Вакансии

Location: Oakland, California, United States, AMER From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About Us Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. ​ During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites. About the Role Fivetran + dbt is building data pipelines to power the modern data stack for thousands of companies. We’re looking for a high-performance, experienced hands-on technical program manager(TPM) in the security domain to be part of an Engineering team. In this role, you will be responsible for leading and managing security-related initiatives across the organization. It involves collaborating with cross-functional teams to ensure the successful planning, execution, and delivery of security programs. The TPM will act as a bridge between technical teams and business stakeholders, ensuring alignment with organizational goals while mitigating security risks. The work is very diverse. Fivetran is a multi-cloud environment operating on AWS, GCP, and Azure. You will help select security tools, implement improvements within our environments, and assist in developing new processes to increase our security posture. This is a full-time position based out of our Oakland, CA office. Our hybrid work model offers a blend of remote flexibility and in-person collaboration, including two days in the office each week to connect and build as a team. Technologies You’ll Use Bash, Python, JS, BigQuery, Looker, Sigma, Azure, AWS, GCP, Terraform, Docker, Kubernetes, Github, Buildkite, SonarQube, Grafana, Prisma, Synk, Signal Sciences, AI Tools What You’ll Do This is the primary person in engineering responsible for executing the security vulnerability management program for engineering, including infrastructure, code, and dependency vulnerabilities. Collaborate with Security and Engineering teams to ensure vulnerabilities are identified, prioritized, and patched. Provide technical oversight and accountability to ensure the effective delivery of security fixes. Enhance processes by evaluating tools, recommending improvements, and driving automation for faster resolution. Usage of AI in defining the roadmap for a proactive security approach based on risk assessment/rating Running the Dependency management and image hardening programs Using AI to contribute to the remediation of code and infrastructure vulnerabilities Establish and lead a code scanning program in collaboration with infrastructure, engineering, and security teams to ensure seamless integration and sustainable security practices. Dedicate up to 20% of the time to assessing business systems to identify vulnerabilities and compliance gaps proactively. Develop a scanning and detection plan and establish policies and standards for internal data access tools to improve overall system security. Advocate for tools and solutions that support shift-left strategies, driving early integration of security and testing in the development lifecycle. Skills We’re Looking For Over 5 years of experience in technical program management with a strong focus on security engineering, vulnerability management, cloud security, and application security. Proficient in applying program management methodologies, tools, and best practices to deliver complex security initiatives. Exceptional skills in prioritization, organization, and multitasking to manage multiple programs effectively. Proven ability to work collaboratively with cross-functional teams, including product teams, SRE/QE engineers, and developers, to embed a security-first mindset into workflows and practices. Deep understanding of key security domains, including application/infrastructure security, data privacy, threat modeling, vulnerability management, and secure software development lifecycle (SDLC). Strong grasp of security concepts and principles, including network security, encryption, authentication, and authorization. Hands-on experience with SAST/DAST tools, agent-based firewalls, IDS/IPS technologies, and automation tools for security orchestration. Experience with scripting languages for automating security processes. Proficient in researching and validating vulnerabilities while proposing effective remediation or mitigation strategies. Strong familiarity with OWASP principles and best practices for securing web applications, including the OWASP Top 10 vulnerabilities and Application Security Verification Standard (ASVS) Up-to-date knowledge of market trends, emerging technologies, and best practices in cloud security Strong analytical, problem-solving, and communication skills to address security challenges, coupled with the ability to influence and collaborate effectively with engineering teams in enhancing security measures and mitigating vulnerabilities in a dynamic, fast-paced environment. #LI-HYBRID #LI-EM1 The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role.  Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process. Oakland Pay Range $158,284 — $197,855 USD Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.

Location: Remote-Friendly (Travel Required) | San Francisco, CA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic is building data center campuses at a pace where several are under construction at once, each moving through design, construction, commissioning, and turnover to an operating partner. Security scope on those projects (the physical protections, the systems that enforce them, and the operational readiness of the company that will run the site) has to be delivered as deliberately as the buildings themselves. As Lead for Data Center Security Delivery, you will own security through that entire arc for every campus under construction: from groundbreaking, through construction-phase security, through commissioning and milestone acceptance, to a clean handover into full operation. You are the single point of accountability for "the site's security is actually ready", and you will verify that the operating partner has its people, processes, systems, and contractual security obligations genuinely in place before a site goes live. This is a delivery role, not a watch-the-dashboard role. You'll absorb the day-to-day noise of active construction sites (schedule slips, design changes, vendor coordination, escalations) so the rest of DCSE can stay focused on steady-state operations and systems. And where DCSE's requirements or processes don't survive contact with a real construction schedule, you will have the authority, and the expectation, to rewrite them. Role boundaries. This seat is distinct from DCSE's regional security operations leads and from the team's systems-engineering roles. The operations leads own steady-state regional programs (vendors, guard force, incident response) once a site is running; the systems roles build platforms and tooling. This role owns the delivery arc: every site's security scope from construction start through commissioning, acceptance, and handover, after which accountability transfers to operations. Key responsibilities You will own the security delivery program across every Anthropic campus under construction: concurrently, from groundbreaking to handover. Construction-phase security delivery: temporary site security, contractor vetting and access, protection of installed equipment, and coordination with general contractors and site teams on every active build. Milestone and commissioning acceptance: define and maintain the security acceptance criteria at each construction milestone and commissioning gate; run or attend acceptance events (FAT/SAT, punch lists); issue or withhold the security sign-off. Operator readiness verification: build and run a structured, evidence-based readiness process proving the operating company is genuinely ready before handover: staffing and guard force in place, SOPs adopted, security systems commissioned and monitored, contractual security obligations demonstrably met. Clean handover to operations: own the turnover package (as-builts, test records, credentials, punch-list closure, residual-risk register) and the defined transition from construction-phase to operational security ownership. Requirements and process authority: rewrite DCSE's construction-security requirements, delivery processes, and acceptance frameworks where they fail in the field, and codify what works, so each build is cleaner than the last. Representation and escalation: represent security in design reviews, owner-architect-contractor (OAC) meetings, and change management; coordinate integrators, general contractors, and operator counterparts on security system installation, testing, and commissioning; surface schedule and readiness risks early, with options, to DCSE leadership and cross-functional partners. Minimum qualifications Have personally delivered the physical security scope on new-build data center (or comparable critical-infrastructure) construction projects (design reviews through construction, commissioning, and turnover to operations) and can name the sites and your role on them. Have run milestone- or commissioning-acceptance processes: FAT/SAT, punch lists, turnover documentation, formal sign-off. Have held an operator, landlord, or vendor accountable to contractual security obligations, with evidence rather than assurances. Are comfortable being the person who says "not ready", and can do it in a way that produces a plan rather than a standoff. Can absorb the operational noise of multiple concurrent construction sites and still drive each one toward its handover date. Can author requirements, standards, and process documents that get adopted, and are willing to rewrite your own when they fail in the field. Work through influence with general contractors, integrators, operators, and internal partners; you shape decisions rather than block them. Preferred qualifications CPP (Certified Protection Professional) or PSP (Physical Security Professional) certification, or commissioning credentials. Hyperscaler or major colocation new-build delivery experience. Experience on both sides of an operator/tenant relationship. Construction management or owner's-representative background. Experience in regulated or high-assurance environments. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $290,000 — $365,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Lisbon Workplace: Hybrid ROLE HIGHLIGHTS: - Security Officer - Location: Lisbon, Portugal - Department: Security - Reports to: CEO of ICEYE Portugal - Employment type: Permanent - Workplace model: On-site (our office is located at Av. Defensores de Chaves 4, 1000-117 Lisboa) - Employment is subject to applicable security screening (incl. SUPO, where required) WHY THIS ROLE MATTERS:   ICEYE Portugal turns sovereign intelligence from space into an operational capability built in Lisbon. This role keeps that capability secure. As ICEYE Portugal's named Local Security Officer, you are the formal interface to GNS / ANS and the CEO's trusted partner on every clearance, audit and facility question, accountable for our people, our facility and our information meeting ICEYE's global security standards and Portugal's national and NATO sovereignty requirements. It is a hybrid role, modelled on how ICEYE runs its other international sites, and it sits at the centre of everything ICEYE Portugal does.   WHO WE ARE ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth.   ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system.   ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future.   Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific. YOUR DAY-TO-DAY RESPONSIBILITIES   Facility and physical security - Own ICEYE Portugal's facility security programme: physical access control, secure-room build-out, visitor management, alarms, CCTV and key management. - Drive the office's NATO Restricted readiness audit with GNS and prepare for higher classifications as the customer mission evolves. - Run the secure handling of classified material in line with Portuguese national rules and ICEYE policy. - Partner with the CEO, Head of People & Operations, and the local IT Site Engineer on the Class A office fit-out, specifically on secure-area readiness for clearance-restricted workflows. Personnel security and clearances - Coordinate national security clearance applications (GNS / ANS) for the CEO, FDEs and other cleared roles, and maintain the cleared-personnel register (levels, expirations, briefings and debriefings). - Run security on-boarding and off-boarding for every employee and visitor: NDAs, security awareness, classified-handling training and access provisioning. Information and cyber security - Partner with ICEYE Oy Security leadership and HQ IT to translate the global cyber baseline (endpoint, MDM, network, identity) into local controls. - Lead local incident-response coordination: classified leaks, lost devices, social engineering and suspicious foreign-contact reporting. Vendor and supply-chain security - Vet and onboard local vendors against ICEYE security standards (cleaning, IT, real estate, broker, legal, accounting). - Run periodic security audits on key suppliers. Programme and customer security interface - Be the named security interface to the Portuguese Air Force, GNS / ANS, NATO and the Portuguese Space Agency on ICEYE Portugal matters. - Support the FDEs on customer-site security questions during the SAR / SIP deployment, maintain the local security policy library, run the annual security training programme, and contribute to ICEYE's global security community of practice.   WHAT WE’RE LOOKING FOR Must haves: - Formal Facility Security Officer (FSO) or Security Manager experience in defence, aerospace or critical infrastructure. - Working knowledge of physical security standards (locks, alarms, access control, CCTV, secure rooms) and information security frameworks (ISO 27001, NIST, NIS2). - Hands-on experience running or actively supporting national clearance processes (GNS / ANS) and NATO classification frameworks (NATO RESTRICTED minimum). - Active or recently held Portuguese national security clearance, or unambiguous eligibility to obtain one quickly. - Excellent written and spoken English and Portuguese. - Pragmatic, calm under pressure, comfortable with ambiguity and matrix reporting (Security, CEO). - Basic IT literacy sufficient to coordinate with the local IT Site Engineer on secure-area technical requirements (network segmentation, air-gapped systems).   Nice to haves: - Prior background as a non-commissioned or commissioned officer in the Portuguese Armed Forces, GNR, PSP, or SIS / SIED. - Experience with sovereign or accredited cloud (NATO RESTRICTED, EU RESTRICTED) and export-control regimes (Wassenaar, dual-use EU 2021/821). - Familiarity with Portugal's cyber regulator (CNCS) and NIS2 implementation. When applying, please indicate your annual gross salary expectations.   WORKING AT ICEYE At ICEYE, you’ll join a diverse and highly engaged team united by the ambition to make the impossible possible. As a global scale-up, we combine speed and ambition with the opportunity to take real ownership from day one. Your growth, wellbeing, and success are a priority, with continuous professional development, training opportunities, and a culture where collaboration is how we win. HOW WE WORK (OUR VALUES) Make the impossible possible: We set ambitious goals and stay calm under pressure. We bring grit, optimism, and ownership when things get hard, and we keep moving until we find a way. - Be curious: Go deep, ask questions, listen carefully, and think critically. Understand the “why” behind decisions. - See the big picture: Stay close to what’s happening across the company so you can make better decisions. Consider how your work affects others. - Drive effective teamwork: Create psychological safety, invite different perspectives, and build inclusive teams. There are no bad questions. - Act as one team: We win together. We match tasks to the right owner and stay agile as priorities shift. - Have fun: What we do matters—and it should be enjoyable. Celebrate progress, take pride in results, and share the wins. BENEFITS Our benefits are designed to support your health and wellbeing, at work and beyond. We keep improving them based on employee feedback, and offerings vary by location. Talent Acquisition will confirm what applies for this role and location during the process.   OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION We want ICEYE to be a place where people can be themselves and do great work. Different backgrounds and perspectives make us stronger, which is why we work to create an environment where people feel included, respected, and able to speak up. Whatever your background, we want you to bring your authentic self to the table. We’re committed to fair, inclusive hiring and equal opportunity. Everyone is welcome to apply. If you need any adjustments or support during the recruitment process, tell us—we’ll do our best to help. Apply now to start your ICEYE journey, and help us continue to make the impossible possible together. Read more about ICEYE and working with us at iceye.com http://iceye.com.

Location: Remote Workplace: Remote ABOUT US Parity is one of the world’s most experienced companies building the core infrastructure behind blockchain — the system that allows information and value to be shared securely without needing an intermediary. We’re laying the foundation for a better web which respects the freedom and data of individuals, and empowers developers to build better, more trustworthy online services. Our remote-first, global team develop open-source software that anyone can use or improve. This includes Polkadot https://polkadot.network/, Polkadot SDK https://substrate.io, and Kusama https://kusama.network/ — key parts of the Web3 tech stack, the next generation of the internet. Our mission is to make Polkadot the most active and innovative community in blockchain, powering a new era of connected and decentralised applications. ABOUT THE TEAM Parity’s Security Engineering team is at the forefront of protecting the Polkadot ecosystem by designing and implementing secure software, auditing code for vulnerabilities, and building cutting-edge ML tools to automate security analysis. We work closely with development teams to embed security best practices across our open-source stack, ensuring that our blockchain infrastructure is robust, resilient, and secure by design. ABOUT THE ROLE As a security-focused software engineer, you will go beyond traditional application security - you’ll audit and ideally write secure Rust code where needed, conduct deep manual and automated code audits, and leverage machine learning to enhance security across our ecosystem. This is an opportunity to shape the security landscape of the next generation of decentralized applications and protocols. - Assist in developing Secure Software – Write and optimise Rust code to build security-critical components and tools. - Code Auditing & Vulnerability Analysis – Perform deep manual and automated code reviews to identify and mitigate security vulnerabilities. - ML-Powered Security – Design and implement machine learning models for automated security analysis, anomaly detection, and threat mitigation. - Bug Bounty & Vulnerability Management – Manage bug bounty submissions, triage security reports, and collaborate with ethical hackers to resolve issues. - Secure Development Best Practices – Work with engineering teams to integrate security best practices into the software development lifecycle. - Threat Modeling & Risk Assessment – Identify and assess security risks in our blockchain infrastructure, smart contracts, and core software. - Stay Cutting-Edge – Research and implement the latest advancements in secure coding, ML-driven security, and blockchain security. WHAT WE'RE LOOKING FOR - Experience with secure coding practices and memory safety concepts. - Background in code auditing, vulnerability analysis, or exploit development. - Experience triaging and resolving bug bounty reports. - Knowledge of machine learning techniques applied to security (e.g., anomaly detection, fuzzing, automated threat detection). - Familiarity with cryptographic principles, blockchain security, or decentralized systems. - Strong problem-solving skills and an offensive security mindset. If you're excited about writing secure software, auditing code, and pioneering ML-driven security solutions for Web3, we’d love to hear from you! ABOUT WORKING WITH US Joining Parity means joining team mates who are genuinely excited about the impact their projects are having, and the opportunity to grow alongside some of the brightest minds in the Web3 space! You’ll work remotely and flexibly, while still getting to meet your team mates throughout the year at team and company-wide retreats. Upon receiving an offer, all candidates undergo a background check through Zinc https://zincwork.com/candidates, our trusted third-party provider. Team members will be taken on as a contractor via our UK entity. View our Applicant Notice https://www.parity.io/applicant-notice/ to see how we use your data. Parity is an Equal Opportunity Employer. We welcome diversity in our global team and care about everyone in our collective feeling included and welcome. Is this position not quite your match? Browse https://www.parity.io/jobs/ our other open roles.

Location: San Francisco, CA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role The Network Security team's remit is to secure Anthropic's networks across our cloud providers and our bare-metal AI data centers. We own egress and ingress controls, network segmentation, private connectivity between environments, and encryption in transit. We design, build, and maintain these controls, and we write the software that deploys, enforces, and monitors them. These controls protect our model weights, customer data, and internal assets. We are hiring an Engineering Manager to lead this team. Anthropic is adding data center sites and cloud regions quickly, and the team will grow with that work. In this role you will set the team's charter, practices, and priorities. You will partner with our infrastructure networking, cluster, and data center teams so security is built into network designs from the start. The goal is secure-by-default networking that lets research and product teams use compute in any environment without slowing them down. Key responsibilities We're hiring an Engineering Manager to lead a Network Security Engineering team in executing across critical initiatives including, but not limited to: Own the network security roadmap: threat model from the management plane through Kubernetes and cloud interconnects, decide what to build, and deliver it Be able to reason about the design and implementation of default-deny ingress and egress, segmentation between research, training, and production, private connectivity, and mTLS/service identity across every environment Ship these as secure-by-default primitives so new clusters, VPCs, and data center links inherit the right boundaries without security on the critical path Join networking, cluster, and data center teams at design time so topology, routing, and firewall decisions carry our invariants from day one Build visibility into traffic and boundary drift, with detection for exfiltration paths and automated remediation where safe Own the network security evidence for our security goals and compliance: the invariants hold, and you can prove it Hire, grow, and retain senior security software engineers; own their career development, and set the practices the team runs on as it scales Minimum Requirements: 8+ years of front line management experience Low ego, high empathy; has built diverse teams and has former reports who would work for them again Experience managing infrastructure or security engineering teams, including hiring, developing, and managing senior and staff engineers Has grown engineers into staff or lead roles, and has made the call to move someone out when coaching didn't work Kept a team intact and delivering through reorgs, charter changes, or leadership turnover Experience owning a security or infrastructure domain end to end: setting multi-year strategy, delivering year-long cross-organizational work with little direction, and answering to executives for its risk and tradeoffs Scaled a team and its systems together through hypergrowth, where last quarter's architecture was already too small Hands-on network security engineering in cloud and/or on-prem environments: VPC design, interconnects, private service connectivity, cloud firewall policy, egress control, physical segmentation, and out-of-band/management-plane security Threat modeling and risk assessment for networked systems, with the judgment to tell which controls reduce risk and which just look good on a diagram Secured Kubernetes networking at scale, or worked in high-assurance environments where controls had to be evidenced, not just deployed Preferred Qualifications: Built or rebuilt a hiring loop and held the bar while adding headcount quickly Exposure to large-scale distributed training and what it demands of a network Solved end-to-end networking problems directly with internal users, cloud account teams, and hardware or colo vendors Has taken infrastructure from zero to one and then to maturity: built the first version where nothing existed, then run and hardened it into a system other teams depend on at production-network reliability Pragmatic and steady: cares about unblocking research and product as much as a clean architecture, and brings patience and judgment to opinionated senior engineers Clear and persuasive communicator in writing and in person Familiar with AI security and safety concepts The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $405,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco, CA; New York, NY Workplace: OnSite ABOUT US At LangChain, our mission is to make intelligent agents ubiquitous. We build the foundation for agent engineering in the real world, helping developers move from prototypes to production-ready AI agents that teams can rely on. We began as widely adopted open-source tools and have grown to also offer a platform for building, evaluating, deploying, and operating agents at scale. With $125M raised at Series B from IVP, Sequoia, Benchmark, CapitalG, and Sapphire Ventures, we’re at a stage where we’re continuing to develop new products, growth is accelerating, and all team members have meaningful impact on what we build and how we work together. LangChain is a place where your contributions can shape how this technology shows up in the real world. Today, our platform includes LangSmith (Observability, Evaluation, Deployment, Fleet, and Sandboxes), our open source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement. We have 100M+ monthly open source downloads, 6,000+ active LangSmith customers, and 5 of the Fortune 10 use LangSmith in production (+ 35% of the Fortune 500 overall), including teams at Klarna, Clay, Coinbase, Workday, Lyft, Cloudflare, Harvey, Rippling, Vanta, LinkedIn, Monday.com, Nvidia, and Bridgewater. ABOUT THE TEAM The Security team ensures that while AI moves at breakneck speed, everyone driving the racecar is wearing a seatbelt. We secure LangChain's core platform and protect AI agents from emerging threats. We work across the stack so developers can confidently ship from prototype to production without compromising on safety or privacy. ABOUT THE ROLE You'll be the hands-on detection and response engineer responsible for how we see, stop, and learn from threats across LangChain's production platform, cloud infrastructure, and the services that host and execute agentic workloads. You'll partner closely with Product Security to turn threat models, vulnerabilities, and incidents into telemetry, detections, and durable defenses. Your primary focus is engineering: building detection, investigation, and response systems that scale the Security team's impact beyond what manual operations allow. We are looking for engineers who think like builders, not just operators — strong software skills are a must. This role participates in an incident on-call rotation, but its core focus is engineering systems that reduce risk, speed up investigations, and make incidents less frequent and less costly. Location/City: San Francisco or NYC WHAT YOU'LL DO - Own the detection lifecycle: Translate threat models, incidents, and attacker behavior into telemetry requirements and detections-as-code. Validate coverage, measure signal quality, tune false positives, and continuously test whether defenses work. - Build security monitoring and telemetry: Design the telemetry pipeline end-to-end across cloud (GCP/AWS), Kubernetes, and the LangSmith/LangGraph control plane. Instrument services, define the signals that matter, and make security data reliable and useful. - Engineer investigations and threat hunting: Build tools and workflows for proactive hunting, evidence collection, incident scoping, and containment. Turn investigation findings into new detections and lasting improvements. - Use agents to scale the team: Build reliable internal AI agents and automation that triage alerts, enrich findings, gather evidence, scope incidents, and accelerate routine security work. Design human-in-the-loop controls and evaluations so automation is safe, observable, and trustworthy. - Lead incident response and participate in on-call: Triage, scope, contain, and remediate security incidents, then drive postmortems that produce durable engineering changes. - Partner with Product Security: Turn product threat models and vulnerability findings into production monitoring, and feed real-world detection and incident learnings back into secure design. WHAT YOU'LL BRING - 5+ years in security engineering, with meaningful experience in detection engineering, security operations, or incident response — and the software skills to build your way out of repetitive work. - Strong software engineering in Python or Go (TypeScript a plus). You design maintainable systems and write production code, not just one-off scripts. - Cloud and Kubernetes detection depth: Experience with GCP or AWS logging, Kubernetes audit and runtime telemetry, workload identity, and turning raw signals into actionable detections. - Detection and adversary expertise: The ability to model realistic attacker behavior, hunt across complex systems, test detection coverage, and distinguish meaningful signal from noise. - Hands-on incident response: You've participated in on-call, led incidents, and written postmortems that changed how a team operates. - Experience building reliable automation or developer-facing systems: You can design APIs and workflows, instrument what you build, evaluate quality, and operate it in production. - A pragmatic product mindset: You can identify users and requirements, prioritize the highest-leverage problems, define success, and ship iteratively. NICE TO HAVE - Experience building or operating AI agents for security workflows such as alert triage, investigation, evidence collection, or human-in-the-loop response. - Proficiency using AI tooling to accelerate security investigations and engineering work. - Understanding of AI threats, adversarial testing, and the security boundaries of LLM and agent workloads. - Exposure to SOC 2 or ISO 27001 monitoring and evidence automation. - Experience with infrastructure as code such as Terraform or Helm. - Experience securing both SaaS and self-hosted or air-gapped deployments. Annual salary range: $185,000- $250,000 USD Compensation Philosophy: We offer competitive compensation that includes base salary, variable compensation for relevant roles, meaningful equity, benefits, and perks. We are hiring for this role across a range of scope, and the compensation band reflects that. Your offer depends on what we learn about your impact, craft, leadership, and communication during the interview process. We will tell you early where you’re tracking and talk comp with you before offer stage. Team members in the EU, UK, and APAC receive locally competitive benefits aligned with regional norms and regulations. BENEFITS Benefits include medical, dental, and vision coverage, flexible vacation, a 401(k) plan, meals on in-office days in the US and more.

Location: Home Based - Americas; Home Based - APAC; Home based - EMEA With more than 10 billion pulls , Canonical's container images are trusted by developers worldwide to build and run software securely and at scale. That trust rests on our commitment to hardened, production-ready images. We are advancing the state of the art with a new generation of Ubuntu-based container images we call "rocks": minimal images engineered for performance and usability and backed by long-term security commitments. As a member of the team, you will own the path from upstream source to published image, turning open source software into tested, signed, and continuously maintained artifacts that developers can deploy with confidence. This is fast-paced, multi-disciplinary software engineering. Because most of the software we package originates from third-party upstreams, you will work across a broad range of container technologies and hundreds of open source projects, often in several programming languages, integrating and maintaining them so they are easy to consume on Ubuntu. Automation is central to the role: you will build the pipelines that package, build, test, and publish images at scale. Your seniority in this role will reflect your software engineering experience and your ability to mentor and guide more junior colleagues. Location: This is a globally remote role This role entails Build and maintain a growing portfolio of high-quality, hardened container images Design and operate automated CI/CD pipelines that build, test, scan, sign, publish, promote, and retire images across environments and architectures Write tooling and tests to assess security compliance and cloud-native compatibility Work closely with the community and partners to share container expertise and keep our portfolio current with new features, patches, and applications Collaborate with our product security, platform, infrastructure, and customer-facing teams Contribute technical input to the team's decision-making Set the standard for quality, defining image standards that span security, compatibility, performance, size, and developer experience Grow our knowledge base and write about the work we do Work in a collaborative, agile, and globally distributed environment Mentor colleagues and contribute to hiring Work from home with global travel of up to 15% for internal and external events What we are looking for in you Proficiency in Bash and Python Experience working with CI/CD systems (e.g. GitHub Actions, Jenkins) Experience building container images Command of at least one container management or orchestration tool (e.g. Docker, Podman, or Kubernetes) Hands-on experience with Linux systems, package management, build systems, release engineering, or artifact pipelines Clear communication and end-to-end ownership, spanning design, review, documentation, operation, and cross-team collaboration A commitment to sharing knowledge and helping those around you grow A genuine appetite for learning and for working outside your comfort zone A Bachelor's degree or equivalent in Computer Science, a STEM field, or a similar discipline An exceptional academic track record from both high school and university Business level written and spoken English. Sincere personal motivation aligned with our mission. International travel 2-4 times a year for company events up to two weeks long. 0-7 years relevant experience. In addition we expect that you will match our values, by being: Precise, taking care to deliver correctness and clarity. Reliable, delivering high quality work that builds trust and confidence. Accessible, collaborating to build products and systems that are usable. Adroit, blending enthusiasm, knowledge, adaptability, style and character. Nice-to-have skills A security-oriented maintenance mindset: you can investigate dependency and vulnerability findings, assess their impact, and deliver a safe fix An understanding of software supply chain security, with some experience generating and consuming artifacts such as SBOMs, signatures, provenance, or CVE reports Familiarity with GitOps principles and workflows Familiarity with additional languages such as Go or Rust Hands-on experience building minimal and distroless container images Knowledge of the OCI specifications Familiarity with security or compliance frameworks such as CIS, NIST, FedRAMP, or DISA STIG Evidence of contributions to open source projects A passion for embedding security across all stages of the engineering lifecycle (DevSecOps), and an interest in using AI or agentic development responsibly and safely Relevant Linux, container, or cloud-native certifications (such as CKS or DCA) are welcome If your experience is close but does not match every requirement, we encourage you to apply. We value transferable experience from Linux packaging, release engineering, build systems, platform engineering, and open-source maintenance. What we offer colleagues We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. Distributed work environment with twice-yearly team sprints in person Personal learning and development budget of USD 2,000 per year Bi-annual compensation review Company recognition rewards 40 days annual leave per annum, including public holidays and our All Company holiday periods Maternity and paternity leave Team Member Assistance Program & Wellness Platform Opportunity to travel to new locations to meet colleagues, with Priority Pass for lounge access About Canonical Canonical is a pioneering tech firm at the forefront of the global move to open source. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. We are founder-led, profitable, and growing. Powered by worldwide distributed collaboration since our inception in 2004, we believe tech and business leadership can emerge anywhere. We have no central headquarters. Most of us work from home, but we are exceptionally disciplined about this. We have very high expectations of all colleagues, and are champions of excellence. Working here is a step into the future and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical is an equal opportunity employer We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration .

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. As Senior Staff Product Manager, Device Security, you’ll define the strategy and roadmap for the device security capabilities that help organizations understand, control, and govern access across their environments. You’ll work at the intersection of device health, identity, access management, and Artificial Intelligence (AI), helping customers reduce security risk while building a more unified experience across people, machines, and AI agents. You’ll partner with Engineering, Design, and Go To Market (GTM) teams to turn complex security challenges into products that are clear, useful, and measurable. Reporting to the Director, Product Management – Device Security, this is a remote role open to candidates in the United States or Canada. How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is a remote opportunity within Canada and the US. What we're looking for: Required qualifications • 8+ years of Product Management experience, including ownership of security, Identity and Access Management (IAM), endpoint, or access-control products. • A track record of defining and delivering roadmaps for complex, cross-functional initiatives in a Business-to-Business (B2B) Software as a Service (SaaS) environment. • Experience contributing to product vision and strategy across multiple engineering teams or product areas. • Strong written communication skills, with experience creating PRDs, PR/FAQs, and other artifacts that align teams and support decision-making. • Experience defining Objectives and Key Results (OKRs), success metrics, and measurement frameworks connected to business outcomes. • The ability to communicate complex security and product concepts clearly with technical and non-technical audiences, including senior customer stakeholders. • A customer-centered approach to prioritization that combines qualitative insight with quantitative data. Preferred qualifications • Experience with endpoint security, device management, zero-trust, least-privilege architectures, or related security technologies. • Familiarity with Mobile Device Management (MDM) or Endpoint Detection and Response (EDR) tools. • Experience working with enterprise administration consoles and IT buyer or administrator personas. • Experience taking AI or machine-learning products from concept to initial launch. • Experience prototyping with AI-enabled developer tools and curiosity about how AI agents operate. • Familiarity with device compliance frameworks, endpoint telemetry platforms, or related security systems. What you can expect: Own and evolve the Device Security product roadmap, partnering with engineering leadership to define priorities and deliver key capabilities. • Shape the role of Device Security within 1Password Unified Access and contribute to cross-company product strategy. • Lead weekly, monthly, and quarterly prioritization, balancing near-term delivery with an 18–24 month product vision. • Represent the customer perspective through discovery, feedback loops, recorded and live demos, and structured product artifacts such as Product Requirements Documents (PRDs) and Product Requirements/FAQs (PR/FAQs). • Collaborate with Product Managers (PMs) across adjacent product areas, as well as Engineering, Design, Sales, Marketing, and Product Marketing. • Establish success metrics that connect customer outcomes and Annual Recurring Revenue (ARR) contribution to product progress. • Engage directly with enterprise customers, including Chief Information Security Officers (CISOs), Vice Presidents of Security, and Information Technology (IT) leaders. • Prototype proof-of-value solutions using AI-enabled developer tools to explore and communicate product ideas. USA-based roles only: The annual base salary for this role is between $203,000 USD and $294,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $178,000 CAD and $258,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. Our culture At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. How we work with AI We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password. This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing 👶 Maternity and parental leave top-up programs 🩺 Competitive health benefits 🏝 Generous PTO policy Growth and future 📈 RSU program for most employees 💸 Retirement matching program 🔑 Free 1Password account Community 🤝 Paid volunteer days 🏆 Peer-to-peer recognition through Bonusly 🌎 Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting. You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Location: England; United States Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ The Secure Build team builds and operates the infrastructure behind Docker's container builds. The team owns Docker Build Cloud and Auto Builds while developing the next generation of trusted build and CI capabilities. Software is being changed faster than ever, but CI remains a bottleneck and a major trust boundary. Developers and software agents need to run build and test work quickly without exposing secrets, losing local-to-cloud parity or accepting an unverifiable result. Our direction is to make Docker the trusted place CI runs and turn that constraint into an accelerator. The technical work spans Go services, container and build technology, cloud infrastructure, isolated execution and software supply-chain security. It also requires disciplined operation of the production systems customers rely on today. Docker Build Cloud and Auto Builds will need targeted reliability and operational improvements while useful capabilities evolve towards a coherent Secure Build platform. As a Senior Software Engineer, you will turn these problems into practical product and technical outcomes. You will own substantial work from discovery and design through production, make sound security and reliability trade-offs, and stay close to the experience of developers and the agents they delegate work to. We make extensive use of AI-assisted engineering tools. We expect engineers to use them thoughtfully, validate their output and remain accountable for the quality and security of what ships. SUCCESS IN THIS ROLE LOOKS LIKE You will succeed by becoming an end-to-end owner for secure, reliable build infrastructure. Within your first year, you should have delivered a material secure-build or CI capability, reduced operational risk in Docker Build Cloud or Auto Builds, and become a trusted partner to the teams and customers that consume the platform. RESPONSIBILITIES - Turn developer, agent and security problems into clear requirements, staged technical decisions and measurable outcomes. - Design, build and operate Go services and APIs that power Docker's build and secure-CI infrastructure. - Develop isolation, identity, policy, provenance, attestation and signing capabilities for trusted build and test jobs. - Work with container, OCI, BuildKit, cloud and isolated-execution technologies to deliver secure and reproducible workflows. - Own features from technical design through rollout, observability, incident response and ongoing maintenance. - Keep Docker Build Cloud and Auto Builds reliable, make targeted improvements that reduce operational load, and help their capabilities evolve towards the wider Secure Build direction. - Make practical security trade-offs and use threat modelling to guide designs without blocking delivery. - Design for a clear developer experience, including workflows initiated or consumed by software agents. - Partner with Product, Security, Developer Experience, Registry and other platform teams on end-to-end customer workflows. - Participate in the team's paid on-call rotation and drive improvements from incidents and recurring operational work. - Communicate decisions, risks and progress clearly in a remote, async-first environment. QUALIFICATIONS REQUIRED - 6+ years of software engineering experience, with demonstrated technical leadership on production systems at scale. - Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience - Strong backend engineering experience building and operating distributed systems in production. - Production experience with Go and the ability to write, test, review and debug maintainable Go services. - Experience with containers and build or CI systems, such as OCI, BuildKit, Buildx, GitHub Actions or comparable platforms. - Experience with cloud-native infrastructure and a major cloud platform. - A strong operational mindset covering observability, reliability, incident response and on-call ownership. - Evidence of taking a feature or service from an ambiguous problem through production operation and measurable results. - Working knowledge of security boundaries, identity, secrets and common software supply-chain risks. - A strong product mindset and care for developer workflows, including experiences used by software agents. - Clear written and spoken communication suited to a remote, async-first company. HELPFUL, BUT NOT REQUIRED - Experience with Kubernetes. - Experience with SLSA, in-toto, SBOM, VEX, Sigstore, cosign, provenance or artefact signing. - Experience with sandboxing, microVMs, untrusted workload execution or multi-tenant infrastructure. - Experience building hosted CI runners, remote builders or developer-platform infrastructure. - Experience with agentic development workflows or building systems used programmatically by software agents. - Experience evolving a legacy production system while delivering new capabilities. WHAT TO EXPECT FIRST 30 DAYS - Build context on Docker Build Cloud, Auto Builds and the Secure Build product and technical direction. - Pair with the Secure Build team on core services, deployments and operational practices. - Ship a useful production change and take part in an operational review or incident-learning session. - Understand the secure-CI threat model and build relationships with DHI, Registry and Developer Experience. FIRST 90 DAYS - Own a secure-build feature or reliability improvement from problem definition through production. - Contribute materially to the secure-CI architecture, including isolation, identity, policy or signed evidence. - Deliver an observable improvement to the reliability or operability of an existing build service. - Demonstrate strong product judgement across developer and agent workflows. ONE YEAR OUTLOOK (FIRST YEAR) - Be a trusted senior technical owner on the Secure Build team. - Deliver a material secure-CI or trusted-build capability used by customers or internal product teams. - Improve the reliability and maintainability of Docker Build Cloud and Auto Builds while helping their useful capabilities converge with the wider platform. - Contribute to the team's architecture for isolated execution, brokered access and verifiable build outcomes. - Help establish strong product, design, review and operational practices as the team grows. Docker considers visa sponsorship on a case-by-case basis based on business needs.   Compensation & Equity EU: €94,040 – €155,650+ equity United States: $160,900 – $260,700 + equity ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Location: USA (Remote); Canada (Remote) Workplace: Remote Mysten Labs’ mission is to advance the internet through step-function improvements in what technology makes possible. We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value. Our work spans on-chain finance and the emerging agent economy. Through Sui, Move, and our broader technology stack, we’re building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact. The Role: We are hiring a Staff Security Engineer to act as the primary security partner for the Walrus team, providing deep architectural guidance and embedding security practices throughout the development lifecycle, starting from the design phase. What You'll Do: - Lead security assessments for new Walrus features while also contributing to security initiatives across the broader Mysten ecosystem, identifying systemic risks and providing actionable remediation plans for complex architectural challenges. - Drive a "security-by-design" culture, ensuring that security considerations are front-and-center before code is written, within Walrus and the wider Mysten organization. - Leverage AI-driven tools and advanced automation to identify and remediate low-hanging fruit, allowing the team to focus on high-impact, complex security research. - Maintain a generalist security perspective, providing strategic oversight on broader infrastructure and product security issues as they impact Walrus and beyond. - Collaborate with engineering leadership to prioritize security roadmap items, balancing feature velocity with the security posture of the platform. - Mentor senior and junior engineers, setting technical direction for security standards and establishing best practices across the engineering organization. What You'll Have: Minimum Qualifications - Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or equivalent experience. - 8+ years of industry experience in security engineering, with a proven track record of operating at a Staff (E6) level or equivalent. - Extensive experience as a security generalist, capable of navigating infrastructure, application, and cryptographic security domains. - Strong proficiency in building, deploying, and managing automated security tooling; demonstrated history of using AI/ML or advanced static/dynamic analysis to improve security outcomes at scale. - Deep expertise in collaborating with engineering teams during the design phase to proactively identify and mitigate high-risk design flaws. - Excellent communication skills, with the ability to influence technical direction and lead cross-functional security initiatives. What You'll Have Preferred Qualifications - Technical understanding of decentralized storage, distributed systems, or the Web3 stack (prior experience is a plus, not a requirement). - Experience leading security-focused transformations or implementing security-by-design frameworks in high-growth engineering environments. - Ability to balance tactical, hands-on security work with strategic long-term planning and leadership. Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information. Regarding the recent rash of technology job scams: Be aware that emails from genuine Mysten Labs group recruiters will always come from the @mystenlabs.com http://mystenlabs.com domain or related subdomains (e.g., mystenlabs.com/careers http://mystenlabs.com/careers). Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers http://www.mystenlabs.com/careers. To support an efficient and fair hiring process, we may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers. Our team is remote first and we are hiring across the world. Here at Mysten Labs, you’ll be joining a world-class team with tremendous growth potential as we bring the next billion users to web3. We raised a $300M Series B round from top Silicon Valley led venture funds like Jump Crypto, Andreessen Horowitz (a16z), Binance Labs, Redpoint, Lightspeed, Coinbase Ventures, Electric Capital, Standard Crypto, NFX, Slow Ventures, Scribble Ventures, Samsung Next, Lux Capital, among other investment firms and strategic partners. Come join us and build the future of web3!

Location: London 500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating. Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down. With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better. The job We are seeking a HIPAA Security Engineer to join our team in London, UK . While this posting is open to candidates currently based in the United States, this position requires full-time relocation to London . We offer comprehensive visa sponsorship and a full relocation support package to ensure a smooth transition for the selected candidate. As a key member of Flo’s Security Architecture team, you will lead the design and operation of our US Healthcare security controls. You'll work directly with Product and Engineering teams to translate HIPAA and SOC 2 requirements into technical security controls across Flo's AWS multi-account environment - including EKS, Lambda, RDS, S3, VPC networking, IAM, and KMS. You'll own the roadmap for HIPAA compliance and SOC 2 Type II certification, working closely with external auditors and professional services partners, and partnering with Engineering and Legal to build a secure, compliant platform for millions of users. Your Experience Must have: 7+ years in security, compliance, or risk management (3+ in a leadership capacity), with a Bachelor's degree in a related field or equivalent experience. Deep expertise in SOC 2 and HIPAA frameworks within the AWS environment. Familiarity with PHI handling, GRC and compliance automation platforms, and exposure to enterprise architecture frameworks such as TOGAF. Strong ability to manage multiple concurrent audit and certification workstreams. Excellent written and verbal communication, with the ability to translate complex compliance requirements into clear actions for engineering and business teams. Nice to have: CISA, CISM, or CISSP certifications Experience with NIST 800-53, Cloud Security Alliance (CSA), and Center for Internet Security (CIS) frameworks Experience in healthcare or another regulated industry; HITRUST experience a plus Experience building compliance roadmaps in early-stage startups Exposure to containerization (Docker/Kubernetes), serverless, and big data platforms Exposure to DevSecOps and sprint-based Agile development Vendor management experience What you'll be doing You'll be responsible for: Compliance Leadership: Lead annual SOC 2 and HIPAA certifications, managing interfaces with external auditors and professional services. Technical Control Design: Partner with Engineering to harden AWS workloads (EKS, EC2, data pipelines, and more) to meet HIPAA and SOC 2 controls; perform technical security design reviews and architectural risk assessments for services handling PHI. Policy & Risk: Define and maintain security policies and standards; embed risk assessment activities within engineering processes, and evolve Flo's security risk management framework. Vendor Risk Management: Support vendor risk activities including contract reviews and security posture assessments. Operational Excellence: Partner with control owners to automate evidence gathering and ensure controls reduce friction rather than creating it. Stakeholder Management: Serve as the primary Security POC for US regulators and partners; support the wider Security team with ISO 27001/27701 alignment; report risk status to security leadership. Tooling: Manage and integrate GRC and compliance automation platforms to streamline monitoring and reporting. #LI-AJ1 #LI-Hybrid How we work We’re a mission-led, product-driven team. We move fast, stay focused and take ownership – from brief to build to impact. Debate is encouraged. Decisions are shared. We care about craft, ship with purpose, and always raise the bar. You’ll be working with people who take their work seriously, not themselves. It takes commitment, resilience, and the drive to keep going when things get tough. Because better health outcomes are worth it. What you'll get We support impact with meaningful reward. Here’s what that looks like: Competitive salary and annual reviews Opportunity to participate in Flo’s performance incentive scheme Paid holiday, sick leave, and female health leave Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents Accelerated professional growth through world-changing work and learning support In-person collaboration and work in a hybrid model, with 3 days per week spent in the office 5-week fully paid sabbatical at 5-year Floversary Flo Premium for friends & family, plus more health, pension and wellbeing perks Diversity, equity and inclusion Our strength is in our differences. At Flo, hiring is based on merit, skill and what you bring to the role – nothing else. We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities. Read our privacy notice for job applicants .

Location: London 500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating. Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down. With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better. The job About the role You’ll help Flo build a trusted, secure, audit-ready platform for the millions of people who use our women’s health app. You’ll support our SOC 2 Type II and ISO 27001 programs and help implement HIPAA safeguards, all within Flo’s integrated Information Security and Privacy Management System (ISPMS). This is a hands-on role. It needs strong applied security architecture skills, especially secure design reviews and technical control validation across AWS (EKS, Lambda, RDS, S3, VPC, IAM, KMS). You’ll work with our professional services partners, auditors, the Security team, and the Privacy, Product and Platform Engineering teams. Together you’ll design controls that reduce friction, so the business can move fast and stay secure. What you’ll do Support SOC 2 and ISO 27001 certifications and HIPAA safeguard implementation, and act as a point of contact for external auditors. Define and maintain security policies, standards and procedures. Help control owners put controls into practice and automate evidence gathering for audit readiness. Run technical design reviews and architectural risk assessments for AWS services, including data flows that handle PHI. Work with Engineering to harden AWS workloads (EKS, EC2, data pipelines) against industry best practices. Improve Flo’s security risk management framework, and track and report risks to leadership. Contribute to vendor risk management, including contract reviews and security assessments. Roll out security training and awareness campaigns. What you’ll bring 7+ years in security architecture, compliance or risk management. A degree in a related field is a plus. Hands-on experience with ISO 27001 and/or SOC 2 in a cloud-based SaaS environment. Familiarity with security controls for sensitive data. Experience with GRC and compliance automation platforms. The ability to manage several audit workstreams at once. Excellent communication skills, and the ability to turn compliance requirements into clear actions for engineering and business teams. Nice to have Working knowledge of the HIPAA Security Rule and PHI handling (highly valued). CISA, CISM or CISSP certification. Experience with NIST 800-53, CSA, CIS or HITRUST. A background in healthcare or another regulated industry. Experience building compliance roadmaps at a startup. Exposure to Kubernetes/Docker, serverless, big data platforms or DevSecOps. Experience with Agile delivery and vendor management. Annual Salary Range (ranges may vary based on skills and experience) £100,000 — £130,000 GBP How we work We’re a mission-led, product-driven team. We move fast, stay focused and take ownership – from brief to build to impact. Debate is encouraged. Decisions are shared. We care about craft, ship with purpose, and always raise the bar. You’ll be working with people who take their work seriously, not themselves. It takes commitment, resilience, and the drive to keep going when things get tough. Because better health outcomes are worth it. What you'll get We support impact with meaningful reward. Here’s what that looks like: Competitive salary and annual reviews Opportunity to participate in Flo’s performance incentive scheme Paid holiday, sick leave, and female health leave Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents Accelerated professional growth through world-changing work and learning support In-person collaboration and work in a hybrid model, with 3 days per week spent in the office 5-week fully paid sabbatical at 5-year Floversary Flo Premium for friends & family, plus more health, pension and wellbeing perks Diversity, equity and inclusion Our strength is in our differences. At Flo, hiring is based on merit, skill and what you bring to the role – nothing else. We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities. Read our privacy notice for job applicants .

Location: Warsaw, Poland; Prague, Czechia; Sofia, Bulgaria; Bucharest, Romania; Madrid, Spain; Tbilisi, Georgia CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful. Check out our website for more information https://cloudlinux.com/ Imunify360 Security Suite is a product of CloudLinux Inc., the maker of the #1 OS in security and stability for hosting providers. Imunify is an innovative security solution designed specifically for shared and VPS/Dedicated servers. The automated, easy-to-use solution with the six-layer approach to security delivers comprehensive and complete attack prevention. The mission We protect web hosting providers and the sites running on their infrastructure through a defense-in-depth stack: web-server-layer WAF, runtime application self-protection for PHP, deep application integrations (WordPress plugins and similar), a malware scanner with cleanup capability, and network-layer firewalls and IP reputation. The pieces talk to each other, and the threat intelligence they generate at scale powers detection across the stack. Node.js is the segment of the hosting market growing fastest, and the next layer we want to build for it is runtime protection inside the Node.js process itself. Most Node.js workloads on managed hosting today are AI-generated web apps deployed by non-technical owners who can't, won't, and shouldn't be expected to patch their own code or audit their own dependencies. We're going to defend those apps anyway — at runtime, without their cooperation, without breaking them. You'll build that runtime protection layer end-to-end. What you'll own The product. A brand-new product line, yours to define — what we intercept, what we don't, what the customer-visible surface looks like. The technical approach. Instrumentation strategy, deployment shape, programming language — all open. You'll consult with our architects but the direction is yours. Implementation, end to end. You'll have the full tooling stack we provide — LLM subscriptions, modern dev infrastructure, the works. Use what makes you fast. Methodology. How you build conviction in your detection logic — your call. Cross-layer signal. Our existing stack produces threat intelligence at unmatched scale: tens of millions of monitored sites, petabyte-scale malware sample storage, real-time domain and URL reputation, IP-level attack feeds. These are available for you to plug into. Use what helps. How we'll measure success The product is held to four numbers: runtime overhead, false positives, false negatives, and customer-escalation volume. They reflect what hosting providers and their customers care about. Hit them well and the product runs inside a meaningful slice of the modern Node.js web. What we're looking for An experienced researcher or engineer who can build and iterate on a brand-new product, driving both the research and the development. The hard part of this work is knowing what's malicious, what's vulnerable, and what's just an unusual but legitimate pattern — and being right about it across the long tail of frameworks, libraries, and customer code we'll encounter in production. Requirements Must have: Proven experience building and shipping a new product, security solution, major feature, or technical system from scratch. Strong evidence of end-to-end technical ownership, from initial investigation and architecture through implementation, release, and production iteration. Strong web application security knowledge and current knowledge of practical exploitation. A working sense of how detection rules behave at scale — what catches attackers without flagging the long tail of legitimate code. Ability to start as the PM, architect, lead engineer, and QA for this product. You ask for resources or help when you need them; you don't wait to be told what to do. Comfort directing AI coding agents to high-quality output. Nice to have: Prior work on runtime-protection products, application firewalls, or instrumentation tooling. Background in malware analysis or incident response. Familiarity with managed-hosting environments. Public security research, vulnerability disclosures, or detection rulesets you've authored. Familiarity with the Node.js runtime and the JavaScript ecosystem. What it's not Not a scope-and-handoff role — you drive the work and own the outcome. Not a "platform team will productize this later" role — you ship to real customer fleets and watch the telemetry quickly. Not a spec-and-review role — you are hands-on every day. Why this matters Most managed-hosting customers are not developers. They cannot patch their apps. They cannot audit their dependencies. They will keep deploying vulnerable code from AI assistants because that's how modern web apps get built now. The textbook advice — "secure your code, audit your dependencies" — does not apply to them. If we don't intercept exploits at runtime, nobody will. The numbers you hit on detection, performance, and false positives will materially affect how much of the modern web stays online when the next exploit class drops. Benefits What's in it for you? A focus on professional development. Interesting and challenging projects. Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide. Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves. Compensation for private medical insurance. Co-working and gym/sports reimbursement. Budget for education. The opportunity to receive a reward for the most innovative idea that the company can patent. By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE: Millions of people use Notion every day, and we’re growing quickly. The Infrastructure Security team’s mission is to build a secure-by-default foundation across Notion’s technical stacks—architecting systems that make the secure path the easy path. As an IC4 on this team, you’ll own meaningful infrastructure security problems end-to-end: from identifying risk, to designing pragmatic controls, to shipping secure defaults that scale across engineering. This role can be based in either San Francisco or New York City. We work from our offices on Mondays, Tuesdays and Thursdays (our Anchor Days) because we do our best thinking and building together in person. We’re looking for someone who’s excited to work alongside the team during those days.   WHAT YOU'LL ACHIEVE: - Proactively enhance the security posture of our AWS accounts and cloud infrastructure. - Create secure frameworks for secrets management and authentication/authorization. - Design and deploy robust Identity and Access Management (IAM) solutions. - Provide guidance and education on security and privacy best practices to cross-functional partners. - Participate in (and help drive) mitigation strategies during security-related incident response.   SKILLS YOU'LL NEED TO BRING: - Security architecture and expertise: you’ve built and maintained systems to secure cloud architectures, ranging from secrets management to Identity and Access Management solutions. - Backend/infrastructure development: you’ve written and shipped production-grade code, and can contribute to the codebase and architecture to raise the bar on secure systems design. - Working in production: you can debug systems in production and continuously improve components with minimal disruption. - Pragmatic, risk-based prioritization: you model threats, balance trade-offs, and focus security investments where they drive the most business impact. - Empathetic communication: you communicate nuanced ideas clearly in writing and in real time; in disagreements, you engage thoughtfully and look for the right compromise.   NICE TO HAVES: - AWS security best practices, zero trust architectures, and/or deep IAM expertise. - Data security or privacy engineering experience. - Experience applying AI tooling to defensive security workflows. - Participation in security communities (local or regional groups, conferences).   Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $230,000 - $280,000 per year.   By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74 and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: United Kingdom What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Security Operations Center Location: Remote UK Compensation Range: £62,000 to £70,500 base plus bonus and equity What You’ll Do: Huntress is looking for a Security Operations Center Analyst to add to our growing team. In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyber-attacks and will have daily opportunities to progress your analyst skillset and accelerate your career growth. The Huntress Security Operations Center is an elite team of individuals who wake up every day to combat threat actors. You will have daily opportunities to progress your analysis skills while being at the forefront of what’s happening in the wild. If you’re looking to accelerate your career and skills, this is the team for you! Responsibilities: Triage, investigate, and respond to alerts from the Huntress platform Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks where possible and provide remediations needed to remove the threat Perform tactical malware analysis as part of investigating and triaging alerts Investigate suspicious Microsoft M365 activity and provide remediations Assist in escalations from the Product Support team for threat-related and SOC-relevant questions Contribute to detection engineering creation and tuning efforts Contribute to projects focused on driving better outcomes for our analysts and partners Contribute to our collaboratively mentored team (we're all here to make each other better!) What You Bring To The Team: 2+ years experience in a SOC or Digital Forensics (DFIR) role Demonstrated experience with Windows, Linux, and MacOS as an attack surface Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs) Demonstrated experience with static and dynamic malware analysis concepts Working knowledge of Windows Administration or Enterprise Domain Administration Active Directory, Group Policy, Domain Trusts, etc. Working knowledge of core networking concepts Common ports/protocols, NAT, Public/Private IPs, VLANs, etc. Working knowledge of web technologies and concepts Web servers/applications, OWASP top 10, etc. Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes A strong sense of curiosity and a genuine excitement for learning Preferred Qualifications: Previous experience in an MSP/MSSP/MDR role Linux and MacOS investigative experience Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby) Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc. Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc. Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc. Familiarity with MSP tools such as RMMs What We Offer: 100% remote work environment - since our founding in 2015 New starter home office set-up allowance (€480) Generous personal leave entitlements Digital monthly reimbursement (€111) Travel to the US 1-2 times/year for various company events Pension Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Location: Ireland What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Security Operations Center Location: Remote Ireland Compensation Range: €70,000 to €90,000 base plus bonus and equity What You’ll Do: Huntress is looking for a Security Operations Center Analyst to add to our growing team. In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyber-attacks and will have daily opportunities to progress your analyst skillset and accelerate your career growth. The Huntress Security Operations Center is an elite team of individuals who wake up every day to combat threat actors. You will have daily opportunities to progress your analysis skills while being at the forefront of what’s happening in the wild. If you’re looking to accelerate your career and skills, this is the team for you! Responsibilities: Triage, investigate, and respond to alerts from the Huntress platform Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks where possible and provide remediations needed to remove the threat Perform tactical malware analysis as part of investigating and triaging alerts Investigate suspicious Microsoft M365 activity and provide remediations Assist in escalations from the Product Support team for threat-related and SOC-relevant questions Contribute to detection engineering creation and tuning efforts Contribute to projects focused on driving better outcomes for our analysts and partners Contribute to our collaboratively mentored team (we're all here to make each other better!) What You Bring To The Team: 2+ years experience in a SOC or Digital Forensics (DFIR) role Demonstrated experience with Windows, Linux, and MacOS as an attack surface Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs) Demonstrated experience with static and dynamic malware analysis concepts Working knowledge of Windows Administration or Enterprise Domain Administration Active Directory, Group Policy, Domain Trusts, etc. Working knowledge of core networking concepts Common ports/protocols, NAT, Public/Private IPs, VLANs, etc. Working knowledge of web technologies and concepts Web servers/applications, OWASP top 10, etc. Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes A strong sense of curiosity and a genuine excitement for learning Preferred Qualifications: Previous experience in an MSP/MSSP/MDR role Linux and MacOS investigative experience Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby) Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc. Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc. Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc. Familiarity with MSP tools such as RMMs What We Offer: 100% remote work environment - since our founding in 2015 New starter home office set up reimbursement (£398) Generous personal leave entitlements Digital monthly reimbursement (£92) Travel to the US 1-2 times/year for various company events Pension Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Location: Bucharest, Romania Workplace: hybrid This role requires someone who is comfortable operating in a complex and evolving landscape. The environment includes a significant legacy footprint, multiple technology generations, and a diverse ecosystem of internal and external stakeholders. You will need to balance strategic thinking with pragmatic execution, helping modernize security while supporting business continuity. Success in this role will depend not only on strong information security expertise, but also on the ability to influence, build trust, and navigate stakeholders with different priorities and varying levels of security maturity. You'll play a key role in rebuilding confidence by delivering practical, incremental improvements while contributing to the long-term security transformation of the business. This is a highly visible opportunity for someone who understands both the technical threat landscape and the operational realities of retail, including seasonal peaks, POS infrastructure, and third-party vendor ecosystems, and who thrives in driving meaningful change within a complex enterprise environment. Key Responsibilities Act as the primary security advisor to Retail business unit leadership, aligning security priorities with merchandising, store operations, and supply chain roadmaps Identify, assess, and communicate security risks in business terms, translating technical findings into revenue, brand, and operational impact for non-technical executives, IT and business leaders Own security risk oversight for business projects Evaluate security risk for seasonal and peak-volume events, including surge capacity and incident readiness Partner with business, IT, procurement and legal on third-party and vendor risk assessments for retail suppliers, payment processors, and SaaS platforms Advise on secure design for new retail technology initiatives and enterprise infrastructure changes Track and report the business unit's risk posture, control gaps, and remediation progress to both business leadership and the CISO Lead incident response coordination for security events affecting stores, e-commerce, or customer data, ensuring timely and clear communication to stakeholders Deliver security awareness training tailored to store operations staff, corporate retail teams, and seasonal workers Support budget planning and prioritization of security investments based on retail-specific risk exposure Required Qualifications Bachelor's degree in Information Security, Computer Science, or related field, or equivalent practical experience 5–6 years of experience in information security, IT risk, or security risk advisory roles, including experience supporting a business unit or line of business directly Solid understanding of retail technology environments — POS systems, supply chain systems, and third-party integrations Strong grasp of security frameworks and risk methodologies (NIST CSF, ISO 27001, CIS Controls) Excellent communication and stakeholder management skills, with a track record of influencing business decisions without direct authority Experience conducting or overseeing third-party/vendor risk assessments Experience in transformation projects at enterprise level Fluent in French and English Preferred Qualifications Relevant certification such as CISSP, CISM, or CRISC Prior experience in a BISO, security risk advisor, or embedded security liaison role Experience supporting security during high-volume seasonal events Exposure to GRC tooling and security metrics/reporting dashboards Key Competencies Business acumen paired with deep security expertise Comfortable operating in ambiguity and fast-paced retail cycles Strong influence and relationship-building skills across all levels of the organization Risk-based, pragmatic decision-making that balances security with business velocity Sound judgment under pressure, particularly during incidents or peak retail periods

Location: United States, Remote Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Reporting to the Director of Global Vulnerability Management, you will serve as a Senior Security Research Engineer and technical lead within SIE’s Global Vulnerability Management team. You will lead complex work that advances our Threat Exposure Management capability and supports our transition to a Continuous Threat Exposure Management operating model, while remaining directly engaged in vulnerability research, analysis, security validation, prioritization, and remediation support. You will partner across Information Security, engineering, technology, and business teams to improve how SIE discovers, prioritizes, validates, and mobilizes action on security risks. You will translate annual TEM goals into defined workstreams, delivery plans, success measures, and repeatable operating practices that improve visibility, decision-making, remediation outcomes, and program scale. Responsibilities Lead complex Global Vulnerability Management workstreams that advance SIE’s Threat Exposure Management capability and transition toward a Continuous Threat Exposure Management operating model across discovery, prioritization, validation, and mobilization. Translate annual TEM goals into defined delivery plans, milestones, success measures, dependencies, and repeatable operating practices. Monitor progress, identify barriers, and adjust execution to improve outcomes. Lead hands-on vulnerability research and technical analysis to confirm security conditions, eliminate false positives, characterize exploitability and business impact, and provide actionable remediation or mitigation guidance. Improve the discovery and assessment of vulnerabilities across SIE network, cloud, endpoint, application, container, and other technology environments. Develop risk-based prioritization using vulnerability and threat intelligence, exploitation evidence, asset and business context, control effectiveness, and remediation considerations. Lead security validation activities and develop proofs of concept when appropriate to distinguish material risk, evaluate defensive controls, and support informed decisions. Partner with Information Security teams and technology owners to mobilize remediation, clarify ownership, establish effective handoffs, resolve barriers, and measure progress through remediation, mitigation, or accepted disposition. Evolve GVM platforms, integrations, data, analytics, automation, and AI-enabled workflows to improve coverage, data quality, consistency, decision speed, and operational scale. Communicate vulnerability trends, material risks, remediation progress, and program outcomes to technical, operational, and leadership audiences through clear reports and recommendations. Mentor engineers and partner teams, contribute to technical standards and procedures, and improve the quality of vulnerability analysis, validation, documentation, and delivery. Maintain current knowledge of relevant vulnerabilities, exploitation techniques, threat activity, security technologies, and industry practices. Some travel may be required. Qualifications 8+ years of relevant experience in information security, information technology, systems engineering, or a related field, including substantial experience in vulnerability management, security research, or exposure management. Bachelor’s degree or equivalent in computer science, information security, or a related discipline. Experience leading complex technical workstreams across multiple teams, translating objectives into delivery plans, and achieving measurable outcomes without relying on direct reporting authority. Hands-on experience with vulnerability research, technical analysis, security validation, risk-based prioritization, and remediation or mitigation guidance. Experience assessing vulnerabilities across several technology domains, such as operating systems, networks, cloud services, applications, endpoints, containers, databases, or hybrid infrastructure. Experience with vulnerability discovery, assessment, validation, or exposure-management platforms and their supporting integrations. Knowledge of adversarial tactics, exploitation techniques, threat intelligence, and attack frameworks such as MITRE ATT&CK, with the ability to apply that information to vulnerability prioritization. Experience using scripting, programming, APIs, or automation to improve security analysis and operational workflows. Relevant technologies may include Python, SQL, Bash, PowerShell, JavaScript, or comparable languages. Experience analyzing and contextualizing security data to connect technical findings with asset, service, business, threat, control, and remediation information. Familiarity with software engineering practices such as version control, testing, code review, CI/CD, reusable components, and controlled production releases. Ability to communicate complex security conditions, priorities, tradeoffs, and recommendations clearly to technical, operational, and leadership audiences. Experience mentoring engineers or analysts and influencing technical practices across teams. Desired qualifications Experience helping evolve a traditional vulnerability-management function toward a TEM or CTEM operating model. Experience with continuous security validation, adversarial exposure validation, exploit research, or proof-of-concept development. Experience securing cloud, container, application, or build-pipeline environments and integrating security capabilities into engineering workflows. Experience with security-data and analytics platforms such as Snowflake, Domo, or comparable technologies. Experience applying automation, advanced analytics, or AI-enabled capabilities to vulnerability analysis, prioritization, validation, or remediation workflows. At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. This is a flexible role that can be remote, with varying pay ranges based on geographic location. For example, if you are based out of Seattle, the estimated base pay range for this role is listed below. $175,500 — $263,300 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.