCP or an equivalent offensive security certification - Strong knowledge of SAST, SCA, DAST, AWS/GCP, MITRE ATT&CK, OWASP ASVS, OWASP WSTG, and PTES - Good understanding of application architecture, including MVC and data flow principles - Knowledge of supply chain attack techniques - Experience writing scripts in Python and Bash - Understanding of IAM models within at least one major cloud provider - Hands-on experience testing Kubernetes-based environments, cloud-native applications, CI/CD pipelines (GitLab, GitHub Actions, Jenkins) and Infrastructure as Code solutions (Terraform, Helm, CloudFormation) - Strong reporting, documentation, and communication skills - Ability to balance security priorities with business and release deadlines - Solid understanding of security frameworks and compliance standards, including PCI DSS, ISO 27001, NIST, and GDPR - At least Upper-Intermediate level of English Would be a plus: - Advanced offensive security certifications such as OSWE, OSEP, OSED, CRTO, BSCP, ARTE, or GRTE - Experience designing secure architectures for Kubernetes and AWS environments - Previous background in iGaming, fintech, or payment products - Public security research, CVEs, advisories, technical publications, or conference presentations - Completion of HTB Pro Labs or strong CTF achievements - Contributions to open-source offensive or defensive security projects What's in it for you: - Fully remote working format - Competitive salary based on experience - Paid annual leave and sick leave - Opportunities for professional and career growth - Supportive environment focused on continuous development and long-term growth

Location: Paris ABOUT MISTRAL Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. Role summary   As a Product Security Engineer within the Cybersecurity organization, you will be the dedicated security partner for one or more product organizations (such as Vibe, Studio or Forge). You will work alongside engineers, researchers and product managers to ensure security is built into every stage of the product lifecycle—from early design and architecture decisions through implementation, production deployment and continuous evolution. Your mission is to help engineering teams build secure products without slowing them down. Rather than acting as a gatekeeper, you will enable teams to make sound security decisions through secure-by-design principles, pragmatic engineering guidance and scalable security automation. You will own the Product Security strategy for your product portfolio, influence engineering decisions, and help define how secure software is built across one of the world's leading AI companies.   What you will do   - Serve as the dedicated Product Security partner for one or more product organizations. - Drive security throughout the entire product lifecycle, from design and architecture reviews to production deployment and ongoing operation. - Lead threat modeling, security architecture reviews and risk assessments for new features, APIs and major architectural changes. - Define pragmatic security requirements and secure-by-default patterns that enable engineering teams to ship safely at high velocity for a specific product. - Review critical designs and code, focusing on authentication, authorization, tenant isolation, data protection, cryptography and other high-impact security controls. - Design product-specific security validation strategies, including targeted testing, abuse-case development and guided agent-based security assessments tailored to each product's architecture and workflows. - Partner with engineering teams to prioritize and remediate vulnerabilities identified through code reviews, penetration testing, bug bounty programs and automated security testing. - Collaborate with Security Engineering to improve reusable security platforms, developer guardrails and security capabilities integrated into the SDLC. - Champion secure software engineering through coaching, technical leadership, reusable design patterns and Security Champion programs. - Define Product Security metrics, continuously improve the security posture of your products and help shape Product Security practices across the company. What we're looking for: - 5+ years of experience in Product Security, Application Security or Software Engineering with a strong security focus. - Strong understanding of modern software architecture, distributed systems, APIs and cloud-native applications. - Demonstrated experience performing threat modeling, architecture reviews and secure design assessments. - Deep understanding of modern software security, including authentication, authorization, cryptography, secrets management, tenant isolation, secure data flows and common vulnerability classes (OWASP Top 10, CWE). - Strong software engineering skills in Python, Go, TypeScript or similar languages, with the ability to review production code and build security automation. - Experience with application security testing techniques, including manual code review, penetration testing, bug bounty programs. - Experience designing product-specific security testing approaches, including security automation or agent-based testing, is highly valued. - Strong understanding of Secure SDLC principles from product design through production deployment and long-term maintenance. - Excellent communication and influencing skills, with the ability to earn trust across engineering organizations and balance security, product delivery and developer experience. - A pragmatic, engineering-first mindset with strong technical judgment and a focus on solving meaningful security problems. WHAT WE OFFER We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks. For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link. PRIVACY POLICY Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.

Location: Los Angeles, United States Workplace: onsite About Xsolla Xsolla is a global commerce and financial technology company for the video game industry. Headquartered in Los Angeles with offices and operations worldwide, Xsolla provides the tools, infrastructure and capital solutions that help developers and publishers fund, launch, distribute and monetize their games across every market and platform. The company serves thousands of game businesses globally, from independent studios to the largest publishers, and is expanding a dedicated capital markets and investment platform serving the interactive entertainment ecosystem. The Capital Markets Group The Capital Markets Group (CMG) sits within Xsolla's Global Strategic Initiatives function and operates as the firm's institutional capital platform. The group originates, structures and executes financing and investment solutions across games and interactive entertainment, and is building a franchise modeled on the leading independent capital markets and special situations advisory platforms. The group operates multiple investment vehicles spanning debt financing and credit markets, alongside special situations and principal investment strategies serving the interactive entertainment ecosystem. These activities are supported by a proprietary market intelligence system, a global events and convening program, and a governed institutional relationship platform covering LPs, sovereign investors, family offices, banks and intermediaries across the Americas, MENA, APAC and Europe. CMG operates from hubs in Los Angeles, New York, the Middle East and Singapore. The group is in its foundation stage: hires at every level join a live deal environment with executive sponsorship, meaningful ownership and the mandate to build a durable franchise rather than inherit one. For more information, visit xsolla.com. About the Opportunity Xsolla is seeking an Analyst, Capital Markets Intelligence and CRM to operate the information layer that the entire Capital Markets Group runs on: producing the daily market intelligence that directs senior coverage attention, building and maintaining the institutional relationship data that every mandate draws on, tracking the global events landscape that drives origination, and preparing the briefing materials that put senior coverage into every meeting fully prepared. The corporate title for this seat is Analyst, with no direct reports. The seat offers unusual breadth for the level: direct exposure to fund formation, private placements, and credit and distressed situations across gaming and interactive entertainment, daily interaction with the group's senior leadership, and a defined development path toward coverage or capital formation responsibility. The Analyst, Capital Markets Intelligence and CRM will be based in Los Angeles, CA, Xsolla's headquarters, in office, and will report to the Vice President, Investor Relations and Capital Formation. Travel is limited to up to 10 percent, primarily for priority industry events. This is a full time position. How to Apply Interested candidates should apply via the application button below, together with a resume and a short note on relevant experience. The Xsolla Talent Acquisition team will follow up on qualifying applications. Role Overview As Analyst, Capital Markets Intelligence and CRM, you will run the information systems that the entire Capital Markets Group depends on: the daily intelligence product, the institutional relationship database, the events calendar, and the meeting preparation that keeps senior coverage armed for every conversation. The role suits a candidate who wants the analytical rigor of an investment banking seat combined with real ownership of a system they run themselves. Key Responsibilities Market Intelligence Produce the daily digest. Produce the daily capital markets intelligence digests and the Friday weekly rollup, applying the group's prioritization rubric and tiered output formats for individual, team and executive audiences, and operate the reader feedback loop that tunes the product over time. Monitor global sources. Monitor the defined multilingual source set with translation tooling and flag regionally significant items to the Americas, MENA and APAC coverage heads. Track special situations. Track the distressed and special situations landscape across gaming and interactive entertainment, and prepare screening one pagers on qualifying situations for review at the weekly pipeline call. Relationship Data Operations Build institutional records. Build institutional records in the firm's relationship platform, sourcing from public materials, licensed data providers and event lists, with enrichment, deduplication and tiering support to the group's data standards. Operate the staging workflow. Operate the prospect staging and promotion workflow, ensuring nothing enters the production database without review, and support the quarterly tiering refresh. Maintain the audit trail. Maintain the audit trail on data provenance and consent context consistent with the firm's data handling standard. Coverage Support Prepare meeting briefs. Prepare meeting briefs for every Tier 1 interaction at least 24 hours in advance, including institution profile, relationship history, live items and suggested talking points; log outcomes and next actions in the platform after each meeting. Support materials preparation. Support materials preparation for investor meetings, roadshows and transaction processes under the direction of the VP and coverage heads. Events and Convening Maintain the events calendar. Maintain the global events calendar across credit, private capital, SPAC, venture, family office and sovereign conferences, with rolling 30, 60 and 90 day action lists and attendance recommendations. Run event follow up. Run event follow up operations, capturing who the team met, promoting qualified contacts into the platform and tracking post event actions to completion. Candidate Profile Experience 1 to 3 years of experience in investment banking, equity or credit research, management consulting, or a data intensive operations seat at a financial institution; exceptional final year candidates and recent graduates with relevant internships will be considered. Working knowledge of the gaming and interactive entertainment ecosystems is a plus, as is exposure to data providers such as Preqin, PitchBook or Bloomberg. Domain Expertise Excellent research and business writing skills, with the ability to compress large volumes of information into decision ready summaries. Familiarity with Salesforce administration concepts, SQL, or automation tooling used to build workflows is preferred. Skills and Competencies Strong working proficiency in Excel and demonstrated comfort operating CRM or comparable structured data systems, with accountability for data quality. Meticulous attention to detail, high throughput, and the judgment to distinguish signal from noise under time pressure. Discretion with confidential information and a high degree of ethics and integrity. Professional working proficiency in one or more of Mandarin, Japanese, Korean, Arabic, Portuguese or Spanish is preferred. Education and Credentials A bachelor's degree is required. The SIE examination, passed or scheduled, is preferred; Xsolla sponsors relevant professional examinations and designations as part of its analyst development program. Benefits: We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes 100% company-paid medical, dental, and vision plans, unlimited Flexible Time Off, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play. Equal Employment Opportunity Statement: Xsolla is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or any other characteristic protected by law. We consider qualified applicants with criminal histories in accordance with the Fair Chance Act. Criminal History Consideration: For the Analyst, Capital Markets Intelligence and CRM role, we will conduct a background check that may include the following: Criminal history check Employment verification Education verification Relevance to Job Responsibilities: The background check is relevant to this position because of the following role responsibilities: Working with vulnerable populations Accessing confidential company data Ensuring compliance with regulatory requirements Rights Under the Fair Chance Act: Applicants are encouraged to inquire about their rights under the Fair Chance Act. If you have questions regarding our hiring practices, please contact careers@xsolla.com. By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with thisXsolla Privacy Notice for Job Applicants. Please direct any inquiries regarding your data privacy to careers@xsolla.com. Compensation is competitive and negotiable based on experience, and includes performance-based incentives, and comprehensive health, retirement, and wellbeing benefits.

Location: Dubai, United Arab Emirates Workplace: onsite About You As Head of Investor Capital and Relations, Middle East, you will operate independently in region with a global reporting line and executive sponsorship, and with the mandate to build the firm's Middle East franchise from first principles: the coverage map, the institutional relationships, the office and, ultimately, the regional team. This is a builder's role. You will own senior coverage of the region's sovereign wealth funds, government related entities and family offices, lead the office establishment and hub determination between DIFC and ADGM, and coordinate closely with counsel and the firm's government relations workstreams as you build a durable Gulf franchise.   About the Opportunity Xsolla is seeking a Head of Investor Capital and Relations to be the firm's senior presence in the Gulf and own its most strategically important capital relationships: the region's sovereign wealth funds, government related entities and principal family offices. The GCC is executing one of the most ambitious government backed investment programs in the history of the games industry, and this seat exists to convert that alignment into anchor limited partner relationships, co-investment partnerships and strategic financings for the firm's investment vehicles and transaction pipeline. The corporate title for this seat is Executive Director, with a defined path to Managing Director tied to franchise milestones. The seat will have one direct report initially, a Regional Relationship Manager, to be hired following office establishment. The Head of Investor Capital and Relations, Middle East will be based in Dubai (DIFC) or Abu Dhabi (ADGM), with the hub determination in progress and open to the successful candidate's input, and will report to the Senior Vice President of Global Strategic Initiatives and Partnerships. The role requires travel of 50 percent or more across the GCC and wider MENA, with periodic travel to Los Angeles and New York. This is a full time position; the regional package will be structured with local counsel. Expressions of Interest Xsolla welcomes confidential conversations with qualified candidates and trusted introductions. Please direct expressions of interest, together with a resume and a short note on relevant experience, to the Xsolla Talent Acquisition team via the application button linked below.   About Us Xsolla is a global commerce and financial technology company for the video game industry. Headquartered in Los Angeles with offices and operations worldwide, Xsolla provides the tools, infrastructure and capital solutions that help developers and publishers fund, launch, distribute and monetize their games across every market and platform. The company serves thousands of game businesses globally, from independent studios to the largest publishers, and is expanding a dedicated capital markets and investment platform serving the interactive entertainment ecosystem. The Capital Markets Group The Capital Markets Group (CMG) sits within Xsolla's Global Strategic Initiatives function and operates as the firm's institutional capital platform. The group originates, structures and executes financing and investment solutions across games and interactive entertainment, and is building a franchise modeled on the leading independent capital markets and special situations advisory platforms. The group operates multiple investment vehicles spanning debt financing and credit markets, alongside special situations and principal investment strategies serving the interactive entertainment ecosystem. These activities are supported by a proprietary market intelligence system, a global events and convening program, and a governed institutional relationship platform covering LPs, sovereign investors, family offices, banks and intermediaries across the Americas, MENA, APAC and Europe. CMG operates from hubs in Los Angeles, New York, the Middle East and Singapore. The group is in its foundation stage: hires at every level join a live deal environment with executive sponsorship, meaningful ownership and the mandate to build a durable franchise rather than inherit one. For more information, visit xsolla.com. RESPONSIBILITIES Key Responsibilities Sovereign and Institutional Coverage Own sovereign coverage. Own senior coverage of the region's sovereign wealth funds and government related entities, including their gaming, technology and entertainment investment vehicles, with documented access paths and personal ownership of the firm's most senior regional relationships. Build family office coverage. Build and maintain coverage of the GCC's principal single and multi family offices, regional institutional investors and banks, with complete, current records in the firm's relationship platform. Map the counterparties. Map the decision making architecture of each priority institution, including investment committee cadence, mandate criteria, co-investment appetite and approval chains, and maintain that intelligence as a living asset. Capital Formation and Transactions Lead regional fundraising. Lead regional pre-marketing and fundraising processes for the firm's investment vehicles within applicable private placement and promotion regimes, coordinating with counsel on the marketing approach for each jurisdiction. Originate co-investment dialogues. Originate and manage sovereign co-investment dialogues alongside fund principals, and support strategic and government aligned financing conversations through to execution. Own diligence processes. Manage institutional diligence processes end to end, including DDQ coordination, data room support, operational due diligence visits and reference management. Franchise and Regional Platform Advise on the hub decision. Advise the hub determination between DIFC and ADGM, and lead the establishment of the regional office with Legal and Finance, including regulatory positioning of the firm's regional activities. Build the region's presence. Build the firm's presence across the region's priority investment forums and convening platforms, and run a regional events calendar that converts presence into qualified pipeline. Coordinate with government relations. Coordinate deliberately with the firm's government relations and sovereign engagement workstreams so that capital coverage and institutional diplomacy reinforce one another. Build the regional team. Recruit and develop the regional Relationship Manager and subsequent hires; establish coverage and CRM standards for the region. Risk and Controls Ensure regulatory compliance. Ensure all regional marketing and promotion activity complies with applicable regimes, including DIFC and ADGM promotion rules and the private placement frameworks of each GCC jurisdiction, in coordination with counsel. Maintain counterparty awareness. Maintain rigorous counterparty awareness, including KYC, AML and sanctions screening coordination with the firm's compliance processes, and escalate reputational risk considerations early. REQUIREMENTS Candidate Profile Experience 10 or more years covering MENA institutional capital from an investment bank, sovereign investor, placement agent, asset manager or family office platform, including at least 5 years in a senior client facing capacity. Demonstrable senior relationships inside GCC sovereign institutions and principal family offices, with a referenceable record of capital raised, commitments secured or strategic partnerships executed in the region. Existing relationships across the region's sovereign gaming, esports and digital entertainment programs and their investment arms are a strong advantage, as is a cumulative placement or capital formation record in the region of USD 500 million or more. Domain Expertise Working knowledge of the regional regulatory landscape relevant to fund marketing and promotion, including the DIFC and ADGM frameworks and private placement practice across the GCC. Experience marketing alternative strategies such as credit, special situations or private equity to sovereign and family office investors, including familiarity with Shariah aware structuring considerations, is preferred. Experience establishing or operating a regulated or exempt presence in the DIFC or ADGM is preferred. Skills and Competencies Deep cultural fluency and protocol judgment in sovereign, government and family office settings, and the discretion those relationships demand. Proven ability to operate independently in region on a global platform, with disciplined reporting, pipeline management and follow through. Exceptional written and verbal communication skills in English; Arabic language fluency is preferred. A high degree of ethics and integrity, with a clean regulatory and disciplinary history. Education and Credentials A bachelor's degree is required. A CFA or CAIA charter, or equivalent, is preferred. Benefits: We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes 100% company-paid medical plan, unlimited Flexible Time Off, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play. Equal Employment Opportunity Statement: Xsolla is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or any other characteristic protected by law. We consider qualified applicants with criminal histories in accordance with the Fair Chance Act. Criminal History Consideration: For the Head of Investor Capital & Relations role, we will conduct a background check that may include the following: Criminal history check Employment verification Education verification Relevance to Job Responsibilities: The background check is relevant to this position because of the following role responsibilities: Working with vulnerable populations Accessing confidential company data Ensuring compliance with regulatory requirements Rights Under the UAE Personal Data Protection Law: Applicants are encouraged to inquire about their rights under the UAE Personal Data Protection Law. If you have questions regarding our hiring practices, please contact careers@xsolla.com   By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with thisXsolla Privacy Notice for Job Applicants. Please direct any inquiries regarding your data privacy to careers@xsolla.com. Compensation is competitive and negotiable based on experience, and includes performance-based incentives, equity participation, and comprehensive health, retirement, and wellbeing benefits.

Location: Singapore Workplace: onsite About Xsolla Xsolla is a global commerce and financial technology company for the video game industry. Headquartered in Los Angeles with offices and operations worldwide, Xsolla provides the tools, infrastructure and capital solutions that help developers and publishers fund, launch, distribute and monetize their games across every market and platform. The company serves thousands of game businesses globally, from independent studios to the largest publishers, and is expanding a dedicated capital markets and investment platform serving the interactive entertainment ecosystem. The Capital Markets Group The Capital Markets Group (CMG) sits within Xsolla's Global Strategic Initiatives function and operates as the firm's institutional capital platform. The group originates, structures and executes financing and investment solutions across games and interactive entertainment, and is building a franchise modeled on the leading independent capital markets and special situations advisory platforms. The group operates multiple investment vehicles spanning debt financing and credit markets, alongside special situations and principal investment strategies serving the interactive entertainment ecosystem. These activities are supported by a proprietary market intelligence system, a global events and convening program, and a governed institutional relationship platform covering LPs, sovereign investors, family offices, banks and intermediaries across the Americas, MENA, APAC and Europe. CMG operates from hubs in Los Angeles, New York, the Middle East and Singapore. The group is in its foundation stage: hires at every level join a live deal environment with executive sponsorship, meaningful ownership and the mandate to build a durable franchise rather than inherit one. For more information, visit xsolla.com. About the Opportunity Xsolla is seeking a Head of Investor Capital and Relations to build the firm's Asia Pacific capital franchise from Singapore. The region combines the world's deepest gaming markets with some of its most sophisticated institutional capital, and this seat exists to connect the two for the firm: sovereign and state linked investors in Singapore, institutional investors and strategics across Korea and Japan, capital markets counterparties in Hong Kong and Australia, and the regional family office community. The corporate title for this seat is Director, with a defined path to Executive Director tied to franchise milestones, including the 2027 regional coverage plan and team build. There are no direct reports initially; regional analyst support and a 2027 hiring plan are owned by this seat. The Head of Investor Capital and Relations, APAC will be based in Singapore, in office, leveraging Xsolla's existing APAC presence, and will report to the Senior Vice President of Global Strategic Initiatives and Partnerships. The role requires travel of approximately 40 to 50 percent across Southeast Asia, North Asia and Australia, with periodic travel to Los Angeles. This is a full time position; Employment Pass sponsorship is available, with the package structured with local counsel. Expressions of Interest Xsolla welcomes confidential conversations with qualified candidates and trusted introductions. Please direct expressions of interest, together with a resume and a short note on relevant experience, to the Xsolla Talent Acquisition team via the application button linked below. Role Overview As Head of Investor Capital and Relations, APAC, you will own senior institutional coverage across the region, spanning sovereign and state linked investors, pensions, insurers, asset managers, funds of funds and family offices, alongside gaming, technology and media strategics across Korea, Japan and Greater China. You will own the coverage map, the relationships and the regional plan, operating with a global reporting line and the support of the firm's existing APAC operating footprint. This is a builder's role. You will establish the coverage standards, relationship infrastructure and regional plan that allow Xsolla to engage APAC's institutional capital with discipline, while coordinating closely with counsel on marketing approach and applicable regulatory regimes across Singapore, Hong Kong, Korea, Japan and Australia. Key Responsibilities Institutional and Strategic Coverage Own institutional coverage. Own senior coverage of APAC institutional capital, including sovereign and state linked investors, pensions and insurers, asset managers, funds of funds and regional family offices, with complete, current records and documented access paths in the firm's relationship platform. Build strategic coverage. Build dedicated coverage of gaming, technology and media strategics across Korea, Japan and Greater China as limited partners, co-investors and transaction counterparties. Map the counterparties. Map each priority institution's decision architecture, including mandate criteria, allocation cadence, co-investment appetite and approval process, and maintain that intelligence as a living asset. Capital Formation and Transactions Lead regional fundraising. Lead regional pre-marketing and fundraising support for the firm's investment vehicles within each jurisdiction's private placement and offering regimes, coordinating with counsel on the marketing approach for Singapore, Hong Kong, Korea, Japan and Australia. Own diligence processes. Originate and manage institutional diligence processes end to end, including DDQ coordination, data room support and operational due diligence visits. Support transactions. Support cross border financing and strategic transaction conversations alongside the Americas and MENA coverage teams and fund principals. Franchise and Regional Platform Build the region's presence. Build the firm's presence across the region's priority investment and gaming industry forums; run the APAC events calendar and convert presence into qualified pipeline. Develop the regional plan. Develop the 2027 regional coverage plan, including market prioritization, any additional country coverage and the regional hiring sequence, for approval by the Group Head. Set coverage standards. Establish coverage and CRM standards for the region and enforce the group's interaction logging discipline. Risk and Controls Ensure regulatory compliance. Ensure all regional marketing and offering activity complies with applicable regimes and the firm's policies, in coordination with counsel, including Singapore's frameworks for fund offers to institutional and accredited investors. Maintain counterparty awareness. Maintain rigorous counterparty awareness, including KYC, AML and sanctions screening coordination, and escalate reputational risk considerations early. Candidate Profile Experience 8 or more years of progressive experience in APAC institutional coverage, capital formation, investment banking or investor relations at a bank, asset manager, placement agent or sovereign investor, including significant client facing responsibility. Demonstrable relationships across Singapore's institutional community and at least one of the Korean, Japanese or Greater China institutional or strategic investor markets, with a referenceable record of capital raised or partnerships executed. Sector experience across gaming, interactive entertainment, technology or media, or coverage of strategics in those sectors, is a clear advantage. Domain Expertise Working knowledge of regional fund marketing and private placement practice, including Singapore's institutional and accredited investor frameworks. Experience marketing alternative strategies such as credit, special situations or private equity to Asian institutions is preferred. Experience operating under the Monetary Authority of Singapore regulatory framework, including holding or having held representative status with a capital markets services license holder or operating within an applicable exemption, is preferred. Skills and Competencies Proven ability to operate independently on a global platform, with disciplined pipeline management, reporting and follow through across time zones. Exceptional written and verbal communication skills in English; professional fluency in Mandarin, Japanese or Korean is preferred. A high degree of ethics and integrity, with a clean regulatory and disciplinary history. Education and Credentials A bachelor's degree is required. A CFA or CAIA charter, or equivalent, is strongly preferred. Benefits: We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes 100% company-paid medical, dental, and vision plans, unlimited Flexible Time Off, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play. Equal Employment Opportunity Statement: Xsolla is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or any other characteristic protected by law. We consider qualified applicants with criminal histories in accordance with the Fair Chance Act. Criminal History Consideration: For the Head of Investor Capital & Relations role, we will conduct a background check that may include the following: Criminal history check Employment verification Education verification Relevance to Job Responsibilities: The background check is relevant to this position because of the following role responsibilities: Working with vulnerable populations Accessing confidential company data Ensuring compliance with regulatory requirements Rights Under the Fair Chance Act: Applicants are encouraged to inquire about their rights under the Fair Chance Act. If you have questions regarding our hiring practices, please contact careers@xsolla.com. By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with thisXsolla Privacy Notice for Job Applicants. Please direct any inquiries regarding your data privacy to careers@xsolla.com. Compensation is competitive and negotiable based on experience, and includes performance-based incentives, equity participation, and comprehensive health, retirement, and wellbeing benefits.

Location: Almaty, Kazakhstan Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. ABOUT THE ROLE Break new features before they ship: agentic systems, MCP servers, code-generating agents, user-deployed apps, generative models for image, video, and voice, and enterprise features (SSO, org and team management, roles). It's new ground, and you'll help define how we secure it. You go first. What you'll do: - Pentest new features and products pre-release: web, APIs, admin surfaces. - Work out the attack surface of each new feature yourself. - Hunt authorization flaws across our multi-tenant APIs and retest fixes. - Join design and code reviews early, so flaws die before they're built. - Turn recurring findings into guardrails — paved-road standards and automated checks — so a bug class dies once instead of resurfacing every release. - Bring a working repro to the team that owns the code and see the fix through. Requirements - A track record of finding real vulnerabilities in real systems — appsec work, bug bounty, or research. - The ability to read modern codebases, trace a bug to root cause, and discuss the fix with the engineers who wrote it. - A threat-modeling instinct for spotting the weak spots in a design or architecture before a line is written. - Enough cloud and container fundamentals to follow a bug into the infrastructure it runs on. - High agency. - Working English. Nice to have - LLM/agent security research, public research or CVEs, OSWE/CWEE or equivalent hands-on certificates. WHAT WE OFFER: - Competitive base salary in USD - Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth. - On-site role in our Almaty office (we will relocate you from anywhere).

Location: Boston, MA Workplace: OnSite At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP is seeking an execution-oriented Senior Governance, Risk, and Compliance Analyst to lead the day-to-day execution and support the ongoing operation of the GRC program in a fast-paced, high-growth environment. This role is responsible for operations of GRC initiatives - including but not limited to structured cybersecurity and AI risk assessments, exceptions management, SDLC reviews and security compliance process ownership. The role will partner closely with Legal, Security, Product, and other teams to advance compliance objectives, reduce enterprise risk, and strengthen operational resilience. The ideal candidate combines strong analytical thinking, critical risk mind-set with the ability to communicate complex risk scenarios clearly to both technical and non-technical stakeholders. RESPONSIBILITIES: - Lead cyber, AI, and technology risk assessments across systems, cloud environments, business processes, and major initiatives, evaluating threats, vulnerabilities, control effectiveness, and residual risk - Maintain and operate the enterprise cyber risk register, including drafting risk statements, tracking mitigation plans, and supporting governance and reporting processes - Translate technical findings, architectural concerns, and control gaps into clear business risk scenarios that support prioritization and decision-making - Support and help mature quantitative cyber risk analysis approaches such as FAIR to improve how risk is measured and communicated - Prepare materials and analysis to support the Cyber Risk Committee and executive risk reporting - Partner with Security Architecture to assess risk in system designs, cloud architecture, identity models, data flows, and platform changes - Collaborate with Security Engineering, Product Security, Legal, IT, and business teams to evaluate new initiatives, technology changes, artificial intelligence use cases, and third-party integrations through a risk lens - Conduct risk assessments for emerging technologies including artificial intelligence and machine learning systems, evaluating data usage, model behavior, external dependencies, and security implications - Develop dashboards and reporting that provide leadership with visibility into key cybersecurity risks and trends. - Contribute to the continued development of cyber risk management processes QUALIFICATIONS: - 6+ years of experience in cybersecurity or enterprise risk management, information security, or a related field - Demonstrated experience conducting structured cybersecurity or IT risk assessment - Experience maintaining risk registers and tracking risk mitigation or treatment activities - Deep understanding of security frameworks such as NIST CSF, ISO 27001, or PCI DSS, and familiarity with regulatory environments such as GDPR, HIPAA or other privacy and data protection requirements - Ability to translate technical findings into clear business risk for non-technical stakeholders - Strong written and verbal communication skills with experience presenting findings to cross-functional teams - Experience assessing risks related to artificial intelligence, machine learning systems, or emerging technologies, including familiarity with emerging AI governance frameworks such as NIST AI RMF, ISO/IEC 42001, or similar standards - Professional certifications such as CRISC, CISSP, CISA, or CGRC are a plus This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.  In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Location: Spain About the Opportunity Dentons Europe is currently seeking a Information Security Engineer, specializing in Microsoft cloud technologies to play a key role in strengthening and evolving our security landscape. In this role, you will design and implement security controls across cloud and hybrid environments, with a strong focus on Microsoft 365 and Microsoft Azure. You will operate at the intersection of architecture and execution shaping security decisions, guiding technical teams, and ensuring that systems, applications, and integrations meet the firm’s security, compliance, and reliability standards. As a trusted advisor and technical authority, you will work closely with Information Security, IT, and business stakeholders across Europe, embedding security into the design and delivery of technology solutions while continuously improving the organization’s overall security posture. This is an opportunity to make a visible, enterprise-wide impact in a complex, international environment. You will primarily be accountable for Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments. Act as a cybersecurity subject-matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation. Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards. Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset. Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture. Lead end-to-end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams. Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture. Provide advanced troubleshooting and technical leadership for complex or high-impact security issues. Develop and maintain security documentation, standards, reports, and control frameworks. Requirements Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering Advanced expertise in Microsoft Azure security, including at least two of: Defender for Cloud Microsoft Sentinel Infrastructure / Network Security (IaaS) Application and API security Storage and database security Advanced expertise in Microsoft 365 security, including at least two of: Microsoft Entra ID, identity and access management Microsoft Purview, data protection and compliance Microsoft 365 Defender suite Intune / Endpoint Manager Strong understanding of: Security architecture principles, including Zero Trust, defense-in-depth and least privilege Hybrid cloud environments and system integrations Vulnerability management, including analyzing penetration testing and coordinating remediation of results API security and modern integration technologies Scripting and automation skills, e.g., PowerShell, Python or Bash Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities Professional experience Proven experience designing and implementing secure solutions in Microsoft technologies-based enterprise environments Experience working with large-scale or multi-country IT environments Solid exposure to security operations, incident response and security tooling Experience collaborating across infrastructure, development and business teams Benefits Remuneration and benefits package will reflect the successful candidates experience and country where hired. Please apply with an English resume

Location: Lagos, Nigeria Who We Are We’re a passionate team determined to challenge the status quo and make financial inclusion count for the millions of under-banked individuals and small business owners in Nigeria. We provide loans, savings, and fixed deposit solutions to our customers. Our vision is to be the most convenient lending company, delivering outstanding service experience. The Role The Cloud Network and Infrastructure Engineer is responsible for designing, implementing, securing, and optimizing the Bank's hybrid infrastructure across Amazon Web Services (AWS) and on-premises environments. The role ensures the availability, reliability, performance, scalability, and security of enterprise infrastructure while supporting business-critical systems, cloud adoption, disaster recovery, and operational excellence. This role is ideal for someone who has strong expertise in cloud infrastructure, enterprise networking, systems administration, and infrastructure security, with the ability to manage hybrid environments in a fast-paced financial services organization. What You Will Do Design, deploy, administer, and support AWS cloud infrastructure, including compute, networking, storage, identity, monitoring, backup, and security services. Manage on-premises infrastructure, including Windows and Linux servers, virtualization platforms, storage, firewalls, switches, wireless infrastructure, and data center environments. Configure and maintain secure hybrid connectivity between AWS and on-premises environments using VPN, Direct Connect, routing, DNS, load balancing, and network segmentation. Monitor infrastructure performance, availability, capacity, and security using appropriate monitoring and alerting tools. Support business-critical applications through proactive incident management, troubleshooting, and root cause analysis. Implement and maintain infrastructure security controls, including IAM, access management, patch management, vulnerability remediation, encryption, logging, and firewall administration. Develop and maintain backup, disaster recovery, high availability, and business continuity solutions. Automate infrastructure provisioning and operational tasks using scripting and Infrastructure-as-Code (IaC) tools. Maintain infrastructure documentation, architecture diagrams, asset inventories, configuration baselines, and operational procedures. Participate in change management, incident management, problem management, audit activities, and compliance remediation. Optimize infrastructure and cloud costs through resource utilization reviews and capacity planning. Collaborate with Security, Applications, Database, Service Desk, and Business teams to deliver reliable infrastructure services. Requirements What You Bring Educational Qualification Bachelor's degree or Higher National Diploma in Computer Science, Information Technology, Engineering, or a related discipline. Professional Certifications AWS Certified Solutions Architect (Associate or Professional). AWS Certified SysOps Administrator. CCNA or CCNP. CompTIA Network+ or Security+. Microsoft Certified (Azure Administrator), VMware, Linux, or equivalent certifications. ITIL Foundation certification is an added advantage. Experience Minimum of 3–5 years of experience in Cloud, Network, Systems, or Infrastructure Engineering roles. Hands-on experience managing AWS cloud infrastructure and enterprise on-premises environments. Experience supporting hybrid cloud infrastructure within financial services, fintech, banking, or other regulated industries is an added advantage. Professional Competencies Strong knowledge of AWS services, including EC2, VPC, IAM, S3, RDS, CloudWatch, CloudTrail, Route 53, ELB, Auto Scaling, AWS Backup, and Systems Manager. Strong networking knowledge covering TCP/IP, routing, switching, VLANs, VPNs, DNS, DHCP, NAT, firewalls, wireless networks, and network security. Experience administering Windows Server, Linux, Active Directory, virtualization platforms, storage, backup, and patch management. Knowledge of infrastructure automation using PowerShell, Bash, Python, Terraform, CloudFormation, or similar tools. Strong understanding of infrastructure security, access controls, vulnerability remediation, hardening, encryption, logging, and compliance. Experience with infrastructure monitoring, capacity planning, incident response, performance tuning, and root cause analysis. Excellent analytical, troubleshooting, communication, and stakeholder management skills. Strong ownership mindset with attention to detail and the ability to work effectively under pressure. Ability to collaborate across Infrastructure, Security, Applications, Audit, and Business teams while driving continuous improvement. This Role Is Ideal For You If: You enjoy designing, managing, and optimizing cloud and hybrid infrastructure. You are passionate about cloud technologies, networking, and infrastructure security. You enjoy troubleshooting complex technical issues and improving system reliability. You thrive in highly available, mission-critical environments. You enjoy automating infrastructure and improving operational efficiency. You work well across cross-functional teams and can effectively manage multiple priorities. You May Not Enjoy This Role If: You prefer purely application development over infrastructure and platform engineering. You are uncomfortable responding to production incidents or participating in on-call support. You dislike troubleshooting complex infrastructure and networking issues. You are not interested in security, compliance, or operational governance. You prefer highly repetitive work with limited opportunities for continuous improvement. Benefits What's In It For You Opportunity to build and manage enterprise-grade cloud and hybrid infrastructure in a leading fintech organization. Hands-on experience with modern AWS technologies, automation tools, and enterprise networking solutions. Exposure to large-scale infrastructure modernization and cloud transformation initiatives. Opportunity to collaborate with Security, Product, Engineering, and Operations teams on business-critical platforms. Continuous learning, professional certifications, and career development opportunities. Competitive compensation and the opportunity to solve complex, real-world technology challenges.

Location: Czechia About the Opportunity Dentons Europe is currently seeking a Information Security Engineer, specializing in Microsoft cloud technologies to play a key role in strengthening and evolving our security landscape. In this role, you will design and implement security controls across cloud and hybrid environments, with a strong focus on Microsoft 365 and Microsoft Azure. You will operate at the intersection of architecture and execution shaping security decisions, guiding technical teams, and ensuring that systems, applications, and integrations meet the firm’s security, compliance, and reliability standards. As a trusted advisor and technical authority, you will work closely with Information Security, IT, and business stakeholders across Europe, embedding security into the design and delivery of technology solutions while continuously improving the organization’s overall security posture. This is an opportunity to make a visible, enterprise-wide impact in a complex, international environment. You will primarily be accountable for Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments. Act as a cybersecurity subject-matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation. Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards. Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset. Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture. Lead end-to-end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams. Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture. Provide advanced troubleshooting and technical leadership for complex or high-impact security issues. Develop and maintain security documentation, standards, reports, and control frameworks. Requirements Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering Advanced expertise in Microsoft Azure security, including at least two of: Defender for Cloud Microsoft Sentinel Infrastructure / Network Security (IaaS) Application and API security Storage and database security Advanced expertise in Microsoft 365 security, including at least two of: Microsoft Entra ID, identity and access management Microsoft Purview, data protection and compliance Microsoft 365 Defender suite Intune / Endpoint Manager Strong understanding of: Security architecture principles, including Zero Trust, defense-in-depth and least privilege Hybrid cloud environments and system integrations Vulnerability management, including analyzing penetration testing and coordinating remediation of results API security and modern integration technologies Scripting and automation skills, e.g., PowerShell, Python or Bash Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities Professional experience Proven experience designing and implementing secure solutions in Microsoft technologies-based enterprise environments Experience working with large-scale or multi-country IT environments Solid exposure to security operations, incident response and security tooling Experience collaborating across infrastructure, development and business teams Benefits 25 days of vacation/year 3 sick days/year Meal lump-sum MultiSport card Multipass card Home Office allowance

Location: Baku Workplace: onsite ABOUT US   Xsolla is a global video game commerce company that provides a comprehensive suite of tools and services for game developers and publishers - including payments, distribution, game stores, launcher solutions, and partner network services. Our platform processes transactions across 200+ geographies, supporting thousands of games and millions of players worldwide. Quality is not optional - it is foundational to every product we ship. ROLE OVERVIEW The Director of QA is a senior technical leadership role responsible for owning and scaling Xsolla's quality engineering function across multiple product lines, teams, and time zones. You will define and drive the strategic vision for quality assurance - from test automation architecture and CI/CD integration to AI-assisted testing practices and performance engineering. You will lead a distributed organization of 30+ QA engineers and leads as part of a broader QA organization of 75+ professionals, ensuring predictable, high-quality releases across every product Xsolla delivers. This is not a management-only position. You must be deeply technical - capable of reviewing automation code, architecting test frameworks, debugging CI/CD pipelines, and evaluating AI-driven testing approaches hands-on. Key Responsibilities Strategic Leadership & Ownership Define and execute the QA strategy across all Xsolla products, aligning quality objectives with business goals and product roadmaps. Own QA deliverables end-to-end - from test planning through release sign-off - and be accountable for outcomes, not just activities. Establish and enforce quality gates, defect governance policies, and release readiness criteria across all product teams. Drive organizational maturity: evolve the QA function from reactive testing to proactive quality engineering embedded in every stage of the SDLC . Represent QA at the executive level - articulate quality risks, tradeoffs, and resource needs to VP/C-level stakeholders with clarity and data. Technical Excellence Architect and oversee enterprise-grade test automation frameworks spanning UI (Playwright), API, database validation (SQL), and performance testing (K6). Define and maintain standards for test code quality - including code reviews, PR contributions, reusable libraries, and modular test design. Deep understanding of Git workflows - branching strategies, merge request reviews, repository hygiene, and code versioning best practices across multiple repositories. Expert-level knowledge of CI/CD pipelines - design, optimize, and troubleshoot automated build, test, and deployment pipelines (GitHub Actions, GitLab CI, Jenkins, or similar). Ensure all automation is fully integrated into CI/CD pipelines, with clear pass/fail signals, automated regression gates, and performance benchmarks at every release stage. Drive adoption of infrastructure-as-code practices for test environments - containerized test execution, ephemeral environments, and environment parity between staging and production. Evaluate, select, and implement QA tooling - including test management platforms (Qase), observability tools, and defect tracking integrations. AI Integration & Innovation Proven track record of using AI in day-to-day QA activities - not aspirational, but demonstrated. You have used AI tools to generate test cases, write automation code, analyze test results, identify flaky tests, or accelerate debugging. Champion and operationalize AI-assisted quality engineering across the organization - specifically using Claude AI for code generation, test design, automation scripting, and documentation. Define governance frameworks for AI-generated test artifacts - validation, review, and sign-off processes to ensure AI outputs meet quality standards. Stay current with AI/ML advancements relevant to testing - intelligent test selection, predictive defect analysis, autonomous test generation, and self-healing automation. Establish metrics to measure the impact of AI adoption on QA velocity, coverage, and defect detection rates. Team Leadership & People Development Lead, mentor, and develop a distributed team of 30+ QA professionals - including QA Leads, Senior QA Engineers, and QA Engineers - across multiple time zones (Americas, Europe, Asia-Pacific). Build a high-performance culture rooted in ownership, technical excellence, continuous learning, and psychological safety. Conduct regular 1:1s, career development conversations, and performance reviews. Identify and grow future QA leaders. Design and implement onboarding programs, skill development paths, and technical training curricula - including AI literacy for all QA team members. Manage resource allocation and capacity planning across multiple concurrent projects, ensuring predictable and sustainable QA delivery. Navigate cross-cultural team dynamics with sensitivity and effectiveness - a truly global team requires a global leadership mindset. Process Rigor & Quality Governance Enforce rigorous QA processes across the organization:  • Test case management : Create, maintain, and execute comprehensive test cases in Qase with full traceability (pass, fail, blocked statuses). Bug documentation : Ensure all staging bugs are filed with detailed reproduction steps, expected vs. actual behavior, environment details, screenshots/videos, and severity classification - following established training standards. Automation framework documentation : Maintain clear, up-to-date documentation for all automation frameworks, ensuring any engineer can onboard and contribute. QA Score : Drive iterative improvements in QA Score metrics - tracking automation coverage, defect escape rate, test execution velocity, and regression stability. Define and track QA KPIs and OKRs - present quality dashboards and trend analysis to leadership regularly. Conduct root cause analysis on production escapes and implement systemic corrective actions. Cross-Functional Collaboration Partner closely with Engineering, Product, DevOps, and Release Management to embed quality practices into every phase of the development lifecycle. Work effectively in Agile/Scrum environments - participate in and drive sprint planning, retrospectives, daily stand-ups, and release ceremonies. Act as the primary QA stakeholder for cross-functional initiatives - environment strategy, deployment automation, incident response, and post-mortem processes. Build strong relationships with engineering leadership to ensure QA is not a bottleneck but an accelerator. Common Expectations Across All QA Roles Must be technical and able to write code for testing and automation. Use Claude AI to assist in code creation, automation, and test design. Follow QA processes rigorously: create and execute robust test cases in Qase , maintain clear documentation in automation frameworks, ensure traceability of executed test cases with statuses (pass, fail, blocked), and file Staging Bugs with detailed documentation following training standards. Contribute to iterative improvements in QA Score and testing processes. Strong communication and collaboration skills, analytical mindset, and commitment to continuous learning. Ability to work effectively in Agile/Scrum environments, participating in sprint planning, retrospectives, and daily stand-ups. Required Qualifications 15+ years of experience in QA/Quality Engineering , with at least 6+ years in Senior Manager or Director-level roles . Proven experience leading teams of 30+ people distributed across multiple time zones and cultural contexts. Hands-on technical proficiency - you can write and review test automation code, not just manage people who do. Proficiency in one or more: Python, JavaScript/TypeScript, Java. Deep expertise in test automation frameworks : Playwright, Selenium, Cypress, or equivalent for UI; REST/GraphQL API testing tools; database validation via SQL. Performance testing experience : K6, JMeter, Gatling, or Locust - designing, executing, and analyzing load/stress/soak tests. Expert knowledge of Git : branching strategies (GitFlow, trunk-based), pull request workflows, code review practices, repository management across multiple repos. Expert knowledge of CI/CD : designing and maintaining pipelines (GitHub Actions, GitLab CI, Jenkins, CircleCI), integrating automated tests into build/deploy workflows, debugging pipeline failures. Demonstrated use of AI tools in professional QA work - Claude, ChatGPT, Copilot, or similar - for test generation, automation coding, defect analysis, or process optimization. Provide specific examples. Strong understanding of Agile/Scrum methodologies and experience operating within and across Agile teams. Experience with test management platforms (Qase, TestRail, Zephyr, or similar). Excellent communication skills - ability to present complex technical quality topics to non-technical stakeholders, write clear documentation, and influence without authority. Bachelor's degree in Computer Science, Engineering, or related field (or equivalent practical experience). Preferred Qualifications Experience in the video game, fintech, or e-commerce/payments industry - understanding the unique quality challenges of high-throughput transaction systems. Experience with cloud-native architectures (GCP, AWS, Azure) and testing strategies for microservices, event-driven systems, and distributed architectures. Familiarity with containerization and orchestration (Docker, Kubernetes) for test environment management. Experience building or managing unified test environments - non-production environment strategies that enable safe, deterministic, and scalable validation. Knowledge of security testing fundamentals ( OWASP , penetration testing, vulnerability scanning). Experience with data pipeline testing and data quality validation. Background in establishing QA Centers of Excellence or transforming QA organizations from manual-heavy to automation-first. What Success Looks Like (First 12 Months) 90 days : Complete assessment of current QA processes, tooling, team capabilities, and automation coverage. Establish relationships with all QA leads and key engineering stakeholders. Identify top 3 strategic gaps. 180 days : Deliver a QA strategy roadmap aligned with product and engineering priorities. Implement measurable improvements in automation coverage and CI/CD test integration. Launch AI-assisted testing pilot across at least 2 product teams. 365 days : Achieve measurable reduction in production defect escape rate. Demonstrate >80% automation coverage on critical regression paths. AI-assisted testing practices adopted across all QA teams. QA Score trending consistently upward. Team engagement and retention metrics at or above company benchmarks. The duties and responsibilities of this position may evolve over time to support the organization’s goals and individual growth. This job description is intended to outline the general nature and level of work being performed and is not intended to be an exhaustive list of all duties, responsibilities, and qualifications required. By submitting your application, you consent to Xsolla conducting background checks, where permitted by law, after the final interview stage. All checks will comply with local regulations, and your information will be handled confidentially. Xsolla takes your privacy seriously and will not sell or externally distribute any personal data received during the hiring process. In accordance with applicable data protection laws, Xsolla is committed to protecting your personal information and respecting your privacy. For any inquiries related to data privacy, please contact: careers@xsolla.com Explore more opportunities at: https://xsolla.com/careers

Location: Poland About the Opportunity Dentons Europe is currently seeking a Information Security Engineer, specializing in Microsoft cloud technologies to play a key role in strengthening and evolving our security landscape. In this role, you will design and implement security controls across cloud and hybrid environments, with a strong focus on Microsoft 365 and Microsoft Azure. You will operate at the intersection of architecture and execution shaping security decisions, guiding technical teams, and ensuring that systems, applications, and integrations meet the firm’s security, compliance, and reliability standards. As a trusted advisor and technical authority, you will work closely with Information Security, IT, and business stakeholders across Europe, embedding security into the design and delivery of technology solutions while continuously improving the organization’s overall security posture. This is an opportunity to make a visible, enterprise-wide impact in a complex, international environment. You will primarily be accountable for Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments. Act as a cybersecurity subject-matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation. Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards. Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset. Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture. Lead end-to-end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams. Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture. Provide advanced troubleshooting and technical leadership for complex or high-impact security issues. Develop and maintain security documentation, standards, reports, and control frameworks. Requirements Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering Advanced expertise in Microsoft Azure security, including at least two of : Defender for Cloud Microsoft Sentinel Infrastructure / Network Security (IaaS) Application and API security Storage and database security Advanced expertise in Microsoft 365 security, including at least two of: Microsoft Entra ID, identity and access management Microsoft Purview, data protection and compliance Microsoft 365 Defender suite Intune / Endpoint Manager Strong understanding of: Security architecture principles, including Zero Trust, defense-in-depth and least privilege Hybrid cloud environments and system integrations Vulnerability management, including analyzing penetration testing and coordinating remediation of results API security and modern integration technologies Scripting and automation skills, e.g., PowerShell, Python or Bash Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities Professional experience Proven experience designing and implementing secure solutions in Microsoft technologies-based enterprise environments Experience working with large-scale or multi-country IT environments Solid exposure to security operations, incident response and security tooling Experience collaborating across infrastructure, development and business teams Benefits Private medical healthcare provided by Medicover MultiSport card Benefit Cafeteria system Option to join a private insurance plan An additional day off for your birthday Tailored learning & development opportunities Hybrid work model with a modern office in Warsaw city center

Location: San Francisco, CA | New York City, NY | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As an Enforcement Analyst, you will be responsible for reviewing content and executing enforcement actions across our products and services, with a focus on detecting and mitigating attempts to misuse Anthropic's AI systems for malicious cyber operations. Your initial focus will center on reviewing flagged activity related to cyberattacks, malware development, and offensive exploitation; however, this position may later expand to include broader areas of enforcement. Safety is core to our mission, and you'll help uphold policy enforcement so that our users can safely interact with and build on top of our products in a harmless, helpful, and honest way. Important context for this role: In this position you may be exposed to and engage with explicit content spanning a range of topics, including those of a violent, technical, or psychologically disturbing nature. This role may require responding to escalations during weekends and holidays. Key responsibilities Review flagged content and accounts to make accurate, well-documented enforcement decisions in line with our usage policies Detect and mitigate potential misuse of AI systems to facilitate cyberattacks, malware creation, exploitation tooling, and related harmful cyber operations Triage and escalate novel, ambiguous, or high-severity cases to appropriate stakeholders Provide detailed feedback to the Safeguards policy design team on policy gaps surfaced through real enforcement scenarios Partner with Engineering and Data Science teams by surfacing detection model errors and quality signals from review to improve precision and recall Maintain high accuracy and consistency standards across review queues Keep up to date with emerging AI policy enforcement best practices, threat actor tactics, and the evolving cyber threat landscape, using these to inform enforcement decisions Minimum Qualifications Experience in cybersecurity, including knowledge of offensive techniques, exploit development, malware analysis, or vulnerability research Experience performing content review, abuse investigations, or policy enforcement at volume Proficiency in SQL and/or Python for data analysis and threat detection Experience identifying emerging risks and communicating findings to a diverse set of stakeholders, such as Product, Policy, Engineering, and Legal teams Experience working with generative AI products, including writing effective prompts for content review and enforcement Preferred qualifications Experience in trust & safety, abuse investigations, cybersecurity investigations, or threat intelligence in a technology or AI company Experience with large language models and an understanding of how AI technology could be misused for cyber operations Experience operating within abuse monitoring programs or enforcement review systems Understanding of the challenges involved in implementing product policies at scale, including in the content moderation space Experience working with government agencies, regulated environments, or information sharing communities The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $285,000 — $330,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco, CA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Safeguards team is seeking a Red Team Engineer to help ensure the safety of our deployed AI systems and products. In this role, you'll take an adversarial approach to uncover vulnerabilities across our product ecosystem before they can be exploited by malicious actors. Your work will span from technical infrastructure vulnerabilities on our products to emergent risks from advanced AI capabilities. While you'll bring best practices from traditional security approaches, the focus is on broader safety implications and novel abuse unique to advanced AI systems and associated products. You'll investigate the full spectrum of potential abuse — from coordinated account manipulation and payment fraud to novel exploitation of product features — and simulate sophisticated threat actors who chain multiple attack vectors to achieve their objectives. Key responsibilities Conduct comprehensive adversarial testing across Anthropic's product surfaces, developing creative attack scenarios that combine multiple exploitation techniques Research and implement novel testing approaches for emerging capabilities, including agent systems, tool use, and new interaction paradigms Design and execute "full kill chain" attacks that emulate real-world threat actors attempting to achieve specific malicious objectives Build and maintain systematic testing methodologies that evaluate every aspect of our systems Develop automated testing frameworks to enable continuous assessment at scale Collaborate with Product, Engineering, and Policy teams to translate findings into concrete improvements Help establish metrics for measuring detection effectiveness of novel abuse Minimum qualifications Experience in penetration testing, red teaming, or application security Experience in model jailbreaking and testing large-scale agentic workflows for non-obvious prompt injection vectors Strong technical skills in web application security, including hands-on expertise with security testing tools (e.g., Burp Suite, Metasploit, custom scripting frameworks) Experience building custom automation, including LLM-specific testing frameworks A track record of discovering novel attack vectors and chaining vulnerabilities in creative ways A public body of work such as CVEs, blog posts, or disclosed bug bounty reports Strong written and verbal communication skills, with the ability to explain technical concepts to varied audiences Preferred qualifications Experience with AI/ML security or adversarial machine learning Understanding of AI safety considerations beyond traditional security, including modern guardrails against jailbreaks Experience testing API security and rate-limiting systems Background in testing business logic vulnerabilities and authorization bypass techniques Background in anti-fraud, trust & safety, or abuse prevention systems Familiarity with distributed systems and infrastructure security Familiarity with abuse detection mechanisms and the ability to engineer novel bypasses Adaptability to understand and build engagements around emerging threats outside your direct area of expertise The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $405,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.