Вакансии

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. As our Manager, Security Incident Response, you are at the center of how 1Password handles the moments that matter most. You will build and lead a team of builders: responders who don't just work incidents, but engineer the automation, tooling, and systems that make response faster and more scalable over time. You will guide program maturity, scale the team's capabilities through AI-assisted tooling, reinforce operational excellence, and step in as incident manager during complex, high-severity events. Success in this role blends strong people leadership with technical depth and sound judgment. As part of the Security leadership team, you will shape response strategy, build effective cross-functional partnerships, and help protect a product trusted by millions. This role reports to the Senior Manager, Threat Operations. How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is a remote opportunity within Canada and the US. What we're looking for: • 5+ years in security incident response, with 2+ years as a people manager or technical leader supporting career development and performance management. • Experience building or scaling incident response automation, tooling, or AI-assisted workflows (triage, enrichment, investigation), with sound judgment about where automation should and shouldn’t make decisions. • Experience setting clear expectations, defining ownership, delegating work, and measuring outcomes. • Experience managing high-pressure security incidents with clarity, structure, and calm. • Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and how to respond to them. • Strong communication skills, including the ability to explain complex findings, tradeoffs, and recommendations to technical and non-technical audiences. • Experience breaking down strategic initiatives into projects, coordinating team sprints, and managing work across competing priorities. • Passion for fostering psychological safety and stability in stressful environments. Who you are: • A people-first leader who prioritizes team development, psychological safety, and performance. • A builder at heart, someone who thinks in systems and automation, not just case queues, and hires and develops engineers with that same instinct. • Proactive in identifying gaps, inefficiencies, or operational risks and bringing forward actionable solutions, including where AI or automation can close them. • Effective at driving alignment across teams with differing priorities and perspectives. • Calm and decisive during high-pressure situations, with the judgment to prioritize effectively and make difficult tradeoffs. • A clear and transparent communicator who can align teams with differing priorities, surface tradeoffs, and advocate for sound security decisions. • Motivated by protecting people, data, and the business. What you can expect: • Build, lead, and develop a team of incident responders and security builders, setting clear expectations, creating meaningful ownership, and supporting growth. • Delegate effectively based on team strengths, development goals, capacity, and operational needs while maintaining accountability for outcomes. • Define and drive the security incident response roadmap and strategic priorities, including maturing agentic incident response, structured threat hunting, and insider risk investigations as sustained, scaled capabilities rather than one-time builds. • Balance competing priorities across incident response, strategic initiatives, and team development; make tradeoffs clear and push back when timelines, approaches, or requests create unnecessary risk or unsustainable workload. • Scale team capacity through AI-assisted tooling and automation, maintaining appropriate controls around human judgment, approval, auditability, and rollback. • Oversee detection, triage, containment, remediation, and post-incident learning, serving as an escalation point and incident manager for complex or high-severity events. • Partner with Detection Engineering, Cyber Threat Intelligence, Red Team and other teams to improve cross-functional processes and close detection or response gaps identified through investigations. • Evolve playbooks, training, tabletop exercises, metrics, and reporting to strengthen operational readiness and program maturity. • Participate in the on-call rotation, serving as the leadership escalation or incident manager during major or complex incidents. • Track and report on incident trends, operational metrics, and program maturity, including the impact of automation and AI tooling on response time and coverage. USA-based roles only: The annual base salary for this role is between $192,000 USD and $278,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $171,000 CAD and $248,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. Our culture At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. How we work with AI We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password. This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing 👶 Maternity and parental leave top-up programs 🩺 Competitive health benefits 🏝 Generous PTO policy Growth and future 📈 RSU program for most employees 💸 Retirement matching program 🔑 Free 1Password account Community 🤝 Paid volunteer days 🏆 Peer-to-peer recognition through Bonusly 🌎 Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting. You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are looking for an AI Agent Security Architect to function as the primary technical authority for Replit’s autonomous and AI agent security blueprint. In this critical role, you will design, implement, and maintain the runtime defense systems, guardrail frameworks, and sandboxing architectures that govern AI agents executing code, invoking tools, and reasoning across our platform. You will be a key technical contributor—leading high-impact AI security initiatives and bridging the gap between non-deterministic AI behavior and rigorous cybersecurity controls for both engineering and executive leadership. What You'll Do - AI Agent Security Strategy & Technical Execution - AI Agent Security Blueprint: Define the long-term vision and architectural patterns for securing autonomous agent workflows, Model Context Protocol (MCP) integrations, multi-turn reasoning loops, and multi-agent coordination. - Runtime Guardrails & Policy Enforcement: Architect and deploy dynamic input/output guardrail systems, semantic firewalls, and real-time intent verification filters to prevent goal hijacking, system prompt leaks, and indirect prompt injections. - Agent Execution & Tool Sandboxing: Partner with Infrastructure and AppSec teams to design secure, short-lived, micro-isolated environments (e.g., microVMs, WebAssembly, container sandboxes) where agents can dynamically execute code, run shell commands, and interact with host operating systems safely. - Agentic Threat Modeling & Red Teaming: Conduct specialized threat modeling against non-deterministic systems. Lead automated and manual AI red-teaming initiatives to uncover vulnerabilities in RAG context pipelines, vector stores, and tool-calling interfaces. - Identity, Delegation & Least Privilege: Architect fine-grained permission models and step-up Human-in-the-Loop (HITL) authorization patterns for agents acting on behalf of users—ensuring agents never exceed the delegated privileges of the end user or misuse API keys. - Context & Memory Boundary Security: Design strict data isolation and poisoning prevention controls for vector databases, retrieval-augmented generation (RAG) pipelines, and long-term conversation memories across multi-tenant workloads. - Risk Management & Cross-Functional Enablement - Maintain the AI Security Source of Truth: Define, document, and maintain authoritative secure design patterns and SDKs for engineering teams building internal or customer-facing AI agent capabilities. - Contribution to Risk Register: Identify, quantify, and document non-deterministic and agentic security risks (e.g., OWASP Top 10 for LLMs & AI Agents, MITRE ATLAS), ensuring they are accurately represented in the Cybersecurity Risk Register. - Auditability & Observability: Design tamper-evident logging and telemetry standards for agent reasoning chains, tool execution history, and context assembly to support incident response, forensics, and GRC requirements. - Compliance & Sales Enablement: Partner with GRC to translate complex AI security controls into enterprise-ready audit documentation (e.g., ISO 42001, NIST AI RMF, EU AI Act readiness) and support Sales on complex enterprise security inquiries regarding AI safety. Required Skills & Experience - 6+ years of experience in security engineering or security architecture, with at least 2+ years dedicated specifically to AI/ML security, LLM application security, or securing agentic frameworks. - Deep understanding of agentic architectures and protocols (e.g., Model Context. Protocol (MCP), LangChain, AutoGen, CrewAI, ReAct frameworks, and vector database technologies). - Hands-on expertise with threat vectors unique to agentic AI: Indirect Prompt - Injection, Goal Hijacking, Tool Parameter Tampering, Data Poisoning, and Context Contamination. - Strong background in applying safety standards and risk frameworks such as OWASP Top 10 for LLMs & AI Agents, NIST AI RMF, and MITRE ATLAS. - Proficiency in Python, Go, or TypeScript/JavaScript with a proven track record of reviewing code and building functional security tooling or guardrails. - Experience authoring, maintaining, and evangelizing technical security architecture documentation. - Exceptional ability to communicate complex non-deterministic AI risks to both deep technical engineers and executive stakeholders. - Proven track record of contributing to an enterprise Cybersecurity Risk Register. Bonus Qualifications - Experience designing runtime sandboxing and isolation technologies (e.g., Firecracker, gVisor, Docker, WebAssembly) for dynamic code execution environments. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Location: USA (Remote) Workplace: Remote Tempo is a layer-1 blockchain purpose-built for stablecoins and real-world payments, born from Stripe’s experience in global payments and Paradigm’s expertise in crypto tech.   Tempo’s payment-first design provides a scalable, low-cost predictable backbone that meets the needs of high-volume payment use cases. Our goal is to move money reliably, cheaply, and at scale. Our north star is simplicity for users: fintechs, traditional banks, merchants, platforms, and anyone else looking to move their payments into the 21st century.   We're building Tempo with design partners who are global leaders in AI, e-commerce, and financial services: Anthropic, Coupang, Deutsche Bank, DoorDash, Mercury, Nubank, OpenAI, Revolut, Shopify, Standard Chartered, Visa, and more.   We’re a team of crypto-optimists, building the infrastructure needed to bring real, substantial economic flows onchain. We like to move fast and swing for the fences — join us! THE ROLE You'll be Tempo's first dedicated product security engineer, standing up application and infrastructure security from the ground floor. You'll build real tooling, respond to real incidents, and work directly with engineering to secure systems that help onboard the largest enterprises onchain. RESPONSIBILITIES - Build and deploy security tooling across endpoint management, supply-chain security, infrastructure, and application layers - Identify and remediate security gaps across Tempo's production systems and development pipelines - Lead incident response end-to-end: triage, containment, remediation, and post-mortems - Partner with engineering on secure design reviews and operational security decisions - Establish repeatable, practical security practices for how systems are built, deployed, monitored, and secured - Improve supply-chain security across dependencies, build systems, and deployment artifacts - Scale application-security coverage as Tempo's infrastructure and product surface grow - Operate with autonomy, build what's needed without waiting for large-company support structures QUALIFICATIONS - 5–8 years of hands-on product or application security engineering experience - Track record building security practices at a company in the 100–500 person range, or similar environments with limited existing security infrastructure - Hands-on coding ability: you build security tooling, automation, and detection, not just recommendations - Deep incident-response experience including high-severity situations owned end-to-end - Strong infrastructure security knowledge: hosting environments, network security, monitoring, and securing system integrations - Application security fundamentals: threat modeling, secure code review, vulnerability management, supply-chain security - Comfortable communicating technical security decisions to engineers with real depth and specificity

Location: Montréal We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. About the Role Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ECC, S/4HANA, SAP RISE, SAP Business Technology Platform, Identity Authentication Service, and Identity Provisioning Service. We are shifting more SAP security responsibility internally and need someone who can guide complex tasks through knowledge, collaboration, and sound judgment. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners. What You’ll Do Build SAP security architecture, standards, access models, and role design practices. Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls. Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements. Lead role cleanup, redesign, simplification, and Segregation of Duties remediation. Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance, covering connectors, workflows, risk rules, provisioning, access analysis, and reporting. Strengthen access provisioning, access reviews, emergency and privileged access oversight. Support SOX and IT General Controls by collecting evidence, conducting audit walkthroughs, resolving issues, and providing clear documentation. Review access risks, weak role builds, SoD conflicts, insecure configurations, and control gaps. Partner with finance, supply chain, HR, procurement, SAP application teams, enterprise architecture, identity teams, cybersecurity, compliance, audit, and external partners. Provide technical mentorship without formal people-management responsibility. What You’ll Bring 6–8+ years of SAP security, access governance, role development, or related experience. Solid understanding of SAP ECC and S/4HANA authorization concepts. Experience in configuring or supporting SAP GRC and SAP Identity Access Governance. Familiarity with SAP BTP, IAS, IPS, and SAP RISE security considerations. Knowledge of Role-Based Access Control, Segregation of Duties, privileged access, user lifecycle management, and access reviews. Experience assisting with SOX, IT General Controls, internal audit, or external audit activities. Ability to guide complex initiatives, communicate clearly, and build trust with technical and business partners. Preferred Experience SAP security certification or related SAP certification. Experience securing SAP RISE environments hosted on AWS or SAP-managed cloud infrastructure. Experience with S/4HANA migration, ERP modernization, hybrid SAP landscapes, or cloud identity integration. Experience in managing emergency access, conducting access certification, automating provisioning, and handling privileged access controls. Experience in a global enterprise environment with complex business processes and audit needs. Equal Opportunity and Accommodation Hasbro is committed to equality of opportunity in employment. We make employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, disability, veteran status, or any other legally protected status. Reasonable accommodation is available for individuals with disabilities during the application process, interview process, and employment. Applicants who need accommodation should contact their recruiter or coordinator. WE ARE AN EQUAL OPPORTUNITY / AFFIRMATIVE ACTION EMPLOYER Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. If you have a disability and require assistance in this application process and need to request an accommodation, please contact your recruiter or coordinator. #StudiosWizards Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include: Health & Wellness Time Off to Recharge Financial Well-being Life & Family Support Volunteer and Community Initiatives Learning & Development Exclusive Perks Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.

Location: Lisbon, Portugal About the Role iCapital is looking to hire a SOC Manager to join its Global Information Security team, based in Lisbon, Portugal. This role manages the day-to-day operations of the Security Operations Center (SOC) and leads the team of analysts who monitor, triage, and respond to security alerts. The SOC Manager provides situational awareness through detecting, containing, and resolving cyber security threats using a comprehensive set of technologies including IDS, IPS, DLP, SIEM, SOAR, AWS, SaaS Security, and firewall technologies. This is a people-management role focused on keeping the SOC running smoothly – coverage, runbooks, triage, and escalation – while developing the analyst team. The SOC Manager works closely with the Cyber Case Manager to ensure incidents flow into case management and are tracked through to closure, and partners with Threat Detection Engineering, Cloud Security, Incident Response, and other Information Security teams to strengthen the firm’s overall cyber resiliency. Based in Lisbon, the role helps provide security operations coverage across global time zones. This role reports to the Security Operations Leader. Responsibilities Manage the day-to-day operations of the Security Operations Center, ensuring monitoring, alerting, triage, and incident response run effectively across the operating day. Lead, mentor, and develop a team of SOC analysts – including scheduling, shift and on-call coverage, performance management, hiring, and onboarding. Establish and maintain runbooks, playbooks, incident-handling procedures, and daily, weekly, and monthly security checklists. Operate, tune, and manage the SIEM and SOAR platforms; maintain alerts and dashboards that surface key security events and provide security assurance. Triage and escalate incidents quickly and effectively, setting priorities for the SOC team and coordinating response with other teams across the firm. Partner closely with the Cyber Case Manager to ensure incidents flow into case management and are tracked to closure, and to keep the team aligned to case-driven priorities. Work alongside Threat Detection Engineering, Cloud Security, Incident Response, and other Information Security teams to improve the firm’s security posture. Measure and report on the state of the firm’s cyber security defenses, including operational metrics and regular reporting to leadership. Serve as an escalation point for high-severity incidents, including outside standard business hours as needed. Drive the evaluation, selection, and configuration of key security tools to enhance Cyber Security Operations. Qualifications 5-8 years of experience in security operations, including 1-3 years leading or managing a SOC or security operations team. Demonstrated people-management experience – leading, mentoring, scheduling, and developing analysts. Hands-on experience with the setup and management of a SIEM, preferably Splunk. Experience with SOAR and a strong understanding of the incident-response lifecycle and frameworks such as NIST and MITRE ATT&CK. Knowledge of Linux, Windows, and macOS operating systems. Experience with cloud infrastructure, AWS preferred. Strong coordination and stakeholder-management skills, with the ability to liaise across teams and report to leadership. Professional fluency in English to support a global team. Attentive, organized, and detail-oriented, with solid problem-solving and analytical skills. Excellent written and verbal communication skills.. We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday). Benefits iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO). For additional information on iCapital Network, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc

Location: North America, EU, UK AI Security Researcher / Research Engineer Remote or hybrid - London preferred but North America, EU, UK accepted About Brave: Brave is on a mission to protect the human right to privacy online. We’ve built a free web browser that blocks creepy ads and trackers by default, a private search engine with a truly independent index, private AI assistant, latest privacy and security features, and a private ad network (opt-in!) that directly rewards you for your attention. Already over 120 million people regularly use Brave for a faster, more private web. Millions more switch every month. The internet is a sea of ads, hackers, and echo chambers. Big Tech makes huge profits off our data, and tells us what’s true and what’s not. Brave is fighting back. Join us! Summary We are looking for a researcher/research engineer to help mitigate the security risks that come with building AI systems-especially LLM-powered web agents and chatbots. In this role, you'll design and implement secure-by-design architectures, audit our LLM-powered web agent (https://brave.com/blog/ai-browsing/) and chatbot, and help set Brave's direction on how we identify, measure, and reduce security risk across AI products. Responsibilities Design and execute adversarial evaluations to uncover failure modes in LLM-powered web agents and chatbots (e.g., prompt injection, tool abuse, data exfiltration) Analyze model behavior (including internal thoughts) to understand and forecast security risks in frontier models Develop and prototype security-focused training and fine-tuning techniques Augment web agents with security principles including information flow control, privilege control and contextual security Partner with engineers and (privacy, ML, and Cryptographic) researchers to translate findings into product changes, tests, and measurable security improvements Help define a forward-looking security strategy and policy for building and responsibly releasing web agents—advocating for user protection You may be a good fit if you have Demonstrated experience working on Secure AI (prompt injection attacks and security guardrails) Strong publication record in AI security, ML security, or closely related areas A track record of shipping products and features inside a fast-moving environment Strong coding skills in Python and familiarity with ML frameworks like PyTorch or JAX Experience training, fine-tuning, and evaluating large language models Deep familiarity with large language models and web agents, how they work, and how they are trained Experience applying security principles (e.g., information flow control, access control/least privilege) Demonstrated success in bringing clarity and ownership to ambiguous technical problems A Ph.D. in computer science is highly preferred, but we may consider some exceptions with industry experience Skills That Will Set You Apart from the Competition Knowledge of AI Systems (pipelines, security evaluation, etc.) Open source projects on security/privacy Experience with confidential computing and ZKP/SMPC protocols Ph.D. in computer science from a top-tier school A strong publication record in premier systems, performance, or ML Work experience in industry is desirable Working at Brave - What we offer Ability to work at an exciting and well-funded international startup headquartered in San Francisco Cutting-edge technology, allowing you to work with state-of-the-art tools and software solutions Competitive compensation and plenty of room for personal growth Great international exposure and team atmosphere We are looking to hire in London but would consider an exceptional candidate in the rest of Europe. NO AGENCIES or RECRUITERS PLEASE - Unfortunately, we cannot work with third parties on these searches.

Location: Boston, MA Workplace: OnSite At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP is seeking a Director, Security Engineering & Operations to lead the teams responsible for enterprise security engineering and security operations. Reporting directly to the CISO and serving as a senior member of the Security leadership team, this leader will shape strategy, lead a growing team of managers, engineers, and analysts, and drive measurable security outcomes across a fast-moving technology environment. This is a leadership role for someone who has successfully scaled security operations in complex, high-growth environments and brings strong security engineering experience. The right leader combines strategic judgment with strong technical depth, staying close enough to the work to set a high bar for engineering quality, guide critical technical decisions, and lead effectively through significant security events. This leader will play a significant role in shaping the team, operating model, and technical roadmap as WHOOP scales, advancing capabilities across security engineering, detection and response, incident management, security automation, identity, cloud, endpoint, SaaS, data protection, and other enterprise security domains. As WHOOP expands its use of AI across member-facing products, internal technology, and engineering, and continues to evolve its capabilities in health, this leader will help ensure security scales alongside the company's technology, data, regulatory, and threat landscape. RESPONSIBILITIES - Lead Security Engineering and Security Operations, defining strategy, priorities, technical standards, performance expectations, and measurable outcomes across both functions. - Advance a risk and threat-informed detection and response program that connects priority threat scenarios to the telemetry, detections, investigation capabilities, response procedures, and operational controls required to address them, including identity-centric, data protection, and insider risk scenarios. - Lead security incident readiness and response, including escalation, incident command for significant events, cross-functional coordination, post-incident review, and accountability for follow-up actions. - Guide the engineering and operationalization of preventive and detective security controls across identity, endpoint, cloud, SaaS, infrastructure, data, AI-enabled systems, and other high-value enterprise environments, while setting a high bar for technical design, testing, documentation, maintainability, and lifecycle management. - Lead the security strategy and engineering approach for AI-enabled products and enterprise AI adoption, including access controls, sensitive data handling, model and application security, third-party integrations, tool and agent permissions, monitoring, auditability, and secure use of AI across the company. - Drive an outcome-oriented approach to security technology and managed services, maximizing the effectiveness of existing capabilities, making disciplined decisions about when to automate, build, buy, or use external partners, and holding security partners accountable to measurable outcomes. - Drive disciplined execution across the security engineering and operations portfolio through effective prioritization, roadmap and backlog management, capacity planning, metrics, ownership, and operating cadence. - Lead, coach, and develop managers, engineers, and analysts, setting clear expectations for technical quality, judgment, ownership, execution, and professional growth. - Strengthen collaboration across Product Security, Security Architecture, Platform, Fraud, Engineering, IT, GRC, Legal, Privacy, and other business functions, creating clear ownership and effective operating relationships across organizational boundaries. - Partner with the CISO on organizational design, workforce planning, hiring, and development of the capabilities required as the Security organization evolves, while providing clear, data-driven communication on security posture, operational performance, significant risks, and strategic priorities. QUALIFICATIONS - 10+ years of experience in information security, with deep experience in Security Operations and meaningful experience across Security Engineering in complex technology environments. - 5+ years of people leadership experience, including multiple years managing managers and senior technical individual contributors. This is not a first-time people leadership role. Demonstrated strength in hiring, coaching, performance management, organizational design, and raising the bar for team quality and execution. - Deep technical expertise in detection engineering, SIEM and telemetry strategy, incident response, and modern security operations, including experience leading significant security incidents. - Proven ability to drive disciplined execution across priorities, roadmaps, backlogs, metrics, and ownership, while maximizing existing capabilities before introducing additional technology. - Experience managing MDR, MSSP, or similar security partners and holding them accountable to measurable operational outcomes. - Experience securing AI-enabled products, enterprise AI adoption, or AI development environments, including risks related to sensitive data, models, agents, third-party services, access, and monitoring. - Strong judgment and relationship-building skills, with a track record of working effectively across technical, product, risk, legal, and senior leadership teams. - Experience in health technology or another sensitive-data environment is a plus. This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.   Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $220,000-$245,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Location: Singapore, Singapore OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Opportunity We are looking for a Staff Mobile Security Engineer to join our Mobile Security team, where you will play a key role in identifying and mitigating security vulnerabilities across OKX's mobile applications and platforms. This is a high-ownership role at the intersection of offensive security, mobile engineering, and platform protection — you will work closely with development, operations, and compliance teams to ensure security is embedded at every layer of our mobile stack. You bring deep expertise in mobile application security, offensive techniques, and secure coding practices. You are also fluent in AI-assisted development and bring the discipline to build, maintain, and continuously improve your own AI engineering workflows. What You'll Be Doing Identify and address security vulnerabilities in mobile code, systems, and networks through manual review, automated tooling, and threat modelling. Manage and optimise application security tools, processes, and alerts to maintain a strong security posture. Validate and respond to Bug Bounty submissions, triaging findings and coordinating remediation with engineering teams. Produce detailed security findings reports and present them to both technical and management audiences, contributing to real-world attack prevention. Collaborate with development teams to implement and champion secure coding practices across iOS and Android platforms. Apply AI tools to accelerate security research, automate vulnerability detection workflows, and improve the efficiency of threat analysis. Work alongside operations and compliance teams to ensure security is a consistent priority across the organisation. Participate in incident response and management activities. Stay current on the latest offensive security techniques, application security threats, and industry best practices. What We Look For In You 5+ years of experience in mobile application security or offensive security, with hands-on expertise in iOS and/or Android platforms. In-depth understanding of security risks, vulnerabilities, and concepts in mobile and web applications. Proficient in code review across Kotlin, Swift, TypeScript, or JavaScript, with a strong grasp of application security threats. Able to create proof-of-concepts (PoCs) to demonstrate vulnerabilities, review patch code for adherence to standards, and collaborate with repository owners on remediation. Actively uses AI tools in your security engineering workflow — including building AI-leveraged workflows and codifying repeatable agent skills so tools like Claude Code or Codex deliver reliably on real production work. Strong analytical and problem-solving abilities with excellent verbal and written communication skills. Nice-To-Haves Prior experience developing mobile security SDKs at scale — products with a daily active user base of over ten million. Experience in large-scale business risk control projects, or practical experience in threat intelligence, business risk prevention, and countermeasures against black and grey industries. In-depth reverse engineering of major apps from first-tier vendors, or other projects that demonstrate strong reverse engineering capabilities. Proficiency in ARM assembly, with the ability to implement deep-level countermeasures at the native and application layers. Experience with device fingerprint recognition — including simulating new devices through methods such as flashing, modification, and application cloning. Ability to work across multiple mobile platforms simultaneously. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: San Francisco, CA | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Platform Security Engineering (PSE) sits within Data Center Security Engineering (DCSE). As Anthropic expands beyond traditional cloud providers into owned facilities, colocation, and partner sites, we take on the security responsibilities that cloud providers used to abstract away: firmware integrity, boot chain verification, platform trust, and host hardening. PSE exists so that Anthropic can deploy training and inference workloads to any qualified environment with a demonstrable security posture, including the technical controls behind our AI Safety Level commitments. We are hiring an engineering manager to lead a group of platform security engineers covering firmware research, OS and kernel hardening, platform trust integration, and server manageability firmware. You will own the roadmap for this group, grow the team, and be accountable for the security posture of the compute platforms Anthropic runs on: hardware roots of trust, secure and measured boot, attestation, firmware supply chain, and the integrity of the hosts that hold model weights on bare-metal infrastructure. This is a hands-on management role. You will not write most of the code, but you will review designs, make the final call on hard trade-offs, and be able to reason with your engineers from a silicon root of trust through firmware, bootloader, kernel, and host software. You will partner with infrastructure, fleet, and compute teams inside Anthropic, and with silicon vendors, OEMs, and compute providers outside it. You will report to the Data Center Security Engineering manager. Key responsibilities Lead and grow the platform security engineering group: hiring, onboarding, development, performance, and prioritization for full-time engineers, and coordination of contractor and vendor engineers working alongside them Own the platform security roadmap and its delivery: hardware root of trust and attestation, secure and measured boot across CPU, BMC, accelerator, and peripheral firmware, OS and kernel hardening, and the host-side pipeline that turns attestation evidence into production gates Own the firmware supply chain posture for the fleet: SBOM and reference integrity manifests, authenticated update, rollback protection, and the vendor relationships needed to get fixes shipped Drive platform risk assessments for new compute platforms and providers, and make evidence-based go/no-go recommendations with bounded risk rather than perfect-or-nothing gates Partner with infrastructure, fleet, compute, and detection and response teams so that platform controls land in production without degrading training or inference performance Manage relationships with silicon vendors, OEMs, and compute providers: security requirements, vulnerability management, disclosure and remediation timelines, and upstream and standards-body engagement (TCG, OCP, IETF) Run the team's operating rhythm: design reviews, threat models, incident participation for platform-layer issues, and clear written status to security and infrastructure leadership Minimum qualifications Have 10+ years in systems security, with at least 5 years focused on firmware, hardware, or OS-level security Have 5+ years as a people manager of security or systems engineers, including hiring and developing senior and staff-level engineers Can go from architecture to implementation detail with your engineers: secure boot, measured boot, TPM and other roots of trust, attestation protocols (SPDM, DICE, remote attestation), UEFI and BMC firmware, and Linux kernel  and OS hardening Have owned a technical roadmap end to end, including the prioritization calls when security, performance, and delivery timelines conflict Have worked directly with silicon vendors, OEMs, or cloud and bare-metal providers on security requirements and remediation, and can push a partner to a fix without burning the relationship Write clearly: design reviews, risk assessments, and status for executives are part of the job Are comfortable building a team and its processes from an early stage, with a scope that is broader than the headcount Preferred qualifications Experience managing a mixed team of full-time engineers, contractors, and vendor engineers while keeping design authority in-house Hands-on background in OpenBMC or other server management firmware, DRTM or secure launch, or confidential computing primitives (TDX, SEV-SNP, ARM CCA) A record of upstream contributions or maintainership in Linux, OpenBMC, or a comparable community, or standing in TCG, UEFI Forum, or OCP Experience securing large-scale HPC or AI training infrastructure Firmware vulnerability research, reverse engineering, or fuzzing background Experience running coordinated vulnerability disclosure with hardware or firmware vendors The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $485,000 — $625,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco Perplexity is seeking energetic researchers and engineers to join our Secure Intelligence Institute (SII), Perplexity's flagship research center for advancing security, privacy, and trust in frontier intelligence. SII’s goals are to advance frontier AI security research, translate those advances into concrete improvements in Perplexity's systems, and share knowledge and resources that strengthen the broader AI ecosystem. As a member of SII, you'll conduct original and impactful research on improving the security and privacy of frontier intelligence systems. Your goal will be to conduct research that is not only rigorous in theory, but practical enough to improve the systems people rely on every day. This work will be informed by the realities of operating general-purpose AI systems used by millions of people and thousands of enterprises, and you'll be expected to translate both your own research and advances from the broader community to practical improvements that protect and defend Perplexity's users. RESPONSIBILITIES - Develop threat models for emerging attack surfaces in AI-native products, including browser, search, and autonomous agents. - Identify and analyze security and privacy threats across AI systems, infrastructure, and user-facing products. - Develop novel defenses, mitigations, and detection mechanisms for security and privacy in AI-native products. - Build security evaluation frameworks, benchmarks, and datasets to measure the effectiveness of different defense mechanisms. - Partner with Perplexity’s Security Engineering team to translate state of the art research into shipped security features and hardened system architectures. - Collaborate with top-tier academic and industry researchers in SII's external research network. - Publish findings at premier venues and contribute to the broader security research community. QUALIFICATIONS - Hold a PhD (or equivalent research experience) in Computer Science, Computer Engineering, or a related field, with a primary focus on security and/or privacy. - Experience publishing at top security conferences (IEEE S&P, USENIX Security, ACM CCS, NDSS) demonstrating original, impactful research contributions. - Deep expertise in one or more of: security of agentic systems, systems security, web and applications security, program analysis, and software security. - Proficiency in Python (bonus points for TypeScript, Go, and/or Rust). - Ability to operate with high independence, willing to dive in and take ownership, and comfortable in a fast-paced environment where research directly informs product. - Clear and concise communcation, translating complex attack narratives into actionable insights for engineering and leadership.

Location: Toronto, Ontario, Canada Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. We take a pragmatic approach to preventing and responding to security risks. In this role not only will you build and contribute to systems which detect malicious activity, you will have the unique opportunity to implement new controls to prevent future incidents. You will work across detection and response and corporate security domains. You'll contribute to practices that keep Sentry secure as we grow: alert triage for corporate and production, detection engineering, deploying preventative controls, identity and access management, investigations and incident response, and more. You'll partner with teams across the company to prevent and respond to security incidents. You will work as a technical collaborator who prioritizes preventative controls, defense in depth, and high signal alerting practices. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security approaches and challenges. IN THIS ROLE, YOU WILL - Maintain, improve, and own detection engineering systems. We own and operate our own detection stack and are building agentic triage with thoughtful security response and orchestration automation. - Perform investigations, and contribute to security incident response. You will assist and contribute to a breadth of incident types, or Sentry and our customers. - Contribute to, maintain, and operate identity and access management systems. Access management is a critical component of our security program. - Have a lot of opportunity to grow and learn across many security domains. We are a highly cross-functional team and you will have opportunities to touch adjacent security projects spanning appsec, infrasec, governance, and privacy. - Research, identify, and respond to emerging threats relevant to Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices. YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you protect a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting breach, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than make a noisy reactive solution which requires manual triage. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team. QUALIFICATIONS - 2-5 years of industry experience in a detection and response, corporate security, or generalist security engineering role - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: alert triage, detection tuning and writing, detection-as-code, security log ingestion, investigations and security incident response, identity and access management (IAM), phishing response, user access reviews, managing endpoint detection and response tooling - Experienced and comfortable programing in at least one language (Python preferred) and comfortable using agentic development workflows - Familiarity with operating distributed cloud technology (AWS, CICD, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and experience with corporate (SSO, SAML, IAM) and defensive security tooling (EDR, SIEM, CNAPP, ZTNA, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow. The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $162,000 to $200,000 CAD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Location: San Francisco, California Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. We take a pragmatic approach to preventing and responding to security risks. In this role not only will you build and contribute to systems which detect malicious activity, you will have the unique opportunity to implement new controls to prevent future incidents. You will work across detection and response and corporate security domains. You'll contribute to practices that keep Sentry secure as we grow: alert triage for corporate and production, detection engineering, deploying preventative controls, identity and access management, investigations and incident response, and more. You'll partner with teams across the company to prevent and respond to security incidents. You will work as a technical collaborator who prioritizes preventative controls, defense in depth, and high signal alerting practices. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security approaches and challenges. IN THIS ROLE, YOU WILL - Maintain, improve, and own detection engineering systems. We own and operate our own detection stack and are building agentic triage with thoughtful security response and orchestration automation. - Perform investigations, and contribute to security incident response. You will assist and contribute to a breadth of incident types, or Sentry and our customers. - Contribute to, maintain, and operate identity and access management systems. Access management is a critical component of our security program. - Have a lot of opportunity to grow and learn across many security domains. We are a highly cross-functional team and you will have opportunities to touch adjacent security projects spanning appsec, infrasec, governance, and privacy. - Research, identify, and respond to emerging threats relevant to Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices. YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you protect a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting breach, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than make a noisy reactive solution which requires manual triage. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team. QUALIFICATIONS - 2-5 years of industry experience in a detection and response, corporate security, or generalist security engineering role - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: alert triage, detection tuning and writing, detection-as-code, security log ingestion, investigations and security incident response, identity and access management (IAM), phishing response, user access reviews, managing endpoint detection and response tooling - Experienced and comfortable programing in at least one language (Python preferred) and comfortable using agentic development workflows - Familiarity with operating distributed cloud technology (AWS, CICD, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and experience with corporate (SSO, SAML, IAM) and defensive security tooling (EDR, SIEM, CNAPP, ZTNA, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow. The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $150,000 to $200,000 USD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Location: Toronto, Ontario, Canada Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. As a Security Engineer on this team, you'll work across application and platform security domains. You'll contribute to the practices that keep Sentry secure as we grow: security reviews, threat modeling, vulnerability management, and embedding secure coding practices into an engineering organization that cares about doing things right. You'll partner closely with product and engineering teams to influence how features are designed and built from the start. You will work as a technical collaborator who helps make the secure path the obvious one. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security challenges.   IN THIS ROLE, YOU WILL - Support and help mature Sentry's security review program. From secure code review, to architecture review, and threat modeling. You'll help build the processes, tooling, and culture which make security a natural part of how we ship and operate. - Contribute to mature vulnerability management practices. Intake, triage, prioritization, remediation tracking, and support of our bug bounty and responsible disclosure program. - Advocate for secure-by-design principles. Partner with engineering and product teams to embed security early in the development lifecycle and integrate security tooling into developer and CI/CD workflows. - Validate and reproduce application and infrastructure security findings. Scanning, manual testing, and supporting penetration testing and vulnerability validation across Sentry's application, SDKs and cloud-based platform. - Help evaluate and respond to emerging threats relevant to application security at Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices.   YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you grow into shaping how security gets done across a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting vulnerability, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than solve it manually a hundred times. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team.   QUALIFICATIONS - 2-5 years of industry experience designing, building, or securing complex applications and cloud systems - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty and responsible disclosure programs - Experienced and comfortable programming in at least one language, and able to read and reason about code in Python, Typescript, Go, or Rust - Familiarity with using distributed cloud technology (AWS, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and an understanding of how those technologies are secured (cloud networking, IAM, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication   Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow.   The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $162,000 to $200,000 CAD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Location: San Francisco, California Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. As a Security Engineer on this team, you'll work across application and platform security domains. You'll contribute to the practices that keep Sentry secure as we grow: security reviews, threat modeling, vulnerability management, and embedding secure coding practices into an engineering organization that cares about doing things right. You'll partner closely with product and engineering teams to influence how features are designed and built from the start. You will work as a technical collaborator who helps make the secure path the obvious one. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security challenges.   IN THIS ROLE, YOU WILL - Support and help mature Sentry's security review program. From secure code review, to architecture review, and threat modeling. You'll help build the processes, tooling, and culture which make security a natural part of how we ship and operate. - Contribute to mature vulnerability management practices. Intake, triage, prioritization, remediation tracking, and support of our bug bounty and responsible disclosure program. - Advocate for secure-by-design principles. Partner with engineering and product teams to embed security early in the development lifecycle and integrate security tooling into developer and CI/CD workflows. - Validate and reproduce application and infrastructure security findings. Scanning, manual testing, and supporting penetration testing and vulnerability validation across Sentry's application, SDKs and cloud-based platform. - Help evaluate and respond to emerging threats relevant to application security at Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices.   YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you grow into shaping how security gets done across a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting vulnerability, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than solve it manually a hundred times. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team.   QUALIFICATIONS - 2-5 years of industry experience designing, building, or securing complex applications and cloud systems - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty and responsible disclosure programs - Experienced and comfortable programming in at least one language, and able to read and reason about code in Python, Typescript, Go, or Rust - Familiarity with using distributed cloud technology (AWS, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and an understanding of how those technologies are secured (cloud networking, IAM, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication   Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow.   The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $155,000 to $200,000 USD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Location: Remote - US Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as our next Staff Engineer, Enterprise Security About the job As a Staff Enterprise Security Engineer, you will be a technical leader within the EntSec team, responsible for the foundational security posture of our organization. You will serve as an SME on the technical strategy and engineering execution for securing the AI ecosystem in our Enterprise, moving beyond policy into building the foundational "decision infrastructure" and technical guardrails that allow the enterprise to innovate with AI at scale. You will also guide strategic direction and collaboration across enterprise security domains. You will need a background in security engineering and the cross-functional influence necessary to solve ambiguous, large-scale problems. Leveraging expertise in security assessments,  threat modeling, identity and access control principles, and data protection, you will architect and build preventative guardrails and mitigate new risks introduced by first and third-party AI agents in our Enterprise. Responsibilities Design and implement secure reference architectures for Enterprise AI platforms that secures every Twilion’s engagement with them, ensuring data integrity, regulatory compliance, and resilience against evolving AI threats. Establish a definitive framework for AI vetting, driving the cultural and policy shifts needed to institutionalize this strategic mindset across the organization. Collaborate with cross functional partners to develop and set the long term roadmap for agentic AI identity and posture management, ensuring cohesive strategies for reducing risk from agentic AI use. Maintain and improve our enterprise security posture through high-quality code (Python, Go, or similar) and infrastructure management via IAC. Act as a technical mentor to junior engineers and a strategic advisor to leadership on the evolving AI landscape. Qualifications: Not all applicants will have skills that match a job description exactly. Twilio values diverse experiences in other industries, and we encourage everyone who meets the required qualifications to apply. Required: 7+ years of experience in security engineering or infrastructure security 2+ years of experience leading teams in a technical capacity/staff engineering capacity at an enterprise. Expertise in cloud security (AWS, GCP) and container security (Kubernetes). Proven track record of designing and deploying complex security systems at scale. Strong proficiency in programming languages such as Python, Go, or Java. Desired: Experience in building, deploying and reviewing automation for complex security workflows, including use of both AI-driven and traditional automation tools. Excellent communication skills with the ability to explain complex AI security risks to non-technical stakeholders. Location This role will be remote, but is not eligible to be hired in San Francisco, CA, Oakland, CA, San Jose, CA, or the surrounding areas. Travel We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings. Compensation *Please note the salary range information provided applies only to candidates residing in California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State due to local requirements. Compensation for candidates in other locations will be discussed during the hiring process. Please note that hiring for this role is not restricted to the locations listed above. . The estimated pay ranges for this role are as follows: Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $155,520 - $194,400. Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): $164.640 - $205,800. Based in the San Francisco Bay area, California: $182,960 - $228,700. This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave. The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location. Applications for this role are intended to be accepted until December 21, 2026, but may change based on business needs. Twilio thinks big. Do you? We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call Twilio Magic . Additionally, we empower employees to build positive change in their communities by supporting their volunteering and donation efforts. So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for, please consider other open positions. . Stay alert to recruitment fraud We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @ twilio.com email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps. . Twilio is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.

Location: England; Canada; United States Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ Secure Build builds and operates the infrastructure behind Docker's container builds. The team owns Docker Build Cloud and Docker Hub Automated Builds while developing the next generation of trusted build and CI capabilities. Its direction is to make Docker the trusted place CI runs: isolated execution, brokered access to secrets and networks, and verifiable evidence of what each build or test job did. The work spans Go services, container and build technology, cloud infrastructure, sandboxing and software supply-chain security, alongside the operational responsibility for production systems customers already depend on. SCS Services builds the backend systems and product capabilities that help developers understand, secure and ship software with confidence. The team powers important parts of Docker Scout and Docker Hardened Images, including the services and workflows that turn supply-chain data into useful developer, customer and agent experiences. Its estate is deliberately polyglot, with Clojure and Go services, event-driven workflows, Kafka, legacy Datomic components and newer Spanner-backed services. It also supports the customer journey around discovering, assessing, subscribing to and managing hardened artefacts. We are looking for one Engineering Manager to lead both teams. Together they sit at the centre of Docker's secure software supply-chain work: one creates trusted build outcomes, while the other turns build, artifact and dependency data into services and experiences used across Scout and Docker Hardened Images. This is a two-team leadership role with separate roadmaps, production responsibilities and technical domains. The teams should deliver independently, with explicit contracts and joined-up ownership where their services connect. You will own the health, delivery and growth of both teams and make the trade-offs that keep them effective as a portfolio. You will not be expected to be the deepest expert in every language or domain. You will need enough technical breadth and current engineering judgement to engage credibly in designs, reviews and incidents across both teams, set direction with strong senior engineers, and recognise when the right answer is to create space for their expertise. THE KIND OF PERSON WE'RE LOOKING FOR The successful candidate leads first. They are an experienced engineering manager who can inherit two capable teams, earn trust quickly and help each become a high-performing, value-delivering part of the wider Docker organisation. They are deliberate about where they spend their attention, protect both teams from becoming the second priority, and make portfolio trade-offs visible rather than allowing urgency, proximity or the loudest stakeholder to decide. They stay close to the technical work without trying to own every technical decision. They can hold a substantive conversation about distributed backend systems, event and data pipelines, build and CI infrastructure, trust boundaries and production operations. They are active in design and review, useful during incidents and willing to get hands-on where that moves the work forward. The balance still tilts strongly to leadership, coaching, delivery and organisational judgement. They care about security as a product and engineering property, not only as compliance. They understand how modern attacks exploit identity, secrets, dependencies and build systems, and they can reason about the evidence customers need to trust an artefact or workflow. They lead through judgement, clarity and unblocking rather than ceremony for its own sake. Above all, they grow the engineers around them and help both teams ship outcomes developers and enterprises can rely on. RESPONSIBILITIES: - Lead Secure Build and SCS Services, owning delivery, team health, growth, performance and operational excellence across both. - Turn two changing roadmaps into a coherent portfolio plan with explicit priorities, capacity and trade-offs, and create leadership coverage so neither team becomes the permanent second priority. - Partner with Product to shape strategy and roadmaps for secure build, Docker Scout, Docker Hardened Images and the services that connect them. - Stay close to the technical work through design and code review, incident response and selective hands-on contribution where it adds leverage. - Ensure each team's technical direction supports product, security, reliability and customer priorities, setting it collaboratively with Staff and senior engineers while leaving clear decision ownership with them. - Own the interfaces between the teams, including trust boundaries, contracts, data quality, versioning, operational ownership and customer-facing failure modes. - Balance new product work with inherited systems and on-call, and invest in reliability improvements driven by recurring operational pain. - Own engineer growth and performance, handle difficult conversations directly, hire and retain strong people and build succession depth within both teams. - Align Product, Design, Security, DHI Content, Registry, Hub, sales, support, commercial and legal partners while shielding the teams from churn. - Lead disciplined use of AI-assisted engineering and communicate decisions, risks and progress clearly across UK and US working hours. QUALIFICATIONS - Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience - 5+ years managing high-performing engineering teams, with meaningful responsibility across more than one team or distinct technical domain. - 8+ years of professional, hands-on software engineering experience in backend, infrastructure, platform or developer tooling. - Experience leading, growing and retaining engineers at or above your own technical seniority, including teams you did not build and difficult performance conversations. - A leader-first operating model, with current enough technical judgement to participate in design and review across unfamiliar systems without needing to be the best engineer in the room. - Experience prioritising across competing roadmaps, operational load and stakeholder commitments, with clear mechanisms for allocating attention and capacity. - Strong backend and distributed-systems judgement, including APIs, event-driven architectures, data stores, cloud-native infrastructure and production operations. - Understanding of CI or build-system internals, containers and artefact workflows, plus a strong interest in software supply-chain security and trust boundaries. - Experience leading teams that operate production infrastructure through on-call, incident response, observability, SLOs and the work required to reduce recurring operational load. - Strong product judgement and evidence of shaping roadmaps with Product rather than only receiving requirements. - Clear written and verbal communication, strong cross-functional influence, customer closeness and comfort leading a remote-first organisation across European and US time zones. Helpful, but Not Required - Experience with Go, Clojure or both, and evidence of becoming effective across a polyglot estate. - Experience with Kafka, Spanner, Datomic or comparable event-streaming and distributed-data systems. - Experience with OCI, BuildKit, Buildx, GitHub Actions or comparable build and CI platforms. - Experience with sandboxing, microVMs, untrusted workload execution or multi-tenant infrastructure. - Experience with SLSA, in-toto, SBOMs, VEX, Sigstore, cosign, provenance, signing or vulnerability scanning. - Experience evolving legacy systems while shipping new capability for developer tools, security products, regulated customers or software-agent workflows. WHAT TO EXPECT FIRST 30 DAYS - Build relationships with every engineer and the Product partners for both teams before changing structure, process or roadmap. - Understand Secure Build's product direction, production estate and on-call load, including Docker Build Cloud and Docker Hub Automated Builds. - Understand the SCS Services products, customers, architecture and operational profile, and map the dependencies, trust boundaries and ownership lines between the teams. FIRST 90 DAYS. - Own a coherent portfolio plan with both teams and Product, including explicit capacity for roadmap, reliability and cross-team work. - Establish a sustainable operating cadence and leadership coverage that prevents either team depending on your constant presence. - Agree ownership and escalation paths for shared services and failures, start one material improvement in each team and make progress and risk visible. ONE YEAR OUTLOOK - Both teams deliver predictably against a portfolio that connects secure build, Scout and Docker Hardened Images outcomes without collapsing their distinct missions. - Secure Build has delivered material trusted-build or secure-CI capability and reduced operational risk in its inherited production systems. - SCS Services has delivered material customer outcomes, while both teams have sustainable on-call, clearer ownership and senior engineers leading broader work. Docker considers visa sponsorship on a case-by-case basis based on business needs. Compensation & Equity Canada: CA$244,550 – CA$392,150 + equity United States: $174,900 – $282,700 + equity ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

About Scorewarrior Scorewarrior is an independent game studio with a single mission: to excite and unite players all over the world. For over 10 years they've been pursuing it through Total Battle — a product they continue to actively and successfully grow. The team consists of 230 self-motivated professionals who know and love their craft, and the company has recently begun an active company-wide adoption of AI tools. Their home is a great office in Limassol, Cyprus. They offer a strong relocation package for you and your family, and put real effort into making life on the island genuinely varied and interesting. Location & format: Onsite — Limassol, Cyprus. Full relocation support provided. The mission of this role: This is a hands-on engineering role: you design and implement solutions yourself, working side by side with Infrastructure, DevOps, and development teams. Leadership experience is not required here and not expected. Key objectives: — Strengthen cloud and infrastructure security in practice: secrets management, audit logging and controlled production access. — Close high-impact risks: start from an honest assessment of the current state and build a consistent picture of gaps and risks as you go. — Work secure-by-default: wherever possible, remove the security burden from teams through automation and platform-level solutions rather than rules and manual procedures. — Roll up your sleeves: dive into what Infrastructure, DevOps, and development teams are building right now, understand it from the inside, and make security part of it. Job requirements: — Real experience building platform and infrastructure security — you have designed and implemented security solutions yourself: not audited or monitored them, and you can walk us through the architecture, the decisions, and what you'd do differently. — Cloud security as your core strength: Recent hands-on experience securing cloud environments. — A strong infrastructure background. You may have grown entirely within security engineering or moved into security from DevOps, SRE, system administration, or network engineering. What matters is that your thinking is an engineer's thinking: architecture first, building over prescribing. — The ability to explain risks with facts. You have real cases where you make technical teams see why a risk matters and why a change is needed through evidence, architecture, and concrete scenarios. — AppSec, SIEM, and SOC experience are useful but secondary. Nice to have: — Infrastructure-as-Code in practice. — Container and Kubernetes security experience. — Scripting and automation as a habit: Python, Go, or Bash — you'd rather automate a control than write a procedure for humans to follow. — GCP specifically. Their stack is GCP; deep experience with it will shorten your path to impact, though strong AWS/Azure experience translates well. — Experience with securing AI tool usage. Who this role is NOT for: — Your current focus is on monitoring, alert triage and incident analysis. — Your specialization is threat research, malware analysis, cryptography, or lab-style cybersecurity. — Your recent work is mostly paper security: policies, compliance documents, and audits. — You are looking for a management track or ownership of a security function right now — strategy and team building belong to the security leadership role they're hiring separately. Why join Scorewarrior? — 99% employee satisfaction, low turnover, and colleagues who genuinely enjoy collaborating. — Live and work in sunny Cyprus with full relocation and visa support for you and your family. — Shape a global hit: the only European studio with a 4X strategy title in the world’s top-10. — Grow fast in a company that’s already strong, independent, financially rock-solid, and expanding at startup speed, with no layoffs. — Flat structure, collective decision-making, and honest feedback create full transparency and help you grow fast. — High salaries, a 13th month, performance bonuses, and extra rewards for long service, marriage, or welcoming a child, and lunch every day. — Private family health insurance, plus a monthly allowance for children’s pre-school, school, and university education. — Specialized training and certifications, language courses and books to support your growth.

About Scorewarrior Scorewarrior is an independent game studio with a single mission: to excite and unite players all over the world. For over 10 years they've been pursuing it through Total Battle — a product they continue to actively and successfully grow. The team consists of 230 self-motivated professionals, and the company has recently begun an active company-wide adoption of AI tools. The office is located in Limassol, Cyprus, with full relocation support provided. The mission of this role To build a viable, right-sized security system for Scorewarrior that protects what matters without slowing the company down, owning it end-to-end: from diagnosis and strategy to implementation, team, and culture. Key objectives — Build a viable security system across core domains: IAM (access management, MFA, SSO), infrastructure security (cloud, services, network), foundational SDLC/AppSec (security in development and code), and related processes and training. — Start with a proper diagnosis of the current landscape and design a system tailored for the company. — Own security risks and communicate effectively with both business leaders (CTO, CEO) and technical teams (developers, infrastructure). — Make informed build-vs-buy decisions regarding security tools and methods. — Introduce security as a partner, embedding baseline practices smoothly without blocking teams. — Define safe usage policies and guardrails for company-wide adoption of AI tools. — Build and grow the security team deliberately, hiring the first security engineers with clear rationale. Job requirements — 8+ years of hands-on experience in security with real projects designed, implemented, and maintained. — Real systems experience, either through a stable security engineering career or transition from system administration, technical support, or network engineering. — Proven experience hiring and building a team (2+ people) with deliberate structure. — Experience building a security function from unclear state to working system, including assessment, prioritization, and implementation. — Strong awareness of the security product market and ability to choose appropriate tools or methods. — Partner-style operating approach, working through engineering teams without blocking or mandatory authority. Nice to have — Experience in B2C products, SaaS platforms, gamedev, or mobile apps with company size up to 1,000 people. — Experience working with external security providers. — Familiarity with common security frameworks. — Experience as the first or founding security hire in a company. Who this role is NOT for — Those focused mostly on policies, reports, and committees without recent hands-on systems experience. — Those operating with hierarchical authority, mandatory sign-offs, and blocking by default. — Those who replay the same security project regardless of company context. — Those who avoid building and leading a team. What success looks like — Clear diagnosis of the security landscape and a plan trusted by CTO. — Security system working quietly with embedded baseline practices and improved protection. — Security function growing deliberately with well-structured team. Why join Scorewarrior? — 99% employee satisfaction, low turnover. — Office-first team in Limassol with modern seaside workspace and full relocation and visa support. — Opportunity to shape a global hit game. — Financially stable and expanding company with no layoffs. — Flat structure with collective decision-making and honest feedback. — Industry-leading rewards including high salaries, bonuses, and benefits. — Support at every life stage including private family health insurance and education allowances. — Priority on personal growth with training, certifications, language courses, and books.