Вакансии

Location: London Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. THE ROLE Checkout.com http://Checkout.com is scaling a multi-cloud environment at pace, and security architecture is central to how we do it safely. As Senior Cloud Security Engineer, you'll work closely with Engineering, GRC, Technology Risk, and Security Operations to embed security into every design decision and to make sure we can see what's happening across the estate once it's live. You'll help embed security within the design phase and ongoing operations of our multi-cloud posture, define guardrails and policy-as-code standards, and support the strengthening of our SIEM and detection capability. You'll take on the most complex and ambiguous cloud security challenges in the business, and hold engineers to best practices. This isn't a tool-monitoring role. You're here to lead security-by-design, set best-practice standards, and raise the bar. What You'll Be Doing - Develop and enforce reference security architectures, patterns, and blueprints for secure cloud adoption across AWS, Azure, and GCP. - Conduct security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift. - Partner with Engineering teams to embed security guardrails early in design, ensuring compliance and resilience without adding friction. - Evaluate engineering and platform architecture proposals, identifying security gaps and seeing remediation through to completion. - Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS. - Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most against CIS, NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes. - Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate. - Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support business decision-making. Skills and Experience We're Looking For We're looking for someone with strong technical expertise and a genuine passion for security. Here's what we need: - Risk-based decision-making and adherence to regulatory and internal security standards (PCI DSS, NIST, SOC 2, ISO 27001, CIS). - Broad knowledge across security domains and their capabilities within AWS, Azure, and GCP, with 6+ years' hands-on experience and SME depth in at least one platform. - Kubernetes (EKS/AKS/GKE), API security, and IaC security (e.g. Terraform, CloudFormation, ARM templates). - Securing user and non-user access at scale, including Azure Policy and cloud-native IAM controls. - Demonstrated ability to provide clear, security-focused guidance, combined with excellent communication and senior-stakeholder engagement skills, and experience mentoring other engineers. Nice to Have - CISSP, CCSP, or equivalent certifications. - AZ-500, AWS Certified Security, Google Professional Cloud Security Engineer, or equivalent cloud security certification. - Microsoft Certified: Azure Solutions Architect Expert, or Google Professional Cloud Architect. - Experience integrating ATT&CK Navigator into SOC workflows. Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Location: London Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. THE ROLE You will be a hands-on operator at the heart of the Cyber Security team, helping to run, harden, and continuously improve the day-to-day machinery of security. Where the Detection & Threat Engineer defines what "good" looks like, you help make it real, turning standards, runbooks, and tooling into reliable, repeatable operational practice. This is a delivery-focused role for an experienced practitioner. You will spend your time in the tooling, in the tickets, and in the detail: enhancing the platforms the team depends on, tightening procedures, and making sure findings, alerts, and remediation work actually get closed out rather than left to drift. You will partner closely with Senior Detection & Threat Engineers, Application Security, Information Security, Security Operations, and Engineering executing against the standards they set, feeding operational insight back up, and progressively taking ownership of the tooling and procedures that keep security operations running. WHAT YOU'LL BE RESPONSIBLE FOR - Supporting and enhancing security tooling SIEM, EDR, DLP, vulnerability management, and automation platforms including configuration, tuning, and day-to-day maintenance - Building and improving operational procedures, runbooks, and playbooks so the team's response is consistent and repeatable - Triaging and handling security alerts, escalating high-severity events, and contributing to incident response under the direction of senior engineers - Tracking, coordinating, and driving pentest and vulnerability findings through to remediation across engineering teams (ownership, action plans, status, closure) - Maintaining the accuracy and hygiene of security data asset inventories, finding trackers, and remediation records - Supporting detection deployment and validation, and feeding operational feedback into detection tuning to reduce noise and alert fatigue - Assisting with scripting and automation to remove manual toil from recurring operational tasks - Producing clear operational reporting and metrics on findings, remediation progress, and tooling health WHAT WE'RE LOOKING FOR - 5+ years of hands-on experience in a Security Operations, SOC, or equivalent operational security role - Practical experience operating modern security tooling SIEM (e.g. Sentinel), Data Loss Prevention (DLP) tools, EDR, and vulnerability management platforms - Solid understanding of security operations workflows: alert triage, incident handling, and vulnerability/finding remediation lifecycles - Comfort with scripting to support automation and tooling (e.g. Python, KQL) - Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closure - Working knowledge of cloud environments (e.g. AWS, Azure and GCP) and how security operations apply across cloud and SaaS - Familiarity with common frameworks and standards such as PCI DSS, NIST CSF, SOC 2, ISO 27001, CIS Benchmarks, and MITRE ATT&CK - A pragmatic, ownership-minded operator: methodical, detail-oriented, and focused on getting things fixed rather than just logged Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Location: Remote - US About Backblaze Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. Backblaze is seeking a highly analytical, systems-oriented Director of Security Operations to drive the planning, forecasting, deployment, and optimization of hardware infrastructure across our global cloud storage platform. Role Overview The Director of Security Operations leads the organization's day-to-day cybersecurity operations across traditional and AI-enabled environments. Reporting to the CISO, the Director leads Security Operations while partnering closely with the Director of Security Architecture & Engineering. This is a hands-on technical leadership role requiring experience implementing and operating security controls as well as leading teams, incidents, and security programs. Key Responsibilities Lead security monitoring, incident response, threat hunting, security analytics, vulnerability management, adversary emulation, identity security, and operational resilience. Establish operational priorities, service objectives, metrics, playbooks, and processes based on organizational risk and business needs. Serve as incident commander for significant cybersecurity events and ensure lessons learned drive improvements to controls and operations. Drive responsible adoption of AI-assisted detection, investigation, vulnerability analysis, threat hunting, and response capabilities. Ensure effective security monitoring and response for AI applications, autonomous agents, workloads, and non-human identities. Use automation to reduce manual work and compress detection, analysis, containment, and remediation timelines. Partner with Security Architecture & Engineering to ensure controls are effectively designed, implemented, operationalized, monitored, and validated. Develop security talent and provide the CISO with clear reporting on incidents, exposure, operational performance, risk, and program maturity. Qualifications Experience leading Security Operations, Incident Response, Detection Engineering, Vulnerability Management, IAM, or related cybersecurity functions. Demonstrated hands-on experience implementing and operating security controls across cloud, infrastructure, applications, identity, endpoints, and networks. Strong technical understanding of security analytics, detection engineering, exposure management, adversary emulation, and identity security. Experience leading significant cybersecurity incidents and cross-functional response activities. Experience implementing security automation and AI-assisted operational capabilities. Strong leadership, mentoring, communication, and executive presentation skills. Experience in cloud-native or large-scale distributed environments and familiarity with modern cybersecurity and AI-risk frameworks is preferred. Backblaze Perks: Healthcare for family, including dental and vision Competitive compensation and 401K RSU grants for full-time employees ESPP program Flexible vacation policy Maternity & paternity leave MacBook Pro to use for work plus a generous stipend to personalize your  workstation Childcare bonus (human children only) Fertility treatment and support Learning & development program Commuter benefits Culture that supports a healthy work-life balance To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors, including candidate location, skills, depth of work experience, and relevant licenses/credentials, and may vary from the amounts listed below. The base pay range for this position is $205,000 - $230,000 At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer. To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are looking for an AI Agent Security Architect to function as the primary technical authority for Replit’s autonomous and AI agent security blueprint. In this critical role, you will design, implement, and maintain the runtime defense systems, guardrail frameworks, and sandboxing architectures that govern AI agents executing code, invoking tools, and reasoning across our platform. You will be a key technical contributor—leading high-impact AI security initiatives and bridging the gap between non-deterministic AI behavior and rigorous cybersecurity controls for both engineering and executive leadership. What You'll Do - AI Agent Security Strategy & Technical Execution - AI Agent Security Blueprint: Define the long-term vision and architectural patterns for securing autonomous agent workflows, Model Context Protocol (MCP) integrations, multi-turn reasoning loops, and multi-agent coordination. - Runtime Guardrails & Policy Enforcement: Architect and deploy dynamic input/output guardrail systems, semantic firewalls, and real-time intent verification filters to prevent goal hijacking, system prompt leaks, and indirect prompt injections. - Agent Execution & Tool Sandboxing: Partner with Infrastructure and AppSec teams to design secure, short-lived, micro-isolated environments (e.g., microVMs, WebAssembly, container sandboxes) where agents can dynamically execute code, run shell commands, and interact with host operating systems safely. - Agentic Threat Modeling & Red Teaming: Conduct specialized threat modeling against non-deterministic systems. Lead automated and manual AI red-teaming initiatives to uncover vulnerabilities in RAG context pipelines, vector stores, and tool-calling interfaces. - Identity, Delegation & Least Privilege: Architect fine-grained permission models and step-up Human-in-the-Loop (HITL) authorization patterns for agents acting on behalf of users—ensuring agents never exceed the delegated privileges of the end user or misuse API keys. - Context & Memory Boundary Security: Design strict data isolation and poisoning prevention controls for vector databases, retrieval-augmented generation (RAG) pipelines, and long-term conversation memories across multi-tenant workloads. - Risk Management & Cross-Functional Enablement - Maintain the AI Security Source of Truth: Define, document, and maintain authoritative secure design patterns and SDKs for engineering teams building internal or customer-facing AI agent capabilities. - Contribution to Risk Register: Identify, quantify, and document non-deterministic and agentic security risks (e.g., OWASP Top 10 for LLMs & AI Agents, MITRE ATLAS), ensuring they are accurately represented in the Cybersecurity Risk Register. - Auditability & Observability: Design tamper-evident logging and telemetry standards for agent reasoning chains, tool execution history, and context assembly to support incident response, forensics, and GRC requirements. - Compliance & Sales Enablement: Partner with GRC to translate complex AI security controls into enterprise-ready audit documentation (e.g., ISO 42001, NIST AI RMF, EU AI Act readiness) and support Sales on complex enterprise security inquiries regarding AI safety. Required Skills & Experience - 6+ years of experience in security engineering or security architecture, with at least 2+ years dedicated specifically to AI/ML security, LLM application security, or securing agentic frameworks. - Deep understanding of agentic architectures and protocols (e.g., Model Context. Protocol (MCP), LangChain, AutoGen, CrewAI, ReAct frameworks, and vector database technologies). - Hands-on expertise with threat vectors unique to agentic AI: Indirect Prompt - Injection, Goal Hijacking, Tool Parameter Tampering, Data Poisoning, and Context Contamination. - Strong background in applying safety standards and risk frameworks such as OWASP Top 10 for LLMs & AI Agents, NIST AI RMF, and MITRE ATLAS. - Proficiency in Python, Go, or TypeScript/JavaScript with a proven track record of reviewing code and building functional security tooling or guardrails. - Experience authoring, maintaining, and evangelizing technical security architecture documentation. - Exceptional ability to communicate complex non-deterministic AI risks to both deep technical engineers and executive stakeholders. - Proven track record of contributing to an enterprise Cybersecurity Risk Register. Bonus Qualifications - Experience designing runtime sandboxing and isolation technologies (e.g., Firecracker, gVisor, Docker, WebAssembly) for dynamic code execution environments. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Location: USA (Remote) Workplace: Remote Tempo is a layer-1 blockchain purpose-built for stablecoins and real-world payments, born from Stripe’s experience in global payments and Paradigm’s expertise in crypto tech.   Tempo’s payment-first design provides a scalable, low-cost predictable backbone that meets the needs of high-volume payment use cases. Our goal is to move money reliably, cheaply, and at scale. Our north star is simplicity for users: fintechs, traditional banks, merchants, platforms, and anyone else looking to move their payments into the 21st century.   We're building Tempo with design partners who are global leaders in AI, e-commerce, and financial services: Anthropic, Coupang, Deutsche Bank, DoorDash, Mercury, Nubank, OpenAI, Revolut, Shopify, Standard Chartered, Visa, and more.   We’re a team of crypto-optimists, building the infrastructure needed to bring real, substantial economic flows onchain. We like to move fast and swing for the fences — join us! THE ROLE You'll be Tempo's first dedicated product security engineer, standing up application and infrastructure security from the ground floor. You'll build real tooling, respond to real incidents, and work directly with engineering to secure systems that help onboard the largest enterprises onchain. RESPONSIBILITIES - Build and deploy security tooling across endpoint management, supply-chain security, infrastructure, and application layers - Identify and remediate security gaps across Tempo's production systems and development pipelines - Lead incident response end-to-end: triage, containment, remediation, and post-mortems - Partner with engineering on secure design reviews and operational security decisions - Establish repeatable, practical security practices for how systems are built, deployed, monitored, and secured - Improve supply-chain security across dependencies, build systems, and deployment artifacts - Scale application-security coverage as Tempo's infrastructure and product surface grow - Operate with autonomy, build what's needed without waiting for large-company support structures QUALIFICATIONS - 5–8 years of hands-on product or application security engineering experience - Track record building security practices at a company in the 100–500 person range, or similar environments with limited existing security infrastructure - Hands-on coding ability: you build security tooling, automation, and detection, not just recommendations - Deep incident-response experience including high-severity situations owned end-to-end - Strong infrastructure security knowledge: hosting environments, network security, monitoring, and securing system integrations - Application security fundamentals: threat modeling, secure code review, vulnerability management, supply-chain security - Comfortable communicating technical security decisions to engineers with real depth and specificity

Location: Montréal We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. Job Overview Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ERP Central Component (ECC), S/4HANA, SAP RISE, SAP Business Technology Platform (BTP), Identity Authentication Service (IAS), and Identity Provisioning Service (IPS). We are bringing more SAP security responsibility in-house and need someone who can guide complex work with technical knowledge, collaboration, and sound judgment, helping keep access to our SAP systems well governed, compliant, and ready for our migration to SAP RISE. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners. Candidates who meet many, but not all, of the qualifications are encouraged to apply. Location and Work Arrangement This role is based at our Montreal, Quebec, Canada office and follows a hybrid schedule designed to support in-person collaboration. Employees are expected to work onsite on Tuesdays, Wednesdays, and Thursdays, with the flexibility to work remotely or onsite on Mondays and Fridays. What You'll Do Build SAP security architecture, standards, access models, and role design practices. Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls. Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements. Lead role cleanup, redesign, simplification, and Segregation of Duties (SoD) remediation. Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance (GRC), covering connectors, workflows, risk rules, provisioning, access analysis, and reporting. Strengthen access provisioning, access reviews, emergency and privileged access oversight. Support Sarbanes-Oxley (SOX) and IT General Controls by collecting evidence, conducting audit walkthroughs, resolving issues, and providing clear documentation. Review access risks, weak role builds, SoD conflicts, insecure configurations, and control gaps. Partner with finance, supply chain, HR, procurement, SAP application teams, enterprise architecture, identity teams, cybersecurity, compliance, audit, and external partners. Provide technical mentorship without formal people-management responsibility. What You'll Bring At least 6 years of relevant experience, or equivalent demonstrated experience, in SAP security, access governance, role development, or related work. Solid understanding of SAP ECC and S/4HANA authorization concepts. Experience in configuring or supporting SAP GRC and SAP Identity Access Governance. Familiarity with SAP BTP, IAS, IPS, and SAP RISE security considerations. Knowledge of Role-Based Access Control, Segregation of Duties, privileged access, user lifecycle management, and access reviews. Experience assisting with SOX, IT General Controls, internal audit, or external audit activities. Ability to guide complex initiatives, communicate clearly, and build trust with technical and business partners. Professional proficiency in French and English is required for this role. English is necessary to communicate and collaborate regularly with colleagues and leaders based in the United States who primarily work in English. What Sets You Apart SAP security certification or related SAP certification. Experience securing SAP RISE environments hosted on AWS or SAP-managed cloud infrastructure. Experience with S/4HANA migration, ERP modernization, hybrid SAP landscapes, or cloud identity integration. Experience in managing emergency access, conducting access certification, automating provisioning, and handling privileged access controls. Experience in a global enterprise environment with complex business processes and audit needs. Who We Are We’re a team of creators, storytellers, and innovators united under the Hasbro family and home to beloved brands, AAA digital games studios and immersive experiences that spark imagination across generations. Together, we’re committed to a culture rooted in creativity, excellence, curiosity, and inclusion, and where every employee is empowered to think boldly, act with integrity, and spark joy for all. Hasbro About the Company – Hasbro Wizards of the Coast Who We Are – Wizards of the Coast Equal Opportunity Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. Accommodations If you have a disability and need reasonable accommodation during the hiring process, please inform your recruiter anytime throughout the process. Notice Regarding Hasbro’s use of AI in the Recruitment Process We use Greenhouse’s AI-powered Talent Matching tool to compare your application against our job requirements. How it works: Talent Matching compares information from your resume and application responses with job-related criteria established and weighted by Hasbro’s recruiting and hiring teams. Depending on the role, these criteria may include relevant skills, work experience, prior job titles, and industry experience. The tool then assigns a match category to help organize applications for review. Human oversight: Talent Matching supports — but does not replace — human review. It does not automatically advance or reject candidates or make employment decisions. Hasbro’s recruiters and hiring managers review applications and remain responsible for all hiring decisions. Greenhouse has published the results of an independent bias audit of Talent Matching. View the Greenhouse Talent Matching audit results . #StudiosWizards Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include: Health & Wellness Time Off to Recharge Financial Well-being Life & Family Support Volunteer and Community Initiatives Learning & Development Exclusive Perks Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.

Location: Lisbon, Portugal About the Role iCapital is looking to hire a SOC Manager to join its Global Information Security team, based in Lisbon, Portugal. This role manages the day-to-day operations of the Security Operations Center (SOC) and leads the team of analysts who monitor, triage, and respond to security alerts. The SOC Manager provides situational awareness through detecting, containing, and resolving cyber security threats using a comprehensive set of technologies including IDS, IPS, DLP, SIEM, SOAR, AWS, SaaS Security, and firewall technologies. This is a people-management role focused on keeping the SOC running smoothly – coverage, runbooks, triage, and escalation – while developing the analyst team. The SOC Manager works closely with the Cyber Case Manager to ensure incidents flow into case management and are tracked through to closure, and partners with Threat Detection Engineering, Cloud Security, Incident Response, and other Information Security teams to strengthen the firm’s overall cyber resiliency. Based in Lisbon, the role helps provide security operations coverage across global time zones. This role reports to the Security Operations Leader. Responsibilities Manage the day-to-day operations of the Security Operations Center, ensuring monitoring, alerting, triage, and incident response run effectively across the operating day. Lead, mentor, and develop a team of SOC analysts – including scheduling, shift and on-call coverage, performance management, hiring, and onboarding. Establish and maintain runbooks, playbooks, incident-handling procedures, and daily, weekly, and monthly security checklists. Operate, tune, and manage the SIEM and SOAR platforms; maintain alerts and dashboards that surface key security events and provide security assurance. Triage and escalate incidents quickly and effectively, setting priorities for the SOC team and coordinating response with other teams across the firm. Partner closely with the Cyber Case Manager to ensure incidents flow into case management and are tracked to closure, and to keep the team aligned to case-driven priorities. Work alongside Threat Detection Engineering, Cloud Security, Incident Response, and other Information Security teams to improve the firm’s security posture. Measure and report on the state of the firm’s cyber security defenses, including operational metrics and regular reporting to leadership. Serve as an escalation point for high-severity incidents, including outside standard business hours as needed. Drive the evaluation, selection, and configuration of key security tools to enhance Cyber Security Operations. Qualifications 5-8 years of experience in security operations, including 1-3 years leading or managing a SOC or security operations team. Demonstrated people-management experience – leading, mentoring, scheduling, and developing analysts. Hands-on experience with the setup and management of a SIEM, preferably Splunk. Experience with SOAR and a strong understanding of the incident-response lifecycle and frameworks such as NIST and MITRE ATT&CK. Knowledge of Linux, Windows, and macOS operating systems. Experience with cloud infrastructure, AWS preferred. Strong coordination and stakeholder-management skills, with the ability to liaise across teams and report to leadership. Professional fluency in English to support a global team. Attentive, organized, and detail-oriented, with solid problem-solving and analytical skills. Excellent written and verbal communication skills.. We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday). Benefits iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO). For additional information on iCapital Network, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc

Location: Boston, MA Workplace: OnSite At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP is seeking a Director, Security Engineering & Operations to lead the teams responsible for enterprise security engineering and security operations. Reporting directly to the CISO and serving as a senior member of the Security leadership team, this leader will shape strategy, lead a growing team of managers, engineers, and analysts, and drive measurable security outcomes across a fast-moving technology environment. This is a leadership role for someone who has successfully scaled security operations in complex, high-growth environments and brings strong security engineering experience. The right leader combines strategic judgment with strong technical depth, staying close enough to the work to set a high bar for engineering quality, guide critical technical decisions, and lead effectively through significant security events. This leader will play a significant role in shaping the team, operating model, and technical roadmap as WHOOP scales, advancing capabilities across security engineering, detection and response, incident management, security automation, identity, cloud, endpoint, SaaS, data protection, and other enterprise security domains. As WHOOP expands its use of AI across member-facing products, internal technology, and engineering, and continues to evolve its capabilities in health, this leader will help ensure security scales alongside the company's technology, data, regulatory, and threat landscape. RESPONSIBILITIES - Lead Security Engineering and Security Operations, defining strategy, priorities, technical standards, performance expectations, and measurable outcomes across both functions. - Advance a risk and threat-informed detection and response program that connects priority threat scenarios to the telemetry, detections, investigation capabilities, response procedures, and operational controls required to address them, including identity-centric, data protection, and insider risk scenarios. - Lead security incident readiness and response, including escalation, incident command for significant events, cross-functional coordination, post-incident review, and accountability for follow-up actions. - Guide the engineering and operationalization of preventive and detective security controls across identity, endpoint, cloud, SaaS, infrastructure, data, AI-enabled systems, and other high-value enterprise environments, while setting a high bar for technical design, testing, documentation, maintainability, and lifecycle management. - Lead the security strategy and engineering approach for AI-enabled products and enterprise AI adoption, including access controls, sensitive data handling, model and application security, third-party integrations, tool and agent permissions, monitoring, auditability, and secure use of AI across the company. - Drive an outcome-oriented approach to security technology and managed services, maximizing the effectiveness of existing capabilities, making disciplined decisions about when to automate, build, buy, or use external partners, and holding security partners accountable to measurable outcomes. - Drive disciplined execution across the security engineering and operations portfolio through effective prioritization, roadmap and backlog management, capacity planning, metrics, ownership, and operating cadence. - Lead, coach, and develop managers, engineers, and analysts, setting clear expectations for technical quality, judgment, ownership, execution, and professional growth. - Strengthen collaboration across Product Security, Security Architecture, Platform, Fraud, Engineering, IT, GRC, Legal, Privacy, and other business functions, creating clear ownership and effective operating relationships across organizational boundaries. - Partner with the CISO on organizational design, workforce planning, hiring, and development of the capabilities required as the Security organization evolves, while providing clear, data-driven communication on security posture, operational performance, significant risks, and strategic priorities. QUALIFICATIONS - 10+ years of experience in information security, with deep experience in Security Operations and meaningful experience across Security Engineering in complex technology environments. - 5+ years of people leadership experience, including multiple years managing managers and senior technical individual contributors. This is not a first-time people leadership role. Demonstrated strength in hiring, coaching, performance management, organizational design, and raising the bar for team quality and execution. - Deep technical expertise in detection engineering, SIEM and telemetry strategy, incident response, and modern security operations, including experience leading significant security incidents. - Proven ability to drive disciplined execution across priorities, roadmaps, backlogs, metrics, and ownership, while maximizing existing capabilities before introducing additional technology. - Experience managing MDR, MSSP, or similar security partners and holding them accountable to measurable operational outcomes. - Experience securing AI-enabled products, enterprise AI adoption, or AI development environments, including risks related to sensitive data, models, agents, third-party services, access, and monitoring. - Strong judgment and relationship-building skills, with a track record of working effectively across technical, product, risk, legal, and senior leadership teams. - Experience in health technology or another sensitive-data environment is a plus. This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.   Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $220,000-$245,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Location: Tel Aviv, Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is looking for a Head of Proactive Security to establish and lead the Proactive Security pillar. Reporting directly to the CISO, this leader will manage the Red Team, Penetration Testing, Threat Hunting, and Threat Intelligence teams. The role is responsible for anticipating relevant threats, challenging Nebius's defenses, identifying exploitable weaknesses, hunting for adversary activity that may evade existing controls, and converting findings into measurable security improvements. This is a hands-on leadership position for someone who combines offensive-security depth, threat-led thinking, strong operational judgment, and the ability to influence product, engineering, infrastructure, and security stakeholders. Your responsibilities will include: Pillar strategy and leadership Define the Proactive Security strategy, operating model, roadmap, priorities, budget, and success measures in alignment with Nebius's business objectives and threat profile. Build, lead, and develop high-performing Red Team, Penetration Testing, Threat Hunting, and Threat Intelligence teams. Create a unified intelligence-led program in which threat intelligence informs testing and hunting, and findings continuously improve defensive controls. Prioritize work based on crown jewels, material attack paths, emerging threats, major technology changes, incidents, and business risk. Establish clear team charters, engagement models, escalation paths, quality standards, and career-development frameworks. Provide the CISO and senior leadership with clear visibility into adversary exposure, validated weaknesses, emerging threats, and remediation progress. Red Team and adversary emulation Lead realistic, intelligence-led adversary simulations across cloud, identity, applications, infrastructure, endpoints, networks, and operational processes. Design campaigns that evaluate prevention, detection, response, escalation, and recovery capabilities against relevant threat scenarios. Develop and maintain adversary-emulation plans mapped to relevant threat actors, tactics, techniques, and procedures. Ensure every engagement operates under documented authorization, rules of engagement, safety controls, deconfliction procedures, and evidence-handling requirements. Deliver concise technical and executive reporting that explains demonstrated impact, attack paths, root causes, and prioritized improvements. Penetration testing and continuous security validation Own the risk-based penetration-testing program for Nebius products, applications, APIs, cloud environments, infrastructure, and critical internal systems. Define testing standards, scoping criteria, methodologies, quality assurance, retesting, and reporting requirements. Coordinate internal testing and specialized external providers while maintaining consistent quality and risk prioritization. Partner with Product, Engineering, Infrastructure, and Security teams to integrate testing into major launches, architectural changes, and high-risk initiatives. Track findings through validation, remediation, exception, and closure, and identify systemic or recurring weakness patterns. Expand automation and continuous validation where it improves coverage without replacing expert-led testing and judgment. Threat hunting Establish a hypothesis-driven threat-hunting program across endpoint, identity, cloud, network, workload, application, and SaaS telemetry. Prioritize hunts using threat intelligence, incidents, environmental changes, control gaps, and emerging adversary techniques. Search for active, historical, or previously undetected malicious behavior that may not trigger existing alerts. Turn validated hunt findings into new detections, telemetry requirements, response playbooks, hardening actions, and future hunt hypotheses. Define repeatable hunt methodology, documentation standards, evidence handling, and measurement of hunt effectiveness. Partner closely with Detection and Response, Incident Response, Security Engineering, and infrastructure teams during investigations and remediation. Threat intelligence Own Nebius's threat-intelligence strategy, collection priorities, analysis standards, dissemination model, and intelligence lifecycle. Maintain a current view of threat actors, campaigns, vulnerabilities, geopolitical developments, and techniques relevant to Nebius, its customers, and its technology stack. Produce strategic intelligence for leadership, operational intelligence for defenders, and tactical intelligence that supports detections, investigations, hunting, and testing. Translate intelligence into clear changes to security priorities, control coverage, red-team scenarios, hunt hypotheses, and incident readiness. Establish reliable processes for source evaluation, confidence assessment, intelligence sharing, and secure handling of sensitive information. Build trusted relationships with industry peers, relevant communities, vendors, and information-sharing organizations. Defensive improvement and governance Create a closed-loop process that converts proactive-security findings into owned, prioritized, and measurable remediation actions. Partner with Security Engineering, Detection and Response, Product Security, Cloud Security, IT, and Engineering to improve controls and reduce repeat findings. Ensure material findings are communicated promptly, tracked transparently, and escalated according to risk. Define reporting that distinguishes activity from outcomes and demonstrates improvements in resilience, coverage, and adversary readiness. Support major incidents with threat context, attack-path analysis, hunting, and specialist offensive expertise when required. Maintain strong legal, ethical, privacy, and operational-safety standards across all proactive-security activities. We expect you to have: Extensive cybersecurity experience, including leadership responsibility in offensive security, penetration testing, threat hunting, threat intelligence, detection engineering, or incident response. Proven experience building or scaling multidisciplinary security teams and programs, including budgets, vendors, and external testing providers. Strong technical understanding of modern cloud environments, identity systems, applications, APIs, networks, endpoints, containers, and production infrastructure. Demonstrated experience planning and delivering red-team operations, penetration tests, or adversary-emulation exercises. Practical knowledge of threat-hunting methodology, telemetry, detection logic, and investigation workflows. Experience producing and operationalizing strategic, operational, and tactical threat intelligence. Strong understanding of adversary behavior and frameworks such as MITRE ATT&CK. Excellent communication and executive-presentation skills, with the ability to translate complex technical findings into clear business risks, decisions, and remediation actions. Sound judgment regarding authorization, operational safety, confidentiality, evidence handling, and responsible disclosure. It will be an added bonus if you have: Experience in cloud, hyperscale, AI, or other highly distributed technology environments. Deep domain expertise, relevant certifications or equivalent practical experience, and a track record of responsible research or industry collaboration. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: San Francisco Perplexity is seeking energetic researchers and engineers to join our Secure Intelligence Institute (SII), Perplexity's flagship research center for advancing security, privacy, and trust in frontier intelligence. SII’s goals are to advance frontier AI security research, translate those advances into concrete improvements in Perplexity's systems, and share knowledge and resources that strengthen the broader AI ecosystem. As a member of SII, you'll conduct original and impactful research on improving the security and privacy of frontier intelligence systems. Your goal will be to conduct research that is not only rigorous in theory, but practical enough to improve the systems people rely on every day. This work will be informed by the realities of operating general-purpose AI systems used by millions of people and thousands of enterprises, and you'll be expected to translate both your own research and advances from the broader community to practical improvements that protect and defend Perplexity's users. RESPONSIBILITIES - Develop threat models for emerging attack surfaces in AI-native products, including browser, search, and autonomous agents. - Identify and analyze security and privacy threats across AI systems, infrastructure, and user-facing products. - Develop novel defenses, mitigations, and detection mechanisms for security and privacy in AI-native products. - Build security evaluation frameworks, benchmarks, and datasets to measure the effectiveness of different defense mechanisms. - Partner with Perplexity’s Security Engineering team to translate state of the art research into shipped security features and hardened system architectures. - Collaborate with top-tier academic and industry researchers in SII's external research network. - Publish findings at premier venues and contribute to the broader security research community. QUALIFICATIONS - Hold a PhD (or equivalent research experience) in Computer Science, Computer Engineering, or a related field, with a primary focus on security and/or privacy. - Experience publishing at top security conferences (IEEE S&P, USENIX Security, ACM CCS, NDSS) demonstrating original, impactful research contributions. - Deep expertise in one or more of: security of agentic systems, systems security, web and applications security, program analysis, and software security. - Proficiency in Python (bonus points for TypeScript, Go, and/or Rust). - Ability to operate with high independence, willing to dive in and take ownership, and comfortable in a fast-paced environment where research directly informs product. - Clear and concise communcation, translating complex attack narratives into actionable insights for engineering and leadership.

Location: Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role We are seeking an experienced Security Engineering Lead to join the Cyber Security organization, reporting to the Corporate Security Engineering Manager under the CISO. This is a senior technical lead role focusing on engineering and execution without direct people management responsibilities. This role combines hands-on security engineering to deliver end-to-end protection across corporate, cloud, and SaaS environments. You will not only define strategy and standards - you will build, configure, tune, and operate the technical controls that enforce them. You will be responsible for implementing, managing, integrating and maintaining security systems across the organization’s IT landscape. The role requires deep technical proficiency in multiple platforms and tools, combined with the ability to collaborate with Security, IT, Engineering, Product, GRC and other business units to reduce risks and embed strong security practices. Your responsibilities will include: Engineer, deploy, and continuously tune systems such as Identity & Access, Threat Detection & Response, Cloud & Network Security. Define, enforce and maintain security policies & configurations across endpoints, email, SaaS, network, and cloud platforms. Design and implement solutions to gain continuous visibility into systems and processes, sensitive data, data flows, misconfigurations, and exposure risks across cloud and multi-cloud environments. Monitor, triage, and investigate security alerts and risks, collaborating with Security, IT, Network teams on escalation and remediation. Conduct risk assessments and identify gaps in security controls across systems, pipelines, and business processes. Support compliance and regulatory requirements (e.g., GDPR, ISO 27001, SOC 2) related to security and privacy. Collaborate with Engineering, IT, Product, and GRC teams to embed security controls into systems, and workflows. Maintain documentation, runbooks, and guidelines for operations, security posture management, and security practices. We expect you to have: 6+ years of experience in IT security, with a strong focus on System, Network, Information, Cyber. With at least 3 years in a Security Engineering role. Proven hands-on engineering experience with enterprise security platforms - including policy authoring, tuning, incident workflow configuration, and platform administration. Experience securing data across cloud environments and SaaS platforms, including shadow IT and unmanaged data stores. Strong understanding of identity and access management and data access governance principles. Experience working cross-functionally with Security, IT, Engineering, Product, and GRC teams. Strong analytical mindset with the ability to communicate security risks clearly to technical and non-technical stakeholders. Excellent written and verbal communication skills in English. Proactive, detail-oriented, and ownership-driven. Hand-on experience with multiple technologies such as: XDR (Extended Detection & Response), SWG (Secure Web Gateway), DLP (Data Leakage Prevention), Email Security, Network security (Firewalls, NAC, NDR), IGA (Identity Governance & Administration), CASB (Cloud Access Security Broker), PAM (Privileged Access Management), EPM (Endpoint Privilege Management), BAS (Breach & Attack Simulation), Vulnerability Scanners, SIEM (Security Information & Event Management), SOAR (Security Orchestration, Automation & Response), CTI (Cyber Threat Intelligence), Patch Management, TPRM (Third-Party Risk Management), EASM (External Attack Surface Management). It will be an added bonus if you have: Experience building or scaling a security program from the ground up in a growing organization. Experience with cloud-native security services (AWS, Azure, Google). Knowledge of privacy and regulatory frameworks (GDPR, ISO 27001, SOC 2). Scripting or automation skills (Python, PowerShell). Relevant certifications such as CISSP, CISM. BSc in Computer Science, Information Security, or a related field. Project & people management experience. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: Toronto, Ontario, Canada Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. We take a pragmatic approach to preventing and responding to security risks. In this role not only will you build and contribute to systems which detect malicious activity, you will have the unique opportunity to implement new controls to prevent future incidents. You will work across detection and response and corporate security domains. You'll contribute to practices that keep Sentry secure as we grow: alert triage for corporate and production, detection engineering, deploying preventative controls, identity and access management, investigations and incident response, and more. You'll partner with teams across the company to prevent and respond to security incidents. You will work as a technical collaborator who prioritizes preventative controls, defense in depth, and high signal alerting practices. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security approaches and challenges. IN THIS ROLE, YOU WILL - Maintain, improve, and own detection engineering systems. We own and operate our own detection stack and are building agentic triage with thoughtful security response and orchestration automation. - Perform investigations, and contribute to security incident response. You will assist and contribute to a breadth of incident types, or Sentry and our customers. - Contribute to, maintain, and operate identity and access management systems. Access management is a critical component of our security program. - Have a lot of opportunity to grow and learn across many security domains. We are a highly cross-functional team and you will have opportunities to touch adjacent security projects spanning appsec, infrasec, governance, and privacy. - Research, identify, and respond to emerging threats relevant to Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices. YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you protect a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting breach, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than make a noisy reactive solution which requires manual triage. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team. QUALIFICATIONS - 2-5 years of industry experience in a detection and response, corporate security, or generalist security engineering role - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: alert triage, detection tuning and writing, detection-as-code, security log ingestion, investigations and security incident response, identity and access management (IAM), phishing response, user access reviews, managing endpoint detection and response tooling - Experienced and comfortable programing in at least one language (Python preferred) and comfortable using agentic development workflows - Familiarity with operating distributed cloud technology (AWS, CICD, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and experience with corporate (SSO, SAML, IAM) and defensive security tooling (EDR, SIEM, CNAPP, ZTNA, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow. The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $162,000 to $200,000 CAD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Location: San Francisco, California Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. We take a pragmatic approach to preventing and responding to security risks. In this role not only will you build and contribute to systems which detect malicious activity, you will have the unique opportunity to implement new controls to prevent future incidents. You will work across detection and response and corporate security domains. You'll contribute to practices that keep Sentry secure as we grow: alert triage for corporate and production, detection engineering, deploying preventative controls, identity and access management, investigations and incident response, and more. You'll partner with teams across the company to prevent and respond to security incidents. You will work as a technical collaborator who prioritizes preventative controls, defense in depth, and high signal alerting practices. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security approaches and challenges. IN THIS ROLE, YOU WILL - Maintain, improve, and own detection engineering systems. We own and operate our own detection stack and are building agentic triage with thoughtful security response and orchestration automation. - Perform investigations, and contribute to security incident response. You will assist and contribute to a breadth of incident types, or Sentry and our customers. - Contribute to, maintain, and operate identity and access management systems. Access management is a critical component of our security program. - Have a lot of opportunity to grow and learn across many security domains. We are a highly cross-functional team and you will have opportunities to touch adjacent security projects spanning appsec, infrasec, governance, and privacy. - Research, identify, and respond to emerging threats relevant to Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices. YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you protect a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting breach, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than make a noisy reactive solution which requires manual triage. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team. QUALIFICATIONS - 2-5 years of industry experience in a detection and response, corporate security, or generalist security engineering role - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: alert triage, detection tuning and writing, detection-as-code, security log ingestion, investigations and security incident response, identity and access management (IAM), phishing response, user access reviews, managing endpoint detection and response tooling - Experienced and comfortable programing in at least one language (Python preferred) and comfortable using agentic development workflows - Familiarity with operating distributed cloud technology (AWS, CICD, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and experience with corporate (SSO, SAML, IAM) and defensive security tooling (EDR, SIEM, CNAPP, ZTNA, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow. The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $150,000 to $200,000 USD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Location: Toronto, Ontario, Canada Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. As a Security Engineer on this team, you'll work across application and platform security domains. You'll contribute to the practices that keep Sentry secure as we grow: security reviews, threat modeling, vulnerability management, and embedding secure coding practices into an engineering organization that cares about doing things right. You'll partner closely with product and engineering teams to influence how features are designed and built from the start. You will work as a technical collaborator who helps make the secure path the obvious one. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security challenges.   IN THIS ROLE, YOU WILL - Support and help mature Sentry's security review program. From secure code review, to architecture review, and threat modeling. You'll help build the processes, tooling, and culture which make security a natural part of how we ship and operate. - Contribute to mature vulnerability management practices. Intake, triage, prioritization, remediation tracking, and support of our bug bounty and responsible disclosure program. - Advocate for secure-by-design principles. Partner with engineering and product teams to embed security early in the development lifecycle and integrate security tooling into developer and CI/CD workflows. - Validate and reproduce application and infrastructure security findings. Scanning, manual testing, and supporting penetration testing and vulnerability validation across Sentry's application, SDKs and cloud-based platform. - Help evaluate and respond to emerging threats relevant to application security at Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices.   YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you grow into shaping how security gets done across a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting vulnerability, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than solve it manually a hundred times. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team.   QUALIFICATIONS - 2-5 years of industry experience designing, building, or securing complex applications and cloud systems - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty and responsible disclosure programs - Experienced and comfortable programming in at least one language, and able to read and reason about code in Python, Typescript, Go, or Rust - Familiarity with using distributed cloud technology (AWS, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and an understanding of how those technologies are secured (cloud networking, IAM, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication   Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow.   The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $162,000 to $200,000 CAD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Location: San Francisco, California Workplace: Hybrid ABOUT SENTRY Software runs the world and the pace is faster than ever. Sentry helps developers fix errors and performance issues before users notice, so teams can spend less time firefighting and more time building. Trusted by 200,000+ organizations, Sentry is today’s application monitoring standard and our team is building its AI-native future. ABOUT THE ROLE The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset. We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate. As a Security Engineer on this team, you'll work across application and platform security domains. You'll contribute to the practices that keep Sentry secure as we grow: security reviews, threat modeling, vulnerability management, and embedding secure coding practices into an engineering organization that cares about doing things right. You'll partner closely with product and engineering teams to influence how features are designed and built from the start. You will work as a technical collaborator who helps make the secure path the obvious one. As Sentry expands our agentic product capabilities and development practices, you'll also find yourself at the frontier of a new set of security challenges.   IN THIS ROLE, YOU WILL - Support and help mature Sentry's security review program. From secure code review, to architecture review, and threat modeling. You'll help build the processes, tooling, and culture which make security a natural part of how we ship and operate. - Contribute to mature vulnerability management practices. Intake, triage, prioritization, remediation tracking, and support of our bug bounty and responsible disclosure program. - Advocate for secure-by-design principles. Partner with engineering and product teams to embed security early in the development lifecycle and integrate security tooling into developer and CI/CD workflows. - Validate and reproduce application and infrastructure security findings. Scanning, manual testing, and supporting penetration testing and vulnerability validation across Sentry's application, SDKs and cloud-based platform. - Help evaluate and respond to emerging threats relevant to application security at Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry's agentic product features and AI-assisted engineering practices.   YOU’LL THRIVE IN THIS ROLE IF YOU - Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you grow into shaping how security gets done across a fast-moving engineering organization. - Get excited when something new lands on your desk, be it an interesting vulnerability, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven't seen before. - Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction. - Reach for automation first, you'd rather build a scalable, systematic solution to a security problem than solve it manually a hundred times. - Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you're energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team.   QUALIFICATIONS - 2-5 years of industry experience designing, building, or securing complex applications and cloud systems - Degree in Computer Science or a related field, equivalent training, or professional experience - Hands-on experience with several of the following: security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty and responsible disclosure programs - Experienced and comfortable programming in at least one language, and able to read and reason about code in Python, Typescript, Go, or Rust - Familiarity with using distributed cloud technology (AWS, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and an understanding of how those technologies are secured (cloud networking, IAM, etc.) - A collaborative approach to problem solving paired with strong written and verbal communication   Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We're interested in people are excited about this opportunity and eager to grow.   The base salary range (or hourly wage range, if applicable) that Sentry reasonably expects to pay for this position is $155,000 to $200,000 USD. A successful candidate’s actual base salary (or hourly wage) amount will be determined by a variety of relevant factors including, without limitation, the candidate’s work location, education, work and other relevant experience, skills, and job-related knowledge. A successful candidate will be eligible to participate in Sentry’s employee benefit plans/programs applicable to the candidate’s position (including incentive compensation, equity grants, paid time off, and group health insurance coverage). See Sentry Benefits https://sentry.io/careers/ for more details about the Company’s benefit plans/programs. EQUAL OPPORTUNITY AT SENTRY Sentry is committed to providing equal employment opportunities to its employees and candidates for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally-protected characteristic. This commitment includes the provision of reasonable accommodations to employees and candidates for employment with physical or mental disabilities who require such accommodations in order to (a) perform the essential functions of their jobs, or (b) seek employment with Sentry. We strive to build a diverse team, with an inclusive culture where every teammate can thrive. Sentry is an open-source company because we believe that everyone, everywhere, should have the ability and tools to make great software. Software should be accessible. That starts with making our industry accessible. If you need assistance or an accommodation due to a disability, you may contact us at accommodations@sentry.io. Want to learn more about how Sentry handles applicant data? Get the details in our Applicant Privacy Policy https://sentry.io/careers/applicantprivacy/.

Location: Remote - US Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as our next Staff Engineer, Enterprise Security About the job As a Staff Enterprise Security Engineer, you will be a technical leader within the EntSec team, responsible for the foundational security posture of our organization. You will serve as an SME on the technical strategy and engineering execution for securing the AI ecosystem in our Enterprise, moving beyond policy into building the foundational "decision infrastructure" and technical guardrails that allow the enterprise to innovate with AI at scale. You will also guide strategic direction and collaboration across enterprise security domains. You will need a background in security engineering and the cross-functional influence necessary to solve ambiguous, large-scale problems. Leveraging expertise in security assessments,  threat modeling, identity and access control principles, and data protection, you will architect and build preventative guardrails and mitigate new risks introduced by first and third-party AI agents in our Enterprise. Responsibilities Design and implement secure reference architectures for Enterprise AI platforms that secures every Twilion’s engagement with them, ensuring data integrity, regulatory compliance, and resilience against evolving AI threats. Establish a definitive framework for AI vetting, driving the cultural and policy shifts needed to institutionalize this strategic mindset across the organization. Collaborate with cross functional partners to develop and set the long term roadmap for agentic AI identity and posture management, ensuring cohesive strategies for reducing risk from agentic AI use. Maintain and improve our enterprise security posture through high-quality code (Python, Go, or similar) and infrastructure management via IAC. Act as a technical mentor to junior engineers and a strategic advisor to leadership on the evolving AI landscape. Qualifications: Not all applicants will have skills that match a job description exactly. Twilio values diverse experiences in other industries, and we encourage everyone who meets the required qualifications to apply. Required: 7+ years of experience in security engineering or infrastructure security 2+ years of experience leading teams in a technical capacity/staff engineering capacity at an enterprise. Expertise in cloud security (AWS, GCP) and container security (Kubernetes). Proven track record of designing and deploying complex security systems at scale. Strong proficiency in programming languages such as Python, Go, or Java. Desired: Experience in building, deploying and reviewing automation for complex security workflows, including use of both AI-driven and traditional automation tools. Excellent communication skills with the ability to explain complex AI security risks to non-technical stakeholders. Location This role will be remote, but is not eligible to be hired in San Francisco, CA, Oakland, CA, San Jose, CA, or the surrounding areas. Travel We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings. Compensation *Please note the salary range information provided applies only to candidates residing in California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State due to local requirements. Compensation for candidates in other locations will be discussed during the hiring process. Please note that hiring for this role is not restricted to the locations listed above. . The estimated pay ranges for this role are as follows: Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $155,520 - $194,400. Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): $164.640 - $205,800. Based in the San Francisco Bay area, California: $182,960 - $228,700. This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave. The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location. Applications for this role are intended to be accepted until December 21, 2026, but may change based on business needs. Twilio thinks big. Do you? We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call Twilio Magic . Additionally, we empower employees to build positive change in their communities by supporting their volunteering and donation efforts. So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for, please consider other open positions. . Stay alert to recruitment fraud We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @ twilio.com email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps. . Twilio is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.

Location: Lisbon, Portugal Joom Group is an international tech-centric group of e-commerce companies founded in 2016 in Latvia. We are here to transform the largest industry in the world, global trade, making it more transparent, efficient, and technology-driven. Today, Joom Group brings together the following businesses: Joom, a platform for shopping from all over the world; JoomPro, the first end-to-end cross-border B2B marketplace, with successful operations in Brazil and plans to expand to other markets; JoomPulse, data platform that provides analytics and recommendations for marketplace sellers; and Onfy, a pharmaceutical marketplace in Germany. Joom Group’s offices are located in China, Brazil, Portugal, Latvia, and Germany, with headquarters in Lisbon, Portugal. We work as one international team, sharing knowledge and collaborating across countries, businesses, and products. As we continue to grow and introduce new products and services, we become increasingly susceptible to security threats. We are currently seeking an Application Security Engineer for our infrastructure team to stay informed about current threats and ensure the security of our development and applications. This role offers the opportunity to develop the application security direction from the ground up and achieve international certification. We prioritize innovation over bureaucracy and legacy code and are always open to fresh ideas. Responsibilities Implement SSDLC with the development team Analyze the security of the company's products Assist teams in addressing vulnerabilities Stay informed about current threats and develop code protections Requirements 3+ years of experience in web/mobile application security Experience in securing mobile and web applications Experience in building secure development processes (SSDLC) Experience with white box testing Knowledge of *NIX systems and basic network protocols Preferred Experience in bug bounty programs Relevant information security certifications (e.g., OSCP, CompTIA Security+) CVE authorship Proficiency in Go, Python, or Java We offer Compensation package: base salary and performance-based bonuses Office-first: flexible hours with a possibility to work remotely 52 days per year, and 22 days of paid annual leave Care & Wellbeing: health insurance (including dental care) for employees and their children, daily meal allowance, and 100% paid sick leave AI-first approach: licenses and access to a wide range of AI tools Team & Growth: collaboration with colleagues across Portugal, Brazil, Latvia and China, with opportunities for promotions, professional trainings, and English courses Community & Engagement: annual team building activities, knowledge-sharing workshops, and a strong sense of team work B efore applying for the above position please review our Candidate Privacy Notice here . By responding to the vacancy, you acknowledge that you have read our Privacy notice.

Location: Europe; Lithuania Workplace: Remote ABOUT ENEBA   At Eneba, we’re building an open, safe and sustainable marketplace for the gamers of today and tomorrow. Our marketplace supports close to 20m+ active users (and growing fast!), provides a level of trust, safety and market accessibility unparalleled to none. We’re proud of what we’ve accomplished in such a short time and look forward to sharing this journey with you. Join us as we continue to scale, diversify our portfolio, and grow with the evolving community of gamers.    ABOUT YOUR TEAM You will join a growing security team where you can take meaningful ownership of the practices and policies you help develop. You will work closely with backend engineering and other departments to integrate practical security requirements across the company. ABOUT THE ROLE As a Security Engineer, you'll cover a broad range of operational and strategic security work rather than a single narrow specialty. In your first few months, you'll focus on learning Eneba's tech stack and understanding how our services and systems fit together. That foundation is essential before you can secure those systems effectively. Day-to-day, you can expect to: - Hands-on coding and security implementation work make up the largest part of the role today, alongside incident response and threat-hunting responsibilities. - Review and triage security submissions and incident reports. - Evaluate and respond to bug bounty reports, including remediation follow-through - Build, operate, and improve incident response and remediation processes. - Write and maintain security policies and documentation. - Communicate security requirements and risks clearly to non-technical departments - Review application monitoring and logs to catch and investigate anomalies - Support access governance and permission-management processes. ABOUT THE TECH The tech stack is the same one our backend teams work with. You're not expected to know all of it on day one, but you should expect to be learning how to use most of it within your first 3 months, and you'll also be working across other languages and systems used throughout the company as your role demands. CODE - PHP/Symfony - Golang - GraphQL - gRPC - CQRS, commands via saga/temporal, queries via GraphQL - Microservices architecture - Service orchestration with Saga https://microservices.io/patterns/data/saga.html / temporal.io https://temporal.io/ DATABASES - InfluxDB - Redis - ElasticSearch - MariaDB - MySQL INFRASTRUCTURE - Kubernetes - Helm - AWS - Terraform - Prometheus WHAT WE'RE LOOKING FOR - Strong written and verbal communication skills - this is our highest priority, since you'll regularly need to explain technical risk to non-technical audiences - Solid PHP knowledge - Security knowledge, or a clearly demonstrated interest in security (bug bounties, CTFs, security blogs, following the security community) - A background in IT, backend engineering, or a related technical field - Self-sufficiency - comfort taking ownership of tasks and making progress without constant guidance. - Ownership mentality and strong problem-solving skills - Openness to learning and working across multiple systems, languages, and technologies rather than staying in one lane Nice to have - Experience with monitoring tools and application monitoring - Familiarity with the OWASP Top 10 WHAT IT’S LIKE TO WORK AT ENEBA   - Opportunity to join our Employee Stock Options program. - Opportunity to help scale a unique product.  - Various bonus systems: performance-based, referral, additional paid leave, personal learning budget. - Paid volunteering opportunities. - Work location of your choice: office, remote, opportunity to work and travel. - Personal and professional growth at an exponential rate supported by well-defined feedback and promotion processes.    *Please attach CV's in English. *To find out about how we handle your personal data, make sure to check out our Candidate Privacy Notice https://www.eneba.com/candidate-privacy-notice