Вакансии

Location: Remote; San Francisco; New York Workplace: Remote Patreon is a media and community platform where over 300,000 creators give their biggest fans access to exclusive work and experiences. We offer creators a variety of ways to engage with their fans and build a lasting business including: paid memberships, free memberships, community chats, live video, and selling to fans directly with one-time purchases. Ultimately our goal is simple: fund the creative class. And we're leaders in that space, with: - $10 billion+ generated by creators since Patreon's inception - 100 million+ free memberships for fans who may not be ready to pay just yet, and - 25 million+ paid memberships on Patreon today. We're continuing to invest heavily in building the best creator platform with the best team in the creator economy and are looking for a Security Engineer to support our mission. This role is Fully Remote (US only), or can be based in New York or San Francisco (where it is open to those who are able to be in-office 3 days per week on a hybrid work model.) About the Team Patreon’s security team works to protect Patreon creators and their fans. The team deals with all facets of Patreon’s security, including application security, infrastructure security, and internal/corporate security. We’re a small but effective team. We write code to solve security problems and work closely with our partners across the engineering organization. We also understand the importance of balancing security risks against business needs. We strive for honest and effective communication and focus on pragmatically reducing risk over checking boxes. The security team is part of Patreon’s Risk Engineering org, which also includes our Safety Engineering and Identity and Access teams. Collectively, the risk org tackles a range of problems including content moderation, internal tooling, identity verification, access control, and account security. About the Role In this role, you’ll be a member of our Security team. You’ll split your time between contributing to security projects and responding to security investigations, vulnerabilities, or questions. The work spans application security, infrastructure security, and internal/corporate security. It includes both proactive and reactive security work. You’ll be part of an on-call rotation and help respond to security incidents and investigations. You’ll write code – both to support security work and to improve the security of the Patreon platform. You’ll work closely with other members of the security team, the wider Risk engineering org, and cross functional partners in engineering, legal, and IT. Your work will help reduce known risks and will protect the security, privacy, and trust of Patreon creators and their fans. What you’ll need: - You have two or more years of experience reducing security risks in the application, infrastructure, or corporate security spaces. You can create a threat model and to explain why a given risk matters and what we might do to reduce it. - You have deeper knowledge (three or more years) in at least one security or security-adjacent domain (infrastructure security, application security, cloud security, corporate/IT security, cryptography, privacy, etc.) - You can develop software (Python, Rust, Golang, or a similar language). You have experience working in a modern software development environment (git, CI/CD, LLM coding tools, etc.) - You have experience using AI tools (LLMs, ML models, etc) to identify and address security issues (software vulnerabilities, detection and response, etc.) - You’re energized by fast iteration: shipping MVPs, testing hypotheses, and evolving products based on what creators and fans respond to. - You take pride in creating elegant solutions to messy, real-world problems and balancing pragmatic trade-offs between security risks and business needs. - You believe in Patreon’s mission: giving creators control over their work and building communities that feel good to be in. - Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or a related field, or the equivalent Bonus if you have: - Experience working on large scale Internet platforms that allow users to upload content. - Past contributions to large scale, production code bases. - Experience responding to security incidents, investigating incident impact, and building out incident mitigations. We hire talented and passionate people from different backgrounds because workplace diversity and inclusion is critical to our ability to serve creators worldwide. If you’re excited about a role but your past experience doesn’t match with every bullet point outlined above, we strongly encourage you to apply anyway. If you’re a creator at heart, are energized by our mission, and share our company values, we’d love to hear from you. About Patreon Patreon powers creators to do what they love and get paid by the people who love what they do. Our team is passionate about making this mission and our core values come to life every day in our work. Through this work, our Patronauts: - Put Creators First | They’re the reason we’re here. When creators win, we win. - Build with Craft | We sign our name to every deliverable, just like the creators we serve. - Make it Happen | We don’t quit. We learn and deliver. - Win Together | We grow as individuals. We win as a team. Patreon is proud to be an equal opportunity employer. We provide employment opportunities without regard to age, race, color, ancestry, national origin, religion, disability, sex, gender identity or expression, sexual orientation, veteran status, or any other protected class. If you need a reasonable accommodation during the interview process, please let us know via email at accommodations@patreon. Patreon offers a competitive benefits package including and not limited to salary, equity plans, healthcare, flexible time off, company holidays and recharge days, commuter benefits, lifestyle stipends, learning and development stipends, patronage, parental leave, and 401k plan with matching. Patreon operates under a hybrid work model, where employees based in office locations are expected to come into the office three days per week, excluding sick time and paid leave. The goal of this policy is to be intentional about the in-person time we spend together to strengthen the feeling of community at Patreon. Candidates hired into remote-eligible roles are not expected to meet the same requirements. At Patreon, we believe in fair and transparent pay. In compliance with New York and California pay transparency laws, we are sharing the expected salary range for this role. The posted salary range is dependent on the location and the level. This range may encompass multiple levels within the role’s job family. The final offer will be based on candidate’s experience, skills, competencies, and geographic location, aligning with the appropriate job level within Patreon’s leveling framework. For remote employees located outside CA and NY, salary may vary based on location and local market conditions. Patreon reserves the right to modify or update compensation and benefits at any time.

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters WHAT YOU'LL ACHIEVE - Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up. - Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. - Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful. - Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements. - Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes. - Help define and track metrics such as coverage, MTTD, and alert quality. - Join a shared on-call rotation for incident response. SKILLS YOU'LL NEED TO BRING - We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you. - 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role. - Have written or tuned detections that run in production, and care about signal quality and cutting noise. - Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly. - An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect. - Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs. - Have used SIEM, EDR, or SOAR tools in any size of environment. - Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end. NICE TO HAVE - Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry. - Experience running SIEM, EDR, or SOAR platforms at large scale. - Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections). - Experience applying LLMs or agent-style tooling to security workflows. - Experience securing AI-enabled systems or endpoint tooling. - Kubernetes or container detection experience. - Background in threat intelligence, malware analysis, or digital forensics. - Contributions to the security community through research, tooling, CTFs, or talks. - Experience at a high-growth startup or AI company. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $185,000 - $280,000 per year.   By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550 and and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528.   #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: Dublin, Ireland Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters WHAT YOU'LL ACHIEVE - Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with review and mentorship from senior teammates as you ramp up. - Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. - Build tooling and automation that speed up triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful. - Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response improvements. - Take part in investigations, incident response, and postmortems, and help turn what we learn into lasting fixes. - Help define and track metrics such as coverage, MTTD, and alert quality. - Join a shared on-call rotation for incident response. SKILLS YOU'LL NEED TO BRING - We're hiring across a range of experience levels. If you have some of these skills but not all, we'd still like to hear from you. - 3+ years of experience in detection engineering, security operations, incident response, threat hunting, or a closely related security or software engineering role. - Have written or tuned detections that run in production, and care about signal quality and cutting noise. - Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or Panther), or strong SQL or Python skills and the drive to learn one quickly. - An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use it to decide what to detect. - Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs. - Have used SIEM, EDR, or SOAR tools in any size of environment. - Write clearly in runbooks, design docs, and incident notes, and can own well-scoped projects end to end. NICE TO HAVE - Have led purple team, blue team, or adversary emulation exercises that improved detections or telemetry. - Experience running SIEM, EDR, or SOAR platforms at large scale. - Experience building or maintaining detection-as-code workflows (version control, CI, and tests for detections). - Experience applying LLMs or agent-style tooling to security workflows. - Experience securing AI-enabled systems or endpoint tooling. - Kubernetes or container detection experience. - Background in threat intelligence, malware analysis, or digital forensics. - Contributions to the security community through research, tooling, CTFs, or talks. - Experience at a high-growth startup or AI company. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role's scope and complexity, and the candidate's experience and expertise, and may vary from the range provided below. The estimated base salary range for this role is €75,000–€142,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Задачи: — Исследовать актуальные угрозы, тактики, техники и процедуры (TTP) APT, анализировать современные методы проведения кибератак; — Разрабатывать алгоритмы выявления угроз: создавать правила и сценарии детектирования; — Разрабатывать сценарии реагирования и рекомендации по обработке инцидентов информационной безопасности; — Участвовать в проектных и иных активностях в качестве эксперта ИБ; — Развивать продукты компании, повышая качество механизмов обнаружения угроз и реагирования на инциденты; — Автоматизировать процессы анализа и детектирования угроз, развивать собственную экспертизу и делиться знаниями внутри команды. Требования: — Знание современных тактик и техник атакующих, основных векторов атак, способов их обнаружения; — Знание принципов работы сетевых протоколов, операционных систем и веб-приложений; — Опыт использования или понимание принципов работы решений классов Threat Intelligence (TI); — Умение анализировать журналы регистрации событий различных информационных систем, СЗИ, ОС, сетевого оборудования, СУБД, приложений и т.п; — Опыт в расследовании инцидентов информационной безопасности; — Умение эмулировать действия APT в тестовой среде для проверки сценариев обнаружения; — Опыт разработки сложных правил корреляции и сценариев детектирования для SIEM; — Опыт администрирования Linux/Unix и Windows; — Опыт разработки скриптов на Bash, Python и PowerShell. Будет плюсом: — Наличие профессиональных сертификатов (OCSP, SANS, CISSP); — Опыт участия в CTF или в проведении Pentest; — Понимание жизненного цикла атак (Cyber Kill Chain, MITRE ATT&CK); — Опыт работы с Kubernetes, Docker, VMware; — Опыт работы в SOC; — Опыт публичных выступлений и подготовки технических материалов; — Высшее образование по направлению ИТ и/или ИБ. Условия: — Работа в гибридном формате в офисе класса «А» в двух шагах от ст. м. Римская/Площадь Ильича или удаленный формат работы на территории РФ; — Достойная оплата труда, соответствующая профессиональному уровню и компетенциям; — Статус аккредитованной ИТ-компании со всеми преимуществами; — ДМС со стоматологией и госпитализацией по всей России, страхование от несчастного случая, полис ВЗР для поездок за границу, ветеринарная поддержка; — 100% компенсацию больничного, +10 дополнительных дней в году на отгул по болезни; — Регулярный обмен обратной связью по системе полугодового Performance Review; — Возможности для обучения и профессионального развития: корпоративную библиотеку, менторство, внутренние митапы по обмену опытом, практику публичных выступлений, возможность участвовать в создании контента для профессиональных сообществ; — Программу корпоративных скидок и привилегий; — Развитую корпоративную культуру: открытую коммуникацию, онлайн и офлайн встречи, клубы по интересам, спортивные активности и поддержку инициатив сотрудников.

Location: Estonia - Remote Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work. Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you. Our vision: A world where everyone is free to focus on their most purposeful work, together. About the Role: Wrike relies on a dynamically changing set of integrated SaaS tools, and securing them requires dedicated, end-to-end ownership of their data security posture. Asking questions like what data is collected, why, how long it’s retained, and how it flows between systems. As Business Systems Security Analyst, you will own this space by establishing continuous data governance, SaaS integration governance, and identity & access management across our business systems. Helping Wrike stay proactive and prevention-focused rather than reactive. Your Impact: Own data governance across business systems: what’s collected, why, retention, and data flows between systems Govern SaaS integrations: inventory, risk assessment, and secure onboarding/offboarding of third-party tools Manage and review access provisioning and deprovisioning across integrated SaaS platforms, ensuring least-privilege principles are enforced throughout the identity lifecycle Oversee SSO configurations, OAuth scopes, and service account permissions across business-critical systems, identifying overprivileged accounts and stale access Monitor and help harden the security posture of business-critical SaaS platforms and their connected tools Conduct periodic access reviews and certifications for SaaS platforms, with a focus on privileged and third-party system accounts Conduct security reviews of integrations from a data flow perspective before they connect to business-critical systems, including evaluating IAM implications such as API keys, OAuth tokens, and service accounts Partner with system owners to remediate risks and embed security into business processes Focus on AI-driven integration workflows: MCP, A2A, and emerging agent-based protocols Your Qualifications: Experience securing SaaS business platforms and their integrations, including identity and access management across those environments Solid understanding of data governance principles: data classification, retention, and data flow mapping Technical hands-on skills: ability to independently investigate configurations, permissions, API connections, and logs across SaaS platforms Knowledge of integration best practices: secure API design, least-privilege service accounts, token/secret management, and integration lifecycle management Understanding of AI tooling and its security implications: how AI-powered tools access, process, and store business data Experience with third-party/vendor risk assessment and SaaS security posture management Ability to work cross-functionally with business system owners (Sales Ops, Marketing Ops, RevOps) Standout Qualities: Hands-on experience with SSPM tools or Salesforce security tooling Familiarity with OAuth/API integration security and supply-chain risk Experience with AI-driven data flows and integrations (e.g., MCP, A2A, agent-based workflows) Knowledge of Salesforce is a strong plus Team Dynamics: You will be joining Wrike's 15-member global Security team led by Maksim Pekuryn, Director of Security. You will report directly to Swen Groeneveld, Head of Security Operations, whose 8-person sub-team includes Security Engineers, Application Security, and SOC specialists. You'll also work closely with cross-functional partners in RevOps, Marketing, and Legal. Our Work Style: Tech stack: Salesforce, Marketo, Salesloft, OAuth integrations, connected apps, and related business SaaS tooling. Collaborative environment working closely with RevOps, Legal, and Marketing teams. Hybrid mode. Benefits & Perks: 28 calendar days of paid vacation Sick Leave Compensation (5 Paid Uncertified Sick Days) Parental Leave: 18 Weeks Maternity / 4 Week Paternity 2 Volunteer Days Health Insurance (Employees + Dependents) Life Insurance Plan Utility Allowance (30 EUR/month, subject to taxation) Fitness Plan (800 EUR/year) Full-remote & On-demand access to Co-working space What's Next? Recruiter Screen (30 mins) Department Interview / Technical Discussion (60 mins) Cultural Interview with Hiring Manager, CISO, and HRBP Your recruitment buddy will be Aleksandar Chernev , Senior Technical Recruiter. #LI-AC1 Who Is Wrike and Our Culture We’re a team of innovators and creators who solve the complex work problems of today and tomorrow. Hybrid work mode Wrike is our people, not a place. With 1,000+ employees collaborating across nearly every time zone, we support talent through 10 global hubs — Australia, Costa Rica, Cyprus, Czechia, Estonia, France, India, Ireland, Japan, and the United States — offering flexible ways of working that include remote work, hybrid environments, and co-working spaces across many locations. While flexibility looks different across teams and regions, employees located near certain hubs — particularly in Prague (CZ), Nicosia (CY), Bangalore (IN), and Rennes (FR) — are generally expected to collaborate in person around 2–3 days per week, balancing the flexibility of distributed work with opportunities for in-person collaboration and connection. Our persona 💡  Smart: We love what we do, and we’re great at it because this is our domain. Our combined knowledge in this space is unmatched. 💚  Dedicated: We get up every day focused on helping our customers win. We’re committed to helping our teammates win, too! 🤗  Approachable: We're friendly, easy to get along with, considerate, and helpful. Our culture and Values 🤩 Customer-Focused We care about our customers. We understand the customer journey, experience, and value derived from Wrike. Decision-making and action-taking are done with the customer in mind. 🤝 Collaborative We work as one and win together, each bringing unique strengths that contribute to diversity of thought for better outcomes. Leveraging our own work management platform, we foster an environment of creative collaboration and shared achievement. 🎨 Creative We strive to succeed through continuous innovation. It’s our pursuit of novel concepts that helped us create a market category. We continue to cultivate a workplace that fosters creative thinking as a means of transcending conventional boundaries and empowers us to break new ground to deliver extraordinary work management solutions. 💪 Committed We believe in ownership at all levels of the organization, by owning workflows from start to finish. Each member of our team is an integral part of this commitment, establishing work as a platform for personal growth and transformation, as well as collective success and growth. Check out our LinkedIn Life Page , Company culture page , Instagram , Wrike Engineering Team , Medium , Meetup.com , Youtube for a feel for what life is like at Wrike.

Location: Nicosia Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work. Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you. Our vision: A world where everyone is free to focus on their most purposeful work, together. About the Role: Wrike relies on a dynamically changing set of integrated SaaS tools, and securing them requires dedicated, end-to-end ownership of their data security posture. Asking questions like what data is collected, why, how long it’s retained, and how it flows between systems. As Business Systems Security Analyst, you will own this space by establishing continuous data governance, SaaS integration governance, and identity & access management across our business systems. Helping Wrike stay proactive and prevention-focused rather than reactive. Your Impact: Own data governance across business systems: what’s collected, why, retention, and data flows between systems Govern SaaS integrations: inventory, risk assessment, and secure onboarding/offboarding of third-party tools Manage and review access provisioning and deprovisioning across integrated SaaS platforms, ensuring least-privilege principles are enforced throughout the identity lifecycle Oversee SSO configurations, OAuth scopes, and service account permissions across business-critical systems, identifying overprivileged accounts and stale access Monitor and help harden the security posture of business-critical SaaS platforms and their connected tools Conduct periodic access reviews and certifications for SaaS platforms, with a focus on privileged and third-party system accounts Conduct security reviews of integrations from a data flow perspective before they connect to business-critical systems, including evaluating IAM implications such as API keys, OAuth tokens, and service accounts Partner with system owners to remediate risks and embed security into business processes Focus on AI-driven integration workflows: MCP, A2A, and emerging agent-based protocols Your Qualifications: Experience securing SaaS business platforms and their integrations, including identity and access management across those environments Solid understanding of data governance principles: data classification, retention, and data flow mapping Technical hands-on skills: ability to independently investigate configurations, permissions, API connections, and logs across SaaS platforms Knowledge of integration best practices: secure API design, least-privilege service accounts, token/secret management, and integration lifecycle management Understanding of AI tooling and its security implications: how AI-powered tools access, process, and store business data Experience with third-party/vendor risk assessment and SaaS security posture management Ability to work cross-functionally with business system owners (Sales Ops, Marketing Ops, RevOps) Standout Qualities: Hands-on experience with SSPM tools or Salesforce security tooling Familiarity with OAuth/API integration security and supply-chain risk Experience with AI-driven data flows and integrations (e.g., MCP, A2A, agent-based workflows) Knowledge of Salesforce is a strong plus Team Dynamics: You will be joining Wrike's 15-member global Security team led by Maksim Pekuryn, Director of Security. You will report directly to Swen Groeneveld, Head of Security Operations, whose 8-person sub-team includes Security Engineers, Application Security, and SOC specialists. You'll also work closely with cross-functional partners in RevOps, Marketing, and Legal. Our Work Style: Tech stack: Salesforce, Marketo, Salesloft, OAuth integrations, connected apps, and related business SaaS tooling. Collaborative environment working closely with RevOps, Legal, and Marketing teams. Hybrid mode. Benefits & Perks: 25 working days of paid vacation Sick Leave Compensation (5 Uncertified + 10 Certified Days) Parental Leave: Fully Paid Maternity / 4 Weeks Paid Paternity 2 Volunteer Days Medical Insurance (Employees + Dependents) Life Insurance (Employees) Provident Fund Hybrid Working Model School Allowance (Up to €600/month for school aged kids) Simcard w/ Unlimited Internet Access for active employees Office Lunch Allowance (via Wolt) on Wednesdays / Thursdays Work Permit, Blue Card & Naturalization Support What's Next? Recruiter Screen (30 mins) Department Interview / Technical Discussion (60 mins) Cultural Interview with Hiring Manager, CISO, and HRBP Your recruitment buddy will be Aleksandar Chernev , Senior Technical Recruiter. #LI-AC1 Who Is Wrike and Our Culture We’re a team of innovators and creators who solve the complex work problems of today and tomorrow. Hybrid work mode Wrike is our people, not a place. With 1,000+ employees collaborating across nearly every time zone, we support talent through 10 global hubs — Australia, Costa Rica, Cyprus, Czechia, Estonia, France, India, Ireland, Japan, and the United States — offering flexible ways of working that include remote work, hybrid environments, and co-working spaces across many locations. While flexibility looks different across teams and regions, employees located near certain hubs — particularly in Prague (CZ), Nicosia (CY), Bangalore (IN), and Rennes (FR) — are generally expected to collaborate in person around 2–3 days per week, balancing the flexibility of distributed work with opportunities for in-person collaboration and connection. Our persona 💡  Smart: We love what we do, and we’re great at it because this is our domain. Our combined knowledge in this space is unmatched. 💚  Dedicated: We get up every day focused on helping our customers win. We’re committed to helping our teammates win, too! 🤗  Approachable: We're friendly, easy to get along with, considerate, and helpful. Our culture and Values 🤩 Customer-Focused We care about our customers. We understand the customer journey, experience, and value derived from Wrike. Decision-making and action-taking are done with the customer in mind. 🤝 Collaborative We work as one and win together, each bringing unique strengths that contribute to diversity of thought for better outcomes. Leveraging our own work management platform, we foster an environment of creative collaboration and shared achievement. 🎨 Creative We strive to succeed through continuous innovation. It’s our pursuit of novel concepts that helped us create a market category. We continue to cultivate a workplace that fosters creative thinking as a means of transcending conventional boundaries and empowers us to break new ground to deliver extraordinary work management solutions. 💪 Committed We believe in ownership at all levels of the organization, by owning workflows from start to finish. Each member of our team is an integral part of this commitment, establishing work as a platform for personal growth and transformation, as well as collective success and growth. Check out our LinkedIn Life Page , Company culture page , Instagram , Wrike Engineering Team , Medium , Meetup.com , Youtube for a feel for what life is like at Wrike.

Задачи: — обеспечивать управление полным циклом разработки правил корреляции; — анализировать ложноположительные инциденты и добавлять исключения в SIEM; — выполнять роль клиентского аналитика; — продвигать развитие технологической платформы в части работы с SIEM системами и увеличивать эффективность процесса управления библиотекой корреляционных правил; — взаимодействовать с заказчиками по техническим вопросам; — проводить обучение и делиться опытом с другими аналитиками. Требования: — знание основных векторов атак на корпоративные сети и способы противодействия; — знание современных методов классификации тактик и техник атакующих (Mitre Attack, Kill Chain); — опыт работы с MaxPatrol SIEM или KUMA SIEM; — умение анализировать журналы регистрации событий в различных системах (ОС, СЗИ, сетевое оборудование, прикладное ПО, access логи и др); — умение разрабатывать логику детектирующих правил по обнаружению атак и аномалий. Условия: — собственная платформа MTS Ocean для получения ИТ-ресурсов, позволяющая сосредоточиться на фичах; — профессиональные гильдии инженеров для поддержки и развития; — внутренняя площадка TechTalks для обмена опытом и развития навыков самопрезентации; — участие во внешних IT конференциях (HighLoad++, DataFest, Mobius, Test Driven Conf, Joker, DevOps, Матемаркетинг, True Tech Arch); — полезные курсы и вебинары в корпоративном университете и электронная библиотека; — ДМС с первого месяца работы, включая стоматологию; — страхование от несчастных случаев с 1 месяца работы; — материальная помощь в сложных жизненных ситуациях; — отпуск 28 календарных дней (+3 дополнительных дня за ненормированный рабочий день); — прием врачей общей практики и массаж в офисе; — мобильная связь за счет компании и льготные тарифы для близких; — подписка на онлайн-кинотеатр KION, сервис МТС Музыка, книжный сервис Строки от МТС, безлимитные мессенджеры и соцсети.

Задачи: — Анализировать и расследовать оповещения для выявления, оценки и реагирования на потенциальные угрозы. — Сотрудничать с командой и командами безопасности клиентов для устранения инцидентов и укрепления защиты. — Проводить охоту за угрозами и анализ первопричин для выявления активности злоумышленников. — Вести полный цикл обработки оповещений от обнаружения до разрешения. — Постоянно искать способы улучшения методов обнаружения, защиты и обслуживания клиентов. — Участвовать в круглосуточном ротационном графике, так как атаки не прекращаются. Требования: — Честность, любознательность и ориентация на клиента. — Сильные письменные коммуникативные навыки с умением адаптировать стиль для разных аудиторий. — Базовое понимание TCP/IP, операционных систем и распространённых сетевых протоколов. — Опыт работы с Windows, macOS и Linux, включая командную строку. — Знание облачных приложений (O365, Okta) и облачной инфраструктуры (AWS, Azure, GCP). — Знакомство с инструментами обнаружения и реагирования, такими как SIEM, EDR, IDS/IPS. — Интерес к техникам злоумышленников, фреймворку MITRE ATT&CK и методам защиты. — Предпочтительно 1–2 года опыта в IT или безопасности, но важны страсть и потенциал. Условия: — Базовая зарплата от $85,000 до $90,000 в год + 20% бонус (выплачивается ежеквартально) и акции. — Прозрачная и справедливая система оплаты. — Неограниченный оплачиваемый отпуск, гибкий график работы, до 24 недель отпуска по уходу за ребёнком. — Отличные медицинские льготы. — Требуется разрешение на работу в США, спонсорство виз не предоставляется. — Компания обеспечивает равные возможности и поддержку для людей с ограниченными возможностями.

Location: Madrid, Spain Workplace: hybrid Are you ready to join our digital revolution journey?    At Aleph, we’re not just part of the digital advertising landscape—we’re shaping its future. Representing the world’s leading platforms, including TikTok, Amazon, Google, and nearly 55 others, we operate in 130+ markets across new and existing geographies.   Our mission is to empower advertisers and brands to unlock the full potential of these platforms' advertising capabilities. By fostering long-lasting partnerships, we create limitless opportunities for people and businesses to advertise effectively at both local and global levels.   With a presence spanning continents, Aleph offers you the chance to be part of a fast-growing, innovative team where your work makes a direct impact. If you’re ambitious, forward-thinking, and eager to thrive in a dynamic, global environment, Aleph is the perfect place to build your career. We are looking for an experienced and operationally sharp Security Operations & Incident Response Analyst (L3) to join Aleph's global IT Security team. Reporting to the Global CISO, you will be the first line of defence when incidents occur and the engine behind the team's threat detection and response capabilities. You will own the end-to-end incident response process, lead threat hunting and intelligence activities, and manage the vulnerability and identity governance programmes — ensuring Aleph is both able to detect threats quickly and respond to them effectively across a complex, globally distributed environment. What you'll do: Incident Response Own and coordinate the end-to-end incident response process : identification, triage, containment, eradication, recovery, and post-incident review (lessons learned). Serve as the primary point of contact for security incidents escalated from IT Operations, the Security Engineer, and external sources. Maintain and continuously improve incident response playbooks for the most relevant threat scenarios (ransomware, phishing, account compromise, data breach, insider threat, etc.). Manage the security incident log and register : track all incidents, document timelines and actions, and produce trend analysis and reporting for the CISO. Coordinate with external SOC or MDR providers where applicable: review daily reports, validate alert quality, and manage escalation workflows. Data Breach Management Lead data breach investigations : scope the breach, gather and preserve evidence, assess PII exposure, and coordinate response with Legal, Privacy, and HR. Produce breach investigation reports with findings, root cause, and recommendations. Threat Hunting & Intelligence Conduct proactive threat hunting across the environment: develop hypotheses based on threat intelligence, search for indicators of compromise (IoCs), and investigate anomalous behaviour. Manage the Threat Intelligence function : track relevant threat actors, TTPs (MITRE ATT&CK), and sector-specific threat campaigns; integrate intelligence into SIEM/XDR detection rules and hunting queries. Produce threat intelligence summaries and briefings for the CISO and relevant stakeholders. Vulnerability Management Own the vulnerability management programme : schedule and execute periodic vulnerability scans across infrastructure, endpoints, and cloud environments. Analyse scan results, prioritise findings by risk and exploitability, and coordinate remediation with IT Operations within agreed SLAs. Track remediation progress, produce vulnerability metrics, and report status to the CISO. Validate remediation effectiveness through re-scanning and spot-checks. Identity & Access Management (IAM) Manage periodic access reviews : coordinate with system owners and HR to review and certify user permissions across critical systems, ensuring least privilege is maintained. Oversee the Privileged Access Management (PAM) programme: define PAM policies, monitor privileged account usage, and review access rights for administrator-level accounts. Investigate and respond to identity-related anomalies and access policy violations. What we are looking for: 3–5 years in a SOC analyst, incident response, or security operations role, with at least 1–2 years at L3 level is a plus. Experience implementing or managing IAM and PAM solutions Experience working within international or multinational environments. Hands-on experience with incident response engagements (internal or consulting) is strongly valued. Relevant certifications: GCIH, GCFE, GCFA, CEH, CompTIA CySA+ , or equivalent. OSCP is a plus. Strong hands-on experience with SIEM platforms (alert triage, rule writing, query development) and EDR/XDR tools . Solid knowledge of the MITRE ATT&CK framework and its application to threat hunting and incident response. Experience conducting vulnerability scans using tools such as Tenable Nessus, Qualys, Rapid7, or similar. Familiarity with IAM and PAM concepts and platforms (e.g. CyberArk, BeyondTrust, Azure PIM, or equivalent). Experience with digital forensics and incident response (DFIR) methodologies: evidence collection, log analysis, and timeline reconstruction. Knowledge of threat intelligence platforms and feeds (e.g. MISP, VirusTotal, threat intel feeds). Understanding of ISO 27001 incident management controls, NIS2 incident reporting obligations, and PCI DSS requirement 12.10 . Calm and decisive under pressure. Strong investigative mindset with structured problem-solving approach, excellent documentation skills. Ability to communicate incident status and findings clearly to both technical teams and executive stakeholders. Collaborative and proactive, comfortable working asynchronously across time zones. English : full professional proficiency (C1/C2) — primary working language. Spanish : professional proficiency is a plus. In line with the EU Pay Transparency Directive, we are committed to fair and open compensation practices. For this role, the minimum gross annual base salary is EUR 48,000 EUR. In addition to base salary, this role includes a variable component, paid annually. The final offer will reflect your experience, skills, and the scope of the role.   #Aleph Why Join Us?   Aleph is a place of many cultures, perspectives, and talents. We support each other, creating an environment of giving and receiving. We value partnership and communication because we believe it takes a group of people to achieve great things. We are energized by our ever-changing industry, our curiosity keeps us learning and seeking out new opportunities.     We stay flexible and adaptable, and believe in moving with the speed of change. We encourage everyone to strive for more, providing our internal talent with growth opportunities and the ability to learn together.    #ALEPH

Location: Remote | North America or Europe Workplace: Remote ABOUT SQUADS Squads is a financial technology company building products and APIs for the stablecoin economy. We build on open infrastructure, global money, and internet capital markets to deliver better financial services to businesses, individuals, and developers. Our products span the company’s mission: Squads Multisig helps teams secure and manage assets on Solana; Altitude gives businesses a global account to run their financial operations; and Fuse brings stablecoins and tokenized assets to personal finance. More than 450 teams use Squads Multisig to secure over $10 billion in value. Our investors include Haun Ventures, Multicoin Capital, Electric Capital, Coinbase Ventures, Toly, Mert, and others. THE ROLE You’ll own identity and endpoint security across Squads, working closely with our Head of Security. That means making sure the right people have the right access, company devices meet a consistent security baseline, and new tools can be adopted with a clear understanding of their risks. This is a hands-on role. You’ll run the day-to-day systems, respond when something looks wrong, and build the access reviews, standards, and processes we’ll need as the company grows. We’re looking for someone who thinks like an attacker, makes sound calls under pressure, and can help the team move quickly while keeping the bar high. WHAT YOU’LL OWN IDENTITY & ACCESS - Administer our identity provider and SSO, enforce MFA and phishing-resistant authentication, and improve how access is granted and removed - Build periodic access reviews and apply least privilege across critical systems - Manage access provisioning and offboarding for employees and contractors ENDPOINTS & IT OPERATIONS - Own MDM and EDR coverage across the device fleet, with clear configuration standards and security baselines - Handle device provisioning, access requests, and the IT work that keeps the team operating securely - Automate repetitive security and IT workflows where it improves coverage or reduces manual work RISK & RESPONSE - Partner with the Head of Security on vendor risk assessments - Assess new SaaS tools and AI integrations before adoption, and give teams practical guidance on how to use them safely - Act as a first responder for identity and endpoint incidents: investigate, contain, document, and escalate when needed - Help define and maintain security policies as the program matures YOU MIGHT BE RIGHT FOR THIS IF - You’ve owned identity and endpoint systems in practice, including the messy work of getting coverage and adoption across a team - You spot how an attacker could use a weak access path, unmanaged device, or new integration before it becomes an incident - You can distinguish a real risk from a theoretical one and explain your recommendation clearly - You’ve responded to incidents and can stay calm, gather facts, and make the next call under pressure - You write guidance that non-technical teammates can follow - You’ve helped build a security function early, when the process and tooling still needed to be defined - You’re comfortable handling an access request or laptop issue one hour and improving a company-wide control the next REQUIREMENTS - Hands-on experience operating an enterprise identity platform, including SSO, MFA, and access policies - Experience managing MDM and EDR tooling across a device fleet - Experience responding to security incidents, compromises, or suspected breaches - Ability to assess vendor and integration risk, including risks introduced by AI tools - Scripting ability in Python or Bash for automation and basic tooling - Strong written communication and the judgment to work independently - Experience with blockchain or Web3 threats, cloud security, SIEM and detection engineering, or AI agents used in security operations is a plus. WHY THIS MIGHT BE INTERESTING Squads builds financial products for businesses, individuals, and developers on new money rails. The security work spans all of them. You’ll have ownership over the systems people use every day, a direct hand in how the company adopts new tools, and the chance to build controls that scale with the business. You’ll work closely with the Head of Security in a small team where good judgment has an immediate effect. If you like building the security program while also operating it, you’ll have room to do both here. Small team, high standards. Learn more about our core values here https://squads.xyz/company.

Location: Remote Vectra® is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises. The Vectra AI Platform delivers integrated signal across public cloud, SaaS, identity, and data center networks in a single platform. Powered by patented Attack Signal Intelligence, it empowers security teams to rapidly prioritize, investigate and respond to the most advanced cyber-attacks. With 35 patents in AI-driven threat detection and the most vendor references in MITRE D3FEND, organizations worldwide rely on the Vectra AI to move at the speed and scale of hybrid attackers. For more information, visit www.vectra.ai. Position Overview As a Security Engineer (Pre‑Sales) at Vectra.ai, you will blend deep technical expertise with strong customer‑facing skills to build trust, influence architectural direction, and drive successful outcomes for our clients. You’ll guide prospects through technical discovery, articulate how Vectra’s AI‑driven detection and response platform solves their most critical security challenges, and deliver compelling demonstrations and proofs‑of‑concept that showcase our value. Responsibilities Pre-Sales support and Technical Account Management associated to your Regional Sales Managers Walk customers and partners through demos and problem solving in clear, concise matter by being the subject matter expert on all things Vectra. Communicate cross functionally constantly to ensure all key stakeholders are in the loop in order to insure best-of-breed products, tools and documentations. Develop and maintain an in-depth technical knowledge of the Vectra product line. Identify new opportunities by creating and developing strong technical relationships with customers and channel partners. Maintain knowledge at a high technical level of the current security landscape. Collaborate with Customers on Technology reviews, product findings, and integration with other technologies they may have. Collaborate with other Vectra Engineers on high-level projects to deliver Vectra technologies to our customers. Explore and maintain knowledge of Vectra's key competitors. Participate in deployment review and forecast calls. Participate in design review and release meetings. Travel as needed within region. Experience and soft skills Startup DNA is a must: willing and able to do "whatever it takes" with motivation to find solutions rather than admire the challenge. Customer-first behavior is a must. Ability to work hands-in-hands with your Sales counterpart (RSM) . 5+ years' experience in a Technical Account Management or Security Engineering role supporting US federal agencies. Large account management experience is required. Active Security Clearance (Top secret or above preferred) Technical qualifications Deep understanding of security-focused product lines (CASB, EDR, SIEM or forensics-type platforms) with the ability to translate into value and security best practices. Strong knowledge in networking and ability to understand L3 to L7 OSI layers. String written (RFP) and verbal communications (Pre-sales presentations and conferences) are a must. Good understanding of an attacker progression (Red Team or Pentest). Certifications such as CEH, OSCP, OSCE is a plus. Good understanding of Incident Response (Blue Team) methodologies. Certifications such as GNFA is a plus. Good understanding of Cloud Security and Network Architectures. Certifications such as AWS Certified Security Specialty (SCS-C01) is a plus. Good understanding of Security Processes and methodologies. Certifications such as CISSP is a plus Vectra provides a comprehensive total rewards package that supports the financial, physical, mental and overall health of our employees and their families. Compensation includes competitive base pay, incentive pla n eligibility, and participation in the employee equity plan (stock options). Specific benefits offered var ies by location, but commonly in clude health care insurance , income protection / life insurance , access to retirement savings plans, behavioral & emotional wellness services , generous time away from work, and a comprehensive employee recognition program. Vectra is committed to creating a diverse environment and is proud to be an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.

Задачи: — проводить penetration testing продуктов и сервисов Samsung; — искать и оценивать уязвимости; — проводить code review; — взаимодействовать с разработчиками. Требования: — опыт web application pentest от 3 лет; — знание Burp Suite, OWASP ZAP; — знание OWASP Top 10; — знание Python. Будет плюсом: Kali Linux, AWS, Docker, SAST, CI/CD и DevSecOps, Linux internals, AI Security. Изюминка вакансии: это именно security-команда R&D, а не классический внутренний ИБ-отдел — основной фокус на тестировании большого количества веб-приложений и поиске уязвимостей.

Location: US - Headquarters - Maryland - Columbia Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc Your Role: As an AI Security Engineer on Tenable's Information Security team, you will help shape and mature our approach to securing AI both within Tenable's products and across the enterprise. AI introduces a new class of risk at the intersection of application security, cloud risk, and data governance, and you will be on the front lines of defining how we assess, test, and address it. You will apply hands-on AI engineering experience alongside deep product security and application security skills to design security controls for AI systems, lead assessments, and help engineering teams ship AI features securely. You will establish security standards for responsible AI use, influence decisions across the organization, and build tooling that raises our security posture. This role is ideal for a practitioner who has spent real time building with AI systems, looking under the hood of model internals, and wants to channel that experience into a security specialty. Your Opportunity: Design, implement, and maintain end-to-end security controls across the AI/ML lifecycle. Conduct safety research, inspecting model internals (e.g., detecting hidden deception, latent knowledge, or unwanted concepts across layers) as a core methodology. Perform AI safety assessments and threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks. Design and implement robust security guardrails, controls, and boundary mechanisms for Large Language Models (LLMs), Small Language Models (SLMs), and open-source models. Act as a subject matter expert in AI safety research by inspecting model internals to detect hidden deception, latent knowledge, or unwanted concepts, ensuring highly transparent and aligned AI outputs. Continuously monitor the AI landscape for novel vulnerabilities and attack techniques, applying deep engineering experience to proactively defend enterprise AI deployments. Develop security reference architectures for AI deployment patterns, including MCP servers and agentic AI workflows and harnesses. Deploy controls to ensure model integrity, governance, and proper access control across models and feature stores. Build AI-driven tooling to strengthen cybersecurity posture across identity, incident management, vulnerability management, third-party risk, and emerging AI threat vectors. Perform AI safety, security assessments, threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks. Collaborate with software engineers, and product teams to integrate security best practices into AI development, training, validation, and deployment processes. Drive Secure Software Development Lifecycle (SSDLC) and DevSecOps practices for AI-powered products, including threat modeling, security testing, penetration testing, and CI/CD pipeline security automation. Create security guidance, documentation, and training for internal engineering and development teams; develop metrics that drive desired security behaviors and outcomes. Research emerging trends in AI security and contribute to innovative solutions that support Tenable's AI initiatives. What You'll Need: 5 or more years of professional experience in information security or application security, with at least 1–2 years focused on securing AI/ML systems. Master’s Degree in Computer Science, Cybersecurity, Data Science, or a related field preferred; advanced degree preferred. Deep understanding of AI-specific security threats, including adversarial ML, data poisoning, prompt injection, model inversion, model evasion, and inference attacks. Strong coding experience in Python and/or Go. Experience with frameworks & libraries such as PyTorch, Hugging Face Transformers, TensorFlow or similar. Experience using specialized interpretability and probing tools/libraries such as TransformerLens, NNsight, Captum, or LIT (Learning Interpretability Tool). Familiarity with mechanistic & Architectural Concepts: inspecting internal model states, residual streams, attention patterns, activation steering, Sparse Autoencoders (SAEs), or feature attribution. Strong understanding of the ML/AI lifecycle and the security risks associated with each stage. Knowledge of cloud security platforms: AWS, Azure, or GCP including AI/ML-related services. Knowledge of data security principles, including encryption, masking, and tokenization. Knowledge of SSDLC, DevSecOps, and security testing practices, including SAST, DAST, SCA, and threat modeling. Knowledge of application security architecture best practices and patterns, including modern web applications, Docker, and microservices. Ability to work cross-functionally across engineering, product, and business teams. Strong written and verbal comAAmunication skills; able to clearly translate complex AI security risks for both technical and non-technical audiences. Strong problem-solving skills, attention to detail, and ability to lead projects with end-to-end ownership. Self-motivated and effective working independently and across distributed teams. And Ideally: Hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments. Familiarity of AI security frameworks and standards, including OWASP LLM Top 10 and the NIST AI Risk Management Framework. Experience with application security assessment tools (Burp Suite, ZAP, Tenable WAS, etc). Familiarity with AI governance frameworks (EU AI Act, NIST AI RMF, etc.). Background in cloud security or large-scale SaaS product environments. Security certifications: CISSP, CSSLP, SANS GIAC, CEH, or AI-focused security certifications are a plus, but not necessary. #LI-Hybrid #LI-MS1 This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs. US Pay Range $122,500 — $163,166.67 USD We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Location: Remote Workplace: Remote We are building AI to simulate the world through merging art and science. We believe that world models are at the frontier of progress in artificial intelligence. Language models alone won’t solve the world’s hardest problems – robotics, disease, scientific discovery. Real progress requires models that experience the world and learn from their mistakes, the same way that humans do. And this kind of trial and error can be massively accelerated when done in simulation, rather than in the real world. World models offer the most clear path to general-purpose simulation, changing how stories are told, how scientific progress is made and how the next frontiers of humanity are reached. Our team consists of creative, open minded, caring and ambitious people who are determined to change the world. We aspire to continuously build impossible things and our ability to do so relies on building an incredible team. If you are driven to do the same, we'd love to hear from you. *Titles posted to our careers page are updated regularly to best advertise the role and expected seniority, but internally we have a flat titling system with two types of titles: one for individual contributors and one for people managers. ABOUT THE ROLE Open to hiring remote — we also have offices in New York, San Francisco, Seattle, London, Paris, and Tel Aviv. Runway is hiring a Detection & Response Engineer to own how we find and stop attacks against our infrastructure, our research environment and our products. Securing a company that trains and serves frontier video models is a different problem from securing a typical SaaS product. The environment includes research compute, large training datasets, a fast-moving build pipeline and engineers who work inside AI-assisted tooling every day. Each of those changes what an attack looks like and what you need to see to catch it. You'll join the Security team and build our detection and response program the way an engineer would: detections as code, response as automation, evidence as something you can query. This is a role with real ownership: you'll own the detection program end to end, from what we log to how quickly we close an incident. You'll report to the head of security, partner with engineers across platform and research, and shape how this function grows from here. WHAT YOU'LL DO - Own detection and response end to end: what we log, what we alert on, how we triage and how we recover - Write and tune detections as code across multiple cloud environments, Kubernetes, identity systems, endpoints and SaaS, and measure them on coverage and precision rather than alert volume - Lead incident response from the first alert through containment and forensics, then write the post-incident review people actually read - Build automation that takes toil out of triage, including enrichment, correlation, containment actions and evidence collection, and use LLM-based tooling where it holds up under audit - Monitor AI agents and developer tooling operating inside our environment, and turn that into concrete telemetry and controls - Partner with platform and research engineers so new systems ship with logging and response playbooks in place on day one - Run threat hunts and tabletop exercises against the parts of the environment that worry you most, and fix what you find - Turn incident and detection metrics into evidence for SOC 2, ISO 27001 and enterprise customer security reviews, working with our GRC team - Participate in an on-call rotation for security incidents WHAT YOU'LL NEED - Hands-on incident response experience: you've triaged live alerts, led investigations and written up what happened afterward - Experience building and tuning detections in a modern SIEM, ideally managed as code - Working knowledge of how attackers move through cloud and Kubernetes environments (IAM abuse, container escape, credential theft, supply chain compromise) and what that leaves behind in logs - Comfort writing Python, Typescript, Rust or another language to automate response work and connect security tools - Familiarity with at least one major cloud platform and with Kubernetes at the level of audit logs, RBAC and workload identity - Clear writing. Incident timelines, detection documentation and updates to leadership are all part of the job - Judgment about what to alert on, what to automate and when to wake someone up EVEN BETTER IF YOU HAVE - Experience monitoring GPU or HPC-style infrastructure, or research environments with large datasets - Experience building detections or guardrails for AI agents, LLM tooling or MCP servers - Cloud forensics experience: disk and memory acquisition, cloud audit trail reconstruction, chain of custody - Published open source detection content Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. Our salary ranges are based on competitive market rates for our size, stage and industry, and salary is just one part of the overall compensation package we provide. There are many factors that go into salary determinations, including relevant experience, skill level and qualifications assessed during the interview process, and maintaining internal equity with peers on the team. The range shared below is a general expectation for the function as posted, but we are also open to considering candidates who may be more or less experienced than outlined in the job description. In this case, we will communicate any updates in the expected salary range. Lastly, the provided range is the expected salary for candidates in the U.S. Outside of those regions, there may be a change in the range, which again, will be communicated to candidates. WORKING AT RUNWAY Great things come from great teams. https://www.youtube.com/watch?v=kwmj4ato2kw&ab_channel=Runway We’d love to hear from you. We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed. So regardless of race, gender identity or expression, sexual orientation, religion, origin, ability, age, veteran status, if joining this mission speaks to you, we encourage you to apply. More about Runway - Universal World Simulator https://runwayml.com/world-simulator.html - GWM-1 https://runwayml.com/research/introducing-runway-gwm-1 - Gen-4.5 https://runwayml.com/research/introducing-runway-gen-4.5 - General World Models https://runwayml.com/research/introducing-general-world-models - Robotics SDK https://runwayml.com/research/introducing-runway-gwm-1#robotics-section - Conversational Real-time Agents https://runwayml.com/research/introducing-runway-gwm-1#avatars-section - Runway Studios https://runwayml.com/studios We're excited to be recognized as a best place to work: Crain's https://www.crainsnewyork.com/awards/best-places-work-2023 | InHerSight https://www.inhersight.com/companies/best/city/new-york-city-ny | BuiltIn NYC https://builtin.com/awards/new-york-city/2024/best-places-to-work | INC https://www.inc.com/best-workplaces/2024

Location: Remote Workplace: Remote We are building AI to simulate the world through merging art and science. We believe that world models are at the frontier of progress in artificial intelligence. Language models alone won’t solve the world’s hardest problems – robotics, disease, scientific discovery. Real progress requires models that experience the world and learn from their mistakes, the same way that humans do. And this kind of trial and error can be massively accelerated when done in simulation, rather than in the real world. World models offer the most clear path to general-purpose simulation, changing how stories are told, how scientific progress is made and how the next frontiers of humanity are reached. Our team consists of creative, open minded, caring and ambitious people who are determined to change the world. We aspire to continuously build impossible things and our ability to do so relies on building an incredible team. If you are driven to do the same, we'd love to hear from you. *Titles posted to our careers page are updated regularly to best advertise the role and expected seniority, but internally we have a flat titling system with two types of titles: one for individual contributors and one for people managers. ABOUT THE ROLE *Open to hiring remote — we also have offices in New York, San Francisco, Seattle, London, Paris, and Tel Aviv. Runway is hiring an Infrastructure Security Engineer to secure the platform our models are trained and served on. The role covers Kubernetes platform security, cloud identity and access, software supply chain, tenant isolation in the serving layer and the research infrastructure behind our models. Securing a company that trains and serves frontier video models is a different problem from securing a typical SaaS product. The environment includes research compute, large training datasets, a fast-moving build pipeline, and engineers who work inside AI-assisted tooling every day. Each of those changes what an attack looks like and what the platform has to enforce to stop it. This is a hands-on engineering role on the Security team. You'll write policy, tooling and infrastructure code, work in the platform team's repositories, and ship controls that hold up in production. WHAT YOU'LL DO - Design and ship security controls in our Kubernetes ecosystem: admission policy, RBAC, workload identity, network policy and runtime hardening across every cluster we run - Harden the software supply chain from dependency intake through build and deploy, including package firewalling, artifact signing and provenance, and admission controls that block what doesn't pass - Own cloud IAM and identity architecture: least-privilege roles, short-lived credentials and workload federation - Secure research infrastructure and training pipelines, including access to model weights and datasets, without slowing down the people using them - Threat model new platform components before they ship and turn the findings into concrete requirements the owning team can act on - Build guardrails for AI agents and developer tooling operating inside our infrastructure - Write infrastructure as code and policy as code, and treat security configuration with the same review and rollout discipline as any other change - Give the incident response team what they need when infrastructure is involved: fast answers about how a system works and what to shut off WHAT YOU'LL NEED - Hands-on experience securing Kubernetes in production: you've written admission policies, debugged RBAC and workload identity problems and understand how a cluster gets compromised - Working knowledge of cloud IAM and networking on at least one major cloud platform, including how identity federation and short-lived credentials actually work - Experience with infrastructure as code and GitOps-style deployment, and the habit of shipping security changes through the same pipeline as everything else - Comfort writing Python, Typescript, Rust or another language to build tooling, not just scripts - An understanding of software supply chain attacks and the controls that stop them: signing, provenance, SBOMs, admission enforcement - Clear writing. Design docs, threat models and explanations to engineers who don't work in security are all part of the job - Judgment about which controls to enforce, which to recommend and how to roll out a breaking change without breaking the company EVEN BETTER IF YOU HAVE - Experience securing GPU or HPC-style compute, training pipelines or research environments - Experience with policy engines and admission controllers (Kyverno, OPA Gatekeeper, Falco or similar) - Multi-tenant isolation design in a cloud environment: ABAC, scoped credentials, per-tenant boundaries - Experience producing security architecture evidence for SOC 2, ISO 27001 or other audits and customer assessments - Open source contributions or published work in cloud or Kubernetes security Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. Our salary ranges are based on competitive market rates for our size, stage and industry, and salary is just one part of the overall compensation package we provide. There are many factors that go into salary determinations, including relevant experience, skill level and qualifications assessed during the interview process, and maintaining internal equity with peers on the team. The range shared below is a general expectation for the function as posted, but we are also open to considering candidates who may be more or less experienced than outlined in the job description. In this case, we will communicate any updates in the expected salary range. Lastly, the provided range is the expected salary for candidates in the U.S. Outside of those regions, there may be a change in the range, which again, will be communicated to candidates. WORKING AT RUNWAY Great things come from great teams. https://www.youtube.com/watch?v=kwmj4ato2kw&ab_channel=Runway We’d love to hear from you. We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed. So regardless of race, gender identity or expression, sexual orientation, religion, origin, ability, age, veteran status, if joining this mission speaks to you, we encourage you to apply. More about Runway - Universal World Simulator https://runwayml.com/world-simulator.html - GWM-1 https://runwayml.com/research/introducing-runway-gwm-1 - Gen-4.5 https://runwayml.com/research/introducing-runway-gen-4.5 - General World Models https://runwayml.com/research/introducing-general-world-models - Robotics SDK https://runwayml.com/research/introducing-runway-gwm-1#robotics-section - Conversational Real-time Agents https://runwayml.com/research/introducing-runway-gwm-1#avatars-section - Runway Studios https://runwayml.com/studios We're excited to be recognized as a best place to work: Crain's https://www.crainsnewyork.com/awards/best-places-work-2023 | InHerSight https://www.inhersight.com/companies/best/city/new-york-city-ny | BuiltIn NYC https://builtin.com/awards/new-york-city/2024/best-places-to-work | INC https://www.inc.com/best-workplaces/2024

Location: USA (Remote); Canada (Remote) Workplace: Remote Mysten Labs’ mission is to advance the internet through step-function improvements in what technology makes possible. We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value. Our work spans on-chain finance and the emerging agent economy. Through Sui, Move, and our broader technology stack, we’re building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact. We’re looking for a Senior Security Engineer to help protect the Sui ecosystem. You’ll uncover vulnerabilities, build monitoring tools, and assess economic risk across DeFi protocols. Working closely with external protocol teams and Mysten’s own DeFi products, including DeepBook, you’ll help address risks before they become incidents and strengthen security across the ecosystem Responsibilities - Build and run continuous monitoring of the Sui DeFi ecosystem for security and economic risk: oracle issues, misconfigurations/bad economic parameters, solvency and bad-debt exposure under price shocks, liquidation capacity against on-chain liquidity depth, accounting-versus-positions reconciliation, invariants. - Extend security team tooling, both precise static analysis tooling and proprietary agent skills. - Measure and drive compliance with the DeFi security recommendations across supported protocols: run the recurring compliance cycle, fill the protocol report card, validate security claims (audits, custody, upgrade governance, oracle dependencies) against on-chain reality, track remediation commitments, and escalate when a protocol regresses or fails to disclose an incident. Partner with the ecosystem and finance owners of the process. - Hunt for critical vulnerabilities in the highest-TVL Sui protocols and get them fixed before they are exploited: full-package audits, variant analysis across forks, pre-execution review of multisig upgrade payloads, and forensics after incidents anywhere in the ecosystem. - Be the security team's point of contact for external DeFi teams and for Mysten's own DeFi products such as DeepBook: due diligence, incident coordination, and post-mortems that feed back into the recommendations and the monitors. - Write it down: findings, reports, and runbooks that a protocol engineer can act on and a non-technical stakeholder can understand, with every claim traceable to bytecode, chain state, or data. Minimum Qualifications - Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience. - 3+ years of hands-on experience in security engineering, smart contract security, or DeFi risk engineering, with a track record of building tools that ran in production and of finding real vulnerabilities (audit findings, bug bounty reports, published research, or incident work). - Strong understanding of DeFi mechanics and their failure modes: lending markets (LTV, liquidation thresholds and bonuses, close factors, bad debt), AMMs and concentrated liquidity, perpetuals, liquid staking, oracles (staleness, confidence, TWAP, multi-source aggregation), flash loans, and MEV. - Proficiency in TypeScript and Python, and comfort with Rust. Ability to write SQL over large datasets and to work with blockchain indexers and data warehouses. - Experience reading smart contract code at source or the bytecode or disassembly level, or evident ability to learn it quickly. Move experience is a plus, not a requirement; Solidity or Rust smart contract experience transfers. - Rigor: you verify claims against bytecode and chain state, build known-clean checks into your tools, and say what you did not verify. - Strong written and verbal communication, including the ability to influence external teams you have no formal authority over - Interest in the web3 space is required. Preferred Qualifications - Sui and Move experience: the object and capability model, package upgrades and version gates, programmable transaction blocks, the Sui GraphQL and gRPC APIs. - Knowledge of the recent DeFi exploit history on Sui and other chains: named incidents, oracle compromises, and the defect classes behind them. - Experience building analysis or monitoring tools with LLM agents (Claude Code skills or comparable), and a clear sense of where models help and where deterministic tooling must do the work. - Static or dynamic program analysis experience: taint analysis, call graphs, symbolic execution, fuzzing, formal verification. - Quantitative or economic modeling experience: stress testing, liquidity modeling, risk parameters for lending markets. - Publications, conference talks, CVEs, or bug bounty rankings. Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information. Regarding the recent rash of technology job scams: Be aware that emails from genuine Mysten Labs group recruiters will always come from the @mystenlabs.com http://mystenlabs.com domain or related subdomains (e.g., mystenlabs.com/careers http://mystenlabs.com/careers). Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers http://www.mystenlabs.com/careers. To support an efficient and fair hiring process, we may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers. Our team is remote first and we are hiring across the world. Here at Mysten Labs, you’ll be joining a world-class team with tremendous growth potential as we bring the next billion users to web3. We raised a $300M Series B round from top Silicon Valley led venture funds like Jump Crypto, Andreessen Horowitz (a16z), Binance Labs, Redpoint, Lightspeed, Coinbase Ventures, Electric Capital, Standard Crypto, NFX, Slow Ventures, Scribble Ventures, Samsung Next, Lux Capital, among other investment firms and strategic partners. Come join us and build the future of web3!

Location: United States & Canada Workplace: Remote About WorkOS 🚀 WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations. We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid. As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products. About the Security team The Security team at WorkOS is responsible for keeping the data and identities of hundreds of millions of users secure. Security is fundamental to our products, and customer trust is the foundation of our success. We are a highly collaborative group with a strong engineering mindset. Our security program is shaped by hands-on experience attacking and defending systems, and applying lessons from across the industry. We embrace the latest advancements in practices and tooling that make modern security teams effective. We are comfortable in code and collaborate often with engineering to create products that are secure by default. Who we’re looking for - Risk-focused and pragmatic. You excel at identifying and reasoning about security risk in real-world contexts. You prioritize ruthlessly, always asking: what's the most effective way to reduce risk right now and in the long term? - A builder who can break things. You're comfortable reading and writing code, and you have a passion for deeply understanding the products you secure. You think like an attacker to find subtle, high impact vulnerabilities and like a defender to design pragmatic, effective mitigations. - A strong partner to engineering. You build trust with engineers by understanding their priorities, making security frictionless, and finding ways to make the secure path, the easiest path. - Excited about AI. You're embracing AI and automation to scale security and reduce toil. - Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you. Responsibilities - Lead secure design efforts. Partner with engineering teams on secure design and code reviews. Identify and prioritize risks early in the product lifecycle. - Build secure by default systems. Develop paved paths that systemically reduce risk and make secure development the easiest path for engineers. - Perform offensive security testing. Conduct penetration tests and code audits on new and existing products from an adversarial lens. - Improve our security tooling. Integrate and improve our static analysis, supply chain security, and vulnerability management capabilities across engineering pipelines. - Operate our responsible disclosure program. Run and improve our program by furthering automation, validating submissions, and coordinating remediation. - Improve our products. Write and ship code to remediate vulnerabilities in production systems and improve the security posture of WorkOS products. - Work directly with customers. Help build our customers' trust by directly engaging with their security-related questions and concerns. Qualifications - 5+ years of experience in a security engineering or security-focused software engineering role. - Ability to execute across a wide range of security functions such as security assessments, penetration testing, responsible disclosure, security tooling integration, etc. - Familiarity with and experience using common industry tooling. - Proven ability to identify vulnerabilities in software, demonstrated through CVEs, bug bounty, blog posts, or prior work experience. - Strong written and verbal communication skills, particularly in partnering with engineering teams. - Comfortable reading and writing code, and able to effectively leverage AI during the process. - Bonus: Experience in the authentication and identity domain. - Bonus: Experience writing production level code, especially developing security features. Benefits and Perks (US Only) 💖 At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.   - 401k matching - Competitive Equity - Healthcare, dental and vision coverage - FSA, ST/LT Disability, Voluntary Life - Carrot fertility benefits - 20 days paid vacation + 10 holidays + unlimited sick leave - 12 weeks fully paid parental leave - Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active - Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being - Commuter benefits for hybrid employees in SF/NYC - Unlimited token usage! Please inquire directly with our recruiting team for benefits available to those working outside the US.   Equal Opportunity Employer WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

We are building a new capability that turns fragmented, noisy security logs into actionable insights. The position is full-time, 40 hours per week, with mostly remote work within Germany and monthly in-person collaboration at the Berlin office. The contract is fixed-term. Salary ranges from EUR 69,000 to 77,000 per year.