Вакансии

Location: Paris ABOUT MISTRAL Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. Role summary   As a Product Security Engineer within the Cybersecurity organization, you will be the dedicated security partner for one or more product organizations (such as Vibe, Studio or Forge). You will work alongside engineers, researchers and product managers to ensure security is built into every stage of the product lifecycle—from early design and architecture decisions through implementation, production deployment and continuous evolution. Your mission is to help engineering teams build secure products without slowing them down. Rather than acting as a gatekeeper, you will enable teams to make sound security decisions through secure-by-design principles, pragmatic engineering guidance and scalable security automation. You will own the Product Security strategy for your product portfolio, influence engineering decisions, and help define how secure software is built across one of the world's leading AI companies.   What you will do   - Serve as the dedicated Product Security partner for one or more product organizations. - Drive security throughout the entire product lifecycle, from design and architecture reviews to production deployment and ongoing operation. - Lead threat modeling, security architecture reviews and risk assessments for new features, APIs and major architectural changes. - Define pragmatic security requirements and secure-by-default patterns that enable engineering teams to ship safely at high velocity for a specific product. - Review critical designs and code, focusing on authentication, authorization, tenant isolation, data protection, cryptography and other high-impact security controls. - Design product-specific security validation strategies, including targeted testing, abuse-case development and guided agent-based security assessments tailored to each product's architecture and workflows. - Partner with engineering teams to prioritize and remediate vulnerabilities identified through code reviews, penetration testing, bug bounty programs and automated security testing. - Collaborate with Security Engineering to improve reusable security platforms, developer guardrails and security capabilities integrated into the SDLC. - Champion secure software engineering through coaching, technical leadership, reusable design patterns and Security Champion programs. - Define Product Security metrics, continuously improve the security posture of your products and help shape Product Security practices across the company. What we're looking for: - 5+ years of experience in Product Security, Application Security or Software Engineering with a strong security focus. - Strong understanding of modern software architecture, distributed systems, APIs and cloud-native applications. - Demonstrated experience performing threat modeling, architecture reviews and secure design assessments. - Deep understanding of modern software security, including authentication, authorization, cryptography, secrets management, tenant isolation, secure data flows and common vulnerability classes (OWASP Top 10, CWE). - Strong software engineering skills in Python, Go, TypeScript or similar languages, with the ability to review production code and build security automation. - Experience with application security testing techniques, including manual code review, penetration testing, bug bounty programs. - Experience designing product-specific security testing approaches, including security automation or agent-based testing, is highly valued. - Strong understanding of Secure SDLC principles from product design through production deployment and long-term maintenance. - Excellent communication and influencing skills, with the ability to earn trust across engineering organizations and balance security, product delivery and developer experience. - A pragmatic, engineering-first mindset with strong technical judgment and a focus on solving meaningful security problems. WHAT WE OFFER We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks. For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link. PRIVACY POLICY Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.

Location: Almaty, Kazakhstan Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. ABOUT THE ROLE We’re looking for an IT Security Engineer to own and strengthen the security of our corporate technology environment. This is a hands-on role spanning identity and access management, endpoint security, SaaS security, Zero Trust, security automation, and incident response. You’ll work closely with Security, IT, Engineering, and business teams to build secure, scalable systems and automate the controls that protect our people, devices, applications, and data.   WHAT YOU’LL DO IDENTITY & ACCESS MANAGEMENT - Own and strengthen identity and access controls across our corporate environment, with a focus on Microsoft Entra ID. - Implement and maintain SSO/SAML, SCIM provisioning, MFA, Conditional Access, and RBAC. - Build and improve automated joiner, mover, and leaver (JML) workflows. - Regularly review permissions, privileged access, and authentication policies to reduce unnecessary access and security risk. - Help establish identity as the foundation of our Zero Trust security model. ENDPOINT SECURITY - Manage and improve endpoint security through Microsoft Intune/MDM, device compliance policies, and endpoint protection tooling. - Deploy and maintain EDR capabilities across the corporate fleet. - Establish and enforce security baselines for employee devices. - Investigate endpoint security events and remediate compromised or non-compliant devices. SAAS & CORPORATE APPLICATION SECURITY - Assess and improve the security posture of corporate SaaS applications. - Partner with application owners to implement appropriate authentication, authorization, provisioning, and data-access controls. - Identify shadow IT, excessive permissions, insecure configurations, and other SaaS-related risks. - Help establish scalable security standards for onboarding and managing new corporate applications. ZERO TRUST & CORPORATE ACCESS - Design and implement Zero Trust principles across identity, endpoints, applications, and corporate access. - Strengthen controls around privileged access, remote access, and access to sensitive systems. - Apply practical security controls that balance strong protection with employee productivity. SECURITY AUTOMATION - Automate repetitive security and IT workflows using scripts, APIs, and integrations. - Build tooling to automate access reviews, provisioning, compliance checks, alert enrichment, remediation, and other security processes. - Use scripting languages such as Python or JavaScript to improve security operations and reduce manual work. - Look for opportunities to turn manual security processes into scalable, reliable systems. DETECTION & INCIDENT RESPONSE - Monitor and investigate security alerts across identity, endpoint, and corporate systems. - Perform initial investigation and triage of suspicious activity and potential security incidents. - Support incident containment, remediation, and post-incident improvements. - Build lightweight detections and alerts for meaningful risks within the corporate environment. WHAT WE’RE LOOKING FOR - Strong hands-on experience with identity and access management, ideally within Microsoft Entra ID. - Experience implementing or managing SSO/SAML, SCIM, MFA, Conditional Access, RBAC, and JML workflows. - Experience with MDM and endpoint security, ideally Microsoft Intune and modern EDR tooling. - Understanding of SaaS and corporate application security. - Experience implementing or operating within a Zero Trust security model. - Ability to automate workflows using scripts and APIs, with experience in a language such as Python or JavaScript. - Working knowledge of security detection, investigation, and incident response. - Strong security judgment — you can distinguish theoretical risk from meaningful business risk and prioritize accordingly. - Comfortable operating independently in a fast-moving startup environment where priorities can change quickly. - Builder mindset: you look for ways to automate, simplify, and improve systems rather than relying on manual processes. NICE TO HAVE - Experience with reverse engineering, CTFs, security competitions, or similar hands-on security challenges. - Strong understanding of networking fundamentals, including VPNs, network segmentation, authentication protocols, and common lateral-movement techniques. - Experience securing rapidly scaling or highly technical organizations. - Experience working closely with engineering or product security teams. - Familiarity with cloud security concepts and modern security monitoring tools. WHAT WE OFFER: - Competitive base salary in USD - Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth. - On-site role in our Almaty office (we will relocate you from anywhere).

Location: Almaty, Kazakhstan Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $500M in annual revenue run rate, 25M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. ABOUT THE ROLE Break new features before they ship: agentic systems, MCP servers, code-generating agents, user-deployed apps, generative models for image, video, and voice, and enterprise features (SSO, org and team management, roles). It's new ground, and you'll help define how we secure it. You go first. What you'll do: - Pentest new features and products pre-release: web, APIs, admin surfaces. - Work out the attack surface of each new feature yourself. - Hunt authorization flaws across our multi-tenant APIs and retest fixes. - Join design and code reviews early, so flaws die before they're built. - Turn recurring findings into guardrails — paved-road standards and automated checks — so a bug class dies once instead of resurfacing every release. - Bring a working repro to the team that owns the code and see the fix through. Requirements - A track record of finding real vulnerabilities in real systems — appsec work, bug bounty, or research. - The ability to read modern codebases, trace a bug to root cause, and discuss the fix with the engineers who wrote it. - A threat-modeling instinct for spotting the weak spots in a design or architecture before a line is written. - Enough cloud and container fundamentals to follow a bug into the infrastructure it runs on. - High agency. - Working English. Nice to have - LLM/agent security research, public research or CVEs, OSWE/CWEE or equivalent hands-on certificates. WHAT WE OFFER: - Competitive base salary in USD - Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth. - On-site role in our Almaty office (we will relocate you from anywhere).

Location: United States of America What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Product Research Location: Remote, US Compensation Range: $200,000 to $230,000 base plus bonus and equity What You’ll Do: The Huntress Product Research team has the unique honor of waking up every morning knowing we’re going to make hackers regret targeting our partners and customers. As a Principal Product Researcher, we’re looking for someone who wants to pour all of their creativity into building and implementing simple solutions that are disproportionately effective at countering these constantly evolving threats. Competitive candidates have experience managing, deploying, and securing SMB environments utilizing a wide variety of security software, best practices, and automation tools. Familiarity with product management, incident response, social engineering, psychology, education, and managed service provider tools is an additional way to differentiate yourself. As you can imagine, success doesn’t happen in a vacuum. An effective Product Researcher fosters highly collaborative environments between the Product, Engineering, and Security teams to accelerate our mission and secure the 99% of businesses that fall below the enterprise poverty line. This collaboration is needed to produce and prioritize a unified technical vision that ultimately delivers our most impactful features and capabilities. We defend over 5M endpoints for 225,000+ mid-sized and small-business customers, and that number continues to grow each month. Given this market’s tighter budget, it’s not financially feasible to assign human analysts to each client. The Security Operations team addresses this challenge head-on by building and scaling highly automated efficiencies—often lightly augmented by our SOC — that make intruders earn every inch of their access while maintaining affordability and healthy gross margins. Roles and Responsibilities: Identify innovative ways to detect Windows OS threats Develop cross-platform features that leverage telemetry from common OS subsystems such as file system, memory, process, and network activity Research and development of sensor capabilities to provide visibility and detection support for attack techniques across supported Windows OS versions Work collaboratively with internal engineering and detection teams to implement detection logic Identify and evaluate new telemetry opportunities Identify and address gaps in product coverage Respond to product escalations Perform False Positive and False Negative investigations Lead product research initiatives to develop and evaluate security product strategies and technologies Coordinate with Product and Engineering teams to integrate and operationalize solutions developed by Threat Operations teams Applies AI as a practical part of day-to-day product research work to improve the speed, quality, and impact of research outputs Uses AI to support information gathering, analysis, prototyping, and production of clear, decision-useful work products while maintaining accountability for the final output Builds and reuses lightweight prompts, templates, or workflows for recurring research tasks rather than relying on one-off use Develop internal and external technical documentation to educate customers and communicate research findings to adjacent teams about security risks and opportunities Mentor and teach technical expertise to advance the broader community Promote Huntress’ reputation through media interaction, public speaking, CFPs, CTFs, and blogs Qualifications: Expert in Windows OS internals, components, APIs, and design Prior experience with Windows OS kernel coding and device drivers Experience testing EDRs, bypasses, and evasion techniques Comfortable with reverse engineering and using debuggers Proficiency in multiple programming/scripting languages, such as C/C++/C#, PowerShell, and Python Applies AI to improve research quality, speed, and outputs in day-to-day work Commitment to clear documentation of research findings Experience with MITRE ATT&CK matrix, SIGMA, Yara, and Elasticsearch/Kibana What We Offer: 100% remote work environment - since our founding in 2015 Generous paid time off policy, including vacation, sick time, and paid holidays 12 weeks of paid parental leave Highly competitive and comprehensive medical, dental, and vision benefits plans 401(k) with a 5% contribution regardless of employee contribution Life and Disability insurance plans Stock options for all full-time employees One-time $500 reimbursement for building/upgrading home office Annual allowance for education and professional development assistance $75 USD/month digital reimbursement Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Location: Paris; New York Workplace: OnSite ABOUT MISTRAL Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. ROLE SUMMARY As a Security Compliance Specialist, you will contribute to the development and operation of Mistral AI’s cybersecurity compliance program. You will support the implementation and maintenance of security frameworks, coordinate compliance activities across the organization, and help the company obtain and maintain the certifications required to support its growth and enterprise business. WHAT YOU WILL DO - Contribute to the development and ongoing management of Mistral AI’s cybersecurity compliance program. - Support the definition, implementation, and maintenance of the Information Security Management System. - Coordinate cybersecurity compliance activities, including internal reviews, control assessments, and external audits. - Collect, review, and organize evidence from relevant stakeholders to demonstrate compliance with certification and regulatory requirements. - Help teams understand their responsibilities and expected contributions to compliance initiatives. - Develop and deliver cybersecurity compliance training and awareness materials. - Participate in cybersecurity risk assessments and support the monitoring of remediation actions. - Maintain compliance documentation, policies, procedures, control records, and audit materials. - Track changes in relevant cybersecurity standards and regulations and assess their potential impact on the organization. - Collaborate with Sales, Marketing, Legal, and other teams to identify certifications that may support customer acquisition and business development. - Help evaluate and prioritize new certification initiatives based on business value, customer demand, implementation effort, and cost. ABOUT YOU - 5+ years of experience in cybersecurity compliance, information security governance, risk management, or a related field. - Experience supporting cybersecurity compliance programs, certification processes, or external audits. - Strong understanding of cybersecurity standards and frameworks such as ISO 27001, SOC 2, HDS, SecNumCloud, or C5. - Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA. - Knowledge of requirements relating to sensitive or classified information, such as II 901 or IGI 1300, would be an advantage. - Strong organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders. - Excellent written and verbal communication skills. - Strong analytical and problem-solving abilities. - Ability to work collaboratively across technical, legal, commercial, and operational teams. - Professional proficiency in English; French proficiency is a plus. WHAT WE OFFER We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks. For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link. PRIVACY POLICY Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.

Location: Washington, District of Columbia, United States Dexis is a dynamic professional services firm dedicated to partnering with government and community leaders both in the U.S. and internationally to achieve critical social outcomes in a rapidly changing world. At Dexis, you will experience a corporate culture of inclusiveness, respect, fairness, and trust. You will be given the means and mentorship needed to succeed, and your creativity will be rewarded. About the Position Dexis is seeking a Security Assistance Analyst to support anticipated programming with the Department of State. This opportunity will provide program analysis, assessment, and trend monitoring in support of Department of State-administered military grant assistance programs. The security assistance analyst will collect and organize program data, design and implement analytical methodologies to capture program trends, develop analytical products to inform programming and budgeting decision-making, and coordinate with stakeholders within the security assistance/security cooperation enterprise. This position is contingent upon contract award. Responsibilities Serve as the primary point of contact with the client, coordinating priorities, communicating progress, managing stakeholder expectations, and ensuring alignment with mission objectives. Analyze Department of State-administered military grant assistance programs to assess trends, risks, opportunities, and implications for U.S. foreign policy and security cooperation objectives. Provide strategic context, regional insights, and operational recommendations to support leadership decision-making, program planning, and resource prioritization. Interpret analytical findings and program data to identify key trends, drivers, and implications, translating complex information into concise, actionable recommendations. Develop analytical products that synthesize security, political, operational, and programmatic insights and implications of program activities. Qualifications Bachelor’s degree and at least five (5) years of relevant experience, or Master’s degree and at least three (3) years of experience in defense or security program analysis, monitoring, and assessment. Ability to obtain a secret security clearance. Experience researching, analyzing, and synthesizing complex political, security, military, and programmatic information into concise reports, briefings, and decision-support products for program managers and senior leaders. Excellent written and verbal communication skills, including experience briefing stakeholders and translating complex issues into actionable recommendations. Proficiency with Microsoft 365 applications, including Excel, Word, PowerPoint, and SharePoint. Preferred Qualifications Active secret security clearance Experience overseeing analytical, monitoring, evaluation, research, data analytics, or decision-support activities, including prioritizing competing requirements and delivering high-quality products under compressed timelines. Demonstrated experience supporting foreign assistance, security assistance, security cooperation, defense, or international security programs. Strong u nderstanding of data architecture, data modeling, data governance, and data quality management principles. Strong understanding of knowledge management principles, repository governance, records management, and information lifecycle management. Demonstrated experience working across multiple offices, stakeholder groups, or functional teams to identify requirements and implement knowledge-sharing solutions. Below is the pay range aligned with this position. When developing a range, Dexis evaluates compensation holistically, triangulating between external market research , our budget for the position, and internal equity to arrive at a figure that is fair and competitive. Offers within this range will be based on an individual candidate's qualification, relevant education and experience, skills, performance, and organizational needs. Dexis pay range for this role: $80,000 — $120,000 USD Benefits Dexis offers benefits to support employees’ health, financial security, and well-being. The benefits outlined below are for full-time, US-based positions only. These benefits include: Medical and prescription drug coverage: A choice of three UnitedHealthcare medical plans, with coverage options for employees and eligible dependents. Dental insurance: Dental coverage for employees and eligible dependents, including preventive, basic, major, and orthodontic services, subject to plan limits. Company-paid vision insurance: Vision coverage for employees and eligible dependents, with premiums paid in full by Dexis. Employer-funded health reimbursement arrangement (HRA): Employees who enroll in the Silver HRA medical plan receive an employer-funded HRA to help pay eligible in-network deductible expenses. Company-paid life and disability insurance: Basic life and accidental death and dismemberment (AD&D) insurance, plus short-term and long-term disability coverage. Optional supplemental insurance: Voluntary supplemental life and AD&D insurance options, including life insurance options for eligible dependents. Employee Assistance Program (EAP): Company-paid access to confidential counseling and legal and financial support resources for employees and their families. Health and wellness resources: Virtual care, behavioral health resources, and wellness programs available through the medical plan. Benefits assistance: Personalized support with benefit enrollment, coverage questions, claims, and finding providers through the Employee Care Center. Participation, coverage, and employee contributions are subject to applicable benefit plan terms and eligibility requirements. Dexis is on a mission to help solve today’s most pressing global political, social, and economic challenges and create a world where all people are safe and prosperous. As a Dexis employee, you will be challenged, empowered, and mentored. Our motto is “find a way or make a way” — that’s how Dexis goes “all in.” How will you? If you are passionate about this opportunity, apply now! Only those applicants who meet the above criteria will be contacted for interview. Dexis is an Equal Opportunity Employer, and does not discriminate on the basis of race, color, sex, national origin, religion, pregnancy, disability, age, genetic information, military service, veteran status, ethnicity, citizenship, sexual orientation, gender identity, marital status, childbirth and related medical conditions, including lactation, or any other protected class under applicable law.

Location: Spain About the Opportunity Dentons Europe is currently seeking a Information Security Engineer, specializing in Microsoft cloud technologies to play a key role in strengthening and evolving our security landscape. In this role, you will design and implement security controls across cloud and hybrid environments, with a strong focus on Microsoft 365 and Microsoft Azure. You will operate at the intersection of architecture and execution shaping security decisions, guiding technical teams, and ensuring that systems, applications, and integrations meet the firm’s security, compliance, and reliability standards. As a trusted advisor and technical authority, you will work closely with Information Security, IT, and business stakeholders across Europe, embedding security into the design and delivery of technology solutions while continuously improving the organization’s overall security posture. This is an opportunity to make a visible, enterprise-wide impact in a complex, international environment. You will primarily be accountable for Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments. Act as a cybersecurity subject-matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation. Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards. Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset. Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture. Lead end-to-end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams. Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture. Provide advanced troubleshooting and technical leadership for complex or high-impact security issues. Develop and maintain security documentation, standards, reports, and control frameworks. Requirements Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering Advanced expertise in Microsoft Azure security, including at least two of: Defender for Cloud Microsoft Sentinel Infrastructure / Network Security (IaaS) Application and API security Storage and database security Advanced expertise in Microsoft 365 security, including at least two of: Microsoft Entra ID, identity and access management Microsoft Purview, data protection and compliance Microsoft 365 Defender suite Intune / Endpoint Manager Strong understanding of: Security architecture principles, including Zero Trust, defense-in-depth and least privilege Hybrid cloud environments and system integrations Vulnerability management, including analyzing penetration testing and coordinating remediation of results API security and modern integration technologies Scripting and automation skills, e.g., PowerShell, Python or Bash Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities Professional experience Proven experience designing and implementing secure solutions in Microsoft technologies-based enterprise environments Experience working with large-scale or multi-country IT environments Solid exposure to security operations, incident response and security tooling Experience collaborating across infrastructure, development and business teams Benefits Remuneration and benefits package will reflect the successful candidates experience and country where hired. Please apply with an English resume

Location: Czechia About the Opportunity Dentons Europe is currently seeking a Information Security Engineer, specializing in Microsoft cloud technologies to play a key role in strengthening and evolving our security landscape. In this role, you will design and implement security controls across cloud and hybrid environments, with a strong focus on Microsoft 365 and Microsoft Azure. You will operate at the intersection of architecture and execution shaping security decisions, guiding technical teams, and ensuring that systems, applications, and integrations meet the firm’s security, compliance, and reliability standards. As a trusted advisor and technical authority, you will work closely with Information Security, IT, and business stakeholders across Europe, embedding security into the design and delivery of technology solutions while continuously improving the organization’s overall security posture. This is an opportunity to make a visible, enterprise-wide impact in a complex, international environment. You will primarily be accountable for Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments. Act as a cybersecurity subject-matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation. Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards. Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset. Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture. Lead end-to-end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams. Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture. Provide advanced troubleshooting and technical leadership for complex or high-impact security issues. Develop and maintain security documentation, standards, reports, and control frameworks. Requirements Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering Advanced expertise in Microsoft Azure security, including at least two of: Defender for Cloud Microsoft Sentinel Infrastructure / Network Security (IaaS) Application and API security Storage and database security Advanced expertise in Microsoft 365 security, including at least two of: Microsoft Entra ID, identity and access management Microsoft Purview, data protection and compliance Microsoft 365 Defender suite Intune / Endpoint Manager Strong understanding of: Security architecture principles, including Zero Trust, defense-in-depth and least privilege Hybrid cloud environments and system integrations Vulnerability management, including analyzing penetration testing and coordinating remediation of results API security and modern integration technologies Scripting and automation skills, e.g., PowerShell, Python or Bash Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities Professional experience Proven experience designing and implementing secure solutions in Microsoft technologies-based enterprise environments Experience working with large-scale or multi-country IT environments Solid exposure to security operations, incident response and security tooling Experience collaborating across infrastructure, development and business teams Benefits 25 days of vacation/year 3 sick days/year Meal lump-sum MultiSport card Multipass card Home Office allowance

Location: Poland About the Opportunity Dentons Europe is currently seeking a Information Security Engineer, specializing in Microsoft cloud technologies to play a key role in strengthening and evolving our security landscape. In this role, you will design and implement security controls across cloud and hybrid environments, with a strong focus on Microsoft 365 and Microsoft Azure. You will operate at the intersection of architecture and execution shaping security decisions, guiding technical teams, and ensuring that systems, applications, and integrations meet the firm’s security, compliance, and reliability standards. As a trusted advisor and technical authority, you will work closely with Information Security, IT, and business stakeholders across Europe, embedding security into the design and delivery of technology solutions while continuously improving the organization’s overall security posture. This is an opportunity to make a visible, enterprise-wide impact in a complex, international environment. You will primarily be accountable for Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments. Act as a cybersecurity subject-matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation. Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards. Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset. Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture. Lead end-to-end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams. Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture. Provide advanced troubleshooting and technical leadership for complex or high-impact security issues. Develop and maintain security documentation, standards, reports, and control frameworks. Requirements Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering Advanced expertise in Microsoft Azure security, including at least two of : Defender for Cloud Microsoft Sentinel Infrastructure / Network Security (IaaS) Application and API security Storage and database security Advanced expertise in Microsoft 365 security, including at least two of: Microsoft Entra ID, identity and access management Microsoft Purview, data protection and compliance Microsoft 365 Defender suite Intune / Endpoint Manager Strong understanding of: Security architecture principles, including Zero Trust, defense-in-depth and least privilege Hybrid cloud environments and system integrations Vulnerability management, including analyzing penetration testing and coordinating remediation of results API security and modern integration technologies Scripting and automation skills, e.g., PowerShell, Python or Bash Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities Professional experience Proven experience designing and implementing secure solutions in Microsoft technologies-based enterprise environments Experience working with large-scale or multi-country IT environments Solid exposure to security operations, incident response and security tooling Experience collaborating across infrastructure, development and business teams Benefits Private medical healthcare provided by Medicover MultiSport card Benefit Cafeteria system Option to join a private insurance plan An additional day off for your birthday Tailored learning & development opportunities Hybrid work model with a modern office in Warsaw city center

Location: Remote - United Kingdom Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as Twilio’s next Security Engineer, Incident Response About the job The Security Incident Response Team (SIRT) is looking for a Security Engineer who is passionate about solving Twilio’s mission of security and reliability by working across the organization to lead the technical response to security events and incidents across Twilio’s global infrastructure, services and applications by effectively conducting triage, containment, remediation and driving post-incident betterments.  You will work within a team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions. You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program. Responsibilities In this role, you’ll: Lead and support the response to all security events and incidents across Twilio’s complex global infrastructure, services and applications. Be responsible for documentation of incidents and projects you work on and craft best practices as runbooks and standard operating procedures to share knowledge across teams. Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity. Work to improve Twilio’s security and reliability posture by driving identified betterments from security events and incidents. Rapidly acquire new technical skills and knowledge in a fast-paced, highly disruptive industry environment. Own the security incident lifecycle, respond to incidents and participate in on-call rotation and participate in RCAs for security incidents. Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work. Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale. Qualifications Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table! Required: Proven experience: 3+ years of security incident response in a production-cloud environment Subject-matter expert on security issues and technologies Ability to utilize AI for comprehensive, complex security incident response activities delivering high fidelity detections Advanced knowledge of service-oriented architectures, as well as experience with security tools and technologies fit for a cloud environment Experience working across a technology stack on difficult security challenges and initiatives Experience with SIEM platforms and the ability to extend their functionality Experience with SOAR tools and automating manual security processes Experience in either AWS, GCP, or other large cloud platform Excellent written and verbal communication skills Ability to influence and build effective working relationships with every level of the organization. Desired: AI Model Security & Posture Management: Support Implementation of  controls and safeguards to prevent AI vulnerabilities, such as prompt injections, model evasion, and data poisoning AI-Driven Threat Response: Utilize GenAI and LLM-based security use cases to rapidly interpret alerts, reduce false positives, and contextualize threat data Artifact & Evidence Triage: Collects intrusion artifacts and forensically sound images to analyze malware, trojans, and source code. Threat Intelligence Integration: Monitors external vendor data and threat intelligence to analyze trends and proactively defend against emerging risks. Location This role will be remote, and based in Ireland or U.K. Travel We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings. What We Offer Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location. Twilio thinks big. Do you? We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call Twilio Magic . Additionally, we empower employees to build positive change in their communities by supporting their volunteering and donation efforts. So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for, please consider other open positions. . Stay alert to recruitment fraud We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @ twilio.com email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps. . Twilio is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.

Location: Remote-Friendly (Travel-Required) | San Francisco, CA | Seattle, WA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Application Security team secures the systems that build, serve, and increasingly are Claude — and as Anthropic's footprint grows, that mandate now extends to companies and codebases we bring in from outside. This role establishes that function. You'll own security due diligence and secure integration for Anthropic's acquisitions — assessing a target's security posture pre-close, writing the security risk readout for leadership, and after close, bringing acquired systems up to Anthropic's bar. Security has been part of every deal to date, but this is the first dedicated role for it: you'll formalize the playbook, the risk model, and the tooling, and make them repeatable. This is an AppSec role first. You'll be an active member of the Application Security team — same rituals, same on-run rotation, same tooling, working alongside engineers securing Anthropic's own agentic product surfaces. The expectation is the same too: we use Claude as our primary tool, and you're expected to automate the repeatable parts of diligence and integration as you go, so each acquisition is easier than the last. When deal flow is quiet, you'll pick up core AppSec project work; when it's active, M&A is your priority. We're upfront that the center of gravity here is M&A rather than core product security. It's burstier, more assessment-heavy, and operates on confidential, time-sensitive work. If you like parachuting into an unfamiliar codebase under time pressure and turning it into a clear risk picture for leadership, this is that job. Key responsibilities Lead pre-close security due diligence on prospective acquisitions — coordinate external penetration testing, threat-model the target's architecture, assess security controls, and deliver the security risk readout for leadership ahead of close and integration planning Drive post-close security integration — stand up static and dynamic analysis coverage on acquired codebases, track high- and critical-severity remediation to closure, fold acquired assets into bug bounty scope, and onboard repositories to Anthropic's automated vulnerability remediation and reporting systems Coordinate adjacent security engineering teams (supply chain, cloud, corporate security, detection & response) on their portions of each integration Work across a wide set of stakeholders on every deal — corporate development, legal, security leadership, and the engineering teams inheriting acquired systems internally; engineering and security counterparts at the target company externally — translating between them and keeping the security workstream legible to all of them Formalize and scale Anthropic's M&A security playbook — risk-scoring model, diligence runbook, integration checklist — and turn as much of it as possible into Claude-powered tooling rather than manual process Share the team's operational on-run rotation (bug bounty escalations, launch consults, incident response), swapping out during periods of active deal work Contribute to core AppSec projects between deals — secure design reviews, threat modeling for agentic systems, and the team's security automation roadmap Minimum qualifications Hands-on application and infrastructure security experience, including cloud and containerized environments Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript Practical threat-modeling and vulnerability-identification skills — you've found and reasoned about real bugs in real systems Comfort operating with high autonomy, ambiguity, and tightly-held confidential context Clear written and verbal communication across varied audiences — executives, legal and corporate development partners, and engineering counterparts at an acquired company Preferred qualifications 7+ years in application security, security consulting, or security architecture Prior M&A security due diligence, third-party security assessment, or technical due diligence experience Experience standing up or scaling SAST/DAST, bug bounty, or vulnerability management coverage across multiple codebases Track record of building security automation or tooling rather than relying solely on manual review Familiarity with using LLMs as a core part of your security workflow Experience securing agentic, code-execution, or LLM-integrated systems Representative projects Point Anthropic's internal LLM-driven code analysis and AI-assisted scanning at an acquired repository nobody here has seen, and turn the output into a prioritized remediation plan in days rather than weeks Design the risk-scoring framework Anthropic uses to compare security posture across acquisitions of different shapes and sizes Build the automation that onboards an acquired codebase to Anthropic's vulnerability dashboard, dependency auto-patching, and bounty scope without a human running a checklist Write the security risk memo for a live deal and present it to corporate development and security leadership The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Remote - Ireland Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as Twilio’s next Security Engineer, Incident Response About the job The Security Incident Response Team (SIRT) is looking for a Security Engineer who is passionate about solving Twilio’s mission of security and reliability by working across the organization to lead the technical response to security events and incidents across Twilio’s global infrastructure, services and applications by effectively conducting triage, containment, remediation and driving post-incident betterments.  You will work within a team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions. You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program. Responsibilities In this role, you’ll: Lead and support the response to all security events and incidents across Twilio’s complex global infrastructure, services and applications. Be responsible for documentation of incidents and projects you work on and craft best practices as runbooks and standard operating procedures to share knowledge across teams. Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity. Work to improve Twilio’s security and reliability posture by driving identified betterments from security events and incidents. Rapidly acquire new technical skills and knowledge in a fast-paced, highly disruptive industry environment. Own the security incident lifecycle, respond to incidents and participate in on-call rotation and participate in RCAs for security incidents. Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work. Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale. Qualifications Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table! Required: Proven experience: 3+ years of security incident response in a production-cloud environment Subject-matter expert on security issues and technologies Ability to utilize AI for comprehensive, complex security incident response activities delivering high fidelity detections Advanced knowledge of service-oriented architectures, as well as experience with security tools and technologies fit for a cloud environment Experience working across a technology stack on difficult security challenges and initiatives Experience with SIEM platforms and the ability to extend their functionality Experience with SOAR tools and automating manual security processes Experience in either AWS, GCP, or other large cloud platform Excellent written and verbal communication skills Ability to influence and build effective working relationships with every level of the organization. Desired: AI Model Security & Posture Management: Support Implementation of  controls and safeguards to prevent AI vulnerabilities, such as prompt injections, model evasion, and data poisoning AI-Driven Threat Response: Utilize GenAI and LLM-based security use cases to rapidly interpret alerts, reduce false positives, and contextualize threat data Artifact & Evidence Triage: Collects intrusion artifacts and forensically sound images to analyze malware, trojans, and source code. Threat Intelligence Integration: Monitors external vendor data and threat intelligence to analyze trends and proactively defend against emerging risks. Location This role will be remote, and based in Ireland or U.K. Travel We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings. What We Offer Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location. Twilio thinks big. Do you? We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call Twilio Magic . Additionally, we empower employees to build positive change in their communities by supporting their volunteering and donation efforts. So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for, please consider other open positions. . Stay alert to recruitment fraud We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @ twilio.com email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps. . Twilio is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.

Location: Hybrid - San Francisco, New York City, London About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We are looking for a Security Software Engineer, Detection & Response, to build the telemetry, logging, and response systems for our Detection & Response team. This is a builder role, not a queue-triage role. You will build detection and response as software across a multi-cloud fleet of servers, containers, and endpoints, and test where AI and agents can safely take work off responders. This is a hybrid role based in San Francisco, New York City, or London, with three days a week in the office. What you’ll do Deploy and operate telemetry at fleet scale with osquery and extended Berkeley Packet Filter (eBPF) sensors across servers, containers, and endpoints, and own performance overhead, staged rollouts, canaries, and rollbacks Build and maintain the logging and security information and event management (SIEM) pipeline behind detection, including ingestion, normalization, enrichment, storage, and cost, with detections written as code with tests, code review, and continuous integration and continuous delivery (CI/CD) Automate response with tooling for host isolation, credential revocation, evidence collection, and enrichment, and test where AI and agents can safely take work off responders Strengthen the corporate security stack, including endpoint detection and response (EDR) and fleet management across Mac, Windows, and Linux, email security, and GitHub controls Join the on-call rotation, work with the managed security operations center (SOC) on escalations, and automate evidence collection for System and Organization Controls 2 (SOC 2), Payment Card Industry Data Security Standard (PCI DSS), and ISO audits What you need 5+ years in security, infrastructure, or platform engineering, writing production code in a compiled language (Go or Rust preferred) and a scripting language (Python or Bash) Deployed and operated agents, sensors, or telemetry collectors at fleet scale, such as osquery or eBPF-based tooling Operated AWS infrastructure, including networking, identity and access management (IAM), logging, and container workloads, with infrastructure as code in Terraform Built and run a data or logging pipeline, including SIEM operations and SQL for investigation Bonus if you Worked with managed SOC providers or security orchestration, automation, and response (SOAR) platforms Built or contributed to open source security or observability tooling Know serverless platforms and API security Benefits & Compensation: Competitive compensation package, including equity. Inclusive Healthcare Package. Learn and Grow - we provide mentorship and send you to events that help you build your network and skills. Flexible Time Off. We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed. The San Francisco, CA base pay range for this role is $208,000-$312,000. This salary range is an estimate. Actual salary will be based on job-related skills, experience, and location. The total compensation package also includes benefits and equity-based compensation. Your recruiter can share more about the specific pay range for your location during the hiring process. Disclosures: Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data. Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

Location: Baku Workplace: onsite ABOUT YOU Xsolla seeks a security engineer to join a new security team during a critical build-out phase. You work across application security and infrastructure security - reviewing code, hardening cloud environments, supporting incident response, and partnering with engineering teams to improve security posture across the company. This is a generalist role well-suited to an early-team hire. You are comfortable working across domains rather than specializing in one, and you grow into deeper expertise as the team and program mature. You collaborate closely with the security program manager and work directly with engineering teams on secure design, findings, and remediation. Our tech stack includes GCP, vSphere/ESX, Kubernetes and container workloads, MariaDB, CockroachDB, Go, PHP, and Python. You do not need expertise in all of these, but you are comfortable navigating a mixed environment and learning what you need. As always true in job descriptions, there is an intangible value that is hard to capture. We look for a diverse set of perspectives and skills. Even if you don't match every requirement, we encourage you to apply if you think you can be highly successful in this role.   ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Perform Application Security Reviews - Conduct code reviews, run SAST / DAST and dependency scanning tools, and work with engineering to resolve findings. Participate in Threat Modeling - Contribute to threat modeling sessions for new features and architecture changes, helping identify risks early in the design process. Help Harden Cloud and Container Infrastructure - Work on GCP, Kubernetes, and IAM configurations to strengthen the security of our cloud and container environments. Participate in Pen Test Remediation - Help triage penetration test findings and work with engineering teams to implement fixes, coordinating closely with the security program manager. Partner with Engineering on Secure Design - Review architectures, advise on secure implementation patterns, and help teams make informed security decisions. Identify and Track Security Findings - Document findings, assess severity, and track them through the remediation lifecycle to resolution. Support Incident Response - Help investigate and document security events, contribute to root-cause analysis, and support containment efforts. Write Async Security Guidance - Produce advisories, best-practice documentation, and practical guidance that helps engineering teams build securely across time zones. Support Product Security - Work with partners on the security posture of customer-facing services, contributing to reviews and assessments as needed. What You Bring Foundational AppSec Knowledge - Understands common vulnerability classes, secure coding patterns, and how to conduct a meaningful code review. Cloud Environment Exposure - Has worked with GCP or a similar cloud provider and is comfortable with IAM , networking, and container concepts. Code Literacy - Reads and reviews code in one or more of: Go, Python, PHP. Does not need to be a software engineer, but can follow logic and spot issues. Security Tooling Familiarity - Has used or is familiar with SAST , DAST , or dependency scanning tools and understands how they fit into a development workflow. Strong Written Communication - Writes clear, concise async documentation - findings, advisories, guidance - that works across time zones and audiences. Collaborative Mindset - Partners effectively with engineering teams. Focuses on helping teams build securely rather than just identifying problems. Self-Directed with Growth Mindset - Eager to learn, comfortable with ambiguity, and able to make progress with minimal direction in a new and evolving team. Nice to Have Threat modeling experience; Hands-on Kubernetes or container security experience; Infrastructure security background - Linux, networking, vSphere/ ESX; Familiarity with NIST CSF , PCI , SOC 2, or ISO 27001 from a technical perspective; Detection engineering or incident response experience; Experience building security automation or internal tooling; Relevant certifications ( OSCP , GWAPT , CKS , or similar hands-on certs). Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.

Location: Baku Workplace: onsite ABOUT YOU We are looking for a junior application security specialist to join a growing security team at Xsolla. This is a hands-on role where you will work closely with senior specialists to identify, assess, and help remediate security vulnerabilities across our products and infrastructure. You will be involved in day-to-day AppSec work - code reviews, vulnerability triage, threat modeling, and security testing. You are curious, detail-oriented, and eager to develop deep expertise in application security. You do not need to have all the answers, but you ask the right questions and follow through. This is a strong learning environment. You will be exposed to real-world security challenges in a payment platform operating at scale, and supported by experienced security specialists who will help you grow.   ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Triage Security Findings - Assess incoming bug bounty reports and scanner findings. Evaluate validity, calculate real severity, and escalate appropriately with clear written summaries. Assist with Vulnerability Assessments - Participate in security assessments of web applications and APIs. Help identify and document risks in new features and existing systems. Write Clear Security Documentation - Document findings, reproduction steps, and remediation guidance in a way that engineering teams can act on. Support Threat Modeling - Participate in threat modeling sessions. Learn to identify trust boundaries, data flows, and attack surfaces in system designs. Monitor Security Tools - Help operate SAST , DAST , and dependency scanning tooling. Track findings, reduce noise, and support remediation workflows. Support Code Reviews - Review code for common vulnerability classes under guidance of senior specialists. Learn to identify security issues across PHP, Python, and Go codebases. Stay Current - Follow developments in the security community. Bring awareness of new vulnerability classes, CVEs, and attack techniques relevant to our stack. What You Bring Web Security Fundamentals - Solid understanding of common vulnerability classes: OWASP Top 10, CSRF , XSS , IDOR , SQL injection, open redirect, authentication and session management weaknesses. You understand root causes, not just names. Web and Browser Fundamentals - Solid understanding of how web applications work: HTTP request/response cycle, client-server model, REST APIs, how browsers handle same-origin policy, cookies and their attributes, and CORS . This is the foundation everything else builds on. Security Testing Tools - Hands-on experience with Burp Suite or similar web application security testing tools. You have used them to intercept, modify, and replay requests — not just run automated scans. Vulnerability Documentation - Able to reproduce a vulnerability and write it up clearly: reproduction steps, proof of concept, and impact statement. Findings that engineering teams cannot reproduce or understand do not get fixed. Secure Development Awareness - Familiarity with foundational secure coding concepts: input validation, output encoding, parameterized queries, and least privilege. Code Readability - Ability to read and follow code in at least one language relevant to web security - PHP, Python, JavaScript, or Go. You don't need to be a developer, but you need to follow logic and spot security-relevant patterns. Analytical Thinking - You reason through problems methodically. You can explain not just what a vulnerability is but why it exists, how it is exploited, and what fixing it actually requires. Clear Written Communication - You write findings and summaries that are precise, reproducible, and useful to the engineers who need to act on them. Curiosity and Initiative - You dig into problems rather than stopping at the surface. When something looks wrong, you investigate before concluding Nice to Have Participation in bug bounty programs or CTF competitions; Basic scripting ability for automation - Python or Bash; Familiarity with CI/CD pipelines and where security tooling fits; Exposure to cloud environments - GCP, AWS, or Azure; Relevant coursework or certifications - eWPT, CEH , PortSwigger Web Security Academy progress, or similar entry-level credentials. Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.

Location: New Cairo City, Egypt About us: Where elite tech talent meets world-class opportunities! At Xenon7, we work with leading enterprises and innovative startups on exciting, cutting-edge projects that leverage the latest technologies across various domains of IT including Data, Web, Infrastructure, AI, and many others. Our expertise in IT solutions development and on-demand resources allows us to partner with clients on transformative initiatives, driving innovation and business growth. Whether it's empowering global organizations or collaborating with trailblazing startups, we are committed to delivering advanced, impactful solutions that meet today’s most complex challenges. About the Client: Join one of Egypt’s premier financial institutions, renowned for its extensive suite of banking services, including Institutional Banking, Personal Banking, and Islamic Banking. With a global presence through over 50 branches and correspondents, we serve a diverse and dynamic clientele. As we embark on a groundbreaking digital transformation journey, we are committed to leveraging the latest technologies to establish a state-of-the-art data architecture that will redefine our performance and service delivery. Key Responsibilities: Drive "Compliance and Security by Design": Proactively architect and embed compliance guardrails directly into the lifecycle of all Data and AI initiatives, anticipating evolving Central Bank of Egypt (CBE) cyber security regulations and the Egyptian Data Protection Law to eliminate compliance risks before models and data pipelines are deployed. Execute Predictive Threat Modeling for AI: Lead advanced, preventative threat modeling and vulnerability assessments tailored specifically for machine learning models, LLMs, and big data repositories, neutralizing emerging AI-specific threats (such as data poisoning, adversarial attacks, and model inversion) during the early design phases. Establish Continuous Automated Monitoring: Implement and manage automated, real-time vulnerability scanning and continuous compliance monitoring systems across the bank's data infrastructure, ensuring any drift from security standards is detected and remediated before it can be exploited. Foster a Proactive Security Culture with AI Teams: Partner closely with data scientists, AI engineers, and data governance teams to champion secure coding and data handling practices, conducting proactive risk-readiness workshops to prevent human-error vulnerabilities in algorithmic workflows. Develop Next-Gen Incident-Prevention Playbooks: Devise and stress-test predictive incident-response playbooks tailored for AI assets, leveraging global threat intelligence to simulate potential data breaches and algorithmic failures, ensuring the bank’s defenses are常に (always) one step ahead of sophisticated cyber threats. Requirements Professional Experience: 4 + years of progressive experience in cybersecurity compliance, risk management, or vulnerability assessment, with a mandatory and proven track record of working within a regulated banking or financial services institution. Educational Background & Certifications: Bachelor’s degree from a recognized institution in Computer Science, Cybersecurity, Computer Engineering, or a strictly relevant technical field. Possessing elite industry certifications such as CISSP, CISM, CRISC, or CISA is highly preferred. Regulatory & AI Domain Expertise: Comprehensive understanding of the Central Bank of Egypt (CBE) cybersecurity frameworks and regulations, as well as the Egyptian Data Protection Law , paired with foundational knowledge of data science workflows, big data architecture, and emerging AI security frameworks (e.g., OWASP Top 10 for LLMs). Technical Compliance & Threat Modeling Skills: Demonstrated expertise in deploying automated vulnerability scanning tools and leading predictive threat modeling exercises specifically tailored to mitigate risks like data poisoning, adversarial attacks, and unauthorized data exposure within complex data pipelines. Benefits Attractive, market-leading salary package Clear career advancement path with professional development opportunities

Location: Hong Kong, Hong Kong SAR OKX will be prioritising applicants who have a current right to work in Hong Kong, and do not require OKX's sponsorship of a visa. Please note that Hong Kong is a group-level service hub, and OKX does not carry on a business of operating a virtual asset trading platform in Hong Kong. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Opportunity We are looking for a Staff Mobile Security Engineer to join our Mobile Security team, where you will play a key role in identifying and mitigating security vulnerabilities across OKX's mobile applications and platforms. This is a high-ownership role at the intersection of offensive security, mobile engineering, and platform protection — you will work closely with development, operations, and compliance teams to ensure security is embedded at every layer of our mobile stack. You bring deep expertise in mobile application security, offensive techniques, and secure coding practices. You are also fluent in AI-assisted development and bring the discipline to build, maintain, and continuously improve your own AI engineering workflows. What You'll Be Doing Identify and address security vulnerabilities in mobile code, systems, and networks through manual review, automated tooling, and threat modelling. Manage and optimise application security tools, processes, and alerts to maintain a strong security posture. Validate and respond to Bug Bounty submissions, triaging findings and coordinating remediation with engineering teams. Produce detailed security findings reports and present them to both technical and management audiences, contributing to real-world attack prevention. Collaborate with development teams to implement and champion secure coding practices across iOS and Android platforms. Apply AI tools to accelerate security research, automate vulnerability detection workflows, and improve the efficiency of threat analysis. Work alongside operations and compliance teams to ensure security is a consistent priority across the organisation. Participate in incident response and management activities. Stay current on the latest offensive security techniques, application security threats, and industry best practices. What We Look For In You 5+ years of experience in mobile application security or offensive security, with hands-on expertise in iOS and/or Android platforms. In-depth understanding of security risks, vulnerabilities, and concepts in mobile and web applications. Proficient in code review across Kotlin, Swift, TypeScript, or JavaScript, with a strong grasp of application security threats. Able to create proof-of-concepts (PoCs) to demonstrate vulnerabilities, review patch code for adherence to standards, and collaborate with repository owners on remediation. Actively uses AI tools in your security engineering workflow — including building AI-leveraged workflows and codifying repeatable agent skills so tools like Claude Code or Codex deliver reliably on real production work. Strong analytical and problem-solving abilities with excellent verbal and written communication skills. Nice-To-Haves Prior experience developing mobile security SDKs at scale — products with a daily active user base of over ten million. Experience in large-scale business risk control projects, or practical experience in threat intelligence, business risk prevention, and countermeasures against black and grey industries. In-depth reverse engineering of major apps from first-tier vendors, or other projects that demonstrate strong reverse engineering capabilities. Proficiency in ARM assembly, with the ability to implement deep-level countermeasures at the native and application layers. Experience with device fingerprint recognition — including simulating new devices through methods such as flashing, modification, and application cloning. Ability to work across multiple mobile platforms simultaneously. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! #LI-ML1 #LI-ONSITE Please note that Hong Kong is a group-level service hub, and OKX does not carry on a business of operating a virtual asset trading platform in Hong Kong. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Hong Kong, Hong Kong SAR; Singapore, Singapore OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Opportunity As a Technical Expert, you will lead the development of the company’s core security engineering and DevSecOps capabilities, with a strong focus on security product development, platform engineering, and SDK /Agent development . The ideal candidate should demonstrate deep security expertise, broad technical coverage, strong hands-on engineering capability, and exceptional influence in driving security governance across business teams . What You’ll Be Doing Lead the architecture and core development of the company’s end-to-end DevSecOps platform, security products, and SDKs/Agents , covering code, build, artifacts, images, deployment, and runtime security. Own the design and development of RASP / Java Agent runtime protection , leveraging ASM, ByteBuddy, and Java Instrumentation for bytecode enhancement, runtime hooks, detection and blocking engines, while continuously improving performance, stability, and compatibility. Build and integrate SAST, DAST, IAST, SCA, code security scanning, and image security scanning into CI/CD workflows, and drive deep integration of tools such as SonarQube and Coverity to form a closed loop of scanning, gating, remediation, and re-validation. Drive core application security protection and offensive/defensive capabilities across scenarios such as XSS, SQL injection, SSRF, deserialization, command execution, authentication/authorization flaws, privilege escalation, and API security . Advance AI-Native Security Engineering by applying LLMs and AI Agents to vulnerability analysis, rule generation, false-positive reduction, remediation suggestions, security knowledge management, and workflow automation, while building deep understanding of their architecture, principles, and security implications. Partner closely with business engineering teams to drive security standards, integration rules, quality gates, risk classification, remediation workflows, and overall security governance adoption. Collaborate with engineering, architecture, operations, QA, and business stakeholders to solve complex security problems and turn them into scalable product capabilities, engineering solutions, and governance mechanisms. What We Look For In You Strong fundamentals in computer science and security, with deep understanding of operating systems, networking, compilers/ JVM internals, distributed systems, application security, cloud-native security, and software supply chain security , with both breadth and depth in security technologies. Expert-level Java proficiency , especially in JVM internals, ClassLoader , Java Agent, ASM, ByteBuddy, bytecode instrumentation, profiling, and performance tuning ; proficient in Python or Golang as well. Proven hands-on experience with RASP, SAST, DAST, IAST, SCA, image security, and code security scanning , with the ability to independently design, integrate, and productionize security capabilities. Strong offensive and defensive security experience , with deep understanding of vulnerability root causes, exploitation techniques, detection logic, bypass methods, and remediation strategies in web, API, and microservice environments. Strong practical experience with LLMs and AI Agents , plus deep understanding of model architecture, agent design, tool invocation, context engineering, evaluation methods, and the impact of AI on both security engineering and attacker capabilities. Strong engineering and product mindset, capable of leading the design and implementation of security products, platform modules, and SDKs/Agents while balancing security effectiveness, performance overhead, integration cost, and operability . Strong ownership, communication skills, and cross-functional influence, with a proven ability to drive business teams on security governance, policy adoption, and remediation outcomes. Preferred Qualifications Background from top-tier Internet companies, cloud providers, or leading cybersecurity vendors ; Experience leading DevSecOps platforms, application security platforms, RASP systems, code scanning platforms, or cloud-native security platforms ; Strong experience in security product development, SDK /Agent development, vulnerability research, penetration testing, red/blue team exercises, or incident response ; Hands-on experience in AI + Security initiatives such as security copilots, intelligent rule generation, automated vulnerability analysis, or remediation recommendation systems. Perks & Benefits Competitive total compensation package L&D programs and education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .