Вакансии

Location: London DRW is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk. Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets. We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it. DRW is a place of high expectations, integrity, innovation and a willingness to challenge consensus. About the Role DRW is building out its offensive security capability, and we’re looking for a Senior Offensive Security Engineer to lead the charge. In this role, you’ll plan and execute red team engagements, penetration tests, and adversary simulations against our trading infrastructure, corporate environment, and cloud platforms, acting as a trusted adversary who helps us find and fix weaknesses before anyone else does. You’ll work closely with our security, infrastructure, and trading teams to translate what you find into real improvements, and you’ll help shape the methodology, tooling, and roadmap for offensive security at DRW as the function matures. This is a hands-on, high-trust role for someone who thinks like an attacker, communicates like a partner, and cares about making the firm measurably harder to compromise. What You'll Do Plan and execute red team engagements and adversary simulations against trading systems, corporate IT, and cloud environments, modeling realistic attacker tactics, techniques, and procedures (TTPs) mapped to frameworks such as MITRE ATT&CK Conduct penetration tests across networks, web and internal applications, APIs, and cloud infrastructure, and report findings with clear, actionable remediation guidance Design and build custom tooling, scripts, and exploits to emulate adversary behavior, test control effectiveness, and validate detection coverage Partner with the Security Engineering and SOC teams in purple-team exercises to close gaps between what attackers can do and what defenders can see Run social engineering and phishing simulations to assess and improve organizational security awareness Identify, validate, prioritize, and track vulnerabilities and control weaknesses through to remediation in collaboration with infrastructure, platform, and application owners Present engagement results and risk narratives to both technical teams and senior leadership in a way that drives action Stay current on the threat landscape, emerging TTPs, and offensive tooling, and bring that knowledge back into DRW’s defenses Assess the security of AI and LLM-integrated systems, including prompt injection, model manipulation, data poisoning, and abuse of agentic workflows, and work with teams building these systems to harden them Leverage AI-assisted tooling to accelerate reconnaissance, vulnerability discovery, and exploit development, and evaluate new AI-powered offensive techniques as they emerge Help define and mature DRW’s offensive security methodology, standards, and tooling, and mentor other engineers on the security team What We're Looking For 5+ years of hands-on experience in offensive security, penetration testing, or red teaming, including full engagement lifecycle work: reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration Strong scripting or programming ability for building and adapting offensive tooling Solid understanding of networking fundamentals, Windows, macOS, and Linux internals, identity providers, and cloud platforms Practical experience with common offensive security tools (e.g., Cobalt Strike, Metasploit, BloodHound, Burp Suite, Nmap) and a track record of building your own when the situation calls for it Working knowledge of the MITRE ATT&CK framework, adversary emulation, and detection evasion techniques, along with enough understanding of defensive controls and tooling to help defenders improve A track record of clear, precise reporting and communication and you can translate technical findings into risk that both engineers and executives understand Experience with smart contract auditing and blockchain security Familiarity with AI/ML security risks, including adversarial attacks on models, prompt injection, and the offensive and defensive implications of LLM-powered tooling A collaborative mindset: you see red teaming as a way to make the whole organization more secure, not just to find flaws For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at https://drw.com/privacy-notice . California residents, please review the California Privacy Notice for information about certain legal rights at https://drw.com/california-privacy-notice . #LI-BL1

Location: New York City DRW is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk. Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets. We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it. DRW is a place of high expectations, integrity, innovation and a willingness to challenge consensus. About the Role DRW is building out its offensive security capability, and we’re looking for a Senior Offensive Security Engineer to lead the charge. In this role, you’ll plan and execute red team engagements, penetration tests, and adversary simulations against our trading infrastructure, corporate environment, and cloud platforms, acting as a trusted adversary who helps us find and fix weaknesses before anyone else does. You’ll work closely with our security, infrastructure, and trading teams to translate what you find into real improvements, and you’ll help shape the methodology, tooling, and roadmap for offensive security at DRW as the function matures. This is a hands-on, high-trust role for someone who thinks like an attacker, communicates like a partner, and cares about making the firm measurably harder to compromise. What You'll Do Plan and execute red team engagements and adversary simulations against trading systems, corporate IT, and cloud environments, modeling realistic attacker tactics, techniques, and procedures (TTPs) mapped to frameworks such as MITRE ATT&CK Conduct penetration tests across networks, web and internal applications, APIs, and cloud infrastructure, and report findings with clear, actionable remediation guidance Design and build custom tooling, scripts, and exploits to emulate adversary behavior, test control effectiveness, and validate detection coverage Partner with the Security Engineering and SOC teams in purple-team exercises to close gaps between what attackers can do and what defenders can see Run social engineering and phishing simulations to assess and improve organizational security awareness Identify, validate, prioritize, and track vulnerabilities and control weaknesses through to remediation in collaboration with infrastructure, platform, and application owners Present engagement results and risk narratives to both technical teams and senior leadership in a way that drives action Stay current on the threat landscape, emerging TTPs, and offensive tooling, and bring that knowledge back into DRW’s defenses Assess the security of AI and LLM-integrated systems, including prompt injection, model manipulation, data poisoning, and abuse of agentic workflows, and work with teams building these systems to harden them Leverage AI-assisted tooling to accelerate reconnaissance, vulnerability discovery, and exploit development, and evaluate new AI-powered offensive techniques as they emerge Help define and mature DRW’s offensive security methodology, standards, and tooling, and mentor other engineers on the security team What We're Looking For 5+ years of hands-on experience in offensive security, penetration testing, or red teaming, including full engagement lifecycle work: reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration Strong scripting or programming ability for building and adapting offensive tooling Solid understanding of networking fundamentals, Windows, macOS, and Linux internals, identity providers, and cloud platforms Practical experience with common offensive security tools (e.g., Cobalt Strike, Metasploit, BloodHound, Burp Suite, Nmap) and a track record of building your own when the situation calls for it Working knowledge of the MITRE ATT&CK framework, adversary emulation, and detection evasion techniques, along with enough understanding of defensive controls and tooling to help defenders improve A track record of clear, precise reporting and communication and you can translate technical findings into risk that both engineers and executives understand Experience with smart contract auditing and blockchain security Familiarity with AI/ML security risks, including adversarial attacks on models, prompt injection, and the offensive and defensive implications of LLM-powered tooling A collaborative mindset: you see red teaming as a way to make the whole organization more secure, not just to find flaws The annual base salary range for this position is $175,000 to $275,000 depending on the candidate’s experience, qualifications, and relevant skill set. The position is also eligible for an annual discretionary bonus. In addition, DRW offers a comprehensive suite of employee benefits including group medical, pharmacy, dental and vision insurance, 401k (with discretionary employer match), short and long-term disability, life and AD&D insurance, health savings accounts, and flexible spending accounts. For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at https://drw.com/privacy-notice . California residents, please review the California Privacy Notice for information about certain legal rights at https://drw.com/california-privacy-notice . #LI-BL1

Location: Chicago DRW is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk. Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets. We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it. DRW is a place of high expectations, integrity, innovation and a willingness to challenge consensus. About the Role DRW is building out its offensive security capability, and we’re looking for a Senior Offensive Security Engineer to lead the charge. In this role, you’ll plan and execute red team engagements, penetration tests, and adversary simulations against our trading infrastructure, corporate environment, and cloud platforms, acting as a trusted adversary who helps us find and fix weaknesses before anyone else does. You’ll work closely with our security, infrastructure, and trading teams to translate what you find into real improvements, and you’ll help shape the methodology, tooling, and roadmap for offensive security at DRW as the function matures. This is a hands-on, high-trust role for someone who thinks like an attacker, communicates like a partner, and cares about making the firm measurably harder to compromise. What You'll Do Plan and execute red team engagements and adversary simulations against trading systems, corporate IT, and cloud environments, modeling realistic attacker tactics, techniques, and procedures (TTPs) mapped to frameworks such as MITRE ATT&CK Conduct penetration tests across networks, web and internal applications, APIs, and cloud infrastructure, and report findings with clear, actionable remediation guidance Design and build custom tooling, scripts, and exploits to emulate adversary behavior, test control effectiveness, and validate detection coverage Partner with the Security Engineering and SOC teams in purple-team exercises to close gaps between what attackers can do and what defenders can see Run social engineering and phishing simulations to assess and improve organizational security awareness Identify, validate, prioritize, and track vulnerabilities and control weaknesses through to remediation in collaboration with infrastructure, platform, and application owners Present engagement results and risk narratives to both technical teams and senior leadership in a way that drives action Stay current on the threat landscape, emerging TTPs, and offensive tooling, and bring that knowledge back into DRW’s defenses Assess the security of AI and LLM-integrated systems, including prompt injection, model manipulation, data poisoning, and abuse of agentic workflows, and work with teams building these systems to harden them Leverage AI-assisted tooling to accelerate reconnaissance, vulnerability discovery, and exploit development, and evaluate new AI-powered offensive techniques as they emerge Help define and mature DRW’s offensive security methodology, standards, and tooling, and mentor other engineers on the security team What We're Looking For 5+ years of hands-on experience in offensive security, penetration testing, or red teaming, including full engagement lifecycle work: reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration Strong scripting or programming ability for building and adapting offensive tooling Solid understanding of networking fundamentals, Windows, macOS, and Linux internals, identity providers, and cloud platforms Practical experience with common offensive security tools (e.g., Cobalt Strike, Metasploit, BloodHound, Burp Suite, Nmap) and a track record of building your own when the situation calls for it Working knowledge of the MITRE ATT&CK framework, adversary emulation, and detection evasion techniques, along with enough understanding of defensive controls and tooling to help defenders improve A track record of clear, precise reporting and communication and you can translate technical findings into risk that both engineers and executives understand Experience with smart contract auditing and blockchain security Familiarity with AI/ML security risks, including adversarial attacks on models, prompt injection, and the offensive and defensive implications of LLM-powered tooling A collaborative mindset: you see red teaming as a way to make the whole organization more secure, not just to find flaws The annual base salary range for this position is $175,000 to $275,000 depending on the candidate’s experience, qualifications, and relevant skill set. The position is also eligible for an annual discretionary bonus. In addition, DRW offers a comprehensive suite of employee benefits including group medical, pharmacy, dental and vision insurance, 401k (with discretionary employer match), short and long-term disability, life and AD&D insurance, health savings accounts, and flexible spending accounts. For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at https://drw.com/privacy-notice . California residents, please review the California Privacy Notice for information about certain legal rights at https://drw.com/california-privacy-notice . #LI-BL1

Location: Ireland, Dublin Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. We are looking for an inspirational and hardworking person to join the Platform Hosting Cloud Security Engineering team at SIE! You'll be joining a team of innovative engineers who are unified in their mission to make PlayStation the best and most secure gaming platform. This support is fulfilled by minimizing impact to the platform while ensuring security needs are met. This role is highly technical and requires a shown grasp of security principles and how they are applied to production environments. You will assist in the planning, design, development, testing, and management of security tools and processes that provide protection and visibility of our cloud environments. Key Responsibilities Design, architect, and implement security controls and frameworks for PlayStation Infrastructure Be responsible for the detection of security gaps, and lead efforts to mature security tooling and operational processes Work with product and platform teams to define system requirements, engineer, and implement cloud based security applications and controls Write code to automate security processes which seamlessly integrate into code builds and deployments, applying DevSecOps processes and tools Architect, develop, and deploy automation solutions that help audit, secure, and affect changes across multi-cloud environments Champion tools for improving platform availability using automated protection mechanisms Document security designs, operating procedures, and technical recommendations clearly. Review existing security policies and maintain their freshness and understandability. Mentor senior and junior engineers and guide them in making design choices that protect Platform Advocate for security and privacy best practices across engineering teams. Qualifications 5-7+ years of experience in cloud security, security engineering, DevOps, platform engineering, or a related field. Hands-on experience securing cloud infrastructure in AWS, GCP, or both. Understanding of common security frameworks and compliance concepts, such as NIST or PCI DSS Proficient in multiple programming and scripting languages such as Python and Go Experience architecting and deploying IaC tools such as CloudFormation and Terraform Familiarity with CI/CD and DevOps tools and practices, such as GitHub, Jenkins, Kubernetes, and automated deployment pipelines. Shown experience building end-to-end enterprise level systems Hands-on experience with utilizing tooling like Wiz and AI tooling like Codex, etc. Strong written and verbal communication skills, with the ability to collaborate effectively across technical and non-technical teams. Proven record of success in coaching and growing people Technical certifications or other demonstrations of passion in security and technology such as CISSP, CCSP, AWS Certified Security are a plus! Strong written and verbal communication skills, with the ability to collaborate effectively across technical and non-technical teams. Technical certifications or demonstrated passion for security and technology, such as Security+, AWS Certified Security – Specialty, CISSP, or CCSP, are a plus. At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. The estimated base pay range for this role is listed below. €87.800 — €131.800 EUR Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice (where applicable) for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Yunusobod tumanidagi oquv markazimizga kiberhavsizlik boyicha ustoz mentorlarni ishga qabul qilamiz. Talablar: — Tajribasi bor — Mas'uliyatli Ish vaqti: Erkin grafik Murojaat vaqti: 09:00 - 18:00

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Frontier AI is on track to be among the most consequential and most adversarially-targeted technology in the world. The capability curve is steep, the adversaries who want these systems are extremely well-resourced, and the security bar this will eventually require is well beyond where the industry operates today. Incremental hardening alone is not going to close that gap, so we need breakthroughs and a group of people to go find them. Security Labs is that team. We run a portfolio of high-risk, high-expected-value security projects: the work that seems impractical until someone optimistic and stubborn enough actually tries it. Projects run on the order of weeks rather than quarters, and each one is either handed off to the Anthropic team that will own it in production or wound down with a writeup of what we learned. We expect a meaningful fraction of our bets not to land. This team is intentionally scrappy and ambitious. We're intentionally iterating fast on high-risk research bets and we expect a meaningful fraction not to land. If a 30% project success rate sounds uncomfortable, or uncharted and chaotic territory isn’t both frightening and exciting, this probably isn't the right fit. There are other places in Anthropic Security doing important work with more structure, less risk, and more certain paths to positive outcomes. The questions we're trying to answer include: Can our core research workflows survive extreme isolation? Can we replace trust with cryptographic guarantees? Can the models themselves become our most effective security control? What would it actually take to defend against a tier-1 state adversary, and how much of that can we build now? Who we're looking for. We're hiring generalists with rare depth. You're a strong software engineer as a baseline, and on top of that you've gone deep in at least one area most engineers don't get near: firmware or hardware security, applied cryptography, OS / kernel / hypervisor internals, formal methods, reverse engineering, or high-assurance and cross-domain systems. You've built things under your own direction, you're comfortable jumping layers when the problem demands it, and you'd rather take a swing at something that might not work than ship the safe incremental thing. You think the trajectory of AI matters a great deal, you're not comfortable with how the security side of it is going by default, and you'd rather be on the inside building the answer than watching from outside. Current Project Areas The portfolio changes as we learn. The kinds of bets currently in flight or queued: Standing up a prototype high-assurance research cluster: running real Anthropic training and research workloads under extreme isolation and physical security controls, and finding out exactly where productivity breaks and what we'd need to invent to get it back Provable inference: cryptographic verification (zero-knowledge proofs, attestation chains) that a given output came from a specific model running specific code, replacing "trust us" with math Build hypervisor-isolated microVM workload isolation across the fleet Compiling an ML kernel through a formally verified pipeline where every lowering step carries a machine-checked proof of equivalence, making compilation-layer sabotage mathematically detectable Regenerating clusters: automation that spins up a purpose-built cell, runs a workload, and tears the whole thing down on a TTL measured in hours, so attacker persistence has an expiry date Using Claude itself to drive security work end to end: threat modeling new compute platforms, rewriting critical services to zero external dependencies, running the test equipment that validates what hardware datasheets claim Part of your job is deciding what comes next. We hire people we trust to pick good bets, and project selection is owned by the engineers doing the work. Key responsibilities Own Security Labs projects end to end. You'll scope the bet, build the prototype, run it against real workloads, and bring it to either a hand-off or a documented exit Stand up novel security infrastructure fast (isolated clusters, attestation chains, hypervisor and runtime work, verification tooling) optimizing for what we learn rather than for permanence Find the receiving team early, bring them along while you build, and hand them something they actually want to own Work embedded with research and infrastructure teams (Pretraining, RL, Inference, Compute) to test whether their workflows survive what you're proposing, and document precisely where they don't Turn experimental results into short writeups that shape Anthropic's long-term security architecture, and into costed contingency plans we could execute on short notice Help pick the next round of bets and influence the industry to get better along the way Minimum qualifications Genuinely care about where AI is heading and want to work on the security problems that determine whether it goes well. This is the most important thing on this list Have real depth in at least one area most software engineers don't touch (e.g. firmware or hardware security, applied cryptography, OS / kernel / hypervisor internals, formal methods and verification, reverse engineering and exploit development, or high-assurance / cross-domain systems) Have built and shipped things under your own direction. Maybe you founded a company or research group, maintained an open-source project other people depend on, or shipped research that changed how people in your field work. We weight this far more than where you've worked or for how long Have a track record of choosing the problem yourself and seeing it through, rather than only executing a plan someone else handed you Are comfortable jumping between domains and layers of the stack when the problem calls for it, and have actually done so Have run prototypes or experiments where the goal was answering a hard question rather than shipping a permanent system, including ones that didn't pan out Write clearly enough to turn weeks of work into a couple of pages someone can act on Change your mind when the evidence says to, and are fine being the least-expert person in a room full of specialists Care about defense. Plenty of folks here come from offense and that background is valuable, but what you actually want to spend your time on now is making systems hold up Are a strong programmer (Python plus at least one of Rust, Go, or C/C++) and can stand up real infrastructure without that being the interesting part of your week Preferred qualifications Experience inside airgapped or high-side environments (classified networks, cross-domain solutions, ICS/SCADA, financial trading infrastructure) and the operational realities of working in them A background in offensive security, red teaming, or vulnerability research, with calibrated intuitions for which threats actually matter Familiarity with ML infrastructure (training pipelines, distributed schedulers, inference serving, accelerator hardware) sufficient for grounded conversations with researchers about what their workloads actually need A history of working in environments built around rapid iteration rather than rigid change control: startups, applied research groups, independent consulting, small security shops The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the team Secure Frameworks is the team in Anthropic's Security Engineering org that builds shared security libraries and frameworks the rest of the company builds on. We collaborate closely with teams and leaders across Anthropic to own critical security foundations, including workload identity and authorization, cryptographic frameworks, and the centralized access proxy that  secures traffic to internal applications. Our mission is to make the secure thing easy and the easy thing secure by helping Anthropic engineers get secure behaviour by default and preventing entire classes of vulnerabilities through careful design. We own what we ship, help customers adopt better security practices and at times we work embedded directly in research, infrastructure or product teams. About the role You will design, build and run security foundations used across Anthropic's fleet, from threat model through production, on-call and adoption. Much of the work is greenfield: our infrastructure is growing quickly and the timelines are compressed, so you will help define the architecture rather than inherit it. Depending on your strengths you will focus on one or two of the areas below and contribute across the rest. Build critical security foundations including cryptographic frameworks, mTLS infrastructure, secure serialization, and authorization systems, designed to prevent entire classes of vulnerabilities Partner with product, research, infrastructure, and other security teams to ensure frameworks integrate smoothly with lower-layer security controls Scope, design and build security services and libraries end-to-end, maintain them in production, and drive through ambiguous technical problems with minimal oversight Build and operate the zero-trust access gateway that fronts Anthropic's internal services Design and roll out authorization frameworks so services enforce least privilege consistently instead of each inventing its own access controls Own cryptographic frameworks and libraries Mentor engineers, contribute to hiring, and grow security engineering culture across Anthropic Minimum qualifications 8+ years of software engineering experience building security-relevant systems in production, including leading complex initiatives independently Strong programming skills in Go, Rust or Python Deep understanding of authentication and authorization systems: OAuth 2.0 / OIDC, JWTs, service-to-service auth, policy-based access control Hands-on experience with PKI, X.509, mTLS and workload identity Working knowledge of applied cryptography: choosing and composing primitives correctly, key management, and the ways libraries fail in practice Experience shipping and operating high-reliability services on Kubernetes across cloud and on-prem environments, including being on call for them A track record of bringing clarity and ownership to ambiguous technical problems and driving them to resolution across teams A strong sense of developer experience Clear communication across all levels of the organization Passion for AI safety and the role security engineering plays in building trustworthy AI systems Preferred qualifications Built security frameworks or libraries adopted across an engineering organization, and done the work to drive that adoption Built or operated a zero-trust / BeyondCorp-style access gateway or identity-aware proxy Migrated a fleet to mTLS at scale, including certificate issuance and staged enforcement Maintained or contributed to open-source cryptographic libraries Designed authorization systems using policy languages or relationship-based models Familiarity with ML infrastructure (training, inference serving) The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. ABOUT THE ROLE We're looking for a Security Engineer with deep incident response experience to help defend Replit, a fast-moving, cloud-native AI vibe-coding platform. You'll be the person who takes charge when something goes wrong. You'll lead investigations from first signal to root cause, coordinate containment across Security, SRE, and Engineering, and keep stakeholders informed while the incident is moving fast. This isn't a pure responder role. We want a well-rounded security engineer who has run real incidents and wants to make the next one faster. You'll write the scripts, automations, and tooling that take manual work out of triage, evidence collection, and containment. You'll also turn lessons from each incident into better detections, playbooks, and platform hardening.   RESPONSIBILITIES Incident Response - Serve as incident commander or technical lead for security incidents, from detection and triage through containment, eradication, recovery, and post-incident review. - Coordinate response across Security, SRE, Engineering, Legal, and leadership. Drive decisions under pressure and keep a clear record of actions taken. - Communicate incident status, impact, and risk clearly to technical and executive audiences. - Participate in and help shape the security on-call rotation. Investigation & Forensics - Investigate suspicious activity across cloud infrastructure, containers, identity systems, and application layers using SIEM, Cloud Logging, telemetry, and host and container artifacts. - Determine scope, root cause, attacker behavior, and blast radius for confirmed incidents. - Quickly assess whether emerging threats (0-days, active exploitation campaigns, bug bounty findings, customer reports) apply to Replit, and whether we're already affected. IR Automation & Tooling - Build scripts, automations, and tools (Python, Go, Bash, or directly on Replit) that speed up response, such as automated enrichment, evidence collection, credential and session revocation, workload isolation, and alert triage. - Develop and maintain response playbooks and runbooks, and automate them where possible. - Integrate response workflows with SIEM, SOAR, ticketing, and chat tooling to cut time-to-contain. Detection & Continuous Improvement - Turn incident findings into new or improved detections, logging coverage, and visibility. - Lead blameless post-incident reviews and drive remediation items to completion. - Run tabletop exercises and simulations to test readiness and find gaps.   REQUIRED SKILLS & EXPERIENCE - Proven experience leading or serving as technical lead on security incidents in a cloud or SaaS environment. - Strong hands-on investigation skills with SIEM, cloud audit logs, and log-based analysis. Comfortable working through large datasets under time pressure. - Proficiency writing production-quality scripts or tools in Python, Go, or Bash for investigation and automation. - Solid knowledge of cloud architecture and security, especially Google Cloud Platform (IAM, audit logging, GKE, networking). - Working knowledge of Kubernetes and containers, including how to investigate and contain compromised workloads. - Understanding of identity systems, SaaS architectures, and common cloud attack paths (credential theft, privilege escalation, supply chain, token abuse). - Familiarity with software engineering fundamentals, CI/CD pipelines, and package ecosystems, so you can work effectively with Engineering on code-level fixes. - Understanding of IR frameworks and lifecycle (for example NIST 800-61), plus the vulnerability lifecycle and exploitability analysis.   PREFERRED QUALIFICATIONS - Experience building or operating SOAR or other response automation platforms. - Digital forensics experience with cloud, Linux hosts, or containers. - Experience with threat intelligence, threat hunting, or security research. - Experience with bug bounty programs or coordinated vulnerability disclosure. - Familiarity with detection-as-code practices and writing detection rules. - Experience in fast-paced, cloud-native, or AI/ML-driven environments. - Relevant certifications (such as GCIH, GCFA, GCFR), or equivalent hands-on experience. WHAT WE VALUE - Curiosity & initiative: Strong desire to understand attacker behaviors, emerging threats, and how they apply to real-world systems. - Speed & analytical rigor: Ability to quickly assess high-risk vulnerabilities with clear, evidence-based reasoning. - Collaboration: Comfort working across cross-functional teams spanning Security, SRE, Engineering, and Infrastructure. - Clear communication: Ability to explain findings, risks, and mitigation strategies to stakeholders at all levels. - Ownership mindset: Takes initiative to drive investigations, improvements, and remediations to completion. - Continuous learning: Passion for staying up to date on new vulnerabilities, exploit trends, and cloud-native security best practices. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Задачи: — Проведение пентестов web-приложений и API (black-box, grey-box, white-box), включая REST, GraphQL, gRPC и WebSocket. — Тестирование безопасности AI/LLM-функциональности (Prompt Injection, Data Leakage, RAG, MCP, Agentic AI и другие сценарии по OWASP Top 10 for LLM). — Проверка механизмов аутентификации и авторизации (OAuth 2.0, OIDC, SAML, JWT, SSO, MFA), а также контроля доступа и поиска ошибок (IDOR/BOLA, эскалация привилегий, multi-tenancy). — Поиск и эксплуатация технических и бизнес-логических уязвимостей, построение сложных цепочек атак (Attack Paths). — Анализ безопасности клиентской и серверной части приложений, зависимостей, Software Supply Chain и исходного кода. — Разработка собственного offensive-инструментария, PoC, расширений Burp Suite и средств автоматизации на Python/JavaScript. — Подготовка технических отчетов с описанием рисков, рекомендациями по устранению и проведение ретестов после исправлений. — Участие в Threat Modeling, Security Architecture Review и, при желании, в активностях Purple Team. Требования: — Опыт проведения ручного пентеста web-приложений и API от 4–5 лет, уверенное владение методиками black-box, grey-box и white-box. — Глубокое понимание современных web-уязвимостей (OWASP Top 10) и практический опыт эксплуатации XSS, SSRF, SSTI, SQL/NoSQL Injection, XXE, Deserialization, CSRF, CORS, Prototype Pollution, Path Traversal и других. — Опыт тестирования REST, GraphQL, gRPC, WebSocket API, поиска бизнес-логических уязвимостей и обхода механизмов защиты приложений. — Практический опыт анализа аутентификации и авторизации (OAuth 2.0, OIDC, SAML, JWT, SSO, MFA), включая поиск ошибок реализации. — Экспертное владение Burp Suite Professional, опыт разработки собственных расширений будет преимуществом. — Уверенное знание Python и JavaScript/TypeScript для разработки PoC, эксплойтов и автоматизации тестирования. — Опыт проведения Security Research, анализа современных фреймворков и архитектур (React, Angular, Vue, Spring, .NET, Node.js, Go и др.). — Будет плюсом опыт тестирования AI/LLM-приложений, участия в Threat Modeling, Security Architecture Review или Purple Team. Условия: — Удаленная работа. — Опыт более 6 лет. — Зарплата обсуждается на собеседовании.

Location: Canada Vectra® is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises. The Vectra AI Platform delivers integrated signal across public cloud, SaaS, identity, and data center networks in a single platform. Powered by patented Attack Signal Intelligence, it empowers security teams to rapidly prioritize, investigate and respond to the most advanced cyber-attacks. With 35 patents in AI-driven threat detection and the most vendor references in MITRE D3FEND, organizations worldwide rely on the Vectra AI to move at the speed and scale of hybrid attackers. For more information, visit www.vectra.ai. Position Overview As a Security Engineer (Pre‑Sales) at Vectra.ai, you will blend deep technical expertise with strong customer‑facing skills to build trust, influence architectural direction, and drive successful outcomes for our clients. You’ll guide prospects through technical discovery, articulate how Vectra’s AI‑driven detection and response platform solves their most critical security challenges, and deliver compelling demonstrations and proofs‑of‑concept that showcase our value. Responsibilities Pre-Sales support and Technical Account Management associated to your Regional Sales Managers Walk customers and partners through demos and problem solving in clear, concise matter by being the subject matter expert on all things Vectra. Communicate cross functionally constantly to ensure all key stakeholders are in the loop in order to insure best-of-breed products, tools and documentations. Develop and maintain an in-depth technical knowledge of the Vectra product line. Identify new opportunities by creating and developing strong technical relationships with customers and channel partners. Maintain knowledge at a high technical level of the current security landscape. Collaborate with Customers on Technology reviews, product findings, and integration with other technologies they may have. Collaborate with other Vectra Engineers on high-level projects to deliver Vectra technologies to our customers. Explore and maintain knowledge of Vectra's key competitors. Participate in deployment review and forecast calls. Participate in design review and release meetings. Travel as needed within region. Experience and soft skills Startup DNA is a must: willing and able to do "whatever it takes" with motivation to find solutions rather than admire the challenge. Customer-first behaviour is a must. Ability to work hands-in-hands with your Sales counterpart (RSM) . 5+ years experience in a Technical Account Management or Security Engineering role. Large account management experience is required. Technical qualifications Deep understanding of security-focused product lines (CASB, EDR, SIEM or forensics-type platforms) with the ability to translate into value and security best practices. Strong knowledge in networking and ability to understand L3 to L7 OSI layers. String written (RFP) and verbal communications (Pre-sales presentations and conferences) are a must. Good understanding of an attacker progression (Red Team or Pentest). Certifications such as CEH, OSCP, OSCE is a plus. Good understanding of Incident Response (Blue Team) methodologies. Certifications such as GNFA is a plus. Good understanding of Cloud Security and Network Architectures. Certifications such as AWS Certified Security Specialty (SCS-C01) is a plus. Good understanding of Security Processes and methodologies. Certifications such as CISSP is a plus Our competitive total rewards package includes cash compensation within the range provided below. Actual pay for this position may vary based on the hired candidate’s location, experience and relevant incumbent pay position. Vectra Total Rewards $201,800 — $273,100 CAD Vectra provides a comprehensive total rewards package that supports the financial, physical, mental and overall health of our employees and their families. Compensation includes competitive base pay, incentive pla n eligibility, and participation in the employee equity plan (stock options). Specific benefits offered var ies by location, but commonly in clude health care insurance , income protection / life insurance , access to retirement savings plans, behavioral & emotional wellness services , generous time away from work, and a comprehensive employee recognition program. Vectra is committed to creating a diverse environment and is proud to be an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.

Location: London, England, United Kingdom Opportunity The Lead Application Security Engineer will join Brunswick's Information Security team and play a key role in shaping how the firm embeds security into application design, development, deployment, and technology change. This is a senior individual contributor role initially, with scope to help establish and mature Brunswick's application security capability over time. The role will focus on providing risk-based security advice and assurance across internally developed applications, enterprise platforms, integrations, cloud services, SaaS solutions, and selected AI-enabled workstreams. Working closely with ICT, AI Engineering, application owners, and business stakeholders, the Lead Application Security Engineer will help define practical security standards, guardrails, review processes, and secure design patterns that enable delivery teams to move at pace while managing risk appropriately. About the Role In this role, you will provide senior application security and DevSecOps expertise across technology projects, design reviews, cloud-based applications, APIs, integrations, delivery pipelines, and selected AI-enabled solutions. You will act as a senior security advisor to technical and business teams, helping establish a repeatable application security model that can scale as demand grows, including the potential introduction of additional team members in the future. Key responsibilities include: Lead the development of Brunswick's application security capability, including standards, secure design patterns, review processes, and practical guardrails. Act as a senior security advisor to ICT, AI Engineering, application owners, and business stakeholders. Review and assess application designs, architecture decisions, APIs, integrations, cloud services, and deployment patterns to identify security risks early in the delivery lifecycle. Mature repeatable approaches for application security reviews, threat modelling, and risk-based assurance across new and changed solutions. Provide guidance and oversight on secure development lifecycle practices, including security requirements, design review, code and security review considerations, dependency management, secrets management, testing, and release assurance. Conduct threat modelling for internally developed applications, AI-enabled workflows, integrations, automation use cases, and higher-risk technology changes, using STRIDE or similar methodologies. Advise on secure design principles, including identity and access management, API security, data protection, encryption, logging, monitoring, resilience, secure configuration, and least privilege. Support security review of CI/CD pipelines, infrastructure as code, containerised workloads, and cloud infrastructure, identifying practical controls for engineering and platform teams. Review and assess third-party platforms, SaaS solutions, and new technology features, including AI-enabled tools where there are material application, integration, or data security considerations. Support the development and application of secure patterns and guardrails for emerging technology adoption, including AI-enabled solutions, agents, and automation where relevant. Support security assurance activities, including penetration testing, application security testing, remediation tracking, and ensuring appropriate logging, monitoring, and response considerations are built into new solutions. Define and document security requirements, architecture decisions, design recommendations, and risk-based remediation actions. Support the future growth of the application security function, including helping define ways of working, capability needs, and technical guidance for future team members as the function matures. What We're Looking For We're looking for an experienced, technically capable security professional who can lead and mature an application security capability while remaining pragmatic, hands-on, and delivery-focused. The ideal candidate will demonstrate: 7+ years' experience in cyber security, application security, DevSecOps, cloud security, security architecture, security engineering, or a related technical security role. Strong understanding of risk management and compensative controls. Experience operating as a senior technical advisor or lead within application security, DevSecOps, cloud security, secure engineering, or a related discipline. Proven experience working alongside software engineering, DevOps, platform, cloud, or ICT teams to secure applications and infrastructure throughout the delivery lifecycle. Strong understanding of secure development lifecycle and application security practices, including threat modelling, secure design, API security, authentication and authorisation, secrets management, dependency management, security testing, and remediation planning. Practical experience reviewing application architectures, APIs, integrations, cloud services, CI/CD pipelines, containerised workloads, or infrastructure as code. Practical understanding of Microsoft 365, Azure, SaaS platforms, and Azure application security controls such as Entra ID, managed identities, Key Vault, API Management, container security, logging, monitoring, and secure configuration. Experience conducting STRIDE-based threat modelling, technical risk assessments, application security reviews, or security design reviews. Experience developing security standards, secure design patterns, review processes, or guardrails that can be adopted by engineering and delivery teams. Ability to translate technical security risks into clear, business-focused recommendations and influence delivery teams without directly owning implementation. Familiarity with AI-related technologies, large language models, AI-enabled applications, and associated risks such as data exposure, prompt injection, insecure integrations, and excessive agent permissions would be beneficial. Strong written and verbal communication skills, sound judgement, attention to detail, and the ability to balance security requirements with business needs. Experience working in an ISO27001-aligned or regulated environment would be beneficial. Preferred, but not essential, certifications: ISC2: CISSP, CCSP, SSCP, CSSLP ISACA: CISM, CISA, CRISC CompTIA: Security+, CySA+, CASP+ GIAC, Microsoft Azure, or other relevant application security, cloud security, architecture, or DevSecOps certifications Why Join Us Joining Brunswick unlocks a range of employee benefits to support your financial future, health and wellness, family and community, and continuous professional development. About Brunswick Brunswick is a global advisory firm. We help companies tackle high-stakes issues, navigate complex stakeholder relationships, and deliver high-impact outcomes. Our clients value our ability to anticipate, shape, and respond to the key players and forces in the financial and investment arena, regulatory and geopolitical universe, NGO community, workforce and beyond. They rely on us for deep experience, fresh perspectives and original thinking. So, in Brunswick you will find an exceptional range of experience and talent with a rich mix of backgrounds. From the beginning, we have prioritized attracting, developing, and retaining the best professionals in the industry, united by a culture of inclusivity, excellence, and intellectual curiosity. Founded in 1987 in London, the firm has organically grown to 27 offices in 18 countries across the Americas, Europe, Middle East, Africa, Asia and Australia. We operate as a “one-firm firm” with no individual profit centers. This allows us to assemble fully integrated, bespoke teams for each client, able to draw on the full resources of Brunswick anywhere in the world. Brunswick is an equal opportunity employer.  All qualified applicants will be considered without regard to race, religion, color, national origin, gender, sexual orientation, age, disability, pregnancy, genetic information, or any other status protected by applicable law. Please read our Global Privacy Notice to understand how your data is managed.

Location: Hong Kong Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped QRT’s collaborative mindset which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors. We are seeking a Security Engineer to help shape and deliver QRT's Identity Governance (IGA), Privileged Access Management (PAM), and Secrets Management capabilities. This is a hands-on engineering role requiring strong technical depth, stakeholder management, and the ability to influence change across the organisation. You will work with both technical and non-technical stakeholders to develop scalable identity and access management solutions, drive adoption of security best practices, and improve the maturity of IAM as a security discipline across QRT. Responsibilities Own and continuously improve QRT's IGA, PAM, and Secrets Management capabilities. Build strong relationships with Infrastructure, Engineering, HR, and business stakeholders to understand requirements and drive outcomes. Lead identity and access initiatives from conception through to delivery, influencing stakeholders and driving adoption. Design and implement solutions for identity lifecycle management, privileged access, authentication, and secrets management across on-premises and cloud environments. Design and implement role-based access control (RBAC) models and policies within the IGA Tool. Support uplift and maintenance of Active Directory (AD) groups to align with governance policies. Integrate secrets management platforms with CI/CD pipelines, cloud services, and enterprise applications. Develop automation and Infrastructure-as-Code / Identity-as-Code solutions to improve security, governance, and operational efficiency. Develop automation and integrations to improve security, governance, and operational efficiency. Provide guidance on IAM principles, governance models, standards, and best practices. Support access reviews, audits, investigations, and risk management activities. Act as a subject matter expert for identity-related technologies, processes, and controls. Skills & Experience 5-10 years' experience in Identity & Access Management, Security Engineering, or a related discipline. Strong understanding of Identity and Access Management principles, methodologies, governance, and operating models. Experience delivering IGA, PAM, and Secrets Management capabilities in complex enterprise environments. Experience working across both on-premises and cloud environments, integrating identities, applications, and access controls across hybrid platforms. Hands-on engineering experience implementing, integrating, and automating security technologies. Ability to engage effectively with both technical and non-technical stakeholders and influence decision-making at all levels. Proven ability to take ownership, drive initiatives, and deliver outcomes with minimal supervision. Strong understanding of identity lifecycle management, least privilege, RBAC, access governance, authentication, and privileged access management. Strong hands-on experience with platforms such as SailPoint (ISC), Delinea, CyberArk, HashiCorp Vault, or similar technologies. Strong automation-first mindset and experience applying Infrastructure-as-Code and Identity-as-Code practices Excellent communication, stakeholder management, and problem-solving skills. QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.

Location: Remote Workplace: Remote ABOUT THE COMPANY Rain is the global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Our technology allows partners to move, store, and use stablecoins instantly and compliantly through global payment cards, rewards, on/offramps, wallets, and cross-border rails. As both a Visa and Mastercard Principal Member, Rain issues cards that work at more than 175 million merchant locations in over 220 countries and territories. Built natively for stablecoins and trusted by more than 100 organizations worldwide, Rain delivers secure, scalable infrastructure that makes money move freely and instantly around the world. You will have the opportunity to deliver massive impact at a hypergrowth company backed by some of the top investors in fintech, crypto, and SaaS. In January 2026, we closed a $250M Series C led by ICONIQ, valuing Rain at $1.95B, with Sapphire Ventures, Dragonfly, Bessemer Venture Partners, Galaxy Ventures, FirstMark, Lightspeed, Norwest, and Endeavor Catalyst also participating. If you're curious, bold, and excited to help shape a borderless financial future, we'd love to talk. OUR ETHOS We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and impact the roadmap and vision of our company. ABOUT THE TEAM Security Engineering is a small team that answers one question: was it built right? We run our own AI-driven red team against Rain's code and cloud, gate pull requests before they merge, and write the baselines that say how every system should be configured. Our blockchain work is covered. This role owns everything else: the backend services, APIs, cloud, and edge that move real money for real customers. We work closely with Security Operations: we give them high-quality findings to coordinate fixes for, and clear configuration rules they can build detections on. ABOUT THE TEAM Security Engineering makes sure Rain is built right. We run our own AI-driven red team against our code and cloud, gate pull requests before they merge, and set the baselines for how every system is configured. This role owns everything outside blockchain: the backend services, APIs, cloud, and edge that move real money. We give Security Operations high-quality findings to coordinate fixes for, and clear configuration rules to build detections on. ABOUT THE ROLE You'll be Rain's application security expert and the quality bar for every non-chain finding we produce. The calls are yours: what's real, how bad it is, and what has to be fixed before launch. You'll hold the line with engineers when it matters, and make the case so they agree, not just comply. WHAT YOU'LL DO - Review red team findings before they reach engineers: reproduce them, cut false positives, set severity, and write tickets clear enough to fix without a meeting. Improve the scoring that grades them - Harden our backend services and APIs, especially the money-moving paths. You'll often write the fix yourself - Own edge defenses: DDoS protection, rate limiting, WAF rules, and abuse controls - Write secure configuration baselines for our cloud, code, and SaaS, and turn them into automated checks - Grow our PR security gate so more bugs are blocked before merge - Own attack surface coverage, and run architecture reviews on new and high-risk systems - Find, test, and pick the best security tools, whether we buy, adopt, or build WHAT WE'RE LOOKING FOR - 4+ years in application security, product security, or security-minded backend engineering - You've owned security decisions. You can tell a senior engineer their design needs to change and keep a good working relationship - You can read an unfamiliar codebase (TypeScript/Node.js) and find the bug that matters, and you know a scary-sounding finding from a real one - Hands-on cloud security (ideally GCP), Terraform, and edge defenses like WAFs and rate limiting - Experience with threat models or architecture reviews. You've run tool bake-offs and dropped tools that didn't earn their cost - You'd rather ship a check than write a document, and you use AI tools heavily without trusting them blindly BONUS ATTRIBUTES - Fintech, payments, or card issuing background (PCI DSS a plus) - Pentest, bug bounty, or red team experience - Experience building security scanners, static analysis rules, or LLM-based review tools - If you have the background: AI security for our agents and agentic payments, or corporate security alongside IT THINGS THAT ENABLE A FULFILLING, HEALTHY AND HAPPY EXPERIENCE AT RAIN: Unlimited time off 🌴 Unlimited vacation can be daunting, so we require Rainmakers to take 10 days minimum for themselves. Flexible working ☕ We support a flexible workplace – work from home, come into an office, or both. We want everyone to work in an environment where they're their most confident and productive selves. New Rainmakers receive a stipend to set up a comfortable home workspace. Easy to access benefits 🧠 For US Rainmakers, we cover 95% of your health, dental, and vision plan costs and 90% for your dependents, plus a 100% company-subsidized life insurance plan. Retirement goals💡 Plan for the future with confidence. We offer a 401(k) with a 4% company match. Equity plan 📦 Every Rainmaker gets an equity option plan so we all benefit from our success. Health and Wellness 📚 High performance begins from within. Rainmakers receive a monthly stipend to be used for eligible health and wellness spending like gym memberships/fitness classes, massages, acupuncture - whatever recharges you! In-office meals 🍜 Rainmakers working from the office enjoy lunch and dinner on us, covered with a DoorDash credit. Team summits ✨ Summits play an important role at Rain. Time together helps us build relationships and a common destiny. Expect team and company offsites, both domestic and international.

Задачи: — Анализ двоичного и/или исходного кода с целью поиска ошибок реализации, уязвимостей и/или восстановления логики работы программ — Анализ защищенности и поиск уязвимостей в устройствах и компонентах Требования: — Практический опыт реверс-инжиниринга от 2-х лет — Владение инструментами IDA, x64DBG, Ghidra, WireShark/Burp suite и т.д. — Понимание внутреннего устройства ОС Windows, Linux, Android — Владение фреймворками Frida, Xposed — Работа с эмуляторами, знание утилит для рута (magisk, lsposed и т.д.) — Умение снять трафик приложения и воспроизвести протокол общения — Знание и понимание таких понятий/технологий как ssl, mitm, proxy, ssl pinning — Знание языков программирования / наличие опыта разработки (C/C++, C#, Python, Java, Lua, Javascript) — Знакомство с движками cocos-2d, unity

Задачи: — Проводить проактивный поиск угроз и анализ цепочек атак (kill chain) в системах Stripe и внешних данных. — Применять и развивать многоуровневую таксономию FT3 для стандартизации разведданных об угрозах. — Сотрудничать с командами Fraud Intelligence, Fraud Ops, Strategy, Risk, Onboarding и Security для интеграции и автоматизации потоков разведданных. — Переводить результаты исследований в практические рекомендации по контролю угроз, включая политику, технические системы, рабочие процессы поддержки и механизмы обнаружения. — Использовать агентные автоматизированные тестовые фреймворки для моделирования поведения злоумышленников, проверки эффективности контролей и создания регрессионных сценариев. Требования: — Опыт не менее 5 лет в области разведки угроз, поиска угроз или технического реагирования на инциденты в кибербезопасности, борьбе с мошенничеством или доверительных доменах. — Опыт анализа больших и сложных наборов данных с использованием аналитических инструментов для выявления аномалий, анализа поведенческих трендов и решения сложных задач мошенничества. — Высшее образование (бакалавр или магистр) в области компьютерных наук, кибербезопасности или смежной технической области, либо эквивалентный практический опыт. — Экспертное владение Python и SQL, опыт автоматизации рабочих процессов, создания инструментов для расследований и запросов к большим данным. — Практический опыт анализа логов (приложений, API, сетевых событий), цифровой криминалистики и методологий киберрасследований. — Сильные коммуникативные навыки для перевода сложных технических исследований в понятные и применимые рекомендации для межфункциональных команд. Предпочтительные квалификации: — Глубокое понимание мотиваций, инфраструктуры и тактик злоумышленников, специфичных для финансового мошенничества (например, ATO, Card Testing, Credential Stuffing). — Знакомство с таксономиями FT3 или MITRE ATT&CK. — Владение платформами для обработки и анализа данных, такими как Databricks, Trino, PySpark, Pandas, Scikit-Learn. — Опыт работы с платформами разведки угроз (TIPs), тактическими потоками угроз, OSINT и разведданными о взломах. — Навыки создания или использования агентных LLM-инструментов, систем автоматизированного тестирования и фреймворков валидации контролей для моделирования поведения злоумышленников в масштабе. — Участие в отраслевых конференциях, вебинарах, группах обмена угрозами и наличие профессиональных сертификатов (например, GCTI, GCFA, OSCP).

Location: Sofia, Bulgaria Workplace: hybrid Are you ready to join our digital revolution journey?    At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.   Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.   With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career. Role Purpose As Audit & Compliance Manager, Europe, you will be the primary owner of audit readiness and tax regulatory compliance across all Europe entities. You will set the standard, structure and cadence for how the region prepares for and manages statutory audits, global group audits, and tax authority engagement — working through the local reporting teams and external accountants who handle data preparation, review and submission, rather than performing that work yourself. Your role is to define how things get done, ensure consistent quality across every market, and be the region's face in front of auditors and tax authorities. What Makes This Role Different: Build, don't just maintain. You're stepping into a newly created position with a mandate to design the region's audit and compliance approach from the ground up — not inherit a fixed process. Full regional ownership. This role spans the entire Europe region. High visibility, real stakes. You'll be the direct point of contact with external auditors and tax authorities on some of the company's most sensitive matters, with senior leadership relying on your judgment. A technology-forward environment. The business is actively investing in automation, AI and dashboarding to modernize reporting — you'll be expected to bring ideas here, not just adopt what's handed to you. Cross-functional reach. You'll work closely with the Tax, Transfer Pricing and Legal teams, and directly with hub-entity finance teams, on issues spanning VAT, customer transactions and company-wide reviews. What You'll Do: 1. Statutory & Global Audit Leadership Audit Lifecycle Ownership: Lead the end-to-end process for local statutory audits and global group audits across all 23 countries — planning, coordinating PBC (Provided by Client) lists, and driving on-time sign-off. External Auditor Relationship: Act as the primary regional point of contact for audit firms, owning timelines and resolution of open items. Consolidation Alignment: Ensure local statutory filings align with Global/Group reporting timelines (IFRS/US GAAP/local GAAP) for a seamless audit process. Pre-Audit Structuring: Work with local teams ahead of each audit cycle to define what needs to be prepared and how — so the region walks into every audit with a consistent, proactive structure rather than reacting to auditor requests. 2. Tax Governance & Regulatory Compliance Filing Oversight: Ensure accurate, on-time submission across VAT, Withholding Tax (WHT), Corporate Income Tax, and country-specific statistical and national bank reporting — delivered through local reporting teams and external accountants, with you owning quality and timeliness. Tax Team Liaison: Standardize and oversee submission of supporting data to the central Tax team; ensure schedules provided for assessments are reconciled and audit-ready. Notice & Assessment Management: Proactively manage tax notices and audits, coordinating evidence-gathering and working with the Tax team to ensure timely, well-supported responses. Corporate Secretarial Support: Oversee annual filings and coordinate with Legal on board meeting minutes (financial aspects) and other local regulatory requirements. 3. Process Improvement & Digital Transformation Root Cause Analysis: Identify recurring audit adjustments or tax queries and implement structural fixes to eliminate them at the source. Internal Controls: Strengthen the control environment across the region to minimize audit findings. Technology & Automation: Identify and champion tools — including AI and dashboarding — to reduce manual work and increase consistency across the region's reporting. What We're Looking For: Mindset & Soft Skills (critical to this role) A challenger, not a process-follower — someone who questions how things are done today and proposes a better way, rather than simply executing an existing playbook. Comfortable operating in a fast-moving, high-volume, occasionally chaotic environment, and energized rather than fatigued by it. Strong communicator and team player who can build trust quickly across Tax, Legal, Transfer Pricing and local finance teams. Strategic mindset with the ability to zoom out across markets while staying close enough to the detail to be credible with auditors and tax authorities. Experience & Technical Skills Currently operating at Manager level (or equivalent) within an audit firm or a multinational's in-house compliance/audit function — this is not a developmental hire. 10–12+ years of post-qualification experience, with hands-on exposure to multi-country compliance in Europe. Chartered Accountant (CA), CPA, or ACCA qualification. Solid working knowledge of IFRS, European tax regulations, and Transfer Pricing fundamentals. Advanced proficiency with Tier-1 ERP systems (SAP, Oracle, or NetSuite). Fluent English, written and spoken — required given daily interaction with regional and global stakeholders. Strong project management and negotiation skills, with the ability to work confidently across time zones and cultures. In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is EUR 40,000. In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.     #ALEPH Why Join Us?   Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.     We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.    #ALEPH

Location: Budapest, Hungary Workplace: hybrid Are you ready to join our digital revolution journey?    At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.   Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.   With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career. Role Purpose As Audit & Compliance Manager, Europe, you will be the primary owner of audit readiness and tax regulatory compliance across all Europe entities. You will set the standard, structure and cadence for how the region prepares for and manages statutory audits, global group audits, and tax authority engagement — working through the local reporting teams and external accountants who handle data preparation, review and submission, rather than performing that work yourself. Your role is to define how things get done, ensure consistent quality across every market, and be the region's face in front of auditors and tax authorities. What Makes This Role Different: Build, don't just maintain. You're stepping into a newly created position with a mandate to design the region's audit and compliance approach from the ground up — not inherit a fixed process. Full regional ownership. This role spans the entire Europe region. High visibility, real stakes. You'll be the direct point of contact with external auditors and tax authorities on some of the company's most sensitive matters, with senior leadership relying on your judgment. A technology-forward environment. The business is actively investing in automation, AI and dashboarding to modernize reporting — you'll be expected to bring ideas here, not just adopt what's handed to you. Cross-functional reach. You'll work closely with the Tax, Transfer Pricing and Legal teams, and directly with hub-entity finance teams, on issues spanning VAT, customer transactions and company-wide reviews. What You'll Do: 1. Statutory & Global Audit Leadership Audit Lifecycle Ownership: Lead the end-to-end process for local statutory audits and global group audits across all 23 countries — planning, coordinating PBC (Provided by Client) lists, and driving on-time sign-off. External Auditor Relationship: Act as the primary regional point of contact for audit firms, owning timelines and resolution of open items. Consolidation Alignment: Ensure local statutory filings align with Global/Group reporting timelines (IFRS/US GAAP/local GAAP) for a seamless audit process. Pre-Audit Structuring: Work with local teams ahead of each audit cycle to define what needs to be prepared and how — so the region walks into every audit with a consistent, proactive structure rather than reacting to auditor requests. 2. Tax Governance & Regulatory Compliance Filing Oversight: Ensure accurate, on-time submission across VAT, Withholding Tax (WHT), Corporate Income Tax, and country-specific statistical and national bank reporting — delivered through local reporting teams and external accountants, with you owning quality and timeliness. Tax Team Liaison: Standardize and oversee submission of supporting data to the central Tax team; ensure schedules provided for assessments are reconciled and audit-ready. Notice & Assessment Management: Proactively manage tax notices and audits, coordinating evidence-gathering and working with the Tax team to ensure timely, well-supported responses. Corporate Secretarial Support: Oversee annual filings and coordinate with Legal on board meeting minutes (financial aspects) and other local regulatory requirements. 3. Process Improvement & Digital Transformation Root Cause Analysis: Identify recurring audit adjustments or tax queries and implement structural fixes to eliminate them at the source. Internal Controls: Strengthen the control environment across the region to minimize audit findings. Technology & Automation: Identify and champion tools — including AI and dashboarding — to reduce manual work and increase consistency across the region's reporting. What We're Looking For: Mindset & Soft Skills (critical to this role) A challenger, not a process-follower — someone who questions how things are done today and proposes a better way, rather than simply executing an existing playbook. Comfortable operating in a fast-moving, high-volume, occasionally chaotic environment, and energized rather than fatigued by it. Strong communicator and team player who can build trust quickly across Tax, Legal, Transfer Pricing and local finance teams. Strategic mindset with the ability to zoom out across markets while staying close enough to the detail to be credible with auditors and tax authorities. Experience & Technical Skills Currently operating at Manager level (or equivalent) within an audit firm or a multinational's in-house compliance/audit function — this is not a developmental hire. 10–12+ years of post-qualification experience, with hands-on exposure to multi-country compliance in Europe. Chartered Accountant (CA), CPA, or ACCA qualification. Solid working knowledge of IFRS, European tax regulations, and Transfer Pricing fundamentals. Advanced proficiency with Tier-1 ERP systems (SAP, Oracle, or NetSuite). Fluent English, written and spoken — required given daily interaction with regional and global stakeholders. Strong project management and negotiation skills, with the ability to work confidently across time zones and cultures. In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is 15,871,000 HUF. In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.   #ALEPH Why Join Us?   Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.     We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.    #ALEPH

Location: Bucharest, Romania Workplace: hybrid Are you ready to join our digital revolution journey?    At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.   Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.   With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career. Role Purpose As Audit & Compliance Manager, Europe, you will be the primary owner of audit readiness and tax regulatory compliance across all Europe entities. You will set the standard, structure and cadence for how the region prepares for and manages statutory audits, global group audits, and tax authority engagement — working through the local reporting teams and external accountants who handle data preparation, review and submission, rather than performing that work yourself. Your role is to define how things get done, ensure consistent quality across every market, and be the region's face in front of auditors and tax authorities. What Makes This Role Different: Build, don't just maintain. You're stepping into a newly created position with a mandate to design the region's audit and compliance approach from the ground up — not inherit a fixed process. Full regional ownership. This role spans the entire Europe region. High visibility, real stakes. You'll be the direct point of contact with external auditors and tax authorities on some of the company's most sensitive matters, with senior leadership relying on your judgment. A technology-forward environment. The business is actively investing in automation, AI and dashboarding to modernize reporting — you'll be expected to bring ideas here, not just adopt what's handed to you. Cross-functional reach. You'll work closely with the Tax, Transfer Pricing and Legal teams, and directly with hub-entity finance teams, on issues spanning VAT, customer transactions and company-wide reviews. What You'll Do: 1. Statutory & Global Audit Leadership Audit Lifecycle Ownership: Lead the end-to-end process for local statutory audits and global group audits across all 23 countries — planning, coordinating PBC (Provided by Client) lists, and driving on-time sign-off. External Auditor Relationship: Act as the primary regional point of contact for audit firms, owning timelines and resolution of open items. Consolidation Alignment: Ensure local statutory filings align with Global/Group reporting timelines (IFRS/US GAAP/local GAAP) for a seamless audit process. Pre-Audit Structuring: Work with local teams ahead of each audit cycle to define what needs to be prepared and how — so the region walks into every audit with a consistent, proactive structure rather than reacting to auditor requests. 2. Tax Governance & Regulatory Compliance Filing Oversight: Ensure accurate, on-time submission across VAT, Withholding Tax (WHT), Corporate Income Tax, and country-specific statistical and national bank reporting — delivered through local reporting teams and external accountants, with you owning quality and timeliness. Tax Team Liaison: Standardize and oversee submission of supporting data to the central Tax team; ensure schedules provided for assessments are reconciled and audit-ready. Notice & Assessment Management: Proactively manage tax notices and audits, coordinating evidence-gathering and working with the Tax team to ensure timely, well-supported responses. Corporate Secretarial Support: Oversee annual filings and coordinate with Legal on board meeting minutes (financial aspects) and other local regulatory requirements. 3. Process Improvement & Digital Transformation Root Cause Analysis: Identify recurring audit adjustments or tax queries and implement structural fixes to eliminate them at the source. Internal Controls: Strengthen the control environment across the region to minimize audit findings. Technology & Automation: Identify and champion tools — including AI and dashboarding — to reduce manual work and increase consistency across the region's reporting. What We're Looking For: Mindset & Soft Skills (critical to this role) A challenger, not a process-follower — someone who questions how things are done today and proposes a better way, rather than simply executing an existing playbook. Comfortable operating in a fast-moving, high-volume, occasionally chaotic environment, and energized rather than fatigued by it. Strong communicator and team player who can build trust quickly across Tax, Legal, Transfer Pricing and local finance teams. Strategic mindset with the ability to zoom out across markets while staying close enough to the detail to be credible with auditors and tax authorities. Experience & Technical Skills Currently operating at Manager level (or equivalent) within an audit firm or a multinational's in-house compliance/audit function — this is not a developmental hire. 10–12+ years of post-qualification experience, with hands-on exposure to multi-country compliance in Europe. Chartered Accountant (CA), CPA, or ACCA qualification. Solid working knowledge of IFRS, European tax regulations, and Transfer Pricing fundamentals. Advanced proficiency with Tier-1 ERP systems (SAP, Oracle, or NetSuite). Fluent English, written and spoken — required given daily interaction with regional and global stakeholders. Strong project management and negotiation skills, with the ability to work confidently across time zones and cultures. In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is 220,800 RON. In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.     #ALEPH Why Join Us?   Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.     We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.    #ALEPH