Location: Dublin, Ireland
Workplace: Hybrid
WHO WE ARE
Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.
Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work.
ABOUT US:
Notion helps you build beautiful tools for your life’s work. In today's world of endless apps and tabs, Notion provides one place for teams to get everything done, seamlessly connecting docs, notes, projects, calendar, and email—with AI built in to find answers and automate work. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, love Notion for its flexibility and choose it because it helps them save time and money.
In-person collaboration is essential to Notion's culture. We require all team members to work from our offices on Mondays, Tuesdays, and Thursdays, our designated Anchor Days. Certain teams or positions may require additional in-office workdays.
ABOUT THE ROLE:
Millions of people rely on Notion to do their most important work. Protecting that trust starts with protecting the people who build Notion: our employees, their laptops, their identities, and the SaaS apps they rely on every day.
We are looking for a hands-on Corporate Security Engineer to own and improve the technical controls that keep our workforce and corporate environment safe. This is a security engineering role focused on building scalable controls and automation across identity, endpoints, SaaS, and workforce infrastructure, not a traditional IT support or corporate engineering role.
You'll own and evolve core security controls, design systems and automation that scale with the company, and help make security both stronger and easier to use. You'll partner closely with IT, Infrastructure, GRC, and Detection & Response to improve the security foundations that employees rely on every day.
WHAT YOU'LL ACHIEVE:
- Harden our identity and access management stack, including Okta and Google Workspace, with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS.
- Run our endpoint security program across a macOS-first fleet, including MDM, EDR, and configuration baselines, with working coverage for Windows and ChromeOS.
- Secure AI tool usage at the endpoint, including governance of large language models, AI agents, and model context protocol (MCP) integrations; detect and prevent unauthorized or risky AI service access and data exfiltration through AI-enabled tools.
- Reduce SaaS risk at scale through SSPM tooling and custom automation, including detection of risky OAuth grants, excessive permissions, shadow IT, and configuration drift.
- Write code (Python, Terraform) to automate access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection.
- Partner with Detection & Response to ensure corporate systems produce the telemetry needed to detect identity, endpoint, and SaaS abuse.
- Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering, not a separate workstream.
- Partner with Detection & Response on investigation and response for corporate security incidents, including phishing, account compromise, lost devices, and BEC.
SKILLS YOU NEED TO BRING:
- Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company.
- Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM).
- Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments.
- Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration.
- Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors.
- Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level.
- Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC.
NICE TO HAVES:
- Experience at a fast-growing tech or AI company where the security program had to outpace headcount.
- A background in IT engineering, SRE, or production engineering that transitioned into security engineering.
- Experience building internal security tooling or workflows that improved employee or developer experience.
- Contributions to the security community through open-source tools, blog posts, or conference talks.
We hire talented and passionate people from a variety of backgrounds because we want our global employee base to represent the wide diversity of our customers. If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply. If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550. https://dev.notion.so/a3ce416456924276a59de91bca740028?pvs=21
#LI-Onsite
A NOTE ON AI
You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on.
EQUAL OPPORTUNITY & ACCOMMODATIONS
We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
Samsara is the pioneer of the Connected Operations™ Cloud, a platform that enables organizations that depend on physical operations to harness IoT data to improve safety, efficiency, and sustainability.
Key requirements:
— proficiency in Go, Python, and JavaScript
— bonus: experience with C/C++ (firmware/embedded systems)
Samsara is the pioneer of the Connected Operations™ Cloud, a platform that enables organizations that depend on physical operations to harness IoT data to improve safety, efficiency, and sustainability.
Key requirements:
— proficiency in Go, Python, and JavaScript
— bonus: experience with C/C++ (firmware/embedded systems)
Location: Kyiv; Lviv; Vinnytsia
Workplace: onsite
Ajax Systems is an international technology company and the largest security systems manufacturer in Europe. Ajax products are trusted by more than 4.5 million end users and 330,000 PRO users across over 180 countries. The company offers comprehensive solutions for protecting residential and commercial properties of various sizes. Today, the Ajax portfolio includes 280 devices for intrusion protection, video surveillance, fire safety, and comfort and automation. Every year, we demonstrate exponential growth both in the size of our team and in the number of users worldwide.
Ajax Systems operates a full-cycle production model, from idea generation and prototyping to mass production and global sales. Each department fully covers a specific operational need of the business. The company’s specialists are involved at every stage — from the production line in Ukraine to the logistics center in Poland, from where products are shipped to distributors worldwide.
Now we are looking for a hands-on Cyber Security Specialist to strengthen our security posture and operational resilience. You will be at the forefront of our cybersecurity defense, responsible for incident monitoring and investigation, the deployment and improvement of security solutions, and ensuring our corporate processes and infrastructure meets compliance standards. If you are passionate about building secure systems, incidents investigation and translating technical findings into efficient mitigation actions, this role is for you.
Key Responsibilities:
Security systems support and improvements:
Participate in security architecture improvement, provide support for the full lifecycle of security systems — from design and deployment to enhancement and technical support.
Security Monitoring & Incident Response:
Improve security monitoring processes and practices, participate in security events monitoring and triaging detected events. Develop and refine SIEM detection rules, investigate anomalies and identify root-cause of incidents, develop and execute mitigation plans to neutralize threats.
Conduction Security Assessments:
Conduct technical security assessments of corporate IT systems to identify compliance deviations and vulnerabilities. Participate in risks assessments, mitigation measures design and implementation.
Compliance & Governance:
Participate in improvement of security procedures, policies, and operational instructions. Collaborate with stakeholders on security processes implementation and improvement to ensure readiness for external security audits (e.g., ISO 27001, SOC2).
Consultancy & Support:
Partner with internal teams to define security requirements for new systems and solutions, provide expert guidance on implementing security controls. Participate in security requests processing, security awareness trainings preparation and conduction.
Reporting & Strategy:
Participate in preparation of reports for management, definition and description of security strategy.
Required Technical Skills & Qualifications:
Experience:
5+ years in CyberSecurity with a strong focus on SOC operations and security systems implementation.
Core Proficiency:
Hands-on experience with SIEM systems (Splunk/QRadar/Logsign/Wazuh), MDM solutions (Jamf/Crowdstrike/JumpCloud/Zoho), EDR/XDR solutions (SentinelOne/ESET/Defender), Cloud security monitoring (M365, GWS, AWS), and Firewall/WAF technologies (Cisco/PaloAlto/Fortinet/Ubiquiti).
Domain Knowledge:
Strong understanding of On-Premise and Cloud architectures, network security protocols, endpoint and application security. Practical experience in industry security best practices implementation (CIS, OWASP, NIST).
Security assessment:
Practical experience performing IT systems and application security assessments and reports preparation.
Security governance:
Experience in preparation of security reports, procedures and instructions for reporting. Practical knowledge of ISO 27001 technological controls implementation.
Language Proficiency:
Intermediate (B1-B2) English level required for working with technical documentation, cross-regional communication with colleagues and partners.
Preferred Skills & Certifications:
Certifications:
Vendor-specific security certifications (e.g., Google, MIcrosoft, Cisco, Palo Alto PCNSE, Fortinet NSE) are highly valued.
Frameworks:
Practical
knowledge of ISO 27001 organizational controls implementation.
Why Join Us:
Impact:
Take ownership of security projects from concept to deployment.
Culture:
Work in a "zero bullshit" environment that values technical excellence and autonomy.
Growth:
Access to corporate English training and professional development/certification support.
Health care:
medical insurance.
Beta Access:
Get hands-on experience with new Ajax security systems before they reach the market.
Innovation:
Help shape the future of "Made in Ukraine" reliability.
Location: Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of the role
We are seeking a Principal Security Researcher to join our
Application Security Team to conduct cutting-edge security research on GitLab's AI-powered DevSecOps capabilities. As GitLab transforms software development through intelligent collaboration between developers and specialized AI agents, we need security researchers who can proactively identify and validate vulnerabilities before they impact our platform or customers.
In this role, you'll be at the forefront of security research, working with our GitLab DevSecOps platform, Duo Agent Platform, GitLab Duo Chat, and AI workflows that represent the future of human/AI collaborative development. You'll develop novel testing methodologies (including for AI agent security), conduct hands-on penetration testing, and translate emerging threats into actionable security improvements. Your research will directly influence how we build and secure the next generation of AI-powered DevSecOps tools, ensuring GitLab remains the most secure software factory platform on the market.
This position offers the unique opportunity to shape security and AI security practices in one of the world's largest DevSecOps platforms, working with engineering teams who are pushing the boundaries of what's possible with AI-assisted software development. You'll have access to cutting-edge AI systems and the freedom to explore creative attack scenarios while contributing to the security of millions of developers worldwide.
This role reports to the Senior Manager of Application Security.
What you'll do
Conduct and lead security research projects across multiple functional areas.
Identify novel, systemic, and chained vulnerabilities in GitLab, where individual weaknesses combine for outsized impact.
Validate security vulnerabilities through hands-on testing, developing proof-of-concept exploits that demonstrate real-world attack scenarios.
Assess emerging industry vulnerability classes against the GitLab codebase, and drive remediation of the class rather than the instance.
Lead security research into GitLab's AI and agentic surfaces, and define the security requirements that engineering teams build against.
Build and direct the tooling and automation that scales security research, including agent-assisted vulnerability discovery across our codebase.
Research the security posture of open source tools and dependencies integrated with GitLab, report findings to their maintainers, and track mitigation following our
responsible disclosure guidelines
.
Solve technical problems of the highest scope, complexity, and ambiguity.
Help shape the team and sub-department roadmap.
Lead the integration of security research results into the engineering and business functions that need to act on them.
Teach, mentor, and advise other domain experts and individual contributors across several teams.
Share knowledge and novel vulnerability types with the security community.
What you'll bring
10+ years of experience in security research, penetration testing, or offensive security roles
Strong ability in discovering and exploiting vulnerabilities in large codebase and complex systems
Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust.
Ability to read and analyze code across multiple languages and codebases
Strong knowledge of AI frameworks
Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation
At ease in establishing and driving complex remediation initiatives involving cross-functional teams
Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner.
Ability to translate complex technical findings into clear risk assessments and remediation recommendations
Strong analytical and problem-solving skills with creative thinking about attack scenarios
Nice to Have:
Published security research or conference presentations; background in software engineering with distributed systems expertise; experience with GitLab or similar DevSecOps platforms
About the team
Security Researchers are a part of our
Application Security team, who address complex security challenges facing GitLab and its customers to enable GitLab to be the most secure software factory platform on the market. We focus on systemic product security risks and work cross-functionally to mitigate them while maintaining Engineering's development velocity.
The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our
benefits
and
equity
. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
United States Salary Range
$203,200
—
$275,000 USD
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: Remote - US
Who we are
At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to
hundreds of thousands of businesses
and empower millions of developers worldwide to craft personalized customer experiences.
Our dedication to
remote-first work
, and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.
.
Hiring and how we work
We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!
Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings.
.
See yourself at Twilio
Join the team as Twilio’s next Staff Security Engineer, Threat Hunting
About the job
The Threat Detection and Response team is looking for a Staff Security Engineer who is passionate about solving the business’s toughest technical-security challenges; you will work within a Security Engineering team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions. You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security tooling, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program.
Responsibilities
In this role, you’ll:
Be an Owner
: Participate in daily operations tasks including, on-call rotation, architecting and developing well-engineered and performant detective tooling and automation, participating in applications/systems threat modeling, and participating in Incident Response activities
Write It Down
: Work with the team to align the Detection and Response vision and strategy, while engaging the team to develop and ship specific, multi-year roadmaps, programs, and projects, ensuring prioritization, resourcing, and timely delivery of work within a changing business environment
Wear the customer’s shoes:
Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity
Ruthlessly Prioritize
: Proactively identify areas that would most benefit the improvement of our business, inclusive of the Incident Response program and with consideration of company/organizational objectives
Don’t Settle
: Challenge the status quo; perform technology research, security research, and architecture reviews needed for a thorough understanding of the Twilio platform to understand what we are defending and how best to defend it
Draw the Owl
: Building systems and services to make the most complex security problems simple and frictionless
Empower Others:
Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work
Be Inclusive:
Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale
Qualifications
Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!
Required:
Proven experience: 3+ years of security engineering in a production-cloud environment
Subject-matter expert on security issues and technologies
Experience designing and building AI Agents and Agentic workflows
Ability to utilize AI for comprehensive, complex threat hunting activities delivering high fidelity detections
Experience detecting and responding to next generation, Artificial Intelligence threats following MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) or similar framework
Advanced knowledge of service-oriented architectures, as well as experience with security tools and technologies fit for a cloud environment
Experience working across a technology stack on difficult security challenges and initiatives
Experience with SIEM platforms and the ability to extend their functionality
Experience with SOAR tools and automating manual security processes
Experience with infrastructure as code, such as Terraform or Cloudformation
Experience in either AWS, GCP, or other large cloud platform
Desired:
Excellent written and verbal communication skills
Ability to influence and build effective working relationships with every level of the organization.
BS in Computer Science, Engineering, or a related technical discipline or equivalent experience
Location
This role will be remote,
but is not eligible to be hired in CA, CT, NJ, NY, PA, WA.
Travel
We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.
What We Offer
Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.
Compensation
*Please note the salary range information provided applies only to candidates residing in California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State due to local requirements. Compensation for candidates in other locations will be discussed during the hiring process. Please note that hiring for this role is not restricted to the locations listed above.
The estimated pay ranges for this role are as follows:
Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $155,520.00 - $194,400.00.
Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): $164,640.00 - $205,800.00.
Based in the San Francisco Bay area, California: $182,960.00 - $228,700.00.
This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave.
The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.
Applications for this role are intended to be accepted until Oct 9th, but may change based on business needs.
Twilio thinks big. Do you?
We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call
Twilio Magic
. Additionally, we empower employees to build
positive change in their communities
by supporting their volunteering and donation efforts.
So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for,
please consider other open positions.
.
Stay alert to recruitment fraud
We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @
twilio.com
email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps.
.
Twilio is proud to be an equal opportunity employer.
We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.
Location: Toronto; San Francisco; London; New York; Montreal
Workplace: Remote
WHO ARE WE?
Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.
We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.
We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.
We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!
As a Senior Security Engineer you will:
- Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues
- Lead security operation functions – including vulnerability management, SAST, DAST, detection engineering, and incident response – in CI/CD and cloud-native production environments
- Integrate security into our applications throughout the software development lifecycle
- Collaborate with product and development teams, driving the success of larger projects to ensure that software is built and deployed securely without compromising agility and speed
- Driving and supporting bug bounty program, application security reviews and threat modeling, including code review and dynamic testing
- Assess and integrate security tools to automate and scale security processes, i.e: evaluate open-source vs vendor solutions
- Gather and analyze security metrics to address security issues with cross-team dependencies
- Be a problem solver who is empathetic to developer concerns and will employ constructive and flexible approach to building innovative solutions
You may be a good fit if:
- 5+ years previous experience in Application/Product Security or Security Operations with a strong focus on security tool onboarding and optimization
- You have an understanding of vulnerability management, network security, cloud security concepts, and industry best practices across many fields of security
- You are comfortable with ambiguity and are able to make informed decisions with little data
- You employ a flexible and constructive approach when solving problems
- You are able to make trade-offs between build vs. buy decisions - help build solutions and able to review what tools are available
- You understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences
- You have a deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls
- You’re a hands-on security engineer interested in automating controls
FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS:
- A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
- Full health and dental benefits, including a separate budget for mental health.
- RRSP matching, 401K, Pension Scheme.
- 100% Parental Leave top-up for up to 6 months, for either parent.
- Annual enrichment benefits:
Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
Education & learning stipend for conferences, courses, and coaching.
- 6 weeks of paid vacation (30 working days!)
- Budget for traveling to other offices if you are remote, plus an annual company offsite.
HOW AND WHERE WE WORK:
- Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon.
- For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.
- For those not near an office: a co-working benefit so you can work alongside others in your city.
- Everyone receives a $500 home office stipend to set up your workspace properly.
If any of the above doesn’t line up exactly with your experience, we still encourage you to apply.
We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs.
We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.
Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.
Location: United States; Canada
Workplace: OnSite
WHO ARE WE?
Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.
We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.
We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.
We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!
AS A MANAGER OF SECURITY ENGINEERING, YOUR KEY RESPONSIBILITIES INCLUDE:
- Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues
- Execute the long-term vision for the Security team in alignment with Cohere’s product and business goals.
- Collaborate closely with leadership to prioritize high-impact initiatives and strategic customer engagements.
- Vulnerability Management: Develop and implement enterprise-wide vulnerability management processes and tooling, including identification, prioritization, remediation tracking, and reporting, including customer artifacts
- Static Application Security Testing (SAST): Establish SAST programs, integrate tools into CI/CD pipelines, and analyze results to identify and remediate security flaws in source code
- Dynamic Application Security Testing (DAST): Implement DAST methodologies, configure scanning tools, and conduct regular assessments of running applications
- Penetration Testing: Lead and oversee internal and external penetration testing engagements, including web application, API, network and agentic AI platform including managing our bug bounty program
- Security Architecture Review: Collaborate with development teams to review and validate security architecture and design patterns
- Secure SDLC Integration: Embed security practices throughout the software development lifecycle, working closely with engineering and product teams
- Team Leadership: Lead and grow a high-performing team of Security engineers through hiring, coaching, and mentorship
- Metrics and Reporting: Establish key security metrics, generate regular reports for leadership, and communicate security posture to stakeholders
- Compliance and Standards: Ensure application security practices align with industry standards (OWASP Top10 for LLMs, ISO 27001) and regulatory requirements
YOU MAY BE A GOOD FIT IF:
- You have 8+ years of previous experience in Application Security / Security Engineering with a strong focus on vulnerability management, SDLC and bug bounty programs.
- Proven experience with SAST, DAST, and penetration testing methodologies and tools
- Proficiency with programming languages (Python, GoLang, etc.) and web technologies
- Experience with cloud platforms (AWS, GCP, Azure) and container security
- Excellent communication and interpersonal skills with ability to influence technical and non-technical stakeholders
- Experience building and managing high-performing security teams
- You are comfortable with ambiguity and are able to make informed decisions with little data.
- You employ a flexible and constructive approach when solving problems.
- You are able to make trade-offs between build vs. buy decisions—help build solutions and be able to review what tools are available.
- You understand secure engineering best practices, can articulate problem statements, and propose solutions to both technically savvy and non-technical audiences.
- You have a deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls.
APPLY:
If you are passionate about solving complex revenue challenges in a dynamic AI environment and want to join a team that values technical excellence and innovation, we encourage you to apply.
WORKING LOCATION:
Remote US or Canada
FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS:
- A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
- Full health and dental benefits, including a separate budget for mental health.
- RRSP matching, 401K, Pension Scheme.
- 100% Parental Leave top-up for up to 6 months, for either parent.
- Annual enrichment benefits:
Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
Education & learning stipend for conferences, courses, and coaching.
- 6 weeks of paid vacation (30 working days!)
- Budget for traveling to other offices if you are remote, plus an annual company offsite.
HOW AND WHERE WE WORK:
- Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon.
- For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.
- For those not near an office: a co-working benefit so you can work alongside others in your city.
- Everyone receives a $500 home office stipend to set up your workspace properly.
If any of the above doesn’t line up exactly with your experience, we still encourage you to apply.
We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs.
We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.
Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.
Location: Salt Lake City, Utah, United States
About the Role
ICapital is looking for a hands-on Application Security practitioner to join a small, high-impact team building a modern AppSec program. This individual will work directly with the Head of AppSec and senior team members, executing secure design, API security, and developer enablement.
Responsibilities
Support threat modeling and design reviews across a broad and growing service portfolio.
Support shift-left security initiatives, security in CI/CD, developer guidance, and SAST and SCA remediation workflows.
Contribute to API security across the organization, assessing API exposure, validating authentication and authorization patterns.
Write Python automation that scales AppSec capacity: triage tooling, finding pipelines, security context enrichment.
Work directly with developers to remediate SAST and SCA findings, reduce false positive noise, and build security habits across engineering.
Qualifications
Hands-on experience across some secure design and threat modeling, API security, offensive security, or SAST/SCA program work
Real understanding of attack patterns and exploitation techniques
Familiar with OWASP Top 10 in practice
API security experience with REST and GraphQL assessment
Able to build and maintain security automation in Python, tooling that scales AppSec capacity
Understanding of web application and API security
Able to operate with autonomy in an environment still building its processes
Relevant certifications, cloud-native environment experience and exposure to AI/LLM security are a plus
Experience as a developer or engineer and fluency in Ruby, Python, and Scala are a plus
Benefits
The base salary range for this role is $100,000 to $130,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO).
We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday.
For additional information on iCapital, please visit
https://www.icapitalnetwork.com/about-us
Twitter: @icapitalnetwork | LinkedIn:
https://www.linkedin.com/company/icapital-network-inc
| Awards Disclaimer:
https://www.icapitalnetwork.com/about-us/recognition/
iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
Location: Poland; United Arab Emirates; Brazil; Argentina; Spain; Serbia
Imunify360
is a leading developer of Linux infrastructure and security solutions. Our flagship product, Imunify360, is a comprehensive security suite that protects thousands of shared hosting environments, VPS, and dedicated servers worldwide. Our clients include industry giants such as Dell, GoDaddy, IBM, and Zoom, with over 4,500 customers globally. The company has more than 250 employees.
We are looking for an
engineer-architect
to build a
new product from scratch
. This is not a position within an existing team—you will single-handedly create a runtime protection layer for Node.js applications. The hosting market is rapidly adopting Node.js, and modern applications are increasingly generated by users with AI tools and little technical security expertise. Your mission is to make protection automatic, transparent to client code, and effective in real time.
This is a role with the highest level of
ownership
(Senior / Staff / Architect level), where you will make key architectural decisions and take full responsibility for the outcome.
Responsibilities
Define the technical approach for building runtime protection inside the Node.js process.
Design the detection logic to identify and block attacks during application execution.
Build and launch the first version of the product in real production environments.
Ensure the protection works
without requiring changes to client code
and without breaking legitimate applications.
Continuously improve the product based on telemetry, production feedback, and real-world incidents.
Achieve target values across four key metrics:
Runtime overhead
False positives
False negatives
Customer escalation volume
Requirements
The top priority is Security, not just Node.js.
Security experience outweighs general backend tenure.
Must-have:
Experience in Security Engineering or Security Research
(deep understanding of attack vectors and defense methods).
Have independently built and shipped a product/solution from scratch
(end-to-end ownership: from idea to production).
Ability to take an ambiguous problem, define a solution, and deliver a working result without constant supervision.
Experience designing architecture and making key technical decisions (Staff/Architect level is a strong plus).
English language:
Intermediate or higher
(written and spoken — all interviews are conducted in English).
Nice-to-have:
Security experience specifically in the context of Node.js (vulnerability analysis, securing, researching Node.js applications).
Experience with Linux in production and development environments.
Knowledge of Runtime Protection, WAF, instrumentation, malware analysis, and Incident Response.
Experience in managed hosting / VPS domains.
Experience with AI coding agents (Copilot, Cursor, etc.).
Important:
If you are a Security Engineer / Researcher who doesn't code on a daily basis, you must be comfortable using AI-assisted development tools and be capable of building an MVP with their help.
Who you are (mindset):
Builder:
You genuinely enjoy creating something new and seeing it run in production.
High ownership:
You don't wait for tasks to be assigned — you define the approach and own the results.
Practioner:
You write code (yourself or with AI), not just review and coordinate.
You understand
Detection Engineering
— how detection rules behave at scale across thousands of servers and the true cost of false positives.
We do NOT consider candidates who:
Have only theoretical or research experience without shipping real products.
Have general Node.js development experience but lack a security component.
Reside in countries with complex B2B tax reporting requirements (USA, UK, Canada, Germany, France, and others — to be clarified during screening).
Have frequent job changes (every 1–2 years) without valid reasons.
Benefits
Format:
100% remote work anywhere in the world.
Legal setup:
B2B only (contract with your sole proprietorship or company).
Budget:
Up to $12,000 gross/month (before taxes, under a B2B agreement).
Company:
A stable, established international product company with 15+ years in the market.
Role:
A key position in building a new product line from the ground up.
Location: London
Workplace: OnSite
Company Description
We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.
We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.
Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.
If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.
With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.
THE ROLE
Checkout.com http://Checkout.com is scaling a multi-cloud environment at pace, and security architecture is central to how we do it safely.
As Senior Cloud Security Engineer, you'll work closely with Engineering, GRC, Technology Risk, and Security Operations to embed security into every design decision and to make sure we can see what's happening across the estate once it's live.
You'll help embed security within the design phase and ongoing operations of our multi-cloud posture, define guardrails and policy-as-code standards, and support the strengthening of our SIEM and detection capability. You'll take on the most complex and ambiguous cloud security challenges in the business, and hold engineers to best practices.
This isn't a tool-monitoring role. You're here to lead security-by-design, set best-practice standards, and raise the bar.
What You'll Be Doing
- Develop and enforce reference security architectures, patterns, and blueprints for secure cloud adoption across AWS, Azure, and GCP.
- Conduct security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift.
- Partner with Engineering teams to embed security guardrails early in design, ensuring compliance and resilience without adding friction.
- Evaluate engineering and platform architecture proposals, identifying security gaps and seeing remediation through to completion.
- Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS.
- Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most against CIS, NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes.
- Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate.
- Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support business decision-making.
Skills and Experience We're Looking For
We're looking for someone with strong technical expertise and a genuine passion for security. Here's what we need:
- Risk-based decision-making and adherence to regulatory and internal security standards (PCI DSS, NIST, SOC 2, ISO 27001, CIS).
- Broad knowledge across security domains and their capabilities within AWS, Azure, and GCP, with 6+ years' hands-on experience and SME depth in at least one platform.
- Kubernetes (EKS/AKS/GKE), API security, and IaC security (e.g. Terraform, CloudFormation, ARM templates).
- Securing user and non-user access at scale, including Azure Policy and cloud-native IAM controls.
- Demonstrated ability to provide clear, security-focused guidance, combined with excellent communication and senior-stakeholder engagement skills, and experience mentoring other engineers.
Nice to Have
- CISSP, CCSP, or equivalent certifications.
- AZ-500, AWS Certified Security, Google Professional Cloud Security Engineer, or equivalent cloud security certification.
- Microsoft Certified: Azure Solutions Architect Expert, or Google Professional Cloud Architect.
- Experience integrating ATT&CK Navigator into SOC workflows.
Additional Information
Bring all of you to work
We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.
Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.
We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.
It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.
Life at Checkout.com http://Checkout.com
We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us.
For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/
Location: London
Workplace: OnSite
Company Description
We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.
We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.
Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.
If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.
With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.
THE ROLE
You will be a hands-on operator at the heart of the Cyber Security team, helping to run, harden, and continuously improve the day-to-day machinery of security. Where the Detection & Threat Engineer defines what "good" looks like, you help make it real, turning standards, runbooks, and tooling into reliable, repeatable operational practice.
This is a delivery-focused role for an experienced practitioner. You will spend your time in the tooling, in the tickets, and in the detail: enhancing the platforms the team depends on, tightening procedures, and making sure findings, alerts, and remediation work actually get closed out rather than left to drift.
You will partner closely with Senior Detection & Threat Engineers, Application Security, Information Security, Security Operations, and Engineering executing against the standards they set, feeding operational insight back up, and progressively taking ownership of the tooling and procedures that keep security operations running.
WHAT YOU'LL BE RESPONSIBLE FOR
- Supporting and enhancing security tooling SIEM, EDR, DLP, vulnerability management, and automation platforms including configuration, tuning, and day-to-day maintenance
- Building and improving operational procedures, runbooks, and playbooks so the team's response is consistent and repeatable
- Triaging and handling security alerts, escalating high-severity events, and contributing to incident response under the direction of senior engineers
- Tracking, coordinating, and driving pentest and vulnerability findings through to remediation across engineering teams (ownership, action plans, status, closure)
- Maintaining the accuracy and hygiene of security data asset inventories, finding trackers, and remediation records
- Supporting detection deployment and validation, and feeding operational feedback into detection tuning to reduce noise and alert fatigue
- Assisting with scripting and automation to remove manual toil from recurring operational tasks
- Producing clear operational reporting and metrics on findings, remediation progress, and tooling health
WHAT WE'RE LOOKING FOR
- 5+ years of hands-on experience in a Security Operations, SOC, or equivalent operational security role
- Practical experience operating modern security tooling SIEM (e.g. Sentinel), Data Loss Prevention (DLP) tools, EDR, and vulnerability management platforms
- Solid understanding of security operations workflows: alert triage, incident handling, and vulnerability/finding remediation lifecycles
- Comfort with scripting to support automation and tooling (e.g. Python, KQL)
- Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closure
- Working knowledge of cloud environments (e.g. AWS, Azure and GCP) and how security operations apply across cloud and SaaS
- Familiarity with common frameworks and standards such as PCI DSS, NIST CSF, SOC 2, ISO 27001, CIS Benchmarks, and MITRE ATT&CK
- A pragmatic, ownership-minded operator: methodical, detail-oriented, and focused on getting things fixed rather than just logged
Additional Information
Bring all of you to work
We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.
Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.
We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.
It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.
Life at Checkout.com http://Checkout.com
We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us.
For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/
Location: Remote, Global
Workplace: Remote
ABOUT SUPABASE
Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth.
Start in minutes with a fully managed, scalable Postgres database and a suite of tools that eliminate the complexity of backend development. Use one or use all—Supabase gives teams the flexibility of open source with the speed and simplicity of a modern platform, so they can move fast without sacrificing control.
WHAT ARE WE LOOKING FOR
We’re looking for a Platform Security Engineer to join our team and help strengthen the security of Supabase’s infrastructure, cloud platform, Kubernetes environments, and containerized workloads as we continue to scale. You’ll work closely with infrastructure, platform, SRE, product engineering, and technical leadership, helping us proactively reduce risk across the systems that run Supabase.
This role is ideal for someone who has deep hands-on experience with AWS, Kubernetes, containers, Linux, and large cloud environments and is excited about securing developer infrastructure without slowing teams down. Success in this role means improving the security posture of the platform through pragmatic engineering, clear technical judgment, and scalable guardrails.
WHAT YOU’LL BE RESPONSIBLE FOR
In this role, you’ll:
- Identify and reduce security risk across AWS, Kubernetes, containerized workloads, and platform infrastructure.
- Conduct threat modeling, architecture reviews, and technical risk assessments for platform and infrastructure systems.
- Partner closely with infrastructure, platform, and SRE teams to design practical controls and secure-by-default patterns.
- Improve Kubernetes and container security across areas like workload isolation, RBAC, admission control, secrets, network policy, and runtime hardening.
- Assess container runtime and Linux isolation risks, including capabilities, seccomp/AppArmor, namespaces, cgroups, and container escape scenarios.
- Strengthen AWS security posture across IAM, account boundaries, network controls, logging, detection, encryption, and service configuration.
- Build scalable mechanisms such as automation, guardrails, paved paths, detection, secure defaults, and review frameworks.
- Distinguish between theoretical risk and material platform risk to prioritize security efforts effectively.
YOU MIGHT BE A GOOD FIT IF YOU
- Have senior-level experience in platform security, cloud security, infrastructure security, container security, or security engineering.
- Have deep practical experience with AWS, Kubernetes, containers, and Linux security fundamentals.
- Have worked in large cloud environments, multi-cluster Kubernetes setups, developer platforms, SaaS platforms, or high-scale infrastructure teams.
- Can reason clearly about identity, networking, workload isolation, runtime security, secrets, supply chain, and blast radius.
- Communicate clearly across both technical and non-technical audiences, especially in a written, asynchronous environment.
- Are able to manage security efforts across complex projects with various stakeholders
- Are energized by solving real-world infrastructure security problems and navigating ambiguity while moving quickly.
- Prefer building guardrails, automation, and secure defaults over creating unnecessary process or bottlenecks.
WHAT WE OFFER
- Fully Remote
We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world.
- ESOP
Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together.
- Tech Allowance
Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work.
- Health Benefits
Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us.
- Annual Off-Sites
Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year.
- Flexible Work
We operate asynchronously and trust you to manage your own time. You know what needs to be done and when.
- Professional Development
Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth.
ABOUT THE TEAM
Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love.
- ~400 team members
- 60+ countries
- 20+ languages spoken
- Over $1B raised (including our $500M Series F)
- 540,000+ community members
We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.
Location: US - Remote - Massachusetts , US - Headquarters - Maryland - Columbia
Who is Tenable?
Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!
What makes Tenable such a great place to work?
Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!
Your Role:
Tenable is seeking a talented and dynamic product marketing leader to help extend the company’s leadership across the cloud security (CNAPP) and operational technology (OT) security markets.
Tenable is the Exposure Management company. More than 40,000 organizations around the world rely on us to help them understand and reduce cybersecurity risk. Our goal is to arm every organization, no matter how large or small, with the visibility and insight to answer four critical questions at all times: Where are we exposed? Where should we prioritize based on risk? Are we reducing our exposure over time? How do we compare to our peers?
In this role, you will lead product marketing for Tenable’s Cloud Exposure (CNAPP) and Operational Technology (OT) solutions, with Product Marketing Managers aligned to each area reporting to you. These are two distinct buyer worlds, and a core part of this role is understanding those differences well enough to build credible, differentiated messaging for each, while also connecting both to Tenable's broader exposure management narrative so customers see one coherent platform story. Reporting to the Senior Director of Product Marketing, you will interface and regularly collaborate with a variety of departments across Tenable and play a key role in successfully executing product launches, enablement programs and demand generation campaigns for both the cloud security and OT businesses. You will leverage analytics, establish benchmarks, and gain feedback to identify program success and opportunities for improvement.
Your Opportunity:
Perform market research and analysis using primary (customer, partner) and secondary (analyst, sales) sources across both the cloud security and OT markets; use this to inform product, pricing, and go-to-market strategies
Develop distinct buyer personas, solution messaging, and content strategy for the cloud security market and the OT security market
Ensure cloud and OT positioning reinforces Tenable's overall exposure management platform narrative
Create clear and compelling content for sales collateral, solution briefs, blog posts, website, webcasts, trade shows, and related activities to drive market demand and awareness for both businesses
Identify key technology partnership / co-marketing opportunities and new routes to market
Lead new product and solution launches across cloud security and OT
Take ownership of results by measuring the effectiveness of campaigns and launch activities with data-driven insights and performance tracking
Actively participate in analyst relations and public relations initiatives
Participate in webcasts, events and other demand generation activities
Guide and contribute to sales and partner enablement across both product areas
Serve as a voice of the sales team to the product development organization
Manage and develop Product Marketing Managers aligned to cloud security and OT, including setting priorities and ensuring alignment across both go-to-market strategies
Recruit, onboard and train new hires
Provide mentorship, guidance and career development to members of the team
Create an inclusive, supportive environment where all team members can do their best work
Evaluate performance of the team, including quarterly performance feedback for each team member; complete annual reviews and recommend rewards (merit/promotion/equity) based on performance for the review period
Partner with manager on budget requests and spending for strategy and team development needs
Provide input on yearly budget for planned strategy as well as for the team (T&E, etc.)
Must have ability to travel in the US up to 20% of time
What You’ll Need:
Bachelor’s degree or equivalent work experience required
12+ years of high-tech product marketing or similar experience; 7+ years’ experience as a direct people manager
Hybrid: Ability to commute to our Columbia, MD headquarters OR Boston, MA office - 3 days per week.
Demonstrable knowledge of cloud security and vulnerability management trends, along with working knowledge of the operational technology (OT) field and broader trends in OT-heavy industries such as manufacturing and utilities
Your written and oral communication skills are superb, and you can explain complex concepts clearly to a variety of audiences
You are able to collaborate in a highly matrixed environment with many different stakeholders, including all levels of management
You have the ability to blend strategic thinking with creative execution
You possess excellent organizational skills and strong follow-through
You thrive in fast-paced, collaborative environments where change is the norm and the bar for quality is set high
You have the capacity to balance multiple projects with aggressive deadlines at the same time
And Ideally:
Master’s degree
Working knowledge of both the CNAPP/cloud security market and the OT security landscape, including relevant compliance frameworks
#LI-Hybrid #LI-LP1
This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs.
US Pay Range
$188,000
—
$250,666.67 USD
We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact
Recruiting@Tenable.com
for further assistance.
Tenable Data Consent Statement
Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you:
General Applicant Privacy Notice
California Applicant Privacy Notice
EU/EEA/UK Applicant Privacy Notice
Location: Remote - US
About Backblaze
Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands.
Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals.
But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. Backblaze is seeking a highly analytical,
systems-oriented
Director of Security Operations
to drive the planning, forecasting, deployment, and optimization of hardware infrastructure across our global cloud storage platform.
Role Overview
The Director of Security Operations leads the organization's day-to-day cybersecurity operations across traditional and AI-enabled environments. Reporting to the CISO, the Director leads Security Operations while partnering closely with the Director of Security Architecture & Engineering.
This is a hands-on technical leadership role requiring experience implementing and operating security controls as well as leading teams, incidents, and security programs.
Key Responsibilities
Lead security monitoring, incident response, threat hunting, security analytics, vulnerability management, adversary emulation, identity security, and operational resilience.
Establish operational priorities, service objectives, metrics, playbooks, and processes based on organizational risk and business needs.
Serve as incident commander for significant cybersecurity events and ensure lessons learned drive improvements to controls and operations.
Drive responsible adoption of AI-assisted detection, investigation, vulnerability analysis, threat hunting, and response capabilities.
Ensure effective security monitoring and response for AI applications, autonomous agents, workloads, and non-human identities.
Use automation to reduce manual work and compress detection, analysis, containment, and remediation timelines.
Partner with Security Architecture & Engineering to ensure controls are effectively designed, implemented, operationalized, monitored, and validated.
Develop security talent and provide the CISO with clear reporting on incidents, exposure, operational performance, risk, and program maturity.
Qualifications
Experience leading Security Operations, Incident Response, Detection Engineering, Vulnerability Management, IAM, or related cybersecurity functions.
Demonstrated hands-on experience implementing and operating security controls across cloud, infrastructure, applications, identity, endpoints, and networks.
Strong technical understanding of security analytics, detection engineering, exposure management, adversary emulation, and identity security.
Experience leading significant cybersecurity incidents and cross-functional response activities.
Experience implementing security automation and AI-assisted operational capabilities.
Strong leadership, mentoring, communication, and executive presentation skills.
Experience in cloud-native or large-scale distributed environments and familiarity with modern cybersecurity and AI-risk frameworks is preferred.
Backblaze Perks:
Healthcare for family, including dental and vision
Competitive compensation and 401K
RSU grants for full-time employees
ESPP program
Flexible vacation policy
Maternity & paternity leave
MacBook Pro to use for work plus a generous stipend to personalize your workstation
Childcare bonus (human children only)
Fertility treatment and support
Learning & development program
Commuter benefits
Culture that supports a healthy work-life balance
To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors, including candidate location, skills, depth of work experience, and relevant licenses/credentials, and may vary from the amounts listed below.
The base pay range for this position is $205,000 - $230,000
At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing.
We are proud to be an Equal Opportunity Employer.
To understand more about the data we collect and process as part of your application, please view our
Backblaze Employee Privacy Notice.
ОфисKyiv; Lviv; Vinnytsia
УдалённоRemote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States; The base salary range for this role’s listed level is currently for residents of the United States only
УдалённоRemote - US; Compensation for candidates in other locations will be discussed during the hiring process
УдалённоseniorToronto; San Francisco; London; New York; Montreal
ОфисUnited States; Canada
Salt Lake City, Utah, United States
УдалённоPoland; United Arab Emirates; Brazil; Argentina; Spain; Serbia
