Location: Ħal Qormi QRM, Southern Region, Malta
Welcome to
Torrero
- all-in-one source for cutting-edge white label casino, sportsbook solutions and B2B aggregation. Built on a foundation of trust and compliance, we proudly offer an extensive library of 30,000+ games sourced from diverse providers, positioning Torrero as the preferred partner for transforming the iGaming enterprise. With huge number of sports events and easy payment options, we cater to diverse interests. Available in 35+ languages, we make gaming accessible worldwide.
If you like a fast paced, dynamic and start-up work culture with full of passionate and enthusiastic mindsets, you’re most welcome to explore the opportunity. This is a chance to take part in an exciting journey as the company grows and expands its business at a rapid pace.
About the role
We are seeking a dedicated Responsible Gambling Specialist to support and enhance our player protection framework across regulated markets. This role is focused on safeguarding players, promoting responsible gaming behaviors, and ensuring compliance with all relevant responsible gambling regulations.
Key Responsibilities:
Provide support and guidance to players seeking assistance with responsible gaming concerns through various channels such as email, phone and others
Investigating customers' affordability (Source of Funds/Wealth); performing Enhanced Due Diligence and Ongoing Monitoring
Proactively monitor player activity to identify potential “At Risk” or “Problem Gambling” behaviors and ensure timely and appropriate interactions
Review and investigate Responsible Gambling alerts, taking appropriate action in line with internal policies and regulatory requirements
Ensure all Responsible Gambling cases are handled in a timely and professional manner, including urgent escalations when required (including weekends if necessary)
Handle escalated and sensitive player interactions, including complaints, and determine the most appropriate course of action
Identify gaps or improvement opportunities in Responsible Gambling processes and contribute to the development of new controls and procedures
Collaborate closely with Customer Support, Compliance and other relevant teams to ensure consistent application of responsible gaming standards
Produce regular reports and insights on Responsible Gambling activities, trends, and outcomes for management
Stay up to date with evolving Responsible Gambling regulations and industry best practices across all licensed jurisdictions
Ensure full compliance with all Responsible Gambling regulatory requirements
Requirements:
Proven experience within the iGaming industry
Strong understanding of Responsible Gambling principles, player protection frameworks, and behavioral indicators of problem gambling
Familiarity with regulatory requirements in key jurisdictions (e.g., UKGC, MGA)
Excellent communication skills (written and verbal), with the ability to handle sensitive situations in a calm, empathetic, and professional manner
Experience dealing with vulnerable or distressed customers is highly desirable
High attention to detail and strong analytical skills
Ability to manage confidential and sensitive information with discretion
Proactive, solution-oriented mindset with a continuous improvement approach
Nice to Have:
Previous experience in Responsible Gambling, Player Protection, or Safer Gambling teams
Experience with RG tools, monitoring systems, and player risk segmentation models
We offer:
Flexible working hours
Competitive compensation
3 paid sick days a year without medical certificate
Seniority leave
Birthday Day off
Real career opportunities and professional growth
The great team across the world
Hiring Stages:
Introductory Call
Hiring Manager Round
Reference check
Offer letter
Location: United States, San Mateo, CA
Why Sony Interactive Entertainment?
Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity.
Are you passionate about Responsible AI and ensuring products are built and deployed ethically and safely? Sony Interactive Entertainment is seeking a highly motivated and experienced Senior Responsible AI & Governance Technical Specialist to help ensure our AI products and technologies are developed and deployed ethically, safely, and in alignment with our values. Demonstrable experience in Responsible AI and AI Governance is required. Technical skills are also a must.
In this role, you will operate at the intersection of modern AI technology, policy, and ethics. You will design and implement technical governance frameworks, guidelines, and best practices that support responsible AI innovation across the organization. You will identify and assess potential risks, conduct technical and business evaluations, and partner closely with cross-functional stakeholders to embed responsible AI principles into product development lifecycles, adapting to AI-enabled and agentic systems in particular, and identifying where AI-specific guidance or risk mitigations are needed.
This is a highly collaborative role working across engineering, product, information security, legal, and business teams to ensure AI initiatives align with regulatory requirements and SIE’s broader strategic goals. The ideal candidate brings a strong understanding of generative AI use cases, technical and sociotechnical risk, and product development, balancing responsible AI commitments with internal and external innovation.
If you are passionate about AI Governance and Responsible AI, and have demonstrable experience and skills required for this position, we encourage you to apply. This is an opportunity to build and mature an AI governance program within a fast-evolving landscape.
What You’ll Be Doing:
Contribute to long-term strategies for building safe, ethical, and innovative AI products and tools
Serve as a technical Responsible AI advisor for generative and agentic AI systems, helping teams assess architectures, tool integrations, MCP implementations, data flows, permissions, autonomy, and appropriate human oversight and guardrails
Engage stakeholders across the organization to gather feedback and address AI Governance and Responsible AI technical considerations
Use AI governance, risk tooling and discovery insights to identify emerging risks and support appropriate remediation and technical solutions
Experiment hands-on with emerging AI capabilities, including agents, MCP servers, tool integrations, APIs, and evaluation frameworks, to understand their capabilities and risks and translate findings into practical governance guidance
Sit on relevant domain boards as a technical specialist, partnering closely with Product and Engineering
Conduct ethical and safety risk assessments, advising teams on mitigation strategies related to bias, fairness, robustness, transparency, and societal impact
Partner with engineers, product managers, designers, online safety and more, to proactively identify unintended consequences and emerging risks of AI
Coordinate with Information Security and relevant technical teams to align AI governance reviews and risk assessments with security requirements and technical controls
Contribute to company-wide best practices for responsible AI development and deployment, including AI literacy materials and case studies
What We’re Looking For:
At least 3 years of experience in AI Governance, Responsible AI, Corporate Governance, AI safety, AI policy, or a related field, with meaningful experience evaluating AI technologies and systems
At minimum, 5 years of experience contributing to or leading cross-functional programs from strategy through operational implementation, partnering with product, engineering, legal, security, and operations teams
Strong technical fluency in modern AI systems, including LLMs, agentic architectures, tool use/function calling, APIs, cloud services, and automation
Hands-on experience working with or evaluating agentic AI systems; familiarity with MCP or comparable protocols and agent/tool integration frameworks strongly preferred
Experience with AI red teaming, adversarial testing, or other technical approaches to identifying risks in LLM and agentic systems
Understanding of agentic and sociotechnical AI risks, including excessive agency, permissions and data access, unintended tool use, human oversight, systemic risk, and emergent behaviors
Ability to translate technical findings and risks into practical controls, mitigations, and guidance for engineering, product, and business teams
Ability to independently drive outcomes across cross-functional teams with minimal supervision
Strong analytical and communication skills, sound judgment, and the ability to challenge assumptions and navigate ambiguity in a fast-moving environment
Ability and curiosity to stay current with emerging AI capabilities, risks, frameworks, and industry developments, particularly within technology, entertainment, and gaming
Preferred Qualifications:
Familiarity with relevant regulations, standards and ethical guidelines (e.g., EU AI Act, OECD Principles, NIST AI RMF, ISO/IEC 42001)
Proficiency in producing meaningful visualizations and reports, and effectively presenting technical results to diverse audiences
Industry experience in tech, gaming or (interactive) entertainment
At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location.
Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location.
In addition, this role
is eligible
for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products.
This role also may be eligible for a bonus package.
Click
here
to learn more.
The estimated base pay range for this role is listed below.
$132,800
—
$199,200 USD
Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks.
Please refer to our
Candidate Privacy Notice
for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights.
Equal Opportunity Statement:
Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category.
We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.
Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.
Набирают 10 responsables de sección в Getafe (Madrid) и ещё 10 в Barcelona.
Предлагается бессрочный контракт (contrato indefinido), полный рабочий день и очный формат.
От кандидатов требуют высшее образование или ciclo formativo superior, полную доступность по графику, включая выходные, и интерес к спорту.
Географическая мобильность будет преимуществом.
Talent Day пройдёт 6 октября в Getafe и 7 октября в Barcelona.
Для тех, кто не сможет присутствовать лично, предусмотрена возможность подать кандидатуру онлайн.
Кроме этих вакансий, на карьерном портале Decathlon сейчас открыто 409 предложений работы по всей Испании — в том числе для продавцов в отделах велоспорта, бега, плавания и других направлений.
ОфисMadrid
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Location: San Francisco, California; New York, New York
Workplace: Hybrid
WHO WE ARE
Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.
Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work.
ABOUT THE ROLE
Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build.
We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion.
You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next.
We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters
WHAT YOU'LL ACHIEVE
- Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up.
- Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety.
- Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful.
- Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements.
- Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes.
- Help define and track metrics such as coverage, MTTD, and alert quality.
- Join a shared on-call rotation for incident response.
SKILLS YOU'LL NEED TO BRING
- We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you.
- 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role.
- Have written or tuned detections that run in production, and care about signal quality and cutting noise.
- Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly.
- An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect.
- Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs.
- Have used SIEM, EDR, or SOAR tools in any size of environment.
- Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end.
NICE TO HAVE
- Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry.
- Experience running SIEM, EDR, or SOAR platforms at large scale.
- Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections).
- Experience applying LLMs or agent-style tooling to security workflows.
- Experience securing AI-enabled systems or endpoint tooling.
- Kubernetes or container detection experience.
- Background in threat intelligence, malware analysis, or digital forensics.
- Contributions to the security community through research, tooling, CTFs, or talks.
- Experience at a high-growth startup or AI company.
Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $185,000 - $280,000 per year.
By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550 and and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528.
#LI-Onsite
A NOTE ON AI
You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on.
EQUAL OPPORTUNITY & ACCOMMODATIONS
We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
Location: Dublin, Ireland
Workplace: Hybrid
WHO WE ARE
Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.
Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work.
ABOUT THE ROLE
Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build.
We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion.
You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next.
We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters
WHAT YOU'LL ACHIEVE
- Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up.
- Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety.
- Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful.
- Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements.
- Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes.
- Help define and track metrics such as coverage, MTTD, and alert quality.
- Join a shared on-call rotation for incident response.
SKILLS YOU'LL NEED TO BRING
- We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you.
- 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role.
- Have written or tuned detections that run in production, and care about signal quality and cutting noise.
- Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly.
- An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect.
- Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs.
- Have used SIEM, EDR, or SOAR tools in any size of environment.
- Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end.
NICE TO HAVE
- Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry.
- Experience running SIEM, EDR, or SOAR platforms at large scale.
- Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections).
- Experience applying LLMs or agent-style tooling to security workflows.
- Experience securing AI-enabled systems or endpoint tooling.
- Kubernetes or container detection experience.
- Background in threat intelligence, malware analysis, or digital forensics.
- Contributions to the security community through research, tooling, CTFs, or talks.
- Experience at a high-growth startup or AI company.
Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role's scope and complexity, and the candidate's experience and expertise, and may vary from the range provided below. The estimated base salary range for this role is €75,000–€142,000 per year.
By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74.
#LI-Onsite
A NOTE ON AI
You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on.
EQUAL OPPORTUNITY & ACCOMMODATIONS
We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
Location: Madrid, Spain
Workplace: hybrid
Are you ready to join our digital revolution journey?
At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.
Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.
With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career.
We are looking for an experienced and operationally sharp Security Operations & Incident Response Analyst (L3) to join Aleph's global IT Security team.
Reporting to the Global CISO, you will be the first line of defence when incidents occur and the engine behind the team's threat detection and response capabilities. You will own the end-to-end incident response process, lead threat hunting and intelligence activities, and manage the vulnerability and identity governance programmes — ensuring Aleph is both able to detect threats quickly and respond to them effectively across a complex, globally distributed environment.
What you'll do:
Incident Response
Own and coordinate the
end-to-end incident response process
: identification, triage, containment, eradication, recovery, and post-incident review (lessons learned).
Serve as the primary point of contact for security incidents escalated from IT Operations, the Security Engineer, and external sources.
Maintain and continuously improve
incident response playbooks
for the most relevant threat scenarios (ransomware, phishing, account compromise, data breach, insider threat, etc.).
Manage the
security incident log and register
: track all incidents, document timelines and actions, and produce trend analysis and reporting for the CISO.
Coordinate with external
SOC or MDR providers
where applicable: review daily reports, validate alert quality, and manage escalation workflows.
Data Breach Management
Lead
data breach investigations
: scope the breach, gather and preserve evidence, assess PII exposure, and coordinate response with Legal, Privacy, and HR.
Produce breach investigation reports with findings, root cause, and recommendations.
Threat Hunting & Intelligence
Conduct
proactive threat hunting
across the environment: develop hypotheses based on threat intelligence, search for indicators of compromise (IoCs), and investigate anomalous behaviour.
Manage the
Threat Intelligence function
: track relevant threat actors, TTPs (MITRE ATT&CK), and sector-specific threat campaigns; integrate intelligence into SIEM/XDR detection rules and hunting queries.
Produce threat intelligence summaries and briefings for the CISO and relevant stakeholders.
Vulnerability Management
Own the
vulnerability management programme
: schedule and execute periodic vulnerability scans across infrastructure, endpoints, and cloud environments.
Analyse scan results, prioritise findings by risk and exploitability, and coordinate remediation with IT Operations within agreed SLAs.
Track remediation progress, produce vulnerability metrics, and report status to the CISO.
Validate remediation effectiveness through re-scanning and spot-checks.
Identity & Access Management (IAM)
Manage
periodic access reviews
: coordinate with system owners and HR to review and certify user permissions across critical systems, ensuring least privilege is maintained.
Oversee the
Privileged Access Management (PAM)
programme: define PAM policies, monitor privileged account usage, and review access rights for administrator-level accounts.
Investigate and respond to identity-related anomalies and access policy violations.
What we are looking for:
3–5 years in a SOC analyst, incident response, or security operations role, with at least 1–2 years at L3 level is a plus.
Experience implementing or managing IAM and PAM solutions
Experience working within international or multinational environments.
Hands-on experience with incident response engagements (internal or consulting) is strongly valued.
Relevant certifications:
GCIH, GCFE, GCFA, CEH, CompTIA CySA+
, or equivalent. OSCP is a plus.
Strong hands-on experience with
SIEM platforms
(alert triage, rule writing, query development) and
EDR/XDR tools
.
Solid knowledge of the
MITRE ATT&CK framework
and its application to threat hunting and incident response.
Experience conducting
vulnerability scans
using tools such as Tenable Nessus, Qualys, Rapid7, or similar.
Familiarity with
IAM and PAM
concepts and platforms (e.g. CyberArk, BeyondTrust, Azure PIM, or equivalent).
Experience with
digital forensics and incident response (DFIR)
methodologies: evidence collection, log analysis, and timeline reconstruction.
Knowledge of
threat intelligence platforms
and feeds (e.g. MISP, VirusTotal, threat intel feeds).
Understanding of
ISO 27001 incident management controls, NIS2 incident reporting obligations, and PCI DSS requirement 12.10
.
Calm and decisive under pressure.
Strong investigative mindset with structured problem-solving approach, excellent documentation skills.
Ability to communicate incident status and findings clearly to both technical teams and executive stakeholders.
Collaborative and proactive, comfortable working asynchronously across time zones.
English
: full professional proficiency (C1/C2) — primary working language.
Spanish
: professional proficiency is a plus.
In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is EUR 48,000 EUR.
In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.
#Aleph
Why Join Us?
Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.
We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.
#ALEPH
Location: Kuala Lumpur, Malaysia
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.
OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.
Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.
What You’ll Be Doing
Lead a team of Legal Response agents day-to-day: assign and triage incoming
law enforcement
requests, monitor SLA and quality performance, and step in on complex or time-sensitive cases.
Coach and develop team members, conduct regular 1:1s, and flag performance or capacity issues to your Manager.
Act as first-line escalation point for law enforcement requests and internal stakeholder queries (Legal, Compliance, Risk, Customer
Service
), resolving what you can and escalating what you can't with clear context.
Maintain and enforce SOPs for handling law enforcement and regulatory requests; surface process gaps or inefficiencies to your Manager with a recommended fix.
Own team-level metrics and reporting: SLA adherence, backlog aging, error rate, and volume trends — using the team's data and reporting tools directly.
Serve as subject matter expert on law enforcement request handling for your team and adjacent functions.
Maintain working knowledge of company products sufficient to communicate credibly with external stakeholders (law enforcement, legal representatives).
Support your Manager on process improvements, projects, and cross-team initiatives as needed.
Day-to-Day Responsibilities
Ensuring daily operations run smoothly; escalate incidents to your Manager and relevant stakeholders in a timely manner.
Monitor SLA, backlog, and error-rate KPIs; identify trends and quality issues before they become escalations.
Conduct weekly/monthly performance reviews with team members, distinct from informal 1:1s.
Coordinate with L&D on training and re-training needs identified through performance monitoring.
Lead or contribute to process improvement projects and workshops.
Plan team shift schedules to maintain 24x7 coverage, and manage shrinkage against plan.
Participate in recruitment activities (
screening
, interviewing) for the team.
What We Look For In You
A degree in law, compliance, or a related field, or equivalent experience demonstrating critical thinking.
Prior experience leading or supervising a team, comfortable holding others accountable.
Comfortable working with data: reading SLA/volume/error dashboards and using them to make day-to-day team decisions, not just reporting numbers upward.
Strong written and verbal communication; detail-oriented, especially under time pressure.
Able to work independently and as part of a team.
Comfortable working in a fast-paced, dynamic environment with changing priorities.
Strong people skills: Ability to navigate difficult situations and stay calm under pressure.
Solutions mindset: passionate to find the right solution and resolve the issue.
Excellent time management: ability to multi-task to solve issues while managing time.
Quick learner: ability to ramp up quickly and act on feedback constructively.
Willing to work on a rotational shift to support 24x7 operations.
Willing to work in Tun Razak Exchange (walking distance from MRT TRX).
Perks &
Benefits
Competitive total compensation package
L&D programs and Education subsidy for employees' growth and development
Various team building programs and company events
Wellness and meal allowances
Comprehensive healthcare schemes for employees and dependants
More that we love to tell you along the process!
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: San Francisco, CA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the Role
Anthropic is working on frontier AI systems that handle sensitive information at enormous scale. How we protect that data, and how we build privacy into our systems rather than bolting it on afterward, is central to our mission of building AI that is safe and beneficial.
We’re looking for an experienced Incident Response Manager to own and evolve incident management within the privacy team. This is a senior-level specialization on the Technical Program Manager ladder, focused on how we detect, respond to, and learn from privacy incidents. These incidents involve personal data subject to GDPR, CCPA, HIPAA and similar laws, and to the contractual commitments Anthropic makes to its customers.
You’ll be the driving force behind maturing and scaling our incident response lifecycle, from detection and triage through containment, remediation, and post-incident review. Critically, some of the highest-impact work in this role happens after the immediate response: gathering data on incident trends, reporting on patterns and root causes, and working cross-functionally across engineering, security, infrastructure, and product teams to ensure that broad fixes and systemic improvements are actually implemented. You will partner closely with Privacy Legal on notifiability and communications, and with the Privacy Program team on executive and board reporting; this role owns the engineering-side programme, its metrics and its follow-through.
You won’t just manage incidents: you’ll make sure we get meaningfully better after each one.
Key responsibilities
Own the end-to-end privacy incident management program: detection workflows, response processes, escalation paths, communication standards, and remediation tracking.
Serve as incident commander for privacy incidents, driving clear coordination across executive, engineering, security, legal, and other appropriate stakeholders.
Establish and run incident commander rotations within privacy, ensuring clear ownership and effective coordination during incidents of varying severity.
Drive post-incident accountability by defining how action items are captured, assigned, tracked, and completed across teams, ensuring follow-through on both tactical fixes and strategic improvements.
Gather, analyze, and report on incident trends and patterns to surface systemic risks, recurring root causes, and areas where the organization is most vulnerable.
Translate trend analysis into actionable cross-functional initiatives: partner with engineering, infrastructure, security, and product teams to prioritize and implement broad fixes and preventive improvements that address root causes rather than symptoms.
Lead incident review forums (post-mortems, retrospectives) and ensure learnings are captured, socialized, and acted upon across the organization.
Partner with Privacy Legal on breach and notifiability assessments against regulatory timelines, coordinate customer and regulator communications when required, and keep privileged and non-privileged records appropriately separated.
Develop and maintain privacy incident response documentation, playbooks, runbooks, and training materials; keep them current as our products, data flows and obligations evolve.
Partner with detection engineering to improve alert fidelity, reduce noise, and shorten time-to-detection for privacy events.
Define, develop, and track incident management KPIs and report regularly to leadership.
Support broad cross-functional training and initiatives to uplevel privacy awareness across the company (e.g. Tabletop exercises, training, talks).
Minimum qualifications
Have led or built incident response programs at a technology company, ideally in a high-growth or security-intensive environment.
Have a demonstrated track record of turning incident data into organizational improvements: not just writing post-mortems, but driving the cross-functional work to implement systemic fixes.
Are comfortable participating in on-call responsibilities and leading incident response during high-severity privacy events, including off-hours.
Have experience building and scaling operational processes from the ground up in environments where structure didn’t previously exist.
Excel at driving accountability and follow-through across multiple teams without direct authority—you know how to influence, track, and close the loop.
Have strong analytical skills and experience with incident trend analysis, metrics reporting, and data-driven prioritization.
Are highly organized with a knack for bringing structure to ambiguous, fast-moving situations.
Have excellent communication skills, especially under pressure and when coordinating across technical and non-technical stakeholders, including executive leadership.
Thrive in fast-paced environments where priorities shift and you’re often working with incomplete information.
Preferred qualifications
Have 7+ years of experience in technical program management, incident management, or security/privacy operations, with significant time spent in an incident response context.
Are familiar with privacy regulation and breach-notification obligations (GDPR, CCPA, HIPAA or similar) and comfortable working with legal counsel under privilege, or have a legal background.
Deadline to apply: None. Applications will be received on a rolling basis.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$290,000
—
$365,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Remote
Workplace: Remote
We are building AI to simulate the world through merging art and science.
We believe that world models are at the frontier of progress in artificial intelligence. Language models alone won’t solve the world’s hardest problems – robotics, disease, scientific discovery. Real progress requires models that experience the world and learn from their mistakes, the same way that humans do. And this kind of trial and error can be massively accelerated when done in simulation, rather than in the real world.
World models offer the most clear path to general-purpose simulation, changing how stories are told, how scientific progress is made and how the next frontiers of humanity are reached.
Our team consists of creative, open minded, caring and ambitious people who are determined to change the world. We aspire to continuously build impossible things and our ability to do so relies on building an incredible team. If you are driven to do the same, we'd love to hear from you.
*Titles posted to our careers page are updated regularly to best advertise the role and expected seniority, but internally we have a flat titling system with two types of titles: one for individual contributors and one for people managers.
ABOUT THE ROLE
Open to hiring remote — we also have offices in New York, San Francisco, Seattle, London, Paris, and Tel Aviv.
Runway is hiring a Detection & Response Engineer to own how we find and stop attacks against our infrastructure, our research environment and our products.
Securing a company that trains and serves frontier video models is a different problem from securing a typical SaaS product. The environment includes research compute, large training datasets, a fast-moving build pipeline and engineers who work inside AI-assisted tooling every day. Each of those changes what an attack looks like and what you need to see to catch it.
You'll join the Security team and build our detection and response program the way an engineer would: detections as code, response as automation, evidence as something you can query. This is a role with real ownership: you'll own the detection program end to end, from what we log to how quickly we close an incident. You'll report to the head of security, partner with engineers across platform and research, and shape how this function grows from here.
WHAT YOU'LL DO
- Own detection and response end to end: what we log, what we alert on, how we triage and how we recover
- Write and tune detections as code across multiple cloud environments, Kubernetes, identity systems, endpoints and SaaS, and measure them on coverage and precision rather than alert volume
- Lead incident response from the first alert through containment and forensics, then write the post-incident review people actually read
- Build automation that takes toil out of triage, including enrichment, correlation, containment actions and evidence collection, and use LLM-based tooling where it holds up under audit
- Monitor AI agents and developer tooling operating inside our environment, and turn that into concrete telemetry and controls
- Partner with platform and research engineers so new systems ship with logging and response playbooks in place on day one
- Run threat hunts and tabletop exercises against the parts of the environment that worry you most, and fix what you find
- Turn incident and detection metrics into evidence for SOC 2, ISO 27001 and enterprise customer security reviews, working with our GRC team
- Participate in an on-call rotation for security incidents
WHAT YOU'LL NEED
- Hands-on incident response experience: you've triaged live alerts, led investigations and written up what happened afterward
- Experience building and tuning detections in a modern SIEM, ideally managed as code
- Working knowledge of how attackers move through cloud and Kubernetes environments (IAM abuse, container escape, credential theft, supply chain compromise) and what that leaves behind in logs
- Comfort writing Python, Typescript, Rust or another language to automate response work and connect security tools
- Familiarity with at least one major cloud platform and with Kubernetes at the level of audit logs, RBAC and workload identity
- Clear writing. Incident timelines, detection documentation and updates to leadership are all part of the job
- Judgment about what to alert on, what to automate and when to wake someone up
EVEN BETTER IF YOU HAVE
- Experience monitoring GPU or HPC-style infrastructure, or research environments with large datasets
- Experience building detections or guardrails for AI agents, LLM tooling or MCP servers
- Cloud forensics experience: disk and memory acquisition, cloud audit trail reconstruction, chain of custody
- Published open source detection content
Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. Our salary ranges are based on competitive market rates for our size, stage and industry, and salary is just one part of the overall compensation package we provide.
There are many factors that go into salary determinations, including relevant experience, skill level and qualifications assessed during the interview process, and maintaining internal equity with peers on the team. The range shared below is a general expectation for the function as posted, but we are also open to considering candidates who may be more or less experienced than outlined in the job description. In this case, we will communicate any updates in the expected salary range.
Lastly, the provided range is the expected salary for candidates in the U.S. Outside of those regions, there may be a change in the range, which again, will be communicated to candidates.
WORKING AT RUNWAY
Great things come from great teams. https://www.youtube.com/watch?v=kwmj4ato2kw&ab_channel=Runway We’d love to hear from you.
We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed. So regardless of race, gender identity or expression, sexual orientation, religion, origin, ability, age, veteran status, if joining this mission speaks to you, we encourage you to apply.
More about Runway
- Universal World Simulator https://runwayml.com/world-simulator.html
- GWM-1 https://runwayml.com/research/introducing-runway-gwm-1
- Gen-4.5 https://runwayml.com/research/introducing-runway-gen-4.5
- General World Models https://runwayml.com/research/introducing-general-world-models
- Robotics SDK https://runwayml.com/research/introducing-runway-gwm-1#robotics-section
- Conversational Real-time Agents https://runwayml.com/research/introducing-runway-gwm-1#avatars-section
- Runway Studios https://runwayml.com/studios
We're excited to be recognized as a best place to work:
Crain's https://www.crainsnewyork.com/awards/best-places-work-2023 | InHerSight https://www.inhersight.com/companies/best/city/new-york-city-ny | BuiltIn NYC https://builtin.com/awards/new-york-city/2024/best-places-to-work | INC https://www.inc.com/best-workplaces/2024
Location: Remote (United States | Canada)
Workplace: Remote
1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing.
About 1Password
At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work.
If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future.
As a Staff Security Engineer on Security Incident Response, you'll serve as a senior technical leader and builder for the team, helping shape both how we respond to incidents today and how our response capabilities evolve over time.This role is about advancing what the team is capable of, not just responding when something breaks. You'll design and build the AI-assisted systems that extend the team's reach, lead the response to the most complex incidents, and own programs that make the organization more prepared over time, from tabletop exercises and gamedays to the continued advancement of threat hunting and insider risk capabilities.
You bring engineering depth, sound incident judgment, and the ability to plan, and deliver complex work against a longer-term maturity roadmap not just execute against a queue.
This is a senior individual contributor role with organization-wide impact on how 1Password investigates, contains, and learns from security incidents.
This role reports to the Manager, Security Incident Response.
How we’re using AI today
Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers.
This is a remote opportunity within Canada and the US.
What we're looking for:
- Significant experience leading complex, high-severity security incidents across multiple environments, including serving as an incident commander or equivalent technical lead.
- Experience designing and building AI-assisted or agentic automation for security operations (triage, investigation, containment), with sound judgment about where automation should and shouldn't hold decision authority.
- Strong software engineering skills, and experience building production tooling, automation, or systems rather than only operating existing security platforms.
- Experience owning a security program or capability roadmap end to end, including planning, sequencing, and delivering multi-quarter work.
- Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and response approaches.
- Experience designing and running tabletop exercises, gamedays, or comparable readiness programs and translating findings into improvements..
- Strong written and verbal communication skills, including the ability to represent technical tradeoffs to senior leadership and cross-functional stakeholders.
- Experience mentoring engineers or otherwise raising the technical and investigative capabilities of a team.
How you'll work:
- You look for opportunities to build systems that scale the team's capabilities rather than relying on repeated manual effort, and you're interested in thoughtfully applying AI and automation where they can improve security outcomes.
- An experienced incident commander who brings structure to complex incidents, makes sound decisions with incomplete information, and helps teams move forward during high-pressure situations.
- You're comfortable taking ownership of a capability from strategy through execution, including defining priorities, sequencing work, navigating dependencies, and delivering against a longer-term roadmap.
- You can operate as a technical partner to leaders and cross-functional teams, independently representing technical priorities, risks, and tradeoffs.
- You value continuous improvement and contribute to an environment where teams can examine incidents, decisions, and failures openly and turn what they learn into stronger systems and practices.
What you can expect:
- Serve as incident manager and technical escalation point for complex, high-severity events, bringing structure, sound judgement, and clear decision-making under pressure.
- Design and build AI-assisted and automated systems that improve how quickly and consistently the team can triage, investigate, and contain incidents.
- Establish appropriate safety controls, approval gates, auditability, and rollback mechanisms for automated and AI-assisted actions, ensuring high-impact decisions remain appropriately human-controlled.
- Own the team's readiness programs, including tabletop exercises and incident gamedays, from scenario design and execution through debriefing and translating finishes into concrete (or measurable) improvements
- Advance the team’s threat hunting and insider risk capabilities by identifying opportunities, defining priorities, and delivering roadmap work that improves investigative depth and coverage
- Plan, sequence, and deliver multi-quarter initiatives that mature the team's capabilities, bringing project management discipline to work that doesn't fit neatly into a sprint.
- Mentor and provide technical leadership to other engineers, strengthening engineering rigor and investigative judgement across the team.
- Partner with Security Operations, Product Security, and Engineering teams to close gaps surfaced through investigations, hunting, and simulations.
- Foster psychological safety and blameless learning across incident retrospectives, gamedays, and tabletop debriefs.
- Extend strong incident response practices beyond the immediate team by building reusable systems, tooling, and operating patterns that strengthen response capabilities across areas such as PSIRT, Privacy, and Engineering.
USA-based roles only: The annual base salary for this role is between $192,000 USD and $278,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
Canada-based roles only: The annual base salary for this role is between $167,000 CAD and $242,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.
This posting is for an existing vacancy.
Our culture
At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first.
You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results.
How we work with AI
We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password.
This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others.
Our approach to remote work
We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.
What we offer
We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:
Health and wellbeing
👶 Maternity and parental leave top-up programs
🩺 Competitive health benefits
🏝 Generous PTO policy
Growth and future
📈 RSU program for most employees
💸 Retirement matching program
🔑 Free 1Password account
Community
🤝 Paid volunteer days
🏆 Peer-to-peer recognition through Bonusly
🌎 Remote-first work environment
*Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting.
You belong here.
1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.
Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs.
Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you.
Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.
1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.
Location: Remote (United States | Canada)
Workplace: Remote
1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing.
About 1Password
At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work.
If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future.
As our Manager, Security Incident Response, you are at the center of how 1Password handles the moments that matter most. You will build and lead a team of builders: responders who don't just work incidents, but engineer the automation, tooling, and systems that make response faster and more scalable over time. You will guide program maturity, scale the team's capabilities through AI-assisted tooling, reinforce operational excellence, and step in as incident manager during complex, high-severity events. Success in this role blends strong people leadership with technical depth and sound judgment. As part of the Security leadership team, you will shape response strategy, build effective cross-functional partnerships, and help protect a product trusted by millions.
This role reports to the Senior Manager, Threat Operations.
How we’re using AI today
Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers.
This is a remote opportunity within Canada and the US.
What we're looking for:
• 5+ years in security incident response, with 2+ years as a people manager or technical leader supporting career development and performance management.
• Experience building or scaling incident response automation, tooling, or AI-assisted workflows (triage, enrichment, investigation), with sound judgment about where automation should and shouldn’t make decisions.
• Experience setting clear expectations, defining ownership, delegating work, and measuring outcomes.
• Experience managing high-pressure security incidents with clarity, structure, and calm.
• Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and how to respond to them.
• Strong communication skills, including the ability to explain complex findings, tradeoffs, and recommendations to technical and non-technical audiences.
• Experience breaking down strategic initiatives into projects, coordinating team sprints, and managing work across competing priorities.
• Passion for fostering psychological safety and stability in stressful environments.
Who you are:
• A people-first leader who prioritizes team development, psychological safety, and performance.
• A builder at heart, someone who thinks in systems and automation, not just case queues, and hires and develops engineers with that same instinct.
• Proactive in identifying gaps, inefficiencies, or operational risks and bringing forward actionable solutions, including where AI or automation can close them.
• Effective at driving alignment across teams with differing priorities and perspectives.
• Calm and decisive during high-pressure situations, with the judgment to prioritize effectively and make difficult tradeoffs.
• A clear and transparent communicator who can align teams with differing priorities, surface tradeoffs, and advocate for sound security decisions.
• Motivated by protecting people, data, and the business.
What you can expect:
• Build, lead, and develop a team of incident responders and security builders, setting clear expectations, creating meaningful ownership, and supporting growth.
• Delegate effectively based on team strengths, development goals, capacity, and operational needs while maintaining accountability for outcomes.
• Define and drive the security incident response roadmap and strategic priorities, including maturing agentic incident response, structured threat hunting, and insider risk investigations as sustained, scaled capabilities rather than one-time builds.
• Balance competing priorities across incident response, strategic initiatives, and team development; make tradeoffs clear and push back when timelines, approaches, or requests create unnecessary risk or unsustainable workload.
• Scale team capacity through AI-assisted tooling and automation, maintaining appropriate controls around human judgment, approval, auditability, and rollback.
• Oversee detection, triage, containment, remediation, and post-incident learning, serving as an escalation point and incident manager for complex or high-severity events.
• Partner with Detection Engineering, Cyber Threat Intelligence, Red Team and other teams to improve cross-functional processes and close detection or response gaps identified through investigations.
• Evolve playbooks, training, tabletop exercises, metrics, and reporting to strengthen operational readiness and program maturity.
• Participate in the on-call rotation, serving as the leadership escalation or incident manager during major or complex incidents.
• Track and report on incident trends, operational metrics, and program maturity, including the impact of automation and AI tooling on response time and coverage.
USA-based roles only: The annual base salary for this role is between $192,000 USD and $278,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
Canada-based roles only: The annual base salary for this role is between $171,000 CAD and $248,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.
This posting is for an existing vacancy.
Our culture
At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first.
You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results.
How we work with AI
We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password.
This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others.
Our approach to remote work
We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.
What we offer
We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:
Health and wellbeing
👶 Maternity and parental leave top-up programs
🩺 Competitive health benefits
🏝 Generous PTO policy
Growth and future
📈 RSU program for most employees
💸 Retirement matching program
🔑 Free 1Password account
Community
🤝 Paid volunteer days
🏆 Peer-to-peer recognition through Bonusly
🌎 Remote-first work environment
*Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting.
You belong here.
1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.
Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs.
Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you.
Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.
1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.
Location: Toronto, Ontario, Canada
Workplace: Hybrid
ABOUT SENTRY
Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building.
Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future.
ABOUT THE ROLE
The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate.
We take a pragmatic approach to preventing and responding to security risks. In this role not only will you build and contribute to systems which detect malicious activity, you will have the unique opportunity to implement new controls to prevent future incidents. You will work across detection and response and corporate security domains. You'll contribute to practices that keep Sentry secure as we grow: alert triage for corporate and production, detection engineering, deploying preventative controls, identity and access management, investigations and incident response, and more.
You'll partner with teams across the company to prevent and respond to security incidents. You will work as a technical collaborator who prioritizes preventative controls, defense in depth, and high signal alerting practices. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security approaches and challenges.
IN THIS ROLE, YOU WILL
- Maintain, improve, and own detection engineering systems. We own and operate our own detection stack and are building agentic triage with thoughtful security response and orchestration automation.
- Perform investigations, and contribute to security incident response. You will assist and contribute to a breadth of incident types, or Sentry and our customers.
- Contribute to, maintain, and operate identity and access management systems. Access management is a critical component of our security program.
- Have a lot of opportunity to grow and learn across many security domains. We are a highly cross-functional team and you will have opportunities to touch adjacent security projects spanning appsec, infrasec, governance, and privacy.
- Research, identify, and respond to emerging threats relevant to Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices.
YOU’LL THRIVE IN THIS ROLE IF YOU
- Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you protect a fast-moving engineering organization.
- Get excited when something new lands on your desk, be it an interesting breach, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before.
- Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction.
- Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than make a noisy reactive solution which requires manual triage.
- Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team.
QUALIFICATIONS
- 2-5 years of industry experience in a detection and response, corporate security, or generalist security engineering role
- Degree in Computer Science or a related field, equivalent training, or professional experience
- Hands-on experience with several of the following: alert triage, detection tuning and writing, detection-as-code, security log ingestion, investigations and security incident response, identity and access management (IAM), phishing response, user access reviews, managing endpoint detection and response tooling
- Experienced and comfortable programing in at least one language (Python preferred) and comfortable using agentic development workflows
- Familiarity with operating distributed cloud technology (AWS, CICD, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and experience with corporate (SSO, SAML, IAM) and defensive security tooling (EDR, SIEM, CNAPP, ZTNA, etc.)
- A collaborative approach to problem solving paired with strong written and verbal communication
Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow.
The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $162,000 to $200,000 CAD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs.
EQUAL OPPORTUNITY AT SENTRY
Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible.
If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io.
Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.
Location: San Francisco, California
Workplace: Hybrid
ABOUT SENTRY
Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building.
Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future.
ABOUT THE ROLE
The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate.
We take a pragmatic approach to preventing and responding to security risks. In this role not only will you build and contribute to systems which detect malicious activity, you will have the unique opportunity to implement new controls to prevent future incidents. You will work across detection and response and corporate security domains. You'll contribute to practices that keep Sentry secure as we grow: alert triage for corporate and production, detection engineering, deploying preventative controls, identity and access management, investigations and incident response, and more.
You'll partner with teams across the company to prevent and respond to security incidents. You will work as a technical collaborator who prioritizes preventative controls, defense in depth, and high signal alerting practices. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security approaches and challenges.
IN THIS ROLE, YOU WILL
- Maintain, improve, and own detection engineering systems. We own and operate our own detection stack and are building agentic triage with thoughtful security response and orchestration automation.
- Perform investigations, and contribute to security incident response. You will assist and contribute to a breadth of incident types, or Sentry and our customers.
- Contribute to, maintain, and operate identity and access management systems. Access management is a critical component of our security program.
- Have a lot of opportunity to grow and learn across many security domains. We are a highly cross-functional team and you will have opportunities to touch adjacent security projects spanning appsec, infrasec, governance, and privacy.
- Research, identify, and respond to emerging threats relevant to Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices.
YOU’LL THRIVE IN THIS ROLE IF YOU
- Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you protect a fast-moving engineering organization.
- Get excited when something new lands on your desk, be it an interesting breach, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before.
- Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction.
- Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than make a noisy reactive solution which requires manual triage.
- Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team.
QUALIFICATIONS
- 2-5 years of industry experience in a detection and response, corporate security, or generalist security engineering role
- Degree in Computer Science or a related field, equivalent training, or professional experience
- Hands-on experience with several of the following: alert triage, detection tuning and writing, detection-as-code, security log ingestion, investigations and security incident response, identity and access management (IAM), phishing response, user access reviews, managing endpoint detection and response tooling
- Experienced and comfortable programing in at least one language (Python preferred) and comfortable using agentic development workflows
- Familiarity with operating distributed cloud technology (AWS, CICD, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and experience with corporate (SSO, SAML, IAM) and defensive security tooling (EDR, SIEM, CNAPP, ZTNA, etc.)
- A collaborative approach to problem solving paired with strong written and verbal communication
Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow.
The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $150,000 to $200,000 USD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs.
EQUAL OPPORTUNITY AT SENTRY
Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible.
If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io.
Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.
Location: United States
Workplace: Remote
The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our detection and incident response capabilities.
What you will do:
- Develop processes, tooling and automation to scale incident management response and mitigate risks to the business
- Collaborate with other security functions, engineering, product, support, business operations to identify appropriate detection use cases and automation
- Apply a threat modeling centric approach to incident detection and response
- Maintain security logging platform
- Stay up to date with the latest threats, attack vectors to improve our detection mechanisms and attack surface management
- Handle information security events and incidents across the ClickHouse products and services
What you bring along:
- Background in product security / red teaming / penetration testing / threat modeling, combined with incident detection and response experience
- Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure)
- Excellent written and verbal communication skills
- Experience securing large-scale customer-facing cloud infrastructures
- Significant development and automation experience; preference for Golang and Python
Bonus Points:
- BS, MS, or PhD in Computer Science or related field
- Previous contributions to open source projects
- Security or cloud related certifications (AWS, GCP, Azure)
PERKS
- Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.
- Healthcare - Employer contributions towards your healthcare.
- Equity in the company - Every new team member who joins our company receives stock options.
- Time off - Flexible time off in the US, generous entitlement in other countries.
- A USD$500 Home office setup if you’re a remote employee.
- Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.
CULTURE - WE ALL SHAPE IT
As part of a rapidly scaling start-up, you will be instrumental in shaping our culture.
Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse.
EQUAL OPPORTUNITY & PRIVACY
ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.
Location: United States
Workplace: Remote
The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our detection and incident response capabilities.
What you will do:
- Develop processes, tooling and automation to scale incident management response and mitigate risks to the business
- Collaborate with other security functions, engineering, product, support, business operations to identify appropriate detection use cases and automation
- Apply a threat modeling centric approach to incident detection and response
- Maintain security logging platform
- Stay up to date with the latest threats, attack vectors to improve our detection mechanisms and attack surface management
- Handle information security events and incidents across the ClickHouse products and services
What you bring along:
- Background in product security / red teaming / penetration testing / threat modeling, combined with incident detection and response experience
- Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure)
- Excellent written and verbal communication skills
- Experience securing large-scale customer-facing cloud infrastructures
- Significant development and automation experience; preference for Golang and Python
Bonus Points:
- BS, MS, or PhD in Computer Science or related field
- Previous contributions to open source projects
- Security or cloud related certifications (AWS, GCP, Azure)
PERKS
- Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.
- Healthcare - Employer contributions towards your healthcare.
- Equity in the company - Every new team member who joins our company receives stock options.
- Time off - Flexible time off in the US, generous entitlement in other countries.
- A USD$500 Home office setup if you’re a remote employee.
- Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.
CULTURE - WE ALL SHAPE IT
As part of a rapidly scaling start-up, you will be instrumental in shaping our culture.
Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse.
EQUAL OPPORTUNITY & PRIVACY
ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.
Location: San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the Role
The Detection & Response (D&R) team plays a critical role in protecting our systems, users, and data from security threats. We’re looking for an experienced Technical Program Manager to own and evolve incident management within D&R. This is a senior-level specialization on the Technical Program Manager ladder, focused on how we detect, respond to, and learn from security and operational incidents.
You’ll be the driving force behind maturing and scaling our incident response lifecycle—from detection and triage through containment, remediation, and post-incident review. Critically, some of the highest-impact work in this role happens after the immediate response: gathering data on incident trends, reporting on patterns and root causes, and working cross-functionally across engineering, security, infrastructure, and product teams to ensure that broad fixes and systemic improvements are actually implemented.
You won’t just manage incidents—you’ll make sure we get meaningfully better after each one.
Responsibilities
Own the end-to-end D&R incident management program: detection workflows, response processes, escalation paths, communication standards, and remediation tracking.
Serve as incident commander for security incidents, driving clear coordination across executive, engineering, security, legal, and other appropriate stakeholders.
Establish and run incident commander rotations within D&R, ensuring clear ownership and effective coordination during incidents of varying severity.
Drive post-incident accountability by defining how action items are captured, assigned, tracked, and completed across teams—ensuring follow-through on both tactical fixes and strategic improvements.
Gather, analyze, and report on incident trends and patterns to surface systemic risks, recurring root causes, and areas where the organization is most vulnerable.
Translate trend analysis into actionable cross-functional initiatives: partner with engineering, infrastructure, security, and product teams to prioritize and implement broad fixes and preventive improvements that address root causes rather than symptoms.
Lead incident review forums (post-mortems, retrospectives) and ensure learnings are captured, socialized, and acted upon across the organization.
Develop and maintain D&R incident response documentation, playbooks, runbooks, and training materials; keep them current as the threat landscape and our systems evolve.
Partner with detection engineering to improve alert fidelity, reduce noise, and shorten time-to-detection for security events.
Define, develop, and track incident management KPIs and report regularly to D&R and Security leadership.
Support broad cross-functional training and initiatives to uplevel security awareness across the company (e.g. Tabletop exercises, training, talks).
You may be a good fit if you:
Have 7+ years of experience in technical program management, incident management, or security operations, with significant time spent in a detection & response or security incident response context.
Have led or built incident response programs at a technology company, ideally in a high-growth or security-intensive environment.
Have a demonstrated track record of turning incident data into organizational improvements—not just writing post-mortems, but driving the cross-functional work to implement systemic fixes.
Are comfortable participating in on-call responsibilities and leading incident response during high-severity security events, including off-hours.
Have experience building and scaling operational processes from the ground up in environments where structure didn’t previously exist.
Excel at driving accountability and follow-through across multiple teams without direct authority—you know how to influence, track, and close the loop.
Have strong analytical skills and experience with incident trend analysis, metrics reporting, and data-driven prioritization.
Are highly organized with a knack for bringing structure to ambiguous, fast-moving situations.
Have excellent communication skills, especially under pressure and when coordinating across technical and non-technical stakeholders, including executive leadership.
Thrive in fast-paced environments where priorities shift and you’re often working with incomplete information.
Deadline to apply: None. Applications will be received on a rolling basis.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$290,000
—
$365,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: New York; Stockholm
Workplace: OnSite
ABOUT US:
AI NEEDS A NEW INFRASTRUCTURE LAYER. WE'RE BUILDING IT AT MODAL.
Every era of computing brought new workloads that previous infrastructure couldn't support: mainframes, databases, and the cloud. Each time, the company that rebuilt the layer underneath defined the decade. AI is no different, except it touches everything instead of one slice, and the window to build the layer underneath it is open right now.
Our customers include category-defining companies like Ramp https://modal.com/blog/how-ramp-built-a-full-context-background-coding-agent-on-modal, Cognition, DoorDash, and Suno. They rely on Modal for instant GPU access, sub-second container starts, and native storage, so it's simple to serve low-latency inference, fine-tune models, and access production-ready sandboxes at scale.
We've passed $1B in annualized run rate, up 15x from a year ago. In October 2026 we raised a $750M Series D led by Accel at a $15.75B valuation.
Our team includes creators of popular open-source projects (e.g.,Seaborn https://github.com/mwaskom/seaborn,Luigi https://github.com/spotify/luigi), academic researchers, international olympiad medalists, and experienced engineering and product leaders with decades of experience.
THE ROLE:
We’re looking for a Detection & Response Engineer to build the systems that help us identify, investigate, and respond to threats across our platform.
This is an engineering role focused on automation. You’ll build detections, investigation tooling, and response capabilities that scale with our infrastructure, using AI where it meaningfully improves signal, investigation speed, and operational effectiveness.
You’ll work closely with infrastructure, platform, and security engineers to ensure every incident makes the platform more resilient.
WHAT YOU'LL WORK ON:
Detection Engineering
- Design and build high-fidelity detections for attacks, abuse, and anomalous behavior across our infrastructure and production systems
- Continuously improve detections based on telemetry, threat intelligence, and lessons learned from incidents
- Improve visibility across cloud infrastructure, containers, identity systems, and production services
Incident Response
- Lead or participate in investigations spanning production infrastructure, cloud environments, and internal systems
- Build playbooks and automation that reduce investigation time and improve response consistency
- Drive post-incident improvements that eliminate entire classes of future incidents
Security Tooling & Automation
- Build internal tooling that improves detection, investigation, and response workflows
- Leverage LLMs to automate repetitive analysis, accelerate investigations, and surface actionable insights from security telemetry
- Improve the collection, quality, and usability of security telemetry across the platform
Engineering Partnership
- Partner with engineering teams to ensure new systems are observable and secure by default
- Help teams instrument services with the telemetry needed for effective detection and response
- Drive security improvements that make the platform easier to defend over time
YOU MAY BE A FIT IF:
- You have experience in detection engineering, incident response, security engineering, or software engineering with a strong security focus
- You have strong software engineering skills and experience building production systems.
- You’ve investigated security incidents in cloud-native or distributed environments
- You’re familiar with modern cloud infrastructure, Kubernetes, Linux, and networking
- You’ve built detections using logs, telemetry, behavioral signals, or large-scale event data.
- You have strong SQL skills for investigating security events and developing detections
- You’re interested in applying AI and LLMs to detection, investigation, and response, and in understanding emerging threats involving AI-powered systems
- You have strong written and verbal communication skills
NICE-TO-HAVE:
- Experience building AI- or LLM-powered security tooling
- Experience with SIEM, SOAR, or EDR platforms
- Experience with Kubernetes security or large-scale cloud infrastructure
- Experience with threat hunting, malware analysis, or digital forensics
- Experience contributing to security operations in a high-growth engineering organization
Location: San Francisco, CA; New York, NY
Workplace: OnSite
ABOUT US
At LangChain, our mission is to make intelligent agents ubiquitous. We build the foundation for agent engineering in the real world, helping developers move from prototypes to production-ready AI agents that teams can rely on. We began as widely adopted open-source tools and have grown to also offer a platform for building, evaluating, deploying, and operating agents at scale.
With $125M raised at Series B from IVP, Sequoia, Benchmark, CapitalG, and Sapphire Ventures, we’re at a stage where we’re continuing to develop new products, growth is accelerating, and all team members have meaningful impact on what we build and how we work together. LangChain is a place where your contributions can shape how this technology shows up in the real world.
Today, our platform includes LangSmith (Observability, Evaluation, Deployment, Fleet, and Sandboxes), our open source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement. We have 100M+ monthly open source downloads, 6,000+ active LangSmith customers, and 5 of the Fortune 10 use LangSmith in production (+ 35% of the Fortune 500 overall), including teams at Klarna, Clay, Coinbase, Workday, Lyft, Cloudflare, Harvey, Rippling, Vanta, LinkedIn, Monday.com, Nvidia, and Bridgewater.
ABOUT THE TEAM
The Security team ensures that while AI moves at breakneck speed, everyone driving the racecar is wearing a seatbelt. We secure LangChain's core platform and protect AI agents from emerging threats. We work across the stack so developers can confidently ship from prototype to production without compromising on safety or privacy.
ABOUT THE ROLE
You'll be the hands-on detection and response engineer responsible for how we see, stop, and learn from threats across LangChain's production platform, cloud infrastructure, and the services that host and execute agentic workloads. You'll partner closely with Product Security to turn threat models, vulnerabilities, and incidents into telemetry, detections, and durable defenses. Your primary focus is engineering: building detection, investigation, and response systems that scale the Security team's impact beyond what manual operations allow. We are looking for engineers who think like builders, not just operators — strong software skills are a must.
This role participates in an incident on-call rotation, but its core focus is engineering systems that reduce risk, speed up investigations, and make incidents less frequent and less costly.
Location/City: San Francisco or NYC
WHAT YOU'LL DO
- Own the detection lifecycle: Translate threat models, incidents, and attacker behavior into telemetry requirements and detections-as-code. Validate coverage, measure signal quality, tune false positives, and continuously test whether defenses work.
- Build security monitoring and telemetry: Design the telemetry pipeline end-to-end across cloud (GCP/AWS), Kubernetes, and the LangSmith/LangGraph control plane. Instrument services, define the signals that matter, and make security data reliable and useful.
- Engineer investigations and threat hunting: Build tools and workflows for proactive hunting, evidence collection, incident scoping, and containment. Turn investigation findings into new detections and lasting improvements.
- Use agents to scale the team: Build reliable internal AI agents and automation that triage alerts, enrich findings, gather evidence, scope incidents, and accelerate routine security work. Design human-in-the-loop controls and evaluations so automation is safe, observable, and trustworthy.
- Lead incident response and participate in on-call: Triage, scope, contain, and remediate security incidents, then drive postmortems that produce durable engineering changes.
- Partner with Product Security: Turn product threat models and vulnerability findings into production monitoring, and feed real-world detection and incident learnings back into secure design.
WHAT YOU'LL BRING
- 5+ years in security engineering, with meaningful experience in detection engineering, security operations, or incident response — and the software skills to build your way out of repetitive work.
- Strong software engineering in Python or Go (TypeScript a plus). You design maintainable systems and write production code, not just one-off scripts.
- Cloud and Kubernetes detection depth: Experience with GCP or AWS logging, Kubernetes audit and runtime telemetry, workload identity, and turning raw signals into actionable detections.
- Detection and adversary expertise: The ability to model realistic attacker behavior, hunt across complex systems, test detection coverage, and distinguish meaningful signal from noise.
- Hands-on incident response: You've participated in on-call, led incidents, and written postmortems that changed how a team operates.
- Experience building reliable automation or developer-facing systems: You can design APIs and workflows, instrument what you build, evaluate quality, and operate it in production.
- A pragmatic product mindset: You can identify users and requirements, prioritize the highest-leverage problems, define success, and ship iteratively.
NICE TO HAVE
- Experience building or operating AI agents for security workflows such as alert triage, investigation, evidence collection, or human-in-the-loop response.
- Proficiency using AI tooling to accelerate security investigations and engineering work.
- Understanding of AI threats, adversarial testing, and the security boundaries of LLM and agent workloads.
- Exposure to SOC 2 or ISO 27001 monitoring and evidence automation.
- Experience with infrastructure as code such as Terraform or Helm.
- Experience securing both SaaS and self-hosted or air-gapped deployments.
Annual salary range: $185,000- $250,000 USD
Compensation Philosophy:
We offer competitive compensation that includes base salary, variable compensation for relevant roles, meaningful equity, benefits, and perks.
We are hiring for this role across a range of scope, and the compensation band reflects that. Your offer depends on what we learn about your impact, craft, leadership, and communication during the interview process. We will tell you early where you’re tracking and talk comp with you before offer stage. Team members in the EU, UK, and APAC receive locally competitive benefits aligned with regional norms and regulations.
BENEFITS
Benefits include medical, dental, and vision coverage, flexible vacation, a 401(k) plan, meals on in-office days in the US and more.
United States, San Mateo, CA
ГибридSan Francisco, California; New York, New York
ГибридDublin, Ireland
ГибридMadrid, Spain; Collaborative and proactive, comfortable working asynchronously across time zones
leadKuala Lumpur, Malaysia
География найма не уточнена
УдалённоСША; Lastly, the provided range is the expected salary for candidates in the U.S