Location: Chicago, Illinois
Fin
, now part of Salesforce, is on a mission to help businesses provide perfect customer experiences.
Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey, from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk, giving modern support teams one single system.
Together with Salesforce, the #1 AI CRM, where humans with agents drive customer success, we're building the future of customer experience. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword, it's a way of life. The world of work as we know it is changing, and we're looking for Trailblazers who are passionate about bettering business and the world through AI.
Ready to level up your career at the company leading workforce transformation in the agentic era? You're in the right place. Agentforce is the future of AI, and you are the future of Salesforce.
What's the opportunity?
Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission.
Fin's Security Engineering team is unlike most security teams. We own and operate critical security services, build customer-facing security features, and partner with engineering teams to make secure development the default. We're engineers first; designing, building, and operating systems that protect Fin and its customers. The team owns and operates tier-zero services including authentication, SAML/SSO, teammate activity logs, malicious URL scanning, and other critical trust and security capabilities.
The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how products are designed, developed, and delivered. As Fin continues to expand its capabilities and adoption, you'll help shape how security evolves alongside some of the most ambitious AI-powered products in customer service. We're taking an AI-first approach to security, exploring areas such as AI-powered detection, red-team automation, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape.
What will I be doing?
Own and engineer tier-zero security capabilities that help customers securely deploy and manage Fin.
Design, build, and evolve customer-facing security features, including authentication, SAML/SSO, permissions systems, audit and activity logging, malicious URL scanning, and other enterprise security controls.
Partner with engineering teams throughout the software development lifecycle to build secure products and services.
Perform architecture reviews, threat modelling exercises, and security assessments for new features and systems.
Build security tooling, automation, and developer-facing building blocks that make secure development easier and more scalable.
Contribute to secure development standards, guidance, and best practices across Fin.
Lead application security initiatives across the software development lifecycle, helping teams identify and address security risks early.
Participate in a shared on-call rotation and lead security incident response, investigation, and remediation efforts.
Drive security initiatives from problem definition through design, implementation, and measurable outcomes.
Partner with teams building AI-powered products to assess and mitigate emerging security risks.
Help shape Fin's AI-first approach to security, including AI-powered detection, red-team automation, continuous monitoring, and emerging defensive capabilities.
Support the secure adoption of AI-assisted software development tools and engineering workflows.
What skills do I need?
Proven application security, product security, or security engineering experience within a SaaS environment.
Strong software engineering skills with experience designing, building, and operating production systems.
Deep understanding of modern application security threats, secure software development practices, and threat modelling.
Experience designing, building, or securing authentication, authorization, identity, or enterprise security capabilities.
Experience conducting architecture reviews and security assessments for complex systems.
Hands-on security incident response experience, including leading investigations and remediation efforts.
Strong programming skills and experience building tools, automation, or developer-focused solutions.
Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness.
Ability to communicate security concepts clearly and collaborate effectively with engineering teams.
A pragmatic approach to balancing security, customer impact, and engineering velocity.
Bonus skills & attributes
Experience building or owning authentication, SAML/SSO, identity, or access management capabilities.
Experience securing AI-powered products or familiarity with security considerations for large language models, agentic systems, retrieval-based architectures, or AI tool integrations.
Experience building security automation or security-focused platform capabilities at scale.
Familiarity with cloud security, infrastructure security, or distributed systems.
Experience working across both large-scale SaaS environments and high-growth companies.
*Proof of eligibility to work in the United States is required.
The base salary range for candidates within the Greater Chicago Area is [$190,000 - $210,000]. Actual base pay will depend on a variety of factors such as education, skills, experience, location, etc. The base pay range is subject to change and may be modified in the future. All regular employees may also be eligible for the corporate bonus program or a sales incentive (target included in OTE) as well as stock in the form of Restricted Stock Units (RSUs).
#LI-Hybrid
Unleash Your Potential
When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.
In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. At Fin, we want to give people what they need to do the best work of their careers. Our benefits and programs are designed to support your health and wellbeing, your family, your time away from work, and your financial future. Offerings vary by location in line with local practices and requirements. Learn more about working at Fin and the benefits we offer at
fin.ai/careers
. Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.
Policies
Fin has a hybrid working policy. We believe that working in person helps us stay connected, collaborate easier and create a great culture while still providing flexibility to work from home. We expect employees to be in the office at least three days per week.
We have a radically open and accepting culture at Fin. We avoid spending time on divisive subjects to foster a safe and cohesive work environment for everyone. As an organization, our policy is to not advocate on behalf of the company or our employees on any social or political topics out of our internal or external communications. We respect personal opinion and expression on these topics on personal social platforms on personal time, and do not challenge or confront anyone for their views on non-work related topics. Our goal is to focus on doing incredible work to achieve our goals and unite the company through our
core values
.
Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination.
Know your rights: workplace discrimination is illegal.
Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.
Location: Saudi Arabia - Remote
Who is Tenable?
Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!
What makes Tenable such a great place to work?
Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!
Your Role:
Saudi organisations are moving fast on digital transformation, and scanning for vulnerabilities is now only the starting point. As Commercial Territory Manager, you will own Tenable's new business across the Kingdom's commercial market and help customers move to Continuous Exposure Management. You will sell the Tenable One platform across IT, cloud, identity and operational technology (OT), working with tier-one channel partners and a close-knit Saudi team. If you want a territory you can run like your own business, with a market-leading platform behind you, this is that role.
Your
Opportunity:
Your mandate is to build a strong new-business pipeline across Saudi Arabia and become the trusted risk advisor that customers call first.
Open up the Kingdom's commercial market:
Build and run a territory plan for commercial accounts across Saudi Arabia.
Arrange and hold three to four customer and prospect meetings a day, mostly face to face.
Use Tenable's AI tools to find high-intent accounts and spend less time on admin.
Move customers from scanning to exposure management:
Lead consultative conversations on Tenable One, showing how AI-driven insight cuts business risk.
Bring IT and OT security together for manufacturing and energy customers.
Link risk across identity, cloud and industrial systems in terms a CISO and a CFO both value.
Make the channel your multiplier:
Work with MSP and VAR partners to find opportunities and give every new customer value from Day 1.
Support your Saudi teammates with account insight and cover. The team wins together.
What You'll Need:
2+ years selling B2B SaaS in cybersecurity or cloud infrastructure, with a record of meeting targets.
Experience working with channel partners such as MSPs, VARs or distributors.
Solid pipeline management and forecasting.
Fluent English and Arabic.
Based in Riyadh, working hybrid, and happy to travel across the Kingdom to meet customers in person.
Enough technical curiosity to discuss identity, cloud security and Zero Trust with credibility.
Resilience under pressure and a team-first attitude. You listen closely and build trust before you pitch.
Why Tenable in 2026?
Growth without the Burnout: We look for people who want to win, but we value sustainable high performance. We provide the tools and the autonomy for you to run your territory like your own business.
Market Leader: We are recognized as the global leader for AI-Powered Exposure Assessment.
Innovation: Work with a portfolio that includes Tenable One, Tenable Cloud Security, and our industry-leading OT Security suite.
Impact: Help secure the critical infrastructure of some of the most innovative and digitally-dependent nations on earth.
Interview Process
Recruiter Interview – 1st Stage - Virtual
Hiring Manager Interview – 2nd Stage - Face to Face
Panel Interview - 3rd Stage - Face to Face
Exec Level Call - Final Stage - Virtual
#LI-JG1
#LI-Remote
We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact
Recruiting@Tenable.com
for further assistance.
Tenable Data Consent Statement
Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you:
General Applicant Privacy Notice
California Applicant Privacy Notice
EU/EEA/UK Applicant Privacy Notice
Location: Remote, Israel; Remote, Poland; Remote, United Kingdom
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Threat Research Engineer, you’ll take ideas from the first question to a working proof of concept, deploy it, and analyze the results yourself. This is a full-stack role, with AI central to how we work. You’ll build agentic workflows for research, analysis, and detection, and use AI tools every day to move faster.
What you’ll do
Research new attack surfaces and threat vectors, including AI coding agents, agent plugins, and package ecosystems.
Find and responsibly disclose vulnerabilities in open source projects and developer tools.
Analyze software supply chain incidents and events.
Build AI-powered workflows and agents that automate research, analysis, and detection.
Build and maintain the cloud-based systems behind our detection and advisory work.
Improve the quality and coverage of our vulnerability and malware advisories.
Write up your findings as blog posts and present them at conferences.
Take part in on-call or operational support where your team's ownership model requires it.
What you’ll bring
Hands-on security experience in research, malware analysis, penetration testing, or security tooling, with both a developer mindset and an adversarial mindset: you can build systems and think about how to break them.
Demonstrated experience using AI in real work, such as building with large language model APIs or agent frameworks like LangChain, LangGraph, or agent SDKs.
Strong programming skills in Go or Python, with good software engineering practices including testing, code review, continuous integration and continuous delivery, and maintainable code.
Experience deploying and running production services on a public cloud.
Understanding of how package ecosystems work and how software supply chain attacks happen.
Ability to map possible attack vectors, name trade-offs, and make data-driven decisions, balancing quality and speed with customer outcomes in mind while keeping up with security and AI industry trends.
Clear writing that explains findings to both engineers and a general audience.
Helpful, but not required: published vulnerability findings; security research on AI agents, large language model applications, or Model Context Protocol (MCP) servers; Google Cloud Platform experience; or infrastructure as code experience with Terraform or OpenTofu.
You don’t need deep knowledge of compilers or static application security testing engines. A high-level understanding is enough.
About the team
The
Threat Research group
researches security threats as they emerge and turns what we learn into protection for GitLab customers. We maintain the GitLab Advisory Database, which powers GitLab’s dependency scanning. We also build detection capabilities, do original vulnerability research, and publish what we find. Recent work includes the Shai-Hulud npm worm and a critical remote code execution vulnerability in Serena, a popular MCP coding agent. You can read more on the
Security Labs blog
.
The base salary range for this role’s listed level is currently for residents of the EU, applicable in the specified country or countries only. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location and having regard to any applicable collective agreements. The base salary range does not include bonuses, equity, or benefits.
Poland base salary range: 272,000 - 408,000 PLN
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: Kuala Lumpur, Malaysia
About Us
Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.
Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.
Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.
Key Responsibilities
Cloud Security Architecture and Hardening
Design, implement, and continuously strengthen security architectures across public cloud environments, including AWS, Tencent Cloud, Huawei Cloud, and Alibaba Cloud. Areas of focus include container isolation, Identity and Access Management (IAM), VPC network segmentation, and security policies.
Security Operations and Incident Response
Build and continuously improve cloud security monitoring and operations capabilities, including Security Information and Event Management (SIEM) and Cloud Security Posture Management (CSPM). Detect, investigate, and respond to security incidents, conduct root cause analysis and post-incident reviews, and drive remediation through to closure.
Infrastructure Security and Vulnerability Management
Assess and harden cloud compute instances, containers, cloud services, and supporting infrastructure. Develop and enhance host and cloud vulnerability scanning capabilities, and track remediation to completion.
Identity and Access Management
Design and maintain cloud IAM and Cloud Access Management (CAM) permission frameworks. Establish lifecycle management policies for credentials, including access keys and secret keys (AK/SK), API keys, and access tokens. Enforce least-privilege access and conduct periodic access reviews.
Compliance and Risk Management
Conduct regular security baseline assessments and risk assessments across cloud environments. Produce security compliance reports against industry standards such as CIS Benchmarks, and support internal and external security audits, compliance reviews, and remediation activities.
Security Standards and Technical Enablement
Develop and maintain cloud security policies, technical standards, and best-practice documentation. Provide security guidance, technical support, and training to engineering and operations teams to strengthen the organization’s overall cloud security capabilities.
Qualifications
A solid foundation in Linux systems administration, with a strong understanding of networking protocols such as TCP/IP, DNS, and TLS, as well as common network security principles.
Familiarity with major public cloud platforms, including AWS, Tencent Cloud, and Alibaba Cloud, with hands-on experience in cloud resource management, security configuration, or operations.
An understanding of cloud-native technologies and their security models, with familiarity with Docker, Kubernetes, microservices, serverless architectures, and associated security practices.
Familiarity with public cloud IAM/CAM frameworks, with practical experience in permission model design, account governance, key management, or least-privilege implementation.
An understanding of common cloud security threats and attack paths, including lateral movement, privilege escalation, server-side request forgery (SSRF), and abuse of the Instance Metadata Service (IMDS).
Experience in vulnerability scanning, risk assessment, or security tool integration. Hands-on experience deploying, integrating, and operating Tenable, Orca, or comparable solutions is preferred.
Experience managing north–south and east–west traffic, reducing exposed network boundaries, or designing and implementing zero-trust network architectures is preferred.
Strong security risk awareness, analytical and problem-solving skills, and effective communication and collaboration abilities, with a demonstrated ability to drive cross-functional security initiatives and remediation efforts to completion.
Why Join Us
At Bybit, we are committed to fostering a supportive and enriching work environment.
Our benefits include:
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.
Location: Almaty, Kazakhstan; Astana, Kazakhstan; Dnipro, Ukraine; Kharkiv, Ukraine; Kyiv, Ukraine; Lviv, Ukraine; Odesa, Ukraine; Remote.KZ, Kazakhstan
We are looking for a motivated Information Security Specialist Intern to support the InfoSec team with vulnerability management, risk assessments, compliance tasks, and security assurance activities while building practical cybersecurity experience.
This project gives you hands on exposure to core cybersecurity practices in a professional InfoSec team. You will contribute to vulnerability management, compliance support, and risk assessment activities while learning from experienced security specialists.
Support vulnerability management activities by reviewing scan results and tracking remediation
Follow up with system owners on remediation progress
Help prepare responses to client and vendor security questionnaires
Assist with risk assessments of tools vendors and internal processes
Help maintain security documentation including policies guidelines checklists and audit evidence
Support compliance activities such as SOC 2 by collecting and organizing audit evidence
Monitor security advisories and CVEs and help assess their relevance to the environment
Understanding of cybersecurity concepts including the CIA triad vulnerabilities threats risk and access control
Familiarity with networking operating systems and web application basics
Interest in security frameworks and standards including ISO 27001 SOC 2 NIST and OWASP
Good written and spoken English
Hands on experience with vulnerability scanners including Nessus OpenVAS or Qualys
Knowledge of CVSS and vulnerability prioritization
Basic scripting skills in Python PowerShell or Bash
Cloud basics in AWS Azure or GCP
Security certifications or courses such as Security+ CEH or similar
Location: Montevideo, Uruguay; Remote.AR, Remote.LATAM-country; Remote.CO, Colombia; Rosario, Remote.LATAM-country
We are looking for a hands on Middle MLE Infrastructure Engineer to strengthen a shared Data and AI platform. You will focus on execution across CI/CD standards, cloud resource management, identity and access security, observability, and reliable deployments that support other teams.
The Shared Services Platform organization builds and operates the core environment for Data and AI products. You will work on a platform that standardizes CI/CD, security, observability, and cloud resource management so product squads can deliver on reliable infrastructure.
Define and maintain homogeneous CI CD standards and pipelines for data and AI across teams.
Manage cloud resources, capacity, and cost through provisioning, autoscaling, and optimization.
Own identity and access management and centralized credential governance.
Automate security policies through infrastructure as code and SecOps practices.
Run vulnerability scanning and incident response playbooks.
Build observability through metrics, dashboards, and proactive alerting for platform and products.
Ensure reliable versioning and deployment standards across the platform.
Act as a platform enabler for product squads on environment and product infrastructure.
Proven experience as a Platform Engineer, DevOps Engineer, or MLOps Infrastructure Engineer.
Experience with infrastructure as code using Terraform and configuration automation.
Experience with Docker, Kubernetes, and autoscaling.
Experience with CI CD tooling such as GitHub Actions and GitLab CI.
Experience with Git workflows including GitFlow.
Experience with Google Cloud Platform resource management, GCP IAM, billing, and cost control.
Experience with observability tools such as Prometheus, Grafana, Datadog, or similar monitoring solutions.
Experience with IAM, vulnerability scanning, data masking, and policy management.
Ability to communicate effectively with technical and non technical stakeholders.
Experience working in Agile environments.
Fluency in Spanish.
Exposure to MLOps platforms, model registry, and model serving infrastructure.
Experience with FastAPI or Flask.
Familiarity with BigQuery, pipelines, and lakehouse or warehouse environments.
Familiarity with GenAI tooling such as LangChain and Agents.
Location: United States; Brazil; United Arab Emirates; Ireland; Peru; Sweden; Colombia; Argentina; Romania; Cyprus; Switzerland; Portugal; Lithuania; South Africa; Czech Republic; Canada; Hungary; Mexico; Chile; Poland; Spain; United Kingdom; Bulgaria
Workplace: Remote
BUILDING THE FUTURE OF OPEN FINANCE
Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.
THE TEAM
Bitnomial is building the next generation US-based global derivatives exchange, starting with digital assets and progressively expanding to encompass a full spectrum of commodities worldwide. Bitnomial operates a US CFTC regulated exchange (DCM), clearinghouse (DCO), and brokerage (FCM). It offers a range of crypto-settled derivatives, including futures, options, and a suite of live perpetual futures, used by brokers, hedge funds, institutions, and trading firms around the world.
Bitnomial's exchange, clearinghouse, and brokerage systems are written largely in Haskell. In this role you will build the services and data models that record every order, fill, and settlement at a CFTC-regulated exchange and clearinghouse, with the database as a first-class part of the design. You will build features across these systems and design the schema, queries, and migrations behind them.
THE OPPORTUNITY
- Improve build and release pipelines in GitHub Actions: caching, parallelism, pinned toolchains, and required tests and scans before production
- Manage AWS infrastructure as code with Terraform, and run services as containers on Nomad
- Build deployment tooling with health checks and automated rollback, and make deploys safe around market sessions
- Add metrics and alerts to the services you build, so you can see whether a deploy worked
- Monitor systems, respond to alerts, and support daily operations such as settlement cycles
- Fix the cause of production issues and write down what you learned
- Build, test, and ship well-reviewed features and fixes in our services across the exchange, clearinghouse, and brokerage. Most of the code is Haskell
- Understand the order, trade, clearing, and settlement flows end to end
WHAT YOU BRING
- Hands-on experience with CI/CD pipelines, such as GitHub Actions or GitLab CI
- Production experience with AWS and Docker, and infrastructure as code with Terraform
- Strong Linux and scripting skills (Bash, Python, or similar)
- 3+ years of professional software engineering experience with a functional or strongly typed programming language such as Haskell, Rust, or C++
- Solid computer science fundamentals, including distributed systems: failure modes, retries and idempotency, consistency, and how to observe them across services
- Willingness to take part in on-call and operational shifts
- Care and rigor with code that moves money
- Good judgment with AI tools. You use them to work faster, and you read, test, and understand what they produce before you ship it
- A habit of asking why before changing something
- Sound judgment under pressure, with a calm and methodical approach when production is live
- Collaboration across engineering, operations, risk, and compliance, with a habit of documenting
NICE TO HAVES
- Financial knowledge or experience in trading, markets, or financial services
- Bachelor's degree in computer science or a related field, or equivalent experience
- Experience with Nomad or Kubernetes
- Experience with Nix, Ansible, Vault, or Prometheus, Grafana, and Loki
- Haskell experience
Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.
Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.
We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.
OUR COMMITMENT
Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto.
We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision.
As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.
Stay connected
Follow us on X https://twitter.com/krakenfx
Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address
Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/
Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice
Location: PL
Workplace: remote
Overview:
Infrastructure engineering with security embedded across the entire technology stack, including CI/CD, Kubernetes, cloud environments, secrets management, and access control.
Key responsibilities:
Core
Responsibilities
Integrate security checks into CI/CD pipelines, including dependency, container image, Infrastructure as Code (IaC), and secret scanning
Harden servers, Kubernetes clusters, and cloud environments in accordance with CIS benchmarks
Manage secrets, certificates, and the PKI lifecycle using Vault
Manage access control (SSO, IAM, least privilege) and conduct regular access reviews
Track and remediate vulnerabilities, coordinating patching activities across development and infrastructure teams
Support security incident investigations, incident response, audits, and compliance activities
Enforce Kubernetes runtime and policy security, including RBAC, network policies, Pod Security Standards (PSS), and Kyverno/OPA
Infrastructure
Responsibilities
Set up and maintain production and staging infrastructure, including updates and incident resolution
Improve infrastructure setup and maintenance processes
Support and develop GitLab CI pipelines
Contribute to the design of complex IT systems
Collaborate with product development teams and stakeholders
Handle monitoring events, including periodic day and night on-call duties
Required Experience:
3+years of experience as a System Engineer, SRE, or DevOps Engineer
Solid Linux administration and troubleshooting skills
Experience with configuration management tools such as Ansible, SaltStack, Terraform, or Pulumi
Experience with Kubernetes and Helm
Experience configuring GitLab CI/CD pipelines
Experience with Anti-DDoS solutions, WAF, and WAAP (Cloudflare, Fastly, Akamai, etc.)
Experience with monitoring tools (Prometheus stack, Zabbix)
Strong understanding of information security fundamentals, including least privilege, defense in depth, network security, and TLS/PKI
Experience with secrets management solutions such as HashiCorp Vault or similar
Strong problem-solving skills
Higher technical education
English level B1+ and strong command of Russian
Main Advantages
Private health insurance
Sports benefits
Comprehensive Mental Health Program
Free English lessons (online)
Local language courses
Paid time off
Maternity leave support
Referral program rewards
Upskilling, internal workshops, and participation in professional conferences and corporate events
Location: Foster City, CA
Workplace: Hybrid
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
About the role:
We are looking for an Engineering Manager, Security to lead the teams that secure our cloud, our infrastructure, and the code we ship. You will manage two closely linked groups:
- Cloud & Infrastructure Security: engineers who own cloud security posture, configuration hardening, and infrastructure vulnerability management across GCP, AWS, and Azure, plus containers, Kubernetes, and SaaS platforms.
- Application Security & Secure SDLC: engineers who run our SCA, SAST, and IaC scanning programs, drive remediation with engineering teams, and deliver secure development training.
The core responsibility of this role is getting vulnerabilities fixed on time. You will partner with engineering teams across the company to drive remediation of cloud, infrastructure, and code findings within SLA, so that we consistently meet our compliance commitments (SOC 2, ISO 27001, PCI DSS, FedRAMP, and customer contracts). You will hire and grow a high-performing team, set the strategy and roadmap for vulnerability management from code to cloud, and make secure-by-default the easiest path for every developer. You will not run incident response yourself, but you need to understand it well enough to support the incident response team with context, prioritization, and follow-up fixes.
What You'll Do:
TEAM LEADERSHIP & STRATEGY
- Build, lead, and mentor a team of cloud security, infrastructure vulnerability management, and application security engineers; own hiring, career development, and performance management.
- Define the multi-year roadmap and quarterly OKRs for cloud security, vulnerability management, and Secure SDLC, balancing risk reduction against developer velocity.
- Set clear ownership, operating rhythms, and on-call/escalation processes across the team.
- Report on security posture, risk trends, and program metrics to engineering and executive leadership.
REMEDIATION & COMPLIANCE DELIVERY
- Own remediation SLAs by severity across cloud, infrastructure, container, and code findings, and make sure they map to our compliance obligations (SOC 2, ISO 27001, PCI DSS, FedRAMP, customer contracts).
- Partner with engineering managers and tech leads to plan, prioritize, and land fixes within SLA without stalling roadmaps.
- Run a regular remediation review with engineering leadership: open findings, SLA burn-down, upcoming SLA breaches, and owners.
- Manage the exception and risk-acceptance process: documented justification, compensating controls, expiry dates, and approvals.
- Build automated workflows that route findings to the right owning team, track them to closure, and escalate before SLAs are breached.
- Work with Compliance/GRC to produce audit-ready evidence of remediation timeliness, and lead the security side of external audits for vulnerability management controls.
- Track and report metrics such as SLA attainment, mean time to remediate, backlog age, and exceptions, by team and severity.
CLOUD & INFRASTRUCTURE SECURITY
- Lead infrastructure vulnerability management across cloud workloads, containers, registries, data stores, and platform services, from scanning and contextual risk triage to remediation workflows.
- Oversee configuration hardening and secure baselines across GCP (primary) and supporting AWS and Azure environments.
- Own the strategy for Cloud, Kubernetes, and Data Security Posture Management (CSPM, KSPM, DSPM) tooling; make sure findings are accurate, prioritized, and actionable.
- Secure critical SaaS platforms with sound configurations, access controls, and integrations.
- Partner with Platform and ML Infrastructure teams to secure multi-tenant and AI infrastructure.
APPLICATION SECURITY & CODE SCANNING
- Own the SCA, SAST, and IaC scanning programs end to end: tool selection, CI/CD integration, rule tuning, noise reduction, and developer experience.
- Drive software supply chain security, including dependency management, SBOMs, artifact signing, and progress through SLSA levels.
- Feed code-scanning findings into the central remediation workflow so they reach the owning team automatically and are tracked against SLA.
- Shift IaC security left so misconfigurations are caught in pull requests, before they reach production.
SECURE SDLC & DEVELOPER ENABLEMENT
- Define and run the Secure SDLC program: security requirements, threat modeling, secure design reviews, and release gates proportionate to risk.
- Build and deliver security training, including onboarding, role-based secure coding training, and targeted sessions driven by real vulnerability trends.
- Develop paved roads, secure defaults, and guardrails that make the secure path the easiest path for engineers.
- Grow a Security Champions network across engineering teams.
INCIDENT RESPONSE PARTNERSHIP & COLLABORATION
- Understand the incident response lifecycle well enough to support the IR team: supply asset, exposure, and vulnerability context, and help assess blast radius.
- Own follow-up remediation from incidents and postmortems that touch cloud, infrastructure, or code, and track it to closure.
- Feed incident learnings back into scanning rules, secure baselines, and developer training.
- Collaborate with Security Monitoring/Detection, Incident Response, Offensive Security, PSIRT, Architecture, DevOps, and Platform Engineering.
- Help communicate security advisories, best practices, and updates to customers.
- Tune into threat intelligence alerts to promptly manage patching of critical, exploitable vulnerabilities.
Required Skills & Experience:
- 8+ years in security engineering, cloud security, or DevSecOps, including 2+ years managing security engineers (or 3+ years as a tech lead with formal people-leadership responsibility).
- Deep, hands-on knowledge of cloud security in GCP plus working knowledge of AWS and/or Azure: IAM, networking, logging, org policies, and security services.
- Proven track record running vulnerability management programs at scale and driving remediation across many engineering teams to meet SLAs, across cloud infrastructure, containers, and application code.
- Hands-on experience with CSPM/CNAPP platforms (e.g., Wiz, Orca, Prisma Cloud, Lacework, GCP Security Command Center).
- Hands-on experience with SCA, SAST, and IaC scanning tools (e.g., Snyk, Semgrep, CodeQL, Checkmarx, Socket, Dependabot, Checkov, tfsec) and integrating them into CI/CD.
- Strong understanding of Kubernetes and container security, and Infrastructure-as-Code (Terraform or similar).
- Proven track record of building or maturing a Secure SDLC program, including developer security training.
- Ability to write and review code or automation (Python, Go, TypeScript, or similar).
- Strong understanding of how remediation SLAs and security controls map to compliance frameworks (SOC 2, ISO 27001, PCI DSS, FedRAMP, CIS, NIST), and experience producing audit evidence.
- Working understanding of security incident response in cloud-native environments, enough to partner effectively with IR and detection teams.
- Excellent communication skills, with the ability to influence engineering leaders and explain risk in business terms.
Bonus Qualifications:
- Experience securing developer platforms, multi-tenant SaaS, or AI/ML infrastructure.
- Experience with software supply chain frameworks (SLSA, Sigstore, SBOM standards).
- Experience building a Security Champions program or developer-facing security tooling.
- Experience leading the security side of external audits (SOC 2 Type II, ISO 27001, PCI DSS, or FedRAMP).
- Relevant certifications (e.g., CCSP, GCP Professional Cloud Security Engineer, OSCP, CSSLP), though not required.
Full-Time Employee Benefits Include:
💰 Competitive Salary & Equity
💹 401(k) Program with a 4% match (US Only)
⚕️ Health, Dental, Vision and Life Insurance
🩼 Short Term and Long Term Disability
🚼 Paid Parental, Medical, Caregiver Leave
🏝 Flexible Time Off (FTO) + Holidays
🚗 Commuter Benefits (In-Office & US Only)
📱 Monthly Wellness Stipend
🧑💻 Autonomous Work Environment
🖥 In Office Set-Up Reimbursement (In-Office Only)
🚀 Quarterly Team Gatherings
☕ In Office Amenities (In-Office Only)
Want to learn more about what we are up to?
- Self-driving Company https://replit.com/blog/self-driving-company
- Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale
- AI Adoption https://replit.com/blog/ai-adoption
- Build Open-Source Apps https://replit.com/build/open-source-app-builder
Interviewing + Culture at Replit
- Operating Principles https://blog.replit.com/operating-principles
- Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
Location: Mesa, AZ, USA
Bradken
is a global manufacturer of custom-engineered products and solutions for the resources sector. Our products operate in some of the toughest mining environments in the world, where performance, reliability, innovation, and practical engineering support are critical to customer success. We partner closely with some of the largest mining companies globally, delivering solutions that improve equipment performance, productivity, safety, and lifecycle value.
About The Role
We are seeking an
Applications
Engineer
to support the development, improvement, and customization of Bradken's mining equipment product lines, with a primary focus on
Crawler Systems for Electric Rope Shovels and Hydraulic Excavators
.
This is more than a traditional design engineering role. While strong mechanical design capabilities are fundamental, this position also requires engineers who are comfortable working directly with customers, participating in technical discussions, presenting solutions, and supporting product evaluations in the field.
You will collaborate across Engineering, Product Management, Manufacturing, Supply Chain, Sales, and end users to transform operational challenges into practical engineering solutions. The role offers excellent exposure to mining operations, customer problem-solving, and the performance of large-scale equipment operating in demanding environments.
Success in this role requires someone who enjoys both technical engineering work and customer interaction. You should be comfortable explaining technical concepts, presenting recommendations, gathering customer requirements, and building credibility through engineering expertise.
This is an outstanding opportunity for engineers who want to see their designs perform in real-world applications rather than working exclusively behind a desk.
While previous mining experience is beneficial, we are equally interested in candidates with strong machinery design fundamentals who are eager to learn the mining industry, develop product expertise, and immerse themselves in customer challenges and field applications.
Key Responsibilities
You will work across product design, reverse engineering, modelling, drafting, simulation, technical analysis, field evaluations and customer support activities.
You Will
Create and update 3D models, detailed drawings, and engineering documentation.
Support reverse engineering, product improvements, and new concept development.
Complete engineering calculations, analysis, simulations, and technical verification activities.
Collaborate with Manufacturing and Supply Chain teams to ensure designs are practical, manufacturable, and cost-effective.
Participate in customer discussions to understand operational requirements and technical challenges.
Present engineering solutions, product recommendations, and technical findings to both internal and external stakeholders.
Support field evaluations, product inspections, and site investigations.
Conduct visits to customer and manufacturing locations to gather data and support product performance reviews.
Capture specifications, product data, and design updates within Bradken's Product Lifecycle Management system.
Provide technical guidance to Sales, Operations, and Customer Support teams.
Contribute to safety, quality, continuous improvement, and product innovation initiatives.
This role is primarily office/shop-based with regular interaction with customers and operational teams. Travel to customer, mine, and manufacturing sites is expected.
What We're Looking For
Required Qualifications
Bachelor's Degree in Mechanical Engineering or equivalent.
Experience in mechanical design, product design, reliability engineering, or product development.
Strong proficiency in 3D CAD modelling, detailed drafting, and engineering analysis.
Experience working with manufactured products, design changes, and technical documentation.
Ability to collaborate effectively with engineering, manufacturing, commercial, and operational teams.
Strong verbal communication and presentation skills.
Current driver's license and ability to travel regionally.
Spanish language capability is highly preferred.
French language capability would be considered an asset.
Ideal Industry Backgrounds
We Are Particularly Interested In Candidates With Experience In
Mining equipment
Mobile equipment
Heavy industrial machinery
Material handling equipment
Construction equipment
Power generation equipment
Rotating equipment
Industrial manufacturing
Structural mechanical systems
Crushers, conveyors, processing equipment, or similar industrial products
Machinery Design Experience Is Strongly Preferred.
Candidates coming from industries involving large industrial equipment, heavy mechanical assemblies, mobile machinery, or power generation environments will likely find the strongest alignment with this opportunity.
While all engineering backgrounds will be considered, candidates whose experience is primarily focused on
building services, HVAC systems, commercial building design, or MEP consulting
may find the role less aligned due to the heavy equipment and industrial machinery focus of the position.
Technical Skills Valued
Experience with the following tools and technologies is highly regarded:
Siemens NX
ANSYS
Siemens Teamcenter PLM
3D Scanning Technologies
Product Lifecycle Management Systems
Finite Element Analysis (FEA)
Reverse Engineering Processes
Location & Work Authorization
This position is based in
Phoenix (Mesa), Arizona, USA
. Candidates must either be currently located within reasonable commuting distance of the Phoenix metropolitan area or be willing to relocate at their own expense.
Please note that
Bradken is unable to provide visa sponsorship or employment sponsorship for this position
. Applicants must have valid authorization to work in the United States at the time of application and for the duration of employment.
Bradken Benefits
A strong safety-first culture
Competitive salary and performance bonuses
Educational Assistance Program
Flexible work options
Global career opportunities
Learning & development support
Employee Assistance Program (EAP)
Paid parental leave and wellbeing initiatives
Why This Role?
This role offers a unique opportunity to combine
mechanical design engineering
,
customer engagement
, and
field exposure
within the global mining industry.
If you enjoy designing large-scale machinery, solving complex engineering challenges, presenting technical solutions, learning directly from customer operations, and seeing your work applied in some of the world's most demanding mining environments, this role will provide an exciting next step in your career.
If you are interested in joining a team that is making a significant impact in the industry, we invite you to submit your application, along with your resume and a concise cover letter outlining why this position aligns with your career aspirations.
Shortlisting for candidates will commence immediately.
Everyone has a story... become a part of ours!
How We Hire
About Our Screening Process:
As we work with teams around the world, time‑zone differences can make live screening challenging. To support a fair, consistent, and inclusive evaluation, we may invite candidates to complete a one‑way video screening at a time that suits them. If you require adjustments or an alternative format, we’re happy to discuss this.
Before commencing employment
, you will be required to complete a psychometric assessment and a pre-employment medical, including drug and alcohol testing.
WE RESPECTFULLY REQUEST NO APPROACHES FROM RECRUITMENT AGENCIES.
Bradken is an Equal Opportunity Employer. We are dedicated to fostering a diverse, inclusive, engaging, and flexible work environment for our employees, as we believe that remarkable outcomes arise when individuals are empowered to express their authentic selves in their work. All employment decisions will be based on merit, competence, performance, and business needs.
Location: Poland; Czechia; Bulgaria; Croatia; Romania; France
About Gramian
Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs.
About the Role
Our client is a Big4 Consultancy group that works with leading financial institutions on
AI-driven transformation, automation, advanced analytics, and financial crime prevention
. Their work spans intelligent fraud detection, AML/KYC modernization, autonomous workflows, enterprise AI platforms, and the secure industrialization of AI in highly regulated environments.
We are looking for an experienced
Security Architect
to lead the security approval and data-protection readiness of the solution. You will act as the main technical security contact with the client’s
CISO, data-protection, and country security teams
, covering cloud security, AI/LLM risk, penetration testing, secure data handling, and formal architecture approvals.
CONTRACT:
Contractor assignment, expected October 2026 – July 2027, with potential extension
COMMITMENT:
Full-time
LOCATIONS:
Central and Eastern Europe, EU-authorized, REMOTE
PROCESS:
Initial qualification followed by technical and client interviews
NOTES:
Fluent English is required.
Responsibilities
Review the end-to-end
security architecture
across identity, access, secrets, networking, data handling, and logging.
Ensure sensitive and personal data are handled securely and are not exposed through logs or operational tooling.
Prepare and drive formal
security architecture approval
and new-technology review processes.
Support security reviews covering
AI / LLM usage, web search, and new technology components
.
Coordinate penetration testing and follow up on remediation of findings.
Support the
Data Protection Impact Assessment (DPIA)
and AI model-risk review.
Define and agree data-handling principles with the client CISO, data-protection, and country security teams.
Review cloud and application security controls across Azure, Databricks, APIs, and supporting services.
Support secure delivery across development, testing, production, and country rollout environments.
Act as the primary security point of contact between engineering teams and client security stakeholders.
Requirements
Strong experience in
security architecture and approval processes
within large regulated organizations.
Strong hands-on knowledge of
Azure security
, including Entra ID, Key Vault, private endpoints, and Microsoft Defender.
Experience with
penetration testing, vulnerability management, and OWASP
practices.
Knowledge of
OWASP security risks for LLM / AI applications
.
Experience with
code and dependency scanning
using tools such as SonarQube, JFrog Xray, or similar.
Strong understanding of
GDPR, data protection, privacy, and secure handling of personal data
.
Experience working with CISO, security governance, privacy, and engineering teams.
Ability to communicate security risks and controls clearly to both technical and non-technical stakeholders.
Highly preferred: Experience in
insurance, banking, or other highly regulated environments
.
Location: Intellias
Meet your recruiter
Diana Meneses
diana.meneses@intellias.com
https://www.linkedin.com...
Vacancy details
Information Security
Security Engineer
Senior
United States
Remote
APPLY NOW
REFER A FRIEND
Dive deep into Digital! For 20 years Intellias has been developing top-tier digital solutions for the world’s leading companies, keeping them in line with the latest technology trends. Join in and provide innovations for the future!
What project we have for you
The Application Security Engineer maintains independence from the development teams, reporting to our Cybersecurity Business Analyst, but would spend most of their time working with the Dev and DevOps teams. Their focus would be:
Implementing and configuring SAST (static application security testing) and DAST (dynamic application security testing) across our web properties, including TOA, APIs, AFB, and the Project One stack.
Integrating security checks into our CI/CD pipelines.
Working with the teams to ensure secrets are handled securely and building rotation practices in line with our policies and standards.
Helping teams understand, prioritize, and remediate the findings these tools produce.
What you will do
Select, deploy, and tune SAST tooling across our repositories, integrating scans into pull requests and CI/CD pipelines with practical quality gates.
Implement and operate DAST scanning against our web applications and APIs in staging and production-like environments.
Add software composition analysis and dependency scanning to track vulnerable open-source components.
Reduce false positives and alert fatigue through rule tuning, baselining, and severity thresholds so developers trust the results and act on them.
Recommend and implement secrets management solutions and practices that align with our existing policies and standards for storing, distributing, rotating, and auditing secrets.
Deploy secret scanning in repositories, commit hooks, and pipelines to catch hardcoded credentials before they ship, and partner with DevOps to remove long-lived credentials from pipelines, configurations, and infrastructure-as-code.
Lead the response when secrets are exposed: revoke, rotate, assess impact, and fix the root cause.
Triage findings from scanners, penetration tests, external reports, and internal reviews, prioritizing by exploitability, exposure, and business impact rather than raw severity scores.
Work directly with developers and DevOps engineers to understand root causes, propose practical fixes, and agree on realistic remediation timelines.
Track findings to closure in the teams’ existing workflow tools, and define and enforce remediation SLAs by severity.
Identify recurring vulnerability patterns and address them at the source through shared libraries, secure defaults, and pipeline guardrails.
Perform manual code reviews and targeted security testing on high-risk features such as authentication, file uploads, and APIs.
Provide clear, actionable remediation guidance with code-level examples, and contribute to secure coding standards aligned to OWASP Top 10 and ASVS.
Participate in design and architecture discussions to provide security input and threat modeling for new features and services.
Build the roadmap, processes, and tooling strategy for a new application security function, including build-versus-buy recommendations and vendor evaluations.
Define and report application security metrics to security leadership, such as scan coverage, mean time to remediate, and open critical and high findings.
Support audit and compliance requirements related to secure development, and contribute to incident response for application-layer security events.
What you need for this
Required Qualifications:
BA/BS in Computer Science, Information Technology, Cybersecurity, or a related field, with 5+ years of experience in application security, product security, or a security-focused engineering role, or equivalent practical experience.
Hands-on experience deploying and operating SAST and DAST tools in CI/CD pipelines, including tuning them for accuracy.
Experience implementing secrets management and secret scanning in a production environment.
Strong knowledge of web application vulnerabilities (OWASP Top 10, CWE Top 25) and how to remediate them in code.
Working knowledge of authentication and identity management workflows and protocols (e.g., SAML, OAuth 2.0, OpenID Connect, SSO, session management) and the common security flaws in how they are implemented.
Ability to read and review code in at least one modern language (e.g., Python, JavaScript/TypeScript, Java, C#, Go).
Working knowledge of CI/CD platforms (e.g., GitHub Actions, GitLab CI, Jenkins) and DevOps practices.
Demonstrated experience working with developers to fix security issues, not just report them.
Preferred Qualifications:
Experience building or significantly maturing an application security program from scratch.
Experience with threat modeling methodologies such as STRIDE or PASTA.
Experience with cloud and container security (e.g., Microsoft Azure, AWS, or GCP; Docker and Kubernetes).
Experience with infrastructure-as-code security scanning and API security testing.
Experience evaluating security tooling, including build-versus-buy decisions.
Familiarity with security compliance frameworks such as SOC 2, and with supply chain security concepts such as SBOMs and SLSA.
Relevant certifications such as GWAPT, OSWE, CSSLP, or equivalent.
Skills & Competencies:
Strong systems thinking, with the ability to embed security controls into engineering workflows without slowing teams down.
Sound judgment to prioritize findings based on real risk and to explain trade-offs to both engineers and leadership.
Excellent written and verbal communication, with the ability to produce clear, actionable remediation guidance and documentation.
Collaborative, pragmatic approach to influencing teams without direct authority.
Ability to move effectively between hands-on technical work and program-level planning.
Ability to work independently and drive initiatives through ambiguity in a function that is new to the organization.
What it’s like to work at Intellias
At Intellias, where technology takes center stage, people always come before processes. By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That’s why we offer a range of benefits that support your well-being and charge your professional growth.
We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer. All applicants will be considered for employment without discrimination based on race, color, religion, age, gender, nationality, disability, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by applicable law.
We welcome and celebrate the uniqueness of every individual. Join Intellias for a career where your perspectives and contributions are vital to our shared success.
Location: Warsaw, Mazowieckie, Poland
X-FLOW
is a mobile game development company established in 2018. We gained recognition after the release of
Happy Color
, the most popular digital coloring book and one of the most successful ad-driven mobile apps in the world.
We are looking for a
Software Development Engineer in Test (Back-End)
to join our team. We need a skilled Engineer who can design, develop, and maintain reliable automated testing solutions, improve test coverage, and help ensure the quality and stability of our products.
We are looking for someone who is particularly strong at developing automation frameworks, creating and maintaining automated test scripts, identifying potential issues, and integrating automated tests into CI/CD pipelines. At the same time, we expect a solid understanding of software testing principles, programming fundamentals, and the entire quality assurance lifecycle, along with the ability to collaborate closely with developers and QA engineers to continuously improve our testing processes.
Key Responsibilities:
Design, develop and maintain test frameworks (backend, load and chaos testing), including setting standards and best practices.
Integrate testing and static analysis into CI/CD pipelines (linters, code style and security checks, dependency scanning) and maintain stable quality gates.
Review development code and apply white-box testing to improve code quality and testability.
Design, develop and maintain observability standards and shared libraries (logging, tracing, metrics, profiling), including setting best practices and onboarding guidelines for product teams.
Work closely with development and DevOps/SRE teams to reduce test and quality debt, improve testability of services, and enhance developer experience (DX) through fast feedback loops
Requirements:
5+ years in QA Automation, including 5+ years of backend development or testing with Go, Python or JavaScript.
Experience building test frameworks from scratch using best practices, with a solid understanding of layered architecture for both backend services and test frameworks.
Experience with REST/gRPC API testing, working with schemas (OpenAPI/Swagger, Protobuf) and client generation.
Hands-on experience with log analysis, load test result analysis, profiling and troubleshooting performance issues using observability tools (logs, metrics, tracing).
Experience with GitLab CI, artifact management, sharding/parallelism, retries and pipeline containerization.
Experience with Docker and Kubernetes (k8s); familiarity with basic AWS services for test environments.
Experience using AI tools in development and testing, including creating skills and workflows for AI agents.
Russian - C1 level.
What We Offer:
Competitive salary and benefits package.
Opportunity to work with a talented and passionate team in a creative and dynamic environment.
Flexible working hours and remote/office work options.
Career growth and professional development opportunities.
A fun and inclusive company culture that celebrates diversity and creativity.
Join us and let’s create great content together!
When you apply for this role, we process your personal data in accordance with our Candidate Privacy Notice
(
https://xflowgames.com/candidate-privacy-notice
).
Saudi Arabia - Remote
УдалённоThe base salary range for this role’s listed level is currently for residents of the EU, applicable in the specified country or countries only
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
УдалённоUnited States; Brazil; United Arab Emirates; Ireland; Peru; Sweden; Colombia; Argentina; Romania; Cyprus; Switzerland; Portugal; Lithuania; South Africa; Czech Republic; Canada; Hungary; Mexico; Chile; Poland; Spain; United Kingdom; Bulgaria; We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance
India - Remote
seniorCanada - Remote; United States - Remote
Canada - Remote
United States - Remote
seniorUnited Kingdom - Remote
ГибридСША; 💹 401(k) Program with a 4% match (US Only); 🚗 Commuter Benefits (In-Office & US Only); We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds
Mesa, AZ, USA
УдалённоPoland; Czechia; Bulgaria; Croatia; Romania; France
Автоотклики