Location: Serbia
Who we are
Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in minutes—it just works and is always free for the first 200 endpoints with no functional limits.
By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment (without requiring a VPN), Action1 eliminates routine IT labor, helps prevent ransomware and security risks, and protects the digital employee experience.
In 2025, Action1 was recognized by
Inc. 5000 as the fastest-growing private software company in America
.
The company is founder-led by
Alex Vovk and Mike Walters
, entrepreneurs who previously founded Netwrix, a multi-billion-dollar cybersecurity company.
Requirements
The Role:
We are looking for a Product Value Team Lead to lead our product content initiatives.
What you’ll do:
Lead a team of engineers in delivering high-quality product content and capabilities.
Oversee the development and delivery of product content, including:
- scripts
- data sources
- application catalogs
- software updates
- vulnerability data
- reports
Guide technical decisions from solution design through development and production rollout.
Own automation initiatives by designing, implementing, and maintaining scalable pipelines and workflows for content generation, validation, and deployment.
Improve the efficiency and reliability of our content delivery processes.
Apply AI technologies to enhance how we create and deliver product content.
What we're looking for:
Strong software engineering fundamentals and hands-on experience owning production systems.
Excellent knowledge of Node.js, JavaScript, TypeScript, and Python.
Experience building and operating AWS services in production.
Nice to have:
Experience writing automated tests.
Proficiency in SQL.
Experience with runtime isolation and sandboxing for sensitive execution.
Experience in B2B SaaS, security, compliance, or data governance.
Experience building high-load products with numerous endpoints.
Benefits
What we offer:
Fully remote work, giving you the flexibility you need in the modern world
A collaborative environment encouraging you to own your domain and implement best practices
Stable income, benefits, flexible working hours, and opportunities for promotion.
Friendly and professional peers, eager to help and help you grow.
A multitude of interesting challenges and opportunities.
Location: Serbia
Who we are:
Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in minutes, it just works—and is always free for the first 200 endpoints, with no functional limitations. By pioneering autonomous OS and third-party patching, peer-to-peer patch distribution, and real-time vulnerability assessment without requiring a VPN, Action1 eliminates routine IT labor, helps prevent ransomware and other security risks, and protects the digital employee experience. In 2025, Action1 was recognized by the Inc. 5000 as the fastest-growing private software company in America. Action1 is founder-led by Alex Vovk and Mike Walters, entrepreneurs who previously founded Netwrix, a multibillion-dollar cybersecurity company.
The Role
We are looking for a Product Security Engineer to join the team responsible for securing Action1’s multi-tenant SaaS platform. In this role, you will work closely with engineering, product, and security teams to identify risks early, support vulnerability handling, strengthen secure development practices, and make product security practical, clear, and actionable. This is a hands-on role for someone who understands both software engineering and cybersecurity, enjoys working directly with developers, and wants to build security into the product without slowing teams down unnecessarily.
What you'll do:
Support Product Security Incident Response Team (PSIRT) and vulnerability-handling activities
Validate, triage, track, and coordinate security reports
Provide practical remediation guidance to engineering teams
Help validate security fixes and reduce product security risks
Review code, APIs, and system architecture to identify security issues early
Conduct threat modeling and security design reviews
Improve security automation within engineering workflows
Support SAST, SCA, secrets scanning, and other security controls
Maintain software bills of materials (SBOMs), dependency visibility, and remediation follow-up
Support security assessments, vulnerability assessments, and penetration testing
Maintain vulnerability-handling playbooks, product security procedures, and incident response runbooks
Requirements
What we are looking for:
3+ years of experience in product security, application security, DevSecOps, or a related cybersecurity field
Strong software engineering background and the ability to work effectively with engineering teams
Understanding of application, API, infrastructure, and software supply chain security risks
Experience applying cloud security concepts and practices
Understanding of identity and access management, network security, logging, monitoring, and secure cloud architecture patterns
Familiarity with vulnerability management, incident response, security assessments, and secure software development lifecycle practices
Experience with threat modeling and security design reviews
Strong communication skills, including professional communication with external security researchers and vendors
Ability to work independently and collaboratively in a fast-moving environment
Nice to have:
Genuine interest in cybersecurity and motivation to grow as a product security expert
Hands-on experience with AWS security controls, best practices, and architecture patterns
Hands-on experience with C++ or JavaScript
Experience with security testing and automation using scripts, APIs, CI/CD pipelines, or specialized tools
Experience conducting threat modeling for SaaS, API, cloud, or on-premises product components
Experience with SBOM generation, dependency visibility, or software supply chain security
Benefits
What we offer:
A fully remote work environment
The opportunity to work on a real-world security product used by IT and security teams
High ownership and a direct impact on product security practices
Close collaboration with engineering, product, and security teams
A fast-growing software company with low bureaucracy and practical decision-making
The opportunity to improve security processes, automation, and engineering workflows
A supportive team that values clear thinking, ownership, and continuous learning
Location: Sliema, Malta
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
About the Opportunity
The Workplace IT Specialist ensures a reliable, secure, and high-quality workplace technology experience for employees across our EEA-region offices. Based in our Malta office, this role is the primary owner of local office IT and workplace facilities, and the first-line point of contact for EEA-region user support. The role also provides remote backup and support for other EEA offices as needed, and works as part of our Global IT team.
Second-line support for SaaS platforms and network infrastructure is handled by the broader Global IT team; this role focuses on delivering first-line support and knowing when to escalate. The ideal candidate is customer-focused, technically curious, works well independently, and looks for ways to improve day-to-day IT operations through automation and process improvements.
What You’ll Be Doing
Deliver responsive technical support for hardware, software, operating systems, business applications, and workplace technology, ensuring timely resolution of employee issues for the Malta office and EEA-region users.
Provide first-line, user-facing support for our collaboration, productivity, and business applications, helping employees resolve day-to-day usage questions.
Manage the local endpoint lifecycle — device provisioning, deployment, maintenance, troubleshooting, asset inventory, and secure device retirement — in line with Global IT standards and security policies.
Partner with HR and hiring managers to deliver smooth onboarding and offboarding: device preparation, account provisioning, access requests, and introducing new employees to IT systems, security practices, and workplace technology.
Serve as the primary point of contact for the local office's workplace technology, including conference room AV systems, video conferencing, VOIP, printers, CCTV, access control systems, and other office infrastructure.
Troubleshoot first-line endpoint, networking, Wi-Fi, VPN, identity, and access issues, escalating to and collaborating with the Global IT Operations team on anything beyond first-line.
Support Global IT initiatives, office moves, technology refreshes, and security projects as they affect the local office and the EEA region.
Create and maintain knowledge base articles, standard operating procedures (SOPs), and technical documentation, using AI-powered tools and automation to improve documentation quality and reduce repetitive work.
Own the local end-user support experience: manage support requests, maintain SLA adherence, spot recurring issues, and suggest improvements to IT service delivery.
What We Look For In You
2+ years of experience in IT Support, Desktop Support, IT Operations, or a similar enterprise technical support environment.
Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related field — or equivalent practical experience.
Strong experience supporting macOS in an enterprise environment.
Experience supporting enterprise productivity platforms such as Google Workspace and Lark Suite, with a working understanding of SSO authentication fundamentals, endpoint security, password management, and drive encryption.
Strong troubleshooting and problem-solving skills across hardware, software, operating systems, networking basics, and endpoint technologies.
Fluent, professional English, with the ability to communicate clearly with employees at all levels of the organization, including executive leadership. (Hard requirement.)
Excellent customer service and interpersonal skills.
Ability to prioritize multiple tasks, adapt to changing priorities, and work effectively in a fast-paced environment.
Ability to work independently as the sole on-site IT presence in Malta, with sound judgment on when to escalate to the broader Global IT team.
Comfortable using AI tools to improve productivity, automate repetitive tasks, and produce high-quality documentation.
Nice to Haves
Experience supporting enterprise environments with global or multi-office operations.
Working knowledge of Linux operating systems.
Networking fundamentals, including LAN, WAN, Wi-Fi, VPN, DNS, DHCP, TCP/IP, and basic network troubleshooting.
Experience with scripting or automation using Bash, PowerShell, Python, or similar technologies.
Exposure to endpoint management, identity and access management (IAM), mobile device management (MDM), or SaaS platforms at a support level.
Experience with IT asset lifecycle, inventory, procurement, and vendor coordination.
A track record of identifying process improvement opportunities and implementing automation that enhances IT operations and employee experience.
Experience using enterprise AI platforms such as ChatGPT Enterprise, Microsoft 365 Copilot, Google Gemini, Claude Enterprise, or similar AI-enabled workplace tools.
Professional proficiency in Mandarin is a plus.
Industry certifications such as Jamf 200/300, Apple Device Support, Apple Certified Support Professional (ACSP), Google Workspace Administrator, ITIL Foundation, CompTIA A+, Network+, or Security+ are a plus.
Perks &
Benefits
Competitive total compensation package
L&D programs and Education subsidy for employees' growth and development
Various team building programs and company events
More that we love to tell you along the process!
#LI-ONSITE
#LI-ED1
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: Singapore
Workplace: remote
About the Company
CertiK leads blockchain security by securing smart contracts and blockchains with cutting-edge Formal Verification technology. Founded by Computer Science professors of Yale University and Columbia University, CertiK has audited and secured over $500B in assets, including many of the world’s top blockchain projects.
About This Role
Singapore is where the institutional future of digital assets is being built.
As Business Development Manager for Singapore, you drive the commercial relationship with the institutions that need it — exchanges and DPT licensees, banks and financial institutions moving into tokenisation, protocols and Web3 native teams, and the funds and infrastructure providers around them. You will run the full cycle: build the pipeline, get in front of decision-makers, understand their security and compliance problem, and close.
You will work alongside a capital markets and policy team and a technical organisation whose auditors, forensics, and on-chain surveillance work sets the benchmark for the industry.
About You
You are a builder of relationships and a closer of deals, and you are comfortable doing both in a market where the buyer is sophisticated and the sale is technical. You can hold a conversation with a CTO about smart contract risk and, an hour later, hold one with a Chief Compliance Officer about transaction monitoring and licensing obligations — and be taken seriously in both. You are self-directed about pipeline: you find the opportunity rather than waiting for it to be routed to you.
Critically, you understand that in this market a regulatory shift is a commercial event, and you know how to move first when one lands.
Responsibilities
Pipeline generation
and prospecting.
Build and own the Singapore pipeline through outbound, inbound qualification, referrals, ecosystem relationships, and event presence — identifying and prioritising the accounts that matter across exchanges, financial institutions, VASPs, protocols, and infrastructure providers.
Full-cycle deal execution.
Run opportunities end to end: discovery, scoping with technical teams, proposal and commercial structuring, negotiation, and close.
Solution positioning.
Develop the depth to position CertiK’s portfolio credibly — audits and formal verification, penetration testing, on-chain surveillance and AML/compliance tooling, and incident response — and to map them to a specific client’s risk, regulatory, and commercial pressures.
Account management
and expansion.
Own relationships post-sale, drive renewals and expansion, and act as the client’s primary commercial point of contact.
Partnerships
and ecosystem.
Develop channel and referral relationships with law firms, consultancies, custodians, infrastructure providers, and industry associations that extend CertiK’s reach into the market.
Market intelligence
and feedback.
Track the competitive and pricing landscape, capture what you learn in the field, and feed it back into pricing, product, and go-to-market decisions.
Cross-functional coordination.
Work with policy, product, engineering, and marketing to build the proposals, materials, and campaigns that win business — and with the regional leadership team on territory strategy and forecasting.
Reporting
and CRM discipline.
Maintain accurate pipeline data, forecasts, and activity records; report against clear quarterly targets.
Ad hoc requests
Requirements
Bachelor’s degree in business, finance, economics, computer science, or a related field.
Minimum of 4 years of B2B business development, enterprise sales, or account management experience, with a demonstrable record of meeting or exceeding revenue targets. Prior experience at a Web3 security, blockchain analytics, RegTech, or cybersecurity vendor is a plus.
Solid working knowledge of smart contract security, on-chain analytics, AML/CFT, or virtual asset compliance concepts. Understanding of the digital asset and blockchain landscape, and of the security and compliance problems institutions in this market face.
Established network in the Singapore or wider Southeast Asian digital asset, fintech, or financial services ecosystem.
Excellent written and verbal English, and the ability to present with confidence to senior and technical audiences. Proficiency in another Asian language is a plus.
Strong commercial instincts.
Highly organized, self-directed, and able to run multiple opportunities and deadlines with limited supervision. Comfortable operating in a fast-paced environment.
Existing right to work in Singapore, or eligibility to obtain one.
Location: Montreal, Canada
Tasks summary:
Architecture Concept & Requirements
• Gather functional, performance, pointing, environmental and security requirements from mission stakeholders & CONOPs.
• Capture, trace and map payload requirements from mission level to subsystem level
• Coordinate with cybersecurity team for payload‑specific assessments
• Perform requirement management and maintain bidirectional traceability throughout the program life cycle.
Payload Architecture & Design
• Design the SAR system architecture (antenna arrays & RF front-end Tx/Rx components, digital beamforming, processing chain and digital electronics, power, thermal, and mass).
• Lead the conceptual, preliminary, and detailed design phases, producing trade studies, performance budgets).
• Produce Interface Control Documents (ICDs) with other subsystems and ground segment.
• Provide system‑level specifications to hardware designers, review schematics, layouts, thermal interfaces, and mechanical constraints
Simulation & Analysis
• Perform performance simulations for tolerance budgeting and image quality.
• Support algorithm and analytical development to process SAR.
• Define and maintain Payload DC power budget with utilization models.
• Perform FMECA, Fault tree and FDIR, reliability modeling and availability to meet mission objectives
Cross‑Functional Coordination, Stakeholder & Program Interaction
• Communicate technical status, risk assessments and trade‑study results to senior management and/or customers or partners.
• Support payload design authority in System design reviews, Power/Structure/Thermal interfaces and Mission Operations assessments.
• Liaise with Electrical, Power, Structures, Thermal, Software, Ground‑Segment and Mission‑Operations teams to resolve integration issues early.
• Support B&P (Phase 0 & pre-phase A).
Integration & Verification (IVV)
• Develop Payload Verification Master Plan covering unit‑test, subsystem‑test, payload‑level test, environmental and electromagnetic compatibility (EMC) test campaigns.
• Lead test‑automation framework set‑up, test‑case definition, results analysis and test‑report certification.
Technical Leadership & Mentorship
• Mentor, guide junior engineers and interns.
• Act as technical liaison with customers, partners and external vendors
• Act as Continuous Improvement stakeholder
• Contribute to our client's knowledge‑base, process enhancements, and standards development.
Configuration, Documentation & Standards Management
• Ensure all artefacts, analysis, firmware, deliverables and documentation are version controlled in PLM environment.
• Lead and Support design reviews (SRR, PDR, CDR, MRR/TRR…etc.).
• Support Technology Road‑Mapping & Innovation.
• Provide technical support to Mission Operations for routine payload health monitoring, contingency handling and performance trending.
• Lead root‑cause investigations for on‑orbit anomalies; update design baselines and lessons‑learned.
• Analyze on‑orbit telemetry, update filter parameters, and generate performance reports.
• Support SOOH development and associated operator training.
Required Qualifications:
• B.Sc. in Electrical Engineering, Computer science or Physics with 10 + years of experience supporting SAR remote sensing system development, integration and test on LEO/MEO missions.
• Strong technical-writing ability (requirements, ICDs, test procedures, risk reports) and presentation skills; comfortable interfacing with customers, suppliers and senior leadership.
• Strong understanding of aerospace system engineering fundamentals.
• Hands-on individual who can support systems integration processes and capability to test systems and resolve problems.
• Experience with Confluence and JIRA.
• Demonstrated capability to efficiently work with little supervision.
• Ability to distill complex problems to fundamentals to solve with analysis, similarity, or creativity.
• Demonstrate excellent written and oral communication skills in English; knowledge of French will be considered an asset (Contact with clients outside Quebec and work on deliverables in English).
Location: Montreal, Canada
TASK SUMMARY:
Architecture Concept & Requirements
• Gather functional, performance, environmental and security requirements from mission stakeholders & CONOPs.
• Map requirements to payload equipment performance with I/F with on-board processor
• Coordinate with cybersecurity team for payload‑specific assessments
• Perform requirement management and maintain bidirectional traceability throughout the program life cycle.
Payload Architecture & Design
• Implement the high‑level digital payload architecture (optical ISLs, Phased array antennas, Feeder links & front‑end), master reference oscillator & clock synchronizations.
• Produce Interface Control Documents (ICDs) with other subsystems and ground segment.
• Implement high‑speed data‑bus I/F (SpaceWire, SpaceFibre, Ethernet, CAN).
Simulation & Analysis
• Perform performance simulations (Gain, Spurious, Linearity, SNR, dynamic range, spectral efficiency, G/T, EIRP…etc.) and Monte‑Carlo analyses for tolerance budgeting.
• Define and maintain Payload DC power budget with traffic & utilization models
• Perform FMECA, Fault tree and FDIR, reliability modeling and availability to meet mission objectives
Hardware & Firmware
• Provide system‑level specifications to hardware designers, review schematics, layouts, thermal interfaces, and mechanical constraints.
• Support SW development for MODCODs and on‑board processing pipelines; ensure BIST, timing, latency and deterministic behavior.
Cross‑Functional Coordination, Stakeholder & Program Interaction
• Communicate technical status, risk assessments and trade‑study results to senior management and/or customers or partners.
• Support payload design authority in System design reviews, Power/Structure/Thermal interfaces and Mission Operations assessments.
• Liaise with Electrical, Power, Structures, Thermal, Software, Ground‑Segment and Mission‑Operations teams to resolve integration issues early.
• Support B&P (Phase 0 & pre-phase A).
Integration & Verification (IVV)
• Develop Payload Verification Master Plan covering unit‑test, subsystem‑test, payload‑level test, environmental and electromagnetic compatibility (EMC) test campaigns.
• Lead test‑automation framework set‑up, test‑case definition, results analysis and test‑report certification.
Technical Leadership & Mentorship
• Mentor, guide junior engineers and interns.
• Act as technical liaison with customers, partners and external vendors
• Act as Continuous Improvement stakeholder
• Contribute to our client's knowledge‑base, process enhancements, and standards development.
Configuration, Documentation & Standards Management
• Ensure all artefacts, analysis, software, deliverables and documentation are version controlled in PLM environment.
• Lead and Support design reviews (SRR, PDR, CDR, MRR/TRR…etc.).
• Support Technology Road‑Mapping & Innovation.
On Orbit & Operations Support
• Provide technical support to Mission Operations for routine payload health monitoring, contingency handling and performance trending.
• Lead root‑cause investigations for on‑orbit anomalies; update design baselines and lessons‑learned.
• Analyze on‑orbit telemetry, update filter parameters, and generate performance reports.
• Support SOOH development and associated operator training.
Required Qualifications:
• B.Sc. in Electrical Engineering, Aerospace or Physics with 8 + years of digital regenerative payload system design experience on LEO/MEO missions.
• Comprehensive knowledge of digital communications, SDR, DSP, DVB RCS/SX protocols, Modulation schemes, Class of Service, Networking, MPLS, 2G, 5G NTN.
• Strong technical-writing ability (requirements, ICDs, test procedures, risk reports) and presentation skills; comfortable interfacing with customers, suppliers and senior leadership.
• Strong understanding of aerospace system engineering fundamentals.
• Hands-on individual who can support systems integration processes and capability to test systems and resolve problems.
• Experience with Confluence and JIRA.
• Demonstrated capability to efficiently work with little supervision.
• Ability to distill complex problems to fundamentals to solve with analysis, similarity, or creativity.
• Demonstrate excellent written and oral communication skills in English; knowledge of French will be considered an asset (Contact with clients outside Quebec and work on deliverables in English).
Location: Montreal, Canada
Tasks summary:
Architecture Concept & Requirements
• Establish functional, performance, environmental and security requirements with mission stakeholders & CONOPs.
• Translate requirements into clear payload performance parameters and maintain bidirectional traceability throughout the project lifecycle.
• Establish with cybersecurity team payload‑specific requirements & embed resilience and security by design.
Payload Architecture Definition
• Define the overall digital regenerative payload architecture (optical/RF ISLs, antenna arrays, digitizers/ onboard processing, Feeder links, master reference oscillator & clock synchronizations).
• Define Interface Control Documents (ICDs) with spacecraft bus, ground segment and payload specific subsystems.
• Define high‑speed data‑bus I/F (Serdes, SpaceWire, SpaceFibre, Ethernet, CAN, fiber).
Trade‑Study & Technology Road‑Mapping
• Lead trade‑offs for technologies, ASIC/FPGAs/SoCs, high‑speed data‑bus, and on‑board processing algorithms, PVT.
• Identify emerging technologies and incorporate them into our client’s long‑term roadmap.
System Modeling & Performance Simulation
• Build end‑to‑end models of the signal chain (optical/RF, analog/digital) using MATLAB/Simulink, SystemView or Python‑based toolkits.
• Run Monte‑Carlo and tolerance analyses to verify gain, SNR, dynamic range, spectral efficiency, G/T, EIRP and other key metrics.
• Optimize payload design and performance with operation with traffic models/CONOPs.
Simulation & Analysis
• Oversee performance simulations & analysis (Gain, Spurious, Linearity, SNR, dynamic range, spectral efficiency, pointing, G/T, EIRP…etc.) and tolerance budgeting.
• Optimize Payload DC power budget with traffic & utilization models.
Hardware & Firmware
• Own system‑level specifications to hardware designers, review schematics, layouts, thermal & mechanical interfaces.
• Oversee MODCODs selection and on‑board processing pipelines; define BIST, timing, latency and deterministic behavior.
Cross‑Functional Coordination, Stakeholder & Program Interaction
• Communicate technical status, risk assessments and trade‑study results to senior management and/or customers or partners.
• Act as the primary technical liaison with Electrical, Power, Structures, Thermal, Software, Ground Segment and Mission Operations teams to resolve integration issues early.
• Support payload design authority in System design reviews and Mission Operations hand‑over.
• Support B&P (Phase 0 & pre-phase A).
Integration & Verification (IVV)
• Author Payload Verification Master Plan covering unit‑test, subsystem‑test, payload‑level test, environmental and electromagnetic compatibility (EMC) test campaigns.
• Define test‑automation framework set‑up, test‑case definition, results analysis and test‑report certification.
Technical Leadership & Mentorship
• Mentor, guide junior engineers and interns.
• Act as technical liaison with customers, partners and external vendors
• Act as Continuous Improvement stakeholder
• Contribute to our client’s knowledge‑base, process enhancements, and standards development.
Configuration, Documentation & Standards Management
• Ensure all artefacts, analysis, software, deliverables and documentation are version controlled in PLM environment.
• Chair design reviews (SRR, PDR, CDR, MRR/TRR…etc.).
• Support Technology Road‑Mapping & Innovation.
On Orbit & Operations Support
• Technical support to Mission Operations for routine payload health monitoring, contingency handling and performance trending.
• Lead root‑cause investigations for on‑orbit anomalies; update design baselines and lessons‑learned.
• Analyze on‑orbit telemetry, update filter parameters, and generate performance reports.
• Define SOOH and associated operator training.
Required Qualifications:
• B.Sc. in Electrical Engineering, Aerospace or Physics (M.Sc. preferred) with 12 + years of digital regenerative payload system design experience on LEO/MEO missions.
• Comprehensive knowledge of digital regenerative communications, SDR, DSP, DVB RCS/SX protocols, Modulation schemes, Class of Service, Networking, MPLS, 2G, 5G, NTN.
• Strong technical writing ability (requirements, ICDs, test procedures, risk reports) and presentation skills; comfortable interfacing with customers, suppliers and senior leadership.
• Strong understanding of aerospace system engineering fundamentals.
• Hands-on individual who can support systems integration processes and capability to test systems and resolve problems.
• Experience with Confluence and JIRA.
• Demonstrated capability to efficiently work with little supervision.
• Ability to distill complex problems to fundamentals to solve with analysis, similarity, or creativity.
• Demonstrate excellent written and oral communication skills in English; knowledge of French will be considered an asset (Contact with clients outside Quebec and work on deliverables in English).
Location: Boston, MA
Workplace: OnSite
At WHOOP, we're on a mission to unlock and inspire performance for life.
WHOOP is seeking a Governance, Risk, and Compliance Analyst II, to lead the day-to-day operation and support the ongoing risk management program at GRC in a fast-paced, high-growth environment. This role is responsible for operations of GRC initiatives - including but not limited to structured cybersecurity and AI risk assessments, exceptions management,
SDLC reviews and security compliance process ownership. The role will partner closely with Legal, Security, Product, and other teams to advance compliance objectives, reduce enterprise risk, and strengthen operational resilience.
The ideal candidate combines strong analytical thinking, critical risk mind-set, familiarity with AI governance and has the ability to communicate complex risk scenarios clearly to both technical and non-technical stakeholders.
RESPONSIBILITIES:
- Lead governance, risk assessment, and compliance activities specific to AI/ML systems,
LLM integrations, AI agents, and retrieval-augmented workflows
- Partner with the Senior Security Engineer, AI/ML to integrate risk assessment findings into
GRC frameworks and translate technical risk into governance requirements
- Develop, maintain, and refine AI risk and compliance controls aligned with relevant
frameworks, including ISO/IEC 42001, NIST Cybersecurity Framework, NIST AI Risk
Management Framework, EU AI Act, GDPR, and other applicable standard
- Execute risk assessments for new AI vendors, LLM platforms, AI APIs, and enterprise AI
tools, including third-party risk scoring, control mapping, and remediation tracking
- Manage the vendor risk assessment lifecycle for AI/ML related suppliers, ensuring
documented controls, evidence collection, and follow-up on remediation items
- Support audit activities, capturing evidence and coordinating cross-functional
stakeholders for internal and external compliance reviews involving AI systems
- Develop and maintain AI-specific GRC policies, standards, and procedures that map to AI
risk domains, explainability requirements, and compliance obligations
- Facilitate AI risk and compliance reporting to leadership, including risk dashboards, trend
analysis, control effectiveness measurements, and key metrics
- Monitor emerging AI governance requirements, guidance, and best practices, translating
them into GRC program updates and compliance recommendations
- Support security incident documentation and post-incident analysis for AI system events,
coordinating with Legal and Security teams to ensure appropriate governance response
QUALIFICATIONS:
- 6+ years of experience in Governance, Risk & Compliance, including risk assessment,
policy development, audit coordination, and third-party risk management
- Demonstrated experience performing governance or risk assessments for AI/ML systems,
including LLM integrations, model pipelines, AI agents, or data-driven algorithmic systems
- Experience translating AI-specific risks (i.e., data poisoning, prompt injection, model
misuse, data leakage, explainability gaps) into documented control requirements and
governance standards
- Hands-on experience conducting third-party risk assessments for AI vendors, LLM
platforms, AI APIs, or machine learning service providers
- Experience mapping AI-related risks and controls to frameworks such as ISO/IEC 42001,
NIST CSF, NIST AI RMF, ISO/IEC 42001, GDPR, PCI DSS, or similar standards
- Strong understanding of data governance concepts relevant to AI systems, including
training data lineage, data retention, model output handling, and human oversight
requirements
- Experience supporting regulatory readiness or compliance efforts related to AI systems
- Proven ability to collaborate with engineering and security teams to validate control
implementation and remediation
- Bachelor’s degree in Information Security, Computer Science, Business Risk, Compliance,
or a related field
This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility
The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.
At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success.
The U.S. base salary range for this full-time position is $100,000 - $140,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.
In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.
These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.
Location: Boston, MA
Workplace: OnSite
At WHOOP, we're on a mission to unlock and inspire performance for life.
WHOOP is seeking an execution-oriented Senior Governance, Risk, and Compliance Analyst to lead the day-to-day execution and support the ongoing operation of the GRC program in a fast-paced, high-growth environment. This role is responsible for operations of GRC initiatives - including but not limited to structured cybersecurity and AI risk assessments, exceptions management, SDLC reviews and security compliance process ownership. The role will partner closely with Legal, Security, Product, and other teams to advance compliance objectives, reduce enterprise risk, and strengthen operational resilience.
The ideal candidate combines strong analytical thinking, critical risk mind-set with the ability to communicate complex risk scenarios clearly to both technical and non-technical stakeholders.
RESPONSIBILITIES:
- Lead cyber, AI, and technology risk assessments across systems, cloud environments,
business processes, and major initiatives, evaluating threats, vulnerabilities, control
effectiveness, and residual risk
- Maintain and operate the enterprise cyber risk register, including drafting risk statements,
tracking mitigation plans, and supporting governance and reporting processes
- Translate technical findings, architectural concerns, and control gaps into clear business
risk scenarios that support prioritization and decision-making
- Support and help mature quantitative cyber risk analysis approaches such as FAIR to
improve how risk is measured and communicated
- Prepare materials and analysis to support the Cyber Risk Committee and executive risk
reporting
- Partner with Security Architecture to assess risk in system designs, cloud architecture,
identity models, data flows, and platform changes
- Collaborate with Security Engineering, Product Security, Legal, IT, and business teams
to evaluate new initiatives, technology changes, artificial intelligence use cases, and
third-party integrations through a risk lens
- Conduct risk assessments for emerging technologies including artificial intelligence and
machine learning systems, evaluating data usage, model behavior, external
dependencies, and security implications
- Develop dashboards and reporting that provide leadership with visibility into key
cybersecurity risks and trends.
- Contribute to the continued development of cyber risk management processes
QUALIFICATIONS:
- 6+ years of experience in cybersecurity or enterprise risk management, information
security, or a related field
- Demonstrated experience conducting structured cybersecurity or IT risk assessment
- Experience maintaining risk registers and tracking risk mitigation or treatment activities
- Deep understanding of security frameworks such as NIST CSF, ISO 27001, or PCI DSS,
and familiarity with regulatory environments such as GDPR, HIPAA or other privacy and
data protection requirements
- Ability to translate technical findings into clear business risk for non-technical
stakeholders
- Strong written and verbal communication skills with experience presenting findings to
cross-functional teams
- Experience assessing risks related to artificial intelligence, machine learning systems, or
emerging technologies, including familiarity with emerging AI governance frameworks
such as NIST AI RMF, ISO/IEC 42001, or similar standards
- Professional certifications such as CRISC, CISSP, CISA, or CGRC are a plus
This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility
The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.
At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success.
The U.S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.
In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.
These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.
Location: United States of America
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
Reports to: Manager, Product Research
Location: Remote, US
Compensation Range: $200,000 to $230,000 base plus bonus and equity
What You’ll Do:
The Huntress Product Research team has the unique honor of waking up every morning knowing we’re going to make hackers regret targeting our partners and customers. As a Principal Product Researcher, we’re looking for someone who wants to pour all of their creativity into building and implementing simple solutions that are disproportionately effective at countering these constantly evolving threats. Competitive candidates have experience managing, deploying, and securing SMB environments utilizing a wide variety of security software, best practices, and automation tools. Familiarity with product management, incident response, social engineering, psychology, education, and managed service provider tools is an additional way to differentiate yourself.
As you can imagine, success doesn’t happen in a vacuum. An effective Product Researcher fosters highly collaborative environments between the Product, Engineering, and Security teams to accelerate our mission and secure the 99% of businesses that fall below the enterprise poverty line. This collaboration is needed to produce and prioritize a unified technical vision that ultimately delivers our most impactful features and capabilities.
We defend over 5M endpoints for 225,000+ mid-sized and small-business customers, and that number continues to grow each month. Given this market’s tighter budget, it’s not financially feasible to assign human analysts to each client. The Security Operations team addresses this challenge head-on by building and scaling highly automated efficiencies—often lightly augmented by our SOC — that make intruders earn every inch of their access while maintaining affordability and healthy gross margins.
Roles and Responsibilities:
Identify innovative ways to detect Windows OS threats
Develop cross-platform features that leverage telemetry from common OS subsystems such as file system, memory, process, and network activity
Research and development of sensor capabilities to provide visibility and detection support for attack techniques across supported Windows OS versions
Work collaboratively with internal engineering and detection teams to implement detection logic
Identify and evaluate new telemetry opportunities
Identify and address gaps in product coverage
Respond to product escalations
Perform False Positive and False Negative investigations
Lead product research initiatives to develop and evaluate security product strategies and technologies
Coordinate with Product and Engineering teams to integrate and operationalize solutions developed by Threat Operations teams
Applies AI as a practical part of day-to-day product research work to improve the speed, quality, and impact of research outputs
Uses AI to support information gathering, analysis, prototyping, and production of clear, decision-useful work products while maintaining accountability for the final output
Builds and reuses lightweight prompts, templates, or workflows for recurring research tasks rather than relying on one-off use
Develop internal and external technical documentation to educate customers and communicate research findings to adjacent teams about security risks and opportunities
Mentor and teach technical expertise to advance the broader community
Promote Huntress’ reputation through media interaction, public speaking, CFPs, CTFs, and blogs
Qualifications:
Expert in Windows OS internals, components, APIs, and design
Prior experience with Windows OS kernel coding and device drivers
Experience testing EDRs, bypasses, and evasion techniques
Comfortable with reverse engineering and using debuggers
Proficiency in multiple programming/scripting languages, such as C/C++/C#, PowerShell, and Python
Applies AI to improve research quality, speed, and outputs in day-to-day work
Commitment to clear documentation of research findings
Experience with MITRE ATT&CK matrix, SIGMA, Yara, and Elasticsearch/Kibana
What We Offer:
100% remote work environment - since our founding in 2015
Generous paid time off policy, including vacation, sick time, and paid holidays
12 weeks of paid parental leave
Highly competitive and comprehensive medical, dental, and vision benefits plans
401(k) with a 5% contribution regardless of employee contribution
Life and Disability insurance plans
Stock options for
all
full-time employees
One-time $500 reimbursement for building/upgrading home office
Annual allowance for education and professional development assistance
$75 USD/month digital reimbursement
Access to the BetterUp platform for coaching, personal, and professional growth
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to
accommodations@huntresslabs.com
. Please note that non-accommodation requests to this inbox will not receive a response.
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our
Candidate Privacy Notice
for more details on our practices and your data privacy rights.
#BI-Remote
Location: Paris; New York
Workplace: OnSite
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
ROLE SUMMARY
As a Security Compliance Specialist, you will contribute to the development and operation of Mistral AI’s cybersecurity compliance program. You will support the implementation and maintenance of security frameworks, coordinate compliance activities across the organization, and help the company obtain and maintain the certifications required to support its growth and enterprise business.
WHAT YOU WILL DO
- Contribute to the development and ongoing management of Mistral AI’s cybersecurity compliance program.
- Support the definition, implementation, and maintenance of the Information Security Management System.
- Coordinate cybersecurity compliance activities, including internal reviews, control assessments, and external audits.
- Collect, review, and organize evidence from relevant stakeholders to demonstrate compliance with certification and regulatory requirements.
- Help teams understand their responsibilities and expected contributions to compliance initiatives.
- Develop and deliver cybersecurity compliance training and awareness materials.
- Participate in cybersecurity risk assessments and support the monitoring of remediation actions.
- Maintain compliance documentation, policies, procedures, control records, and audit materials.
- Track changes in relevant cybersecurity standards and regulations and assess their potential impact on the organization.
- Collaborate with Sales, Marketing, Legal, and other teams to identify certifications that may support customer acquisition and business development.
- Help evaluate and prioritize new certification initiatives based on business value, customer demand, implementation effort, and cost.
ABOUT YOU
- 5+ years of experience in cybersecurity compliance, information security governance, risk management, or a related field.
- Experience supporting cybersecurity compliance programs, certification processes, or external audits.
- Strong understanding of cybersecurity standards and frameworks such as ISO 27001, SOC 2, HDS, SecNumCloud, or C5.
- Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA.
- Knowledge of requirements relating to sensitive or classified information, such as II 901 or IGI 1300, would be an advantage.
- Strong organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders.
- Excellent written and verbal communication skills.
- Strong analytical and problem-solving abilities.
- Ability to work collaboratively across technical, legal, commercial, and operational teams.
- Professional proficiency in English; French proficiency is a plus.
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: Boston, MA
Workplace: OnSite
At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP empowers members to perform at a higher level and live longer through a deeper understanding of their bodies and daily lives. Protecting our members’ data and ensuring our systems scale securely and reliably is core to this mission.
WHOOP is hiring a Software Engineer II focused on backend development to build and enhance systems that power our platform. This role will directly contribute to delivering scalable and secure services that support millions of members worldwide. While backend development expertise is the primary focus, familiarity with cybersecurity concepts (data privacy, AuthN/AuthZ, etc) or cloud infrastructure concepts (AWS, IaC, Kubernetes, etc) will be considered a strong plus.
This is a top-funnel role: depending on your background and interests, you may align more closely with our Product Security team (focused on secure-by-default guardrails, compliance, and data privacy) or our Application Infrastructure team (focused on scalability, reliability, and developer enablement). Either way, you’ll have the opportunity to shape core platform practices and help WHOOP grow to the next level.
RESPONSIBILITIES:
- Design, develop, and maintain robust, scalable backend systems that power WHOOP’s core infrastructure and member experience.
- Collaborate with product managers, data engineers, frontend developers, and other cross-functional partners to deliver features that enhance member engagement.
- Build and maintain APIs to enable seamless integration with frontend applications and third-party services.
- Ensure system reliability, scalability, and performance through effective testing, monitoring, and optimization.
- Implement secure coding practices and contribute to designing systems that safeguard member data.
- Stay current with backend technologies and contribute to improving team engineering standards and best practices.
QUALIFICATIONS:
- 2-4 years of backend software development experience, ideally in languages like Java, Python, or C#.
- Experience designing and building RESTful APIs and microservices.
- Exposure to event-driven architecture (messaging/streaming tech such as Kafka, RabbitMQ).
- Familiarity with database design and management (e.g., PostgreSQL, MySQL, or NoSQL databases).
- Understanding of cloud infrastructure (AWS, GCP, or Azure).
- Familiarity with cybersecurity principles (data privacy, authentication, and authorization) is a plus but not required.
- Strong problem-solving skills and ability to work in a fast-paced environment.
- Good communication skills and ability to collaborate across teams.
BONUS QUALIFICATIONS:
-
- Experience working with infrastructure as code and developer enablement platforms.
- Familiarity with containers and orchestration (e.g., Docker, Kubernetes).
- Background in cloud security or incident response.
- Exposure to building translation or localization platforms to support multi-language content delivery.
- Hands-on experience with observability tools (logging, monitoring, alerting) in production environments.
ABOUT YOU
- You thrive on ownership and want to shape the foundation of WHOOP’s platform.
- You automate everything you can, always seeking to replace manual work with scalable tooling.
- You enjoy working cross-functionally and can communicate complex infrastructure and security topics clearly.
- You believe reliability, security, and visibility are just as important as speed and scale.
Learn more about our engineering teams and how to be successful in your engineering career at WHOOP via our Career Framework https://engineering.prod.whoop.com/careerframework.
This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP http://apply.whoop/ is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.
At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success.
The U.S. base salary range for this full-time position is $125,000 - $175,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.
In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.
These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.
Location: Spain
About the Opportunity
Dentons Europe is currently seeking a Information Security Engineer, specializing in Microsoft cloud technologies to play a key role in strengthening and evolving our security landscape.
In this role, you will design and implement security controls across cloud and hybrid environments, with a strong focus on Microsoft 365 and Microsoft Azure. You will operate at the intersection of architecture and execution shaping security decisions, guiding technical teams, and ensuring that systems, applications, and integrations meet the firm’s security, compliance, and reliability standards.
As a trusted advisor and technical authority, you will work closely with Information Security, IT, and business stakeholders across Europe, embedding security into the design and delivery of technology solutions while continuously improving the organization’s overall security posture.
This is an opportunity to make a visible, enterprise-wide impact in a complex, international environment.
You will primarily be accountable for
Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments.
Act as a cybersecurity subject-matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation.
Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards.
Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset.
Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture.
Lead end-to-end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams.
Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture.
Provide advanced troubleshooting and technical leadership for complex or high-impact security issues.
Develop and maintain security documentation, standards, reports, and control frameworks.
Requirements
Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering
Advanced expertise in Microsoft Azure security, including at least two of:
Defender for Cloud
Microsoft Sentinel
Infrastructure / Network Security (IaaS)
Application and API security
Storage and database security
Advanced expertise in Microsoft 365 security, including at least two of:
Microsoft Entra ID, identity and access management
Microsoft Purview, data protection and compliance
Microsoft 365 Defender suite
Intune / Endpoint Manager
Strong understanding of:
Security architecture principles, including Zero Trust, defense-in-depth and least privilege
Hybrid cloud environments and system integrations
Vulnerability management, including analyzing penetration testing and coordinating remediation of results
API security and modern integration technologies
Scripting and automation skills, e.g., PowerShell, Python or Bash
Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities
Professional experience
Proven experience designing and implementing secure solutions in Microsoft technologies-based enterprise environments
Experience working with large-scale or multi-country IT environments
Solid exposure to security operations, incident response and security tooling
Experience collaborating across infrastructure, development and business teams
Benefits
Remuneration and benefits package will reflect the successful candidates experience and country where hired.
Please apply with an English resume
Location: Mexico City, Mexico
Workplace: remote
Join Tether and Shape the Future of Digital Finance
At Tether, we’re not just building products, we’re pioneering a global financial revolution. Our cutting-edge solutions empower businesses—from exchanges and wallets to payment processors and ATMs—to seamlessly integrate reserve-backed tokens across blockchains. By harnessing the power of blockchain technology, Tether enables you to store, send, and receive digital tokens instantly, securely, and globally, all at a fraction of the cost. Transparency is the bedrock of everything we do, ensuring trust in every transaction.
Innovate with Tether
Tether Finance:
Our innovative product suite features the world’s most trusted stablecoin,
USDT
, relied upon by hundreds of millions worldwide, alongside pioneering digital asset tokenization services.
But that’s just the beginning:
Tether Power:
Driving sustainable growth, our energy solutions optimize excess power for Bitcoin mining using eco-friendly practices in state-of-the-art, geo-diverse facilities.
Tether Data:
Fueling breakthroughs in AI and peer-to-peer technology, we reduce infrastructure costs and enhance global communications with cutting-edge solutions like
KEET
, our flagship app that redefines secure and private data sharing.
Tether Education
: Democratizing access to top-tier digital learning, we empower individuals to thrive in the digital and gig economies, driving global growth and opportunity.
Tether Evolution
: At the intersection of technology and human potential, we are pushing the boundaries of what is possible, crafting a future where innovation and human capabilities merge in powerful, unprecedented ways.
Why Join Us?
Our team is a global talent powerhouse, working remotely from every corner of the world. If you’re passionate about making a mark in the fintech space, this is your opportunity to collaborate with some of the brightest minds, pushing boundaries and setting new standards. We’ve grown fast, stayed lean, and secured our place as a leader in the industry.
If you have excellent English communication skills and are ready to contribute to the most innovative platform on the planet, Tether is the place for you.
Are you ready to be part of the future?
About the job
As a Law Enforcement Liaison and Blockchain Investigator, you will have a crucial role in connecting advanced blockchain technology with the efforts of law enforcement. Your expertise in blockchain analytics will be vital in decrypting complex virtual currency transactions, assisting in the discovery and prevention of financial crimes. This position requires a unique combination of technical knowledge, analytical skills, and a profound understanding of the blockchain ecosystem.
Your role will require more than just analyzing data. You will also be responsible for converting complicated blockchain data into practical intelligence for law enforcement agencies. To stay ahead of the latest trends in virtual currencies and blockchain technology, you must take a proactive approach. This will ensure that our strategies and tools are always at the forefront of the industry.
As part of this job, you will be responsible for detecting potentially illegal activities such as money laundering, fraud, and other financial crimes within blockchain networks. Your efforts will assist law enforcement agencies in their investigations and will be crucial in shaping the future of virtual currency security measures. Your work will have a direct impact on public safety and legal enforcement.
In this role, you will be working in a collaborative environment where you will interact with different stakeholders such as law enforcement officers, cybersecurity experts, legal professionals, and management. This position provides a unique opportunity to make a significant impact in the fast-changing world of blockchain technology while adhering to the highest standards of legal and ethical compliance.
Responsibilities:
Employ state-of-the-art blockchain analytics tools to analyze virtual currency transactions. This includes tracing transaction histories, identifying patterns, and uncovering illicit activities within blockchain networks.
Act as a primary point of contact for law enforcement agencies. Provide detailed, understandable reports and insights on blockchain activities to assist in criminal investigations.
Efficiently respond to and action incoming requests from law enforcement. This involves gathering relevant data, conducting thorough analyses, and delivering timely and accurate information.
Enhancing law enforcement's understanding of patterns and indicators of illicit activity on the blockchain.
Stay abreast of the latest developments in blockchain technology, virtual currency trends, and regulatory changes. Apply this knowledge to enhance analytical methods and tools.
Interdepartmental Coordination: Work closely with other departments, such as legal and compliance, to ensure adherence to regulatory requirements and company policies.
Bachelor’s or Master’s degree in Criminal, Business Management, Finance, Computer Science, or a related field.
Proven experience with blockchain analytics, preferably Chainalysis, TRM Labs or Elliptic.
Deep and proven understanding of cryptocurrency transaction patterns and potential indicators of criminal activity.
Strong analytical and problem-solving skills.
Excellent communication and presentation skills, with the ability to translate complex technical information into understandable terms for law enforcement personnel.
Experience working with law enforcement agencies is highly desirable.
Ability to work independently and as part of a team in a fast-paced environment.
Important information for candidates
Recruitment scams have become increasingly common. To protect yourself, please keep the following in mind when applying for roles:
Apply only through our official channels.
We do not use third-party platforms or agencies for recruitment unless clearly stated. All open roles are listed on our official careers page: https://tether.recruitee.com/
Verify the recruiter’s identity.
All our recruiters have verified LinkedIn profiles. If you’re unsure, you can confirm their identity by checking their profile or contacting us through our website.
Be cautious of unusual communication methods.
We do not conduct interviews over WhatsApp, Telegram, or SMS. All communication is done through official company emails and platforms.
Double-check email addresses.
All communication from us will come from emails ending in
@
tether.to
or @
tether.io
We will never request payment or financial details.
If someone asks for personal financial information or payment at any point during the hiring process, it is a scam. Please report it immediately.
When in doubt, feel free to reach out through our official website.
Location: Remote (United States | Canada)
Workplace: Remote
1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing.
About 1Password
At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work.
If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future.
We are seeking a Senior Developer on our Open Source Team, focused on strengthening 1Password's open source posture and making our developer tools easy to use directly inside developers' workflows through agentic IDE integrations: our Agent Hooks and IDE plugins. You'll serve as a technical leader on the team, owning architectural decisions and driving cohesive execution on medium-to-large projects, from initial planning through development and into customer support.
How we’re using AI today
Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers.
This is a remote opportunity within Canada and the US.
What we're looking for:
- Significant professional software development experience, with a track record of independently owning and delivering medium-to-large technical projects end to end.
- Advanced, hands-on command of a modern development toolchain (Git, IDEs, terminal, debugging and testing tools) and the languages relevant to the team's work; comfortable reading, writing, and reviewing others' code.
- Experience designing extensible, maintainable systems, ideally developer tooling, IDE extensions, agent integrations, or actively maintained open source projects.
- Demonstrated ability to set technical direction and make architectural decisions that keep products scalable, secure, and high quality.
- A track record of working effectively in public, engaging with external contributors and upholding a high quality bar in community-facing repositories.
- Interest in agent-assisted development and building tools to make agent-assisted development smoother and more secure.
- Excellent written and verbal communication skills, with the ability to make a project's impact and progress visible to engineering, product, and design stakeholders.
- A security-minded approach consistent with 1Password's principles.
Bonus points for:
- Experience maintaining a popular open source project or running open source community engagement.
- Familiarity with AI-enabled or agentic IDEs (e.g., Cursor) and the emerging agent-hook ecosystem.
- Experience contributing to an Open Source Program Office (OSPO) or similar function.
What you can expect:
- Contribute large new features, significant product improvements, and critical bug fixes, such as extending our Agent Hooks across IDEs or building genuine in-IDE value beyond links to external docs.
- Make architectural decisions that keep our integrations and public repositories scalable, secure, and aligned to 1Password's existing security and authentication models.
- Contribute to the team's roadmap by identifying technical opportunities and risks up to ~6 months out, then lead execution aligned to team objectives.
- Raise the quality bar by identifying lapses in code quality and gaps in testing coverage, anticipating and reporting potential problems, and fostering a high standard of documentation across community-facing repositories.
- Ensure alignment with cross-functional partners (Partnerships, Product, UX, and the SDK/CLI teams), translating requirements into actionable work.
- Drive initiatives that better support 1Password customers on your platform and mitigate issues developers face.
- Contribute to a positive, collaborative team environment by modeling best practices, providing constructive feedback, and supporting a sense of shared ownership.
USA-based roles only: The annual base salary for this role is between $153,000 USD and $214,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
Canada-based roles only: The annual base salary for this role is between $144,000 CAD and $202,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.
This posting is for an existing vacancy.
Our culture
At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first.
You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results.
How we work with AI
We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password.
This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process.
Our approach to remote work
We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.
What we offer
We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:
Health and wellbeing
👶 Maternity and parental leave top-up programs
🩺 Competitive health benefits
🏝 Generous PTO policy
Growth and future
📈 RSU program for most employees
💸 Retirement matching program
🔑 Free 1Password account
Community
🤝 Paid volunteer days
🏆 Peer-to-peer recognition through Bonusly
🌎 Remote-first work environment
*Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting.
You belong here.
1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.
Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs.
Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you.
Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.
1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.
Location: Czechia
About the Opportunity
Dentons Europe is currently seeking a Information Security Engineer, specializing in Microsoft cloud technologies to play a key role in strengthening and evolving our security landscape.
In this role, you will design and implement security controls across cloud and hybrid environments, with a strong focus on Microsoft 365 and Microsoft Azure. You will operate at the intersection of architecture and execution shaping security decisions, guiding technical teams, and ensuring that systems, applications, and integrations meet the firm’s security, compliance, and reliability standards.
As a trusted advisor and technical authority, you will work closely with Information Security, IT, and business stakeholders across Europe, embedding security into the design and delivery of technology solutions while continuously improving the organization’s overall security posture.
This is an opportunity to make a visible, enterprise-wide impact in a complex, international environment.
You will primarily be accountable for
Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments.
Act as a cybersecurity subject-matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation.
Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards.
Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset.
Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture.
Lead end-to-end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams.
Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture.
Provide advanced troubleshooting and technical leadership for complex or high-impact security issues.
Develop and maintain security documentation, standards, reports, and control frameworks.
Requirements
Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering
Advanced expertise in Microsoft Azure security, including at least two of:
Defender for Cloud
Microsoft Sentinel
Infrastructure / Network Security (IaaS)
Application and API security
Storage and database security
Advanced expertise in Microsoft 365 security, including at least two of:
Microsoft Entra ID, identity and access management
Microsoft Purview, data protection and compliance
Microsoft 365 Defender suite
Intune / Endpoint Manager
Strong understanding of:
Security architecture principles, including Zero Trust, defense-in-depth and least privilege
Hybrid cloud environments and system integrations
Vulnerability management, including analyzing penetration testing and coordinating remediation of results
API security and modern integration technologies
Scripting and automation skills, e.g., PowerShell, Python or Bash
Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities
Professional experience
Proven experience designing and implementing secure solutions in Microsoft technologies-based enterprise environments
Experience working with large-scale or multi-country IT environments
Solid exposure to security operations, incident response and security tooling
Experience collaborating across infrastructure, development and business teams
Benefits
25 days of vacation/year
3 sick days/year
Meal lump-sum
MultiSport card
Multipass card
Home Office allowance
Location: Remote (United States | Canada)
Workplace: Remote
1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing.
About 1Password
At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work.
If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future.
We're looking for a Staff Data Analyst to be the senior analytical partner to our Marketing organization. You'll define how Marketing understands its own performance, influence investment decisions at the leadership level, and shape the data foundations that underpin our AI and automation capabilities. Sitting within our centralized analytics function, you'll work closely with Growth Marketing, Corporate Marketing, Revenue Operations, Finance, and Data Engineering bringing strategic thinking, deep marketing expertise, and the ability to turn complex data into clear recommendations that move the business forward.
How we’re using AI today
On the Marketing team, we’re growing our AI capability together and redesigning how work gets done. We’ve built agents to improve workflows focused on competitive intelligence, content creation, and campaign planning, helping us stay sharp, reduce context-switching, and surface the right information at the right time. AI helps us coordinate, execute, and uncover insights faster so we can spend more time on what’s most important: performance, judgement, and driving the future of 1Password.
This is a remote opportunity within Canada and the US.
What we're looking for:
- 7+ years in marketing analytics and data strategy within complex B2B SaaS environments
- Deep marketing domain expertise, including attribution, funnel analysis, forecasting, KPI development, and lifecycle measurement
- Proven experience partnering directly with senior marketing leaders and executive stakeholders
- Experience leading attribution modernization or marketing measurement transformation initiatives
- Familiarity with AI-assisted analytics, statistical modeling, or predictive techniques in a business context
- Advanced SQL and strong experience with large-scale analytical datasets
- Hands-on experience with modern AI/BI tools (Hex, Omni, Claude, Dust, or similar)
- Comfort in modern cloud data ecosystems: Snowflake, Databricks, dbt
- Experience working with Marketing and GTM platforms: Salesforce, Marketo, GA4, and related martech
What you can expect:
- A greenfield opportunity to shape the data foundations, measurement frameworks, and analytical standards that Marketing and 1Password's broader AI capabilities will depend on
- Deep partnership with Marketing leadership across planning cycles, investment decisions, and performance measurement
- Ownership of complex marketing domain work across attribution, funnel measurement, forecasting, and lifecycle analysis in a fast-moving SaaS environment
- A seat at the forefront of how AI gets applied in Marketing analytics, building the trusted, governed data foundations that every AI initiative will depend on
- Cross-functional partnership across Marketing, Finance, RevOps, Product, and Data teams with the opportunity to mentor analysts and raise the bar on analytical standards
- An environment where there's a lot to build and your fingerprints will be on it. This is a role for someone who thrives with ownership and ambiguity, not a playbook to follow
USA-based roles only: The annual base salary for this role is between $149,000 USD and $216,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
Canada-based roles only: The annual base salary for this role is between $131,000 CAD and $175,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.
This posting is for an existing vacancy.
Our culture
At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first.
You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results.
How we work with AI
We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password.
This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process.
Our approach to remote work
We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events.
What we offer
We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer:
Health and wellbeing
👶 Maternity and parental leave top-up programs
🩺 Competitive health benefits
🏝 Generous PTO policy
Growth and future
📈 RSU program for most employees
💸 Retirement matching program
🔑 Free 1Password account
Community
🤝 Paid volunteer days
🏆 Peer-to-peer recognition through Bonusly
🌎 Remote-first work environment
*Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting.
You belong here.
1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.
Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs.
Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you.
Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.
1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.
Role Description
The Risk Manager - Platform Risk reports to the Senior Manager of Risk Management and IT Compliance team within Tech Risk Operations (TRO). This is a first-line of defense risk team responsible for Central Tech business unit risks & Security risks across the company. The Risk Manager - Platform Risk is a people manager role, focused on leading a team of individuals to enable consistent identification of technology-related risks for key Central Tech business unit technology platforms. These technology platforms enable the business to build and run in-house developed applications that support the core of our Business. The Risk Manager - Platform Risk possesses both a strong technical understanding of DevOps IT technology and expertise in various risk domains. These domains include cybersecurity, IT, privacy, regulatory compliance, broader enterprise risks, Trust & Safety, cybersecurity regulatory compliance, and e-commerce fraud. This role involves identifying technology-related risks across core DevOps technology platforms, encompassing both public cloud and on-premise infrastructure. This includes (but is not limited to) public and private cloud platforms, like AWS, GCP, Azure, Kubernetes, Gitlab, CI/CD Tooling, etc. This role also requires embedding secure software development principles and tooling (SAST, DAST, SCA) into BAU development practices, to apply them effectively to DevOps technology platforms. The Risk Manager - Platform Risk is also a subject matter expert leveraging a deep understanding of the enterprise risk discipline combining deep knowledge of theory and organizational practice or expertise across several different disciplines within a function. Effective first-line risk professionals are adaptable individuals who can engage with diverse senior technical stakeholders (Senior Engineering Managers, Product Owners, developers, etc.) This necessitates strong communication skills, technical proficiency, an ability to foster collaboration, incorporate different viewpoints, and steer efforts toward positive business results in managing IT risks and ensuring IT regulatory compliance obligations are met. This position requires strong stakeholder management skills and requires an individual who can convince others who are skeptical or unwilling to accept new concepts, practices and approaches. This position involves extensive collaboration with senior technical stakeholders to ensure the consistent maintenance of existing IT controls across the organization. Success in this role requires exceptional stakeholder management skills, including the ability to build strong relationships, effectively communicate complex information, and persuasively influence individuals and teams, even when faced with resistance to necessary changes and the adoption of new security protocols. The ability to navigate organizational complexities and foster a culture of IT risk management, security awareness and compliance is critical. This role is also a people manager position and is fully responsible for managing a team of individuals and continuously improving the area under their scope. This manager will be responsible for leading and managing a team of internal and/or external resources (e.g. Risk Analysts, Risk Officers, consultants). They are comfortable leading a team to come up with robust, scalable and automated solutions that mitigate key risks while enabling successful business operations across multiple core platforms.
Key Responsibilities and Duties
— Attract, engage, develop, and retain talent to their full potential by fostering a supportive work environment that emphasizes continuous feedback, coaching, and mentorship programs, ensuring comprehensive growth for all crafts.
— Coaching your team on and consistently role model the Booking values on Think Customer First, Own It, Learn Forever, Succeed Together, and Do the Right Thing.
— Drive initiatives effectively involving multiple technical first-line senior stakeholders, re-prioritising tasks when beneficial.
— Formulate and implement tactical plans and objectives within Platform Risk Management that are in alignment with Central Tech business objectives and ensure the achievement of annual goals.
— Establish team priorities, delegate projects, allocate resources, and provide regular communication to management and business partners regarding business performance and project progress.
— Advise first-line stakeholders with specialized knowledge and expertise in IT risk, cybersecurity and regulatory compliance risk.
— Assume responsibility for the identification of technological risks and the formulation of control design proposals.
— Offer guidance on control design that is sustainable and appropriately scaled, ensuring that solutions are commensurate with the complexity of the issues addressed and avoiding unnecessary overengineering.
— Drive business engagement in the Central Tech business unit to provide risk and compliance awareness for teams that have a clear need to manage risks without significantly affecting their development velocity and/or play a key role towards achieving strategic objectives in the company.
— Develop and maintain IT and security policies and procedures for secure software development & collaborate with development teams to integrate secure software development practices and principles into CI/CD pipelines.
— Support senior stakeholders across central tech helping to promote and embed risk and compliance ownership across the business as well as to broaden and expand their knowledge base of both the internal and external risk environment.
— Follow broader ERM strategy defined by R&C and implement it into execution within the first-line of defense (business) and drive continuous improvement of risk assessment methodologies through ongoing collaboration with second-line risk and controls teams, ensuring alignment with practical business objectives.
— Support the team to identify ways to increase their business impact and improve the team’s product(s) and ways of working.
— Liaise with other risk and audit teams (Risk and Controls, Internal Audit, external auditors, etc.) to provide a more in-depth technical risk perspective, as needed.
— Stay current with emerging cyber threats and security best practices in DevOps environments.
Knowledge and Skills
— Strong risk and control or audit/assurance background with a deep understanding of operational and technology risk - L4
— Strong working experience with IT General Controls (ITGCs), especially in fast-paced DevOps environments
— Strong understanding of technology risk management, controls, and compliance, especially for public cloud platforms and DevOps Tooling - L4
— Experience and understanding of applicable regulations such as Sarbanes Oxley, PCI-DSS, GDPR and CCPA - L4
— Familiarity with industry-standard Cybersecurity regulatory frameworks such as NIST, ISO27001 and CIS - L3
— Understanding of cybersecurity risks and data protection principles - L3
— Technical AWS certifications (AWS Certified Solutions Architect, AWS Certified Security) are a plus
— Knowledge of secure software development practices and tooling (SAST, DAST, and SCA tools)
— Ability to cultivate solid relationships with business partners in order to drive the adoption of the risk management culture
— Thorough technical understanding of internal control requirements and design and experience in applying them in various businesses
— Able to split large tasks into logical, manageable and decoupled actions which are managed effectively and delivered on time
— Be flexible and agile in response to the change in business, change in stakeholder expectations and/or change in regulatory/operating environment of B.com
Level of Education: Bachelor/Master
Years of relevant Job Knowledge: Extensive Knowledge (8 - 12 years)
Benefits & Perks
— Headquarters located in one of the most dynamic and cosmopolitan cities in Europe: Amsterdam.
— Contribute to a high‑scale, sophisticated, world‑class product and see the real‑time impact of your work on millions of travelers worldwide.
— Be part of a truly international fast‑paced environment and performance‑driven culture.
— Full relocation support for you and your family to move to Amsterdam.
— We have fine‑tuned this process by successfully relocating hundreds of Technology professionals to Amsterdam in recent years.
— Performance‑based company that offers 29 vacation days, career advancement, and lucrative compensation, including bonuses and stock potential.
— Discount on Booking.com accommodations with the “Booking Deal” including other perks and benefits.
— Company‑sponsored family and social activities to help our employees become integrated with each other and Dutch culture.
— Diverse and creative colleagues from every corner of the world.
— Health, life, and disability insurance*.
— Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave.
— Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country).
— Industry‑leading product discounts for yourself, friends, and family, including automatic Genius Level 3 status and quarterly Booking.com wallet credit.
— Free access to online learning platforms, development and mentorship programs, and a complimentary Headspace membership.
— On‑site meals, coffee, and snacks, including healthy and vegan options, daily*.
— Benefits may vary slightly depending on location and contract type.
УдалённоSerbia
География найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
ОфисParis; New York; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks
ОфисГеография найма не уточнена
УдалённоSpain
УдалённоMexico City, Mexico
УдалённоseniorRemote (United States | Canada)
УдалённоCzechia
УдалённоRemote (United States | Canada)
ГибридAmsterdam
Все вакансии в одном месте - страница 24 · Job Hunters