Вакансии

Location: New York or Remote (US); South America; Europe Workplace: Remote ABOUT INJECTIVE LABS Injective Labs is trailblazing a new dawn for Web3 enabled finance. We are the core contributors to Injective, one of the fastest growing blockchains in the industry. Injective provides an interoperable smart contracts platform that is optimized for building decentralized finance applications. Interoperability is at the core of Injective, which is natively integrated with chains such as Ethereum, Cosmos and Solana. Developers can rapidly launch premier financial applications suited for mass adoption using Injective’s infrastructure and specialized DeFi primitives such as the world’s first fully on-chain order book. Our team has decades of experience spearheading the largest financial institutions and tech organizations. Injective is incubated by Binance and is backed by leading firms such as Jump Crypto, Pantera and Mark Cuban. ABOUT THE ROLE We are looking for an accomplished Chain Engineer with a security focus to join our existing highly-skilled global protocol team. You will build and harden the core of the Injective chain, making sure every module, upgrade and integration is safe before it reaches mainnet. You'll work alongside protocol engineers from spec to release, reviewing designs for attack vectors, auditing native chain code and EVM contracts, and building the tooling that keeps the chain secure over time. We're looking for someone who can work autonomously, has a hacker mentality, and thinks like an attacker while building like an engineer. If you're an autonomous engineer with a strong security mindset who enjoys working with a high degree of ownership, and you're looking to protect and strengthen the financial infrastructure of one of the fastest growing blockchains, this role is for you. RESPONSIBILITIES: - Execute internal security audits of Injective's Cosmos-SDK modules, including the decentralized orderbook, trade execution coordinator, order matcher, and Layer-2 execution environment - Review and audit EVM smart contracts, EVM integrations, and cross-chain bridge and IBC components - Partner with senior protocol engineers to build security into new chain features from day one, threat-modeling both technical and economic risks (e.g. oracle manipulation, MEV, liquidation and market-manipulation attacks) - Build, maintain, and test hardened core components of the chain (consensus, state management, financial infrastructure), and fix vulnerabilities directly in the codebase - Develop security tooling such as fuzzers, invariant and property-based tests, static analysis, and on-chain monitoring and alerting - Review chain upgrades and pull requests with a focus on determinism, consensus safety, denial-of-service vectors, and state-machine correctness - Write clear, high-quality security reports, both internal and public, and coordinate with external auditors, bug bounty researchers, and partners on findings and disclosure - Take part in incident response, and drive post-mortems and remediation when issues arise - Research and track the latest blockchain exploits and security developments, and share learnings with the wider team   WHO YOU ARE: - Minimum of 3 years' experience as a Blockchain Engineer, with a significant focus on security - 5+ years of experience in software security - Hands-on experience auditing (internally or externally) DeFi protocols or blockchain core code, with findings you can speak to - Solid understanding and proficiency of Golang and/or Solidity - Strong knowledge of Go idioms, libraries, and parallel processing, plus the security pitfalls common in Go and Cosmos-SDK chains (non-determinism, panics, unbounded iteration, gas and DoS issues) - Strong knowledge of blockchain, DeFi & DEX concepts, consensus mechanisms, CosmWasm contract platform - Solid understanding of cryptography primitives, including digital signatures and the hash algorithms used by Ethereum and Cosmos - Ability to write clear security reports and explain risk to both technical and non-technical team members NICE TO HAVES: - A track record in bug bounties, CTFs, or published audits and CVEs - Experience with fuzzing and formal verification tools - Prior experience working in trading or at an exchange - Knowledge of financial instruments and markets WHY WORK WITH US? - Competitive salary and INJ token award - Remote-friendly work environment with flexible hours. - Unlimited PTO - Equipment - Home Office Stipend - Opportunity to work on cutting-edge blockchain technology in the finance industry. - Collaborative team culture with opportunities for professional growth and development - Global team meetups As an equal opportunity employer we don’t tolerate discrimination or harassment of any kind. Whether that’s based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status or any other protected characteristic as outlined by federal, state or local laws. We will only contact candidates using emails from the @injectivelabs.org http://injectivelabs.org domain. If you are approached by any other account or domain regarding this position, it was not sent by us. Please stay cautious and report any suspicious communication.

Location: New York or Remote (US); South America; Europe Workplace: Remote ABOUT INJECTIVE LABS Injective Labs is trailblazing a new dawn for Web3 enabled finance. We are the core contributors to Injective, one of the fastest growing blockchains in the industry. Injective provides an interoperable smart contracts platform that is optimized for building decentralized finance applications. Interoperability is at the core of Injective, which is natively integrated with chains such as Ethereum, Cosmos and Solana. Developers can rapidly launch premier financial applications suited for mass adoption using Injective’s infrastructure and specialized DeFi primitives such as the world’s first fully on-chain order book. Our team has decades of experience spearheading the largest financial institutions and tech organizations. Injective is incubated by Binance and is backed by leading firms such as Jump Crypto, Pantera and Mark Cuban. ABOUT THE ROLE We are looking for an accomplished DeFi Protocol Engineer with a strong background in financial systems who can fit into an existing highly skilled global dev team. Your role is to work closely with the protocol team to brainstorm, write specs, implement, and test chain features for our Injective DeFi modules, bringing real-world trading and exchange expertise to how they are designed. You also have the freedom to detect and take ownership to improve chain performance and scalability via kvstore optimization, processing logic, and the order matching engine. If you're an autonomous engineer with strong financial experience who enjoys working with a high degree of ownership, and you're looking to make a real impact on one of the fastest-growing blockchains, this role is for you. RESPONSIBILITIES: - Build, maintain, and test core components on our Cosmos-SDK protocol, including our decentralized orderbook, trade execution coordinator, order matcher, and Layer-2 execution environment - Design and implement financial primitives on-chain (derivatives, margining, liquidations, pricing and risk logic), translating proven TradFi practices into robust protocol features - Develop and optimize core components of the Injective blockchain (consensus, state management, financial infrastructure and applications) - Take end-to-end ownership of features, from requirement gathering and specs through architecture, implementation, testing and deployment - Write open-source Golang clients that allow users to interact directly with our protocol and smart contracts - Contribute to the research and development of new blockchain features and technologies - Work closely with cross-functional teams, including front-end developers, back-end developers, and quality assurance engineers, to deliver comprehensive blockchain solutions - Collaborate with external partners and open-source communities to enhance our blockchain ecosystem WHO YOU ARE: - Minimum of 3 years’ experience as a Blockchain Engineer - Strong prior experience in finance, ideally building trading systems, exchanges, or algo trading/derivatives platforms at a bank, trading firm, or exchange - Track record of building large, complex, and performant distributed systems in production - Worked on at least two production Golang codebases that are reasonably large and performant - Strong knowledge of Go idioms, libraries, and parallel processing - Strong knowledge of blockchain, DeFi & DEX concepts, consensus mechanisms, CosmWasm contract platform - Strong knowledge of CS fundamentals such as data structures and API design - Self-driven and comfortable owning problems end-to-end with minimal oversight - Ability to communicate technical concepts with other technical and non-technical team members NICE TO HAVES: - Experience with Cosmos-SDK/Tendermint - Deep knowledge of financial instruments and markets (derivatives, credit, perpetuals, options) - Experience with low-latency or high-throughput trading infrastructure - Experience with cryptography libraries, including digital signatures and hash algorithms used by Ethereum and Cosmos - Experience with key-value databases, especially ones used by cosmos-sdk - Experience with Ethereum/Solidity WHY WORK WITH US? - Competitive salary and INJ token award - Remote-friendly work environment with flexible hours - Unlimited PTO - Equipment - Home Office Stipend - Opportunity to work on cutting-edge blockchain technology in the finance industry - Collaborative team culture with opportunities for professional growth and development - Global team meetups As an equal opportunity employer we don’t tolerate discrimination or harassment of any kind. Whether that’s based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status or any other protected characteristic as outlined by federal, state or local laws. We will only contact candidates using emails from the @injectivelabs.org http://injectivelabs.org domain. If you are approached by any other account or domain regarding this position, it was not sent by us. Please stay cautious and report any suspicious communication.

Location: Remote - Americas Who We Are: Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts. Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it. Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator. Our Team Members: We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond! We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply. Your Role: We are seeking an AI Security Engineer to own the technical security controls for how Alpaca uses AI. The scope includes identity for AI agents and automations, security requirements for AI tools and integrations, guardrails, and security logging. You will also assist in developing AI-powered security tooling. You will keep those controls consistent as AI adoption grows, and you will work with the teams building with AI so security is part of the design. This role reports to the Enterprise Security Architect and works closely with AI Enablement, Engineering, DevOps, GRC, and the wider Security team. The Security Team is 100% distributed and remote. Things You Get To Do: The core responsibilities of the AI Security Engineer are focused on AI access controls, secure AI platforms, guardrails, visibility into AI usage, and AI-powered security tooling. AI Identity and Access Controls: Agent Identity: Define how AI agents, bots, and automations authenticate, what they can access, and how their actions are attributed and audited. Tool Access: Own security requirements for AI tool integrations, including least-privilege access and credential handling. AI Assistant Controls: Define and enforce security settings for approved AI tools, including data handling and access policy. Least Privilege: Limit each agent and integration to the access it needs, and review that access when the integration changes. Secure AI Platform, Tooling, and Response: Security Requirements: Define security requirements for internal AI applications, including identity, data handling, secrets, and review of new integrations. Guardrails: Design and implement guardrails for AI applications and agents. Design Reviews: Review new AI applications and integrations for security risks, and give builders clear, practical requirements. Security Tooling: Assist Security Operations in developing AI-powered tooling that supports detection, investigation, and response work. Safe Use in Security: Apply the same identity, data handling, and logging requirements to security team AI tools as to the rest of the company. Telemetry Requirements: Define the security logging AI systems must produce, and work with Security Operations on detection. Approved Use: Maintain visibility into AI tool usage and confirm it follows approved configurations. Incident Support: Lead the AI-specific aspects of security incidents, such as agent misuse or data exposure through AI tools. On-Call: Participate in the Security Operations on-call rotation after onboarding and cross-training. Governance: Standards: Turn AI security standards into technical controls. GRC Partnership: Partner with GRC on AI governance and provide technical evidence for control design. Who You Are (Must-Haves): Excited about Alpaca’s mission and what we’re building 2+ years of experience in security engineering, application security, or cloud security roles Hands-on experience securing LLM applications, AI agents, or AI developer tools Understanding of AI-specific risks, such as prompt injection, data leakage, excessive agency, and insecure tool use (for example, the OWASP Top 10 for LLM Applications) Experience with identity and access controls for services and non-human identities, including OAuth, service accounts, and secrets management Programming experience in Python or another general-purpose language Experience with CI/CD security checks and cloud-native deployments Experience with security operations or incident response Strong written and verbal communication skills, especially when explaining risk to non-security builders Comfortable working cross-functionally and making pragmatic security decisions Willing to participate in an on-call rotation Experience building AI-assisted workflows for security operations Experience building security telemetry for AI systems Who You Might Be ( Nice-to-Haves): Experience securing financial, trading, or other highly regulated platforms Experience securing enterprise AI coding tools and AI integrations Experience with policy-as-code and Kubernetes Familiarity with AI governance frameworks, such as the NIST AI Risk Management Framework or ISO 42001 Ability to balance security rigor with operational efficiency and business needs How We Take Care of You: Competitive Salary & Stock Options Health Benefits New Hire Home-Office Setup: One-time USD $500 Monthly Stipend: USD $150 per month via a Brex Card Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce. Recruitment Privacy Policy

Разработка и развитие клиентской части высоконагруженных финансовых сервисов с использованием React и Angular (поддержка легаси, миграция или микрофронтендная архитектура). Проектирование и интеграция интеллектуальных UI-агентов (LLM-ассистенты, Copilot-интерфейсы, автономные сценарии) в экосистему продукта.

Location: Москва Workplace: В офисе О компании МТС Банк развивает цифровые финансовые сервисы и делает их доступными для всех. Мы работаем с современным технологическим стеком, высоконагруженными системами и облачной инфраструктурой. Такой подход позволяет создавать надёжные решения для бизнеса и клиентов Обязанности Чем предстоит заниматьсяпринимать участие в разработке и развитии мобильных продуктов поддерживать существующие приложения, улучшать их и реализовывать новый функционал проводить code review, помогая поддерживать высокое качество кодовой базы участвовать в техническом планировании, развитии продукта и проведении PBR взаимодействовать с архитекторами, аналитиками, QA-специалистами и командой разработки разрабатывать и поддерживать unit-тесты оптимизировать и рефакторить существующий код, повышая его читаемость и поддерживаемость Требования Наши пожелания к кандидату​​​​​​ коммерческий опыт разработки iOS-приложений от 3 лет уверенное владение программной версткой интерфейсов и понимание принципов Auto Layout знание принципов Clean Architecture и умение применять их на практике понимание механизмов управления памятью в Swift знание принципов SOLID и опыт их использования при проектировании приложений понимание архитектуры сетевого взаимодействия и особенностей работы с сетевым слоем уверенное владение Git и понимание основных принципов командной работы с системой контроля версий знание ООП, основных алгоритмов и структур данных понимание многопоточности и практический опыт работы с ней знание принципов Dependency Injection и опыт использования соответствующих инструментов, например Swinject Условия У нас ваши идеи не потеряются: предлагайте и обсуждайте, ищите новые решения и экспериментируйте. Мы всегда поддержим вас, а ещё предложим: достойную заработную плату ДМС со стоматологией с первого месяца работы доступ к корпоративной библиотеке регулярные образовательные курсы и тренинги от корпоративного университета внешнее обучение цифровое пространство (безбумажный прием на работу, коворкинг, электронный документооборот) специальный тариф на мобильную связь скидки и бонусы на продукты и услуги от МТС, МТС Банка и партнёров программу Best Benefits отсутствие дресс-кода современный и уютный офис в 2-х минутах от м. Технопарк кафе «Мечта» с полезными завтраками и вкусными обедами корпоративный спорт: йога, беговой клуб, вело-сообщество и другие тренажерный зал в офисе детские дни и подарки программу материальной помощи в различных жизненных ситуациях социальные проекты (раздельный сбор мусора, фандоматы, благотворительные ярмарки и волонтерские акции)

Задачи: — Разработка новых интеграций со сторонними сервисами и вендорами. — Поддержка существующих интеграций. Компания занимается разработкой цифровых решений для медицинских услуг, включая телемедицину, автоматизацию медицинской деятельности и создание единого информационного пространства с участниками здравоохранения РФ и СНГ. Требования: — Коммерческий опыт разработки не менее 3 лет. — Знание Symfony 5.4, включая маршрутизацию, контроллеры и сервисы. — Понимание принципа Dependency Injection. — Опыт работы с базами данных, включая анализ и оптимизацию запросов. — Навыки разработки и проектирования RESTful API с использованием JSON, включая валидацию и обеспечение безопасности. — Готовность анализировать и рефакторить чужой legacy-код. — Базовые навыки вёрстки на HTML и CSS, включая flexbox и grid layout. Плюсом будет опыт интеграций с медицинскими системами. Также важна способность самостоятельно работать на удалёнке, быть на связи и соблюдать дедлайны без микроменеджмента. Условия: — Удалённая работа. — Полная занятость.

Location: Москва Мы развиваем GigaChat — самый быстрорастущий AI-проект Сбера — и ищем сильного руководителя направления безопасности ИИ. Нашими моделями пользуются миллионы людей, и наша задача делать LLM безопасной — чтобы ее просто так нельзя было уболтать продать ваш Chevrolet за 1 рубль. А ещё, помимо безопасности, наша команда развивает GigaEmbeddings — эмбеддер, который больше года удерживает топ-1 по качеству среди русскоязычных моделей на лидерборде ruMTEB. Это роль для технического лидера, который возглавит направление: от обучения быстрых guard-моделей и online-RL до систематического редтиминга, аналитики атак на реальном трафике и развития лучших русскоязычных эмбеддеров. Обязанности Улучшать модели-защиты • Обучать компактные и быстрые классификаторы входящих и исходящих сообщений: дистилляция, работа в жёстком бюджете latency, не деградируя качество основной модели. • Развивать online-RL контур: дообучать защиты и модель на свежих атаках и сигналах с продакшена, сокращая цикл от обнаружения новой атаки до устойчивости к ней. • Балансировать метрики защит: пропущенные нарушения против ложных срабатываний, и держать оба показателя под контролем на масштабе. • Выстроить систематический red teaming: ручной и автоматизированный поиск джейлбрейков, prompt injection, обходов защит — перед каждым релизом и постоянно на живых моделях и продакшен-логах. Улучшать эмбеддеры • Развивать GigaEmbeddings: подбор и синтез данных, contrastive learning, hard negatives, дистилляция в компактные версии — удерживая топ-1 на ruMTEB. • Применять эмбеддеры в задачах безопасности: кластеризация атак и поиск аномалий в пользовательских логах, отслеживание эволюции техник обхода. • Собирать из продакшен-данных датасеты, и целевые тестовые наборы под конкретные кейсы: например, рефразы или ранжирование. • Быстро отвечать данными на вопрос «почему защиту пробили и что именно сломалось» и превращать разборы инцидентов в улучшения моделей. Требования • Отличное владение Python и PyTorch, практический опыт обучения моделей — классификаторов и LLM, а не только их использования. • Опыт с RL-методами дообучения (RLHF/DPO/online-RL) или готовность быстро в них погрузиться на практическом уровне. • Умение работать с продакшен-данными и обучать классификаторы: вытащить сигнал из логов, собрать датасет, посчитать метрики и понять, где разница значима, а где — шум.• Опыт обучения guard-моделей (Llama Guard и аналоги) или построения модерационных систем под высокой нагрузкой. • Опыт обучения эмбеддеров или ретриверов и знакомство с бенчмарками MTEB/ruMTEB. • Опыт автоматизированного red teaming и знакомство с профильной литературой по adversarial robustness. • Опыт в командах безопасности разработчиков моделей; публикации или open-source вклад в области AI safety. Условия • Возможность развивать GigaEmbeddings — лучший русскоязычный эмбеддер, больше года удерживающий топ-1 на ruMTEB. • Команду сильных инженеров и исследователей. • Возможность совмещать управление направлением с глубокой технической работой. • Конкурентную компенсацию, премии и расширенный соцпакет.

Location: Belgrade, Serbia; Krakow, Poland; Lodz, Poland; Lublin, Poland; Remote.PL, Poland; Warsaw, Poland; Wroclaw, Poland We are looking for a Full Stack Developer with strong experience in Java and React to contribute to the development of an enterprise reporting and analytics platform. You will work on a mature product used by a large global customer base, helping deliver new functionality, improve performance, troubleshoot complex issues, and maintain high quality standards across the application stack. The project focuses on building enterprise grade solutions that provide advanced reporting, data visualization, and analytics capabilities integrated with widely used collaboration and work management platforms. The product serves a large global user base and continues to evolve with new features aimed at improving productivity, decision making, and user experience. Develop and maintain backend functionality using Java, Spring, and REST APIs Enhance and support frontend applications built with React and TypeScript Work with relational databases to implement features, troubleshoot data issues, and optimize query performance Investigate and resolve complex production issues by identifying root causes and implementing long term solutions Collaborate with product, support, and engineering teams to deliver new functionality and product improvements Maintain and extend existing framework based codebases while ensuring stability, performance, and maintainability Create and maintain automated tests to support product quality and reliability Participate in code reviews and contribute to engineering best practices Support CI/CD processes and contribute to code quality and security initiatives Prepare and maintain technical documentation related to features and system behavior 3+ years of relevant full stack work experience Solid backend experience with Java and the Spring ecosystem, including dependency injection and REST controllers; comfortable reading and safely modifying an existing framework based codebase rather than working only on greenfield projects Good command of relational databases and SQL, with the ability to troubleshoot data correctness and query performance issues; experience with multiple database vendors such as PostgreSQL, MySQL, Oracle, and Microsoft SQL Server is a plus Practical experience maintaining production UIs with React (Hooks and component composition) and TypeScript in a strongly typed codebase Familiarity with state management solutions such as Redux, Redux Toolkit, MobX, or similar technologies and modern frontend build tools such as Vite or Webpack Good understanding of object oriented programming principles, common design patterns, and automated testing Highly analytical, with a genuine passion for debugging. Reproducing difficult to replicate issues and identifying their root causes is a core part of this role A strong sense of ownership, with the ability to work autonomously, take on unfamiliar areas, manage support tickets, and drive issues through to resolution Good communication skills in English (B2 Upper Intermediate or higher). You will work with international colleagues and handle customer and support requests both in writing and during meetings Experience developing or maintaining Atlassian Data Center applications (P2 Plugins, Atlassian Plugin SDK, Spring Scanner, Marketplace applications), or a strong willingness to learn the platform Recent experience with Kotlin Experience supporting a customer facing product and working directly with customer and support requests Familiarity with BI and analytics tools or the OData protocol Experience with performance profiling and optimization of large datasets Awareness of secure coding practices, including input validation, injection prevention, SSRF mitigation, dependency management, and CVE remediation Awareness of Atlassian Cloud and cloud migration paths, for example JCMA, for Data Center applications

Run AWS infrastructure as code, with AI in the loop. Manage AWS infrastructure through Terraform using our pull-request-based GitOps workflow, and resolve configuration drift across regions.

Location: Remote - EMEA Who We Are: Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts. Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it. Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator. Our Team Members: We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond! We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply. Your Role: As a Cyber & AI Risk Analyst, you will play a critical role in strengthening Alpaca’s security, compliance, and AI risk posture across the organization. Reporting to the Cyber GRC Lead, you will support the identification, assessment, and documentation of cybersecurity and AI-related risks that impact our infrastructure, products, trading systems, and internal operations. You will contribute to the design and execution of our risk management framework across traditional cyber domains (cloud security, infrastructure, application security, third-party risk, regulatory compliance) while also helping establish foundational governance controls for AI systems, models, and AI-enabled product features. This role sits at the intersection of cybersecurity, emerging AI governance, regulatory expectations, and financial services risk management. You’ll collaborate closely with Engineering, Product, Legal, Compliance, and IT teams to ensure Alpaca remains resilient, compliant, and forward-looking in how we manage both Cyber and AI risk. We’re looking for someone curious, organized, and eager to grow. If you enjoy learning how technical systems work, translating risk into clear language, and building structured programs from the ground up, then this role is for you. Prior GRC experience is a plus, but not required; we’re happy to invest in the right candidate. Things You Get To Do: Support the execution of Alpaca’s cybersecurity risk management program Conduct cyber risk assessments across cloud infrastructure , APIs, trading systems, and internal platforms Assist in identifying, documenting, and evaluating AI-related risks (model risk, data privacy, bias, explainability, adversarial threats, model misuse) Help develop and maintain AI governance controls aligned with evolving regulatory expectations such as the EU AI Act Perform third-party/vendor security and AI risk assessments Contribute to control testing across frameworks such as SOC 2, ISO 27001, CSA Star, NIST CSF, and emerging AI governance standards Track remediation efforts and maintain risk registers and reporting dashboards Support internal and external audits by preparing documentation and evidence Monitor regulatory developments related to cybersecurity, financial services, and AI governance Help mature policies, standards, and procedures for both cyber and AI domains Support the development of a repeatable AI tool/model evaluation process (intake → review → decision) for new and in-use AI tools Support Alpaca's AI usage guidance and standards, including safe use of AI-enabled developer tools and assistants Help maintain AI logging/monitoring standards (audit logging, evidence) for AI systems Use AI tools in day-to-day work and help test how well AI-related controls are working Who You Are (Must-Haves): 1+  years of experience in cybersecurity, risk management, IT audit, GRC, or a related field - internships, coursework, or equivalent experience is welcome Foundational understanding of cybersecurity principles (network security, cloud security, IAM, application security, vulnerability management) Familiarity with common frameworks such as NIST CSF, ISO 27001, SOC 2, or similar Understanding of AI/ML concepts and associated risks (data governance, model bias, hallucinations, prompt injection, model misuse, etc.) - you don’t need to be an expert, just curious Strong written communication and documentation skills Ability to assess technical risks and clearly communicate them to non-technical stakeholders Experience working cross-functionally with engineering and product teams Highly organized with strong attention to detail Comfort working in a fast-paced environment Genuine curiosity about AI and a strong desire to learn, actively experiments with AI tools, and wants to grow AI fluency as the field evolves Comfort using AI tools daily and willingness to learn newer agentic / assistant-based tooling Who You Might Be (Nice-to-Haves): Academic background, personal interest, or real world experience in fintech, financial services, or trading platforms Exposure to AI governance, model risk management, or responsible AI programs Familiarity with emerging AI regulatory frameworks (e.g., NIST AI RMF, EU AI Act concepts, model governance practices) Experience with GCP or other major cloud platforms Experience supporting or observing SOC 2, ISO 27001, or regulatory audits Security certifications (e.g., Security+, SSCP) or early-stage GRC certifications Interest in pursuing advanced certifications (CISA, CRISC, CISSP, or AI governance certifications) Experience working remotely or in distributed teams Hands-on experience with AI/agentic tooling (e.g., AI coding assistants, LLM apps, or similar) Personal projects or self-study in AI/ML that show initiative and interest How We Take Care of You: Competitive Salary & Stock Options Health Benefits New Hire Home-Office Setup: One-time USD $500 Monthly Stipend: USD $150 per month via a Brex Card Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce. Recruitment Privacy Policy

Location: United States Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ THE ROLE As AI agents redefine software development, Docker is at the center of that shift, providing the local and cloud sandboxed environments that make interactive and autonomous agentic workflows trustworthy by default. At the heart of our trust model is the fact that user credentials and other sensitive secrets are injected at the sandbox layer and never exposed to an agent. An agent can never leak secrets it never sees. The Secrets team builds the software that makes that possible, from easy-to-use SDKs to secure cloud services to high-performance network proxies. We operate at the intersection of the developer experience, enterprise governance, and security – delivering core security features that make Docker sandboxes the best way to run agents and other workloads safely. As a Staff Software Engineer on the Secrets team, you’ll design and build core security systems that power Docker’s agentic platform and AI governance products. Your work will focus on creating scalable, reliable, and secure software that enables developers to safely run agentic workloads while allowing administrators to confidently manage their organization’s security posture. The successful candidate is a technical, product-minded engineer with deep experience building secure software and scale-out cloud services and a track record of shipping critical infrastructure. They think naturally about isolation and security boundaries, understand the tradeoffs involved in running untrusted or semi-trusted workloads safely, and can reason confidently about a system that spans multiple surface areas. If you thrive on solving security and usability challenges, are enthusiastic about agentic development but conscious of the risks it entails, and want to help shape the future of Docker’s platform, we’d love to hear from you. Please note: this role is currently prioritizing candidates currently located in the Western time zone (US or Canada). _______________________________________________________________________ RESPONSIBILITIES - Design, develop, and lead improvements to the secrets management and credential injection systems. - Investigate and resolve security, correctness, performance, and stability issues across cloud, macOS, Windows, and Linux. - Collaborate with peers, Product, and adjacent teams to evolve the architecture as requirements grow. - Mentor engineers on the team and set the bar in design reviews and code reviews. - Engage with the open source and agentic development community around sandboxing, MCP, and related ecosystems. - Participate in on-call rotations and respond to critical stability issues affecting users. - Document your work clearly and share knowledge with the rest of the team. _______________________________________________________________________ QUALIFICATIONS REQUIRED - 8+ years of software engineering experience, with demonstrated technical leadership on production systems at scale. - Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience - Experience building developer tools, desktop applications, or runtime infrastructure used directly by developers. - Familiarity with the agentic software development ecosystem: how coding agents work and how tools like Claude Code, Codex, or similar agents interact with their environment. - Ability to reason about isolation and security boundaries: what a sandbox should and shouldn't expose, and how to make safe defaults obvious to users. - Experience driving architecture and technical strategy across multiple engineers or teams. - Strong written and verbal communication skills. - Comfortable working with a high degree of autonomy in a remote-first environment. PREFERRED - Strong proficiency in Go, Rust, and/or Java - Experience with cryptographic key management systems and techniques (key wrapping, HSMs, cloud KMSes, etc.) - Familiarity with best practices for protecting credentials and secret material at-rest and in transit - Understanding of networking, TLS, HTTP, and the like. - Understanding of one or more OS-specific credential management capabilities. Visa sponsorship: Docker considers visa sponsorship on a case-by-case basis based on business needs. _______________________________________________________________________   COMPENSATION & EQUITY All full-time roles include equity. Final compensation is determined on factors including but not limited to experience, skills, qualifications, and location. United States: $170,350 – $275,550 base ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

- Коммерческий опыт Android-разработки — от 3 лет.

- принимать участие в разработке и развитии мобильных продуктов. - поддерживать существующие приложения, улучшать их и реализовывать новый функционал.

Location: Москва Мы ищем не просто стажера, а будущего эксперта на стыке классической информационной безопасности и защиты искусственного интеллекта. В нашей команде ты не будешь варить кофе. Ты погрузишься в защиту периметра следующего поколения (NGFW), научишься строить «щиты» для языковых моделей (LLM Firewall) и разберешься, как защитить бизнес-данные в эпоху генеративного ИИ. Если ты понимаешь, как работает сеть, интересуешься тем, как «взламывают» нейросети, и хочешь учиться у лучших — тебе к нам. ### Обязанности Защита сетей и NGFW: * Помощь в администрировании NGFW: участие в настройке политик межсетевого экранирования и микросегментации. * Мониторинг сетевых аномалий и первичный анализ трафика уровня L7. * Помощь в интеграции событий ИБ со стеком мониторинга SOC. Эксплуатация LLM Firewall (AI Security): * Тестирование промежуточного слоя (Guardrails) между пользователями и LLM. * Генерация тестовых промптов для проверки на уязвимости (prompt injection, jailbreak). * Анализ ответов моделей на предмет утечек конфиденциальных данных из RAG-контекстов. Защита персональных данных: * Участие в задачах по обезличиванию и псевдонимизации данных (маскирование, декомпозиция). * Помощь в аудите цепочек обработки запросов на соответствие требованиям 152-ФЗ. Мониторинг и документирование: * Анализ алертов от SOC, помощь в расследовании инцидентов ИБ. * Актуализация технической документации: рисование схем потоков данных, ведение реестров конфигураций. * Помощь в проверке резервных копий и планировании обновлений СЗИ. Требования * Образование: Студент старших курсов или недавний выпускник (Информационная безопасность, ИТ, Прикладная математика, Computer Science). * Сети: Уверенное понимание модели OSI и стека TCP/IP, базовое понимание принципов маршрутизации. * AI-бэкграунд: Понимание базовых принципов работы LLM (что такое промпт, контекст, RAG, галлюцинации). Интерес к теме AI Security. * Законодательство: Базовое представление о том, что такое персональные данные и 152-ФЗ (или высокая готовность быстро в этом разобраться). * Soft skills: Внимательность к деталям, аналитический склад ума, умение гуглить и читать техническую документацию на английском языке. ### ### Будет преимуществом * Базовые навыки скриптинга на Python (написание простых парсеров, скриптов для автоматизации рутины). * Опыт работы с open-source LLM или инструментами класса guardrails (LiteLLM, NeMo Guardrails). * Участие в CTF-соревнованиях, хакатонах или наличие pet-проектов на стыке ИБ и AI. * Понимание методологий оценки уязвимостей (CVSS). * Инструментальное владение AI для решения рабочих и учебных задач. Условия * Современный офис в д. Аносино, ул. Университетская, вл. 11 (есть трансфер от м. 1905 года); * Льготные ипотечные условия кредитования; * Бесплатная подписка СберПрайм+, скидки на продукты компаний-партнеров: Okko, Сбер Маркет, Мега Маркет, Самокат, Еаптека и другие; * ДМС с первого дня и скидки на страхование для близких; * Корпоративная пенсионная программа; * Детский отдых и подарки за счет Компании; * Обучение за счет Компании: онлайн курсы, неограниченный доступ к библиотеке и обучение на базе Корпоративного университета, тренинги, митапы и возможность получить новую квалификацию.

Location: Tel Aviv-Yafo, Tel Aviv District, Israel About Aidoc Aidoc is the market leader in healthcare AI and has developed the world's largest clinical frontier model, supporting nearly 50 million patients each year. Aidoc is deployed in more than 2,000 medical centers worldwide. Since our founding in 2016, Aidoc has raised over $500 million and achieved a record number of FDA-cleared solutions. Medical diagnosis is hitting a breaking point, where the number of physicians hasn't kept up with the rapidly growing patient load. This leads to misdiagnosis and treatment delays that result in hundreds of thousands of deaths every year. Aidoc assists clinicians by precisely highlighting diseases directly on medical images, preventing misdiagnosis and ensuring that urgent patients receive the immediate attention they need. Senior Application Security Engineer Join our existing R&D Security team as Aidoc's first dedicated Application Security Engineer. You will shape how application security works across R&D: choosing effective controls, building useful security tooling, and helping engineers adopt secure practices. You will work with security leadership, SecOps, product teams and engineers. Our products span Python services, web applications, desktop applications, mobile apps, and Aidoc servers in hospitals. What you will do? Lead threat modeling and security reviews across services, web, desktop, mobile and hospital applications. Focus on customer and hospital data isolation and medical-file handling. Review Python and JavaScript/TypeScript code and test applications and APIs. Turn findings into practical requirements, help developers resolve them, and verify fixes, including testing for bypasses. Improve SAST, DAST, SCA and secrets controls across the development workflow. Work with DevOps and developers to reduce noise and make results actionable. Build security automation, CI integrations and validation tests. Create reusable guidance and help teams adopt standards through design discussions, code reviews and developer coaching. Define security requirements and verify controls for clinical inference, training pipeline code and model artifacts with AI and Data Engineering. Assess developer AI tools, including coding assistants, AI agents and Model Context Protocol (MCP) integrations, for sensitive-data exposure, excessive tool permissions and untrusted inputs. Validate application risks, recommend remediation priorities, track agreed work and measure adoption and recurring defects. Support SecOps investigations and provide technical evidence to Quality and Regulatory partners. Responsibilities 5+ years of relevant experience in Application Security, Product Security, or a combination with software engineering. Built or substantially improved an AppSec program: selected priorities, introduced or improved tooling, gained developer adoption without formal authority, and measured results. Confident security review of Python and JavaScript/TypeScript, especially authorization and tenant isolation; hands-on web and API testing. Experience threat modeling and assessing systems you did not design, and translating findings into changes engineers can implement. Ability to write security automation, CI integrations and validation tests. Working knowledge of security risks in LLM applications, AI agents and MCP integrations, including prompt injection, sensitive-data exposure and tool permissions. Clear communication in English and sound judgment when explaining security trade-offs and guiding engineering teams. Requirements Electron, mobile or Windows-hosted application security; C#/.NET, PowerShell or Go. Deeper security experience with ML training pipelines, model artifacts or inference systems. Healthcare integrations, patient-data protection or regulated product development. You can develop expertise in our additional platforms and healthcare domain here. Your AppSec judgment and record of making a program work matter most. Our Perks: Be part of something big - using cutting-edge technologies to transform the Healthcare industry (while saving patients’ lives) We work in a hybrid model, with our new offices located at 34 HaMasger Street in Tel Aviv and parking for employees. Amazing and healthy breakfasts and lunches prepared daily by our personal chef! Stocked up kitchen & meal card Wellness: Aidoc employees-only gym, plus Pilates, Yoga, and functional workouts classes. Amazing culture - collaborative, transparent & fun! Attractive compensation package & benefits Aidoc is deeply committed to creating an inclusive workplace, and to the principle of equal opportunity for all individuals. We prohibit discrimination and harassment based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by law.

Location: Philippines We are seeking a highly experienced, certified, and detail-oriented Virtual Certified Ophthalmic Coder & Billing Coordinator (Retina) to support a premier ophthalmology practice. In this critical clinical revenue cycle role, your primary focus will be live-coding complex ophthalmic and retinal patient visits, managing J-code injectable drug claims, posting payments, and acting as the main operational liaison between the clinic and our third-party billing company. Because this role demands high-level clinical coding accuracy, a minimum of 5+ years of direct ophthalmology coding experience, specialized background in retina coding, active coding certification, and live-coding mastery are absolute, non-negotiable requirements . General medical billers without direct hands-on ophthalmology coding expertise will not be considered. Working Environment & Core Schedule Role Title: Virtual Certified Ophthalmic Coder / Billing Coordinator (Retina) Specialty: Ophthalmology & Retina Status: Full-Time (40 Hours / Week) Schedule: Monday – Friday, 8:00 AM – 5:00 PM PST (Pacific Standard Time) Core Technology Stack: Ophthalmology EHR platforms (e.g., ModMed / DrChrono), Clearinghouses, Payer Portals, Practice VoIP System Primary Objective: Real-time visit live-coding, J-code processing, payment posting, and third-party billing agency liaison oversight Top 3 Daily Tasks Live Clinical Visit & J-Code Coding: Review clinical documentation in real time to code complex retina visits, surgical procedures, and intravitreal injectable drug J-codes using precise ICD-10 and CPT coding guidelines. Payment Posting & Discrepancy Auditing: Post payments accurately from ERAs/EOBs, reconcile accounts, and audit payment postings to uncover fee schedule discrepancies or coding-related claim rejections. Third-Party Billing Company Liaison Support: Work directly with the practice manager and outsourced billing agency to track unbilled encounters, resolve coding denials, push claim corrections, and report on pending revenue items. Core Responsibilities Ophthalmic & Retina Live-Coding (Primary Focus): Execute real-time CPT and ICD-10 coding for clinical encounters, retinal procedures, intravitreal injections, and specialized diagnostic testing. J-Code & Injectable Drug Management: Ensure precise coding and compliance for high-cost ophthalmic drugs and biologic injectables (J-codes), verifying unit quantities and modifier application. Documentation & Discrepancy Auditing: Audit provider chart documentation against submitted codes to capture unbilled services, catch clinical discrepancies, and ensure billing integrity prior to claim submission. Payment Posting & AR Audit: Post electronic and manual payments, identify line-item discrepancies, and address coding-related denials or payor bundling rejections. Outsourced Billing Agency Coordination: Serve as the practice’s primary contact for the third-party billing company—tracking claim transmission cadences, resolving coding edits, and holding external billers accountable. Administrative & Practice Manager Support: Own all coding workflows, deliver transparent weekly status reports on pending charts, and directly relieve administrative bottlenecks for clinic leadership. Requirements 5+ Years Ophthalmology Coding Experience: Extensive, proven background coding for an ophthalmology practice, with direct specialization in retina coding . Active Medical Coding Certification: Hold an active credential such as CPC (Certified Professional Coder), COC , CCS , or COA/OCP (Ophthalmic Coding Specialist). Live-Coding & J-Code Mastery: Demonstrated expertise in real-time live coding of provider notes and deep familiarity with J-codes / injectable drug coding . CPT & ICD-10 Expertise: Advanced knowledge of ophthalmic CPT codes, modifiers, ICD-10 diagnostic codes, and payor LCD/NCD coverage policies. Payment Posting & Billing Operations: Hands-on experience posting payments, analyzing EOBs/ERAs, and auditing claim denial patterns. Schedule Availability: Full availability to work 40 hours per week during Monday through Friday, 8:00 AM – 5:00 PM PST . Remote Workspace Setup: Dedicated, private home office with a lockable door, high-speed primary internet connection, backup power/internet solutions, a high-performance computer (PC/Mac), and a noise-canceling headset in full compliance with HIPAA rules. Preferred Qualifications Direct coding experience for intravitreal injections, retinal detachments, laser surgeries, and complex retinal imaging. Hands-on proficiency with ModMed (Modernizing Medicine / EMA) or DrChrono EHR systems. Prior experience coordinating workflows alongside an outsourced third-party billing agency. Experience directly supporting an ophthalmology practice manager or clinic director. Ideal Candidate Profile You are a master-level certified ophthalmic coder who thinks like a clinician and audits like a financial officer. You navigate retina CPT codes and J-codes with complete confidence, catch documentation errors in real time, keep payment posting tight, and seamlessly manage outsourced billing teams to ensure maximum practice reimbursement during PST business hours.

Location: New York City, NY; San Francisco, CA; Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role How do we know whether a model is safe - and how do we know whether the systems we built to catch misuse actually catch it? Anthropic answers both questions with evaluations. We measure model behavior across misuse, prompt injection, and user well-being to inform training and deployment decisions. We also use AI to investigate potential misuse of Claude, analyzing real-world traffic to surface bad actors and emerging threats that drive enforcement actions. Neither is worth much unless the evaluations behind them are representative, robust, and trustworthy. This role builds the methods and infrastructure that make them so. Sitting at the intersection of applied ML research and engineering, you'll design experiments to improve how we evaluate both model behavior and the agentic systems that govern it, build datasets that represent real abuse rather than clean approximations of it, and ship those methods into the pipelines that gate model training, agent changes, and launch decisions. Responsibilities Evaluation research and methodology. Design and run experiments to improve evaluation quality — developing methods to generate representative test data, simulate realistic user behavior, and validate grading accuracy. Research how different factors (multi-turn conversations, tools, long context, user diversity) impact model safety behavior. Analyze evaluation coverage to identify measurement gaps, and evolve evals so they remain unsaturated and high-signal as model and agent capabilities advance. Agentic investigation evals. Build and own the evaluation harness for an agentic investigation system — defining metrics, test cases, and grading approaches for a complex, long-horizon agent. Measure agent performance end-to-end (detection precision and recall, investigation quality, robustness) and drive hill-climbing on the hardest harm areas. Construct RL environments to improve Claude's safety investigation capabilities. Datasets grounded in real harm. Construct high-quality eval datasets representing real-world misuse across harm areas such as cyber attacks, bio weapons, and influence operations, drawing from both real traffic patterns and synthetic generation. Collaborate with Policy and Enforcement to translate observed harm patterns into measurable evaluations. Productionization and tooling. Ship successful research into evaluation, regression, and release pipelines that run during model training, on every agent change, prompt update, and underlying model upgrade, and beyond launch. Build tooling that enables policy experts to author, run, and iterate on evaluations without engineering support. Surface findings to research and training teams to drive upstream model improvements. Minimum qualifications Experience building and maintaining data pipelines Experience working with LLMs and a working understanding of their capabilities and failure modes — especially agentic systems with tool use and multi-step reasoning Strong data analysis skills — you can draw reliable insights from large datasets Ability to move fluidly between research prototyping and production-quality code Ability to translate ambiguous problems into concrete, testable experiments Care deeply about AI safety and want your work to have real impact Preferred qualifications 8+ years of industry software engineering or ML engineering experience Expertise in building or contributing to LLM or agent evaluation frameworks, benchmarks, or automated grading systems Extensive experience in trust and safety, content moderation, or abuse detection systems Experience in red teaming, adversarial testing, or jailbreak research on AI systems Experience with synthetic data generation or data augmentation Experience with distributed systems or large-scale data processing Experience with prompt engineering or building LLM-powered applications The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Poland Workplace: Remote OUR VISION & PRODUCTS 🚀 EverAI — Building the Future of AI Companionship One of the Top 15 Largest & Fastest-Growing AI Companies in the World 50 Million Users in 2 years — Help Us Reach 100M first, 500M next At EverAI, we’re shaping what it means to connect with AI. With 50 million users and counting, we're not just building products — we're creating entirely new categories. Our flagship product is the world’s largest AI companionship platform, redefining relationships for millions. It is governed by our proprietary moderation system, EverGuard — an internal AI designed to ensure everything we build is safe, ethical, and human-first. And we’re only just getting started! OUR TEAM We are an enthusiastic, passionate and hardworking team of ≈ 100 people. Our founding team has strong entrepreneurial experience building and scaling web products from 0 to IPO. Alexis Soulopoulos [CEO] • 10+ years in Tech Executive Leadership • Co-Founder Mad Paws Holdings (from 0 to IPO) • Forbes 30 under 30 + Deloitte TechFast50 ’22 & ‘23 Michael Monin [Co-founder & CTO] • 10+ years as CTO / COO (web2/web3), 3 years in AI/LLM • Serial-entrepreneur: MTK Digital (exited / 0->$20m revenue) and Zipchat (AI Chatbot for E-commerce brands) Thomas Lacroix [Co-founder & CMO] • 8+ years in Customer Acquisition & E-commerce Growth • Serial-entrepreneur: Curatible (sold to Blackstone) and MTK Digital (exited / 0->$20m revenue) Maruša Fasano [CFO/Legal] • 25+ years in Finance, Strategy, M&A • Ex-CFO/M&A @Curatible (exited to Blackstone) • Ex-President of the Board @SotremoSA (exited) • Co-founder/CFO @SoftOne (exited) YOUR ROLE As a Security Engineer, you’ll own application security for a fast-growing AI companionship platform. This is a hands-on AppSec role: you’ll review code, find real vulnerabilities and drive fixes across the stack. You’ll be the main security person in the company, reporting directly to our CTO and Co-Founder. You’ll set direction yourself and explain risk clearly to non-security colleagues. Our product includes AI-generated content, including NSFW content, and you’ll also keep an eye on AI-specific threats like prompt injection. Real ownership from day one. This isn’t an infrastructure, networking or DevSecOps role: we’re looking for application security depth. KEY RESPONSIBILITIES APPLICATION SECURITY (THE CORE OF THE ROLE) - Review code every week to catch vulnerabilities before they ship - Find, prioritize and drive fixes for real vulnerabilities across the stack, not surface-level issues AUDITS AND PENTESTS - Coordinate external security audits and penetration tests - Challenge findings where needed, and follow them through to fixes ENGINEERING AND AUTOMATION - Automate security work and build the tools you need to scale it - Use AI tools daily in your security work: code review, pentests and scripting OWNERSHIP AND COMMUNICATION - Own security end to end with little support, and decide what matters most - Explain technical risk in plain words to the team and leadership - Cover security alerts, including occasional night and weekend on-call ALSO PART OF THE ROLE (LIGHTER) - Keep a simple risk register and GRC documentation up to date - Share security updates with the team and run awareness training - Watch emerging AI threats (prompt injection, jailbreaks, content filter bypass) and incidents at our AI providers YOUR QUALIFICATIONS MUST-HAVES - 2+ years of hands-on security experience - Hands-on AppSec, not compliance only: you review code regularly and can walk us through a real vulnerability you found and fixed - Audits and pentests: you’ve coordinated an external audit or pentest and followed the findings through to fixes - Engineering workflows: you ship code with Git/GitHub, script in Python or Bash, and have recent hands-on work on a modern web stack (e.g. Rails, Node; GCP, Heroku or similar) - Ownership with little support: you’ve been the sole or lead security person, or owned a security area on your own. You’ve reviewed code or tested systems every week in the last 2 years, and you explain risk clearly to non-technical people - AI in your daily work: you use AI tools every day in your security work - A hacker mindset: You love breaking things to make them safer, and security isn’t only your job: you do it for fun too, through bug bounties, CTFs, research, write-ups or your own tools. NICE-TO-HAVES - ⭐ AI/LLM security testing (prompt injection, jailbreaking): a strong plus - Experience at an AI company or a scale-up - GRC awareness - Familiarity with MDM and access management SOFT SKILLS 🗣 Strong communication & collaborative skills (perfectly fluent in English) 🧢 Goal-orientated, ownership and commitment ⚡️ Doer mindset - we are moving fast and we need people who can find the right balance between executing, planning and strategy 🧢 Humble - willing to learn, open to feedback 🍭 #NSFW - you are comfortable working in an environment with products that are based on uncensored models and content WHY EVERAI? 📈 Exponential Growth: From 50M users in 2 years, to 100M next — and 500M beyond 🚀 Track Record of Category-Creating Innovation: We consistently launch world-first AI applications — setting the pace, not following it 🌍 Global Impact: Top-tier user growth, real-world adoption, and cultural relevance 🧠 Proven Leadership: A senior team that’s launched, scaled, and exited & IPO’d multiple scale ups — now fully focused on reshaping AI companionship 👥 Elite Remote Team: 100% remote and built to win — world-class talent from Tier 1 tech companies, with a culture of ownership, velocity, and radical creativity 🛡️ Ethical Core: Our AI ecosystem is governed by EverGuard, our proprietary AI moderation technology, ensuring responsible development at scale WHAT WE OFFER ✍️ Contract Type: We prefer B2B, but we’re flexible, what matters is long-term commitment and impact 📍 Work From Anywhere: Fully remote. Choose the environment where you do your best work 🏝️ Paid Time Off: 4 weeks (20 working days) of PTO per year to recharge and reset 👨‍👩‍👧‍👦 Annual Gathering: A yearly in-person meetup to connect, brainstorm, and celebrate wins together ❤️‍🩹 Health & Wellness Support: Monthly allowance of 100 USD for health insurance expenses & access to unlimited 1:1 sessions with psychologists and lifestyle experts through OpenUp (also available to up to three of your family members) 🏢 Co-Working Space Budget: Work from a co-working space up to twice per month (35 EUR / 40 USD per visit) to stay inspired and connected 📚 Learning Budget: Dedicated funds to support your professional growth: courses, books, conferences, events, or certifications 💻 Company Laptop & Equipment: Laptop provided + monitor budget up to 250 USD + keyboard/mouse/mic/headphones budget up to 150 USD ⚡ AI Tools Access: Premium access to ChatGPT, Hugging Face, Claude Code, and any other tool needed to excel at your job, power your ideas and workflows 🎯 TOP TIER TALENT IS OUR MULTIPLIER We’re a fully remote group of A-players from Tier 1 tech, led by an exec team who’ve launched, scaled, and exited multiple companies. We move fast, and care deeply about what we build — and who we build it with. We’re looking for exceptional talent ready to ship & distribute world-first AI products at scale, fast, and co-create with us this category-defining business. If that’s you — reach out and apply!