Вакансии

Location: Remote Workplace: Remote ABOUT THE COMPANY Rain is the global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Our technology allows partners to move, store, and use stablecoins instantly and compliantly through global payment cards, rewards, on/offramps, wallets, and cross-border rails. As both a Visa and Mastercard Principal Member, Rain issues cards that work at more than 175 million merchant locations in over 220 countries and territories. Built natively for stablecoins and trusted by more than 100 organizations worldwide, Rain delivers secure, scalable infrastructure that makes money move freely and instantly around the world. You will have the opportunity to deliver massive impact at a hypergrowth company backed by some of the top investors in fintech, crypto, and SaaS. In January 2026, we closed a $250M Series C led by ICONIQ, valuing Rain at $1.95B, with Sapphire Ventures, Dragonfly, Bessemer Venture Partners, Galaxy Ventures, FirstMark, Lightspeed, Norwest, and Endeavor Catalyst also participating. If you're curious, bold, and excited to help shape a borderless financial future, we'd love to talk. OUR ETHOS We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and impact the roadmap and vision of our company. ABOUT THE TEAM Security Engineering is a small team that answers one question: was it built right? We run our own AI-driven red team against Rain's code and cloud, gate pull requests before they merge, and write the baselines that say how every system should be configured. Our blockchain work is covered. This role owns everything else: the backend services, APIs, cloud, and edge that move real money for real customers. We work closely with Security Operations: we give them high-quality findings to coordinate fixes for, and clear configuration rules they can build detections on. ABOUT THE TEAM Security Engineering makes sure Rain is built right. We run our own AI-driven red team against our code and cloud, gate pull requests before they merge, and set the baselines for how every system is configured. This role owns everything outside blockchain: the backend services, APIs, cloud, and edge that move real money. We give Security Operations high-quality findings to coordinate fixes for, and clear configuration rules to build detections on. ABOUT THE ROLE You'll be Rain's application security expert and the quality bar for every non-chain finding we produce. The calls are yours: what's real, how bad it is, and what has to be fixed before launch. You'll hold the line with engineers when it matters, and make the case so they agree, not just comply. WHAT YOU'LL DO - Review red team findings before they reach engineers: reproduce them, cut false positives, set severity, and write tickets clear enough to fix without a meeting. Improve the scoring that grades them - Harden our backend services and APIs, especially the money-moving paths. You'll often write the fix yourself - Own edge defenses: DDoS protection, rate limiting, WAF rules, and abuse controls - Write secure configuration baselines for our cloud, code, and SaaS, and turn them into automated checks - Grow our PR security gate so more bugs are blocked before merge - Own attack surface coverage, and run architecture reviews on new and high-risk systems - Find, test, and pick the best security tools, whether we buy, adopt, or build WHAT WE'RE LOOKING FOR - 4+ years in application security, product security, or security-minded backend engineering - You've owned security decisions. You can tell a senior engineer their design needs to change and keep a good working relationship - You can read an unfamiliar codebase (TypeScript/Node.js) and find the bug that matters, and you know a scary-sounding finding from a real one - Hands-on cloud security (ideally GCP), Terraform, and edge defenses like WAFs and rate limiting - Experience with threat models or architecture reviews. You've run tool bake-offs and dropped tools that didn't earn their cost - You'd rather ship a check than write a document, and you use AI tools heavily without trusting them blindly BONUS ATTRIBUTES - Fintech, payments, or card issuing background (PCI DSS a plus) - Pentest, bug bounty, or red team experience - Experience building security scanners, static analysis rules, or LLM-based review tools - If you have the background: AI security for our agents and agentic payments, or corporate security alongside IT THINGS THAT ENABLE A FULFILLING, HEALTHY AND HAPPY EXPERIENCE AT RAIN: Unlimited time off 🌴 Unlimited vacation can be daunting, so we require Rainmakers to take 10 days minimum for themselves. Flexible working ☕ We support a flexible workplace – work from home, come into an office, or both. We want everyone to work in an environment where they're their most confident and productive selves. New Rainmakers receive a stipend to set up a comfortable home workspace. Easy to access benefits 🧠 For US Rainmakers, we cover 95% of your health, dental, and vision plan costs and 90% for your dependents, plus a 100% company-subsidized life insurance plan. Retirement goals💡 Plan for the future with confidence. We offer a 401(k) with a 4% company match. Equity plan 📦 Every Rainmaker gets an equity option plan so we all benefit from our success. Health and Wellness 📚 High performance begins from within. Rainmakers receive a monthly stipend to be used for eligible health and wellness spending like gym memberships/fitness classes, massages, acupuncture - whatever recharges you! In-office meals 🍜 Rainmakers working from the office enjoy lunch and dinner on us, covered with a DoorDash credit. Team summits ✨ Summits play an important role at Rain. Time together helps us build relationships and a common destiny. Expect team and company offsites, both domestic and international.

Задачи: — искать уязвимости в ИТ-системах клиентов; — проводить penetration testing в команде; — работать с разнообразными технологиями и инфраструктурами. Требования: — немецкий C2 и хороший английский; — готовность работать в офисе в Ахене; — интерес к offensive security; — опыт CTF — приветствуется. Условия: — офис (on-site), возможна неполная ставка от 19 ч/нед для студентов.

Location: United States; Canada Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ THE ROLE As a Senior Security Engineer, Offensive Security, you'll help drive offensive security at Docker, putting our products, platforms, and cloud infrastructure under realistic adversarial testing to surface and drive out attack paths before real adversaries find them. You'll partner with engineering, product, and leadership to turn findings into durable fixes and to shape how security is designed into every Docker product. You'll apply your expertise in penetration testing, threat modeling, and exploit development to find and eliminate risks across Docker products and infrastructure. Working across cloud infrastructure (AWS, GCP, Azure), containerized environments, and AI/ML products, you'll implement proactive security solutions that scale with Docker's growth. This role offers the opportunity to help improve security programs at a company whose products are trusted by millions of developers worldwide. You'll work in a fast-paced, technically challenging environment where your security expertise directly impacts both Docker's platform and the broader container ecosystem. _______________________________________________________________________ RESPONSIBILITIES - Contribute to security initiatives that align with business goals, helping ensure security is a core component of our products and infrastructure - Support and help implement key security programs such as automated security design reviews, and vulnerability management - Build deep knowledge of software security and architecture, and act as a go-to resource for engineering teams - Partner with engineering to design and implement security architecture and controls across Docker products and platforms - Plan, scope, and execute penetration tests and red-team / adversary-emulation engagements against Docker's products and services - Develop proof-of-concept exploits and produce clear, risk-rated findings with actionable remediation guidance, then retest fixes to confirm closure - Build and maintain offensive security tooling and automation to expand testing coverage and repeatability - Perform security reviews and threat modeling (design, architecture, and code) across Docker products and services, including emerging AI products, and write automated security tests and exploits - Serve on rotating on-call schedule to respond to security events, investigate threats, and coordinate remediation efforts - Educate and collaborate with cross-functional teams (e.g., engineering, product) to promote security practices - Participate in Security Incident response _______________________________________________________________________ QUALIFICATIONS - Have 3+ years in security engineering, including hands-on offensive security and penetration testing across applications and infrastructure - Possess 2+ years of hands-on development experience in Python or Golang - Demonstrate deep expertise in authentication, authorization, including technologies like OAuth, cryptography applications and Zero Trust principles. - Have strong hands-on experience with securing cloud ecosystems (e.g. AWS, GCP, Azure) - Have hands-on penetration testing experience across SaaS web applications and APIs., including manual exploitation beyond automated scanners - Are proficient with offensive tooling and techniques such as. Burp Suite, and OWASP frameworks - Can write security tests and develop exploits and proof-of-concepts that find real vulnerabilities in a product - Understand AI/ML security risks and mitigations, including prompt injection, data poisoning, model extraction, and adversarial attacks - Have practical experience using LLMs and agentic tooling to automate vulnerability discovery, reconnaissance, and pentesting workflows - Have a track record of building security programs and automations from scratch, applying risk-based prioritization - Have experience performing security reviews and building or improving security review automation - Have excellent communication skills, allowing you to explain complex security concepts clearly to technical and non-technical stakeholders - Understand industry standards, and actively keep up with emerging security technologies and models - Are a team player who drives security change via collaboration and cross-functional partnerships - Hold offensive security certifications such as OSCP, OSWE, OSEP, GXPN, GPEN, or CRTO - Have published CVEs, original security research, or conference talks Bonus if you: - Have experience with container escape, Kubernetes attack paths, or cloud red teaming - Have experience testing AI/ML systems for issues like prompt injection, model extraction, and data poisoning _______________________________________________________________________ WHAT TO EXPECT FIRST 30 DAYS: - Meet with security team and key partners across engineering - Gain access to team owned systems, and internal documentation - Complete security awareness training and compliance onboarding - Review application architecture, tech stack and data flow - Review risk registry and annual roadmap - Familiarize oneself with team workflows and processes - Shadow a fellow security engineer during their on-call/secops rotations FIRST 90 DAYS: - Conduct security review on emerging Docker products - Scope and execute your first penetration test against a Docker product or service - Actively participate in architecture design reviews with the team - Contribute to a Security-owned project or initiative - Collaborate with Docker developers to validate and resolve discovered vulnerabilities - Enhance incident response capabilities by participating in on-call rotation and post-incident activities - Create and maintain security documentation and runbooks FIRST YEAR OUTLOOK - Contribute to the security roadmap for improving security controls - Strengthen Zero Trust architecture and least privilege access controls - Enhance security monitoring and anomaly detection - Perform security reviews for major product releases - Own and run recurring penetration tests and adversary-emulation exercises across Docker products, and engage with external researchers - Support audits and ensure compliance with SOC 2, ISO 27xxx - Advocate for “security by design” in all product features - Become well versed in Docker products and emerging AI technologies Visa sponsorship: Not available for this role. _______________________________________________________________________   COMPENSATION & EQUITY All full-time roles include equity. Final compensation is determined on factors including but not limited to experience, skills, qualifications, and location. Canada: CA$271,150 – CA$434,000 base United States: $194,150 – $312,950 base ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Location: Paris, France Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. MISSION Alan is scaling internationally (800+ employees, 100+ healthcare professionals, 5+ countries) and needs IT Engineers to build and own the internal technology platform every Alaner works on: identity and provisioning, endpoint and SaaS security, the tooling behind our clinics, and the automation that keeps IT from scaling linearly with headcount. The scope below is what the team owns, not a checklist for one person. You'll be staffed on one or two of these areas at a time, according to your strengths and interests, and it will evolve through time based on company needs and personal appetite. Staying close to users keeps us building the right things: you'll spend up to 2-3 days a month on IT support, seeing first-hand where friction lives and what's worth automating next. SCOPE ⚙️ PLATFORM & AUTOMATION - Own and extend automations on Alan Home, our internal provisioning engine - Maintain, extend and improve helpdesk automation, SaaS provisioning flows, and onboarding/offboarding pipelines - Own the meeting room AV and room-booking platform as a product, replicable across offices 🔑 IDENTITY & ACCESS - Own the IT side of the employee lifecycle (onboarding, offboarding, mobility between jobs and countries) across Google Workspace, SSO/SAML and our SaaS ecosystem. - Grow our role-based access model: extend it to more tools and refine the permission groups, so access is granted by role rather than case by case - Make employee lifecycle events reliable, fast and auditable end-to-end - Own access reviews and least-privilege models; produce and maintain the evidence our auditors rely on - Own SaaS procurement and license management: vendor relationships, renewals, and cost optimization across our stack 🔒 ENDPOINT & SAAS SECURITY - Own the Mac fleet in Kandji: enrollment at scale, role-based blueprints, fleet compliance - Cloudflare WARP, SaaS security controls - Maintain and strengthen our ISO 27001 certification and drive ACPR and pentest remediation on the endpoint and platform scope 🩺 HEALTH PROFESSIONALS IT - The IT layer behind Alan's clinics: practitioner tooling, equipment, access - Role and permission automation for healthcare professionals, and their support and escalation process 🌍 INTERNATIONALISATION - Make international expansion something IT accelerates, not something it slows down: a repeatable process where every new market (Canada, KSA, Armenia...) launches on our standard stack from day one - Bring acquired entities onto that same platform MILESTONES First 3 months - Acquire technical knowledge on Alan's platform: Alan Home, Google Workspace/SSO, Kandji, Cloudflare WARP - Take one project end-to-end and ship a first increment - Join the IT oncall team as technical escalation First 6 months - Own a workstream end-to-end - Deliver one automation or hardening initiative end-to-end - Take up documentation and automation on your scope and reduce significantly the bus factor on it - Mentor IT teammates on your core expertise First year - Deliver measurable IT toil reduction on your scope - Set the technical standards on your domain: how we build, document and review it - Build strong cross-functional partnerships (Engineering, Security, Workplace, Clinic, People, Audit) - Contribute to hiring and onboarding new teammates 3 years - Lead major projects end-to-end across several communities - Be the reference the team relies on across at least two domains - Mentor the IT team and beyond, and scale IT without a linear increase in manual work As the community grows, there is room to take on more responsibility: leading a crew, owning cross-community projects, mentoring, hiring. WHAT WE'RE LOOKING FOR Must-have - Technical/hard skills: - 5+ years in IT engineering, platform, systems or corporate engineering, with real ownership of production-facing systems - Depth in at least one area (platform & automation, identity, endpoint & security) and demonstrated range beyond it. - You write code: not necessarily as a full-time software engineer, but Python, APIs and pull requests in a shared repo should feel normal - Structured problem-solving: diagnoses methodically, asks the right clarifying questions, thinks about failure modes and rollback - Comfort with regulated environments: health data, ACPR, ISO 27001, HDS - Automation & AI appetite: uses AI tools smartly to accelerate their own delivery, with an instinct for what should be automated or delegated to AI rather than repeated Must-have - Behavioral / soft skills: - Ownership & autonomy: drives topics forward without hand-holding, including when they cross into someone else's perimeter - Written communication: Alan is written-first; decisions get argued in public documents and challenged by people outside your team - Pragmatic judgment: balances "perfect" vs. "good enough", decides with incomplete information - Documentation culture: reduces bus factor through clear documentation and knowledge sharing Nice-to-have skills / Bonus points if you have: - Experience with an internal provisioning or IdP-driven automation platform - Kandji or another MDM at scale - Cloudflare Zero Trust / WARP, Datadog - Audit remediation experience (ISO 27001, HDS) - Multi-country rollouts, or IT integration after an acquisition - Having mentored, coached or led a (small) crew - Health or healthtech ecosystem familiarity Languages: Fluent English & Professional French

Location: Paris Workplace: Hybrid ABOUT VOODOO Founded in 2013, Voodoo is a tech company that creates mobile games and apps with a mission to entertain the world. Gathering 800 employees, 7 billion downloads, and over 200 million active users, Voodoo is the #3 mobile publisher worldwide in terms of downloads after Google and Meta. Our portfolio includes chart-topping games like Mob Control and Block Jam, alongside popular apps such as BeReal and Wizz. TEAM The Engineering & Data team builds innovative tech products and platforms to support the impressive growth of their gaming and consumer apps which allow Voodoo to stay at the forefront of the mobile industry. The Engineering & Data team plays a key role in Voodoo's long-term strategy. It enables Voodoo to both accelerate product diversification and provide a state of the art growth-engine to distribute and scale our games. They create innovative solutions that drive growth with a pragmatic approach, ranging from simple searching to complex machine learning systems. ROLE We’re looking for a Senior Security Engineer to join our Engineering & Data team. In this role, you’ll be responsible for a wide variety of topics: - Security Engineering & Guardrails: Architect, construct, and maintain automated security guardrails and paved paths to foster secure-by-default development environments. - Shift-Left Architecture Guidance: Collaborate with development teams during the early ideation and design phases to embed secure coding practices and architecture from inception. - Continuous & Automated Assessment: Develop automated, continuous assessment capabilities that replace manual reviews and scale seamlessly across the business unit. - Hands-on Code Contribution: Work directly alongside engineers to contribute code for security fixes and paved-path solutions, ensuring security remains the simplest route. - Self-Service Tooling: Partner with developers to build scalable, self-service security tools that empower teams to detect and remediate risks independently. - Preventive & Detective Controls: Implement robust preventive and detective controls to deliver ongoing assurance rather than point-in-time security checks. - Strategic Collaboration & Incident Response: Drive long-term security strategy with key stakeholders while actively participating in periodic on-call rotations for incident support. - AI-Driven Security Innovation: Utilize AI technologies and methodologies to streamline threat detection, accelerate security evaluations, and advance scalable system protection. PROFILE (MUST HAVE) - 5+ years of experience troubleshooting systems, analyzing logs, and automating complex tasks via command-line tools - 5+ years of experience identifying security vulnerabilities, assessing risks, and constructing mitigation strategies - 5+ years of hands-on experience with scripting, software development, and security-focused code reviews across standard programming languages - Demonstrated expertise in recognizing industry-standard security vulnerabilities, understanding threat vector patterns, and applying effective remediation techniques - Proven track record in a leadership or guidance role, such as a technical lead, mentor, or engineering team lead - Proficiency in applying threat modeling and comprehensive risk identification methodologies - Proven track record securing microservices, service-oriented architectures, and web services - Experience with identity provider servers and authentication protocols (such as OAuth2, OIDC, SAML) - Experience with penetration testing (pentest) and vulnerability assessments - Self-starter with strong ownership, accountability, and ability to work autonomously and collaboratively across teams and organizations in a fast-paced environment. PROFILE (NICE TO HAVE) - Advocate for security standards with clarity and empathy. - Familiarity with AI/ML workflows and agents. OUR STACK Terraform, Kubernetes, Prometheus, ArgoCD, CircleCI, GitHub Actions, Atlantis, Grafana, Claude Code, Trivy, Conftest / OPA, AWS IAM Identity Center (SSO), Okta, AWS Secrets Manager, AWS KMS, AWS WAFv2, AWS Shield, AWS ACM, AWS GuardDuty, Sealed Secrets, Kyverno, cert-manager BENEFITS - Competitive salary based on experience - Swile Lunch voucher - Gymlib (100% covered by Voodoo) - Premium healthcare coverage with SideCare, 100% covered for you and your family - Wellness activities in our Paris office - Remote Fridays

Задачи: — Исследовать актуальные угрозы, тактики, техники и процедуры (TTP) APT, анализировать современные методы проведения кибератак; — Разрабатывать алгоритмы выявления угроз: создавать правила и сценарии детектирования; — Разрабатывать сценарии реагирования и рекомендации по обработке инцидентов информационной безопасности; — Участвовать в проектных и иных активностях в качестве эксперта ИБ; — Развивать продукты компании, повышая качество механизмов обнаружения угроз и реагирования на инциденты; — Автоматизировать процессы анализа и детектирования угроз, развивать собственную экспертизу и делиться знаниями внутри команды. Требования: — Знание современных тактик и техник атакующих, основных векторов атак, способов их обнаружения; — Знание принципов работы сетевых протоколов, операционных систем и веб-приложений; — Опыт использования или понимание принципов работы решений классов Threat Intelligence (TI); — Умение анализировать журналы регистрации событий различных информационных систем, СЗИ, ОС, сетевого оборудования, СУБД, приложений и т.п; — Опыт в расследовании инцидентов информационной безопасности; — Умение эмулировать действия APT в тестовой среде для проверки сценариев обнаружения; — Опыт разработки сложных правил корреляции и сценариев детектирования для SIEM; — Опыт администрирования Linux/Unix и Windows; — Опыт разработки скриптов на Bash, Python и PowerShell. Будет плюсом: — Наличие профессиональных сертификатов (OCSP, SANS, CISSP); — Опыт участия в CTF или в проведении Pentest; — Понимание жизненного цикла атак (Cyber Kill Chain, MITRE ATT&CK); — Опыт работы с Kubernetes, Docker, VMware; — Опыт работы в SOC; — Опыт публичных выступлений и подготовки технических материалов; — Высшее образование по направлению ИТ и/или ИБ. Условия: — Работа в гибридном формате в офисе класса «А» в двух шагах от ст. м. Римская/Площадь Ильича или удаленный формат работы на территории РФ; — Достойная оплата труда, соответствующая профессиональному уровню и компетенциям; — Статус аккредитованной ИТ-компании со всеми преимуществами; — ДМС со стоматологией и госпитализацией по всей России, страхование от несчастного случая, полис ВЗР для поездок за границу, ветеринарная поддержка; — 100% компенсацию больничного, +10 дополнительных дней в году на отгул по болезни; — Регулярный обмен обратной связью по системе полугодового Performance Review; — Возможности для обучения и профессионального развития: корпоративную библиотеку, менторство, внутренние митапы по обмену опытом, практику публичных выступлений, возможность участвовать в создании контента для профессиональных сообществ; — Программу корпоративных скидок и привилегий; — Развитую корпоративную культуру: открытую коммуникацию, онлайн и офлайн встречи, клубы по интересам, спортивные активности и поддержку инициатив сотрудников.

Задачи: — проводить penetration testing продуктов и сервисов Samsung; — искать и оценивать уязвимости; — проводить code review; — взаимодействовать с разработчиками. Требования: — опыт web application pentest от 3 лет; — знание Burp Suite, OWASP ZAP; — знание OWASP Top 10; — знание Python. Будет плюсом: Kali Linux, AWS, Docker, SAST, CI/CD и DevSecOps, Linux internals, AI Security. Изюминка вакансии: это именно security-команда R&D, а не классический внутренний ИБ-отдел — основной фокус на тестировании большого количества веб-приложений и поиске уязвимостей.

Опыт: — Опыт работы в сфере информационной безопасности не менее 5 лет — Опыт выполнения руководящих или координирующих функций в области информационной безопасности не менее 1 года — Практический опыт построения, внедрения и развития системы управления информационной безопасностью (СУИБ) — Опыт проведения оценки рисков информационной безопасности, разработки мероприятий по их снижению и контроля их исполнения — Опыт разработки политик, регламентов, стандартов, инструкций, технических требований и иной документации в области ИБ — Знание законодательства и нормативно-технических требований Республики Казахстан в области информатизации, цифровизации, информационной и кибербезопасности, включая требования ЕТ № 832 Профессиональные знания: — Знание принципов построения СУИБ и требований ISO/IEC 27001 — Практический опыт работы с решениями Check Point, Cisco, Fortinet и другими средствами сетевой и информационной безопасности — Хорошее понимание сетевых технологий, протоколов, маршрутизации, межсетевого взаимодействия и сетевой безопасности на уровне CCNA/CCNP — Понимание принципов и методов проведения тестирования на проникновение (Pentest), включая подходы White Box, Grey Box и Black Box — Понимание принципов управления уязвимостями, реагирования на инциденты ИБ, мониторинга событий безопасности и расследования инцидентов — Навыки анализа архитектуры информационных систем и оценки рисков ИБ при внедрении новых ИТ-решений и цифровых проектов — Желательно понимание вопросов информационной безопасности при использовании облачных технологий, API, мобильных решений и искусственного интеллекта Условия: — 5-дневная рабочая неделя — Премии — Медицинское страхование

Location: UNITED STATES - Remote, LATAM - Remote, EMEA - Remote Please note that we are unable to consider applications from candidates based in France, Italy, or Germany for this role. Money is moving onto the internet, and the shift has a name: Open Money. This is money that is open, portable, agentic, and owned by you. MetaMask spent the last ten years building it; with 100M+ downloads, users in ~190 countries, and trillions in cumulative transaction volume, it's the most trusted self-custodial financial platform on the internet. Now we're building the operating system for your money: one place to hold, move, grow, and use anything you own.  Join a remote-first, global team rebuilding how money works: a problem that touches everyone, every day. About the role This role runs the internal posture engine — the risk register, critical control monitoring, evidence, audit operations and GRC tooling. It keeps risk state current so the Lead and the Risk Committee decide from accurate data in the Risk Dashboard and reporting. Drata is the register of record. Named owners close gaps; this role keeps the register, evidence and audit operations current. Responsibilities Planning Operate the risk register from the Security Programme threat model: populate, track treatment, record acceptance decisions, follow up owners, and run the exceptions register. Keep the ISMS and security policy library current as part of audit readiness. Draft security standards when commissioned by the Lead. Run Drata as the control and evidence system — Statement of Applicability, framework crosswalk and automation. Execution Run critical control monitoring: health check-ins, drift flags and Drata automation. Route drift to the SOC. Maintain the evidence file for Lead assessments and independent internal audit. Feed threat-assessment findings into the register and confidence ratings. Track which required assessments are current. Lead audit coordination and preparation: ISO 27001 and SOC 2 logistics, ISMS readiness, team prep, management-review pack, and customer due-diligence questionnaires. Coordinate the control register for external testing (red team, tabletop, pentest). Run security awareness and weekly alerts. Tracking and evaluating performance Track residual risk, exceptions and gap-closure against appetite. Exceptions expire and are reported; the underlying requirement stays in force. Report register state and evidence health so the Lead and Risk Committee work from one view. Achieving overall defined performance Be accountable for a current, defensible posture engine — register, evidence and audit operations. Ensure Drata collects evidence continuously, with automated evidence where coverage exists. Qualifications Hands-on experience running a risk register, control library and audit cycle (ISO 27001 and/or SOC 2). Comfortable with GRC platforms (Drata or equivalent) and turning monitoring into evidence. Proven ability to coordinate audits and customer questionnaires with named control owners. Precise written work; register and Statement of Applicability quality matters. Strong stakeholder management with control owners and auditors. CISA, ISO 27001 Lead Implementer or Auditor, or equivalent professional certification. Don't meet all the requirements? Don't sweat it. We’re passionate about building a diverse team of humans and as such, if you think you've got what it takes for our chaotic-but-fun, remote-friendly, start-up environment—apply anyway, detailing your relevant transferable skills in your cover letter. While we have a pretty good idea of what we need, we're ready for you to challenge our thinking on who needs to be in this role . The salary range listed for this role applies to US-based candidates only. Compensation for candidates based outside the US (including Canada, EMEA, and LATAM) will be determined based on location, experience, and skills during the interview process, and may differ from the listed US range. US pay range (not including bonus, equity or other benefits) $150,000 — $206,000 USD In the rapidly evolving Web3 space, we believe that everyone is a builder. This expansive paradigm requires a range of backgrounds, talents, skills, and experiences to influence and shape the future. At MetaMask, this diversity fuels our ability to shift control and redefine the realm of possibility. We are committed to ensuring that our technology empowers people and communities through decentralized technologies. We welcome the range of perspectives and differences and celebrate them. We're excited to see how your unique skills as a builder can contribute to our vision, drive innovation, and help us shape a more inclusive Web3. MetaMask is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law. MetaMask is aware of fraudulent recruitment practices and we encourage all applicants to review our best practices to protect yourself, which can be found on our page. MetaMask may use artificial intelligence (AI) tools to support parts of our recruitment process, such as reviewing applications, screening resumes, or conducting initial candidate assessments. These tools are designed to assist our recruiting team and improve efficiency — they do not replace human judgment. A human recruiter or hiring manager reviews every candidate, and all final hiring decisions are made by people, not AI. It is a requirement of employment in this position that applicants may be required to submit to background and identity verification checks, including but not limited to employment, education, criminal record checks, and other such checks as determined necessary by the company.

Задачи: — проводить пентест Web, API, мобильных приложений, инфраструктуры, сетей и облака; — выполнять white-box / SAST-анализ исходного кода; — работать с разработчиками, DevOps и Blue Team; — использовать Burp Suite, Nmap, Metasploit, Nessus/OpenVAS, Hydra, sqlmap, Impacket, BloodHound и др.; — участвовать в построении SecSDLC; — готовить отчёты по результатам работ. Требования: — знание OWASP Top 10 / API Top 10 / Mobile Top 10; — понимание TCP/IP, HTTP/S, DNS, LDAP, SMB; — опыт в Pentest / Network Security; — уверенное владение Linux; — опыт работы с Burp Suite, Nmap, Metasploit и инструментами анализа уязвимостей; — знание OWASP, MITRE ATT&CK, D3FEND.

Задачи: — Подготовка учеников с нуля в направлении Cybersecurity и pentest — Обучение через практические проекты Требования: — Не указаны явно Условия: — Обучение 24/7 — Оплата от $60 и выше Ментор: Fayozbek, 19 лет, специализация Cybersecurity

В компании Mareven Food Central открыта вакансия аудитора по информационной безопасности с опытом от 3 до 6 лет, расположенная в Москве. В обязанности входит работа с SIEM-системами, включая подключение источников данных, мониторинг и корреляцию событий безопасности, а также выявление подозрительной активности и участие в расследовании инцидентов. Кандидат будет заниматься сканированием активов на уязвимости, анализом результатов и контролем их устранения, проводить технические аудиты информационной безопасности и готовить рекомендации. Также требуется аудит безопасности Active Directory с выявлением опасных конфигураций, проверка защищённости настроек операционных систем, серверов и сетевой инфраструктуры. В задачи входит сопровождение внешних Pentest, анализ их результатов и контроль устранения выявленных недостатков, анализ событий IDS и участие в расследовании сетевых угроз, а также организация фишинговых симуляций и анализ их итогов. Требуется продвинутое знание Windows/Windows Server и Active Directory, уверенное владение Linux, SIEM и сканерами уязвимостей, опыт мониторинга и расследования инцидентов информационной безопасности, знание сетевых технологий, IDS/NIDS и принципов безопасной настройки инфраструктуры. Необходим опыт проведения технических аудитов и анализа защищённости Active Directory, понимание методологии Pentest и умение анализировать его результаты. Навыки работы с PowerShell обязательны, знание Python или Bash будет преимуществом. Важны умение готовить технические заключения и рекомендации, аналитическое и системное мышление, внимательность, самостоятельность, ответственность, а также способность аргументированно взаимодействовать с ИТ-командами и подрядчиками. Уровень заработной платы обсуждается на собеседовании.

О проекте: Международный проект в области AI Security, связанный с разработкой сред, которые помогают LLM-моделям проходить обучение с подкреплением для задач, связанных с кибербезопасностью. Эти среды содержат задания в различных областях кибербезопасности (пентестинг, реагирование на инциденты, эксплуатация, вредоносное ПО и т.д.), цель — создавать достаточно сложные задачи, чтобы модель допускала ошибки, но которые остаются решаемыми для профессиональных специалистов. Это не классическая позиция Pentester или Red Team Engineer. Основная задача — создавать сложные, но реалистичные и проверяемые security-сценарии, в которых LLM-модели совершают ошибки из-за недостатков в рассуждении (reasoning), а не из-за неоднозначных инструкций или ограничений среды. Задачи: — Проектировать security-сценарии для оценки и обучения LLM-моделей — Создавать environments с использованием GitHub, Slack и других инструментов, встречающихся в реальной разработке — Разрабатывать задачи, требующие сложного многошагового reasoning — Моделировать реальные offensive security-сценарии (supply chain attacks, malicious pull requests, exploitation через GitHub Actions и другие техники) — Проверять сценарии на нескольких frontier-моделях и анализировать причины ошибок — Формулировать ожидаемое поведение модели и описывать, почему ошибка считается reasoning failure — Автоматизировать создание и проверку задач с использованием Python и других инструментов Требования: — 5+ лет практического опыта в Offensive Security, Application Security или Web Penetration Testing — Глубокое понимание современных техник атак и поверхности атаки веб-приложений, API, GitHub, CI/CD и связанных экосистем — Практический опыт penetration testing и исследования безопасности приложений — Опыт разработки на Python и/или JavaScript — Навыки статического и динамического анализа кода (Python, JavaScript, Java) — Умение самостоятельно исследовать новые направления, проектировать сложные сценарии и объяснять результаты — Свободный английский язык (Upper-Intermediate / B2+) — Практический опыт работы с современными LLM-моделями — Понимание особенностей работы LLM, ограничений и типичных failure modes — Интерес к AI Security и исследованию поведения LLM Будет плюсом: — Практический опыт AI Red Teaming или LLM Security — Опыт работы с Agentic AI, AI Agents или Model Evaluation — Опыт исследований безопасности GitHub Actions, CI/CD, Supply Chain Security — Сертификаты OSWE, eWPTXv2, OWEE, OSWA или аналогичные — Публикации, write-ups, участие в Bug Bounty, HackTheBox, TryHackMe, Pwn2Own или других проектах Условия: — B2B-контракт (с ИП) — Оплата в долларах США — Part-time: ориентировочно 5–20 часов в неделю — Минимальный объем — 1–2 задачи в неделю — На выполнение одной задачи обычно требуется 5–10 часов — Локация — строго вне РФ (либо уже за пределами РФ, либо готовность к релокации) — Старт — ASAP

О проекте: Международный проект в области AI Security, связанный с разработкой сред, которые помогают LLM-моделям проходить обучение с подкреплением для задач, связанных с кибербезопасностью. Эти среды содержат задания в различных областях кибербезопасности (пентестинг, реагирование на инциденты, эксплуатация, вредоносное ПО и т.д.), цель — создавать достаточно сложные задачи, чтобы модель допускала ошибки, но которые остаются решаемыми для профессиональных специалистов. Это не классическая позиция Pentester или Red Team Engineer. Основная задача — создавать сложные, но реалистичные и проверяемые security-сценарии, в которых LLM-модели совершают ошибки из-за недостатков в рассуждении (reasoning), а не из-за неоднозначных инструкций или ограничений среды. Задачи: — Проектировать security-сценарии для оценки и обучения LLM-моделей — Создавать environments с использованием GitHub, Slack и других инструментов, встречающихся в реальной разработке — Разрабатывать задачи, требующие сложного многошагового reasoning — Моделировать реальные offensive security-сценарии (supply chain attacks, malicious pull requests, exploitation через GitHub Actions и другие техники) — Проверять сценарии на нескольких frontier-моделях и анализировать причины ошибок — Формулировать ожидаемое поведение модели и описывать, почему ошибка считается reasoning failure — Автоматизировать создание и проверку задач с использованием Python и других инструментов Требования: — 5+ лет практического опыта в Offensive Security, Application Security или Web Penetration Testing — Глубокое понимание современных техник атак и поверхности атаки веб-приложений, API, GitHub, CI/CD и связанных экосистем — Практический опыт penetration testing и исследования безопасности приложений — Опыт разработки на Python и/или JavaScript — Навыки статического и динамического анализа кода (Python, JavaScript, Java) — Умение самостоятельно исследовать новые направления, проектировать сложные сценарии и объяснять результаты — Свободный английский язык (Upper-Intermediate / B2+) — Практический опыт работы с современными LLM-моделями — Понимание особенностей работы LLM, ограничений и типичных failure modes — Интерес к AI Security и исследованию поведения LLM Будет плюсом: — Практический опыт AI Red Teaming или LLM Security — Опыт работы с Agentic AI, AI Agents или Model Evaluation — Опыт исследований безопасности GitHub Actions, CI/CD, Supply Chain Security — Сертификаты OSWE, eWPTXv2, OWEE, OSWA или аналогичные — Публикации, write-ups, участие в Bug Bounty, HackTheBox, TryHackMe, Pwn2Own или других проектах Условия: — B2B-контракт (с ИП) — Оплата в долларах США — Part-time: ориентировочно 5–20 часов в неделю — Минимальный объем — 1–2 задачи в неделю — На выполнение одной задачи обычно требуется 5–10 часов — Локация — строго вне РФ (либо уже за пределами РФ, либо готовность к релокации) — Старт — ASAP

Anthropic Fellows Program is designed to foster AI research and engineering talent by providing funding and mentorship to promising technical talent regardless of previous experience. Fellows primarily use external infrastructure such as open-source models and public APIs to work on empirical projects aligned with Anthropic's research priorities, aiming to produce public outputs like paper submissions. The program runs for 4 months full-time, with a weekly stipend of 3,850 USD / 2,310 GBP / 4,300 CAD plus benefits and funding for compute (~$15k/month) and other research expenses. Fellows receive direct mentorship from Anthropic researchers, access to shared workspaces in Berkeley, California or London, UK, and connection to the broader AI safety and security research community. Interview process includes initial application and reference check, technical assessments and interviews, and a research discussion. Candidates are encouraged to apply even if they do not meet every qualification. The program values diversity and representation. Fellows workstreams include AI Safety Fellows, AI Security Fellows, ML Systems & Performance Fellows, Reinforcement Learning Fellows, and The Anthropic Institute Fellows (Economics & Policy). Candidates may be considered for all workstreams by default and can specify preferences. General candidate criteria: motivated by AI safety and societal benefit, strong technical background in computer science, mathematics, or physics, ability to implement ideas quickly and communicate clearly, fluent in Python, and available full-time for the program. AI Safety Fellows focus on research areas such as scalable oversight, adversarial robustness and AI control, model organisms, mechanistic interpretability, and AI welfare. Mentors include Sam Bowman, Sara Price, Alex Tamkin, and others. Candidates with experience in empirical ML research, large language models, and open-source contributions are a good fit. AI Security Fellows focus on reducing catastrophic risks from advanced AI systems, with mentors like Nicholas Carlini and Keri Warr. Candidates with experience in pentesting, vulnerability research, offensive security, CVE reporting, bug bounties, and empirical ML research are preferred. Logistics: applicants must have work authorization and be located in the US, UK, or Canada during the program. Shared workspaces are available in London and Berkeley, with remote options in these countries. Visa sponsorship is not provided. The program duration is 4 months full-time, with possible extensions. Strong performance may lead to full-time offers at Anthropic, though not guaranteed. Applications are currently closed and will be updated when reopened. The program is managed by Constellation recruiting partner. The description includes policies for full-time roles which do not apply to the Fellows Program. Anthropic is a public benefit corporation headquartered in San Francisco offering competitive compensation, benefits, equity donation matching, vacation and parental leave, flexible hours, and office space. The company emphasizes collaborative, high-impact AI research with a focus on steerable, trustworthy AI.

Обязанности: — RedTeam/Пентест сетевого периметра, доменной и платежной инфраструктуры (blackbox, greybox, whitebox) — Анализ защищённости беспроводных сетей — Оптимизация и повышение уровня информационной инфраструктурной и сетевой безопасности — Мониторинг рынка актуальных угроз информационной безопасности — Участие в R&D проектах Требования: — Опыт работы от 2х лет в качестве пентестера инфраструктуры — Отличное знание как минимум одного языка программирования (go, java, python, php) и умение читать и анализировать исходный код на распространенных языках программирования — Уверенное владение методикой проведения инфраструктурных пентестов — Отличное знание сетевых протоколов (TCP/IP), атак на них и обход механизмов защиты — Навыки тестирования на проникновение и поиска уязвимостей с предоставлением отчетов — Уверенное владение специализированным ПО и фреймворками для проведения различных видов тестирований (Burp Suite, Metasploit, PowerSploit, BloodHound, Cobalt-Strike, Impacket) — Опыт администрирования *nix и Windows-систем, web-серверов — Знание технологий виртуализации (ESXi, Hyper-V) и контейнеризации (Docker, Kubernetes), а также атак на них — Английский язык – не ниже уровня intermediate (Чтение технической литературы) Будет плюсом: — Сертификация в области практической безопасности (OSCP/OSCE/OSEP/GWAPT/GPEN и т.д.) — Участие в CTF (task-based или attack-defense) и прохождение спец. лабораторий (standoff365, hackthebox, pentester academy) — Опыт проведения комплексного анализ защищенности платежных инфраструктур и ДБО — Участие в Red Team Условия: — Зарплатные условия обсуждаются по итогам собеседования — Режим работы офис\Гибрид\удаленка обсуждаются по итогам интервью — Есть 2 коворкинга на Алтае и Сочи доступные для работы 1 раз в год — Погружение в ИИ-культуру – взаимодействуем с искусственным интеллектом на постоянной основе и обучаем этому новичков, предоставляем бесплатных ИИ-помощников — Стандартные + большой компании: ДМС, обучения, возможность участия в различных общих активностях от D&D до марафона

Location: Paris, France Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. MISSION Alan is scaling internationally (800+ employees, 100+ healthcare professionals, 5+ countries) and needs IT Engineers to build and own the internal technology platform every Alaner works on: identity and provisioning, endpoint and SaaS security, the tooling behind our clinics, and the automation that keeps IT from scaling linearly with headcount. The scope below is what the team owns, not a checklist for one person. You'll be staffed on one or two of these areas at a time, according to your strengths and interests, and it will evolve through time based on company needs and personal appetite. Staying close to users keeps us building the right things: you'll spend up to one day a week on IT support, seeing first-hand where friction lives and what's worth automating next. SCOPE ⚙️ PLATFORM & AUTOMATION - Own and extend automations on Alan Home, our internal provisioning engine - Maintain, extend and improve helpdesk automation, SaaS provisioning flows, and onboarding/offboarding pipelines - Own the meeting room AV and room-booking platform as a product, replicable across offices 🔑 IDENTITY & ACCESS - Own the IT side of the employee lifecycle (onboarding, offboarding, mobility between jobs and countries) across Google Workspace, SSO/SAML and our SaaS ecosystem. - Grow our role-based access model: extend it to more tools and refine the permission groups, so access is granted by role rather than case by case - Make employee lifecycle events reliable, fast and auditable end-to-end - Own access reviews and least-privilege models; produce and maintain the evidence our auditors rely on - Own SaaS procurement and license management: vendor relationships, renewals, and cost optimization across our stack 🔒 ENDPOINT & SAAS SECURITY - Own the Mac fleet in Kandji: enrollment at scale, role-based blueprints, fleet compliance - Cloudflare WARP, SaaS security controls - Maintain and strengthen our ISO 27001 certification and drive ACPR and pentest remediation on the endpoint and platform scope 🩺 HEALTH PROFESSIONALS IT - The IT layer behind Alan's clinics: practitioner tooling, equipment, access - Role and permission automation for healthcare professionals, and their support and escalation process 🌍 INTERNATIONALISATION - Make international expansion something IT accelerates, not something it slows down: a repeatable process where every new market (Canada, KSA, Armenia...) launches on our standard stack from day one - Bring acquired entities onto that same platform MILESTONES First 3 months - Acquire technical knowledge on Alan's platform: Alan Home, Google Workspace/SSO, Kandji, Cloudflare WARP - Take one project end-to-end and ship a first increment - Join the IT oncall team as technical escalation First 6 months - Own a workstream end-to-end - Deliver one automation or hardening initiative end-to-end - Take up documentation and automation on your scope and reduce significantly the bus factor on it - Mentor IT teammates on your core expertise First year - Deliver measurable IT toil reduction on your scope - Set the technical standards on your domain: how we build, document and review it - Build strong cross-functional partnerships (Engineering, Security, Workplace, Clinic, People, Audit) - Contribute to hiring and onboarding new teammates 3 years - Lead major projects end-to-end across several communities - Be the reference the team relies on across at least two domains - Mentor the IT team and beyond, and scale IT without a linear increase in manual work As the community grows, there is room to take on more responsibility: leading a crew, owning cross-community projects, mentoring, hiring. WHAT WE'RE LOOKING FOR Must-have - Technical/hard skills: - 3+ years in IT engineering, platform, systems or corporate engineering, with real ownership of production-facing systems - Depth in at least one area (platform & automation, identity, endpoint & security) and demonstrated range beyond it. - You write code: not as a full-time software engineer, but Python, APIs and pull requests in a shared repo should feel normal - Structured problem-solving: diagnoses methodically, asks the right clarifying questions, thinks about failure modes and rollback - Comfort with regulated environments: health data, ACPR, ISO 27001, HDS - Automation & AI appetite: uses AI tools smartly to accelerate their own delivery, with an instinct for what should be automated or delegated to AI rather than repeated Must-have - Behavioral / soft skills: - Ownership & autonomy: drives topics forward without hand-holding, including when they cross into someone else's perimeter - Written communication: Alan is written-first; decisions get argued in public documents and challenged by people outside your team - Pragmatic judgment: balances "perfect" vs. "good enough", decides with incomplete information - Documentation culture: reduces bus factor through clear documentation and knowledge sharing Nice-to-have skills / Bonus points if you have: - Experience with an internal provisioning or IdP-driven automation platform - Kandji or another MDM at scale - Cloudflare Zero Trust / WARP, Datadog - Audit remediation experience (ISO 27001, HDS) - Multi-country rollouts, or IT integration after an acquisition - Having mentored, coached or led a (small) crew - Health or healthtech ecosystem familiarity Languages: Fluent English & Professional French

Location: London Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. THE ROLE You will be a hands-on operator at the heart of the Cyber Security team, helping to run, harden, and continuously improve the day-to-day machinery of security. Where the Detection & Threat Engineer defines what "good" looks like, you help make it real, turning standards, runbooks, and tooling into reliable, repeatable operational practice. This is a delivery-focused role for an experienced practitioner. You will spend your time in the tooling, in the tickets, and in the detail: enhancing the platforms the team depends on, tightening procedures, and making sure findings, alerts, and remediation work actually get closed out rather than left to drift. You will partner closely with Senior Detection & Threat Engineers, Application Security, Information Security, Security Operations, and Engineering executing against the standards they set, feeding operational insight back up, and progressively taking ownership of the tooling and procedures that keep security operations running. WHAT YOU'LL BE RESPONSIBLE FOR - Supporting and enhancing security tooling SIEM, EDR, DLP, vulnerability management, and automation platforms including configuration, tuning, and day-to-day maintenance - Building and improving operational procedures, runbooks, and playbooks so the team's response is consistent and repeatable - Triaging and handling security alerts, escalating high-severity events, and contributing to incident response under the direction of senior engineers - Tracking, coordinating, and driving pentest and vulnerability findings through to remediation across engineering teams (ownership, action plans, status, closure) - Maintaining the accuracy and hygiene of security data asset inventories, finding trackers, and remediation records - Supporting detection deployment and validation, and feeding operational feedback into detection tuning to reduce noise and alert fatigue - Assisting with scripting and automation to remove manual toil from recurring operational tasks - Producing clear operational reporting and metrics on findings, remediation progress, and tooling health WHAT WE'RE LOOKING FOR - 5+ years of hands-on experience in a Security Operations, SOC, or equivalent operational security role - Practical experience operating modern security tooling SIEM (e.g. Sentinel), Data Loss Prevention (DLP) tools, EDR, and vulnerability management platforms - Solid understanding of security operations workflows: alert triage, incident handling, and vulnerability/finding remediation lifecycles - Comfort with scripting to support automation and tooling (e.g. Python, KQL) - Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closure - Working knowledge of cloud environments (e.g. AWS, Azure and GCP) and how security operations apply across cloud and SaaS - Familiarity with common frameworks and standards such as PCI DSS, NIST CSF, SOC 2, ISO 27001, CIS Benchmarks, and MITRE ATT&CK - A pragmatic, ownership-minded operator: methodical, detail-oriented, and focused on getting things fixed rather than just logged Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/