Вакансии

Задачи: — расследование нелегальных сетей — построение интеллектуальных конвейеров на базе искусственного интеллекта Требования: — опыт работы с расследованиями финансовых преступлений, отмыванием денег, нелегальными азартными играми, подпольным банкингом — знание OSINT и методов анализа угроз — опыт работы с блокчейн-интеллектом и крипторасследованиями — владение английским языком — знание китайского (мандарин) будет преимуществом Условия: — удалённая работа

Location: Berlin Office; Bosnia; Norway; Estonia; Latvia; Slovenia; Netherlands; Hungary; Kosovo; Portugal; Poland; Serbia; Germany; Austria; Finland; Montenegro; Albania; Lithuania; Slovakia; Ireland; Bulgaria; Denmark; Belgium; Czech Republic; United Kingdom; Croatia; Spain; Greece Workplace: Remote The AI orchestration of your wildest imagination. n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits. Backed by a fiercely inventive community and 500+ builder-approved integrations, we’re changing the way people bring systems together and scale ideas for impact. Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve: - Cultivated a community of more than 650,000 active developers and builders - Earned 190K+ GitHub stars, making us one of the world’s Top 40 most popular projects - Backed by top investors, from Sequoia’s first German seed to our SAP's recent strategic investment - bringing us to a $5.2bn valuation That’s the company we’ve built. Now we’d love to see what you can build. If you’re applying, try n8n out - whether you’re technical or not - and share a screenshot of your first workflow with us. The easiest place to start is here: app.n8n.cloud/register http://app.n8n.cloud/register. We’re in a defining moment of an incredible journey. Come and build with us. 🎯 Your main goal will be to identify and reduce security risks across n8n's product and internal systems, using threat modelling, hands-on security expertise, and cross-functional collaboration to help teams design, build, and operate more secure systems. You'll join our growing security team at a pivotal stage, acting as a trusted security partner to teams across the business. You'll help us build a move from reactive security management to a proactive, scalable security practice. Here's what you'll be driving: THREAT MODELLING, RISK ASSESSMENT & SECURITY DESIGN - Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems, identifying vulnerabilities and recommending practical mitigations. - Partner with Engineering, Cloud, IT, and Data teams to review security designs, define actionable security requirements, and influence the implementation of appropriate controls. - Help teams embed security into their development processes through secure coding guidance, design reviews, documentation, and security tooling that enables them to identify and address risks independently. VULNERABILITY MANAGEMENT & COORDINATED DISCLOSURE - Participate in the security triage rotation, assessing incoming vulnerability reports, validating findings, and prioritising remediation based on severity and business impact. - Collaborate with engineering teams to coordinate vulnerability remediation, verify fixes, and support secure patch and release processes. - Help manage our vulnerability disclosure and bug bounty programmes, including engagement with security researchers, coordinated disclosures, and GitHub Security Advisories. SECURITY OPERATIONS & INCIDENT READINESS - Help establish and improve logging, detection, and protective monitoring capabilities across our infrastructure, corporate systems, and internal applications. - Develop and improve incident response processes, runbooks, and exercises to strengthen our ability to detect, investigate, and respond to security incidents. - Work closely with system owners to identify security gaps, prioritise remediation, and verify that implemented controls effectively reduce risk. CUSTOMER TRUST & COMPLIANCE ENGINEERING - Support SOC 2 compliance by helping establish continuous control monitoring, automated evidence collection, and processes that make security assurance part of everyday operations. - Collaborate with Sales, Solutions Engineering, and Customer Success to respond to customer security assessments and build reusable resources that streamline future requests. - Partner with Legal, Finance, IT, and other stakeholders to assess security risks, improve security policies and controls, and strengthen trust with enterprise customers. We're hiring two Security Engineers with complementary strengths, so you don't need to be an expert in every security domain. REQUIREMENTS MUST-HAVES - 🔍 Threat Modelling & Risk Assessment: You have hands-on experience assessing real-world systems, identifying security risks, determining defensible severity levels, and recommending practical controls that teams can implement. - 🛠️ Technical Security Expertise: You can validate security findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation when needed to demonstrate risks or improve security processes. - 🔐 Security Engineering Experience: You've worked hands-on in infrastructure, product, or application security within a product-focused organisation, with a strong understanding of how modern systems are designed and secured. - 🤝 Cross-functional Influence: You're comfortable acting as an internal security consultant, advising teams, challenging technical decisions constructively, and influencing stakeholders without direct authority. - 🎯 Risk Remediation & Ownership: You've helped secure systems you don't directly own, translating security findings into actionable requirements and working with responsible teams to ensure effective remediation. - 🤖 AI & LLM Fluency: You're comfortable using LLM-assisted tooling and understand its limitations, security implications, and potential failure modes. - ✍️ Clear Communication: You can explain complex security risks, document technical findings, and provide practical guidance that engineers and non-technical stakeholders can confidently act on. You also bring deep expertise in at least two of the following areas: - 💻 Application Security: You've developed security checks, engineering guardrails, tooling, or guidance that helps product teams build and ship secure software. - ☁️ Platform Security: You have experience securing a major cloud provider and Kubernetes environments, including areas such as sandboxing, multi-tenancy, or identity. - 🔑 Corporate Security: You've worked on identity and access management, endpoint security, employee access lifecycles, or data access controls across corporate environments. - 🚨 Security Monitoring: You've implemented logging, protective monitoring, or security detection capabilities that support effective investigation and incident response. - 📋 Security Assurance & Compliance: You've supported SOC 2 or ISO 27001 from an engineering perspective, including implementing technical controls or automating compliance evidence collection. NICE-TO-HAVES - 🐛 Vulnerability Disclosure: You've helped operate bug bounty or coordinated vulnerability disclosure programmes, including publishing security advisories such as GHSAs or CVEs. - 🧠 AI & Agent Security: You have experience assessing or securing LLM-powered applications and AI agents, including risks related to permissions, tool access, prompt injection, or sensitive data. - 🏢 Corporate IT Tooling: You're familiar with platforms such as Okta, Azure, or Drata and their role in securing corporate systems and supporting compliance. - 🌍 Open-source Ecosystems: You've worked with open-source or source-available products, contributed to security communities, or are already familiar with n8n. - 🎯 Penetration Testing: You have practical penetration testing experience and can independently identify, demonstrate, and help remediate security vulnerabilities. - 🌱 Early-stage Security Experience: You've been an early security hire or helped establish security practices in a startup or rapidly scaling organisation. Why join us? At n8n, you'll help shape security at a defining stage of our growth. We're building a security practice that goes beyond reacting to vulnerabilities, and you'll play a key role in how we identify risks, influence engineering decisions, and establish security practices that scale with the business. You'll work across a broad range of challenges, from securing AI-powered product features and our source-available automation platform to improving corporate security, strengthening incident readiness, and making compliance more automated. You'll have direct exposure to teams across the company, the opportunity to influence important technical decisions, and the autonomy to turn your expertise into measurable security improvements. Sound like a challenge you're excited to take on? Apply now — and help us build the future of secure automation. n8n is an equal opportunity employer and does not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, gender identity, age, marital status, veteran status, or disability status. We can sponsor visas to Germany; for any other country, you need to have existing right to work. Our company language is English. You care about diversity and inclusion? We do too! Check out our Diversity, Inclusion and Belonging initiatives at n8n https://www.notion.so/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35?pvs=21 (https://www.notion.so/n8n/Diversity-inclusion-and-belonging-n8n-c1bec2fff536422d868b1a438d990e35). Location disclaimer: If you see multiple job postings for the same role, it is most likely because we're hiring remotely for this role and posting in different locations to make sure every potential candidate can see the role. Please apply to the location you're the most likely to work from in the future. BENEFITS - Competitive compensation 💸 – We offer fair and attractive pay. - Ownership 💪 – Our core value is to “empower others,” and we mean it—you’ll get a slice of n8n with equity. - Work/life balance 🏖️ – We work hard but ensure you have time to recharge: - Europe: 30 days of vacation, plus public holidays wherever you are. - US: 20 vacation days, 8 sick days, plus public holidays wherever you are. - Health & wellness 🩺 – - Europe: We provide benefits according to local country norms.* - US: Multiple low-premium, low-deductible medical plans with coverage for individuals and families—plus a no-cost premium HDHP option with a pre-seeded HSA—along with dental and vision coverage. - Future planning 💰 – - Europe: We provide pension contributions according to local country norms.* - US: 401(k) retirement plan with a 4% employer match. - Financial security 🛡️ – - Europe: We provide benefits according to local country norms.* - US: Company-paid short-term and long-term disability insurance, plus life insurance to support you and your loved ones. - Career growth 📈 – We hire rising stars who grow with us! You’ll get €1K (or equivalent) per year to spend on courses, books, events, or coaching to level up your skills. - A passionate team 🤩 – We love our product, and we prove it with regular hackathons where we see who can build the coolest thing with it! - Remote-first 🌏 – Our team works remotely across Europe, with regular off-sites for team bonding. Some roles, like sales in the US, are hybrid—please check the job description. - Giving back 🤝 – We're big fans of open source, and you'll get $100 per month to support projects you care about. - Transparency 🙏 – We all know what everyone’s working on, how the company is doing—the whole shebang. *Country and/or State specific details provided in your employment agreement.

Location: Budapest WorldQuant develops and deploys systematic financial strategies across a broad range of asset classes and global markets. We seek to produce high-quality predictive signals (alphas) through our proprietary research platform to employ financial strategies focused on market inefficiencies. Our teams work collaboratively to drive the production of alphas and financial strategies – the foundation of a balanced, global investment platform. WorldQuant is built on a culture that pairs academic sensibility with accountability for results. Employees are encouraged to think openly about problems, balancing intellectualism and practicality. Excellent ideas come from anyone, anywhere. Employees are encouraged to challenge conventional thinking and possess an attitude of continuous improvement. Our goal is to hire the best and the brightest. We value intellectual horsepower first and foremost, and people who demonstrate an outstanding talent. There is no roadmap to future success, so we need people who can help us build it. Technologists at WorldQuant research, design, code, test and deploy firmwide platforms and tooling while working collaboratively with researchers and portfolio managers. Our environment is relaxed yet intellectually driven. We seek people who think in code and are motivated by being around like-minded people. The Role : We are seeking a diligent and driven security operations specialist with strong hands-on technical skills, proven problem solving ability and excellent communication skills. As an security operations specialist at WorldQuant you will work closely with our technologists, researchers and portfolio managers to ensure systems are following best practices, perform incident response, provide patch and vulnerability remediation guidance, and support the identity and authorization infrastructure of the firm. Responsibilities (including but limited to): Research CVEs and other threat intelligence to formulate and deploy a response Operate and manage WorldQuant’s secrets and authentication management tool instances Develop tooling for continuous audit, code analysis and other security analysis activities Monitor and operate detection tools and respond to identified security issues in the environment Provide operational support for Authentication, Identity and other security infrastructure. Operate and improve the firms security monitoring and detection and infrastructure Provide customers support for foundational components such as Kerberos, SSH, SSL and more. Requirements : Degree in a technical or quantitative discipline from a top tier University Solid understanding of UNIX security. Knowledge of industry standard tools beneficial - (eg gitlab, nix, redhat linux, claude, jira, etc) Scripting experience, preferably in python. Experience operating security infrastructure, developing integrations of security products. Ability to communicate and design solutions related to security from first principles. Experience with Linux, Kerberos, SSL, SSH and  Active Directory Experience with agentic development Strong verbal and written communication skills in English What We Offer: Competitive compensation package Core benefits include: premium private health insurance and life insurance with savings plan Support for every aspect of life through Employee Assistance Program and fully covered sick leave Strong culture of learning and development: training courses, library, guest speakers, share and learn events, global conferences Regular offsite team buildings, annual conferences and occasional global summits – opportunity to travel and connect with our local and global teams Employee resources groups with strong diversity and inclusion culture #LI-DN1 By submitting this application, you acknowledge and consent to terms of the WorldQuant Privacy Policy. The privacy policy offers an explanation of how and why your data will be collected, how it will be used and disclosed, how it will be retained and secured, and what legal rights are associated with that data (including the rights of access, correction, and deletion). The policy also describes legal and contractual limitations on these rights. The specific rights and obligations of individuals living and working in different areas may vary by jurisdiction. Copyright © 2025 WorldQuant, LLC. All Rights Reserved. WorldQuant is an equal opportunity employer and does not discriminate in hiring on the basis of race, color, creed, religion, sex, sexual orientation or preference, age, marital status, citizenship, national origin, disability, military status, genetic predisposition or carrier status, or any other protected characteristic as established by applicable law.

Location: PL Workplace: remote Overview: SOFTSWISS continues to expand the team and is looking for an experienced IAM Security Engineer to join us. We are seeking a hands-on professional with strong expertise in identity and access management, IAM integrations, and access lifecycle automation, who shares our culture and values. Purpose of the role: You will be responsible for designing, implementing, and maintaining secure and scalable identity and access management solutions, integrating IAM services across enterprise systems, and automating access lifecycle processes to ensure efficient and secure access management. Key responsibilities: Architect and implement IAM-related integrations using SCIM, SAML, OAuth, OIDC, and APIs. Lead automation of access lifecycle management processes. Design and implement RBAC/ABAC models across enterprise systems. Troubleshoot and resolve complex IAM-related incidents Integrate IAM services into CI/CD and Infrastructure-as-Code workflows. Provide technical expertise during identity-related investigations. Define secure configuration standards for IAM platforms. Develop and maintain high-quality technical documentation. Required Experience: Skills Advanced practical expertise in identity federation and modern authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect). Deep hands-on experience with Keycloak administration and configuration, including realm management, client configuration, role mapping, identity brokering, and custom authentication flows. Proven ability to design, build, and optimize Joiner/Mover/Leaver (JML) workflows using Adaxes or analog , including automation rules, business logic, and approval flows. Strong understanding of RBAC/ABAC implementation patterns. Experience designing and implementing secure API integrations (REST APIs, token-based authentication, service-to-service communication). Advanced troubleshooting and debugging capabilities across IAM ecosystems. Strong automation and scripting skills (e.g., PowerShell, Python, Bash) Ability to translate security requirements into scalable IAM solutions. Knowledge Strong knowledge of IAM architecture patterns and federation models. In-depth understanding of authentication flows, token lifecycle management, and access control enforcement mechanisms. Knowledge of identity lifecycle orchestration patterns and directory service integrations (e.g., Active Directory). Familiarity with PAM integration and privileged access governance concepts. Experience 3+ of experience in IAM or security engineering roles within enterprise environments. Proven hands-on experience administering and engineering solutions on the Keycloak platform, including realm design, client configuration, identity brokering, custom authentication flows, role mapping, and token management. Experience designing and implementing secure IAM integrations using APIs and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect). Hands-on experience building and optimizing automated Joiner/Mover/Leaver (JML) workflows using Adaxes, including approval logic and lifecycle orchestration. Demonstrated experience improving access lifecycle efficiency through automation and process redesign. Experience troubleshooting complex IAM, SSO, and federation-related incidents. Experience supporting identity-related security investigations and audit activities. Education and Qualification Bachelor’s or Master’s degree in Computer Science, Information Security, or related field. Advanced security certifications preferred (e.g., CISSP, CIAM, vendor IAM certifications). Main Advantages Private health insurance Sports benefits Comprehensive Mental Health Program Free English lessons (online) Local language courses Paid time off Maternity leave support Referral program rewards Upskilling, internal workshops, and participation in professional conferences and corporate events

Задачи: — Обучение начинающих в области кибербезопасности практическим знаниям по Linux, Windows, сетям и основам кибербезопасности. — Проведение занятий не на теории, а через реальные лабораторные и практические упражнения. — Подготовка ученика к самостоятельной работе. — По завершении обучения, при желании, помощь в поиске CVE, Bug Bounty и формировании портфолио для трудоустройства. Требования: — Интерес к кибербезопасности и желание обучаться. Условия: — Наставник: Abdullayev Abdulloh. — Возраст наставника: 22 года. — Место: Ташкент. — Контакт для связи: +998 50 712 04 45. Дополнительно: — Время для связи: круглосуточно. — Используемые технологии и направления: Linux, Windows, Networking, Bash, Python, Powershell, Network Security, Linux Administration, Windows Administration, Nmap, Wireshark, Tcpdump, Iptables, Web Application Security, Owasp, Cryptography, Troubleshooting, File Transfer, Git, Blue Team, Red Team, Cybersecurity, CVE, Bug Bounty.

Задачи: — Оценка систем — Построение мер безопасности и контроля конфиденциальности Требования: — null Условия: — null

Location: Warsaw At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. Our security team protects Asana's employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations. We're looking for a Product Security Engineer to join our Product Security team in Warsaw. You'll be a foundational member of the security presence in a key engineering hub, partnering directly with product and infrastructure teams to ensure we design and ship secure software. You will be instrumental in scaling our security practices by building secure-by-default frameworks, eliminating entire classes of vulnerabilities, and championing a security-first mindset across our web, mobile, and AI-powered product surfaces. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you'll achieve Partner with product and engineering teams across the full software development lifecycle to ensure security is designed and built into Asana's products and platform. Conduct security architecture reviews, threat modeling, and code reviews for new features and services. Develop, implement, and maintain secure-by-default frameworks and libraries that empower engineering teams to build secure systems easily. Build and maintain automated security tooling (static and dynamic analysis rules, custom SAST/DAST checks, and automated red-teaming) to scale security coverage without scaling headcount. Identify and address AI-specific security risks such as prompt injection, insecure tool permissions, and abuse-resistant design in Asana's AI and agentic features. Triage, investigate, and drive remediation of vulnerabilities from our bug bounty program, internal testing, and automated security tooling. Influence engineering initiatives by conducting design and roadmap reviews, effectively communicating security constraints, and assisting teams in making informed trade-offs. Investigate product security incidents as a subject matter expert, using logs and monitoring tools to contain, analyze, and drive resolution. Evaluate and improve software supply chain security, including dependency management, SCA tooling, and third-party risk in the development pipeline. Develop and deliver training to educate engineers on secure coding best practices and emerging threats. Stay informed of industry trends, emerging threats, and best practices to ensure that Asana's security posture remains robust. Collaborate with teammates and stakeholders to develop both short-term and long-term strategies for risk management. About you 5+ years of experience in application security, product security, or software engineering with a security focus. Strong software engineering background with experience in languages like Python, Javascript/Typescript or Scala. Deep working knowledge of the OWASP Top 10 and common web application vulnerabilities such as XSS, CSRF, SSRF, and SQL injection. Familiarity with AI/ML security concepts, including LLM-specific risks such as prompt injection and agentic attack surfaces. Experience with security tools for static/dynamic analysis (SAST/DAST), software composition analysis (SCA), and vulnerability management. Experience performing security design reviews and threat modeling for complex applications. Excellent communication skills for collaborating effectively with both technical and non-technical partners. A pragmatic and collaborative mindset, with a passion for building defenses against real-world attacks and enabling other engineers to do their best, most secure work. Demonstrated curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making At Asana, we're committed to building teams that include a variety of backgrounds, perspectives, and skills, as this is critical to helping us achieve our mission. If you're interested in this role and don't meet every listed requirement, we still encourage you to apply. What we'll offer Generous, transparent and fair compensation system (base salary and RSUs) Contract of Employment (and the option of 50% tax deductible costs for author's rights usage in respect of applicable roles) Health insurance with dental and travel coverage (Lux Med) Breakfast and lunch catering on the days that you work from the office Vacation allowance Career growth budget Home office setup budget Gym/Fitness card Fertility healthcare and family-forming support with Carrot Mental Health Support in Modern Health Group life insurance MacBooks with all necessary accessories For this role, the estimated base salary range is between 31 000 - 36 000 PLN gross per month (subject to all taxes and necessary deductions). The actual base salary will vary based on various factors, including market and individual qualifications objectively assessed during the interview process. The listed range above is a guideline, and the base salary range for this role may be modified. In addition to base salary, your compensation package may include additional components such as equity and sales incentive pay (for most sales roles), and benefits. If you're interviewing for this role, speak with your recruiter to learn more about the total compensation and benefits for this role. #LI-Hybrid About us Asana is a leading platform for human + AI collaboration. Millions of teams around the world rely on Asana to achieve their most important goals, faster. Asana has been named to Fortune's Best Workplaces for 7+ years and recognized by Fast Company, Forbes, and Gartner for excellence in workplace culture and innovation. We offer an exceptional office-centric culture while adopting the best elements of hybrid models to ensure that every one of our global team members can work together effortlessly. With 13+ offices all over the world, we are always looking for individuals who care about building technology that drives positive change in the world and a culture where everyone feels that they belong. We believe in supporting people to do their best work and thrive. Our goal is to ensure that Asana upholds an environment where all people feel that they are respected and valued, whether they are applying for an open position or working at the company. We provide equal employment opportunities to all applicants without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by law. Join Asana’s Talent Network to stay up to date on job opportunities and life at Asana.

Задачи: — Мониторинг и триаж оповещений безопасности на платформах SIEM, EDR и CSPM для корпоративной и продуктовой инфраструктуры. — Расследование оповещений для определения масштаба, серьезности и необходимости эскалации. — Использование AI-инструментов для ускорения анализа и снижения времени обнаружения угроз. — Классификация, документирование и отслеживание оповещений с помощью систем тикетов и управления кейсами. — Участие или руководство инцидент-реакцией от обнаружения до устранения, включая сбор доказательств, форензику, определение корневых причин и коммуникацию с заинтересованными сторонами. — Проведение расследований по логам SIEM, EDR, CSPM и облачным источникам данных. — Выполнение установленных процедур инцидент-реакции по идентификации, конечным точкам, облаку и электронной почте. — Управление или помощь в обработке доказательств и процедур цепочки хранения. — Подготовка отчетов по инцидентам для технической и управленческой аудитории. — Разработка, внедрение и настройка правил обнаружения на платформах SIEM и EDR с целью снижения ложных срабатываний. — Перевод разведданных угроз в детекционные правила, с акцентом на инструменты управления привилегированным доступом и цепочки поставок. — Поддержка и развитие покрытия обнаружения в соответствии с MITRE ATT&CK. — Валидация логики обнаружения совместно с командой охотников за угрозами. — Использование AI-инструментов для триажа, обогащения и расследования в ежедневной работе. — Участие в оценке, интеграции и оптимизации AI и автоматизации в рабочих процессах команды. — Помощь в проектировании AI-подсистем и рабочих процессов для повышения эффективности аналитиков. — Сотрудничество с инженерными командами для улучшения качества данных и интеграций инструментов. — Ведение ежедневных операционных заметок и документации по сменам. — Совершенствование процедур инцидент-реакции и стандартных операционных процедур. — Участие в ротации дежурств для эскалации инцидентов вне рабочего времени. — Отслеживание и отчетность по операционным метрикам (MTTD, MTTR, MTTC, уровень ложных срабатываний) и выявление возможностей для улучшения. — Участие в учебных упражнениях, командных активностях и обзорах после инцидентов. Требования: — Опыт работы 4+ года в SOC, операциях безопасности или инцидент-реакции. — Понимание распространенных фреймворков атак (MITRE ATT&CK), сетевых протоколов и поведения конечных точек. — Опыт работы с хотя бы одной SIEM-платформой и умение писать поисковые или детекционные запросы. — Знание EDR-платформ и облачных сред (предпочтительно IaaS). — Уверенное использование AI-систем (LLM-ассистенты, инструменты анализа) в рабочих процессах безопасности. — Сильные навыки письменного общения для ясной документации результатов для технической и нетехнической аудитории. Плюсы: — Опыт руководства сложными инцидент-реакциями. — Знание платформ управления идентификацией и доступа, а также инструментов облачной безопасности. — Навыки скриптинга и автоматизации (Python, PowerShell или аналогичные). — Опыт работы с SOAR-платформами или инструментами оркестрации. — Опыт проектирования AI-агентских архитектур, LLM-автоматизации и prompt engineering для безопасности. — Участие в программах разведки угроз или разработке детекционных конвейеров. — Понимание ландшафта управления привилегированным доступом и угроз, нацеленных на него. — Опыт оценки и внедрения новых технологий в производственной среде безопасности. Условия: — Конкурентная зарплата и пенсионные выплаты с бонусом до 10% в год. — 25 дней отпуска с увеличением по стажу. — Конкурентная пенсионная программа. — Дополнительные три недели отпуска после 7 лет работы. — Полностью удаленная работа в Великобритании с возможностью до 4 недель работы за границей в год (по согласованию). — Медицинская страховка Bupa для сотрудника и семьи. — Медицинские льготы Medicash (включая оптику и стоматологию). — Страхование жизни в размере 4-кратной зарплаты и защита дохода. — Оплачиваемый отпуск по уходу за ребенком и расширенный декретный отпуск. — Программа поддержки сотрудников. — Возможность стать акционером BeyondTrust. — Инвестиции в развитие AI-навыков, включая центры компетенций Claude Code и Copilot. — Лицензии Pluralsight и LinkedIn Learning.

Задачи: — Выполнять задачи по исследованию безопасности одного из популярных браузеров, проверять имеющиеся уязвимости и proof-of-concepts на эксплуатируемость, писать рабочие эксплоиты, объединять эксплоиты в цепочки. — Участвовать в процессе тестирования готовых эксплоитов, модифицировать и обновлять их при выходе новых версий ПО. — Предлагать команде свои идеи и участвовать в обсуждениях по вопросам новых разработок и исследований. Требования: — Подтвержденный опыт написания эксплоитов или поиска критических уязвимостей (удалённое исполнение кода, повышение привилегий, выход из песочницы, обход защитных механизмов — RCE, LPE, SBX, mitigation bypasses) в одном из популярных браузеров (Chrome, Safari, Firefox, Samsung Internet, Edge) за последний год. — Понимание архитектуры современных браузеров, умение работать с одним из движков JavaScript (V8, WebKit, SpiderMonkey), JIT, DOM, WebAssembly, CSP, CORS. — Знание актуальных на данный момент классов уязвимостей и защитных механизмов браузеров, таких как PAC, JITCage, V8 Sandbox. — Владение техническими инструментами, такими как C/C++, JavaScript, WASM, GDB, LLDB, WinDbg. — Умение настраивать и использовать LLM для автоматизации исследовательских задач и кодогенерации proof-of-concepts, полурабочих и рабочих эксплоитов. — Будет вашим преимуществом: умение искать уязвимости в браузерах, знание языков Java и Objective-C, опыт эксплуатации WebGL и ANGLE, опыт работы с Frida, Valgrind, Angr, опубликованные исследования по эксплуатации браузеров. — Английский язык на уровне чтения технической документации.

Задачи: — Обучать основам кибербезопасности. — Помогать работать с крупными проектами. — Содействовать становлению ученика как квалифицированного специалиста в будущем. Требования: — Начальный уровень знаний в Python, PostgreSQL, Linux и сетевых технологиях. Условия: — Бесплатное наставничество. — Гибкий график, возможность обращаться 24/7. Контакт для отклика: +998 95 571 28 29 Ссылка для отклика: https://t.me/UstozShogird

Location: Vancouver, BC At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. Our security team protects Asana's employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations. We're looking for a Product Security Engineer to join our Product Security team in Vancouver. You'll be a key member of our security engineering team, partnering directly with product and infrastructure teams to ensure we design and ship secure software. You will be instrumental in scaling our security practices by building secure-by-default frameworks, eliminating entire classes of vulnerabilities, and championing a security-first mindset across our web, mobile, and AI-powered product surfaces. This role is based in our Vancouver office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. What you'll achieve Partner with product and engineering teams across the full software development lifecycle to ensure security is designed and built into Asana's products and platform. Conduct security architecture reviews, threat modeling, and code reviews for new features and services. Develop, implement, and maintain secure-by-default frameworks and libraries that empower engineering teams to build secure systems easily. Build and maintain automated security tooling (static and dynamic analysis rules, custom SAST/DAST checks, and automated red-teaming) to scale security coverage without scaling headcount. Identify and address AI-specific security risks such as prompt injection, insecure tool permissions, and abuse-resistant design in Asana's AI and agentic features. Triage, investigate, and drive remediation of vulnerabilities from our bug bounty program, internal testing, and automated security tooling. Influence engineering initiatives by conducting design and roadmap reviews, effectively communicating security constraints, and assisting teams in making informed trade-offs. Investigate product security incidents as a subject matter expert, using logs and monitoring tools to contain, analyze, and drive resolution. Evaluate and improve software supply chain security, including dependency management, SCA tooling, and third-party risk in the development pipeline. Develop and deliver training to educate engineers on secure coding best practices and emerging threats. Stay informed of industry trends, emerging threats, and best practices to ensure that Asana's security posture remains robust. Collaborate with teammates and stakeholders to develop both short-term and long-term strategies for risk management. About you Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making 5+ years of experience in application security, product security, or software engineering with a security focus. Strong software engineering background with experience in languages like Python, Javascript/Typescript or Scala. Deep working knowledge of the OWASP Top 10 and common web application vulnerabilities such as XSS, CSRF, SSRF, and SQL injection. Familiarity with AI/ML security concepts, including LLM-specific risks such as prompt injection and agentic attack surfaces. Experience with security tools for static/dynamic analysis (SAST/DAST), software composition analysis (SCA), and vulnerability management. Experience performing security design reviews and threat modeling for complex applications. Excellent communication skills for collaborating effectively with both technical and non-technical partners. A pragmatic and collaborative mindset, with a passion for building defenses against real-world attacks and enabling other engineers to do their best, most secure work. At Asana, we're committed to building teams that include a variety of backgrounds, perspectives, and skills, as this is critical to helping us achieve our mission. If you're interested in this role and don't meet every listed requirement, we still encourage you to apply. What we'll offer Our comprehensive compensation package plays a big part in how we recognize you for the impact you have on our path to achieving our mission. We believe that compensation should be reflective of the value you create relative to the market value of your role. To ensure pay is fair and not impacted by biases, we're committed to looking at market value which is why we check ourselves and conduct a yearly pay equity audit. For this role, the estimated base salary range is between 176,000 - 200,000 CAD. The actual base salary will vary based on various factors, including market and individual qualifications objectively assessed during the interview process. The listed range above is a guideline, and the base salary range for this role may be modified. In addition to base salary, your compensation package may include additional components such as equity, sales incentive pay (for most sales roles), and benefits. If you're interviewing for this role, speak with your recruiter to learn more about the total compensation and benefits for this role. We strive to provide equitable and competitive benefits packages that support our employees worldwide and include: Mental health, wellness & fitness benefits Career coaching & support Inclusive family building benefits Long-term savings or retirement plans In-office culinary options to cater to your dietary preferences These are just some of the benefits we offer, and benefits may vary based on role, country, and local regulations. If you're interviewing for this role, speak with your recruiter to learn more about the total compensation and benefits for this role. #LI-Hybrid About us Asana is a leading platform for human + AI collaboration. Millions of teams around the world rely on Asana to achieve their most important goals, faster. Asana has been named to Fortune's Best Workplaces for 7+ years and recognized by Fast Company, Forbes, and Gartner for excellence in workplace culture and innovation. We offer an exceptional office-centric culture while adopting the best elements of hybrid models to ensure that every one of our global team members can work together effortlessly. With 13+ offices all over the world, we are always looking for individuals who care about building technology that drives positive change in the world and a culture where everyone feels that they belong. We believe in supporting people to do their best work and thrive. Our goal is to ensure that Asana upholds an environment where all people feel that they are respected and valued, whether they are applying for an open position or working at the company. We provide equal employment opportunities to all applicants without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by law. Join Asana’s Talent Network to stay up to date on job opportunities and life at Asana.

Location: United States, San Mateo, CA Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Sony Interactive Entertainment Security Architecture | Cloud | AI Security | Enterprise Platforms We are seeking a Staff Security Architect to help shape and secure the next generation of enterprise, cloud, platform, and AI-enabled technology. This role combines deep security architecture expertise with strong engineering judgment and the ability to influence technical direction across complex, global environments. The successful candidate will partner with engineering, infrastructure, product, and security teams to identify systemic risk, develop scalable security patterns, and guide secure adoption of emerging technologies, including generative AI and agentic systems. Key Responsibilities Design, review, and approve security architecture for enterprise, cloud, SaaS, platform, and application environments, balancing business objectives, engineering constraints, and risk. Lead cloud security architecture across AWS, Google Cloud, and hybrid environments, including identity, network security, data protection, logging and monitoring, key management, workload isolation, security posture management, and the effective use of native and third-party cloud security controls. Define and review security architecture for SaaS and PaaS platforms, including identity federation, privileged access, tenant configuration, data protection, API and integration security, logging, third-party risk, and secure adoption of enterprise SaaS services. Drive security throughout the software delivery lifecycle, including source control, CI/CD pipelines, build systems, artifact repositories, infrastructure as code, secrets management, code and artifact signing, software provenance, deployment automation, and security controls for developer platforms. Lead security architecture for AI-enabled systems, including generative AI, large language models, retrieval-augmented generation, AI agents, model-serving platforms, and AI-assisted developer workflows. Design mitigations for risks such as prompt injection, insecure tool use, excessive agency, sensitive-data disclosure, model or supply-chain compromise, unsafe output handling, and abuse of AI services. Define security requirements for AI data, models, prompts, embeddings, vector stores, APIs, tools, and agent identities, including least-privilege access, secrets management, encryption, isolation, provenance, logging, monitoring, and lifecycle controls. Architect and improve identity, authentication, authorization, network security, key management, cryptography, application security, and production security controls across complex environments. Identify security design gaps in existing and proposed systems; translate findings into practical architecture improvements, reference patterns, hardening standards, preventative controls, and responsible automation that improves repeatability and operational effectiveness. Provide technical leadership across multi-disciplinary teams, clearly articulating risks, tradeoffs, and recommended solutions to engineering leaders, business stakeholders, and audiences without a security background. Required Qualifications 15+ years of relevant experience in security architecture, security engineering, product security, cloud security, infrastructure security, or related disciplines, with demonstrated leadership at senior or staff level. Deep knowledge of security architecture principles across cloud, application, network, identity, platform, infrastructure, and enterprise environments. Hands-on experience designing or securing cloud-based and containerized environments, including major cloud platforms such as AWS or Google Cloud. Strong understanding of modern identity and access management, PKI, OAuth/OIDC, SAML, TLS, VPNs, secrets management, key management systems, cloud KMS, and HSMs. Expertise in network and application security controls such as WAFs, NGFWs, segmentation, DMZ design, DDoS mitigation, load balancing, proxies, intrusion detection/prevention, and host-based controls. Experience with secure software development, threat modeling, CI/CD and developer platforms, application security, and engineering mitigations across the software lifecycle. Working knowledge of AI/ML security concepts and the ability to evaluate security risks in generative AI, LLM, and agentic system architectures, including data flows, trust boundaries, model access, and tool integrations. Strong critical thinking, risk prioritization, communication, and influence skills, with the ability to lead through ambiguity and work effectively across global, cross-functional teams. Bachelor's degree in Computer Science, Mathematics, Engineering, Information Security, or equivalent practical experience. Preferred Qualifications Experience securing AI/ML platforms, generative AI applications, model gateways, RAG architectures, vector databases, or agentic workflows in production environments. Experience with AI security evaluation, red teaming, adversarial testing, model abuse testing, or control validation for AI-enabled systems. Experience securing large-scale Linux, distributed, multi-tenant, or high-availability production environments. Development or automation experience in Python, C++, Java, or similar languages. Recognized technical leadership through patents, publications, open-source contributions, conference participation, teaching, or security community involvement. Penetration testing, adversarial security, or attacker-minded design experience. Master's degree or Ph.D. in Computer Science, Mathematics, Engineering, Information Security, or a related field. Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice (where applicable) for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: Zürich, CH About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As Anthropic's models grow more capable, so does the interest of people who want to attack or misuse them. The Detection and Response (D&R) team spots those threats and responds to incidents across every layer of Anthropic's technology stack. The team is early-stage, so you'll help build our detection and response capabilities from the ground up and work closely with our security and research teams. Key responsibilities Lead incident response across a range of domains, from external attacks to insider threats, spanning all layers of Anthropic's technology stack Build and deploy tooling, including tools that use large language models, to improve how we detect and respond to threats Create and tune detections, playbooks, and workflows to catch and respond to incidents quickly Review incident response metrics and procedures, and drive improvements Work across security and engineering teams Take part in an on-call rotation Minimum qualifications Experience handling security incidents and investigating anomalies as part of a team Working knowledge of EDR, SIEM, SOAR, or similar security tooling A solid understanding of cloud environments and operations Experience working with engineering teams in a SaaS environment Proficiency with a scripting language such as Python and query languages such as SQL Strong communication and collaboration skills Able to lead projects with little guidance Able to pick up new languages and technologies quickly Preferred qualifications 7+ years of software engineering experience, or 7+ years of detection engineering, incident response, or threat hunting experience Security operations or investigations involving large-scale Kubernetes environments Experience analyzing attack behavior and prototyping high-quality detections Experience with threat intelligence, malware analysis, infrastructure as code, or forensics Experience contributing to a high-growth startup environment Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Paris, France; London, United Kingdom; Lisbon, Portugal; Milan, Italy; Rome, Italy; Berlin, Germany; Athens, Greece; Barcelona, Spain; Bari, Italy; Split, Croatia; Copenhagen, Denmark; Oslo, Norway; Tallinn, Estonia; Limassol, Cyprus; Budapest, Hungary; Florence, Italy; Amsterdam, Netherlands; Stockholm, Sweden; Warsaw, Poland; Kraków, Poland; Lublin, Poland; Aarhus, Denmark; Antwerp, Belgium; Baku, Azerbaijan; Basel, Switzerland; Belfast, United Kingdom; Belgrade, Serbia; Bergen, Norway; Bern, Switzerland; Birkirkara, Malta; Birmingham, United Kingdom; Bologna, Italy; Bordeaux, France; Bratislava, Slovakia; Brno, Czechia; Bruges, Belgium; Brussels, Belgium; Bucharest, Romania; Burgas, Bulgaria; Cardiff, United Kingdom; Celje, Slovenia; Chișinău, Moldova; České Budějovice, Czechia; Cluj-Napoca, Romania; Cologne, Germany; Constanța, Romania; Cork, Ireland; Coventry, United Kingdom; Craiova, Romania; Crete, Greece; Daugavpils, Latvia; Debrecen, Hungary; Derby, United Kingdom; Dnipro, Ukraine; Dresden, Germany; Dublin, Ireland; Düsseldorf, Germany; Edinburgh, United Kingdom; Frankfurt, Germany; Galway, Ireland; Gdańsk, Poland; Geneva, Switzerland; Genoa, Italy; Ghent, Belgium; Glasgow, United Kingdom; Gothenburg, Sweden; Graz, Austria; Hamburg, Germany; Helsinki, Finland; Heraklion, Greece; Iași, Romania; İstanbul, Türkiye; Kaunas, Lithuania; Kazan, Russia; Kharkiv, Ukraine; Kyiv, Ukraine; Košice, Slovakia; Larnaca, Cyprus; Leeds, United Kingdom; Leipzig, Germany; Lille, France; Liverpool, United Kingdom; Ljubljana, Slovenia; Łódź, Poland; Lviv, Ukraine; Lyon, France; Madrid, Spain; Maastricht, Netherlands; Málaga, Spain; Malmö, Sweden; Manchester, United Kingdom; Maribor, Slovenia; Marseille, France; Munich, Germany; Moscow, Russia; Nantes, France; Naples, Italy; Newcastle, United Kingdom; Nice, France; Nicosia, Cyprus; Niš, Serbia; Nizhny Novgorod, Russia; Novi Sad, Serbia; Nuremberg, Germany; Palermo, Italy; Patras, Greece; Pécs, Hungary; Pljevlja, Montenegro; Plovdiv, Bulgaria; Podgorica, Montenegro; Porto, Portugal; Poznań, Poland; Prague, Czechia; Pristina, Kosovo; Riga, Latvia; Rotterdam, Netherlands; Salzburg, Austria; Samara, Russia; San Marino; Sarajevo, Bosnia and Herzegovina; Seville, Spain; Skopje, North Macedonia; Sliema, Malta; Sofia, Bulgaria; The Hague, Netherlands; Thessaloniki, Greece; Timișoara, Romania; Tirana, Albania; Toulouse, France; Turin, Italy; Utrecht, Netherlands; Valencia, Spain; Valletta, Malta; Varna, Bulgaria; Saint Petersburg, Russia; Hanover, Germany; Zürich, Switzerland; Stuttgart, Germany; Venice, Italy; Verona, Italy; Vienna, Austria; Vilnius, Lithuania; Wrocław, Poland; Zagreb, Croatia; Zaragoza, Spain; Zrenjanin, Serbia Workplace: fully David Kennedy Recruitment is working with a rapidly growing technology company with over 50 million users worldwide that is seeking to onboard a Security Engineer to join their R&D team. As the company's sole dedicated Security Engineer, the successful candidate will take end-to-end ownership of security operations, covering application security, vulnerability management, governance and risk, and emerging AI security challenges. The company's products include adult/NSFW content, so candidates must be fully comfortable working with this material. Position: Security Engineer (AppSec / GRC / AI Security) Location: Europe/ASIA, Remote Employment type:  B2B engagement preferred DUTIES AND RESPONSIBILITIES: Application security (core of the role) Review code every week to catch vulnerabilities before they ship Find and prioritise real vulnerabilities across the stack, and drive them through to fixes Audits and pentests Coordinate external security audits and penetration tests Challenge findings where needed and follow them through to fixes Engineering and automation Automate security work and build the tools needed to scale it Use AI tools daily for code review, pentesting and scripting Ownership and communication Own security end to end with little support, deciding what matters most Explain technical risk in plain language to the team and leadership Cover security alerts, including occasional night and weekend on-call Also part of the role (lighter) Maintain a simple risk register and GRC documentation Share security updates with the team and run awareness training Monitor emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at AI providers Advantages AI/LLM security testing (prompt injection, jailbreaking), a strong plus Experience at an AI company or a scale-up GRC awareness Familiarity with MDM and access management REQUIREMENTS: 2+ years of hands-on security experience Hands-on AppSec experience, not compliance only: reviews code regularly and can walk through a real vulnerability found and fixed Experience coordinating an external audit or pentest and following the findings through to fixes Ships code with Git/GitHub, scripts in Python or Bash, and has recent hands-on experience on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) Has been the sole or lead security person, or owned a security area independently, with weekly code review or system testing over the last 2 years Clear communicator of risk to non-technical colleagues Uses AI tools every day in security work Hacker mindset, with security as a passion as well as a job (bug bounties, CTFs, research, write-ups or personal tools) Perfectly fluent English Comfortable working with products built on uncensored models and NSFW content BENEFITS: Fully remote working from Europe Opportunity to own security for a fast-growing AI platform with over 50 million users Direct collaboration with engineering leadership Hands-on, non-advisory role with real responsibility for security outcomes And many more!!!

Задачи: — Анализ кода и функциональности вредоносных объектов под Windows, Linux и macOS; — Добавление записей о вредоносных объектах в антивирусные базы; — Анализ и программирование методов распаковки и разархивирования; — Проведение различных исследований вредоносного программного обеспечения (ВПО). Требования: — Знание Assembler x86/x64, базовое понимание ARM; — Хорошее знание C/C++, базовое знание Python; — Опыт reverse engineering; — Владение инструментами: IDA и/или Ghidra/radare2, Hiew, отладчики x64dbg/OllyDbg, gdb/edb; — Знание архитектуры Windows и Linux; — Знание форматов исполняемых файлов: PE/PE32+, ELF; — Технический английский. Будет плюсом: — Опыт анализа ВПО под macOS, знание формата Mach-O; — Опыт анализа ВПО для ARM-устройств (IoT). Условия: — Официальное трудоустройство; — Работа в офисе, гибкое начало рабочего дня; — Современный офис на Петроградской стороне; — Конкурентоспособная заработная плата (обсуждается индивидуально, зависит от вашего опыта и квалификации); — ДМС, включая стоматологию; — Горячие обеды, фрукты, напитки; — Зона отдыха, тренажеры, полезные для работы книги.

Location: San Francisco Workplace: Hybrid WHY HARVEY At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come. This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched. Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you. At Harvey, the future of professional services is being written today — and we’re just getting started. ROLE OVERVIEW Harvey is building AI-native software for professional services. Our customers trust us with highly sensitive information and critical business workflows, making security fundamental to everything we build. We’re looking for a Director of Detection and Response to build and lead the team that identifies threats, responds decisively to incidents, and turns what we learn into stronger defenses. You will own Harvey’s Detection and Response strategy, technical direction, and operational readiness across our production platform and corporate environment. Working with the CISO and leaders across Engineering, Infrastructure, IT, Legal, and Customer Trust, you’ll translate business risk into a focused program that protects customer data and enables Harvey to move quickly with confidence. This is a technical leadership role for someone who can build an exceptional team, earn the trust of senior engineers, and bring clarity to high-stakes situations. You’ll develop a function that scales through software, automation, and strong partnerships, while staying close enough to the work to challenge detection designs and guide complex investigations. WHAT YOU'LL DO - Build and lead the organization. Hire and develop detection engineers, incident responders, and technical leaders; establish clear ownership and a culture of curiosity, sound judgment, and continuous learning. Own the roadmap, staffing plan, and investment decisions. - Own incident response and crisis readiness. Lead Harvey’s response to major security incidents, coordinating investigation, containment, recovery, and executive communication. Build clear severity criteria, escalation paths, playbooks, and sustainable 24/7 coverage for critical threats; develop incident commanders and cross-functional responders through exercises. - Build detection as an engineering capability. Set the technical direction for telemetry, detection pipelines, forensic tooling, and response automation across cloud, endpoint, identity, SaaS, and application environments. Apply software engineering practices to test detections, improve signal quality, and reduce manual work; evaluate AI-assisted investigation with measurable quality and appropriate human oversight. - Focus defenses on meaningful threats. Use threat intelligence, hunting, and an attacker’s perspective to prioritize scenarios that matter to Harvey, including account compromise, data theft, insider risk, privileged-access abuse, and abuse of AI-enabled workflows. Partner with offensive security and platform owners to validate coverage and close blind spots. - Make response a company capability. Partner with Engineering, IT, Legal, Privacy, Communications, and Customer Trust on sensitive investigations and crisis decisions. Establish clear escalation and decision authority, preserve evidence, and provide accurate findings to support Legal-led notification and disclosure decisions. Prepare cross-functional responders to contribute when incidents require broader support. - Turn incidents into lasting improvements. Drive blameless reviews and ensure corrective actions have owners, deadlines, and verified outcomes. Measure detection coverage, time to detect and contain, recurring failure modes, and responder workload, and use those results to guide investments and reduce customer impact. WHAT YOU HAVE - Experience building and leading Detection and Response, incident response, or security engineering teams in a technology company with complex production systems. A record of hiring strong engineers, developing technical leaders, and scaling both the team and its operating model. - Deep incident response experience and demonstrated judgment during serious security events. You can lead investigations with incomplete information, make timely containment decisions, and communicate clearly with executives, engineers, and business partners. You bring composure, integrity, and discretion to sensitive investigations and decisions under scrutiny. - Strong technical foundations in cloud infrastructure, operating systems, networking, identity, and attacker tradecraft, with depth in detection engineering, threat hunting, or digital forensics. You understand how to investigate across corporate and production environments. - An engineering approach to security operations, backed by experience building detection platforms, investigation tools, or response automation. You can evaluate architecture and code, guide senior engineers, and make practical decisions about what to build, buy, or retire. - The ability to turn business risk into a focused strategy and deliver it through influence and partnership. You balance urgent response with long-term engineering work and build a demanding, supportive environment where people can do their best work. Experience protecting enterprise SaaS, sensitive customer data, or AI/ML environments is especially valuable, as is experience investigating insider threats, partnering on privileged-access governance, or leading response under regulatory and public scrutiny. At Harvey, you’ll shape how an AI company detects and responds to threats as its products and customers evolve. Your team’s work will directly protect customer trust and help make security a durable foundation for the business. COMPENSATION $280,000 - $385,000 USD DEPENDING ON YOUR LOCATION, AN APPLICANT PRIVACY NOTICE MAY APPLY TO YOU. YOU CAN FIND ALL OF OUR APPLICANT PRIVACY NOTICES HERE https://harveyai.notion.site/Harvey-Candidate-Privacy-Notices-319ac3fcdd7a803bb807d5094f249922?pvs=74. #LI-DZ1 Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing accommodations@harvey.ai

Location: New York Workplace: Hybrid WHY HARVEY At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come. This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched. Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you. At Harvey, the future of professional services is being written today — and we’re just getting started. ROLE OVERVIEW Harvey is building AI-native software for professional services. Our customers trust us with highly sensitive information and critical business workflows, making security fundamental to everything we build. We’re looking for a Director of Detection and Response to build and lead the team that identifies threats, responds decisively to incidents, and turns what we learn into stronger defenses. You will own Harvey’s Detection and Response strategy, technical direction, and operational readiness across our production platform and corporate environment. Working with the CISO and leaders across Engineering, Infrastructure, IT, Legal, and Customer Trust, you’ll translate business risk into a focused program that protects customer data and enables Harvey to move quickly with confidence. This is a technical leadership role for someone who can build an exceptional team, earn the trust of senior engineers, and bring clarity to high-stakes situations. You’ll develop a function that scales through software, automation, and strong partnerships, while staying close enough to the work to challenge detection designs and guide complex investigations. WHAT YOU'LL DO - Build and lead the organization. Hire and develop detection engineers, incident responders, and technical leaders; establish clear ownership and a culture of curiosity, sound judgment, and continuous learning. Own the roadmap, staffing plan, and investment decisions. - Own incident response and crisis readiness. Lead Harvey’s response to major security incidents, coordinating investigation, containment, recovery, and executive communication. Build clear severity criteria, escalation paths, playbooks, and sustainable 24/7 coverage for critical threats; develop incident commanders and cross-functional responders through exercises. - Build detection as an engineering capability. Set the technical direction for telemetry, detection pipelines, forensic tooling, and response automation across cloud, endpoint, identity, SaaS, and application environments. Apply software engineering practices to test detections, improve signal quality, and reduce manual work; evaluate AI-assisted investigation with measurable quality and appropriate human oversight. - Focus defenses on meaningful threats. Use threat intelligence, hunting, and an attacker’s perspective to prioritize scenarios that matter to Harvey, including account compromise, data theft, insider risk, privileged-access abuse, and abuse of AI-enabled workflows. Partner with offensive security and platform owners to validate coverage and close blind spots. - Make response a company capability. Partner with Engineering, IT, Legal, Privacy, Communications, and Customer Trust on sensitive investigations and crisis decisions. Establish clear escalation and decision authority, preserve evidence, and provide accurate findings to support Legal-led notification and disclosure decisions. Prepare cross-functional responders to contribute when incidents require broader support. - Turn incidents into lasting improvements. Drive blameless reviews and ensure corrective actions have owners, deadlines, and verified outcomes. Measure detection coverage, time to detect and contain, recurring failure modes, and responder workload, and use those results to guide investments and reduce customer impact. WHAT YOU HAVE - Experience building and leading Detection and Response, incident response, or security engineering teams in a technology company with complex production systems. A record of hiring strong engineers, developing technical leaders, and scaling both the team and its operating model. - Deep incident response experience and demonstrated judgment during serious security events. You can lead investigations with incomplete information, make timely containment decisions, and communicate clearly with executives, engineers, and business partners. You bring composure, integrity, and discretion to sensitive investigations and decisions under scrutiny. - Strong technical foundations in cloud infrastructure, operating systems, networking, identity, and attacker tradecraft, with depth in detection engineering, threat hunting, or digital forensics. You understand how to investigate across corporate and production environments. - An engineering approach to security operations, backed by experience building detection platforms, investigation tools, or response automation. You can evaluate architecture and code, guide senior engineers, and make practical decisions about what to build, buy, or retire. - The ability to turn business risk into a focused strategy and deliver it through influence and partnership. You balance urgent response with long-term engineering work and build a demanding, supportive environment where people can do their best work. Experience protecting enterprise SaaS, sensitive customer data, or AI/ML environments is especially valuable, as is experience investigating insider threats, partnering on privileged-access governance, or leading response under regulatory and public scrutiny. At Harvey, you’ll shape how an AI company detects and responds to threats as its products and customers evolve. Your team’s work will directly protect customer trust and help make security a durable foundation for the business. COMPENSATION $280,000 - $385,000 USD DEPENDING ON YOUR LOCATION, AN APPLICANT PRIVACY NOTICE MAY APPLY TO YOU. YOU CAN FIND ALL OF OUR APPLICANT PRIVACY NOTICES HERE https://harveyai.notion.site/Harvey-Candidate-Privacy-Notices-319ac3fcdd7a803bb807d5094f249922?pvs=74. #LI-DZ1 Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing accommodations@harvey.ai

Location: Remote - Europe Workplace: Hybrid ABOUT CONSENSYS Consensys Incorporated is an independent blockchain infrastructure company, spun out of Consensys Software Inc. — one of the world's leading blockchain technology companies and the primary development organization behind the Ethereum ecosystem. We build and operate neutral, institutional-grade blockchain infrastructure that connects banks, asset managers, custodians, and financial market infrastructures to digital asset networks, meeting the non-negotiable standards of institutional finance: privacy, scalability, resilience, security, and regulatory readiness. Headquartered in Miami, Florida, and operating across the US, Europe, and Australia, Consensys Incorporated launched as an independent entity in September 2026 and is building the team to match its ambition. WHY THIS ROLE EXISTS Following Consensys's strategic transition into two independent entities (MetaMask for consumer platforms and Consensys focusing on protocols and institutional infrastructure), we are seeking an experienced Security Operations Center (SOC) Analyst to join our security organization. Consensys powers the core infrastructure driving the decentralized web, including Linea mainnet and the open-source Lineth ZK rollup stack recently donated to Linux Foundation Decentralized Trust. The SOC Analyst will be responsible for architecting, building, and operating a comprehensive 24/7 monitoring and alerting ecosystem across our entire digital asset footprint. This role spans enterprise IT SaaS environments, core blockchain infrastructure, and Web3 smart contract security. The SOC Analyst will bridge traditional cybersecurity operations with cutting-edge Web3 threat detection, protecting our corporate IT stack (JumpCloud, AWS, Google Workspace, GitHub, Notion, Zoom), Linea mainnet infrastructure, and ecosystem DeFi protocols against emerging cyber threats and exploits using tools such as Hypernative, Hexagate, and Blockaid. WHAT YOU’LL OWN 1. Enterprise IT Security & SaaS Monitoring - Architect and maintain centralized log collection, SIEM integration, and incident response services across AWS (utilizing Amazon GuardDuty and AWS CloudTrail) and corporate IT services including JumpCloud, Google Workspace, GitHub, Notion, and Zoom. - Develop custom detection rules and alert logic to detect unauthorized access, privilege escalation, credential compromise, and anomalous user activity. - Ensure complete security logging visibility, audit readiness, and access control management across all corporate platforms. 2. Infrastructure & ZK-Rollup Monitoring (Linea & Lineth) - Establish real-time security monitoring for Linea mainnet and the open-source Lineth ZK rollup stack (including Besu execution layer, Maru consensus, coordinator, and provers). - Monitor RPC endpoints, sequencer performance, L1/L2 messaging reliability, state root finalization, and infrastructure telemetry. - Collaborate with the DevOps team and core engineering teams to detect and mitigate infrastructure threats, DDoS attacks, and zero-day vulnerabilities. 3. Web3 & Smart Contract Threat Detection - Implement and tune real-time Web3 threat monitoring platforms including Hypernative, Hexagate, and Blockaid. - Build automated alerts to detect suspicious smart contract interactions, flash loan attacks, reentrancy exploits, liquidity drains, and unauthorized bridge activity on Linea mainnet. - Perform onchain forensics and transaction trace analysis to safeguard ecosystem DeFi protocols and institutional assets. 4. Incident Response & Threat Hunting - Serve as a primary responder for security alerts originating from IT SaaS, cloud infrastructure, and Web3 protocol layers, utilizing Grafana Cloud IRM to manage on-call rotations and incident management. - Lead triage, investigation, containment, and post-mortem root cause analysis for confirmed security incidents. - Proactively conduct threat hunting across system logs, cloud environments, and onchain transaction streams. 5. Security Automation & Detection Engineering - Automate incident response playbooks and triage workflows using SOAR tools and custom scripts (Python, Go, Bash). - Continuously refine detection rules to reduce false positives and improve Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR). - Integrate automated containment mechanisms across access management, cloud IAM, and Web3 security providers. 6. Compliance, Governance, and Reporting - Maintain detailed incident records, forensic evidence, and documentation in alignment with SOC2 and ISO compliance frameworks. - Prepare security operational metrics, alert volume analysis, and threat reports for leadership. - Ensure compliance with corporate security policies and access controls across all environments. 7. Threat Intelligence & Ecosystem Collaboration - Monitor Web3 threat landscapes, tracking emerging smart contract exploit techniques and threat actors targeting L2 ecosystems. - Coordinate with external security researchers, bug bounty programs, and Web3 security alliances to share intelligence. - Participate in incident response drills, security reviews, and audit remediation with external security partners. WHAT WE ARE LOOKING FOR - 3–5+ years of experience in Security Operations, Detection Engineering, or Incident Response within cloud-native or Web3 environments. - Hands-on experience configuring and maintaining monitoring, threat detection, and incident analysis services for AWS (such as Amazon GuardDuty and AWS CloudTrail) and enterprise IT platforms (JumpCloud, Google Workspace, GitHub, Notion, and Zoom). - Direct experience using Web3 security and onchain monitoring tools such as Hypernative, Hexagate, and Blockaid. - Deep technical understanding of Ethereum, L2 scaling architectures, ZK-rollups (Lineth stack, Besu execution, prover systems), and smart contract vulnerabilities. - Proficiency in log management, monitoring platforms (such as Grafana), SIEM/SOAR platforms, and scripting languages (Python, Go, Bash, or SQL). - Familiarity with SOC2, ISO 27001, NIST, or SANS security frameworks. - Strong communication, problem-solving, and analytical skills in a fast-paced, remote-first environment. BENEFITS OF THIS ROLE - The opportunity to safeguard cutting-edge Web3 and ZK-rollup infrastructure at the forefront of blockchain technology. - A dynamic and collaborative work environment with a passionate and talented team. - Competitive compensation package, including salary, benefits, and performance-based incentives. - A platform to influence the future of decentralized technologies and financial systems. REPORTING STRUCTURE - Reports to: Head of Security. - Team: Working closely with our dedicated DevOps team, Head of Security, and Site Reliability Engineer, this role will serve as the founding member of the incident response team. WORKING AT CONSENSYS We are a fully remote, globally distributed company. We hire the best people wherever they are, work asynchronously, and judge each other on impact rather than hours or location. We offer competitive compensation, meaningful equity, and the chance to work on genuinely open source software at the frontier of web3. Consensys is an equal opportunities employer. We celebrate diversity and are committed to building an inclusive environment for all employees.