Вакансии

cоздавать и развивать сервисы SOC; формировать IR команды;

Anthropic is looking for a Senior Staff Security Engineer to lead incident response and build threat detection and response capabilities.

Location: New York, United States Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Team OKX's Legal team provides legal advice and guidance to the company across all coverage areas and geographic locations, and supports business growth and development by working with all teams within the company to help them achieve their goals. We are a high-functioning, collaborative and fast-paced group of lawyers who enjoy the cutting-edge nature of our work and the digital assets industry. Sitting in the Legal department, the Corporate Investigations team investigates fraud, misconduct and abuse committed against OKX. The team includes experienced investigators, among them former federal agents, and partners closely with the Compliance, Risk, Finance, and HR departments, colleagues in the Legal department, and business executives across OKX's global footprint. About the Opportunity This is a senior, high-impact role for a former federal prosecutor who wants to build and lead a global investigations function. The Head of Corporate Investigations will be the single accountable owner for investigating wrongdoing against OKX and developing these matters for appropriate recovery and civil or criminal enforcement as warranted. As OKX's most senior investigations leader, you will set the standard for how the company uncovers and responds to wrongdoing, leading investigations that reflect the highest standards and best practices in the field. This is an opportunity to build a world-class investigations program, one whose rigor, independence and integrity protect OKX's people, assets and reputation Where an investigation warrants it, you will be responsible for bringing matters to the appropriate authorities in the US, EMEA and APAC, ensuring each case is built to a prosecutorial standard and supported through to any civil or criminal resolution. We offer a competitive base salary and bonus structure as well as excellent benefits and an opportunity to work in a cutting-edge industry that will be the future of financial services. Extensive international travel on short notice expected in this role. What You'll Be Doing Lead the function and the team. Set the strategy, standards and methodology for internal investigations globally. Own intake, triage and prioritization. Manage and develop a team of investigators that includes former agents. Run investigations. Direct investigations from allegations through findings, including interview strategy, subject and witness interviews, digital forensics and financial tracing. Personally lead the most complex and sensitive matters. Build cases to a prosecutorial standard. Own OKX's framework for deciding which matters warrant escalation to authorities and in which jurisdiction. Build strong cases to the evidentiary and procedural standards of that jurisdiction, and partner with the Litigation team to pursue recovery of losses. Manage engagement with authorities. Where matters are brought to the attention of authorities, oversee OKX's engagement through to resolution, including providing evidence, making witnesses available and responding to legal process, as appropriate. Own law enforcement relationships. Build and maintain relationships and networks with law enforcement and prosecutors worldwide, including federal, state and local authorities in the US, EMEA and APAC. Partner across the company. Work with Compliance, Risk, Finance, HR, colleagues in the Legal department, and business executives to investigate and resolve matters effectively. Strengthen controls and report to leadership. Translate investigative findings into control improvements that prevent recurrence. Report significant matters and trends to senior leadership. What We Look For In You Prior service as an Assistant United States Attorney is required. Experience as a trial attorney in the DOJ Criminal Division, such as the Fraud Section, will also be considered. A substantial record of investigating, charging and trying federal white-collar and fraud cases, including leading grand jury investigations and working closely with federal agents. A deep understanding of what makes a case prosecutable and what prosecutors and police need before they will accept one. In-house or law firm experience leading investigations required. A JD and membership in a US state bar. 15+ years of legal experience. Experience leading and developing investigative teams, including former law enforcement professionals. Sound, proportionate judgment, with a commitment to fairness and due process for the individuals under investigation. Exceptional written and oral communication skills, with the ability to deliver clear findings to senior leadership and credible presentations to law enforcement. Discretion, integrity and composure in sensitive, high-stakes matters. A self-starter who is comfortable working independently in a fast-paced, growth-stage, multicultural environment and across global time zones. Ability to collaborate effectively across functions and earn the trust of stakeholders at every level. Nice to Haves Experience in financial services or digital assets. Exposure to cases involving cryptocurrency or blockchain tracing. Experience engaging with foreign law enforcement and prosecutors, or with international cooperation mechanisms such as MLATs, particularly in Asia-Pacific. Supervisory experience within a US Attorney's Office, such as a unit chief or deputy chief. Global investigations experience. Language capabilities: Mandarin Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! OKX Statement: OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. The salary range for this position is $240,426 - $360,639 The salary offered depends on a variety of factors, including job-related knowledge, skills, experience, and market location. In addition to the salary, a performance bonus and long-term incentives may be provided as part of the compensation package, as well as a full range of medical, financial, and/or other benefits, dependent on the position offered. Applicants should apply via OKX internal or external careers site. #LI-SK1 #LI-HYBRID Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Taguig, National Capital Region Workplace: Hybrid We are looking for a detail-oriented Investigation Specialist to support anti-fraud operations and case handling. In this role, you will manage incoming cases, perform client callouts, validate data, and conduct initial investigations to ensure accuracy and proper case routing. You will also collaborate with investigation and forensic teams to support evidence collection and analysis, playing a key role in maintaining the integrity of our fraud detection and prevention processes. KEY RESPONSIBILITIES: - Manages cases received thru Shared Mailbox and Hotline. - Perform callouts according to the antifraud workflow. - Review client information before and during calls using the Bank’s system and other resources provided by the department. - Conduct Initial Investigation of Cases Triggered or received from other departments. - Communicate with clients or related parties with the main goal to proof correctness of data. - Check correctness of triggers and filter it to which department it should be sent to procced - Ensure that all data were gathered for the following End to End investigation. - Provides direct technical support to investigation, litigation, and forensic analyst to collect, preserves, process, analyze and interpret digital evidence from broad range of data available on open sources (social media, etc). REQUIREMENTS AND EXPECTATIONS - Bachelor’s Degree in Criminology or any related four year courses - Law enforcement/Military background preferred - At least 1-year experience in Investigation preferably in Financing, Banking and Security Industry prefered. - Proficient in Microsoft Applications (Excel, Word, Powerpoint) - Excellent written and verbal communications

Location: Zürich, CH About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As Anthropic's models grow more capable, so does the interest of people who want to attack or misuse them. The Detection and Response (D&R) team spots those threats and responds to incidents across every layer of Anthropic's technology stack. The team is early-stage, so you'll help build our detection and response capabilities from the ground up and work closely with our security and research teams. Key responsibilities Lead incident response across a range of domains, from external attacks to insider threats, spanning all layers of Anthropic's technology stack Build and deploy tooling, including tools that use large language models, to improve how we detect and respond to threats Create and tune detections, playbooks, and workflows to catch and respond to incidents quickly Review incident response metrics and procedures, and drive improvements Work across security and engineering teams Take part in an on-call rotation Minimum qualifications Experience handling security incidents and investigating anomalies as part of a team Working knowledge of EDR, SIEM, SOAR, or similar security tooling A solid understanding of cloud environments and operations Experience working with engineering teams in a SaaS environment Proficiency with a scripting language such as Python and query languages such as SQL Strong communication and collaboration skills Able to lead projects with little guidance Able to pick up new languages and technologies quickly Preferred qualifications 7+ years of software engineering experience, or 7+ years of detection engineering, incident response, or threat hunting experience Security operations or investigations involving large-scale Kubernetes environments Experience analyzing attack behavior and prototyping high-quality detections Experience with threat intelligence, malware analysis, infrastructure as code, or forensics Experience contributing to a high-growth startup environment Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. ABOUT THE ROLE We're looking for a Security Engineer with deep incident response experience to help defend Replit, a fast-moving, cloud-native AI vibe-coding platform. You'll be the person who takes charge when something goes wrong. You'll lead investigations from first signal to root cause, coordinate containment across Security, SRE, and Engineering, and keep stakeholders informed while the incident is moving fast. This isn't a pure responder role. We want a well-rounded security engineer who has run real incidents and wants to make the next one faster. You'll write the scripts, automations, and tooling that take manual work out of triage, evidence collection, and containment. You'll also turn lessons from each incident into better detections, playbooks, and platform hardening.   RESPONSIBILITIES Incident Response - Serve as incident commander or technical lead for security incidents, from detection and triage through containment, eradication, recovery, and post-incident review. - Coordinate response across Security, SRE, Engineering, Legal, and leadership. Drive decisions under pressure and keep a clear record of actions taken. - Communicate incident status, impact, and risk clearly to technical and executive audiences. - Participate in and help shape the security on-call rotation. Investigation & Forensics - Investigate suspicious activity across cloud infrastructure, containers, identity systems, and application layers using SIEM, Cloud Logging, telemetry, and host and container artifacts. - Determine scope, root cause, attacker behavior, and blast radius for confirmed incidents. - Quickly assess whether emerging threats (0-days, active exploitation campaigns, bug bounty findings, customer reports) apply to Replit, and whether we're already affected. IR Automation & Tooling - Build scripts, automations, and tools (Python, Go, Bash, or directly on Replit) that speed up response, such as automated enrichment, evidence collection, credential and session revocation, workload isolation, and alert triage. - Develop and maintain response playbooks and runbooks, and automate them where possible. - Integrate response workflows with SIEM, SOAR, ticketing, and chat tooling to cut time-to-contain. Detection & Continuous Improvement - Turn incident findings into new or improved detections, logging coverage, and visibility. - Lead blameless post-incident reviews and drive remediation items to completion. - Run tabletop exercises and simulations to test readiness and find gaps.   REQUIRED SKILLS & EXPERIENCE - Proven experience leading or serving as technical lead on security incidents in a cloud or SaaS environment. - Strong hands-on investigation skills with SIEM, cloud audit logs, and log-based analysis. Comfortable working through large datasets under time pressure. - Proficiency writing production-quality scripts or tools in Python, Go, or Bash for investigation and automation. - Solid knowledge of cloud architecture and security, especially Google Cloud Platform (IAM, audit logging, GKE, networking). - Working knowledge of Kubernetes and containers, including how to investigate and contain compromised workloads. - Understanding of identity systems, SaaS architectures, and common cloud attack paths (credential theft, privilege escalation, supply chain, token abuse). - Familiarity with software engineering fundamentals, CI/CD pipelines, and package ecosystems, so you can work effectively with Engineering on code-level fixes. - Understanding of IR frameworks and lifecycle (for example NIST 800-61), plus the vulnerability lifecycle and exploitability analysis.   PREFERRED QUALIFICATIONS - Experience building or operating SOAR or other response automation platforms. - Digital forensics experience with cloud, Linux hosts, or containers. - Experience with threat intelligence, threat hunting, or security research. - Experience with bug bounty programs or coordinated vulnerability disclosure. - Familiarity with detection-as-code practices and writing detection rules. - Experience in fast-paced, cloud-native, or AI/ML-driven environments. - Relevant certifications (such as GCIH, GCFA, GCFR), or equivalent hands-on experience. WHAT WE VALUE - Curiosity & initiative: Strong desire to understand attacker behaviors, emerging threats, and how they apply to real-world systems. - Speed & analytical rigor: Ability to quickly assess high-risk vulnerabilities with clear, evidence-based reasoning. - Collaboration: Comfort working across cross-functional teams spanning Security, SRE, Engineering, and Infrastructure. - Clear communication: Ability to explain findings, risks, and mitigation strategies to stakeholders at all levels. - Ownership mindset: Takes initiative to drive investigations, improvements, and remediations to completion. - Continuous learning: Passion for staying up to date on new vulnerabilities, exploit trends, and cloud-native security best practices. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Location: APAC; EMEA; Remote Roles - EMEA Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Team The Compliance function at OKX is responsible for the overall compliance program and culture of the company. We’re a team of risk-minded problem solvers who advise the business on the company’s regulatory obligations and enterprise risk. About the Opportunity The successful candidate will have prior transaction monitoring/investigations experience in the financial services, FinTech or cryptocurrency industries. You will help support the Special Investigations team, focusing on analyzing blockchain data to identify potential illicit activities, money laundering and terrorist financing, involving cryptocurrencies. The job requires a mix of technical expertise, investigative skills, and knowledge of crypto markets and blockchain technology. What You’ll Be Doing Conduct in-depth investigations of complex AML cases, ensuring thorough analysis and adherence to regulatory requirements, through investigation of blockchain transactions to track and identify suspicious or illicit activities such as money laundering, and other criminal activities. Analyze data to identify process gaps and opportunities, and partner with Compliance, Training and other FIU stakeholders to recommend mitigating activities for risk and close process gaps. Evaluate AML transaction monitoring and suspicious activity reporting requirements for all countries where applicable. Collaborate with external partners, including financial institutions, government agencies, and blockchain companies, to share intelligence and insights. Work closely with law enforcement agencies, regulators, and legal teams to provide insights and evidence for criminal investigations. Stay abreast of changes to the cryptocurrency industry, financial crime trends, and regulatory requirements to assess impact to Transaction Monitoring. Support team training and knowledge sharing, fostering a collaborative environment focused on ongoing learning and professional growth. What We Look For In You 3-5 years of direct and strong technical experience in BSA/AML investigations and operations in relevant financial crimes, transaction monitoring and investigation roles. Demonstrated knowledge of BSA/AML, KYC regulations, risks and controls implementation globally. Strong understanding of blockchain technology, cryptocurrency protocols, and decentralized networks. Experience performing in a fast-paced environment and proven ability to meet deadlines. Self-motivated, critical thinker and adept at working independently and in a dispersed team environment covering multiple and varied tasks. Intuitive, highly ethical, and comfortable to question and challenge the status quo. Strong communication and presentation skills, both verbal and written. Proficiency in writing detailed investigative reports and communicating complex technical findings to non-technical stakeholders. Experience working independently and with team members of all levels. Nice to Haves Prior experience working in a multi-national or matrix environment. Familiarity with commonly used transaction monitoring & reporting tool(s), such as Solidus Labs, Chainalysis, or Elliptic. Relevant certifications in blockchain technology, digital forensics, or financial crime investigations such as CAMS, CFCS are a plus. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependents More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Mexico City Workplace: OnSite The Chainalysis Deployment Strategy team helps public and private sector customers investigate financial crimes involving cryptocurrency. We combine technical knowledge with analytical rigor to support complex investigations and build regional capacity for blockchain analysis. In the LATAM and Caribbean region, our team works directly with customers to enable them in the fast-moving world of cryptocurrency investigations. Along the way, we make the world a safer place. As a Deployment Strategist I, you will support cryptocurrency investigations, conduct research and data analysis, and help deliver training to customers across the LATAM and Caribbean region. You will learn to use Chainalysis tools and data to develop insights on illicit activity trends in crypto, and you will present findings to team members and customers. This is a growth-oriented role for someone eager to build expertise in blockchain analysis while contributing to complex financial crime investigations alongside senior team members.   In this role, you'll: - Support complex cryptocurrency investigations in collaboration with senior team members and cross-functional partners at Chainalysis - Conduct research and data analysis on financial crime cases involving cryptocurrencies, and document your findings in clear reports - Present investigative findings to team members and customers - Assist in reviewing the completeness of investigations and data collection methods to help determine the authenticity and relevance of evidence - Prepare summaries of research and analysis that highlight recommendations, follow-up leads, and potential risks to an investigation - Contribute to the development and delivery of workshops and training materials in English and Spanish - Represent the Chainalysis mission of bringing trust to blockchains with customers and partners in the region   We're looking for candidates who have: - A degree in cybersecurity, criminal justice, intelligence, forensic accounting, data analytics, finance, or a related field - 1-3 years of professional experience in financial crime investigations, intelligence analysis, law enforcement, compliance, or a related analytical role - Strong research skills, including experience with open-source intelligence and public or private databases - Interest in or passion for blockchain and cryptocurrency technology - Fluency in Spanish and English - Strong written and verbal communication skills - Ability to manage multiple tasks and work both independently and as part of a team - Based in Mexico City or willing to relocate Nice to have experience: - Familiarity with Chainalysis products (Reactor, KYT, or similar tools) - Working proficiency in Spanish - Previous experience supporting or conducting investigations related to dark web markets, counter-terrorism financing, or sanctions evasion - Exposure to cryptocurrency exchanges, DeFi protocols, or blockchain technology in a professional setting - Relevant certifications such as CCFC (Chainalysis Cryptocurrency Fundamentals Certification), CDAF, CRC, CCI, CFE, or CAMS AI at Chainalysis AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it. AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before. About Chainalysis Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation. You belong here.  At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture. We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here https://go.chainalysis.com/rs/503-FAP-074/images/Interview%20Accommodations%20Request.pdf. We can’t wait to meet you.

Location: New York, United States Who We Are At OKX, we believe the future will be reshaped by crypto and blockchain technology. We operate a leading global crypto platform and build products and services designed to expand access to the digital-asset ecosystem. Across our global organization, we value ownership, sound judgment, collaboration, innovation, and the ability to operate effectively in a fast-moving and continuously evolving environment. Recruiting should insert the current approved OKX corporate “Who We Are” language when the position is posted. About the Team The Fraud Investigations Team (FIT) is a First Line of Defense function within OKX’s Risk organization responsible for identifying, assessing, investigating, and helping manage significant internal and external fraud risks affecting the company, its customers, personnel, and operations. FIT conducts and supports complex investigations involving digital assets, internal and external fraud, employee misconduct, insider threats, unauthorized access or misuse of information, vendor and third-party misconduct, account compromise, social engineering, collusion, conflicts of interest, and other significant fraud-related matters. The team works closely with Legal, HR, Information Security,Engineering, Physical Security, Compliance, Finance, Operations, and other functions across OKX. About the Opportunity We are looking for an experienced Senior Analyst, Blockchain Investigations & Fraud Intelligence to join FIT. This is first and foremost a blockchain investigations role requiring significant hands-on expertise tracing digital assets across complex blockchain ecosystems. The successful candidate must be capable of independently conducting sophisticated on-chain investigations, developing and testing attribution hypotheses, identifying relationships among wallets and entities, following assets through multiple chains and protocols, and translating highly technical blockchain activity into clear investigative findings. Blockchain analysis is a specialized investigative discipline. Accordingly, we are seeking someone who understands not only how to operate commercial tracing platforms, but also the underlying blockchain architecture, transactional mechanics, attribution methodologies, clustering techniques, tracing limitations, and evidentiary considerations necessary to reach reliable conclusions. The role extends beyond on-chain analysis. The Senior Analyst will combine blockchain intelligence with enterprise data, system logs, transactional records, open-source information, and other evidence to support complex fraud and insider-risk investigations. The position will also provide analytical support to the Global Physical Security Team (PST) on selected protective-intelligence and threat-assessment matters. The Senior Analyst will directly manage one Analyst and will be expected to serve as a subject-matter resource for blockchain investigations and analytical methodology across FIT. What You’ll Be Doing Blockchain Investigations & Digital-Asset Intelligence Lead and conduct complex blockchain investigations and transaction tracing across multiple wallets, counterparties, entities, blockchains, tokens, protocols, and digital-asset ecosystems. Trace the origin, movement, conversion, layering, consolidation, and ultimate disposition of digital assets , including activity spanning multiple intermediaries and blockchain environments. Conduct investigations using tools such as Chainalysis Reactor , TRM Labs, Elliptic, or comparable blockchain intelligence platforms , while understanding the methodologies and limitations underlying platform-generated attribution. Analyze activity involving centralized exchanges, self-hosted wallets, decentralized exchanges, cross-chain bridges, mixers, privacy-enhancing technologies, DeFi protocols, smart contracts, stablecoins, NFTs, OTC activity, gambling platforms, and other relevant ecosystems . Trace assets across multiple chains and cross-chain transactions , identifying continuity of funds where technically supportable and clearly documenting assumptions or limitations where definitive attribution is not possible. Analyze transaction graphs, address relationships, behavioral patterns, clusters, counterparties, timing, amounts, transaction sequencing, and other relevant blockchain indicators. Understand and appropriately apply wallet-clustering and attribution methodologies , including the limitations and potential for false attribution associated with particular heuristics. Independently evaluate blockchain intelligence rather than relying solely on automated labels, risk scores, or vendor-generated attribution. Corroborate on-chain findings, where appropriate, with internal account records, KYC / KYB information, transaction data, access information, open-source intelligence, legal-process returns, or other available evidence . Identify relationships among blockchain addresses, OKX accounts, external counterparties, individuals, organizations, vendors, affiliates, and other relevant entities. Reconstruct complex transaction flows and create clear fund-flow diagrams, transaction maps, timelines, and visualizations that allow investigators and nontechnical stakeholders to understand the movement of assets. Analyze blockchain activity associated with suspected fraud , theft, account takeover, social engineering, insider activity, collusion, payment diversion, asset misappropriation, or other misconduct . Identify new wallets, counterparties, entities, or transactional patterns that may generate additional investigative leads. Clearly document the methodology, assumptions, confidence level, and limitations associated with blockchain findings. Distinguish between confirmed attribution , vendor attribution, analytical inference, behavioral similarity, and an unverified investigative hypothesis . Avoid presenting blockchain proximity, exposure, clustering, or a commercial risk score alone as proof of ownership, control, intent, or misconduct. Maintain current knowledge of emerging blockchain technologies, protocols, tracing methodologies, obfuscation techniques, fraud typologies, and developments affecting blockchain attribution or investigations . Fraud Investigations & Investigative Intelligence Conduct and support investigations involving internal and external fraud , employee misconduct, insider threats, vendor and third-party misconduct, collusion, conflicts of interest, asset misappropriation, unauthorized access, credential misuse, and other significant fraud risks . Combine blockchain findings with off-chain evidence to develop a comprehensive investigative picture rather than treating blockchain activity in isolation . Develop investigative hypotheses and objectively test those hypotheses against available evidence, including information that supports, contradicts, or fails to establish the hypothesis. Conduct timeline reconstruction, link analysis, relationship mapping, pattern analysis, clustering, and comparative analysis across individuals, accounts, wallets, devices, systems, transactions, and entities. Support investigations involving account takeover, impersonation, social engineering, business-email compromise, payment diversion, affiliate misconduct, and trusted-party abuse , particularly where a digital-asset, employee, vendor, or enterprise nexus exists. Analyze vendor, affiliate, partner, and other third-party activity for indicators of billing irregularities, undisclosed relationships, conflicts of interest, unusual payments, control circumvention, or other potential misconduct. Support investigative interviews by developing transaction timelines, identifying inconsistencies or information gaps, organizing evidence, and identifying appropriate areas for follow-up. Enterprise Data & Insider-Risk Analytics Analyze appropriately authorized information including system and access logs, authentication records, audit trails, customer-account activity, KYC / KYB information, transaction records, payment information, case-management records, vendor information, and relevant security telemetry . Correlate blockchain activity with enterprise data to identify possible connections among wallets, accounts, employees, customers, vendors, devices, transactions, and other relevant entities . Support investigations involving suspected unauthorized access, information misuse or exfiltration, credential compromise, control circumvention, unauthorized disclosure, or abuse of privileged access. Identify anomalous behavior or access patterns that may warrant additional investigation. Develop repeatable analytical methodologies capable of processing and correlating information from disparate systems. Use appropriate scripting, database querying, data visualization, and analytical technologies to efficiently analyze large or complex datasets. Investigative Reporting & Evidence Prepare clear, concise, and well-supported blockchain investigation reports, investigative memoranda, executive summaries, transaction-flow diagrams, link charts, timelines, and other analytical products . Explain complex blockchain concepts and transaction activity in plain language suitable for investigators, senior management, Legal, regulators, or law enforcement , as appropriate. Clearly distinguish among allegations, investigative leads, known facts, third-party attribution , analytical judgments, assumptions, information gaps, and substantiated conclusions . Ensure analytical conclusions are proportionate to the evidence and do not imply greater certainty than the underlying blockchain or other data supports. Maintain sufficient documentation to allow significant blockchain findings to be reviewed, reproduced, and understood by another qualified analyst . Preserve and handle investigative records in accordance with applicable evidence-preservation, chain-of-custody, confidentiality, privacy, access-control, and need-to-know requirements . Support appropriately authorized law-enforcement, regulatory, litigation, or legal matters in coordination with the appropriate company functions. Protective Intelligence & Physical Security Support Provide analytical support to PST on selected matters involving threats or concerning activity directed toward employees, executives, offices, events, or other company interests. Conduct authorized open-source, link, timeline, blockchain, financial, or other analytical research where relevant to understanding the identity, relationships, capabilities, or activity associated with a potential threat. Assist in evaluating available information relating to credibility, corroboration, intent, capability, access or opportunity, targeting, escalation, timing, and other relevant indicators . Prepare objective analytical products identifying known facts, analytical judgments, material information gaps, uncertainties, and appropriate confidence levels. Support PST’s assessment while preserving PST’s responsibility for protective-security decisions and operational response . Leadership & Development Directly manage and develop one Junior Analyst, including work allocation, coaching, technical development, quality assurance, and review of analytical work product . Serve as a FIT subject-matter resource for blockchain investigations and on-chain analytical methodology . Review blockchain analysis for technical accuracy, appropriate methodology, corroboration, reasonable attribution, and evidentiary support. Train and mentor junior personnel in transaction tracing, blockchain intelligence platforms, analytical reasoning, documentation, and investigative methodology. Help establish consistent standards for blockchain investigations, attribution , documentation, quality assurance, and reporting . Participate in time-sensitive investigations affecting a global organization, including occasional work outside normal business hours when required. What We Look For In You 7+ years of relevant investigative or analytical experience , with meaningful professional experience specifically conducting cryptocurrency or blockchain investigations . Demonstrated hands-on expertise independently conducting complex blockchain tracing investigations , rather than solely reviewing blockchain alerts or commercial risk scores. Advanced proficiency with one or more blockchain intelligence platforms such as Chainalysis Reactor , TRM Labs, Elliptic, or comparable technology . Strong understanding of how blockchain intelligence platforms derive attribution, clustering, exposure, and risk information—and the limitations associated with those methodologies . Demonstrated understanding of blockchain fundamentals, including wallets and addresses, transactions, UTXO and account-based models, tokens, smart contracts, block explorers, transaction fees, confirmations, and blockchain-specific transactional structures . Strong understanding of digital-asset ecosystems including centralized exchanges, self-hosted wallets, DeFi , DEXs, stablecoins, cross-chain bridges, mixers, privacy-enhancing mechanisms, and other relevant technologies . Demonstrated ability to trace assets across multiple chains, protocols, and intermediaries and recognize when technical limitations prevent definitive continuity or attribution. Experience conducting transaction-graph analysis, wallet attribution , clustering, counterparty analysis, transaction-flow reconstruction, and investigative link analysis . Ability to critically assess blockchain attribution and distinguish among technical facts, commercial vendor intelligence, analytical inference, and unsupported assumptions . Experience integrating blockchain intelligence with off-chain evidence and enterprise information to develop investigative conclusions. Strong knowledge of fraud-investigation principles including corroboration, source evaluation, evidence preservation, timeline development, hypothesis testing, and documentation. Experience analyzing large or complex datasets and familiarity with tools such as SQL , advanced Excel, Python, Splunk, or comparable data-analysis technologies . Ability to clearly explain technically complex blockchain findings to audiences that may have little or no blockchain expertise. Strong investigative writing skills and demonstrated ability to produce accurate, concise, and defensible analytical products. Sound judgment and ability to work effectively where evidence is incomplete, conflicting, or evolving. Demonstrated discretion when handling sensitive employee, customer, investigative, security, or company information. Demonstrated experience mentoring, supervising, or reviewing the work of junior analysts or investigators. Nice to Haves Experience conducting blockchain investigations within a cryptocurrency exchange, blockchain analytics company, law-enforcement agency, regulatory organization, financial institution, intelligence function, or investigative consulting environment . Experience investigating digital-asset matters involving fraud proceeds, theft, account compromise, insider activity, social engineering, asset tracing, or complex cross-chain movement . Experience supporting asset recovery, law-enforcement referrals, subpoenas/legal process, civil litigation, regulatory inquiries, or other matters requiring defensible blockchain analysis . Experience investigating insider threats, employee misconduct, unauthorized access, data exfiltration, credential compromise, vendor fraud, conflicts of interest, or trusted-party abuse. Experience with OSINT, digital forensics, enterprise logs, security telemetry, or identity and access-management information . Experience creating custom blockchain analytics through APIs, SQL , Python, blockchain explorers, node data, or other raw-data sources , rather than relying exclusively on commercial graphical interfaces. Relevant blockchain-specific training or certifications, including certifications associated with Chainalysis , TRM Labs, or comparable blockchain-analysis platforms . Professional certifications such as CFE, CFCS, CAMS, GIAC, or comparable investigative, fraud , financial-crime, cybersecurity, or intelligence credentials . What Success Looks Like Success in this role requires significantly more than knowing how to enter an address into a blockchain analytics platform. The successful candidate should be able to receive a complex transaction, wallet, allegation, or investigative question and independently determine how to trace the activity, which chains and protocols are involved, what the available data establishes, what additional information is needed, what attribution can reasonably be made, and where the technical or evidentiary limitations prevent a definitive conclusion . The individual should be able to move seamlessly between on-chain and off-chain evidence , recognizing that a blockchain transaction may establish movement of assets without necessarily establishing the identity, knowledge, intent, or conduct of the person behind a wallet. They should also be capable of converting a highly technical blockchain investigation into a concise and defensible explanation that an investigator, attorney, executive, regulator, or law-enforcement partner can understand and act upon. At the same time, this person must be sufficiently versatile to apply the same investigative discipline to internal fraud , insider risk, enterprise data, third-party misconduct, and protective-intelligence matters when required. The hierarchy is much clearer this way: blockchain investigations are the specialized core competency; fraud /investigative intelligence is the broader mission; enterprise analytics and PST support are complementary capabilities. That should materially improve the candidate pool versus a title that makes blockchain expertise appear interchangeable with general data analytics. OKX Statement: OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. The salary range for this position is $143,000 - $214,000 The salary offered depends on a variety of factors, including job-related knowledge, skills, experience, and market location. In addition to the salary, a performance bonus and long-term incentives may be provided as part of the compensation package, as well as a full range of medical, financial, and/or other benefits, dependent on the position offered. Applicants should apply via OKX internal or external careers site. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters WHAT YOU'LL ACHIEVE - Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up. - Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. - Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful. - Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements. - Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes. - Help define and track metrics such as coverage, MTTD, and alert quality. - Join a shared on-call rotation for incident response. SKILLS YOU'LL NEED TO BRING - We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you. - 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role. - Have written or tuned detections that run in production, and care about signal quality and cutting noise. - Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly. - An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect. - Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs. - Have used SIEM, EDR, or SOAR tools in any size of environment. - Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end. NICE TO HAVE - Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry. - Experience running SIEM, EDR, or SOAR platforms at large scale. - Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections). - Experience applying LLMs or agent-style tooling to security workflows. - Experience securing AI-enabled systems or endpoint tooling. - Kubernetes or container detection experience. - Background in threat intelligence, malware analysis, or digital forensics. - Contributions to the security community through research, tooling, CTFs, or talks. - Experience at a high-growth startup or AI company. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $185,000 - $280,000 per year.   By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550 and and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528.   #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: Dublin, Ireland Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters WHAT YOU'LL ACHIEVE - Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up. - Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. - Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful. - Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements. - Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes. - Help define and track metrics such as coverage, MTTD, and alert quality. - Join a shared on-call rotation for incident response. SKILLS YOU'LL NEED TO BRING - We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you. - 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role. - Have written or tuned detections that run in production, and care about signal quality and cutting noise. - Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly. - An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect. - Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs. - Have used SIEM, EDR, or SOAR tools in any size of environment. - Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end. NICE TO HAVE - Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry. - Experience running SIEM, EDR, or SOAR platforms at large scale. - Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections). - Experience applying LLMs or agent-style tooling to security workflows. - Experience securing AI-enabled systems or endpoint tooling. - Kubernetes or container detection experience. - Background in threat intelligence, malware analysis, or digital forensics. - Contributions to the security community through research, tooling, CTFs, or talks. - Experience at a high-growth startup or AI company. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role's scope and complexity, and the candidate's experience and expertise, and may vary from the range provided below. The estimated base salary range for this role is €75,000–€142,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: Madrid, Spain Workplace: hybrid Are you ready to join our digital revolution journey?    At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.   Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.   With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career. We are looking for an experienced and operationally sharp Security Operations & Incident Response Analyst (L3) to join Aleph's global IT Security team. Reporting to the Global CISO, you will be the first line of defence when incidents occur and the engine behind the team's threat detection and response capabilities. You will own the end-to-end incident response process, lead threat hunting and intelligence activities, and manage the vulnerability and identity governance programmes — ensuring Aleph is both able to detect threats quickly and respond to them effectively across a complex, globally distributed environment. What you'll do: Incident Response Own and coordinate the end-to-end incident response process : identification, triage, containment, eradication, recovery, and post-incident review (lessons learned). Serve as the primary point of contact for security incidents escalated from IT Operations, the Security Engineer, and external sources. Maintain and continuously improve incident response playbooks for the most relevant threat scenarios (ransomware, phishing, account compromise, data breach, insider threat, etc.). Manage the security incident log and register : track all incidents, document timelines and actions, and produce trend analysis and reporting for the CISO. Coordinate with external SOC or MDR providers where applicable: review daily reports, validate alert quality, and manage escalation workflows. Data Breach Management Lead data breach investigations : scope the breach, gather and preserve evidence, assess PII exposure, and coordinate response with Legal, Privacy, and HR. Produce breach investigation reports with findings, root cause, and recommendations. Threat Hunting & Intelligence Conduct proactive threat hunting across the environment: develop hypotheses based on threat intelligence, search for indicators of compromise (IoCs), and investigate anomalous behaviour. Manage the Threat Intelligence function : track relevant threat actors, TTPs (MITRE ATT&CK), and sector-specific threat campaigns; integrate intelligence into SIEM/XDR detection rules and hunting queries. Produce threat intelligence summaries and briefings for the CISO and relevant stakeholders. Vulnerability Management Own the vulnerability management programme : schedule and execute periodic vulnerability scans across infrastructure, endpoints, and cloud environments. Analyse scan results, prioritise findings by risk and exploitability, and coordinate remediation with IT Operations within agreed SLAs. Track remediation progress, produce vulnerability metrics, and report status to the CISO. Validate remediation effectiveness through re-scanning and spot-checks. Identity & Access Management (IAM) Manage periodic access reviews : coordinate with system owners and HR to review and certify user permissions across critical systems, ensuring least privilege is maintained. Oversee the Privileged Access Management (PAM) programme: define PAM policies, monitor privileged account usage, and review access rights for administrator-level accounts. Investigate and respond to identity-related anomalies and access policy violations. What we are looking for: 3–5 years in a SOC analyst, incident response, or security operations role, with at least 1–2 years at L3 level is a plus. Experience implementing or managing IAM and PAM solutions Experience working within international or multinational environments. Hands-on experience with incident response engagements (internal or consulting) is strongly valued. Relevant certifications: GCIH, GCFE, GCFA, CEH, CompTIA CySA+ , or equivalent. OSCP is a plus. Strong hands-on experience with SIEM platforms (alert triage, rule writing, query development) and EDR/XDR tools . Solid knowledge of the MITRE ATT&CK framework and its application to threat hunting and incident response. Experience conducting vulnerability scans using tools such as Tenable Nessus, Qualys, Rapid7, or similar. Familiarity with IAM and PAM concepts and platforms (e.g. CyberArk, BeyondTrust, Azure PIM, or equivalent). Experience with digital forensics and incident response (DFIR) methodologies: evidence collection, log analysis, and timeline reconstruction. Knowledge of threat intelligence platforms and feeds (e.g. MISP, VirusTotal, threat intel feeds). Understanding of ISO 27001 incident management controls, NIS2 incident reporting obligations, and PCI DSS requirement 12.10 . Calm and decisive under pressure. Strong investigative mindset with structured problem-solving approach, excellent documentation skills. Ability to communicate incident status and findings clearly to both technical teams and executive stakeholders. Collaborative and proactive, comfortable working asynchronously across time zones. English : full professional proficiency (C1/C2) — primary working language. Spanish : professional proficiency is a plus. In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is EUR 48,000 EUR. In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.   #Aleph Why Join Us?   Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.     We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.    #ALEPH

Location: Australia What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Senior Manager, Detection Engineering & Threat Hunting Location: Remote Australia Compensation Range: $150,000 to $170,000 AUD base plus bonus and equity What You’ll Do: Members of the Huntress DE&TH team wake up every morning with the honor of impeding threat actors through a combination of detection engineering and threat hunting. This team sits alongside our 24x7 Security Operations Center, and our Adversary Tactics & Tactical Response function, and plays a pivotal role in detecting threats actors before they get a chance to impact our partner environments. As a Senior Detection Engineering and Threat Hunting (DE&TH) Analyst you should be drawn to the hard problems: detecting stealthy intrusions, managing false positives and false negatives at scale, and uncovering clues that may expose an evolving campaign across Huntress partners. In this role you will turn threat intelligence, or a hypothesis, into detections that help the SOC find real intrusions faster. While the SOC is responding to alerts within minutes, this team is developing detections and reviewing more ambiguous signs of attacker activity on a daily & weekly basis. On the Detection Engineering side of the role, you will play a part in designing, building, and maintaining a resilient, scalable, and high-fidelity detection portfolio that enables the SOC to rapidly identify and respond to adversary activity. This will involve working with engineering and other adjacent teams to achieve a shared goal across multiple domains which includes identities and endpoints. On the Threat Hunting side of the role, you will get to research new attacker tradecraft, test new theories, and review hunting data at scale for millions of endpoints to proactively hunt for, and disrupt, stealthy threat actor techniques that evade initial defenses. If you love Detection Engineering and Threat Hunting at scale, whilst in the environment and energy of a SOC, this is the role for you! Responsibilities: Contribute to all parts of the detection lifecycle by creating new rules, testing them before deployment, monitoring efficacy, and tuning, promoting, or retiring rules based on their performance. Develop rules across a variety of Huntress products and operating systems such as: Identity Threat Detection and Response (ITDR), Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Windows, Linux, and MacOS. Manage any DE&TH requests raised internally or escalated from our partners. Undertake hypothesis-driven hunts across Huntress telemetry, prioritising techniques and tradecraft that may evade high-fidelity detections and initial SOC review. Consume threat intelligence and translate IOCs, TTPs, and internal findings into new or refined detections through Git-based workflows. Build and refine hunting dashboards or queries required to surface potential intrusions. Review ambiguous signs of attacker activity across Huntress products, and surface likely intrusions that require deeper investigation. Investigate or escalate likely intrusions identified to ensure partners receive clear incident reports with accurate advice. Contribute findings to community-driven projects and create Huntress content such as blogs, social posts, videos, podcasts, and webinars. Use AI-assisted workflows to prototype queries, enrich analysis, and develop a scaffolding for detection rules, ensuring you apply sound judgment to validate the AI output. We expect everyone at Huntress to be able to use AI as a real part of how they work, not occasionally, but genuinely embedded in core workflows. What You Bring To The Team: 2+ years of experience in detection engineering, threat hunting, SOC, MDR, or incident response. Intermediate knowledge of Windows internals. Working knowledge of Linux, macOS, Microsoft 365, Azure, and Google Workspace. Experience developing, testing, tuning, and documenting detections or analytics from threat intelligence, IOCs, hypotheses, or real-world investigations. Ability to communicate findings through clear written reports. Strong familiarity with detection languages such as Sigma, Suricata, Snort, or YARA, and query languages such as KQL, EQL, ES|QL, or Splunk SPL. A sound understanding of adversary tradecraft, including techniques used for persistence, privilege escalation, defense impairment, lateral movement, discovery, and collection on a system. A sound understanding of the roles different threat actors play and their associated goals, such as: initial access brokers, ransomware affiliates, and state-sponsored entities. Ability to orchestrate reusable AI workflows that improve threat hunting, detection development, or analysis, and can verify AI-generated outputs before they reach production environments. Bonus points for: Intermediate knowledge of Linux and MacOS internals. Hands-on experience using tools to remotely discover evidence of compromise such as OSquery, Velociraptor, and EDR/MDR/XDR platforms. Previous use of forensic tooling such as Eric Zimmerman's EZ Tools, RegRipper, Hayabusa, or Chainsaw to analyze endpoint artifacts. Intermediate malware analysis skills. What We Offer: Fully remote work At least one annual trip to the US for Summer Summit, with additional local events in Australia! New starter home office set up reimbursement ($800 AUD) 12 weeks paid parental leave for both primary and secondary carers Monthly digital allowance for personal phone and internet costs ($185 AUD) Monthly home office tech stipend to upgrade or replace equipment ($40 AUD) Subsidised private health insurance through our preferred provider Stock options for all full-time employees Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Location: Remote Workplace: Remote We are building AI to simulate the world through merging art and science. We believe that world models are at the frontier of progress in artificial intelligence. Language models alone won’t solve the world’s hardest problems – robotics, disease, scientific discovery. Real progress requires models that experience the world and learn from their mistakes, the same way that humans do. And this kind of trial and error can be massively accelerated when done in simulation, rather than in the real world. World models offer the most clear path to general-purpose simulation, changing how stories are told, how scientific progress is made and how the next frontiers of humanity are reached. Our team consists of creative, open minded, caring and ambitious people who are determined to change the world. We aspire to continuously build impossible things and our ability to do so relies on building an incredible team. If you are driven to do the same, we'd love to hear from you. *Titles posted to our careers page are updated regularly to best advertise the role and expected seniority, but internally we have a flat titling system with two types of titles: one for individual contributors and one for people managers. ABOUT THE ROLE Open to hiring remote — we also have offices in New York, San Francisco, Seattle, London, Paris, and Tel Aviv. Runway is hiring a Detection & Response Engineer to own how we find and stop attacks against our infrastructure, our research environment and our products. Securing a company that trains and serves frontier video models is a different problem from securing a typical SaaS product. The environment includes research compute, large training datasets, a fast-moving build pipeline and engineers who work inside AI-assisted tooling every day. Each of those changes what an attack looks like and what you need to see to catch it. You'll join the Security team and build our detection and response program the way an engineer would: detections as code, response as automation, evidence as something you can query. This is a role with real ownership: you'll own the detection program end to end, from what we log to how quickly we close an incident. You'll report to the head of security, partner with engineers across platform and research, and shape how this function grows from here. WHAT YOU'LL DO - Own detection and response end to end: what we log, what we alert on, how we triage and how we recover - Write and tune detections as code across multiple cloud environments, Kubernetes, identity systems, endpoints and SaaS, and measure them on coverage and precision rather than alert volume - Lead incident response from the first alert through containment and forensics, then write the post-incident review people actually read - Build automation that takes toil out of triage, including enrichment, correlation, containment actions and evidence collection, and use LLM-based tooling where it holds up under audit - Monitor AI agents and developer tooling operating inside our environment, and turn that into concrete telemetry and controls - Partner with platform and research engineers so new systems ship with logging and response playbooks in place on day one - Run threat hunts and tabletop exercises against the parts of the environment that worry you most, and fix what you find - Turn incident and detection metrics into evidence for SOC 2, ISO 27001 and enterprise customer security reviews, working with our GRC team - Participate in an on-call rotation for security incidents WHAT YOU'LL NEED - Hands-on incident response experience: you've triaged live alerts, led investigations and written up what happened afterward - Experience building and tuning detections in a modern SIEM, ideally managed as code - Working knowledge of how attackers move through cloud and Kubernetes environments (IAM abuse, container escape, credential theft, supply chain compromise) and what that leaves behind in logs - Comfort writing Python, Typescript, Rust or another language to automate response work and connect security tools - Familiarity with at least one major cloud platform and with Kubernetes at the level of audit logs, RBAC and workload identity - Clear writing. Incident timelines, detection documentation and updates to leadership are all part of the job - Judgment about what to alert on, what to automate and when to wake someone up EVEN BETTER IF YOU HAVE - Experience monitoring GPU or HPC-style infrastructure, or research environments with large datasets - Experience building detections or guardrails for AI agents, LLM tooling or MCP servers - Cloud forensics experience: disk and memory acquisition, cloud audit trail reconstruction, chain of custody - Published open source detection content Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. Our salary ranges are based on competitive market rates for our size, stage and industry, and salary is just one part of the overall compensation package we provide. There are many factors that go into salary determinations, including relevant experience, skill level and qualifications assessed during the interview process, and maintaining internal equity with peers on the team. The range shared below is a general expectation for the function as posted, but we are also open to considering candidates who may be more or less experienced than outlined in the job description. In this case, we will communicate any updates in the expected salary range. Lastly, the provided range is the expected salary for candidates in the U.S. Outside of those regions, there may be a change in the range, which again, will be communicated to candidates. WORKING AT RUNWAY Great things come from great teams. https://www.youtube.com/watch?v=kwmj4ato2kw&ab_channel=Runway We’d love to hear from you. We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed. So regardless of race, gender identity or expression, sexual orientation, religion, origin, ability, age, veteran status, if joining this mission speaks to you, we encourage you to apply. More about Runway - Universal World Simulator https://runwayml.com/world-simulator.html - GWM-1 https://runwayml.com/research/introducing-runway-gwm-1 - Gen-4.5 https://runwayml.com/research/introducing-runway-gen-4.5 - General World Models https://runwayml.com/research/introducing-general-world-models - Robotics SDK https://runwayml.com/research/introducing-runway-gwm-1#robotics-section - Conversational Real-time Agents https://runwayml.com/research/introducing-runway-gwm-1#avatars-section - Runway Studios https://runwayml.com/studios We're excited to be recognized as a best place to work: Crain's https://www.crainsnewyork.com/awards/best-places-work-2023 | InHerSight https://www.inhersight.com/companies/best/city/new-york-city-ny | BuiltIn NYC https://builtin.com/awards/new-york-city/2024/best-places-to-work | INC https://www.inc.com/best-workplaces/2024

Location: USA (Remote); Canada (Remote) Workplace: Remote Mysten Labs’ mission is to advance the internet through step-function improvements in what technology makes possible. We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value. Our work spans on-chain finance and the emerging agent economy. Through Sui, Move, and our broader technology stack, we’re building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact. We’re looking for a Senior Security Engineer to help protect the Sui ecosystem. You’ll uncover vulnerabilities, build monitoring tools, and assess economic risk across DeFi protocols. Working closely with external protocol teams and Mysten’s own DeFi products, including DeepBook, you’ll help address risks before they become incidents and strengthen security across the ecosystem Responsibilities - Build and run continuous monitoring of the Sui DeFi ecosystem for security and economic risk: oracle issues, misconfigurations/bad economic parameters, solvency and bad-debt exposure under price shocks, liquidation capacity against on-chain liquidity depth, accounting-versus-positions reconciliation, invariants. - Extend security team tooling, both precise static analysis tooling and proprietary agent skills. - Measure and drive compliance with the DeFi security recommendations across supported protocols: run the recurring compliance cycle, fill the protocol report card, validate security claims (audits, custody, upgrade governance, oracle dependencies) against on-chain reality, track remediation commitments, and escalate when a protocol regresses or fails to disclose an incident. Partner with the ecosystem and finance owners of the process. - Hunt for critical vulnerabilities in the highest-TVL Sui protocols and get them fixed before they are exploited: full-package audits, variant analysis across forks, pre-execution review of multisig upgrade payloads, and forensics after incidents anywhere in the ecosystem. - Be the security team's point of contact for external DeFi teams and for Mysten's own DeFi products such as DeepBook: due diligence, incident coordination, and post-mortems that feed back into the recommendations and the monitors. - Write it down: findings, reports, and runbooks that a protocol engineer can act on and a non-technical stakeholder can understand, with every claim traceable to bytecode, chain state, or data. Minimum Qualifications - Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience. - 3+ years of hands-on experience in security engineering, smart contract security, or DeFi risk engineering, with a track record of building tools that ran in production and of finding real vulnerabilities (audit findings, bug bounty reports, published research, or incident work). - Strong understanding of DeFi mechanics and their failure modes: lending markets (LTV, liquidation thresholds and bonuses, close factors, bad debt), AMMs and concentrated liquidity, perpetuals, liquid staking, oracles (staleness, confidence, TWAP, multi-source aggregation), flash loans, and MEV. - Proficiency in TypeScript and Python, and comfort with Rust. Ability to write SQL over large datasets and to work with blockchain indexers and data warehouses. - Experience reading smart contract code at source or the bytecode or disassembly level, or evident ability to learn it quickly. Move experience is a plus, not a requirement; Solidity or Rust smart contract experience transfers. - Rigor: you verify claims against bytecode and chain state, build known-clean checks into your tools, and say what you did not verify. - Strong written and verbal communication, including the ability to influence external teams you have no formal authority over - Interest in the web3 space is required. Preferred Qualifications - Sui and Move experience: the object and capability model, package upgrades and version gates, programmable transaction blocks, the Sui GraphQL and gRPC APIs. - Knowledge of the recent DeFi exploit history on Sui and other chains: named incidents, oracle compromises, and the defect classes behind them. - Experience building analysis or monitoring tools with LLM agents (Claude Code skills or comparable), and a clear sense of where models help and where deterministic tooling must do the work. - Static or dynamic program analysis experience: taint analysis, call graphs, symbolic execution, fuzzing, formal verification. - Quantitative or economic modeling experience: stress testing, liquidity modeling, risk parameters for lending markets. - Publications, conference talks, CVEs, or bug bounty rankings. Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information. Regarding the recent rash of technology job scams: Be aware that emails from genuine Mysten Labs group recruiters will always come from the @mystenlabs.com http://mystenlabs.com domain or related subdomains (e.g., mystenlabs.com/careers http://mystenlabs.com/careers). Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers http://www.mystenlabs.com/careers. To support an efficient and fair hiring process, we may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers. Our team is remote first and we are hiring across the world. Here at Mysten Labs, you’ll be joining a world-class team with tremendous growth potential as we bring the next billion users to web3. We raised a $300M Series B round from top Silicon Valley led venture funds like Jump Crypto, Andreessen Horowitz (a16z), Binance Labs, Redpoint, Lightspeed, Coinbase Ventures, Electric Capital, Standard Crypto, NFX, Slow Ventures, Scribble Ventures, Samsung Next, Lux Capital, among other investment firms and strategic partners. Come join us and build the future of web3!

What We Do: Huntress is a fully remote, global team focused on cybersecurity, founded in 2015 by former NSA cyber operators. They protect over 4 million endpoints and 7 million identities worldwide with enterprise-grade cybersecurity products designed alongside their Security Operations Center (SOC). What You’ll Do: - Triage, investigate, respond, and remediate various intrusions daily. - Review EDR telemetry, log sources, and forensic artifacts to determine root causes and provide remediation. - Perform tactical malware analysis. - Investigate suspicious Microsoft M365 activity and provide remediations. - Assist in escalations from Product Support for threat-related and SOC questions. - Contribute to detection engineering creation and tuning. - Participate in projects to improve outcomes for analysts and partners. - Collaborate in a mentored team environment. What You Bring To The Team: - 4+ years experience in SOC or Digital Forensics (DFIR). - Experience with Windows, Linux, and MacOS attack surfaces. - Knowledge of Threat Actor tools and techniques including MITRE ATT&CK Framework, PowerShell, Command Prompt, WMIC, Scheduled Tasks, SCM, Windows Domain and host enumeration, lateral movement, persistence, defense evasion, and other offensive TTPs. - Experience with static and dynamic malware analysis. - Working knowledge of Windows Administration or Enterprise Domain Administration including Active Directory, Group Policy, Domain Trusts. - Working knowledge of core networking concepts such as common ports/protocols, NAT, Public/Private IPs, VLANs. - Working knowledge of web technologies including web servers/applications and OWASP top 10. - Effective communication skills to explain complex events to less technical audiences. - Customer-focused decision making. - Strong curiosity and eagerness to learn. Preferred Qualifications: - Experience in MSP/MSSP/MDR roles. - Linux and MacOS investigative experience. - Experience with scripting languages like PowerShell, Python, Bash, PHP, JavaScript, or Ruby. - Experience with platforms like HackTheBox, TryHackMe, Blue Team Labs Online. - Experience with cloud investigations (M365, Azure, AWS, GCP). - Participation in cybersecurity competitions. - Familiarity with MSP tools such as RMMs. What We Offer: - 100% remote work environment. - Generous paid time off including vacation, sick time, and holidays. - 12 weeks paid parental leave. - Comprehensive medical, dental, and vision benefits. - 401(k) with 5% company contribution. - Life and disability insurance. - Stock options for full-time employees. - $500 one-time home office reimbursement. - Annual education and professional development allowance. - $75/month digital reimbursement. - Access to BetterUp coaching platform. Accommodations: - Reasonable accommodations available for application and selection process upon request. Huntress is committed to inclusivity and non-discrimination, except against hackers exploiting businesses.

Location: New York, New York, USA Our Story: At thinkcell, we’re on a mission to revolutionize the way professionals work—making presentation creation smarter, faster, and more efficient. Since our founding in 2002 in Berlin, we've been crafting powerful software that seamlessly integrates with Microsoft Office, helping users easily transform complex data into stunning charts and diagrams. Driven by innovation and technical excellence, our diverse and dynamic team thrives on creativity and collaboration. We foster an inclusive culture where ideas flourish, and every team member has the opportunity to make a real impact. If you're passionate about shaping the future of productivity software, think-cell is the place for you! What you will do: Are you a driven, entrepreneurial sales professional ready to make a global impact?  We’re looking for a high-energy Account Manager to lead our go to market efforts across a portfolio of high-potential accounts in the North America region. In this role, you will manage and grow a book of existing customers with a focus on driving adoption, expanding licenses, and ensuring customers unlock the full value of thinkcell. You will own the full sales cycle from opportunity identification to close and work cross functionally to deliver an exceptional customer experience. If you thrive on building strong relationships, uncovering growth opportunities, and driving impact across a broad customer base, this is your opportunity to lead from the front. Key Responsibilities: Own a portfolio of customers by managing and growing key accounts while identifying and executing expansion opportunities. Prospecting into new teams and divisions within existing accounts, leveraging account mapping and data-driven sales strategies. Manage the full sales cycle from lead generation to deal closure, including qualification, value positioning, live product demonstrations, negotiation, and contract execution. Manage data-driven account forensics to identify areas for expansion and churn prevention. Engage directly with end-users, procurement, and decision-makers to drive adoption and long-term value. Develop and execute strategic account plans tailored to each customer’s structure, needs, and buying patterns. Own pipeline generation, inbound requests, and trial conversions by refining outreach strategies, adjusting messaging, and executing sales plays. Work cross-functionally with leadership, customer enablement, and solution consulting to drive training and adoption within key accounts. Monitor account health and proactively mitigate churn risk through ongoing engagement, renewal strategies, and expansion planning. Your profile 3-5+ years of experience in high growth or start-up SaaS sales, environment. Proven track record of managing enterprise or mid-market accounts. Strong ability to navigate complex customer organizations, multi-thread deals, and working with C-suite executives. Highly self-sufficient and proactive, capable of operating in an entrepreneurial and fast-moving sales environment. Experience in working with common GTM tools (e.g. Salesforce.com, Outreach.io, Gong, LinkedIn SalesNav). Excellent virtual communication and presentation skills with the ability to build and maintain customer relationships. Appreciation of our product – willingness to understand thinkcell’s product is a must (don’t worry, it’s very intuitive), experience with thinkcell a plus. Bachelors degree, preferably in business or a related field. Proficiency in Microsoft Office. Based in NYC region, with the ability to work on-site in at least 3 days per week Ability to travel to Berlin, Germany and Denver, CO x times a year. Full work authorization, there is no visa sponsorship available for this role. Why is thinkcell the right place for you? At thinkcell, we’re not just building innovative software – we’re empowering over 1.3 million business users across 35,000 companies, including the world’s top consulting firms, DAX 40 leaders, and the biggest US blue-chip enterprises. With offices in Berlin, Munich, Denver, Boston, London, Tokyo, and Dubai, we are a diverse, passionate team of over 210 people, united by a shared commitment to excellence and innovation. Our proprietary technology sets the standard in business document creation, and we're in a dynamic, growing market with enormous potential. As we continue to lead the way in our industry, we’re looking for talented individuals who can help us shape the future of business productivity. Our Values At thinkcell, our values are at the heart of everything we do. They guide how we work, collaborate, and create value for our customers. As part of our team, you will embody and help shape the following principles that define us: Forward Thinking: We are adaptable innovators – we embrace change, value progress, and challenge the status quo to find the best solutions. Ownership: We take pride in our work – we own our mistakes, learn from them, and go the extra mile to deliver exceptional results. Customer First: We are committed to our customers – we understand, prioritize, and deliver lasting value through meaningful solutions. Unified Team: We cultivate collaboration and value every voice – we prioritize integrity and respect, ensuring everyone feels heard, supported, and aligned in our shared mission. Strive for Excellence: We are driven by excellence – we set ambitious goals, pursue quality relentlessly, and foster growth through exceptional talent. Join Our Journey We encourage you to apply even if you don’t meet every requirement. At thinkcell, we celebrate diversity because it drives creativity and excellence. We welcome individuals from all backgrounds who are passionate about making a real impact. Joining us means more than just a job – it’s an opportunity to be part of an inclusive, innovative, and supportive team that values collaboration and growth. Together, we can push boundaries and achieve great things. Compensation: thinkcell believes the value of pay transparency contributes towards an honest and supportive culture. For this role, we anticipate an OTE of $130K–$150K per year. The actual amount to be offered to the successful candidate will be dependent upon the key aspects of each case, which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any think-cell variable incentive includes a targeted dollar amount, and any actual payout amount is dependent on company and personal performance. think-cell provides comprehensive benefits package including medical, dental, vision, disability leave, parental leave, paid time off and 401k contribution (all benefits are subject to eligibility requirements). At thinkcell, we value diversity. thinkcell is proud to be an equal opportunity employer and does not discriminate based on race, color, religion, national origin, age, disability, sex, gender identity or expression, sexual orientation, marital status, military or veteran status, or any other characteristic protected by law.

Location: Bangalore Workplace: hybrid ⚡️ About Merkle Science Merkle Science provides blockchain transaction monitoring and intelligence solutions for web3 companies, digital asset service providers, financial institutions, law enforcement and government agencies to detect, investigate, and prevent illicit use of cryptocurrencies. Our vision is to make cryptocurrencies safe and provide infrastructure for the safe and compliant growth of cryptocurrencies. Merkle Science is headquartered in New York with offices in Singapore, Bangalore and London. The team has combined experience across Bank of America, Paypal, Luno, Thomson Reuters and Amazon. The company has raised over $27M from SIG, Beco, Republic, DCG, Kenetic, GGV and several others. 💥 What will you do? ● Own one of our core products (crypto-forensics or crypto transaction monitoring), its roadmap and vision ● Collaborate closely with product designers and engineers to launch easy to use solutions to solve complex problems ● Coordinate with customers to understand their requirements, and help evolve our existing products based on customer feedback ● Serve as the central point of contact that connects sales, marketing and engineering teams and helps in cross-collaboration 📜  What process do we follow? (<2 weeks) 1. Application: We will keep it simple. You can apply directly through our job portal. All we ask for is a Resume. Additional Portfolio links such as Github, Medium or a Personal website are welcome 2.     Screening: We will screen your profile and get back with a decision asap 3.     Interviews: We will have two rounds of interviews. Round one (30mins) Intro call that will focus on getting to know each other better and identifying if this could work for both of us. Round two (60mins) is a technical round where we will review your prior experience and discuss how you would build systems to solve a problem we will introduce on call. An additional third round-technical  may be decided based on the previous rounds  4.     Meet the Team: Culture-Fit is essential for both you and us. So we always go the extra mile, and you will meet two other colleagues on the team who you would be working with. Here, you could discuss questions on stack, culture and some other things you might be interested in if you had a consideration for a new role. 5.     Offer Rollout: If all looks well, we will open a bottle of champagne.  📢 Other information you may want to consider  ·  We will be flexible for the rest of the pandemic and work remotely; however, we are not a remote-first company, and the work location would be Bangalore when things settle. ❤️ Well Being, Compensation and Benefits We care about your well-being. Along with excellent health insurance, we offer flexible time off, learning & development initiatives and hours that are designed to provide work/life balance.  We regularly host team-building sessions and encourage discussions around mental health.   We reward talent and believe in acknowledging people for their contributions.  We offer industry-leading compensation, along with generous equity.  As a rapidly growing business, there are endless opportunities to grow your career with Merkle Science.