Location: Metn, Lebanon
The Company
Toters is an on-demand e-commerce and delivery platform that enables customers to get anything in their city with the highest level of convenience.
At Toters, technology is at the heart of everything we do. Our product teams build features that simplify customers’ lives, while our engineers create scalable solutions to deliver faster and more cost-effectively. If you thrive in a high-growth startup environment and want to help reshape how people shop across the Middle East, join us.
Role Overview
As a Senior Offensive Security Engineer (L5), you will own complex offensive security initiatives that span multiple teams. You will lead advanced penetration testing, red team exercises, and adversarial simulations to uncover systemic weaknesses in our web applications, APIs, mobile apps, cloud infrastructure, identity, payment-adjacent flows, and overall attack surface.
You will act as a
hands-on technical leader
: influencing secure design decisions with evidence, mentoring mid-level and junior offensive engineers, and driving improvements that meaningfully reduce risk.
Description
In this senior role, you will take end-to-end ownership of offensive security efforts with a focus on high-impact outcomes. Your responsibilities include:
Lead comprehensive penetration tests and red team / assumed-breach exercises targeting web applications, APIs, mobile applications, cloud infrastructure, and authentication systems (including identity and privileged-access paths).
Lead mobile offensive testing on Android and iOS, including evaluation and bypass/validation of runtime protection, tamper resistance, certificate pinning / Certificate Transparency, and key/secret shielding using DexProtector or similar RASP / app-shielding tools, plus complementary tooling such as MobSF.
Perform in-depth threat modeling and identify complex attack paths across services and trust boundaries (including authorization flaws, tenant isolation, token/session issues, edge/WAF bypass, and client-secret exposure).
Deliver high-quality security assessment reports with clear risk ratings, business impact analysis, practical remediation guidance, and evidence quality that engineering and audit stakeholders can use in a SOC 2 and PCI DSS context—then re-test and validate fixes before closure.
Collaborate with Engineering, DevOps, Product, and the Security Engineer track to influence secure architecture decisions and ensure vulnerabilities are addressed at the root cause.
Develop and improve offensive security methodologies, tools, and automation to increase efficiency and coverage. AI-assisted testing is a must.
Mentor mid-level and junior offensive security engineers, conduct offensive-focused code/design reviews, and help raise the overall security capability of the team.
Participate in purple team exercises with the detection and incident response teams to improve defenses based on real attack simulations.
Stay at the forefront of offensive security research, emerging threats, and TTPs, and assess their relevance to Toters.
Contribute offensive input to security standards, policies, and secure development practices across the engineering organization (you advise; you do not own policy issuance or GRC evidence packs).
Support structured disclosure (VDP / researcher reports) through reproduce, rate, de-duplicate, and validate.
Key Qualifications
Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
6+ years of hands-on experience in offensive security, penetration testing, or red teaming.
Strong expertise in web application, API, and mobile security testing (Android and iOS).
Working knowledge of DexProtector or similar mobile shielding / RASP tooling: what it protects, how testers evaluate residual risk, and how to validate that hardening holds.
Advanced proficiency with offensive security tools (Burp Suite, Metasploit, Cobalt Strike or equivalent adversary-emulation platforms, custom tooling, etc.).
Proficient in writing robust, reusable scripts and small tools for automation (Python preferred, Bash for quick tasks).
Solid experience with cloud security testing (AWS preferred) and infrastructure attack techniques.
Proven ability to lead complex security assessments from scoping to reporting and remediation validation.
Strong risk assessment and threat modeling skills, with the ability to communicate technical risks clearly to both technical and non-technical stakeholders.
Familiarity with SOC 2 and PCI DSS as they apply to offensive work (scoped pentests, application/API/payment-adjacent testing, evidence-quality reporting). This role does not own control design or audit evidence collection.
Experience mentoring engineers and influencing cross-team security practices.
Excellent written and verbal communication skills in English.
Nice to Have
Industry-recognized certifications such as OSCP, OSCE, OSEP, CRTO, or PNPT.
Experience running full-scope red team or assumed-breach exercises.
Experience developing custom exploits, tooling, or automation for offensive security.
Knowledge of MITRE ATT&CK and adversary emulation.
AI and AI pentesting: testing LLM/agent applications (prompt injection, tool/plugin abuse, data-exfil via agents) and using AI-assisted pentest workflows with mandatory human review.
Previous experience in high-scale e-commerce, delivery, or fintech environments, including payment API / tokenization / third-party PSP testing as a tester (not as PCI control owner).
Fluency in Arabic and English (French is a plus).
What We Offer
Competitive compensation package.
Discounts on Toters orders.
First-class medical insurance.
Ready to own offensive security at scale and help build a safer platform for millions across the Middle East? Apply now!
Location: US - Remote - California - Bay Area, MA - Boston - Office , US - Headquarters - Maryland - Columbia
Who is Tenable?
Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!
What makes Tenable such a great place to work?
Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!
Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc
Your Role:
Tenable is seeking a Principal Solutions Architect to drive the technical depth and strategic impact of our AWS GTM partnership. This is a high-visibility, field-facing role sitting at the intersection of partner engineering (co-build), co-sell execution, and AWS ecosystem strategy. You will be the primary technical voice for the AWS alliance — enabling Tenable field SEs and AWS SA’s globally, advancing joint go-to-market motions with AWS, and shaping how Tenable's exposure management platform is positioned alongside AWS-native services and marketplaces.
This is a backfill of an established Principal-level seat with deep internal and external stakeholder relationships already in place. The right candidate will be technically rigorous, comfortable operating at an executive level, executing against key goals and KPIs and energized by the complexity of partner-led sales motions.
Your Opportunity:
Serve as Tenable's primary technical liaison to AWS — building and maintaining relationships with AWS Partner SAs, Technical Account Managers, and the Amazon Bedrock team.
Own and lead the AWS technical enablement plan — Be the “connective tissue” evangelizing, designing and delivering structured enablement programs for Tenable field SEs (TFCs) and AWS customer-facing SAs, ensuring both sides of the co-sell motion are technically aligned on Tenable solutions and joint architectures.
Drive AWS competency application workstreams, including design wins, technical validation, documentation, and cross-functional coordination.
Apply strong program management discipline across all partnership workstreams — owning milestones, owners, and deliverables for enablement programs, competency applications, co-sell pipeline, and executive reporting cycles.
Support and advance the AWS Marketplace and co-sell motion — including Salesforce-tracked pipeline, PRM tagging, and opportunity hygiene with field co-sell teams.
Contribute to the strategic narrative around Tenable and AWS AI/agentic architectures, including integrations with Amazon Bedrock and agentic frameworks.
Produce executive-facing reporting and synthesize partnership activity across Zoom transcripts, meeting notes, Slack, and CRM data.
Collaborate with field marketing on AWS-focused demand generation, EBC planning, and joint event participation.
Develop and maintain technical assets: architecture diagrams, integration guides, demo environments, and partner-facing solution briefs.
Support VP-level escalations and executive briefings when partner commitments or timelines are at risk.
Drive AWS Marketplace technical strategy and tactics, such as PRM, ties to ACE and developing AI co-sell.
Success in the First 90 Days
30 days: Has established working relationships with the Tenable Alliance Director, key AWS Partner SAs and internal co-sell and SE stakeholders; has a clear view of the current competency application status and active co-sell pipeline.
60 days: Is delivering enablement sessions to field SE teams and contributing to executive-facing reporting cycles independently.
90 days: Has a credible point of view on gaps in the current partner motion and a prioritized plan for closing them — including AWS Marketplace coverage, SA enablement pipeline, and technical asset gaps.
Develop, shape and approve 90 day plan along with the Technical Alliance Director, through end of year.
What You'll Need:
7+ years of experience in Solutions Architecture, Partner Engineering, or Technical Alliances — with at least 3 years in a cloud or SaaS context.
Deep, demonstrable AWS expertise across compute, networking, identity, security services, and marketplace mechanics. AWS Solutions Architect Associate or Professional certification strongly preferred.
Experience working within or alongside a cloud provider's partner ecosystem (AWS, Azure, or GCP) — including co-sell motions, competency programs, or marketplace integrations.
Strong project management skills — demonstrated ability to run multiple concurrent workstreams with clear milestone tracking, stakeholder accountability, and on-time delivery across cross-functional teams.
Strong communicator capable of tailoring technical depth to field SE audiences, AWS partner contacts, and VP/C-suite stakeholders alike.
Comfortable leveraging AI tools (e.g. generative AI assistants, AI-powered research and productivity tools) to accelerate work across enablement, documentation, and reporting.
Familiarity with CRM/Salesforce pipeline workflows and partner relationship management tooling.
And Ideally:
Experience with agentic AI architectures, LLM integrations, or Amazon Bedrock — either technically or as a go-to-market motion.
Background in cybersecurity — particularly vulnerability management, cloud security posture, or exposure management.
Familiarity with Tenable products (Tenable One, Tenable.io, Nessus) or competitive landscape.
Prior experience building or maintaining AWS Competency applications and achieving joint design wins.
#LI-MS1
#LI-Hybrid
This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs.
US Pay Range
$175,000
—
$233,666.67 USD
We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact
Recruiting@Tenable.com
for further assistance.
Tenable Data Consent Statement
Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you:
General Applicant Privacy Notice
California Applicant Privacy Notice
EU/EEA/UK Applicant Privacy Notice
Location: United States or Canada- Remote
MEET CASA
Casa
is the secure home for your bitcoin. We’re the leading provider of Bitcoin self-custody solutions, the ultimate blend of security, privacy, and control. Our team combines deep security expertise, human-focused design, and exceptional customer service to empower our clients and build lifelong relationships.
THE ROLE
Casa is looking for a DevSecOps Engineer to help secure our customers, their data, and our company. As a member of our Security team, you will report to our Chief Security Officer and play a crucial role in overseeing our security architecture and culture. It will also be a unique opportunity to help develop an evolving security program consisting of efficient processes, training materials, and methodologies for all employees.
The successful candidate has experience developing scalable security controls and approaches in accordance with industry standards.
Compensation: $125,000-155,000 USD
WHAT YOU'LL DO:
Handle internal security requests and make sure employees have the tools and access they need without over-provisioning
Ensure that employees have access to the tools and systems they need while maintaining least privilege access principles
Onboard and offboard employees across internal systems
Oversee our MDM system and stay on top of alerts
Review and assess new technologies (tools, code frameworks, third-party providers, internal apps) through a security lens
Help shape and refine security best practices across the org
Triage and work through vulnerabilities surfaced by pen testing, static analysis, responsible disclosures, and automated alerts
Keep security documentation and training materials fresh and useful
Automate security processes and alerts wherever you can find the leverage
Participate in a shared on-call rotation for critical production security issues
Stay abreast of the latest security events and trends
Participate in regular security training and certification acquisition
Ensure our software development lifecycle remains secure as we continue to evolve its processes.
Write infrastructure-as-code to automate deployment and management using Terraform, Ansible, or similar tools
Stay current on emerging threats, security trends, and what's happening across our stack and industry
Investigate and resolve infrastructure incidents to keep things running smoothly
WHO YOU ARE:
You have security certifications or equivalent real-world experience
You think like an attacker, and a hacker mindset is genuinely how you approach problems
Deep background across multiple facets of security
5+ years implementing security in Linux-based infrastructures, AWS, and code
Comfortable with open-source tooling, cloud environments, and multiple operating systems
Experience building security solutions that actually scale
Hands-on with one or more of: penetration testing, threat modeling, code analysis, system hardening, distributed patching, vulnerability scanning
Familiar with hardening AI tooling to prevent security incidents
Strong communicator who can present findings to both technical and non-technical audiences
Bonus points for experience or genuine interest in cryptocurrency / cryptography
WHY CASA?
At Casa, our mission is to empower individuals to secure their digital sovereignty, and
we empower our employees to do their best work.
Ownership.
Private key management is the beginning of a future you can truly own, and at Casa, everyone has a role. We offer equity opportunities so our employees can benefit from what we are building together
Community.
Inclusivity is important to us.
We value each other and our contributions. Our team, known as the Casa Space Fleet, brings out the best in everyone while having plenty of fun along the way
Rest and Relaxation
. We believe in the power of personal time, so we offer as much flexible time as you need. We encourage you to take at least 3 weeks off a year
Health Benefits.
We provide medical coverage with FSA options, dental, vision, and access to mental health providers
Setup for Remote Success.
Our team is both decentralized and effective. We reimburse up to $400 for anything you need to set up your home office
Investment Avenues
. We partner with resources so you can invest a portion of your paycheck in Bitcoin, and we also have the more traditional 401(k) option
Maternity/Paternity Leave
. We provide 12 weeks for maternity / 4 weeks for paternity
*As Casa is a fully remote company hiring candidates around the world, our perks and benefit packages may adjust based on your location
Casa is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, veteran status, genetic data, or other legally protected status
Location: Canada
Workplace: remote
ABOUT YOU
We're looking for a Staff Engineer to join our Identity & Access Management (IAM) platform team. This is an individual contributor role with outsized technical scope: you'll be the technical anchor for how Xsolla builds secure, high-scale auth infrastructure — setting direction, making hard architectural calls, and raising the bar across the org.
You will own the strategy behind authentication, authorization, and session management at scale, and evolve our OAuth 2.0 / OIDC flows and token lifecycle to meet both product and compliance needs. You operate with significant autonomy, but your decisions ripple across teams — so you'll spend real time building buy-in with engineering and security stakeholders, not just designing in isolation.
You are technically deep, calm under pressure, and comfortable being the escalation point when production IAM issues get hard. You write the RFCs and design docs that people actually read, and you create leverage for the broader engineering org through documentation, tooling, and mentorship — without needing a management title to do it.
ABOUT US
Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.
For more information, visit xsolla.com.
Responsibilities
Own IAM Architecture & Strategy
— Own the technical strategy and architecture of our IAM platform, covering authentication, authorization, and session management at scale.
Design Auth Protocols
— Design and evolve our OAuth 2.0 / OIDC flows, token lifecycle, and security primitives to meet both product and compliance requirements.
Drive Cross-Team Technical Decisions
— Drive decisions on protocol design, data modeling, and platform reliability, and build buy-in across engineering and security teams.
De-Risk Proactively
— Identify systemic risks and performance bottlenecks; lead initiatives to resolve them before they become incidents.
Set Engineering Standards
— Define engineering standards, review critical code and designs, and create leverage for the team through documentation, tooling, and mentorship.
Align with Stakeholders
— Collaborate with product, security, and infra teams to align on roadmap and translate business needs into well-scoped technical plans.
Own Production Escalations
— Serve as the go-to escalation point for complex production issues in the IAM domain.
Requirements
Identity & Security
OAuth 2.0 / OIDC Depth
— Deep understanding of OAuth 2.0, OIDC, and related auth flows: authorization code + PKCE, client credentials, device flow, token introspection, refresh strategies.
Web Security Fundamentals
— Solid grasp of cookie security, CSRF, XSS, token storage, TLS, and secure session management.
Production IAM Experience
— Experience designing or operating production-grade IAM or auth systems.
Domain Context
Gaming Industry Experience
— Experience working in the video game industry, building or operating platforms for game developers, publishers, or players.
Backend Engineering
Go Engineering
— Strong Go (Golang) engineering skills: idiomatic code, concurrency patterns, performance profiling.
Distributed Systems
— Experience with distributed systems and their trade-offs (consistency, availability, failure modes).
Data & Infrastructure
PostgreSQL
— Schema design, query optimization, migrations at scale.
Kubernetes
— Deploying, operating, and debugging services in a k8s environment.
Message Streaming
— Kafka or NATS — event-driven patterns, consumer groups, at-least-once delivery.
Git & CI/CD
— Git and modern CI/CD practices.
Leadership
Cross-Team Initiative Leadership
— Proven ability to lead multi-quarter technical initiatives across teams.
Architectural Influence
— Track record of influencing architecture and standards beyond your immediate team.
Written & Verbal Communication
— You write RFCs and design docs that people actually read.
Nice to Have
Hands-on experience with the Ory ecosystem (Hydra, Kratos, Keto) — operating it in production or building on top of its APIs
Experience with CockroachDB or other distributed SQL databases (multi-region deployments, clock skew handling, survivability trade-offs)
Familiarity with compliance requirements relevant to IAM: SOC 2, ISO 27001, GDPR data minimization, audit logging
Contributions to open-source security or identity projects
Experience building or integrating with SCIM, SAML, or enterprise SSO (LDAP / Active Directory)
Background in platform or infrastructure engineering — building systems other engineers build on top of
Hands-on, up-to-date experience with modern AI tools (e.g. Claude, Copilot, Cursor) for code generation, review, and accelerating day-to-day engineering work
Benefits:
We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play.
Equal Employment Opportunity Statement:
Xsolla is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or any other characteristic protected by law. We consider qualified applicants with criminal histories in accordance with the Fair Chance Act.
Criminal History Consideration:
For the Staff Engineer, we will conduct a background check that may include the following:
Criminal history check
Employment verification
Education verification
Relevance to Job Responsibilities:
The background check is relevant to this position because of the following role responsibilities:
Working with vulnerable populations
Accessing confidential company data
Ensuring compliance with regulatory requirements
Rights Under the Fair Chance Act:
Applicants are encouraged to inquire about their rights under the Fair Chance Act. If you have questions regarding our hiring practices, please contact careers@xsolla.com.
By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with thisXsolla Privacy Notice for Job Applicants. Please direct any inquiries regarding your data privacy to careers@xsolla.com.
Location: Spain; United Kingdom; Serbia; Germany
Who we are
Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in minutes—it just works and is always free for the first 200 endpoints with no functional limits.
By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment without requiring a VPN, Action1 eliminates routine IT labor, helps prevent ransomware and security risks, and protects the digital employee experience.
In 2025, Action1 was recognized by
Inc. 5000 as the fastest-growing private software company in America
.
The company is founder-led by
Alex Vovk and Mike Walters
, entrepreneurs who previously founded Netwrix, a multi-billion-dollar cybersecurity company.
The Role
We are looking for a Product Security Engineer to join the team responsible for securing Action1’s multi-tenant SaaS product.
In this role, you will work closely with engineering, product, and security teams to identify risks early, support vulnerability handling, improve secure development practices, and help make product security practical, clear, and actionable.
This is a hands-on role for someone who understands both software engineering and cybersecurity, enjoys working directly with developers, and wants to help build security into the product without slowing teams down unnecessarily.
What you’ll do
Support PSIRT and vulnerability handling activities
Validate, triage, track, and coordinate security reports
Provide practical remediation guidance to engineering teams
Help validate security fixes and reduce product security risks
Review code, APIs, and architecture to identify security issues early
Conduct threat modeling and security design reviews
Improve security automation in engineering workflows
Support SAST, SCA, secrets scanning, and other security controls
Maintain SBOMs, dependency visibility, and remediation follow-up
Support security assessments, vulnerability assessments, and penetration testing
Maintain vulnerability handling playbooks, product security procedures, and incident response runbooks
What we’re looking for
3+ years of experience in product security, application security, DevSecOps, or a related cybersecurity field
Strong software engineering background and ability to work effectively with engineering teams
Understanding of application, API, infrastructure, and software supply chain security risks
Experience applying cloud security concepts and practices
Understanding of IAM, network security, logging, monitoring, and secure cloud architecture patterns
Familiarity with vulnerability management, incident response, security assessments, and secure SDLC practices
Experience with threat modeling and security design reviews
Strong communication skills, including professional communication with external researchers and vendors
Ability to work independently and as part of a team in a fast-moving environment
Nice to have
Genuine interest in cybersecurity and motivation to grow as a product security expert
Hands-on experience with AWS security controls, best practices, and architecture patterns
Hands-on experience with C++ or JavaScript
Experience with security testing and automation using scripting, APIs, CI/CD pipelines, or specialized tools
Experience with threat modeling for SaaS, API, cloud, or on-prem product components
Experience with SBOM generation, dependency visibility, or software supply chain security
What we offer
Fully remote work environment
Opportunity to work on a real security product used by IT and security teams
High ownership and direct impact on product security practices
Close collaboration with engineering, product, and security teams
Fast-growing software company with low bureaucracy and practical decision-making
Opportunity to improve security processes, automation, and engineering workflows
Supportive team that values clear thinking, ownership, and continuous learning
Location: Hybrid - San Francisco, New York City
About Vercel:
Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.
Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.
About the role
We are looking for a Product Security Engineer to build the systems that triage and validate bug bounty and other externally reported security findings, not to work the queue. This role suits a software engineer moving into security or a security engineer with a strong engineering background. You will build large language model (LLM) and agent-based tooling that validates findings, traces them to their root cause, and opens fixes for well-understood vulnerability classes. This is a hybrid role based in San Francisco or New York City, with three days a week in the office.
What you’ll do
Build the systems that take in externally reported vulnerabilities and assess validity, severity, and reproducibility at a volume manual triage cannot match
Build LLM and agent-based analysis that validates business logic, authentication, and design-level findings, not just known signatures
Build systems that trace validated findings to their root cause and propose, and increasingly open, fixes for well-understood vulnerability classes, with human review gates
Own the bug bounty program, including scope, policy, and researcher engagement, and feed every resolved report back into automated triage
Extend the tooling into security testing capabilities that customers can use on what they build and deploy
What you need
5+ years of software engineering or security engineering experience, building and shipping production systems or internal tools
Wrote production code in JavaScript/TypeScript on Node.js, with hands-on experience in web frameworks such as Next.js or React
Built with LLM or agent-based tooling
Reproduced and assessed externally reported vulnerabilities, including judging severity
Bonus if you
Built security automation used across an engineering org, not just for your own team
Built systems that auto-generate or propose code fixes, not just findings
Tested or secured multi-tenant platforms where customer-built applications run on shared infrastructure
Compensation & Benefits:
Competitive compensation package, including equity.
Inclusive Healthcare Package.
Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
Flexible Time Off.
We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.
The San Francisco, CA base pay range for this role is $208,000.00 - $312,000.00. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.
Disclosures:
Privacy:
Please review our
Job Applicant Privacy Policy
for more information on how we handle your data.
Equal Opportunity:
Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.
Location: Remote - US
Who we are
At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to
hundreds of thousands of businesses
and empower millions of developers worldwide to craft personalized customer experiences.
Our dedication to
remote-first work
, and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.
.
Hiring and how we work
We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!
Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings.
.
See yourself at Twilio
Join the team as Twilio’s next Principal Engineer.
About the job
The Compliance Experiences team sits at the heart of the Twilio platform, owning two critical domains: Phone Numbers and Compliance (KYC).
In 2026, "getting a phone number" is no longer a simple API call; it requires sophisticated orchestration across global phone number inventory, real-time identity verification, regulatory compliance, and operational tooling at massive scale.
Twilio’s KYC Platform, the gateway to accessing all of Twilio’s communication APIs, enables customers to securely provision and operate communication services globally while navigating complex, constantly evolving regulatory requirements.
As a Principal Engineer (P5), you will own the technical strategy for a platform that processes millions of requests. You will be expected to pioneer AI-driven development workflows using LLMs and agentic agents to accelerate code generation, automate architectural reviews, and synthesize complex global telecommunications regulations into executable logic. Your mission is to collapse the distance between a great idea and a production ready feature.
Responsibilities
In this role, you’ll:
DRAW THE OWL:
Lead the architecture and long-term technical roadmap, transitioning legacy systems into a modern, distributed microservices architecture that supports global scale.
ACCELERATE WITH AI:
Lead by example in using AI coding assistants (GitHub Copilot, Anthropic Claude, or internal LLMs) to automate boilerplate, generate exhaustive test suites, and perform rapid prototyping. You will be measured on your ability to amplify your own output and the team's velocity through AI augmentation.
BE AN OWNER:
Drive technical excellence across multiple teams, making critical architectural decisions that balance rapid feature innovation with world-class reliability and security.
WEAR THE CUSTOMER’S SHOES:
Partner with Product Managers to translate complex global telecommunications regulations and customer needs into elegant, developer-first APIs and application workflows.
EMPOWER OTHERS:
Mentor and uplift senior and staff engineers. Foster a culture of technical curiosity, ownership, and continuous learning. Teach the team how to move from "writing code" to "reviewing and orchestrating AI-generated logic" without sacrificing security or quality.
RUTHLESSLY PRIORITIZE:
Identify and mitigate technical risks early, ranging from scalability bottlenecks to security vulnerabilities and lead the team through complex production incidents with a focus on long-term remediation.
WRITE IT DOWN:
Communicate complex technical strategies to both executive leadership and engineering teams through high-quality design documents, RFCs, and presentations.
Qualifications
Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!
*Required:
16+ years of experience
designing and developing highly available, high scale, secure, mission-critical cloud native enterprise distributed systems.
Expert Proficiency
in
Java or Go
, with deep knowledge of AWS ecosystems (Lambda, EKS, DynamoDB, Kafka).
Architectural Mastery:
Deep experience with cloud-native infrastructure (
AWS
preferred), microservices patterns, and designing "five-nines" (99.999%) resilient systems.
AI-Native Workflow:
Demonstrated experience using AI tools to significantly accelerate software delivery. You should be comfortable discussing how you use LLMs for architectural brainstorming, debugging, and code synthesis.
API Excellence:
A track record of building and maintaining high-volume public-facing APIs that focus on exceptional developer experience.
Data Savvy:
Experience with high-throughput data processing and storage solutions (SQL/NoSQL, Redis, Kafka, or Spark).
Infrastructure as Code:
Proficiency with Kubernetes, Terraform, and modern CI/CD paradigms.
Leadership:
Proven ability to influence technical strategy across multiple teams and organizational boundaries without direct authority.
Desired:
Telecom Domain Expertise:
Experience with telephony protocols, local number porting (LNP), or global regulatory compliance frameworks.
Platform Thinking:
Experience building "internal platforms" that enable other developer teams to move faster.
Agentic Systems:
Experience building or integrating AI agents into internal developer platforms or automated ops workflows.
Location
This role will be remote across USA.
Travel
We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.
What We Offer
Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.
Compensation
Please note this role is open to candidates outside of California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State. The information below is provided for candidates hired in those locations only.
The estimated pay ranges for this role are as follows:
Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $188,240.00 - $235,300.00.
Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): $199,280.00 - $249,100.00.
Based in the San Francisco Bay area, California: $221,360.00 - $276,700.00.
This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave.
The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.
Applications for this role are intended to be accepted until
30th November, 2026,
but may change based on business needs.
Twilio thinks big. Do you?
We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call
Twilio Magic
. Additionally, we empower employees to build
positive change in their communities
by supporting their volunteering and donation efforts.
So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for,
please consider other open positions.
.
Stay alert to recruitment fraud
We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @
twilio.com
email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps.
.
Twilio is proud to be an equal opportunity employer.
We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.
Location: Remote - Canada
Who we are
At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to
hundreds of thousands of businesses
and empower millions of developers worldwide to craft personalized customer experiences.
Our dedication to
remote-first work
, and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.
.
Hiring and how we work
We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!
Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings.
.
See yourself at Twilio
Join the team as Twilio’s next Staff Software Engineer.
About the job
The Compliance Experiences team sits at the heart of the Twilio platform, owning two critical domains: Phone Numbers and Compliance (KYC).
In 2026, "getting a phone number" is no longer a simple API call; it requires sophisticated orchestration across global phone number inventory, real-time identity verification, regulatory compliance, and operational tooling at massive scale.
Twilio’s KYC Platform, the gateway to accessing all of Twilio’s communication APIs, enables customers to securely provision and operate communication services globally while navigating complex, constantly evolving regulatory requirements.
As a Staff Software Engineer (P4), you will be a key technical leader for a platform that processes millions of requests. You will build innovative solutions while working closely with Twilio partners to ensure alignment. You will lead the technical design and influence the strategic direction that shapes Twilio’s compliance footprint. You will collaborate with cross functional teams and stakeholders across Twilio who rely on your team's APIs, services, and tooling to operate efficiently.
You will embrace AI-driven development workflows, using LLMs and agentic tools to accelerate code generation, improve test coverage, and translate complex regulatory requirements into executable logic. Your mission is to turn ambitious designs into production-grade features.
Responsibilities
In this role, you’ll:
DRAW THE OWL:
Lead the architecture and long-term technical roadmap, transitioning legacy systems into a modern, distributed microservices architecture that supports global scale.
ACCELERATE WITH AI:
Lead by example in using AI coding assistants (GitHub Copilot, Anthropic Claude, or internal LLMs) to automate boilerplate, generate exhaustive test suites, and perform rapid prototyping. You will be measured on your ability to amplify your own output and the team's velocity through AI augmentation.
BE AN OWNER:
Drive technical excellence across multiple teams, making critical architectural decisions that balance rapid feature innovation with world-class reliability and security.
WEAR THE CUSTOMER’S SHOES:
Partner with Product Managers to translate complex global telecommunications regulations and customer needs into elegant, developer-first APIs and application workflows.
EMPOWER OTHERS:
Mentor and uplift senior and staff engineers. Foster a culture of technical curiosity, ownership, and continuous learning. Teach the team how to move from "writing code" to "reviewing and orchestrating AI-generated logic" without sacrificing security or quality.
RUTHLESSLY PRIORITIZE:
Identify and mitigate technical risks early, ranging from scalability bottlenecks to security vulnerabilities and lead the team through complex production incidents with a focus on long-term remediation.
WRITE IT DOWN:
Communicate complex technical strategies to both executive leadership and engineering teams through high-quality design documents, RFCs, and presentations.
Qualifications
Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!
*Required:
12+ years of experience
designing and developing highly available, high scale, secure, mission-critical cloud native enterprise distributed systems.
Expert Proficiency
in
Java or Go
, with deep knowledge of AWS ecosystems (Lambda, EKS, DynamoDB, Kafka).
Architectural Mastery:
Deep experience with cloud-native infrastructure (
AWS
preferred), microservices patterns, and designing "five-nines" (99.999%) resilient systems.
AI-Native Workflow:
Demonstrated experience using AI tools to significantly accelerate software delivery. You should be comfortable discussing how you use LLMs for architectural brainstorming, debugging, and code synthesis.
API Excellence:
A track record of building and maintaining high-volume public-facing APIs that focus on exceptional developer experience.
Data Savvy:
Experience with high-throughput data processing and storage solutions (SQL/NoSQL, Redis, Kafka, or Spark).
Infrastructure as Code:
Proficiency with Kubernetes, Terraform, and modern CI/CD paradigms.
Leadership:
Proven ability to influence technical strategy across multiple teams and organizational boundaries without direct authority.
Desired:
Telecom Domain Expertise:
Experience with telephony protocols, local number porting (LNP), or global regulatory compliance frameworks.
Platform Thinking:
Experience building "internal platforms" that enable other developer teams to move faster.
Agentic Systems:
Experience building or integrating AI agents into internal developer platforms or automated ops workflows.
Location
This role will be remote and based in the British Columbia, Alberta, Ontario - Canada.
Travel
We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.
What We Offer
Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.
Compensation:
Please note this role is open to candidates outside of California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State. The information below is provided for candidates hired in those locations only.
The estimated pay ranges for this role are as follows:
Base Pay:
$160,320.00 -
$200,400.00
Bonus : 15% of base pay
The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.
Applications for this role are intended to be accepted until
30th November, 2026,
but may change based on business needs.
Twilio thinks big. Do you?
We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call
Twilio Magic
. Additionally, we empower employees to build
positive change in their communities
by supporting their volunteering and donation efforts.
So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for,
please consider other open positions.
.
Stay alert to recruitment fraud
We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @
twilio.com
email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps.
.
Twilio is proud to be an equal opportunity employer.
We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.
Location: Lisbon; Belgrade
Workplace: OnSite
Aghanim is an integrated commerce, liveops automation, community engagement, and payments platform for video games.
Mobile games have traditionally depended on app stores for distribution, payments, and player relationships. We believe there is a better way. Aghanim helps game studios build direct relationships with players, sell directly, and build their future on their own terms. Today, more than 100 games worldwide are already building this future with Aghanim.
Our team brings together people across Los Angeles, New York, Seoul, Beijing, London, Lisbon, Belgrade and other locations around the globe, with deep expertise in gaming, fintech and technology. We move quickly, keep communication direct, and focus on getting things done. We believe the best people thrive when they have autonomy, ownership, and a stake in the company's success.
[https://app.ashbyhq.com/api/images/user-content/4f457f07-466b-477b-b552-fbbabd850111/2de3a7cd-8843-41a9-8bbe-ceb897a42c4a/Logo%20(horizontal).svg]
We’re looking for a Middle/High-Middle DevOps / SRE Engineer to help run and improve our production platform in GCP + GKE, fronted by Cloudflare, with observability in Datadog and CI/CD in GitHub Actions.
You’ll work closely with Senior/Principal engineers, implementing reliability improvements, expanding monitoring coverage, and reducing operational toil - especially important in a highload system with sudden traffic spikes.
KEY RESPONSIBILITIES
Platform Operations
- Operate and improve production systems on GCP, GKE, and related managed services
- Contribute to platform reliability, scalability, and operational improvements alongside Senior and Principal engineers
Infrastructure & Delivery
- Implement infrastructure changes using Terraform and maintain Kubernetes configurations, Helm charts, and deployment tooling
- Improve CI/CD automation and deployment reliability
Observability & Incident Management
- Build and maintain monitoring, alerting, and observability in Datadog
- Participate in incident response, troubleshooting, and postmortem activities
Security & Cost Optimization
- Support security tooling, vulnerability remediation, and secure platform practices
- Identify and implement cost optimization opportunities without compromising reliability
REQUIRED QUALIFICATIONS
- Hands-on production experience with Kubernetes (ideally GKE) and basic cluster operations.
- Working experience with Terraform and Helm in PR-based workflows.
- Familiarity with GCP services used in SaaS operations (e.g., Cloud SQL, BigQuery, BigTable, Pub/Sub, Cloud Run, Memorystore).
- Monitoring/alerting and troubleshooting skills (preferably Datadog).
- Strong scripting/automation mindset to reduce manual work and prevent repetitive incidents.
- Reliability awareness: understanding how changes affect availability/latency and how to operate under SLA constraints.
PREFERRED QUALIFICATIONS
- Cloudflare basics (WAF/DNS, edge concepts; Workers/CDN is a plus).
- Experience writing/maintaining runbooks and participating in postmortems.
- Exposure to SOC 2 / PCI-DSS requirements or willingness to learn.
- Experience in high-load consumer products or game dev.
WHY JOIN US
- World-class team – work alongside experienced professionals from around the globe who have built products used by millions of players
- High growth, high impact – be part of a fast-growing company where ideas turn into products and reach customers in days, not months
- Autonomy and ownership – we trust people to make decisions, take initiative, and drive results
- Modern tools and technology – use AI, automation, and modern tools as part of your everyday work
- Equity – participate in the company's growth and long-term success
Location: San Francisco, CA | New York City, NY | Seattle, WA
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
We're seeking a Platform Hardware Security Engineer to design and implement security architectures for bare-metal infrastructure. You'll work with teams across Anthropic to build firmware, bootloaders, operating systems, and attestation systems to ensure the integrity of our infrastructure from the ground up.
This role requires expertise in low-level systems security and the ability to architect solutions that balance security requirements with the performance demands of training AI models across our massive fleet.
Key responsibilities
Design and implement secure boot chains from firmware through OS initialization for diverse hardware platforms (CPUs, BMCs, switches, peripherals, and embedded microcontrollers)
Architect attestation systems that provide cryptographic proof of system state from hardware root of trust through application layer
Develop measured boot implementations and runtime integrity monitoring
Create reference architectures and security requirements for bare-metal deployments
Integrate security controls with infrastructure teams without impacting training performance
Prototype and validate security mechanisms before production deployment
Conduct firmware vulnerability assessments and penetration testing
Build firmware analysis pipelines for continuous security monitoring
Document security architectures and maintain threat models
Collaborate with software and hardware vendors to ensure security capabilities meet our requirements
Minimum qualifications
Hands-on experience with secure boot, measured boot, and attestation technologies (TPM, Intel TXT, AMD SEV, ARM TrustZone)
Strong understanding of cryptographic protocols and hardware security modules
Experience with UEFI/BIOS or embedded firmware security, bootloader hardening, and chain of trust implementation
Proficiency in low-level programming (C, Rust, Assembly) and systems programming
Knowledge of firmware vulnerability assessment and threat modeling
Track record of designing security architectures for complex, distributed systems
Experience with supply chain security
Ability to work effectively across hardware and software boundaries
Knowledge of NIST firmware security guidelines and hardware security frameworks
Preferred qualifications
8+ years of experience in systems security, with at least 5 years focused on firmware and hardware security (firmware, bootloaders, and OS-level security)
Experience with confidential computing technologies and hardware-based TEEs
Knowledge of SLSA framework and software supply chain security standards
Experience securing large-scale HPC or cloud infrastructure
Contributions to open-source security projects (coreboot, CHIPSEC, etc.)
Background in formal verification or security proof techniques
Experience with silicon root of trust implementations
Experience working with building foundational technical designs, operational leadership, and vendor collaboration
Previous work with AI/ML infrastructure security
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$320,000
—
$405,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Remote
Who We Are:
Galaxy Digital Inc. (Nasdaq: GLXY) is a global leader in digital assets and data center infrastructure, growing the economy that runs on code. Galaxy delivers the onchain infrastructure that connects institutions to digital assets, including trading, advisory, asset management, staking, self-custody, and tokenization. Galaxy also develops and operates data center infrastructure to power AI and HPC workloads. Anchored by its Helios campus in Texas, Galaxy is building a multi-gigawatt pipeline of more than 5.7 GW of potential capacity, positioning it among the largest and fastest-growing data center developers in North America.
The Company is headquartered in New York City, with offices across North America, Europe, the Middle East, and Asia.
Additional information about Galaxy's businesses and products is available on
www.galaxy.com
.
What We Value:
We are a diverse team of free thinkers, and fast movers united to help investors and creators energize the global economy. We are looking for individuals who thrive in a culture of builders and overachievers and embrace high performance, transparent feedback, and a mission-first approach. Our culture shapes our way of working and gets us where we want to be.
Seek Excellence.
Be Selective To Be Effective.
Be Highly Aligned, Loosely Coupled.
Disagree Transparently.
Encourage Independent Decision-Making.
Build Dream Teams.
Who You Are:
The Blockchain Security Lead owns the security posture of on-chain systems and protocols across the organization. This role blends strategic leadership with deep hands-on expertise, overseeing a small team of blockchain security engineers while actively contributing to design reviews, threat modeling, and code audits.
You’ll partner closely with on-chain product and engineering teams to embed security into architecture, development, and operations—building scalable, reusable security controls that grow with the business.
What You’ll Do:
Lead, mentor, and grow a team of blockchain security engineers.
Define and evolve the blockchain security strategy and roadmap.
Serve as a trusted security partner to product, protocol, and infrastructure teams.
Lead threat modeling and architecture reviews for on-chain systems.
Perform and guide security reviews and audits of smart contracts (Solidity, Rust/Solana) and backend services and supporting infrastructure.
Design and implement reusable security controls, patterns, and reference architectures.
Support secure deployment of cloud-native infrastructure (containers, Kubernetes).
Research emerging blockchain threats, exploits, and mitigations, and translate them into actionable controls.
Embrace and champion the thoughtful adoption of AI to improve team performance and business outcomes.
Leverage AI tools (e.g., generative AI, automation platforms, data copilots) to improve productivity, decision-making, and output quality in your day-to-day work.
What We’re Looking For:
Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience)
10+ years of security software engineering experience
5+ years working with blockchain technologies
5+ years working with smart contract security across multiple chains
Experience leading or mentoring a small, highly technical team
Published material on vulnerabilities/security bugs within the Web3 community
Expertise in secure SDLC, threat modeling, and application architecture review
Multi agent code reviews for vulnerabilities using frontier models
Secure coding practices and in-depth code review capability
Strong familiarity with smart contracts (Solidity, Rust), cloud-native environments (Docker, Kubernetes), authentication and authorization, TLS/PKI, and cloud, infrastructure, and network security
Clear, confident communicator across technical and non-technical audiences
Comfortable balancing hands-on execution with strategic ownership; detail-oriented, pragmatic, and strong in problem solving under ambiguity
Bonus Points:
Direct exposure to Solana, staking systems, or similar Layer 1 protocols
Prior experience at a blockchain security audit firm (e.g., Trail of Bits, Halborn, Ottersec, Zellic)
Background in financial services or institutional crypto security
Familiarity with DeFi protocol security, key management, and custody architectures
Experience contributing to or leading security programs at a crypto exchange, protocol foundation, or digital asset firm
What We Offer:
Competitive base salary and discretionary bonus
Hybrid/Flexible Working Arrangements
Flexible Time Off (paid)
3% 401(k) company contribution
Company-paid health and protective benefits for employees, partners, and other dependents
Generous paid Parental Leave
Competitive family planning benefits for US employees
Opportunities to learn about the Crypto industry
Smart, entrepreneurial, and fun colleagues
Free daily snacks and weekly breakfasts/lunches
Employee Resource Groups
Free coaching and counseling sessions through Headspace
Apply now and join us as we grow the economy that runs on code.
Galaxy respects diversity and seeks to provide equal employment opportunities to all employees and job applicants for employment without regard to actual or perceived age, race, color, creed, religion, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, marital or partnership or caregiver status, ancestry, national origin, citizenship status, disability, military or veteran status, protected medical condition as defined by applicable state or local law, genetic information or predisposing genetic characteristic, or other characteristic protected by applicable federal, state, or local laws and ordinances.
We will endeavor to make a reasonable accommodation to the known limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business. If you believe you require such assistance to complete the application process or to participate in an interview, please contact
careers@galaxy.com.
Location: Poland
Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in 5 minutes—it just works and is always free for the first 200 endpoints, with no functional limits. By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment without needing a VPN, it eliminates routine labor, preempts ransomware and security risks, and protects the digital employee experience.
In 2025, Action1 was recognized by Inc. 5000 as the fastest-growing private software company in America. The company is founder-led by Alex Vovk and Mike Walters, American entrepreneurs who previously founded Netwrix, a multi-billion-dollar cybersecurity company.
We are stepping into an exciting growth stage and are looking for
a Backend developer
to join our amazing development team.
You will:
Develop API and backend for a high-load product with numerous endpoints
Write unit and integration tests for backend
Refactor code and improve application performance
Requirements:
4+ years of software development experience
Good knowledge of Node.js, JavaScript, TypeScript
Experience in designing and developing REST APIs and high load applications
Proficiency in working with databases (DynamoDB, MySQL)
Experience writing tests
Good knowledge of Docker and AWS (Lambda, EC2)
We offer:
Fully remote work, giving you the flexibility you need in the modern world
A multitude of interesting challenges and opportunities
Stable income and flexible working hours, opportunities for promotion
Friendly and professional peers, eager to help and help you grow
Join Action1 and be a driving force behind our success!
Location: Dallas, Texas
Who We Are:
Galaxy Digital Inc. (Nasdaq: GLXY) is a global leader in digital assets and data center infrastructure, growing the economy that runs on code. Galaxy delivers the onchain infrastructure that connects institutions to digital assets, including trading, advisory, asset management, staking, self-custody, and tokenization. Galaxy also develops and operates data center infrastructure to power AI and HPC workloads. Anchored by its Helios campus in Texas, Galaxy is building a multi-gigawatt pipeline of more than 5.7 GW of potential capacity, positioning it among the largest and fastest-growing data center developers in North America.
The Company is headquartered in New York City, with offices across North America, Europe, the Middle East, and Asia.
Additional information about Galaxy's businesses and products is available on
www.galaxy.com
.
What We Value:
We are a diverse team of free thinkers, and fast movers united to help investors and creators energize the global economy. We are looking for individuals who thrive in a culture of builders and overachievers and embrace high performance, transparent feedback, and a mission-first approach. Our culture shapes our way of working and gets us where we want to be.
Seek Excellence.
Be Selective To Be Effective.
Be Highly Aligned, Loosely Coupled.
Disagree Transparently.
Encourage Independent Decision-Making.
Build Dream Teams.
Who You Are:
We’re seeking a Technical Project Manager to join our Data Centers team. You are a technically grounded and highly organized project manager with 3-5 years of experience driving complex initiatives across software development and cybersecurity domains. You thrive in fast-paced environments and know how to bridge the gap between technical teams and business stakeholders. You bring a natural ability to manage competing priorities without losing sight of the details. You are someone who builds trust quickly with both technical contributors and non-technical stakeholders, adapting communication style based on your audience. You must be proactive in nature by surfacing risks early, asking the right questions, and able to propose creative solutions to problems before they arise.
What You’ll Do:
Lead end-to-end project management for software development and cybersecurity initiatives, from requirements gathering and planning through execution, delivery, and post-implementation support.
Facilitate Agile ceremonies, including sprint planning, backlog grooming, standups, retrospectives, and release planning, ensuring teams remain aligned on priorities and delivery commitments.
Partner with software engineering and cybersecurity leaders to define project roadmaps, establish milestones and prioritization, and drive execution against strategic objectives.
Coordinate the management of cybersecurity initiatives, including vulnerability remediation efforts, security tooling deployments, compliance-related projects, and risk reduction programs.
Drive cross-functional dependency management between software, cybersecurity, infrastructure, operations, and vendor teams to ensure successful project outcomes.
Develop and maintain project dashboards, metrics, and reporting to provide visibility into team performance, delivery progress, and key operational risks.
Partner closely with Data Center leadership to provide regular updates on project status, timelines, priorities, dependencies, risks, and mitigation plans.
Develop detailed project requirements, user stories, and documentation using Jira, Confluence, and other project management tools to ensure clear communication, alignment, and execution across stakeholders.
Collaborate with construction, operations, and other Data Center departments to remove obstacles, align priorities, and ensure successful delivery of critical initiatives.
Establish and maintain strong relationships with internal stakeholders, facilitating effective communication and coordination across multiple departments.
Contribute to the development, standardization, and continuous improvement of PMO processes, templates, governance frameworks, and project management best practices.
Identify opportunities to improve team efficiency, project delivery, tooling, processes, and cross-functional collaboration within the Data Center organization.
Track project risks, dependencies, and resource constraints, proactively escalating issues and driving resolution to maintain project momentum and business objectives.
What We’re Looking For:
Bachelor’s degree.
3–5 years of experience in technical project or program management, preferably supporting software development, cybersecurity, infrastructure, or Data Center technology teams.
Strong understanding of software development lifecycles (SDLC), Agile delivery methodologies, and technical project execution.
Experience with project management or program management practices and methodologies (Scrum, Agile, Jira, Confluence, etc.).
Experience managing software development projects and working directly with engineering teams.
Familiarity with cybersecurity concepts, including vulnerability management, security controls, identity and access management, security operations, and compliance frameworks.
Experience translating technical requirements into actionable project plans for both technical and non-technical stakeholders.
Proven ability to manage cross-functional initiatives involving multiple teams, stakeholders, and competing priorities.
Extremely organized and ability to keep others organized and on track.
Excellent communication and interpersonal skills, with the ability to work effectively in a team environment.
Strong analytical and problem-solving skills, with a detail-oriented mindset.
Ability to manage multiple projects simultaneously and meet tight deadlines.
Scrum Master certification is highly desirable.
Bonus Points:
Experience supporting cybersecurity programs or security engineering teams.
Experience working in mission-critical environments such as data centers, cloud infrastructure, enterprise technology, or regulated industries.
PMP, Certified ScrumMaster (CSM), PMI-ACP, or similar project management certification.
Experience with reporting and visualization tools such as Jira dashboards.
Ability to work in a fast-paced deadline-driven environment and multitask.
Ability to work effectively in a team environment with good communication skills.
Strong work ethic and great attention to detail.
Self-starter with a strong desire to make processes more efficient.
Advanced proficiency with Jira, Confluence, and project tracking/reporting tools.
What We Offer (US):
Competitive base salary, bonus, and equity compensation
Flexible Time Off (i.e. unlimited paid vacation days)
Company paid Holidays (11)
Company paid sick leave
Company-paid health and protective benefits for employees, partners, and other dependents
3% 401(k) company contribution
Generous paid Parental Leave
Free virtual coaching and counseling sessions through Ginger
Opportunities to learn about the Crypto industry
Free daily snacks in-office
Smart, entrepreneurial, and fun colleagues
Employee Resource Groups
*Benefits may vary depending on location.
Apply now and join us as we grow the economy that runs on code.
Galaxy respects diversity and seeks to provide equal employment opportunities to all employees and job applicants for employment without regard to actual or perceived age, race, color, creed, religion, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, marital or partnership or caregiver status, ancestry, national origin, citizenship status, disability, military or veteran status, protected medical condition as defined by applicable state or local law, genetic information or predisposing genetic characteristic, or other characteristic protected by applicable federal, state, or local laws and ordinances.
We will endeavor to make a reasonable accommodation to the known limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business. If you believe you require such assistance to complete the application process or to participate in an interview, please contact
careers@galaxy.com.
Location: Singapore, Singapore
OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa.
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.
OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.
Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.
OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
About The Opportunity
We are currently seeking a
Public Cloud Operations Expert
to join our Singapore team. You be will responsible for the full lifecycle management of enterprise-level hybrid cloud infrastructure, leading unified orchestration, operations, and cost optimisation of
AWS
and
Alibaba Cloud
resources, ensuring high availability, high performance, and compliance.
What You’ll Be Doing
Cloud Platform Architecture & Operations
Plan, deploy, monitor, and maintain AWS services (EC2, S3, VPC, Lambda, EKS, etc.) and Alibaba Cloud services (ECS, OSS, VPC, Function Compute, ACK, etc.).
Design highly available, auto-scaling cloud architectures, optimizing network (e.g., Alibaba Cloud CEN, AWS Direct Connect), storage, and compute resource configurations.
Monitoring & Incident Management
Implement full-stack monitoring and alerting using cloud-native tools (AWS CloudWatch, Alibaba Cloud CloudMonitor) and open-source solutions (Prometheus+Grafana, ELK).
Lead critical incident response, perform root cause analysis, and implement preventive measures (e.g., resource contention, misconfigurations, network latency).
Cost Optimisation & Resource Management
Analyse cloud resource usage, reduce costs via reserved instances, auto-scaling, and storage lifecycle policies (e.g., AWS S3 Intelligent-Tiering, Alibaba Cloud OSS Archive).
Establish resource quota management strategies to prevent waste and overspending.
Security & Compliance
Implement cloud security baselines (security groups, IAM policies, Alibaba Cloud RAM permissions, AWS Security Hub), conduct regular security audits, and remediate vulnerabilities.
Design granular access controls using AWS IAM and Alibaba Cloud RAM, and enforce database auditing (e.g., AWS CloudTrail + Alibaba Cloud DAS).
Cross-Team Collaboration & Knowledge Sharing
Collaborate with development teams to optimize application architectures and provide cloud-native solutions (Server-less, Microservices).
Document operational procedures (SOP manuals) and lead internal technical training sessions.
What We Look For In You
Technical Skills
Mastery of core services (compute/storage/network/security) on AWS or Alibaba Cloud, with familiarity in the other platform.
Proficient in Linux/Windows system operations and automation tools (Shell/Python/Ansible).
Hands-on experience with containerized operations (Kubernetes, ECS/EKS, ACK) and cloud-native technologies (e.g., Service Mesh).
Experience Requirements
5+ years of operations experience, with at least 3 years focused on public cloud (AWS/Alibaba Cloud) environments managing 100+ instances.
Experience in building cloud platforms from scratch, hybrid cloud architecture design, or large-scale migration projects (e.g., IDC-to-cloud) is preferred.
Team Management
Excellent team management and communication skills to lead and collaborate with operations, development, testing, and security teams.
Certifications & Education
AWS Certified SysOps Administrator or Alibaba Cloud ACP/ACE certifications are preferred.
Bachelor’s degree or higher in Computer Science, Network Engineering, or related fields.
Nice-To-Haves
Familiarity with multi-cloud management platforms (AWS, Alibaba Cloud, Azure) or FinOps cost optimisation methodologies.
Experience in cloud security practices, including Web Application Firewall (WAF) and DDoS protection (Alibaba Cloud Anti-DDoS Premium, AWS Shield).
Exposure to big data/AI operations (e.g., Alibaba Cloud MaxCompute, AWS EMR).
Team leadership experience is preferred.
Perks & Benefits
Competitive total compensation package
L&D programs and education subsidy for employees' growth and development
Various team building programs and company events
Wellness and meal allowances
Comprehensive healthcare schemes for employees and dependants
More that we love to tell you along the process!
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: New York
Workplace: onsite
About Xsolla
Xsolla is a global video game commerce company that provides the tools and infrastructure the gaming industry relies on to build, distribute, and monetize games. Working with developers and publishers of every size, from independent studios to the largest franchises in the world, Xsolla operates as a merchant of record and processes payments across more than 200 countries and territories, supporting over 1,000 payment methods, 130 currencies, and 25 languages. Its platform spans the full game lifecycle, including web shops, Pay Station, Login, Launcher, the In-Game Store, and a broad suite of LiveOps and monetization tools.
Strategic Initiatives and Capital Markets
Beyond its core commerce platform, Xsolla has built an expanding set of strategic and capital markets initiatives. The company connects developers with capital through programs such as the Xsolla Funding Club, and it has extended its footprint into the public markets through Xsolla SPAC 1 (Nasdaq: XSLLU), a publicly listed acquisition vehicle focused on gaming, fintech, adtech, and related technology sectors. These activities sit alongside a growing portfolio of partnerships, market expansion programs, and new business lines led by the Global Strategic Initiatives and Partnerships organization.
Market Opportunity
The opportunity is significant. The global games market is on track to exceed 300 billion dollars, and the sector has matured into a genuine institutional asset class. Industry trackers recorded roughly 161 billion dollars of games industry mergers and acquisitions in , and private equity firms, strategic acquirers, and sovereign investors continue to deploy capital into the studios, platforms, and infrastructure that power the industry. Xsolla sits at the center of this commerce layer, which positions the company to play a meaningful role in how capital flows through gaming.
For more information, visit xsolla.com.
About the Opportunity
Xsolla is seeking a
Head of Investor Capital and Relations
to lead its capital formation and investor relations agenda from New York. This senior, high-visibility mandate brings together two disciplines that are often treated separately: raising and structuring capital, and stewarding the relationships and narrative that sustain long-term investor confidence. The successful candidate will own the institutional capital relationships that support Xsolla’s strategic vehicles and initiatives and serve as a principal point of contact between the company and the global investment community.
The role reports directly to the Senior Vice President of Global Strategic Initiatives and Partnerships and works in close partnership with the Chief Executive, Chief Legal Officer, finance leadership, and the founders. It is designed for an investor who understands capital from the inside: someone who has sat across the table from sponsors, sovereign funds, and institutional allocators, and who can translate Xsolla’s strategy into a compelling, credible investment thesis.
The Head of Investor Capital and Relations will be based in New York and will report to Rytis Joseph Jan, Senior Vice President of Global Strategic Initiatives and Partnerships. The role requires significant global travel, including regular engagement across the Gulf, Asia, and major financial centers, to build and maintain the relationships at the heart of the mandate.
Expressions of Interest
Xsolla welcomes confidential conversations with qualified candidates and trusted introductions. Please direct expressions of interest, together with a resume and a short note on relevant experience, to the Xsolla Talent Acquisition team via the application button linked below.
Role Overview
As Head of Investor Capital and Relations, you will be responsible for the full arc of capital engagement, from sourcing and cultivating investors, to structuring and executing capital raises, to maintaining disciplined, compliant, and trusted relationships once capital is committed. Your remit will span private capital formation, sovereign and strategic institutional relationships, and the investor relations function associated with Xsolla's publicly listed activities.
You will build the investor relations capability that a company operating in and around the public markets requires, including the disclosure discipline, messaging consistency, and relationship infrastructure that institutional investors expect. You will also act as a senior commercial partner to the deal teams, helping to shape the capital structure, investor syndicate, and positioning of strategic transactions.
This is a builder's role. You will establish the processes, materials, and team that allow Xsolla to engage the capital markets with the professionalism of a far larger institution, while retaining the speed and ambition of a company in a high growth sector.
Key Responsibilities
Capital Formation and Fundraising
Lead capital raises.
Design and execute capital raises across the firm's strategic vehicles and initiatives, spanning equity, structured, and credit instruments.
Own the investor pipeline.
Develop and manage the investor pipeline, from initial sourcing and qualification through diligence, negotiation, and close.
Build the materials.
Create the core fundraising materials, including the equity story, investor presentations, data rooms, and the supporting financial narrative, in partnership with finance and legal.
Structure terms.
Shape terms and commitments in coordination with deal leadership, balancing the interests of the firm, its founders, and incoming investors.
Read the market.
Maintain a current and accurate view of market conditions, investor appetite, and comparable transactions to inform timing and structure.
Sovereign Wealth and Strategic Institutional Capital
Gulf sovereign wealth funds alone manage on the order of 5 trillion dollars in assets and have become active, thematic investors in technology and platform businesses, with leading funds such as QIA, PIF, ADIA, Mubadala, and ADQ frequently writing large strategic commitments. Cultivating and stewarding these relationships is central to this role.
Originate relationships.
Build and steward relationships with sovereign wealth funds, strategic corporates, family offices, and large institutional allocators, with particular emphasis on the Gulf, Asia, and North America.
Map the counterparties.
Understand the priorities, mandates, and decision processes of target institutions, and align Xsolla's opportunities to the right counterparties and ticket sizes.
Engage principals.
Serve as a trusted, senior relationship owner who can engage principals and investment committees with credibility and discretion.
Coordinate coverage.
Align coverage strategy with banking partners and advisors to maximize reach into the institutions that matter most.
Public Markets, SPAC, and Business Combination Investor Relations
Build the IR function.
Establish and run the investor relations function for Xsolla's publicly listed activities, including Xsolla SPAC 1, in line with the standards expected of a public company.
Manage public investors.
Manage relationships with public market investors, sell side and buy side analysts, and prospective shareholders, and serve as a primary point of contact for inbound investor inquiries.
Lead event communications.
Lead investor communications around capital events, including any business combination, and prepare leadership for investor meetings, roadshows, and earnings style updates.
Craft the message.
Develop consistent, accurate messaging that links strategy, key metrics, and results, and that supports informed engagement and durable investor confidence.
Protect disclosure integrity.
Partner with legal and compliance to uphold disclosure obligations, including fair disclosure principles, blackout periods, and safe harbor language for forward looking statements.
Capital Markets Strategy and Transaction Execution
Advise on structure.
Advise leadership on capital structure, funding strategy, and the optimal mix of capital across the firm's objectives.
Support transactions.
Support the execution of strategic transactions, including acquisitions and business combinations, by shaping the investor syndicate, terms, and positioning.
Coordinate advisors.
Direct the work of banks, advisors, and counsel through diligence and execution, and keep workstreams aligned to timeline and outcome.
Translate the market.
Monitor capital markets developments, sector valuations, and competitor activity, and translate them into recommendations for leadership and, where relevant, the board.
Disclosure, Communications, and Governance
Set the framework.
Establish and maintain a disciplined disclosure and communications framework, including policies, calendars, and approval workflows.
Prepare materials.
Prepare board level and investor level materials, and contribute to the narrative that the company presents to the market.
Ensure compliance.
Ensure that all investor facing communications are accurate, consistent, and compliant, and that material information is handled appropriately.
Leadership and Cross-Functional Partnership
Build the team.
Recruit, mentor, and lead the investor relations and capital markets team over time.
Work across the firm.
Partner seamlessly across finance, legal, strategy, communications, and the founders to deliver a unified message to the market.
Represent Xsolla.
Represent the company with poise and authority at investor meetings, industry forums, and capital markets events around the world.
Candidate Profile
Experience
Twelve to fifteen years or more of progressive experience across investment banking, private equity, sovereign wealth or institutional investing, capital markets, or senior investor relations, ideally spanning more than one of these.
A demonstrable track record of raising or deploying institutional capital and of closing complex transactions.
Direct experience engaging sovereign wealth funds, strategic investors, or large institutional allocators at a senior level.
Exposure to public company investor relations, the listing process, or a business combination is strongly preferred.
Domain Expertise
Deep fluency in capital structure, private placements, equity and credit instruments, and transaction processes.
A strong working knowledge of public market disclosure, fair disclosure principles, and the obligations that accompany a listing.
Familiarity with gaming, technology, fintech, or other high growth sectors is a clear advantage, as is comfort operating across the Gulf, Asia, and North American markets.
Skills and Competencies
Exceptional financial acumen, with the ability to build and interrogate the analysis behind a capital raise.
Outstanding written and verbal communication, with the ability to turn a complex strategy into a clear and persuasive investment narrative.
Significant relationship capital and the gravitas to engage principals, investment committees, and senior executives.
Sound judgment, discretion, and the highest standards of integrity when handling sensitive and material information.
The drive and resourcefulness to build a function from the ground up in a fast moving environment.
Education and Credentials
A bachelor's degree in finance, economics, business, or a related field is required.
An advanced degree such as an MBA, or a professional credential such as the CFA, is strongly preferred.
Relevant securities licenses, or the willingness to obtain them, are viewed favorably.
Benefits:
We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes 100% company-paid medical, dental, and vision plans, unlimited Flexible Time Off, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play.
Equal Employment Opportunity Statement:
Xsolla is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or any other characteristic protected by law. We consider qualified applicants with criminal histories in accordance with the Fair Chance Act.
Criminal History Consideration:
For the Head of Investor Capital & Relations role, we will conduct a background check that may include the following:
Criminal history check
Employment verification
Education verification
Relevance to Job Responsibilities:
The background check is relevant to this position because of the following role responsibilities:
Working with vulnerable populations
Accessing confidential company data
Ensuring compliance with regulatory requirements
Rights Under the Fair Chance Act:
Applicants are encouraged to inquire about their rights under the Fair Chance Act. If you have questions regarding our hiring practices, please contact careers@xsolla.com.
By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with thisXsolla Privacy Notice for Job Applicants. Please direct any inquiries regarding your data privacy to careers@xsolla.com.
Compensation is competitive and negotiable based on experience, and includes performance-based incentives, equity participation, and comprehensive health, retirement, and wellbeing benefits.
Location: United States
Workplace: Remote
At ClickUp, we're building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an AI-native company. Every team member is expected to leverage AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what's possible. 🚀
JOB SUMMARY
We are looking for a GTM DevOps Engineer to join our Business Systems team and own the reliability, automation, and delivery infrastructure behind our Go-To-Market (GTM) technology stack. This role sits at the intersection of platform reliability and CI/CD engineering, ensuring that our critical business systems — including Salesforce, NetSuite, MuleSoft, Workato, and an expanding portfolio of AI-powered workloads — are deployed consistently, operate resiliently, and scale with the business.
You will partner closely with Business Systems developers, architects, and business stakeholders to build and maintain the pipelines, monitoring frameworks, and operational standards that keep our GTM systems healthy and our release cycles fast and predictable. As our team builds and deploys AI agents across GCP Cloud Run and AWS Bedrock AgentCore, you will serve as the infrastructure and deployment owner for these workloads — bringing engineering discipline to an environment where AI-generated code is increasingly entering production. This is a hands-on engineering role for someone who thrives in complexity, takes ownership of platform uptime, and brings a software engineering mindset to business application operations — directly supporting GTMSOE's broader mission of operational excellence across the GTM org.
KEY RESPONSIBILITIES
CI/CD & RELEASE ENGINEERING
- Design, build, and maintain CI/CD pipelines for Salesforce (SFDX/Salesforce CLI), NetSuite (SuiteScript/SuiteBundler), MuleSoft (Anypoint Platform), and Workato; establish branching strategies, environment promotion standards, and release gating processes across all GTM platforms.
- Extend CI/CD practices to cover AI agent workloads deployed on GCP Cloud Run and AWS Bedrock AgentCore — including containerized builds, deployment pipelines, and automated validation gates.
- Implement safe rollout patterns — including feature toggles, phased launches, automated validation, smoke tests, and rollback procedures — to reduce deployment risk on business-critical changes.
PLATFORM RELIABILITY & OBSERVABILITY
- Own SLA/SLO definitions for core GTM systems; standardize monitoring, alerting, and runbook patterns across quote-to-cash and GTM integrations, with proactive health checks and synthetic monitoring for critical flows (e.g., Salesforce ↔ NetSuite, Workato).
- Extend observability coverage to GCP Cloud Run workloads — Cloud Scheduler jobs, agent pipelines, and integration microservices — and AWS-hosted agent infrastructure.
- Conduct root cause analysis (RCA) for platform incidents and drive post-incident reviews with actionable remediation plans.
CLOUD INFRASTRUCTURE & ENVIRONMENT MANAGEMENT
- Manage sandbox, staging, and production environment lifecycles across GTM platforms — including refresh cycles, data masking, environment segmentation, and promotion standards that balance speed with reliability.
- Own cloud infrastructure for Business Systems-operated workloads on GCP (Cloud Run, Cloud Scheduler, Cloud Secret Manager, GCS, Artifact Registry) and AWS (Lambda, S3, EventBridge, Secrets Manager, Bedrock AgentCore); apply IaC practices to make provisioning repeatable and auditable.
- Establish base image pinning, dependency vulnerability scanning, and supply chain security practices for containerized workloads — particularly AI-generated codebases deployed via tools like Cursor or Claude Code.
- Define and enforce patch management and container runtime ownership for vibe-coded and agentic workloads entering production.
SECRETS, ACCESS & SECURITY POSTURE
- Establish and enforce a consistent secrets management standard across all Business Systems workloads — GCP Secret Manager, AWS Secrets Manager, and equivalent — eliminating credential exposure via environment variables, source code, or client-side contexts.
- Define and maintain API key rotation policies in alignment with security standards (high-severity keys: quarterly; vendor keys: annually at minimum).
- Partner with Security and IT on IAM scoping, least-privilege service accounts, VPC configuration, and public/private endpoint governance for Cloud Run and Bedrock deployments.
- Maintain a centralized registry of deployed workloads — GitHub repos, deployment URLs, architecture docs, data classification, and observability dashboard links — accessible to AppSec and infrastructure teams.
AUTOMATION & TOOLING
- Build internal tooling, automation scripts, and automated testing frameworks (unit, integration, regression) to reduce toil and increase deployment confidence; continuously evaluate new tooling to improve developer experience.
- Develop or enforce GitHub repository templates for Cloud Run deployments that cover security audits, deployment configuration, API integration, and MCP server patterns — serving as a reusable foundation for AI-assisted builds.
GOVERNANCE, STANDARDS & COLLABORATION
- Define where self-service deployment and administration are appropriate versus where stronger change control and operational guardrails are required; serve as the DevOps SME, enabling developers to operate with autonomy within those boundaries.
- Document and maintain operational runbooks, architecture decision records (ADRs), and deployment standards as living artifacts.
- Collaborate with IT, Data Engineering, Security, and business stakeholders on cross-functional initiatives that touch the GTM platform.
QUALIFICATIONS
EXPERIENCE
- 4+ years in a DevOps, Site Reliability Engineering (SRE), or Platform Engineering role
- 2+ years of hands-on experience deploying and managing Salesforce environments (SFDX, Salesforce CLI, scratch orgs, sandboxes, change sets, or pipeline-based deployments)
- Experience with at least one additional GTM/ERP platform, such as NetSuite, MuleSoft, or Workato, in an operational or deployment capacity
- Demonstrated experience building and maintaining CI/CD pipelines using tools such as GitHub Actions, GitLab CI, Jenkins, or Copado
- Hands-on experience with GCP services — Cloud Run, Cloud Scheduler, Cloud Secret Manager, Artifact Registry, GCS — in a deployment or operations context
- Experience with AWS services in an integration or operations context — Lambda, S3, SQS, Secrets Manager, CloudWatch; familiarity with Bedrock AgentCore or similar managed agent hosting infrastructure is a strong plus
- Experience managing containerized workloads, including image lifecycle, dependency scanning, and supply chain security practices
- Experience with incident management, on-call processes, and writing post-incident reviews
SKILLS & COMPETENCIES
Technical
- Strong scripting skills in Python, Bash, or Node.js for automation and tooling
- Proficiency with Git, branching strategies, and version control best practices
- Understanding of API-based integration patterns (REST, SOAP, event-driven) as they apply to MuleSoft, Workato, or similar iPaaS tools
- Hands-on familiarity with secrets management across GCP Secret Manager and AWS Secrets Manager; strong grasp of security best practices in CI/CD contexts (least-privilege IAM, no hardcoded credentials, key rotation)
- Monitoring and observability tooling experience (Datadog, Splunk, Google Cloud Monitoring, CloudWatch, or similar)
- Infrastructure-as-code proficiency — Terraform or CloudFormation; experience applying IaC to Cloud Run or Lambda-based workloads preferred
- Familiarity with container security practices: base image pinning, vulnerability scanning (e.g., Artifact Registry, Trivy), and dependency management for AI-generated codebases
Operational & Mindset
- Ownership: Takes full accountability for platform uptime, deployment quality, and the operational health of GTM infrastructure end-to-end.
- Velocity: Operates with a bias for action — ships iteratively, reduces toil systematically, and keeps release cycles fast and predictable.
- AI & Automation mindset: Actively leverages AI-assisted tooling and automation to accelerate delivery, improve reliability, and reduce manual overhead across the GTM stack.
- Collaboration: Fluent cross-functional partner to developers, architects, Security, IT, and business stakeholders — enables autonomy without becoming a bottleneck.
- Growth: Continuously evaluates new tooling, patterns, and practices to raise the bar on platform engineering and developer experience.
WHAT YOU'LL WORK WITH
- Salesforce: Core GTM CRM platform; this role owns deployment pipelines, environment management, and release reliability across orgs.
- NetSuite: ERP platform integrated into the quote-to-cash flow; managed via SuiteScript/SuiteBundler within CI/CD standards.
- MuleSoft (Anypoint Platform): Integration middleware; this role maintains deployment pipelines and observability for MuleSoft-managed flows.
- Workato: iPaaS automation platform; monitored and deployed within the broader GTM reliability framework.
- GCP (Cloud Run, Cloud Scheduler, Secret Manager, Artifact Registry, GCS): Primary cloud platform for AI agent workloads and integration microservices.
- AWS (Lambda, S3, EventBridge, Secrets Manager, Bedrock AgentCore): Secondary cloud environment for agent hosting and integration operations.
- GitHub Actions / GitLab CI / Copado: CI/CD tooling used to build, validate, and promote changes across GTM platforms.
- Terraform / CloudFormation: IaC tooling for repeatable, auditable infrastructure provisioning.
- Datadog / Splunk / Google Cloud Monitoring / CloudWatch: Observability and alerting stack across GTM and cloud workloads.
Equal Opportunity Employer
ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.
Privacy Notice
ClickUp collects and processes personal data in accordance with applicable data protection laws. You can find further details by viewing our Global Candidate Privacy Notice. https://clickup.com/careers-terms/candidate-privacy-notice
If you are a Philippine Job Applicant, please also see our Philippine Data Privacy Notice https://t333.s.clickup-attachments-stg.com/t333/d9a53ce2-6d2c-48cd-84b1-ed4e525f9613/Philippine%20Data%20Privacy%20Notice_2024.pdf?view=open for further details.
Visa Sponsorship
Please note we are unable to sponsor or take over sponsorship of an employment visa for roles outside of engineering and product at this time. Sponsorship for engineering and product roles is not guaranteed, but is instead based on the business needs for that specific role at that time. Please reach out to the recruiter with any questions.
Fraud Alert
ClickUp Talent Acquisition will only initiate contact via an @clickup.com http://clickup.com email or through our official careers portal on clickup.com http://clickup.com. We will never request fees, payments, or sensitive personal information. Please disregard any offers received outside these channels and report them to support@clickup.com.
AI Processing Notice
ClickUp may use artificial intelligence and machine learning technologies to help review and screen candidates' employment applications against role-related criteria. These tools support, but do not replace, human decision‑making. If you have questions or need an accommodation in the recruitment process, please contact us at AskPeople@ClickUp.com.
Location: San Francisco, California; New York, New York
Workplace: Hybrid
WHO WE ARE
Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.
Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work.
ABOUT THE ROLE:
Notion is looking for an experienced engineer who has designed and built secure software systems to help define the security foundations for our AI products. You’ll work with product and engineering teams on agent runtimes, tool permissions, retrieval, content writes, observability, and abuse-resistant design. You’ll turn product risks into clear architecture, reusable guardrails, automated tests, and production systems that help teams ship new features safely.
This role is based in San Francisco. We work from our offices on Mondays, Tuesdays and Thursdays (our Anchor Days) because we do our best thinking and building together in person. We’re looking for someone who’s excited to work alongside the team during those days.
WHAT YOU'LL ACHIEVE:
- Define and build security architecture for product surfaces that operate across customer workspace content, including tool execution, content writes, retrieval, permission checks, provenance, and auditability.
- Make the secure path the easy path for product teams by shipping reusable libraries, review patterns, test fixtures, and guardrails that prevent classes of vulnerabilities.
- Build automated red-team and regression testing for risks such as prompt injection, indirect instruction following, data exfiltration, tool misuse, cross-tenant leakage, and unsafe workspace mutations.
- Translate threat models for new product surfaces into concrete engineering requirements, production checks, and launch criteria.
- Use production signals, incident learnings, and targeted experiments to harden Notion over time, then feed those learnings back into architecture and developer workflows.
- Help define the security bar for how engineers use coding agents, MCP-enabled tools, hooks, and internal automation without introducing new risk.
SKILLS YOU'LL NEED TO BRING:
- Secure software engineering craft: You have 8-10+ years of experience designing, building, or securing complex software systems, and you are comfortable working in production code with product and platform engineers.
- Security architecture judgment: You can look at a complex system and reason about where the permissions, data flow, or trust boundaries are likely to get weird, and help re-design it to make them better.
- Security product strategy: You can turn a complex security risk you see into a product design or architecture that can be built.
- Builder mindset: You’d rather leave behind a useful tool, test, library, or pattern than a task or project for someone else to pick up later.
NICE TO HAVES:
- Experience building or securing products with tool use, retrieval, workflow automation, content writes, or complex permission boundaries.
- Hands-on experience with prompt-injection testing, red teaming, model behavior evaluation, or abuse-resistant application design.
- Experience with enterprise SaaS security models: permissions, sharing, audit logs, data residency, encryption, compliance, or customer-facing trust guarantees.
- Experience building developer tooling, CI checks, coding-agent workflows, MCP integrations, or internal frameworks that shape how engineers build software.
- Public security research, vulnerability writeups, conference talks, or open-source work related to product security or secure developer infrastructure.
Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco, the estimated base salary range for this role is $270,000 - $340,000 per year.
By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550. https://dev.notion.so/a3ce416456924276a59de91bca740028?pvs=21
#LI-Onsite
A NOTE ON AI
You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on.
EQUAL OPPORTUNITY & ACCOMMODATIONS
We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
Location: Singapore, Singapore
OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa.
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
About the Opportunity
We are looking for a
Database Administrator
who will contribute to the design, deployment, optimisation, and full lifecycle management of enterprise-level cloud database platforms. You will implement multi-cloud architectures for Alibaba Cloud and AWS databases, ensuring high availability, high performance, and cost optimization.
What You'll Be Doing
Execute end-to-end database operations, including backup and recovery, monitoring and alerting, health checks, capacity planning, release support, lifecycle management, and operational documentation, ensuring database platforms meet business requirements for stability, performance, and availability.
Drive database reliability and performance optimization, including SQL tuning, index optimization, schema review, workload analysis, slow-query analysis, and root-cause investigation for production incidents.
Implement database security and governance controls, including access management, privilege review, audit logging, encryption, data masking, vulnerability remediation, and security baseline enforcement.
Maintain, and regularly validate database backup, recovery, and disaster recovery solutions, including RPO/RTO planning, restore testing, cross-region/cross-zone replication, failover drills, and emergency recovery procedures.
Deliver database migration, scaling, sharding, read/write splitting, high availability, and data distribution solutions for business-critical systems.
What We Look For In You
Bachelor's degree or above in Computer Science or a related field, with
4+ years of database management experience
and
2+ years of cloud platform (Alibaba Cloud / AWS) experience.
Proficiency in relational, NoSQL, and distributed database architectures; familiar with high-availability designs and proven experience delivering them in production.
Deep understanding of mainstream database engine internals; strong hands-on database design, capacity planning, and architecture governance capabilities.
Proficient in database performance tuning and optimization; experienced operating databases at high concurrency and large-scale data volumes.\Hands-on experience with MySQL, PostgreSQL, Redis, MongoDB, Elasticsearch, HBase, and Kafka.
Strong Linux/Unix system administration skills, with proficiency in Python and Shell scripting; familiarity with Perl or PHP is a plus.
Perks & Benefits
Competitive total compensation package
L&D programs and Education subsidy for employees' growth and development
Various team building programs and company events
Wellness and meal allowances
Comprehensive healthcare schemes for employees and dependants
More that we love to tell you along the process!
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
География найма не уточнена
География найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
УдалённоUnited States; ClickUp Talent Acquisition will only initiate contact via an @clickup.com http://clickup.com email or through our official careers portal on clickup.com http://clickup.com
ГибридSan Francisco, California; New York, New York
Singapore, Singapore
Все вакансии в одном месте - страница 20 · Job Hunters