Location: Kuala Lumpur, Malaysia
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.
OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.
Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
About this Job
You will be expected to show a high level of technical knowledge and professionalism at all times when responding to queries from international legal authorities, law firms and relevant third parties within a stipulated time-frame.
What You’ll Be Doing
Attending to inquiries from legal authorities and legal representatives from all around the world while maintaining delivery of a high quality service level.
Liaising with internal stakeholders such as compliance, risk and customer service teams ensuring all queries are dealt with in a professional manner and escalating where appropriate.
Maintaining a working knowledge of company products to effectively communicate with external stakeholders.
Creating and maintaining strong relationships with company partners and external stakeholders.
Escalate any queries or unresolved issues to Supervisors and as advised by the operations management, which cannot be completed within the agreed procedures.
Support the enhancement of our Legal Response function.
Manage or participate in specific projects which may arise from time to time.
What We Look For In You
A degree in law / compliance or any related field which demonstrates critical thinking.
Excellent communication and writing skills, and are detailed-oriented.
Literate in Chinese (read and write)
as this role caters to the China market.
Ability to work independently and as part of a team.
Comfortable working in a fast-paced, dynamic environment with changing priorities.
Strong people skills: Ability to navigate difficult situations and stay calm under pressure.
Solutions mindset: passionate to find the right solution and resolve the issue.
Excellent time management: ability to multi-task to solve issues while managing time.
Quick learner: ability to ramp up quickly and act on feedback constructively.
Willingly to work on a
rotational shift to support 24x7 operations
.
Why Join Us?
Competitive remuneration package (Basic Salary + Shift Allowance + KPI Allowance + Yearly Bonus)
Meal allowance
Transportation allowance (T&C apply)
Monthly team building
RM 3,500 training & wellness benefits per annum
Convenient workplace (5 minutes walk from MRT TRX)
Insurance coverage for employees & dependants
Excellent prospects for growth and promotion
Employee engagement, recognition and appreciation program
Multinational working environment: Advance your career by interacting with individuals from various backgrounds, cultures, and nations
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: Zürich, CH
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
As Anthropic's models grow more capable, so does the interest of people who want to attack or misuse them. The Detection and Response (D&R) team spots those threats and responds to incidents across every layer of Anthropic's technology stack.
The team is early-stage, so you'll help build our detection and response capabilities from the ground up and work closely with our security and research teams.
Key responsibilities
Lead incident response across a range of domains, from external attacks to insider threats, spanning all layers of Anthropic's technology stack
Build and deploy tooling, including tools that use large language models, to improve how we detect and respond to threats
Create and tune detections, playbooks, and workflows to catch and respond to incidents quickly
Review incident response metrics and procedures, and drive improvements
Work across security and engineering teams
Take part in an on-call rotation
Minimum qualifications
Experience handling security incidents and investigating anomalies as part of a team
Working knowledge of EDR, SIEM, SOAR, or similar security tooling
A solid understanding of cloud environments and operations
Experience working with engineering teams in a SaaS environment
Proficiency with a scripting language such as Python and query languages such as SQL
Strong communication and collaboration skills
Able to lead projects with little guidance
Able to pick up new languages and technologies quickly
Preferred qualifications
7+ years of software engineering experience, or 7+ years of detection engineering, incident response, or threat hunting experience
Security operations or investigations involving large-scale Kubernetes environments
Experience analyzing attack behavior and prototyping high-quality detections
Experience with threat intelligence, malware analysis, infrastructure as code, or forensics
Experience contributing to a high-growth startup environment
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: San Francisco
Workplace: Hybrid
WHY HARVEY
At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come.
This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched.
Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you.
At Harvey, the future of professional services is being written today — and we’re just getting started.
ROLE OVERVIEW
Harvey is building AI-native software for professional services. Our customers trust us with highly sensitive information and critical business workflows, making security fundamental to everything we build. We’re looking for a Director of Detection and Response to build and lead the team that identifies threats, responds decisively to incidents, and turns what we learn into stronger defenses.
You will own Harvey’s Detection and Response strategy, technical direction, and operational readiness across our production platform and corporate environment. Working with the CISO and leaders across Engineering, Infrastructure, IT, Legal, and Customer Trust, you’ll translate business risk into a focused program that protects customer data and enables Harvey to move quickly with confidence.
This is a technical leadership role for someone who can build an exceptional team, earn the trust of senior engineers, and bring clarity to high-stakes situations. You’ll develop a function that scales through software, automation, and strong partnerships, while staying close enough to the work to challenge detection designs and guide complex investigations.
WHAT YOU'LL DO
- Build and lead the organization. Hire and develop detection engineers, incident responders, and technical leaders; establish clear ownership and a culture of curiosity, sound judgment, and continuous learning. Own the roadmap, staffing plan, and investment decisions.
- Own incident response and crisis readiness. Lead Harvey’s response to major security incidents, coordinating investigation, containment, recovery, and executive communication. Build clear severity criteria, escalation paths, playbooks, and sustainable 24/7 coverage for critical threats; develop incident commanders and cross-functional responders through exercises.
- Build detection as an engineering capability. Set the technical direction for telemetry, detection pipelines, forensic tooling, and response automation across cloud, endpoint, identity, SaaS, and application environments. Apply software engineering practices to test detections, improve signal quality, and reduce manual work; evaluate AI-assisted investigation with measurable quality and appropriate human oversight.
- Focus defenses on meaningful threats. Use threat intelligence, hunting, and an attacker’s perspective to prioritize scenarios that matter to Harvey, including account compromise, data theft, insider risk, privileged-access abuse, and abuse of AI-enabled workflows. Partner with offensive security and platform owners to validate coverage and close blind spots.
- Make response a company capability. Partner with Engineering, IT, Legal, Privacy, Communications, and Customer Trust on sensitive investigations and crisis decisions. Establish clear escalation and decision authority, preserve evidence, and provide accurate findings to support Legal-led notification and disclosure decisions. Prepare cross-functional responders to contribute when incidents require broader support.
- Turn incidents into lasting improvements. Drive blameless reviews and ensure corrective actions have owners, deadlines, and verified outcomes. Measure detection coverage, time to detect and contain, recurring failure modes, and responder workload, and use those results to guide investments and reduce customer impact.
WHAT YOU HAVE
- Experience building and leading Detection and Response, incident response, or security engineering teams in a technology company with complex production systems. A record of hiring strong engineers, developing technical leaders, and scaling both the team and its operating model.
- Deep incident response experience and demonstrated judgment during serious security events. You can lead investigations with incomplete information, make timely containment decisions, and communicate clearly with executives, engineers, and business partners. You bring composure, integrity, and discretion to sensitive investigations and decisions under scrutiny.
- Strong technical foundations in cloud infrastructure, operating systems, networking, identity, and attacker tradecraft, with depth in detection engineering, threat hunting, or digital forensics. You understand how to investigate across corporate and production environments.
- An engineering approach to security operations, backed by experience building detection platforms, investigation tools, or response automation. You can evaluate architecture and code, guide senior engineers, and make practical decisions about what to build, buy, or retire.
- The ability to turn business risk into a focused strategy and deliver it through influence and partnership. You balance urgent response with long-term engineering work and build a demanding, supportive environment where people can do their best work.
Experience protecting enterprise SaaS, sensitive customer data, or AI/ML environments is especially valuable, as is experience investigating insider threats, partnering on privileged-access governance, or leading response under regulatory and public scrutiny.
At Harvey, you’ll shape how an AI company detects and responds to threats as its products and customers evolve. Your team’s work will directly protect customer trust and help make security a durable foundation for the business.
COMPENSATION
$280,000 - $385,000 USD
DEPENDING ON YOUR LOCATION, AN APPLICANT PRIVACY NOTICE MAY APPLY TO YOU. YOU CAN FIND ALL OF OUR APPLICANT PRIVACY NOTICES HERE https://harveyai.notion.site/Harvey-Candidate-Privacy-Notices-319ac3fcdd7a803bb807d5094f249922?pvs=74.
#LI-DZ1
Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing accommodations@harvey.ai
Location: New York
Workplace: Hybrid
WHY HARVEY
At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come.
This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched.
Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you.
At Harvey, the future of professional services is being written today — and we’re just getting started.
ROLE OVERVIEW
Harvey is building AI-native software for professional services. Our customers trust us with highly sensitive information and critical business workflows, making security fundamental to everything we build. We’re looking for a Director of Detection and Response to build and lead the team that identifies threats, responds decisively to incidents, and turns what we learn into stronger defenses.
You will own Harvey’s Detection and Response strategy, technical direction, and operational readiness across our production platform and corporate environment. Working with the CISO and leaders across Engineering, Infrastructure, IT, Legal, and Customer Trust, you’ll translate business risk into a focused program that protects customer data and enables Harvey to move quickly with confidence.
This is a technical leadership role for someone who can build an exceptional team, earn the trust of senior engineers, and bring clarity to high-stakes situations. You’ll develop a function that scales through software, automation, and strong partnerships, while staying close enough to the work to challenge detection designs and guide complex investigations.
WHAT YOU'LL DO
- Build and lead the organization. Hire and develop detection engineers, incident responders, and technical leaders; establish clear ownership and a culture of curiosity, sound judgment, and continuous learning. Own the roadmap, staffing plan, and investment decisions.
- Own incident response and crisis readiness. Lead Harvey’s response to major security incidents, coordinating investigation, containment, recovery, and executive communication. Build clear severity criteria, escalation paths, playbooks, and sustainable 24/7 coverage for critical threats; develop incident commanders and cross-functional responders through exercises.
- Build detection as an engineering capability. Set the technical direction for telemetry, detection pipelines, forensic tooling, and response automation across cloud, endpoint, identity, SaaS, and application environments. Apply software engineering practices to test detections, improve signal quality, and reduce manual work; evaluate AI-assisted investigation with measurable quality and appropriate human oversight.
- Focus defenses on meaningful threats. Use threat intelligence, hunting, and an attacker’s perspective to prioritize scenarios that matter to Harvey, including account compromise, data theft, insider risk, privileged-access abuse, and abuse of AI-enabled workflows. Partner with offensive security and platform owners to validate coverage and close blind spots.
- Make response a company capability. Partner with Engineering, IT, Legal, Privacy, Communications, and Customer Trust on sensitive investigations and crisis decisions. Establish clear escalation and decision authority, preserve evidence, and provide accurate findings to support Legal-led notification and disclosure decisions. Prepare cross-functional responders to contribute when incidents require broader support.
- Turn incidents into lasting improvements. Drive blameless reviews and ensure corrective actions have owners, deadlines, and verified outcomes. Measure detection coverage, time to detect and contain, recurring failure modes, and responder workload, and use those results to guide investments and reduce customer impact.
WHAT YOU HAVE
- Experience building and leading Detection and Response, incident response, or security engineering teams in a technology company with complex production systems. A record of hiring strong engineers, developing technical leaders, and scaling both the team and its operating model.
- Deep incident response experience and demonstrated judgment during serious security events. You can lead investigations with incomplete information, make timely containment decisions, and communicate clearly with executives, engineers, and business partners. You bring composure, integrity, and discretion to sensitive investigations and decisions under scrutiny.
- Strong technical foundations in cloud infrastructure, operating systems, networking, identity, and attacker tradecraft, with depth in detection engineering, threat hunting, or digital forensics. You understand how to investigate across corporate and production environments.
- An engineering approach to security operations, backed by experience building detection platforms, investigation tools, or response automation. You can evaluate architecture and code, guide senior engineers, and make practical decisions about what to build, buy, or retire.
- The ability to turn business risk into a focused strategy and deliver it through influence and partnership. You balance urgent response with long-term engineering work and build a demanding, supportive environment where people can do their best work.
Experience protecting enterprise SaaS, sensitive customer data, or AI/ML environments is especially valuable, as is experience investigating insider threats, partnering on privileged-access governance, or leading response under regulatory and public scrutiny.
At Harvey, you’ll shape how an AI company detects and responds to threats as its products and customers evolve. Your team’s work will directly protect customer trust and help make security a durable foundation for the business.
COMPENSATION
$280,000 - $385,000 USD
DEPENDING ON YOUR LOCATION, AN APPLICANT PRIVACY NOTICE MAY APPLY TO YOU. YOU CAN FIND ALL OF OUR APPLICANT PRIVACY NOTICES HERE https://harveyai.notion.site/Harvey-Candidate-Privacy-Notices-319ac3fcdd7a803bb807d5094f249922?pvs=74.
#LI-DZ1
Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing accommodations@harvey.ai
Location: Philippines; Indonesia
Paired is a global staffing and recruiting agency that specializes in pairing remote work with top-tier talent. We admire the importance of innovative social media strategies and are committed to connecting talented individuals with great companies that need their unique skills. Our mission is to provide great jobs to talented people, no matter where they are located.
We’re looking for an
AI Video Ad Creator
to produce short, engaging video ads for a growing D2C sports nutrition brand focused on runners and active consumers.
You’ll take scripts written by the creative strategist and turn them into polished
AI-generated video ads
, experimenting with different visual styles including animated, stylized, and photorealistic content. Each video should ultimately showcase the brand’s real product.
What You’ll Do
Create
1–2 finished AI-generated videos per day
, typically 15–60 seconds long.
Turn creative scripts into compelling visual concepts using AI video and image generation tools.
Write and refine prompts to achieve the desired look, movement, and storytelling.
Generate multiple takes and variations, then select the strongest outputs.
Experiment with different styles, including
animated, stylized, and photorealistic
visuals.
Incorporate the brand’s
real product
into the final video.
Handle light editing, captions, and final polishing.
Iterate on generations until the footage meets the required creative and quality standards.
Work closely with the creative strategist to bring scripts and concepts to life.
AI Tools
Experience with current AI video and image generation tools is essential. The team currently works with tools such as:
Higgsfield
Kling
Veo
Other current AI video/image generation platforms
Requirements
Hands-on experience creating
AI-generated video and image content
.
A portfolio demonstrating your AI video work.
Strong understanding of prompting and AI generation workflows.
Patience and attention to detail, with a willingness to iterate until the output looks right.
Ability to work across different visual styles and creative concepts.
Strong creative judgment when selecting the best generations and takes.
Ability to consistently deliver
1–2 finished videos per day
.
Nice to Have
Video editing experience.
Motion design experience.
Strong visual/design sense.
Experience creating
paid social or performance marketing ads
.
Experience working with D2C or e-commerce brands.
About the Brand
The client is a growing
D2C sports nutrition brand
that makes energy gels using organic Yucatan honey, electrolytes, and green tea caffeine. Its products are designed for runners and active consumers, with a strong presence in the running and fitness community. The brand sells online through e-commerce and subscription channels, with additional wholesale distribution. It is a fast-growing company where creative content plays an important role in customer acquisition and brand growth.
What We’re Looking For
We’re looking for someone who is
creative, hands-on, and highly iterative
—someone who enjoys experimenting with AI tools and knows that getting a great result often takes multiple generations and refinements. You should be comfortable working independently while collaborating closely with a creative strategist to turn scripts into compelling visual ads.
Benefits
Competitive salary.
Ability to work remotely.
Significant room for growth over time
Location: San Francisco, CA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
We're seeking an experienced Policy Communications Manager to help drive external communications for our security, governance, and responsible scaling programs, and associated work. This role offers the opportunity to help shape how Anthropic communicates about our approach to developing secure AI systems and products, our work to uphold and iterate on our Responsible Scaling Policy framework, and the unique corporate structure that keeps the company accountable to its mission, including our Long-Term Benefit Trust (LTBT) and our status as a public benefit corporation.
You'll partner closely with our security, product, legal, governance, and Responsible Scaling Policy (RSP) teams to communicate Anthropic's approach to building safe and secure AI models as the technology becomes increasingly capable across critical domains like cybersecurity. You'll also help lead communications about how Anthropic is governed: the role of the LTBT's independent trustees in overseeing the company and electing members of our board, the obligations that come with our public benefit corporation charter, and why we believe this structure matters as AI systems grow more powerful. As governments establish regulatory frameworks for frontier AI, you'll help articulate how Anthropic approaches its transparency obligations and public reporting commitments, translating evolving requirements into clear, credible external communications. This will include balancing proactive storytelling about product security updates and launches with thoughtful handling of reactive matters as they arise. We're charting new terrain communicating about fast-moving frontier model capabilities and threat surfaces, and about institutional structures few other companies have built. You'll bring strong communications fundamentals to the role but recognize that traditional approaches may not map cleanly to the novel issues we're tackling.
The ideal candidate is an experienced issues handler with strong executive management skills, attention to detail, and the judgment to navigate sensitive topics with care. You should be able to move quickly under pressure and tight deadlines, write crisply, and distill complex security, governance, and technical topics for a broad audience while maintaining accuracy. This is a unique opportunity to help define how one of the world's leading AI safety companies communicates about the security and governance challenges that will shape the future of the technology.
Key responsibilities
Develop and execute communications strategies for Anthropic's approach to AI security, governance, and responsible scaling
Drive external communications about Anthropic's corporate governance, including the Long-Term Benefit Trust and our public benefit corporation status, explaining how these structures provide independent oversight and accountability to our mission
Serve as a trusted communications partner to security, product, legal, governance, and RSP leaders on sensitive, fast-moving matters
Develop proactive communications around emerging regulatory frameworks and transparency obligations, including public reporting commitments, disclosure requirements, and Anthropic's engagement with oversight bodies
Manage reactive inbound media requests on complex security and governance topics
Build and maintain relationships with journalists and influencers covering security, corporate governance, and technology policy
Prepare executives for media interviews, speaking engagements, and public appearances, developing thought leadership opportunities that position Anthropic's leaders as credible voices on AI security, governance, and responsible development
Write blog posts, statements, talking points, and other communications materials that explain our security, governance, and responsible scaling work clearly and accessibly, maintaining accuracy
Support reactive communications efforts with speed, accuracy, and sound judgment
Minimum qualifications
Experience in policy communications, including managing communications around complex security or governance topics
Excellent written and verbal communication skills, with the ability to distill complex technical topics accurately for broad audiences
Experience in issues management and developing reactive communications under pressure and tight timelines
Strong executive management skills and a proven ability to work seamlessly across technical and non-technical teams
A track record of building media relationships
A results-oriented, high-agency working style, with a bias toward flexibility and impact
Comfort operating in new terrain, where the technology is evolving quickly and the right communications approach may not yet exist
A deep commitment to ensuring that transformative AI systems are developed safely
Preferred qualifications
8+ years of experience in policy communications, ideally at a high-growth technology company
Experience communicating about corporate governance, regulatory affairs, or oversight structures, and comfort explaining novel institutional arrangements to broad audiences
Existing relationships with security, governance, and tech policy reporters and influencers
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$265,000
—
$295,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Foster City, CA
Workplace: Hybrid
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
ABOUT THE ROLE
We're looking for a Security Engineer with deep incident response experience to help defend Replit, a fast-moving, cloud-native AI vibe-coding platform. You'll be the person who takes charge when something goes wrong. You'll lead investigations from first signal to root cause, coordinate containment across Security, SRE, and Engineering, and keep stakeholders informed while the incident is moving fast.
This isn't a pure responder role. We want a well-rounded security engineer who has run real incidents and wants to make the next one faster. You'll write the scripts, automations, and tooling that take manual work out of triage, evidence collection, and containment. You'll also turn lessons from each incident into better detections, playbooks, and platform hardening.
RESPONSIBILITIES
Incident Response
- Serve as incident commander or technical lead for security incidents, from detection and triage through containment, eradication, recovery, and post-incident review.
- Coordinate response across Security, SRE, Engineering, Legal, and leadership. Drive decisions under pressure and keep a clear record of actions taken.
- Communicate incident status, impact, and risk clearly to technical and executive audiences.
- Participate in and help shape the security on-call rotation.
Investigation & Forensics
- Investigate suspicious activity across cloud infrastructure, containers, identity systems, and application layers using SIEM, Cloud Logging, telemetry, and host and container artifacts.
- Determine scope, root cause, attacker behavior, and blast radius for confirmed incidents.
- Quickly assess whether emerging threats (0-days, active exploitation campaigns, bug bounty findings, customer reports) apply to Replit, and whether we're already affected.
IR Automation & Tooling
- Build scripts, automations, and tools (Python, Go, Bash, or directly on Replit) that speed up response, such as automated enrichment, evidence collection, credential and session revocation, workload isolation, and alert triage.
- Develop and maintain response playbooks and runbooks, and automate them where possible.
- Integrate response workflows with SIEM, SOAR, ticketing, and chat tooling to cut time-to-contain.
Detection & Continuous Improvement
- Turn incident findings into new or improved detections, logging coverage, and visibility.
- Lead blameless post-incident reviews and drive remediation items to completion.
- Run tabletop exercises and simulations to test readiness and find gaps.
REQUIRED SKILLS & EXPERIENCE
- Proven experience leading or serving as technical lead on security incidents in a cloud or SaaS environment.
- Strong hands-on investigation skills with SIEM, cloud audit logs, and log-based analysis. Comfortable working through large datasets under time pressure.
- Proficiency writing production-quality scripts or tools in Python, Go, or Bash for investigation and automation.
- Solid knowledge of cloud architecture and security, especially Google Cloud Platform (IAM, audit logging, GKE, networking).
- Working knowledge of Kubernetes and containers, including how to investigate and contain compromised workloads.
- Understanding of identity systems, SaaS architectures, and common cloud attack paths (credential theft, privilege escalation, supply chain, token abuse).
- Familiarity with software engineering fundamentals, CI/CD pipelines, and package ecosystems, so you can work effectively with Engineering on code-level fixes.
- Understanding of IR frameworks and lifecycle (for example NIST 800-61), plus the vulnerability lifecycle and exploitability analysis.
PREFERRED QUALIFICATIONS
- Experience building or operating SOAR or other response automation platforms.
- Digital forensics experience with cloud, Linux hosts, or containers.
- Experience with threat intelligence, threat hunting, or security research.
- Experience with bug bounty programs or coordinated vulnerability disclosure.
- Familiarity with detection-as-code practices and writing detection rules.
- Experience in fast-paced, cloud-native, or AI/ML-driven environments.
- Relevant certifications (such as GCIH, GCFA, GCFR), or equivalent hands-on experience.
WHAT WE VALUE
- Curiosity & initiative: Strong desire to understand attacker behaviors, emerging threats, and how they apply to real-world systems.
- Speed & analytical rigor: Ability to quickly assess high-risk vulnerabilities with clear, evidence-based reasoning.
- Collaboration: Comfort working across cross-functional teams spanning Security, SRE, Engineering, and Infrastructure.
- Clear communication: Ability to explain findings, risks, and mitigation strategies to stakeholders at all levels.
- Ownership mindset: Takes initiative to drive investigations, improvements, and remediations to completion.
- Continuous learning: Passion for staying up to date on new vulnerabilities, exploit trends, and cloud-native security best practices.
Full-Time Employee Benefits Include:
💰 Competitive Salary & Equity
💹 401(k) Program with a 4% match (US Only)
⚕️ Health, Dental, Vision and Life Insurance
🩼 Short Term and Long Term Disability
🚼 Paid Parental, Medical, Caregiver Leave
🏝 Flexible Time Off (FTO) + Holidays
🚗 Commuter Benefits (In-Office & US Only)
📱 Monthly Wellness Stipend
🧑💻 Autonomous Work Environment
🖥 In Office Set-Up Reimbursement (In-Office Only)
🚀 Quarterly Team Gatherings
☕ In Office Amenities (In-Office Only)
Want to learn more about what we are up to?
- Self-driving Company https://replit.com/blog/self-driving-company
- Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale
- AI Adoption https://replit.com/blog/ai-adoption
- Build Open-Source Apps https://replit.com/build/open-source-app-builder
Interviewing + Culture at Replit
- Operating Principles https://blog.replit.com/operating-principles
- Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
Location: Ħal Qormi QRM, Southern Region, Malta
Welcome to
Torrero
- all-in-one source for cutting-edge white label casino, sportsbook solutions and B2B aggregation. Built on a foundation of trust and compliance, we proudly offer an extensive library of 30,000+ games sourced from diverse providers, positioning Torrero as the preferred partner for transforming the iGaming enterprise. With huge number of sports events and easy payment options, we cater to diverse interests. Available in 35+ languages, we make gaming accessible worldwide.
If you like a fast paced, dynamic and start-up work culture with full of passionate and enthusiastic mindsets, you’re most welcome to explore the opportunity. This is a chance to take part in an exciting journey as the company grows and expands its business at a rapid pace.
About the role
We are seeking a dedicated Responsible Gambling Specialist to support and enhance our player protection framework across regulated markets. This role is focused on safeguarding players, promoting responsible gaming behaviors, and ensuring compliance with all relevant responsible gambling regulations.
Key Responsibilities:
Provide support and guidance to players seeking assistance with responsible gaming concerns through various channels such as email, phone and others
Investigating customers' affordability (Source of Funds/Wealth); performing Enhanced Due Diligence and Ongoing Monitoring
Proactively monitor player activity to identify potential “At Risk” or “Problem Gambling” behaviors and ensure timely and appropriate interactions
Review and investigate Responsible Gambling alerts, taking appropriate action in line with internal policies and regulatory requirements
Ensure all Responsible Gambling cases are handled in a timely and professional manner, including urgent escalations when required (including weekends if necessary)
Handle escalated and sensitive player interactions, including complaints, and determine the most appropriate course of action
Identify gaps or improvement opportunities in Responsible Gambling processes and contribute to the development of new controls and procedures
Collaborate closely with Customer Support, Compliance and other relevant teams to ensure consistent application of responsible gaming standards
Produce regular reports and insights on Responsible Gambling activities, trends, and outcomes for management
Stay up to date with evolving Responsible Gambling regulations and industry best practices across all licensed jurisdictions
Ensure full compliance with all Responsible Gambling regulatory requirements
Requirements:
Proven experience within the iGaming industry
Strong understanding of Responsible Gambling principles, player protection frameworks, and behavioral indicators of problem gambling
Familiarity with regulatory requirements in key jurisdictions (e.g., UKGC, MGA)
Excellent communication skills (written and verbal), with the ability to handle sensitive situations in a calm, empathetic, and professional manner
Experience dealing with vulnerable or distressed customers is highly desirable
High attention to detail and strong analytical skills
Ability to manage confidential and sensitive information with discretion
Proactive, solution-oriented mindset with a continuous improvement approach
Nice to Have:
Previous experience in Responsible Gambling, Player Protection, or Safer Gambling teams
Experience with RG tools, monitoring systems, and player risk segmentation models
We offer:
Flexible working hours
Competitive compensation
3 paid sick days a year without medical certificate
Seniority leave
Birthday Day off
Real career opportunities and professional growth
The great team across the world
Hiring Stages:
Introductory Call
Hiring Manager Round
Reference check
Offer letter
Location: United States, San Mateo, CA
Why Sony Interactive Entertainment?
Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity.
Are you passionate about Responsible AI and ensuring products are built and deployed ethically and safely? Sony Interactive Entertainment is seeking a highly motivated and experienced Senior Responsible AI & Governance Technical Specialist to help ensure our AI products and technologies are developed and deployed ethically, safely, and in alignment with our values. Demonstrable experience in Responsible AI and AI Governance is required. Technical skills are also a must.
In this role, you will operate at the intersection of modern AI technology, policy, and ethics. You will design and implement technical governance frameworks, guidelines, and best practices that support responsible AI innovation across the organization. You will identify and assess potential risks, conduct technical and business evaluations, and partner closely with cross-functional stakeholders to embed responsible AI principles into product development lifecycles, adapting to AI-enabled and agentic systems in particular, and identifying where AI-specific guidance or risk mitigations are needed.
This is a highly collaborative role working across engineering, product, information security, legal, and business teams to ensure AI initiatives align with regulatory requirements and SIE’s broader strategic goals. The ideal candidate brings a strong understanding of generative AI use cases, technical and sociotechnical risk, and product development, balancing responsible AI commitments with internal and external innovation.
If you are passionate about AI Governance and Responsible AI, and have demonstrable experience and skills required for this position, we encourage you to apply. This is an opportunity to build and mature an AI governance program within a fast-evolving landscape.
What You’ll Be Doing:
Contribute to long-term strategies for building safe, ethical, and innovative AI products and tools
Serve as a technical Responsible AI advisor for generative and agentic AI systems, helping teams assess architectures, tool integrations, MCP implementations, data flows, permissions, autonomy, and appropriate human oversight and guardrails
Engage stakeholders across the organization to gather feedback and address AI Governance and Responsible AI technical considerations
Use AI governance, risk tooling and discovery insights to identify emerging risks and support appropriate remediation and technical solutions
Experiment hands-on with emerging AI capabilities, including agents, MCP servers, tool integrations, APIs, and evaluation frameworks, to understand their capabilities and risks and translate findings into practical governance guidance
Sit on relevant domain boards as a technical specialist, partnering closely with Product and Engineering
Conduct ethical and safety risk assessments, advising teams on mitigation strategies related to bias, fairness, robustness, transparency, and societal impact
Partner with engineers, product managers, designers, online safety and more, to proactively identify unintended consequences and emerging risks of AI
Coordinate with Information Security and relevant technical teams to align AI governance reviews and risk assessments with security requirements and technical controls
Contribute to company-wide best practices for responsible AI development and deployment, including AI literacy materials and case studies
What We’re Looking For:
1+ years of experience in AI Governance, Responsible AI, Corporate Governance, AI safety, AI policy, or a related field, with meaningful experience evaluating AI technologies and systems
At minimum, 5 years of experience contributing to or leading cross-functional programs from strategy through operational implementation, partnering with product, engineering, legal, security, and operations teams
Strong technical fluency in modern AI systems, including LLMs, agentic architectures, tool use/function calling, APIs, cloud services, and automation
Hands-on experience working with or evaluating agentic AI systems; familiarity with MCP or comparable protocols and agent/tool integration frameworks strongly preferred
Experience with AI red teaming, adversarial testing, or other technical approaches to identifying risks in LLM and agentic systems
Understanding of agentic and sociotechnical AI risks, including excessive agency, permissions and data access, unintended tool use, human oversight, systemic risk, and emergent behaviors
Ability to translate technical findings and risks into practical controls, mitigations, and guidance for engineering, product, and business teams
Ability to independently drive outcomes across cross-functional teams with minimal supervision
Strong analytical and communication skills, sound judgment, and the ability to challenge assumptions and navigate ambiguity in a fast-moving environment
Ability and curiosity to stay current with emerging AI capabilities, risks, frameworks, and industry developments, particularly within technology, entertainment, and gaming
Preferred Qualifications:
Familiarity with relevant regulations, standards and ethical guidelines (e.g., EU AI Act, OECD Principles, NIST AI RMF, ISO/IEC 42001)
Proficiency in producing meaningful visualizations and reports, and effectively presenting technical results to diverse audiences
Industry experience in tech, gaming or (interactive) entertainment
At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location.
Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location.
In addition, this role
is eligible
for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products.
This role also may be eligible for a bonus package.
Click
here
to learn more.
The estimated base pay range for this role is listed below.
$132,800
—
$199,200 USD
Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks.
Please refer to our Candidate Privacy Notice (where applicable) for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights.
Equal Opportunity Statement:
Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category.
We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.
Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.
Набирают 10 responsables de sección в Getafe (Madrid) и ещё 10 в Barcelona.
Предлагается бессрочный контракт (contrato indefinido), полный рабочий день и очный формат.
От кандидатов требуют высшее образование или ciclo formativo superior, полную доступность по графику, включая выходные, и интерес к спорту.
Географическая мобильность будет преимуществом.
Talent Day пройдёт 6 октября в Getafe и 7 октября в Barcelona.
Для тех, кто не сможет присутствовать лично, предусмотрена возможность подать кандидатуру онлайн.
Кроме этих вакансий, на карьерном портале Decathlon сейчас открыто 409 предложений работы по всей Испании — в том числе для продавцов в отделах велоспорта, бега, плавания и других направлений.
Location: San Francisco, California; New York, New York
Workplace: Hybrid
WHO WE ARE
Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.
Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work.
ABOUT THE ROLE
Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build.
We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion.
You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next.
We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters
WHAT YOU'LL ACHIEVE
- Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up.
- Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety.
- Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful.
- Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements.
- Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes.
- Help define and track metrics such as coverage, MTTD, and alert quality.
- Join a shared on-call rotation for incident response.
SKILLS YOU'LL NEED TO BRING
- We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you.
- 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role.
- Have written or tuned detections that run in production, and care about signal quality and cutting noise.
- Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly.
- An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect.
- Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs.
- Have used SIEM, EDR, or SOAR tools in any size of environment.
- Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end.
NICE TO HAVE
- Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry.
- Experience running SIEM, EDR, or SOAR platforms at large scale.
- Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections).
- Experience applying LLMs or agent-style tooling to security workflows.
- Experience securing AI-enabled systems or endpoint tooling.
- Kubernetes or container detection experience.
- Background in threat intelligence, malware analysis, or digital forensics.
- Contributions to the security community through research, tooling, CTFs, or talks.
- Experience at a high-growth startup or AI company.
Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $185,000 - $280,000 per year.
By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550 and and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528.
#LI-Onsite
A NOTE ON AI
You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on.
EQUAL OPPORTUNITY & ACCOMMODATIONS
We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
Location: Dublin, Ireland
Workplace: Hybrid
WHO WE ARE
Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.
Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work.
ABOUT THE ROLE
Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build.
We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion.
You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next.
We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters
WHAT YOU'LL ACHIEVE
- Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up.
- Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety.
- Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful.
- Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements.
- Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes.
- Help define and track metrics such as coverage, MTTD, and alert quality.
- Join a shared on-call rotation for incident response.
SKILLS YOU'LL NEED TO BRING
- We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you.
- 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role.
- Have written or tuned detections that run in production, and care about signal quality and cutting noise.
- Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly.
- An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect.
- Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs.
- Have used SIEM, EDR, or SOAR tools in any size of environment.
- Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end.
NICE TO HAVE
- Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry.
- Experience running SIEM, EDR, or SOAR platforms at large scale.
- Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections).
- Experience applying LLMs or agent-style tooling to security workflows.
- Experience securing AI-enabled systems or endpoint tooling.
- Kubernetes or container detection experience.
- Background in threat intelligence, malware analysis, or digital forensics.
- Contributions to the security community through research, tooling, CTFs, or talks.
- Experience at a high-growth startup or AI company.
Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role's scope and complexity, and the candidate's experience and expertise, and may vary from the range provided below. The estimated base salary range for this role is €75,000–€142,000 per year.
By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74.
#LI-Onsite
A NOTE ON AI
You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on.
EQUAL OPPORTUNITY & ACCOMMODATIONS
We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
Location: Madrid, Spain
Workplace: hybrid
Are you ready to join our digital revolution journey?
At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.
Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.
With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career.
We are looking for an experienced and operationally sharp Security Operations & Incident Response Analyst (L3) to join Aleph's global IT Security team.
Reporting to the Global CISO, you will be the first line of defence when incidents occur and the engine behind the team's threat detection and response capabilities. You will own the end-to-end incident response process, lead threat hunting and intelligence activities, and manage the vulnerability and identity governance programmes — ensuring Aleph is both able to detect threats quickly and respond to them effectively across a complex, globally distributed environment.
What you'll do:
Incident Response
Own and coordinate the
end-to-end incident response process
: identification, triage, containment, eradication, recovery, and post-incident review (lessons learned).
Serve as the primary point of contact for security incidents escalated from IT Operations, the Security Engineer, and external sources.
Maintain and continuously improve
incident response playbooks
for the most relevant threat scenarios (ransomware, phishing, account compromise, data breach, insider threat, etc.).
Manage the
security incident log and register
: track all incidents, document timelines and actions, and produce trend analysis and reporting for the CISO.
Coordinate with external
SOC or MDR providers
where applicable: review daily reports, validate alert quality, and manage escalation workflows.
Data Breach Management
Lead
data breach investigations
: scope the breach, gather and preserve evidence, assess PII exposure, and coordinate response with Legal, Privacy, and HR.
Produce breach investigation reports with findings, root cause, and recommendations.
Threat Hunting & Intelligence
Conduct
proactive threat hunting
across the environment: develop hypotheses based on threat intelligence, search for indicators of compromise (IoCs), and investigate anomalous behaviour.
Manage the
Threat Intelligence function
: track relevant threat actors, TTPs (MITRE ATT&CK), and sector-specific threat campaigns; integrate intelligence into SIEM/XDR detection rules and hunting queries.
Produce threat intelligence summaries and briefings for the CISO and relevant stakeholders.
Vulnerability Management
Own the
vulnerability management programme
: schedule and execute periodic vulnerability scans across infrastructure, endpoints, and cloud environments.
Analyse scan results, prioritise findings by risk and exploitability, and coordinate remediation with IT Operations within agreed SLAs.
Track remediation progress, produce vulnerability metrics, and report status to the CISO.
Validate remediation effectiveness through re-scanning and spot-checks.
Identity & Access Management (IAM)
Manage
periodic access reviews
: coordinate with system owners and HR to review and certify user permissions across critical systems, ensuring least privilege is maintained.
Oversee the
Privileged Access Management (PAM)
programme: define PAM policies, monitor privileged account usage, and review access rights for administrator-level accounts.
Investigate and respond to identity-related anomalies and access policy violations.
What we are looking for:
3–5 years in a SOC analyst, incident response, or security operations role, with at least 1–2 years at L3 level is a plus.
Experience implementing or managing IAM and PAM solutions
Experience working within international or multinational environments.
Hands-on experience with incident response engagements (internal or consulting) is strongly valued.
Relevant certifications:
GCIH, GCFE, GCFA, CEH, CompTIA CySA+
, or equivalent. OSCP is a plus.
Strong hands-on experience with
SIEM platforms
(alert triage, rule writing, query development) and
EDR/XDR tools
.
Solid knowledge of the
MITRE ATT&CK framework
and its application to threat hunting and incident response.
Experience conducting
vulnerability scans
using tools such as Tenable Nessus, Qualys, Rapid7, or similar.
Familiarity with
IAM and PAM
concepts and platforms (e.g. CyberArk, BeyondTrust, Azure PIM, or equivalent).
Experience with
digital forensics and incident response (DFIR)
methodologies: evidence collection, log analysis, and timeline reconstruction.
Knowledge of
threat intelligence platforms
and feeds (e.g. MISP, VirusTotal, threat intel feeds).
Understanding of
ISO 27001 incident management controls, NIS2 incident reporting obligations, and PCI DSS requirement 12.10
.
Calm and decisive under pressure.
Strong investigative mindset with structured problem-solving approach, excellent documentation skills.
Ability to communicate incident status and findings clearly to both technical teams and executive stakeholders.
Collaborative and proactive, comfortable working asynchronously across time zones.
English
: full professional proficiency (C1/C2) — primary working language.
Spanish
: professional proficiency is a plus.
In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is EUR 48,000 EUR.
In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.
#Aleph
Why Join Us?
Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.
We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.
#ALEPH
Location: Kuala Lumpur, Malaysia
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.
OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.
Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.
What You’ll Be Doing
Lead a team of Legal Response agents day-to-day: assign and triage incoming
law enforcement
requests, monitor SLA and quality performance, and step in on complex or time-sensitive cases.
Coach and develop team members, conduct regular 1:1s, and flag performance or capacity issues to your Manager.
Act as first-line escalation point for law enforcement requests and internal stakeholder queries (Legal, Compliance, Risk, Customer
Service
), resolving what you can and escalating what you can't with clear context.
Maintain and enforce SOPs for handling law enforcement and regulatory requests; surface process gaps or inefficiencies to your Manager with a recommended fix.
Own team-level metrics and reporting: SLA adherence, backlog aging, error rate, and volume trends — using the team's data and reporting tools directly.
Serve as subject matter expert on law enforcement request handling for your team and adjacent functions.
Maintain working knowledge of company products sufficient to communicate credibly with external stakeholders (law enforcement, legal representatives).
Support your Manager on process improvements, projects, and cross-team initiatives as needed.
Day-to-Day Responsibilities
Ensuring daily operations run smoothly; escalate incidents to your Manager and relevant stakeholders in a timely manner.
Monitor SLA, backlog, and error-rate KPIs; identify trends and quality issues before they become escalations.
Conduct weekly/monthly performance reviews with team members, distinct from informal 1:1s.
Coordinate with L&D on training and re-training needs identified through performance monitoring.
Lead or contribute to process improvement projects and workshops.
Plan team shift schedules to maintain 24x7 coverage, and manage shrinkage against plan.
Participate in recruitment activities (
screening
, interviewing) for the team.
What We Look For In You
A degree in law, compliance, or a related field, or equivalent experience demonstrating critical thinking.
Prior experience leading or supervising a team, comfortable holding others accountable.
Comfortable working with data: reading SLA/volume/error dashboards and using them to make day-to-day team decisions, not just reporting numbers upward.
Strong written and verbal communication; detail-oriented, especially under time pressure.
Able to work independently and as part of a team.
Comfortable working in a fast-paced, dynamic environment with changing priorities.
Strong people skills: Ability to navigate difficult situations and stay calm under pressure.
Solutions mindset: passionate to find the right solution and resolve the issue.
Excellent time management: ability to multi-task to solve issues while managing time.
Quick learner: ability to ramp up quickly and act on feedback constructively.
Willing to work on a rotational shift to support 24x7 operations.
Willing to work in Tun Razak Exchange (walking distance from MRT TRX).
Perks &
Benefits
Competitive total compensation package
L&D programs and Education subsidy for employees' growth and development
Various team building programs and company events
Wellness and meal allowances
Comprehensive healthcare schemes for employees and dependants
More that we love to tell you along the process!
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Locations: London, United Kingdom
About the Department
Cloudforce One
is Cloudflare's threat operations and research team, responsible for identifying and disrupting cyber threats ranging from sophisticated cyber criminal activity to nation-state sponsored advanced persistent threats (APTs). Cloudforce One works in close partnership with external organizations and internal Cloudflare teams, continuously developing operational tradecraft and expanding ever-growing sources of threat intelligence to enable expedited threat hunting and remediation.
Members of Cloudforce One are at the helm of leveraging an incredibly vast and varied set of data points that only one of the world's largest global networks can provide. The team analyzes these unique data points at massive scale and efficiency, synthesizing findings into actionable threat intelligence to better protect our customers.
About INTERDICT
I.N.T.E.R.D.I.C.T.
(Identify, Neutralize, Triage, Engage, Respond, Disrupt, Integrate, Contain, Threat Hunting) is Cloudforce One's unified operational security organization responsible for identifying, analyzing, and responding to threats targeting Cloudflare and its customers. INTERDICT encompasses three main sub-functions:
PhishGuard:
Email Managed Detection and Response (MDR) service.
Cloudflare Managed Defense (CMD, Formerly SOCaaS):
24/7 monitoring, detection, and mitigation of security events across Cloudflare products.
Detection Engineering:
Develops, maintains, and deploys Cloudflare’s threat detection logic across email, application, and network telemetry.
Through the combined capabilities of CMD, PhishGuard, and Detection Engineering, INTERDICT delivers a cohesive operational security function that provides continuous, proactive protection against network, application, and email-based threats. This integrated structure ensures rapid detection, coordinated response, and improved security outcomes for Cloudflare and its customers.
About the Role
The Response Engineer within the Cloudflare Managed Defense Center acts as a primary technical responder for Cloudflare's premium enterprise customers. You will autonomously investigate complex threat telemetry, handle live incident response for sophisticated volumetric DDoS and application-layer attacks, and analyze traffic anomalies during high-pressure events.
Customers contact the Managed Defense Center for assistance and intelligence across Cloudflare's security portfolio, focused on two core pillars: Web Application Security (WAF and Bot Management) and DDoS mitigation across network and application layers.
Managed Defense Response Engineers use customer-facing dashboards and internal tools to make detailed and informed suggestions for mitigation, and may implement mitigation strategies directly on behalf of the customer. The team provides continuous proactive monitoring and analysis of security events through internal alerting systems.
We are looking for an analytical security practitioner who thrives in this always-on operational environment and bridges the gap between deep technical analysis and premium customer advisory.
Role Responsibilities
Implement robust mitigation strategies for complex attacks across OSI Layers 3, 4, and 7 using Cloudflare's suite (Magic Transit, Magic Firewall, Advanced TCP Protection, Advanced DNS Protection, WAF, Custom Rules, IP Access Rules, Bot Management, and Rate Limiting)
Monitor and investigate proactive alerts, performing near real-time packet and traffic flow analysis and correlation to detect protocol exhaustion and application-layer exploitation, translating findings into custom, highly targeted mitigation rules
Review alerts to determine relevancy and urgency, proactively escalate customer-impacting incidents, and adhere to Customer SLAs for alert response and customer communication
Act as the primary technical contact for customers during active security incidents, driving high-touch, consultative communication (via phone, chat, email) with customers' technical engineering teams to neutralize threats while ensuring stable traffic delivery
Continuously tune and optimize existing security monitoring rules and alerting thresholds to improve the operational signal-to-noise ratio and reduce false positives
Lead managed customer onboarding sessions, maintain customer-specific runbooks, and deliver highly technical monthly security posture reviews and post-incident reports
Partner directly with internal engineering, product, and threat intelligence teams to provide actionable feedback on attack trends, tooling gaps, and product enhancements
Role Requirements
4–7 years of direct, hands-on experience in Managed Detection and Response (MDR), advanced Security Operations, or high-level Technical Support/Incident Response for enterprise infrastructure
Proven capability to handle both Application Security (including knowledge of OWASP Top 10 vulnerabilities, L7 WAF, HTTP/S anomalies, Bot mitigation) and Network Security (L3/L4 volumetric DDoS, protocol abuse)
Working knowledge of threat frameworks such as MITRE ATT&CK to classify adversary behavior and inform detection and mitigation strategies
Operational understanding of internet protocols including TCP, UDP, ICMP, GRE, BGP, DNS, with the ability to quickly diagnose attack fingerprints and infrastructure impact during volumetric DDoS attacks
Hands-on experience with packet capture (e.g., tcpdump, Wireshark, tshark) or HTTP traffic inspection (e.g., HAR, Burp Suite) to analyze malicious traffic
Extensive experience managing technical communications with enterprise customers during high-stress, active attacks, with the ability to remain calm under pressure and translate complex attack data into clear actionable advice
Ability and willingness to work 24x7 rotating shifts to support global operations
Knowledge of industry security technologies (e.g., enterprise CDNs, cloud-based DDoS scrubbing centers, Next-Gen WAFs, and edge network firewalls) (Preferred)
Proficiency in Linux/Unix environments and strong scripting skills (Bash, Python preferred) for workflow automation (including experience leveraging agentic AI environments or LLMs to optimize operations) and experience interacting with REST APIs or GraphQL to pull and correlate operational data (Preferred)
Experience building or querying dashboards in Prometheus and Grafana for performance and attack metrics (Preferred)
Highly valued security and networking certifications such as GIAC (e.g., GCIA, GCIH, GCFA, GCFE), Cisco CCNA/CCNP, or equivalent hands-on incident response credentials (Preferred)
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Location: Remote
Workplace: Remote
We are building AI to simulate the world through merging art and science.
We believe that world models are at the frontier of progress in artificial intelligence. Language models alone won’t solve the world’s hardest problems – robotics, disease, scientific discovery. Real progress requires models that experience the world and learn from their mistakes, the same way that humans do. And this kind of trial and error can be massively accelerated when done in simulation, rather than in the real world.
World models offer the most clear path to general-purpose simulation, changing how stories are told, how scientific progress is made and how the next frontiers of humanity are reached.
Our team consists of creative, open minded, caring and ambitious people who are determined to change the world. We aspire to continuously build impossible things and our ability to do so relies on building an incredible team. If you are driven to do the same, we'd love to hear from you.
*Titles posted to our careers page are updated regularly to best advertise the role and expected seniority, but internally we have a flat titling system with two types of titles: one for individual contributors and one for people managers.
ABOUT THE ROLE
Open to hiring remote — we also have offices in New York, San Francisco, Seattle, London, Paris, and Tel Aviv.
Runway is hiring a Detection & Response Engineer to own how we find and stop attacks against our infrastructure, our research environment and our products.
Securing a company that trains and serves frontier video models is a different problem from securing a typical SaaS product. The environment includes research compute, large training datasets, a fast-moving build pipeline and engineers who work inside AI-assisted tooling every day. Each of those changes what an attack looks like and what you need to see to catch it.
You'll join the Security team and build our detection and response program the way an engineer would: detections as code, response as automation, evidence as something you can query. This is a role with real ownership: you'll own the detection program end to end, from what we log to how quickly we close an incident. You'll report to the head of security, partner with engineers across platform and research, and shape how this function grows from here.
WHAT YOU'LL DO
- Own detection and response end to end: what we log, what we alert on, how we triage and how we recover
- Write and tune detections as code across multiple cloud environments, Kubernetes, identity systems, endpoints and SaaS, and measure them on coverage and precision rather than alert volume
- Lead incident response from the first alert through containment and forensics, then write the post-incident review people actually read
- Build automation that takes toil out of triage, including enrichment, correlation, containment actions and evidence collection, and use LLM-based tooling where it holds up under audit
- Monitor AI agents and developer tooling operating inside our environment, and turn that into concrete telemetry and controls
- Partner with platform and research engineers so new systems ship with logging and response playbooks in place on day one
- Run threat hunts and tabletop exercises against the parts of the environment that worry you most, and fix what you find
- Turn incident and detection metrics into evidence for SOC 2, ISO 27001 and enterprise customer security reviews, working with our GRC team
- Participate in an on-call rotation for security incidents
WHAT YOU'LL NEED
- Hands-on incident response experience: you've triaged live alerts, led investigations and written up what happened afterward
- Experience building and tuning detections in a modern SIEM, ideally managed as code
- Working knowledge of how attackers move through cloud and Kubernetes environments (IAM abuse, container escape, credential theft, supply chain compromise) and what that leaves behind in logs
- Comfort writing Python, Typescript, Rust or another language to automate response work and connect security tools
- Familiarity with at least one major cloud platform and with Kubernetes at the level of audit logs, RBAC and workload identity
- Clear writing. Incident timelines, detection documentation and updates to leadership are all part of the job
- Judgment about what to alert on, what to automate and when to wake someone up
EVEN BETTER IF YOU HAVE
- Experience monitoring GPU or HPC-style infrastructure, or research environments with large datasets
- Experience building detections or guardrails for AI agents, LLM tooling or MCP servers
- Cloud forensics experience: disk and memory acquisition, cloud audit trail reconstruction, chain of custody
- Published open source detection content
Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. Our salary ranges are based on competitive market rates for our size, stage and industry, and salary is just one part of the overall compensation package we provide.
There are many factors that go into salary determinations, including relevant experience, skill level and qualifications assessed during the interview process, and maintaining internal equity with peers on the team. The range shared below is a general expectation for the function as posted, but we are also open to considering candidates who may be more or less experienced than outlined in the job description. In this case, we will communicate any updates in the expected salary range.
Lastly, the provided range is the expected salary for candidates in the U.S. Outside of those regions, there may be a change in the range, which again, will be communicated to candidates.
WORKING AT RUNWAY
Great things come from great teams. https://www.youtube.com/watch?v=kwmj4ato2kw&ab_channel=Runway We’d love to hear from you.
We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed. So regardless of race, gender identity or expression, sexual orientation, religion, origin, ability, age, veteran status, if joining this mission speaks to you, we encourage you to apply.
More about Runway
- Universal World Simulator https://runwayml.com/world-simulator.html
- GWM-1 https://runwayml.com/research/introducing-runway-gwm-1
- Gen-4.5 https://runwayml.com/research/introducing-runway-gen-4.5
- General World Models https://runwayml.com/research/introducing-general-world-models
- Robotics SDK https://runwayml.com/research/introducing-runway-gwm-1#robotics-section
- Conversational Real-time Agents https://runwayml.com/research/introducing-runway-gwm-1#avatars-section
- Runway Studios https://runwayml.com/studios
We're excited to be recognized as a best place to work:
Crain's https://www.crainsnewyork.com/awards/best-places-work-2023 | InHerSight https://www.inhersight.com/companies/best/city/new-york-city-ny | BuiltIn NYC https://builtin.com/awards/new-york-city/2024/best-places-to-work | INC https://www.inc.com/best-workplaces/2024
Location: GE; PL
Workplace: remote
Overview:
SOFTSWISS is looking for an Incident Response Analyst to join our on-call incident response team. In this role, you will respond to and investigate security incidents across the company, coordinate incident response with relevant teams, and help ensure timely and effective resolution of incidents
.
Key responsibilities:
Participation in security incident response
Performing basic primary incident response measures/triage
Execution (and monitoring of execution) of tasks assigned based on planning results
Development and updating of playbooks for alert verification
Monitoring alerts in compliance with SLA
Submitting proposals for optimizing tools and processes used
The position operates on a 2-on-2-off shift pattern, encompassing a 12-hour day shift, a 12-hour night shift the next day, and 2 free days after that
Required Experience:
Basic indicator of compromise (IoC) analysis skills using publicly available tools (VirusTotal, AnyRun, etc.)
Experience working with Splunk/Clickhouse/SQL at the level of writing simple search queries and interpreting results
Experience working with SOAR/IRP
General understanding of current cyber threats and main attack methods
Basic programming skills in Python, PowerShell, or Bash for automating routine tasks
Knowledge of operating systems (Linux/Windows) at a junior system administrator level
Understanding of the MITRE ATT&CK framework and Cyber Kill Chain
Ability to analyze and process large volumes of data, including logs and triage
Strong communication and teamwork skills: able to clearly articulate thoughts, ask relevant questions, and effectively collaborate with colleagues across different teams, especially during incident response
Analytical and flexible mindset: able to approach issues from different perspectives, build logical chains, make informed decisions, and independently suggest solutions
Proactivity and ownership: takes responsibility for decisions and results, double-checks own work, learns from mistakes and feedback, and actively develops professional skills
Nice to have:
Knowledge of information security best practices (NIST, ISO) and ability to cite them when necessary
Basic knowledge of Docker and Kubernetes, understanding their monitoring features
Experience writing correlation rules in SIEM
Experience with NTA (Network Traffic Analysis) tools
Experience working with online reputation services (VT, AnyRun, IPAbuseDB, etc.)
Experience developing instructions for alert verification and/or writing information security incident response scenarios
Experience with Kafka, ELK, Graylog, etc
Strong Linux system administration experience
Expertise in network, host, and cloud-based analysis and investigation
A strong understanding of attack pipelines (MITRE ATT&CK Framework, Cyber Kill-Chain)
Familiarity with CI/CD, software development lifecycle, and Infrastructure-as-Code (Terraform/Ansible/etc)
Proficiency in automation (Bash/PowerShell, Python)
Experience with log collection, delivery, and normalization
Strong knowledge of open-source solutions for endpoint & infrastructure security, such as Audit.d, Sysmon, AppArmor, SELinux, etc
Fundamental static and dynamic malware analysis skills
Offensive experience (penetration testing, red teaming)
Main Advantages
Private health insurance
Sports benefits
Comprehensive Mental Health Program
Free English lessons (online)
Local language courses
Paid time off
Maternity leave support
Referral program rewards
Upskilling, internal workshops, and participation in professional conferences and corporate events
seniorZürich, CH
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
ГибридСША; 💹 401(k) Program with a 4% match (US Only); 🚗 Commuter Benefits (In-Office & US Only); We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds
Ħal Qormi QRM, Southern Region, Malta
United States, San Mateo, CA
ГибридSan Francisco, California; New York, New York
ГибридDublin, Ireland
ГибридMadrid, Spain; Collaborative and proactive, comfortable working asynchronously across time zones
leadKuala Lumpur, Malaysia
География найма не уточнена
УдалённоСША; Lastly, the provided range is the expected salary for candidates in the U.S