Location: Remote - United Kingdom
Who we are
At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to
hundreds of thousands of businesses
and empower millions of developers worldwide to craft personalized customer experiences.
Our dedication to
remote-first work
, and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.
.
Hiring and how we work
We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!
Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings.
.
See yourself at Twilio
Join the team as Twilio’s next
Security Engineer, Incident Response
About the job
The Security Incident Response Team (SIRT) is looking for a Security Engineer who is passionate about solving Twilio’s mission of security and reliability by working across the organization to lead the technical response to security events and incidents across Twilio’s global infrastructure, services and applications by effectively conducting triage, containment, remediation and driving post-incident betterments. You will work within a team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions.
You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program.
Responsibilities
In this role, you’ll:
Lead and support the response to all security events and incidents across Twilio’s complex global infrastructure, services and applications.
Be responsible for documentation of incidents and projects you work on and craft best practices as runbooks and standard operating procedures to share knowledge across teams.
Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity.
Work to improve Twilio’s security and reliability posture by driving identified betterments from security events and incidents.
Rapidly acquire new technical skills and knowledge in a fast-paced, highly disruptive industry environment.
Own the security incident lifecycle, respond to incidents and participate in on-call rotation and participate in RCAs for security incidents.
Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work.
Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale.
Qualifications
Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!
Required:
Proven experience: 3+ years of security incident response in a production-cloud environment
Subject-matter expert on security issues and technologies
Ability to utilize AI for comprehensive, complex security incident response activities delivering high fidelity detections
Advanced knowledge of service-oriented architectures, as well as experience with security tools and technologies fit for a cloud environment
Experience working across a technology stack on difficult security challenges and initiatives
Experience with SIEM platforms and the ability to extend their functionality
Experience with SOAR tools and automating manual security processes
Experience in either AWS, GCP, or other large cloud platform
Excellent written and verbal communication skills
Ability to influence and build effective working relationships with every level of the organization.
Desired:
AI Model Security & Posture Management: Support Implementation of controls and safeguards to prevent AI vulnerabilities, such as prompt injections, model evasion, and data poisoning
AI-Driven Threat Response: Utilize GenAI and LLM-based security use cases to rapidly interpret alerts, reduce false positives, and contextualize threat data
Artifact & Evidence Triage: Collects intrusion artifacts and forensically sound images to analyze malware, trojans, and source code.
Threat Intelligence Integration: Monitors external vendor data and threat intelligence to analyze trends and proactively defend against emerging risks.
Location
This role will be remote, and based in Ireland or U.K.
Travel
We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.
What We Offer
Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.
Twilio thinks big. Do you?
We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call
Twilio Magic
. Additionally, we empower employees to build
positive change in their communities
by supporting their volunteering and donation efforts.
So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for,
please consider other open positions.
.
Stay alert to recruitment fraud
We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @
twilio.com
email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps.
.
Twilio is proud to be an equal opportunity employer.
We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.
Location: Remote-Friendly (Travel-Required) | San Francisco, CA | Seattle, WA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
Anthropic's Application Security team secures the systems that build, serve, and increasingly
are
Claude — and as Anthropic's footprint grows, that mandate now extends to companies and codebases we bring in from outside. This role establishes that function.
You'll own security due diligence and secure integration for Anthropic's acquisitions — assessing a target's security posture pre-close, writing the security risk readout for leadership, and after close, bringing acquired systems up to Anthropic's bar. Security has been part of every deal to date, but this is the first dedicated role for it: you'll formalize the playbook, the risk model, and the tooling, and make them repeatable.
This is an AppSec role first. You'll be an active member of the Application Security team — same rituals, same on-run rotation, same tooling, working alongside engineers securing Anthropic's own agentic product surfaces. The expectation is the same too: we use Claude as our primary tool, and you're expected to automate the repeatable parts of diligence and integration as you go, so each acquisition is easier than the last. When deal flow is quiet, you'll pick up core AppSec project work; when it's active, M&A is your priority.
We're upfront that the center of gravity here is M&A rather than core product security. It's burstier, more assessment-heavy, and operates on confidential, time-sensitive work. If you like parachuting into an unfamiliar codebase under time pressure and turning it into a clear risk picture for leadership, this is that job.
Key responsibilities
Lead pre-close security due diligence on prospective acquisitions — coordinate external penetration testing, threat-model the target's architecture, assess security controls, and deliver the security risk readout for leadership ahead of close and integration planning
Drive post-close security integration — stand up static and dynamic analysis coverage on acquired codebases, track high- and critical-severity remediation to closure, fold acquired assets into bug bounty scope, and onboard repositories to Anthropic's automated vulnerability remediation and reporting systems
Coordinate adjacent security engineering teams (supply chain, cloud, corporate security, detection & response) on their portions of each integration
Work across a wide set of stakeholders on every deal — corporate development, legal, security leadership, and the engineering teams inheriting acquired systems internally; engineering and security counterparts at the target company externally — translating between them and keeping the security workstream legible to all of them
Formalize and scale Anthropic's M&A security playbook — risk-scoring model, diligence runbook, integration checklist — and turn as much of it as possible into Claude-powered tooling rather than manual process
Share the team's operational on-run rotation (bug bounty escalations, launch consults, incident response), swapping out during periods of active deal work
Contribute to core AppSec projects between deals — secure design reviews, threat modeling for agentic systems, and the team's security automation roadmap
Minimum qualifications
Hands-on application and infrastructure security experience, including cloud and containerized environments
Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience
Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript
Practical threat-modeling and vulnerability-identification skills — you've found and reasoned about real bugs in real systems
Comfort operating with high autonomy, ambiguity, and tightly-held confidential context
Clear written and verbal communication across varied audiences — executives, legal and corporate development partners, and engineering counterparts at an acquired company
Preferred qualifications
7+ years in application security, security consulting, or security architecture
Prior M&A security due diligence, third-party security assessment, or technical due diligence experience
Experience standing up or scaling SAST/DAST, bug bounty, or vulnerability management coverage across multiple codebases
Track record of building security automation or tooling rather than relying solely on manual review
Familiarity with using LLMs as a core part of your security workflow
Experience securing agentic, code-execution, or LLM-integrated systems
Representative projects
Point Anthropic's internal LLM-driven code analysis and AI-assisted scanning at an acquired repository nobody here has seen, and turn the output into a prioritized remediation plan in days rather than weeks
Design the risk-scoring framework Anthropic uses to compare security posture across acquisitions of different shapes and sizes
Build the automation that onboards an acquired codebase to Anthropic's vulnerability dashboard, dependency auto-patching, and bounty scope without a human running a checklist
Write the security risk memo for a live deal and present it to corporate development and security leadership
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$320,000
—
$485,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Remote - Ireland
Who we are
At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to
hundreds of thousands of businesses
and empower millions of developers worldwide to craft personalized customer experiences.
Our dedication to
remote-first work
, and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.
.
Hiring and how we work
We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!
Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings.
.
See yourself at Twilio
Join the team as Twilio’s next
Security Engineer, Incident Response
About the job
The Security Incident Response Team (SIRT) is looking for a Security Engineer who is passionate about solving Twilio’s mission of security and reliability by working across the organization to lead the technical response to security events and incidents across Twilio’s global infrastructure, services and applications by effectively conducting triage, containment, remediation and driving post-incident betterments. You will work within a team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions.
You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program.
Responsibilities
In this role, you’ll:
Lead and support the response to all security events and incidents across Twilio’s complex global infrastructure, services and applications.
Be responsible for documentation of incidents and projects you work on and craft best practices as runbooks and standard operating procedures to share knowledge across teams.
Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity.
Work to improve Twilio’s security and reliability posture by driving identified betterments from security events and incidents.
Rapidly acquire new technical skills and knowledge in a fast-paced, highly disruptive industry environment.
Own the security incident lifecycle, respond to incidents and participate in on-call rotation and participate in RCAs for security incidents.
Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work.
Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale.
Qualifications
Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!
Required:
Proven experience: 3+ years of security incident response in a production-cloud environment
Subject-matter expert on security issues and technologies
Ability to utilize AI for comprehensive, complex security incident response activities delivering high fidelity detections
Advanced knowledge of service-oriented architectures, as well as experience with security tools and technologies fit for a cloud environment
Experience working across a technology stack on difficult security challenges and initiatives
Experience with SIEM platforms and the ability to extend their functionality
Experience with SOAR tools and automating manual security processes
Experience in either AWS, GCP, or other large cloud platform
Excellent written and verbal communication skills
Ability to influence and build effective working relationships with every level of the organization.
Desired:
AI Model Security & Posture Management: Support Implementation of controls and safeguards to prevent AI vulnerabilities, such as prompt injections, model evasion, and data poisoning
AI-Driven Threat Response: Utilize GenAI and LLM-based security use cases to rapidly interpret alerts, reduce false positives, and contextualize threat data
Artifact & Evidence Triage: Collects intrusion artifacts and forensically sound images to analyze malware, trojans, and source code.
Threat Intelligence Integration: Monitors external vendor data and threat intelligence to analyze trends and proactively defend against emerging risks.
Location
This role will be remote, and based in Ireland or U.K.
Travel
We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.
What We Offer
Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.
Twilio thinks big. Do you?
We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call
Twilio Magic
. Additionally, we empower employees to build
positive change in their communities
by supporting their volunteering and donation efforts.
So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for,
please consider other open positions.
.
Stay alert to recruitment fraud
We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @
twilio.com
email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps.
.
Twilio is proud to be an equal opportunity employer.
We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.
Location: Paris; Amsterdam; Marseille; Munich; London
Workplace: OnSite
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
The Role
As an AI Deployment Strategist, you will drive the adoption and deployment of Mistral’s AI solutions, working closely with customers from strategic vision to production implementation. This role sits at the intersection of business strategy, AI innovation, and hands-on deployment, ensuring our customers achieve transformative outcomes.
You will partner with senior executives to design AI roadmaps, collaborate with the Applied AI team to deliver solutions in production, and ensure seamless transitions from presales to postsales. Your work will directly contribute to customer success, bridging the gap between strategy and execution.
This role is ideal for those who thrive in a fast-paced environment, enjoy solving complex business challenges, and are passionate about turning AI potential into real-world impact.
What We're Looking For
Strategic Discovery & Vision Setting
• Lead executive-level workshops with CISOs and security teams to identify cybersecurity challenges and opportunities where Mistral's AI can drive step-change improvements (e.g., threat intelligence, SOC automation, vulnerability management, incident response).
• Co-create AI-powered cybersecurity adoption roadmaps with customers, articulating the "art of the possible" and a clear path to value in securing their digital assets.
AI Solution Design & Deployment for Cyber
• Architect end-to-end AI solutions tailored to cybersecurity use cases, integrating Mistral's models and platform into customer security workflows, SOC environments, and technical infrastructure.
• Partner with the Applied AI team to design, prototype, and deploy AI-driven cybersecurity solutions in production (e.g., automated threat detection, intelligent alert triage, security log analysis, phishing detection, compliance automation).
• Own the execution of pilot projects and proofs-of-value within cybersecurity contexts, demonstrating the potential of our technology and paving the way for full-scale deployment.
• Ensure deployed solutions meet security, privacy, and regulatory standards (e.g., NIS2, DORA, ISO 27001, SecNumCloud).
Value Realization & Customer Success
• Serve as a trusted advisor to cybersecurity customers, guiding their AI strategy for security operations and ensuring they maximize the value of their investment in Mistral.
• Monitor key performance indicators (KPIs) tied to security outcomes (e.g., mean time to detect, mean time to respond, false positive reduction, analyst productivity).
• Proactively identify expansion opportunities within accounts, building on initial cybersecurity successes to drive long-term partnerships across broader security and defense use cases.
Cross-Functional Collaboration
• Act as the bridge between cybersecurity customers and Mistral's internal teams, synthesizing domain-specific feedback to influence product and research roadmaps for security-oriented features.
• Develop reusable assets, best practices, and playbooks specific to cybersecurity deployments to scale go-to-market efforts and ensure consistent delivery excellence.
• Stay current on the evolving threat landscape, emerging cyber regulations, and AI-for-security trends to maintain credibility and thought leadership.
• Travel (~30-60%) to foster deep client relationships and support on-site deployment, primarily within France and Europe.
About you
• 6+ years in a client-facing strategic and technical role within the cybersecurity or defense sector (e.g., cybersecurity consulting, security engineering, SOC operations, or technical sales in cyber).
• You hold a degree in a relevant scientific field (e.g., Computer Science, Cybersecurity, Data Science, Engineering, etc.).
• Strong cybersecurity domain expertise : solid understanding of security operations (SOC, SIEM, SOAR), threat intelligence, incident response, vulnerability management, and/or compliance frameworks.
• Foundational knowledge of AI/ML/Data Science, with the credibility to advise both security-focused and non-technical audiences on AI-driven security solutions.
• Hands-on experience building and deploying AI or data-driven applications (Python) to demonstrate value in security contexts.
• Familiarity with French and European cybersecurity regulations and frameworks (e.g., ANSSI guidelines, NIS2, DORA, SecNumCloud, ISO 27001).
• Strong business acumen and problem-solving skills, with the ability to structure ambiguous security challenges into actionable solutions.
• Executive presence and communication skills to influence senior security stakeholders (CISO, VP Security, C-level).
• Resilient, results-driven, and comfortable leading through influence in a collaborative environment.
• Fluent in English.
• Experience with sales qualification frameworks (e.g., MEDDPICC) and value-based selling is a plus.
• Prior experience with defense or sovereign cloud environments is a plus.
Why This Role Matters
You will play a pivotal role in shaping how enterprises adopt and deploy AI, ensuring Mistral’s solutions deliver measurable impact. By partnering with the Applied AI team, you’ll help turn strategic visions into production-ready solutions, making Mistral an indispensable partner for our customers.
Hiring Process
• Talent Acquisition screening call
• 30min Hiring Manager Interview
• 45min Business Acumen Interview
• 60min Technical Deep Dive on LLMs
• Panel (Home Prep & Restitution)
• 30min Value Talk
• Reference check
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: Paris
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
Role Summary
We are seeking an Applied AI, Forward Deployed Engineer to build customer use cases on top of the Mistral stack. You will turn "we have agents" into "we shipped something a client uses." This role is about composing cybersecurity-related agentic workflows, configuring harnesses for real-world scenarios, and delivering value directly to clients.
As a Forward Deployed Engineer at Mistral, you may also work on use cases outside cybersecurity, bringing the same context engineering, orchestration, and eval work to enterprise workflows in finance, manufacturing, defense, or the public sector.
What You Will Do
- Client-Facing Agentic Solutions
- You'll individually help deploy into production use cases with considerable business impact across various industries, with cybersecurity client assignments as a priority
- You'll work on state-of-the-art GenAI applications, driving a crucial technological transformation together with our customers
- Tackle iconic use cases that no existing solution on the market can address - from custom configuration of cybersecurity harnesses for cloud defense, to optimizing agentic vulnerability scanning solutions, to customizing agentic red-teaming solutions or penetration testing scenarios
- You'll work directly on client use cases, translating security requirements into agentic solutions
- You'll be involved in pre-sales calls to understand potential clients' needs, challenges, and aspirations, providing technical guidance on our products and explaining Mistral technologies to various stakeholders
- You'll collaborate with our product and science teams to continuously improve our product and model capabilities based on customer feedback
How We Work in Applied AI
- We care about people and outputs
- What matters is what you ship, not the time you spend on it
- Bureaucracy is where urgency goes to vanish. You talk to whoever you need to talk to. The best idea wins, whether it comes from a principal engineer or someone in their first week
- Always ask why. The best solutions come from deep understanding, not from copying what worked before
- We say what we mean. Feedback is direct, timely, and given because we care
- No politics. Low ego, high standards
- We embrace an unstructured environment and find joy in it
About You
- You are fluent in English
- You have 2+ years as a technical individual contributor (data scientist or software engineer) on AI-based products
- You have proven experience in AI or machine learning product implementation with APIs, back-end, and front-end interfaces
- You have experience tackling advanced RAG, building agentic use cases, or fine-tuning LLMs
- You have a deep understanding of the concepts and algorithms underlying machine learning and LLMs
- You have strong technical coding skills in Python
- You have strong communication skills, with an ability to explain complex technical concepts in simple terms to both technical and non-technical audiences
Ideally, you have:
- Contributed to open-source projects, in particular in the space of LLMs
- Experience as a Customer Engineer, Forward Deployed Engineer, Sales Engineer, Solutions Architect, or Technical Product Manager
- Hands-on experience building agents, LLM orchestration, context engineering, evals, and RAG systems
- A bias toward action and delivery - you ship fast
- The ability to operate independently with a customer-led mindset
- The ability to reuse internal building blocks and components effectively
- Strong problem-solving abilities and attention to detail
- A collaborative attitude
- Pentesting knowledge
- Experience developing a cybersecurity product
- Experience building agentic harnesses or multi-agent systems end-to-end
- A strong background in evals and benchmarking of agent systems
- Experience with security tooling or workflows
- Prior work on production AI systems in regulated or high-stakes environments
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: Paris
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
Role Summary
We are seeking experienced Software Engineer, Developer Experience to own and fostering a collaborative, automated, and efficient software development lifecycle. In this role, you will collaborate closely with product engineering teams to ensure consistent code health, accelerate development velocity through well-maintained CI pipelines, faster builds, and secure release processes. Your mission: empowering our software engineering team with seamless workflows while securing our production environments.
Location: Paris 🇫🇷
What you will do
As a Software Engineer, Developer Experience, your responsibilities will include (but may not be limited to):
Developer Experience
• Build, monitor, and enhance CI/CD pipelines to streamline development workflows and accelerate deployments.
• Design, operate and maintain scalable, reliable and secure multi-cloud infrastructures
• Identify areas for improvement and create innovative solutions that enable high developer velocity
Team Collaboration & Advocacy
• Standardize DevOps practices to ensure consistency across all engineering teams.
• Establish measurable KPIs for security performance, reliability, and compliance adherence.
• Partner with development and operations teams to embed security into daily workflows.
• Lead training initiatives to upskill teams on secure coding, threat modeling, and incident response.
• Champion a security-first mindset, driving cultural adoption of DevSecOps principles across the organization.
Representative projects
- Improve CI/CD and build systems
- Optimize cloud registries (Docker, Azure, GCP)
- Implement static and dynamic code analysis tool
- Implement automated vulnerability analysis
About you
• 5+ years of successful experience in a similar role (DevOps, Developer Experience, Platform Engineer, Internal tooling engineer, SRE...)
• Strong proficiency in:
- Scripting languages (Go, Python...) and software development best practices.
- Developer experience engineering: developer workflow optimization, tooling and automation for productivity, real-time developer support and escalation paths
- Site Reliability Engineering: CI/CD, containerization, orchestration, infra-as-code, monitoring, logging, alerting, observability...
• Exposure to:
- Multi-cloud infrastructures (AWS / GCP / Azure or On-Prem)
- Security Tools & Approaches: OWASP, SAST, DAST, SCA, vulnerability scanners
• Proven:
- Problem-solving and communication skills — ability to contextualizing, gauging risks and getting buy-in for high stakes and impactful solutions.
- Ownership, high agency and desire to improve things for others.
- Autonomy, self-drive and ability to work well in a fast-paced startup environment.
- Low ego and team spirit mindset.
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: Paris
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
Role summary
On average, our team leads are responsible for teams of about five people, owning both execution and delivery while remaining hands-on. You will split your time dynamically between individual contribution and leadership, with the balance shifting as your team grows.
You will collaborate closely with engineering teams to ship improvements that directly accelerate development velocity, enhance code quality, and streamline workflows across our AI platform and products: AI Studio, Le Chat, and Mistral Vibe. You will be responsible for creating a strong team culture, setting clear processes, raising the developer experience bar, and ensuring consistent high-quality delivery of developer tooling and infrastructure.
This is a highly critical role at the intersection of developer productivity, infrastructure, and people. You will help shape how our engineering organization builds at scale. If you enjoy building developer platforms, leading ambitious engineers, and shipping tooling that supercharges productivity, this role is for you.
What you will do
• Empower Your Team: Act as the clear point of contact for your team and its projects. Remove obstacles, unblock execution, and create an environment where engineers can focus on building impactful developer tools and platforms.
• Lead Delivery and Accountability: Own the delivery of your team’s roadmap for developer experience improvements, including projects like enhancing CI/CD and build systems, optimizing cloud registries (Docker, Azure, GCP), implementing static and dynamic code analysis tools, and automated vulnerability analysis. Ensure projects are shipped with the right level of quality, reliability, and performance.
• Bridge Engineering and Productivity: Partner closely with engineering teams to define the roadmap and priorities for developer experience. Scope initiatives, estimate engineering effort, and drive prioritization decisions based on developer productivity impact and technical necessity. Keep the whole team involved and engaged in the product direction.
• Hands-on Technical Leadership: Stay deeply involved in architecture design, system design, coding, peer reviews, and technical decision-making for developer tooling. Lead by example and remain connected to the day-to-day challenges of the team.
• Process and Clarity: Define and evolve team processes, best practices, and execution rituals for developer workflows. Ensure they remain relevant as the team and product scale.
• Raise the bar: Challenge engineers to step up, take ownership, and grow beyond their comfort zone. Increase the team’s bus factor through knowledge sharing, documentation, and rotation of responsibilities. Champion a culture of continuous improvement in developer productivity.
About you
• 5+ years of relevant professional work experience in Developer Experience (DevEx), DevOps, or related fields.
• Master’s degree in Computer Science, Information Technology, or a related field.
• Proficiency in scripting and programming languages (Python, JavaScript/TypeScript, Go) and experience with infrastructure as code tools.
• Experience with building and leading high-performing teams in developer tooling or infrastructure.
• Experience working with cross-functional teams including product, design, and business.
• Experience with project management and planning for infrastructure and tooling initiatives.
• Ownership and capacity to ship developer tooling and platforms end-to-end.
• Strong experience with CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins), cloud infrastructure (AWS, GCP, Azure), build systems, container registries, and developer tooling.
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: South Africa
About Huzzle
At Huzzle, we connect exceptional talent with top opportunities at leading companies across the UK, US, Canada, Europe, and Australia. Our clients include fast-growing startups and established businesses in SaaS, MarTech, FinTech, and EdTech.
Unlike traditional outsourcing, you’ll be placed directly with a client as a core member of their team—giving you real ownership, career progression, and long-term stability.
Role Type: Full-time
Engagement: Independent Contractor
Job Summary
This is not a typical sales role. We are a luxury London-based fine art portrait studio dedicated to women’s empowerment and transformation. As an Inside Sales Representative, you are the first point of contact for women embarking on a deeply personal journey of self-discovery. Your mission is to conduct high-empathy discovery calls, qualify potential guests, and book them into life-changing photography experiences. We are looking for a high-performing professional who thrives on accountability, loves hitting targets, and feels comfortable navigating intimate conversations regarding body image and confidence.
Key Responsibilities
Conduct high-volume discovery calls with leads generated through social media ads.
Manage "Speed to Lead" by responding to 90% of inquiries within 15 minutes.
Qualify potential guests to ensure they are a fit for the studio’s luxury high-ticket model.
Expertly handle objections and close bookings with a target rate of 40%.
Maintain a high show rate (80%+) through diligent follow-up and relationship building.
Manage calendars and maintain meticulous notes within the CRM.
Maintain a high level of performance, aiming for 20+ qualified bookings per week.
Requirements
Proven B2C (Business-to-Consumer) sales experience with a strong track record of selling directly to consumers (B2B experience alone is not sufficient).
Proven experience conducting discovery calls, lead qualification, and high-ticket sales.
Exceptional empathy and the ability to hold space for emotional, vulnerable conversations.
Strong command of the English language with excellent verbal and written communication skills.
Ability to work a Wednesday–Sunday schedule, including evenings and weekends.
A data-driven mindset, comfortable working toward clear KPIs, talk-time targets, conversion metrics, and performance dashboards.
Ability to work remotely with a reliable schedule that aligns with GMT hours.
Nice-to-Haves
Experience using GoHighLevel (CRM).
Background in women's wellness, coaching, or the luxury transformation space.
Previous experience working in a remote, high-growth startup environment.
Benefits
🌎 Fully remote role with flexible working hours
🚀 Work with high-growth international companies
📈 Clear career progression to Account Executive and beyond
🎯 Performance-based bonuses and incentives
🤝 Direct hire with global clients (not outsourced)
🧠 Ongoing training, mentorship, and sales development support
Location: Baku
Workplace: onsite
ABOUT YOU
Xsolla seeks a security engineer to join a new security team during a critical build-out phase. You work across application security and infrastructure security - reviewing code, hardening cloud environments, supporting incident response, and partnering with engineering teams to improve security posture across the company.
This is a generalist role well-suited to an early-team hire. You are comfortable working across domains rather than specializing in one, and you grow into deeper expertise as the team and program mature. You collaborate closely with the security program manager and work directly with engineering teams on secure design, findings, and remediation.
Our tech stack includes GCP, vSphere/ESX, Kubernetes and container workloads, MariaDB, CockroachDB, Go, PHP, and Python. You do not need expertise in all of these, but you are comfortable navigating a mixed environment and learning what you need.
As always true in job descriptions, there is an intangible value that is hard to capture. We look for a diverse set of perspectives and skills. Even if you don't match every requirement, we encourage you to apply if you think you can be highly successful in this role.
ABOUT US
Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.
For more information, visit xsolla.com.
Responsibilities
Perform Application Security Reviews
- Conduct code reviews, run
SAST
/
DAST
and dependency scanning tools, and work with engineering to resolve findings.
Participate in Threat Modeling
- Contribute to threat modeling sessions for new features and architecture changes, helping identify risks early in the design process.
Help Harden Cloud and Container Infrastructure
- Work on GCP, Kubernetes, and
IAM
configurations to strengthen the security of our cloud and container environments.
Participate in Pen Test Remediation
- Help triage penetration test findings and work with engineering teams to implement fixes, coordinating closely with the security program manager.
Partner with Engineering on Secure Design
- Review architectures, advise on secure implementation patterns, and help teams make informed security decisions.
Identify and Track Security Findings
- Document findings, assess severity, and track them through the remediation lifecycle to resolution.
Support Incident Response
- Help investigate and document security events, contribute to root-cause analysis, and support containment efforts.
Write Async Security Guidance
- Produce advisories, best-practice documentation, and practical guidance that helps engineering teams build securely across time zones.
Support Product Security
- Work with partners on the security posture of customer-facing services, contributing to reviews and assessments as needed.
What You Bring
Foundational AppSec Knowledge
- Understands common vulnerability classes, secure coding patterns, and how to conduct a meaningful code review.
Cloud Environment Exposure
- Has worked with GCP or a similar cloud provider and is comfortable with
IAM
, networking, and container concepts.
Code Literacy
- Reads and reviews code in one or more of: Go, Python, PHP. Does not need to be a software engineer, but can follow logic and spot issues.
Security Tooling Familiarity
- Has used or is familiar with
SAST
,
DAST
, or dependency scanning tools and understands how they fit into a development workflow.
Strong Written Communication
- Writes clear, concise async documentation - findings, advisories, guidance - that works across time zones and audiences.
Collaborative Mindset
- Partners effectively with engineering teams. Focuses on helping teams build securely rather than just identifying problems.
Self-Directed with Growth Mindset
- Eager to learn, comfortable with ambiguity, and able to make progress with minimal direction in a new and evolving team.
Nice to Have
Threat modeling experience;
Hands-on Kubernetes or container security experience;
Infrastructure security background - Linux, networking, vSphere/
ESX;
Familiarity with
NIST
CSF
,
PCI
, SOC 2, or ISO 27001 from a technical perspective;
Detection engineering or incident response experience;
Experience building security automation or internal tooling;
Relevant certifications (
OSCP
,
GWAPT
,
CKS
, or similar hands-on certs).
Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.
Location: Baku
Workplace: onsite
ABOUT YOU
We are looking for a junior application security specialist to join a growing security team at Xsolla. This is a hands-on role where you will work closely with senior specialists to identify, assess, and help remediate security vulnerabilities across our products and infrastructure.
You will be involved in day-to-day AppSec work - code reviews, vulnerability triage, threat modeling, and security testing. You are curious, detail-oriented, and eager to develop deep expertise in application security. You do not need to have all the answers, but you ask the right questions and follow through.
This is a strong learning environment. You will be exposed to real-world security challenges in a payment platform operating at scale, and supported by experienced security specialists who will help you grow.
ABOUT US
Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.
For more information, visit xsolla.com.
Responsibilities
Triage Security Findings
- Assess incoming bug bounty reports and scanner findings. Evaluate validity, calculate real severity, and escalate appropriately with clear written summaries.
Assist with Vulnerability Assessments
- Participate in security assessments of web applications and APIs. Help identify and document risks in new features and existing systems.
Write Clear Security Documentation
- Document findings, reproduction steps, and remediation guidance in a way that engineering teams can act on.
Support Threat Modeling
- Participate in threat modeling sessions. Learn to identify trust boundaries, data flows, and attack surfaces in system designs.
Monitor Security Tools
- Help operate
SAST
,
DAST
, and dependency scanning tooling. Track findings, reduce noise, and support remediation workflows.
Support Code Reviews
- Review code for common vulnerability classes under guidance of senior specialists. Learn to identify security issues across PHP, Python, and Go codebases.
Stay Current
- Follow developments in the security community. Bring awareness of new vulnerability classes, CVEs, and attack techniques relevant to our stack.
What You Bring
Web Security Fundamentals
- Solid understanding of common vulnerability classes:
OWASP
Top 10,
CSRF
,
XSS
,
IDOR
, SQL injection, open redirect, authentication and session management weaknesses. You understand root causes, not just names.
Web and Browser Fundamentals
- Solid understanding of how web applications work: HTTP request/response cycle, client-server model, REST APIs, how browsers handle same-origin policy, cookies and their attributes, and
CORS
. This is the foundation everything else builds on.
Security Testing Tools
- Hands-on experience with Burp Suite or similar web application security testing tools. You have used them to intercept, modify, and replay requests — not just run automated scans.
Vulnerability Documentation
- Able to reproduce a vulnerability and write it up clearly: reproduction steps, proof of concept, and impact statement. Findings that engineering teams cannot reproduce or understand do not get fixed.
Secure Development Awareness
- Familiarity with foundational secure coding concepts: input validation, output encoding, parameterized queries, and least privilege.
Code Readability
- Ability to read and follow code in at least one language relevant to web security - PHP, Python, JavaScript, or Go. You don't need to be a developer, but you need to follow logic and spot security-relevant patterns.
Analytical Thinking
- You reason through problems methodically. You can explain not just what a vulnerability is but why it exists, how it is exploited, and what fixing it actually requires.
Clear Written Communication
- You write findings and summaries that are precise, reproducible, and useful to the engineers who need to act on them.
Curiosity and Initiative
- You dig into problems rather than stopping at the surface. When something looks wrong, you investigate before concluding
Nice to Have
Participation in bug bounty programs or
CTF
competitions;
Basic scripting ability for automation - Python or Bash;
Familiarity with CI/CD pipelines and where security tooling fits;
Exposure to cloud environments - GCP, AWS, or Azure;
Relevant coursework or certifications - eWPT,
CEH
, PortSwigger Web Security Academy progress, or similar entry-level credentials.
Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.
Location: New Cairo City, Egypt
About us:
Where elite tech talent meets world-class opportunities!
At Xenon7, we work with leading enterprises and innovative startups on exciting, cutting-edge projects that leverage the latest technologies across various domains of IT including Data, Web, Infrastructure, AI, and many others. Our expertise in IT solutions development and on-demand resources allows us to partner with clients on transformative initiatives, driving innovation and business growth. Whether it's empowering global organizations or collaborating with trailblazing startups, we are committed to delivering advanced, impactful solutions that meet today’s most complex challenges.
About the Client:
Join one of Egypt’s premier financial institutions, renowned for its extensive suite of banking services, including Institutional Banking, Personal Banking, and Islamic Banking. With a global presence through over 50 branches and correspondents, we serve a diverse and dynamic clientele. As we embark on a groundbreaking digital transformation journey, we are committed to leveraging the latest technologies to establish a state-of-the-art data architecture that will redefine our performance and service delivery.
Key Responsibilities:
Drive "Compliance and Security by Design":
Proactively architect and embed compliance guardrails directly into the lifecycle of all Data and AI initiatives, anticipating evolving Central Bank of Egypt (CBE) cyber security regulations and the Egyptian Data Protection Law to eliminate compliance risks before models and data pipelines are deployed.
Execute Predictive Threat Modeling for AI:
Lead advanced, preventative threat modeling and vulnerability assessments tailored specifically for machine learning models, LLMs, and big data repositories, neutralizing emerging AI-specific threats (such as data poisoning, adversarial attacks, and model inversion) during the early design phases.
Establish Continuous Automated Monitoring:
Implement and manage automated, real-time vulnerability scanning and continuous compliance monitoring systems across the bank's data infrastructure, ensuring any drift from security standards is detected and remediated before it can be exploited.
Foster a Proactive Security Culture with AI Teams:
Partner closely with data scientists, AI engineers, and data governance teams to champion secure coding and data handling practices, conducting proactive risk-readiness workshops to prevent human-error vulnerabilities in algorithmic workflows.
Develop Next-Gen Incident-Prevention Playbooks:
Devise and stress-test predictive incident-response playbooks tailored for AI assets, leveraging global threat intelligence to simulate potential data breaches and algorithmic failures, ensuring the bank’s defenses are常に (always) one step ahead of sophisticated cyber threats.
Requirements
Professional Experience:
4
+ years
of progressive experience in cybersecurity compliance, risk management, or vulnerability assessment, with a
mandatory
and proven track record of working within a regulated banking or financial services institution.
Educational Background & Certifications:
Bachelor’s degree from a recognized institution in Computer Science, Cybersecurity, Computer Engineering, or a strictly relevant technical field. Possessing elite industry certifications such as
CISSP, CISM, CRISC, or CISA
is highly preferred.
Regulatory & AI Domain Expertise:
Comprehensive understanding of the
Central Bank of Egypt (CBE)
cybersecurity frameworks and regulations, as well as the
Egyptian Data Protection Law
, paired with foundational knowledge of data science workflows, big data architecture, and emerging AI security frameworks (e.g., OWASP Top 10 for LLMs).
Technical Compliance & Threat Modeling Skills:
Demonstrated expertise in deploying automated vulnerability scanning tools and leading predictive threat modeling exercises specifically tailored to mitigate risks like data poisoning, adversarial attacks, and unauthorized data exposure within complex data pipelines.
Benefits
Attractive, market-leading salary package
Clear career advancement path with professional development opportunities
Location: Serbia; Croatia; Poland; Belgium; India; Pakistan
About Us:
Where elite tech talent meets world-class opportunities!
At Xenon7, we work with leading enterprises and innovative startups on exciting, cutting-edge projects that leverage the latest technologies across various domains of IT including Data, Web, Infrastructure, AI, and many others. Our expertise in IT solutions development and on-demand resources allows us to partner with clients on transformative initiatives, driving innovation and business growth. Whether it's empowering global organizations or collaborating with trailblazing startups, we are committed to delivering advanced, impactful solutions that meet today’s most complex challenges.
About the Client:
Join one of Egypt’s premier financial institutions, renowned for its extensive suite of banking services, including Institutional Banking, Personal Banking, and Islamic Banking. With a global presence through over 50 branches and correspondents, we serve a diverse and dynamic clientele. As we embark on a groundbreaking digital transformation journey, we are committed to leveraging the latest technologies to establish a state-of-the-art data architecture that will redefine our performance and service delivery.
About the Role
As a leading financial institution in Egypt, we are heavily investing in localized AI and Machine Learning capabilities to drive innovation while maintaining total data sovereignty. Our Cybersecurity Department is looking for a highly skilled
AI Cybersecurity Engineer
with a deeply offensive mindset.
Operating entirely within our secure, high-performance
on-premises infrastructure
, you will act as an internal adversary. Your mission is to proactively threat model, simulate advanced cyberattacks (Red Teaming), and manage algorithmic risks to detect and neutralize vulnerabilities in our AI systems
before
they can be exploited.
Key Responsibilities
Predictive AI Threat Modeling:
Lead advanced threat-modeling exercises across the bank’s localized AI/ML pipelines, data repositories, and training environments. Anticipate sophisticated attacker behaviors to design preemptive security guardrails before models are moved to production.
AI Red Teaming & Offensive Simulations:
Conduct targeted offensive operations and ethical hacking against our on-premises AI infrastructure. Simulate real-world adversarial attacks, including
data poisoning, model inversion, membership inference, evasion attacks, and prompt injection
.
Framework Mapping with MITRE ATLAS:
Implement and operationalize the
MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems)
framework. Map identified vulnerabilities to ATLAS tactics and techniques to build a robust, AI-specific defensive matrix aligned with traditional MITRE ATT&CK.
On-Premises Infrastructure Hardening:
Assess and secure the physical and virtual infrastructure hosting our AI workloads, including bare-metal GPU clusters, local containerized environments (Kubernetes/OpenShift), and private data registries, ensuring strict isolation from external threats.
Proactive Risk Management & Early Detection:
Collaborate with the SOC and data engineering teams to build predictive detection use-cases and custom alerts. Identify the early warning signs of an AI-targeted attack or data exfiltration attempt before malicious actors can compromise model integrity.
Requirements
Professional Experience:
5+ years
of dedicated experience in Offensive Security, Red Teaming, or Advanced Penetration Testing, with a proven pivot and at least
2 years of hands-on experience securing or attacking AI/ML workloads
.
Banking Sector Experience (Mandatory):
Prior experience working within a regulated financial institution in Egypt. You must understand the security constraints, compliance mandates, and audit rigor required by the
Central Bank of Egypt (CBE)
for on-premises operations.
Deep Mastery of AI Attack Frameworks:
Expert-level knowledge of
MITRE ATLAS
and the
OWASP Top 10 for Large Language Models (LLMs)
. You must have a proven track record of translating these theoretical frameworks into practical, automated offensive playbooks.
On-Prem & Core Technical Skills:
* Strong proficiency in
Python
or bash scripting to build custom exploit or testing tools.
Deep understanding of on-premises infrastructure components (Linux administration, private networking, storage area networks).
Direct experience with container security (
Docker, Kubernetes
) and secure MLOps pipelines.
Education & Certifications:
* Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a strictly related field.
Highly valued offensive certifications:
OSCP, OSCE, CRTP, or GPEN
, alongside any specialized AI/ML security credentials.
Mindset & Communication:
A relentlessly curious, adversarial mindset balanced with strong risk management disciplines. The ability to clearly articulate complex, highly technical AI vulnerabilities into actionable remediation plans for data scientists and senior banking executives. Fluency in English.
Benefits
Attractive, market-leading salary package
Clear career advancement path with professional development opportunities
Location: India; Pakistan; Serbia; Croatia; Poland; Georgia
About us:
Where elite tech talent meets world-class opportunities!
At Xenon7, we work with leading enterprises and innovative startups on exciting, cutting-edge projects that leverage the latest technologies across various domains of IT including Data, Web, Infrastructure, AI, and many others. Our expertise in IT solutions development and on-demand resources allows us to partner with clients on transformative initiatives, driving innovation and business growth. Whether it's empowering global organizations or collaborating with trailblazing startups, we are committed to delivering advanced, impactful solutions that meet today’s most complex challenges.
About the Client:
Join one of Egypt’s premier financial institutions, renowned for its extensive suite of banking services, including Institutional Banking, Personal Banking, and Islamic Banking. With a global presence through over 50 branches and correspondents, we serve a diverse and dynamic clientele. As we embark on a groundbreaking digital transformation journey, we are committed to leveraging the latest technologies to establish a state-of-the-art data architecture that will redefine our performance and service delivery.
About the Role:
As a premier banking institution in Egypt, we are rapidly scaling our cutting-edge AI and Machine Learning capabilities. To ensure this innovation does not compromise our security posture, our Cybersecurity Department is looking for an expert
AI Cybersecurity Architect
.
In this highly strategic role, you will be the foundational architect behind the bank’s AI security governance. You will not just react to threats; you will build the comprehensive control frameworks, policies, and architectural standards that govern how AI models, Large Language Models (LLMs), and big data pipelines are safely developed, deployed, and managed across the enterprise.
Key Responsibilities
Establish AI Security Governance Frameworks:
Author, implement, and maintain the bank's enterprise-wide AI Security Policy. Align our internal AI governance with international standards (such as NIST AI RMF, ISO/IEC 42001, and OWASP Top 10 for LLMs) while strictly ensuring compliance with evolving
Central Bank of Egypt (CBE)
regulations and the Egyptian Data Protection Law.
Design & Build Cybersecurity Controls:
Architect, enforce, and validate technical and administrative security controls tailored for the entire AI/ML lifecycle (Data Ingestion, Training, Deployment, and Inference). This includes building robust controls against data poisoning, model inversion, prompt injection, and unauthorized data exfiltration.
Secure MLOps Architecture:
Define the reference architectures and secure guardrails for our Machine Learning Operations (MLOps) pipelines. Ensure that security checks, vulnerability scanning, and model integrity verifications are seamlessly integrated into our continuous deployment workflows.
Advanced AI Threat Modeling & Risk Assessment:
Lead comprehensive risk assessments and threat-modeling exercises on all proprietary and third-party AI implementations. Identify structural risks in algorithmic logic, training data pipelines, and API integrations, translating technical risks into clear business governance metrics.
Third-Party & Vendor AI Governance:
Develop and execute rigorous cybersecurity assessment frameworks for evaluating third-party AI tools, cloud-hosted models, and external vendors, ensuring they meet the bank’s strict data privacy and control standards.
Requirements
Professional Experience:
8+ years
of progressive experience in Cybersecurity Architecture or IT Risk Governance, with at least
3+ years of dedicated experience explicitly focused on securing AI/ML systems and building enterprise governance frameworks
.
Banking Sector Expertise (Mandatory):
Minimum of 3 years
of experience working within a regulated financial institution in Egypt. You must possess an intricate understanding of CBE cybersecurity circulars, auditing standards, and banking compliance requirements.
Mastery of Control Building & Governance:
Proven track record of designing, writing, and implementing complex cybersecurity control frameworks from scratch. Deep familiarity with traditional frameworks (NIST SP 800-53, ISO 27001) as well as modern AI-specific guardrails is a must.
Technical & Architectural Depth:
Strong conceptual and practical understanding of AI/ML infrastructure, including neural networks, LLM orchestration layers, vector databases, and cloud data platforms (Azure, AWS, or hybrid environments). You must speak the language of both data scientists and enterprise security engineers.
Education & Elite Certifications:
* Bachelor’s degree in Cybersecurity, Computer Engineering, Computer Science, or a related technical discipline.
Elite security certifications are highly preferred (e.g.,
CISSP, CISM, CRISC, or CCSP
), alongside any specialized AI security credentials.
Leadership & Communication:
Exceptional communication and stakeholder management skills. You must possess the professional maturity to present complex AI risks to C-suite executives and board members, while maintaining the technical credibility to influence data science teams. Fluency in English.
Benefits
Attractive, market-leading salary package
Clear career advancement path with professional development opportunities
Location: Hong Kong, Hong Kong SAR
OKX will be prioritising applicants who have a current right to work in Hong Kong, and do not require OKX's sponsorship of a visa.
Please note that Hong Kong is a group-level service hub, and OKX does not carry on a business of operating a virtual asset trading platform in Hong Kong.
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.
OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.
Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.
OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
About The Opportunity
We are looking for a Staff Mobile Security Engineer to join our Mobile Security team, where you will play a key role in identifying and mitigating security vulnerabilities across OKX's mobile applications and platforms. This is a high-ownership role at the intersection of offensive security, mobile engineering, and platform protection — you will work closely with development, operations, and compliance teams to ensure security is embedded at every layer of our mobile stack.
You bring deep expertise in mobile application security, offensive techniques, and secure coding practices. You are also fluent in AI-assisted development and bring the discipline to build, maintain, and continuously improve your own AI engineering workflows.
What You'll Be Doing
Identify and address security vulnerabilities in mobile code, systems, and networks through manual review, automated tooling, and threat modelling.
Manage and optimise application security tools, processes, and alerts to maintain a strong security posture.
Validate and respond to Bug Bounty submissions, triaging findings and coordinating remediation with engineering teams.
Produce detailed security findings reports and present them to both technical and management audiences, contributing to real-world attack prevention.
Collaborate with development teams to implement and champion secure coding practices across iOS and Android platforms.
Apply AI tools to accelerate security research, automate vulnerability detection workflows, and improve the efficiency of threat analysis.
Work alongside operations and compliance teams to ensure security is a consistent priority across the organisation.
Participate in incident response and management activities.
Stay current on the latest offensive security techniques, application security threats, and industry best practices.
What We Look For In You
5+ years of experience in mobile application security or offensive security, with hands-on expertise in iOS and/or Android platforms.
In-depth understanding of security risks, vulnerabilities, and concepts in mobile and web applications.
Proficient in code review across Kotlin, Swift, TypeScript, or JavaScript, with a strong grasp of application security threats.
Able to create proof-of-concepts (PoCs) to demonstrate vulnerabilities, review patch code for adherence to standards, and collaborate with repository owners on remediation.
Actively uses AI tools in your security engineering workflow — including building AI-leveraged workflows and codifying repeatable agent skills so tools like Claude Code or Codex deliver reliably on real production work.
Strong analytical and problem-solving abilities with excellent verbal and written communication skills.
Nice-To-Haves
Prior experience developing mobile security SDKs at scale — products with a daily active user base of over ten million.
Experience in large-scale business risk control projects, or practical experience in threat intelligence, business risk prevention, and countermeasures against black and grey industries.
In-depth reverse engineering of major apps from first-tier vendors, or other projects that demonstrate strong reverse engineering capabilities.
Proficiency in ARM assembly, with the ability to implement deep-level countermeasures at the native and application layers.
Experience with device fingerprint recognition — including simulating new devices through methods such as flashing, modification, and application cloning.
Ability to work across multiple mobile platforms simultaneously.
Perks & Benefits
Competitive total compensation package
L&D programs and Education subsidy for employees' growth and development
Various team building programs and company events
Wellness and meal allowances
Comprehensive healthcare schemes for employees and dependants
More that we love to tell you along the process!
#LI-ML1 #LI-ONSITE
Please note that Hong Kong is a group-level service hub, and
OKX
does not carry on
a business of
operating a virtual asset trading platform in Hong Kong.
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: Hong Kong, Hong Kong SAR; Singapore, Singapore
OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa.
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.
OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.
Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.
OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
About The Opportunity
As a Technical Expert, you will lead the development of the company’s core security engineering and DevSecOps capabilities, with a strong focus on
security product development, platform engineering, and
SDK
/Agent development
. The ideal candidate should demonstrate
deep security expertise, broad technical coverage, strong hands-on engineering capability, and exceptional influence in driving security governance across business teams
.
What You’ll Be Doing
Lead the architecture and core development of the company’s
end-to-end DevSecOps platform, security products, and SDKs/Agents
, covering code, build, artifacts, images, deployment, and runtime security.
Own the design and development of
RASP / Java Agent runtime protection
, leveraging
ASM, ByteBuddy, and Java Instrumentation
for bytecode enhancement, runtime hooks, detection and blocking engines, while continuously improving performance, stability, and compatibility.
Build and integrate
SAST, DAST, IAST, SCA, code security scanning, and image security scanning
into CI/CD workflows, and drive deep integration of tools such as
SonarQube
and Coverity
to form a closed loop of scanning, gating, remediation, and re-validation.
Drive core application security protection and offensive/defensive capabilities across scenarios such as
XSS,
SQL
injection, SSRF, deserialization, command execution, authentication/authorization flaws, privilege escalation, and API security
.
Advance
AI-Native Security Engineering
by applying
LLMs and AI Agents
to vulnerability analysis, rule generation, false-positive reduction, remediation suggestions, security knowledge management, and workflow automation, while building deep understanding of their architecture, principles, and security implications.
Partner closely with business engineering teams to drive security standards, integration rules, quality gates, risk classification, remediation workflows, and overall security governance adoption.
Collaborate with engineering, architecture, operations, QA, and business stakeholders to solve complex security problems and turn them into scalable product capabilities, engineering solutions, and governance mechanisms.
What We Look For In You
Strong fundamentals in computer science and security, with deep understanding of
operating systems, networking, compilers/
JVM
internals, distributed systems, application security, cloud-native security, and software supply chain security
, with both
breadth and depth
in security technologies.
Expert-level Java proficiency
, especially in
JVM
internals,
ClassLoader
, Java Agent, ASM, ByteBuddy, bytecode instrumentation, profiling, and performance tuning
; proficient in
Python or Golang
as well.
Proven hands-on experience with
RASP, SAST, DAST, IAST, SCA, image security, and code security scanning
, with the ability to independently design, integrate, and productionize security capabilities.
Strong
offensive and defensive security experience
, with deep understanding of vulnerability root causes, exploitation techniques, detection logic, bypass methods, and remediation strategies in web, API, and microservice environments.
Strong practical experience with
LLMs and AI Agents
, plus deep understanding of model architecture, agent design, tool invocation, context engineering, evaluation methods, and the impact of AI on both security engineering and attacker capabilities.
Strong engineering and product mindset, capable of leading the design and implementation of security products, platform modules, and SDKs/Agents while balancing
security effectiveness, performance overhead, integration cost, and operability
.
Strong ownership, communication skills, and cross-functional influence, with a proven ability to drive business teams on security governance, policy adoption, and remediation outcomes.
Preferred Qualifications
Background from
top-tier Internet companies, cloud providers, or leading cybersecurity vendors
;
Experience leading
DevSecOps platforms, application security platforms, RASP systems, code scanning platforms, or cloud-native security platforms
;
Strong experience in
security product development,
SDK
/Agent development, vulnerability research, penetration testing, red/blue team exercises, or incident response
;
Hands-on experience in
AI + Security
initiatives such as security copilots, intelligent rule generation, automated vulnerability analysis, or remediation recommendation systems.
Perks & Benefits
Competitive total compensation package
L&D programs and education subsidy for employees' growth and development
Various team building programs and company events
Wellness and meal allowances
Comprehensive healthcare schemes for employees and dependants
More that we love to tell you along the process!
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: Paris
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
Role summary
As a Platform Security Engineer on the Security team, you will architect and maintain the security posture of our rapidly scaling AI infrastructure and application lifecycle. Security is not a gate but an enabler, and you will embed robust controls into our continuous integration and deployment pipelines, infrastructure environments, and developer workflows to protect our systems without sacrificing velocity.
Your role exists to ensure that our research and engineering teams can move fast while staying secure. You will shape how security integrates with every layer of our stack, from code to cloud, making secure practices invisible to developers and automatic by default.
What you will do
- Drive threat modeling and risk prioritization exercises as the security counterpart in system-design reviews for core infrastructure and new products.
- Own end-to-end vulnerability management across continuous integration and deployment pipelines and runtime environments, covering infrastructure and applications.
- Secure our container orchestration deployments and containerized workloads, implementing advanced hardening to prevent lateral movement across distributed systems.
- Define and enforce Infrastructure-as-Code security by building robust guardrails and integrating policy-as-code directly into deployment pipelines.
- Design and execute a comprehensive security tooling strategy, managing solutions for cloud-native application protection, cloud security posture, static code analysis, dependency scanning, secrets management, and vulnerability tracking.
- Champion developer enablement by building secure defaults, streamlining remediation workflows, and drafting actionable security guidelines.
- Build foundational security automation to scale alongside hyper-growth, minimizing manual overhead while establishing a pragmatic security culture.
What we're looking for:
- Five or more years of experience in Platform Security, Security Engineering, or Cloud Security, ideally as an early security hire in a fast-scaling environment.
- Deep understanding of container orchestration and container security, alongside strong experience securing Infrastructure-as-Code across major cloud providers.
- Strong programming and scripting skills in languages such as Python or Go to build security automation and integrate diverse security tools into developer workflows.
- Extensive experience deploying and tuning modern security tooling with a pragmatic approach to vulnerability management and threat modeling.
- Strong communication skills with a proven track record of partnering with developers and researchers to embed secure defaults without creating engineering friction.
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: UK, London; US, Boston, MA
Workplace: OnSite
Here at Humanoid, we believe in a future where robots amplify human potential. That’s why we’ve set out on a mission to build the world’s most capable, commercially-scalable, and safe humanoid robots. We’re bringing that mission to life with HMND‑01 - our rapidly developed humanoid platform being deployed in real industrial environments - and we’re growing the team to take it even further.
ABOUT THE ROLE
We are seeking a Principal Product Cybersecurity Assurance Engineer with deep expertise in product security, threat modelling, and risk assurance for highly regulated electromechanical systems. In this role, you will lead the delivery of product cybersecurity across Humanoid's HMND 01 platform family — the Alpha Wheeled industrial robot and the Alpha Bipedal home robot — both powered by our KinetIQ VLM/VLA-based AI framework. Working alongside product, firmware, autonomy, and hardware teams as part of the Systems Engineering and Architecture Team, you will define and maintain the cybersecurity assurance strategy for all product security activities from first concept through post-market deployment. Security at Humanoid is an engineering discipline inseparable from functional safety and central to our mission of creating the world's most reliable, commercially scalable, and safe humanoid robots. To excel in this position, you must demonstrate the authority to influence security architecture decisions across complex, cross-functional programmes, the rigour to build defensible security cases for novel cyber-physical systems, and the leadership to grow and guide a cross team of security engineers operating at the frontier of robotics.
WHAT YOU'LL DO
- Team Leadership & Product Security Delivery
- Lead and develop a cross-functional team of security engineers, maintaining accountability for the delivery of product security services within product teams throughout the HMND 01 development lifecycle.
- Define product security requirements and advise development teams on suitable implementation standards, techniques, and toolchains for embedded and AI-enabled robotic systems.
- Partner with cross-functional teams to develop security protocols, tools, and processes that keep HMND 01 technologies ahead of emerging threats — including attack surfaces specific to the KinetIQ AI inference pipeline and cloud-to-robot communication architecture.
- Own and maintain key security artefacts for audit-ready cybersecurity documentation including Security Management Plans, Threat Analysis and Risk Assessment (TARA) reports, Risk Assessments, and Remediation Action Plans across both platforms.
Security Assurance & Certification
- Drive security assurance through the full product lifecycle, ensuring every HMND 01 design is robust, compliant, and resilient. Contribute to the continual improvement of security engineering capability across the organisation.
- Ensure compliance with cybersecurity obligations under the EU Machinery Regulation 2023/1230 where cyber controls intersect with safety-critical functions and compliance to IEC 62443 (for industrial/OT product security), and the EU Cyber Resilience Act.
- Provide independent Information Assurance (IA) reviews and risk assessments on complex, high-impact projects — with particular focus on cyber-physical systems where a digital compromise could result in physical harm to operators or end users.
- Review and provide guidance on security risk assessments, risk mitigation plans, mitigation gap analysis, and security management documentation in support of system cybersecurity certification.
Incident Response & Lifecycle Security
- Establish and maintain a Product Security Incident Response (PSIR) process, encompassing coordinated vulnerability disclosure, patch deployment pipelines, and post-field incident analysis.
- Define and oversee security monitoring requirements for deployed fleets, ensuring field data feeds back into risk files and security artefacts in line with post-market surveillance obligations.
Commercial & Bid Support
- Support the production of work package descriptions and cost estimates for product bids, services, and proposals that include product security scope.
- Represent Humanoid's security posture in customer and partner engagements, including regulatory consultations and certification body interactions.
WHAT WE'RE LOOKING FOR
- Proven, hands-on experience with ISO 27001/27004/27005 and the NIST Risk Management Framework (RMF), applied to regulated hardware or embedded product programmes.
- Experience owning a security risk management system for highly regulated, safety-critical products — with background drawn from automotive, commercial vehicle, or industrial automation environments.
- Working knowledge of IEC 62443, with the ability to adapt ISO/SAE 21434 lifecycle methodologies to robotic or electromechanical product context.
- Solid understanding of engineering development lifecycles and how the product cybersecurity specialism aligns with systems engineering, functional safety, and hardware/software co-development.
- Ability to interpret Penetration Test reports and author Remediation Action Plans that address identified vulnerabilities in a structured, risk-prioritised manner.
- Clear, structured communication skills — able to articulate complex security risk arguments to both technical engineers and executive stakeholders with equal confidence.
Preferred:
- Familiarity with Threat Analysis and Risk Assessment (TARA) or equivalent threat modelling methodologies (STRIDE, PASTA) applied to embedded or OT/IT convergent systems.
- Understanding of secure-by-design principles for AI/ML-enabled systems, including securing inference pipelines, model integrity, and cloud-to-edge communication paths.
- Exposure to CAN bus, Ethernet backbone, or wireless interface security in mobile, vehicular, or robotic systems.
- Experience contributing to or establishing a Product Security Incident Response (PSIRT) process or coordinated vulnerability disclosure programme.
- Knowledge of UL 4600, UL 3300, or ISO 13482 and an appreciation of how cybersecurity evidence integrates into safety case arguments.
- Prior engagement with certification bodies (TUV, UL, BSI) or standards development organisations (ISO TC 184, IEC TC 65, SAE, IEEE RAS).
WHAT WE OFFER
- Competitive equity: stock options with meaningful upside as we scale.
- 30+ paid days off, including 23 days of annual leave, all UK bank holidays, and additional company closure days (including Christmas–New Year shutdown).
- Private healthcare, including virtual and in-person care.
- Pension scheme with 8% total contribution (5% employee, 3% employer) on full earnings.
- Free daily breakfast, catered lunch, and snacks in-office.
- Work at the frontier - collaborate daily with world-class engineers, researchers, and product experts building the next generation of AI and humanoid robotics.
- Real ownership - direct access to founding leadership, meaningful input on product direction, and the ability to drive key initiatives from day one.
УдалённоRemote - United Kingdom
УдалённоГеография найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
ОфисParis; Amsterdam; Marseille; Munich; London; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks
Paris; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks
Paris; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks
leadParis; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks
УдалённоSouth Africa
ОфисBaku; Produce advisories, best-practice documentation, and practical guidance that helps engineering teams build securely across time zones; Writes clear, concise async documentation - findings, advisories, guidance - that works across time zones and audiences; Xsolla operates across multiple time zones
ОфисjuniorBaku; Xsolla operates across multiple time zones
seniorHong Kong, Hong Kong SAR; Singapore, Singapore
Paris; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks
ОфисUK, London; US, Boston, MA
Все вакансии в одном месте - страница 19 · Job Hunters
