Вакансии

Задачи: — проводить пентест Web, API, мобильных приложений, инфраструктуры, сетей и облака; — выполнять white-box / SAST-анализ исходного кода; — работать с разработчиками, DevOps и Blue Team; — использовать Burp Suite, Nmap, Metasploit, Nessus/OpenVAS, Hydra, sqlmap, Impacket, BloodHound и др.; — участвовать в построении SecSDLC; — готовить отчёты по результатам работ. Требования: — знание OWASP Top 10 / API Top 10 / Mobile Top 10; — понимание TCP/IP, HTTP/S, DNS, LDAP, SMB; — опыт в Pentest / Network Security; — уверенное владение Linux; — опыт работы с Burp Suite, Nmap, Metasploit и инструментами анализа уязвимостей; — знание OWASP, MITRE ATT&CK, D3FEND.

Location: Remote Workplace: Remote Phantom https://phantom.com is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets that never close, including perpetuals, prediction markets, tokenized assets, stablecoins and memes. Phantom users are able to discover the markets that matter and the cultural moments that shape them, building conviction through real-time data and the verified performance of top traders. With self-custody and access to open networks at its core, Phantom lets them control their financial moves in the same app they use to safely store or spend money worldwide. Phantom has reached #1 in Google Play's finance category and consistently ranks in the top 50 apps across all categories. Check out our Forbes Fintech 50 https://www.forbes.com/sites/ninabambysheva/2026/02/23/inside-phantoms-battle-plan-to-win-the-crypto-fueled-superapp-war/ and CNBC and Statista's World's Top Fintech Companies 2026 https://www.cnbc.com/worlds-top-fintech-companies-2026/! We are around 180 people, fully remote, backed by a $150M Series C investment from a16z, Sequoia Capital and Paradigm. ROLE DESCRIPTION Security is core to Phantom’s product and the trust millions of users place in us. We’re building an AI-native security team that aggressively uses AI to expand the speed, depth, and reach of our work—from code review and threat modeling to vulnerability discovery and security automation. We’re looking for strong security engineers with high agency who can identify the risks that matter, build practical solutions, and take ownership from initial discovery through verified remediation. This is a hands-on, high-impact role spanning architecture, source code, testing, and production systems across Phantom’s mobile, web, and backend products. You’ll work directly with engineering and product teams, lead complex security initiatives, and build capabilities that scale across the company. At the Staff level, you’ll set technical direction and raise the bar for how Phantom designs, builds, and ships secure products. This role is fully remote and open to candidates based in the US, UK and Canada. RESPONSIBILITIES - Product Security Ownership: Partner with engineering teams to identify and address security risks across Phantom’s mobile applications, web products, APIs, and backend services. - Architecture and Threat Modeling: Lead security reviews for new products and major architectural changes, with particular attention to authorization boundaries, sensitive data, transaction integrity, key material, and third-party integrations. - Secure Product Development: Embed practical security controls into the software development lifecycle, from design and implementation through testing, release, and production operation. - Code Review and Security Testing: Perform AI assisted security code reviews and targeted testing of high-risk features. Build repeatable approaches that help find vulnerabilities before they reach production. - Security Tooling: Develop and improve tooling that gives engineers fast, actionable security feedback without creating unnecessary friction. Use automation and AI-assisted workflows where they materially improve coverage or speed. - Software Supply Chain Security: Harden CI/CD, build, and release systems against supply chain threats, including dependency risk, secrets exposure, build provenance, artifact integrity, and compromised developer or automation workflows. - Vulnerability Management: Triage findings from internal testing, researchers, bug bounty submissions, and third-party assessments. Work with owners to determine real-world impact and drive issues through verified remediation. - Incident Response: Support the investigation of product security incidents and suspicious activity. Turn lessons from incidents into durable improvements to product architecture, detection, and engineering standards. - Technical Leadership: Establish product security patterns and expectations across engineering. At the Staff level, lead ambiguous, cross-functional initiatives and influence architecture beyond any single product team. QUALIFICATIONS - 8+ years of experience in product security, application security, security engineering, or software engineering, including experience operating at a senior or staff level. - Strong understanding of web, mobile, API, and distributed-system security, including authentication, authorization, session management, cryptography, and common vulnerability classes. - Hands-on experience building or applying AI-assisted security tooling to test applications and APIs, combining automated analysis with source-code review and manual validation. - Demonstrated ability to review production code in one or more languages such as TypeScript, JavaScript, Rust, Python and Go. - Experience securing software supply chains and CI/CD systems, including dependencies, build infrastructure, secrets, artifacts, signing, and release integrity. - Experience threat modeling complex products and translating security risks into concrete engineering requirements. - Strong judgment when evaluating exploitability, business impact, and appropriate remediation. - Track record of partnering effectively with engineering and product teams while maintaining a high security bar. - Clear written and verbal communication, including the ability to explain technical risk to both engineers and non-security stakeholders. NICE TO HAVES - Experience securing consumer financial products, wallets, payments, or other systems where client integrity and transaction safety are critical. - Familiarity with blockchain systems, smart-contract interactions, transaction simulation, signing workflows, or self-custodial wallet architecture. - Experience securing browser extensions or native mobile applications. - Experience building and integrating application-security tooling, static or dynamic analysis, security test infrastructure, or policy-as-code controls. - Familiarity with AWS, Kubernetes, CI/CD systems, and cloud-native service architectures. - Experience working with bug bounty programs or coordinating external security assessments. Why Work With Us Phantom's journey to becoming a global trading app began with making crypto easier to use. Today, we’re building on that foundation to help people discover the markets that matter, make informed financial moves, and safely store or spend their money worldwide. Joining Phantom means helping shape that next chapter: building products that bring the freedom of open markets to more people.   - Build for global impact: Create products used by tens of millions of people, making innovative financial markets more accessible to users around the world. - Make complexity feel simple: Solve meaningful challenges across design, engineering, and user experience to make discovering markets and managing money seamless. - Put users in control: Help build a future where people have greater freedom over their assets and financial decisions, with security and self-custody at the foundation. Benefits (only available to full-time employees) - Competitive salary and equity - Comprehensive insurance (medical/dental/vision): base plan 100% covered - Flexible hours and a long-standing, supportive remote environment - Unlimited vacation: Take time when you need it (and we really mean it!) - 401(k) retirement plan - Wellness stipend - Weekly meal stipend - Learning & Development stipend - Remote / WFH set-up stipend We strongly encourage candidates of all backgrounds to apply. We believe that our work is stronger with a variety of perspectives, and we’re eager to further diversify our company. If you have a background that you feel would make an impact at Phantom, please consider applying. We’re committed to building an inclusive, supportive place for you to do the best work of your career. By submitting your resume and application materials, you acknowledge and agree that Phantom Technologies, Inc. ("Phantom") collects and processes your personal information (including application materials, interview records, and related data) to evaluate your candidacy. Phantom may use AI-powered tools and third-party service providers for transcription, note-taking, scheduling, and other administrative tasks. Phantom does not sell your information and your materials will be handled securely and in accordance with applicable data protection laws.

Location: ES - Spain Scopely is looking for a Senior Identity Security Engineer to join our Information Security team on a remote basis or hybrid basis if located in Barcelona.  This is a hands-on engineer who will build identity controls that reduce excessive privilege and protect critical operations. You will improve access across employee, player, business partner, and non-human identities by building AI-native identity workflows: agentic systems that handle provisioning, access reviews, and remediation within explicit guardrails, with humans approving what matters. Your work will protect the identities and access that support Scopely’s critical business processes, including essential enterprise functions and game operations.  This is a highly technical, hands-on role for someone who can operate across AWS, GCP, Okta, AWS IAM Identity Center, Zero Trust access models, identity governance workflows, and modern AI-enabled engineering environments, while building scalable identity systems through Infrastructure as Code, workflow orchestration, and automation-first security engineering. What You Will Do Reduce identity attack surface and privilege Reduce standing and excessive access with least-privilege roles, just-in-time and time-bound elevation, and automated access reviews. Build repeatable identity and access workflows that make onboarding, approvals, role changes, reviews, and offboarding consistent, traceable, and timely. Govern non-human identities, including service accounts, workload identities, CI/CD identities, API credentials, and AI agents and their tool integrations: inventory them, assign owners, replace long-lived secrets with short-lived or federated credentials, and rotate or revoke on a schedule and on signal. Strengthen identity protection and resilience Protect access to critical business processes and systems with phishing-resistant authentication (passkeys/FIDO2), device trust and posture signals, tightly controlled privileged access, and prompt revocation of suspicious sessions or compromised credentials. Threat-model identity platforms, integrations, and access paths to identify exploitable trust relationships, privilege escalation, and credential misuse. Build identity telemetry and response workflows to detect risky sign-ins, privilege changes, credential misuse, and compromised integrations. Design and test break-glass and recovery procedures for identity services and cloud access so teams can regain secure access during an outage or compromise. Extend the same patterns to player and partner identities where security owns the controls: platform identity federation (Apple, Google, Steam, console), account linking and recovery, external and vendor access, and defenses against account takeover and credential stuffing. Build AI-native identity services Build and operate reusable identity controls and services using infrastructure as code, APIs, scripting, and delivery pipelines. Apply code review, testing, drift detection, and audit trails so that every change, whether made by an engineer or an agent, is safe to deploy and easy to investigate. Design and build multi-agent workflows that surface identity risk, run access attestations, and triage and remediate access issues end to end. Engineer the harness those agents run in: scoped tools and permissions, curated context and data access, evals and test cases, orchestration between agents, and observability, so agent behavior is predictable, reviewable, and improvable. Treat agents as identities. Give every agent and MCP integration its own scoped credentials, least-privilege permissions, and bounded data access; validate inputs and outputs; log every action; and require human approval for changes that touch privileged access or production. Work with game and platform stakeholders to adopt shared identity patterns. Measure progress through reduced standing privilege, stale access, and unmanaged identities, and less manual work. Produce audit-ready evidence for access reviews, privileged access, and lifecycle events as a byproduct of the workflows rather than a separate project. What You Bring 5+ years of experience in IAM, or identity-focused cloud/security engineering, including hands-on ownership of production identity controls in complex environments. Strong experience with Okta or a comparable workforce identity platform and AWS/GCP IAM, as well as federation and provisioning protocols such as SAML, OIDC, OAuth, and SCIM. Production experience building, testing, and operating identity services or automation using Terraform or comparable infrastructure as code, Python, Go, or TypeScript., APIs, version control, and CI/CD. Strong knowledge of least privilege, just-in-time privileged access, identity lifecycle and governance, authentication controls, and non-human or workload identity risk. Experience threat-modeling identity architectures, integrations, and access paths, and driving remediation with service owners. Hands-on experience building AI-native workflows: systems where agents carry out multi-step work end to end, designed from the start around what agents can be trusted to do and where humans approve. Using a coding assistant does not count. Working fluency with harness engineering and multi-agent development: defining tools and permissions, scoping context and data, writing evals, orchestrating specialized agents, and instrumenting agent runs so failures are diagnosable, plus the judgment to keep those systems inside least-privilege boundaries. Ability to lead technical work from design through deployment and operations, and explain identity risks and implementation choices to stakeholders. Experience with identity governance, privileged access, or cloud entitlement tooling, or having built the equivalent in-house. Nice-to-have Consumer identity (CIAM) at scale, Kubernetes workload identity, detection engineering or SIEM experience, Okta or cloud security certifications, gaming or live-service experience. About Scopely Scopely is a leading video game and global interactive entertainment company, home to many of the world’s most beloved and enduring experiences, including two of the most successful mobile games of all-time “MONOPOLY GO!” and “Pokémon GO,” along with “Stumble Guys,” “Star Trek™ Fleet Command,” “MARVEL Strike Force,” “WWE Champions,” the Scrabble® franchise, “Yahtzee® With Buddies,” and many others. Across mobile, web, PC, and console, Scopely creates, develops, publishes, and live-operates one of the most diversified and award-winning portfolios in the games industry — bringing hundreds of millions of players together through a shared love of play. Founded in 2011, Scopely is powered by its exceptional team — including thousands of world-class gamemakers around the globe, a distinctive tenet-driven culture, and its proprietary technology platform, Playgami. Together, these strengths have fueled Scopely’s position as the #1 mobile games company in the U.S. and #2 globally, generating more than $10 billion in lifetime revenue. Whether building global sensations like “MONOPOLY GO!” from the ground up, or expanding through strategic acquisitions, including the FoxNext, GSN, and Scopely Explore games businesses — Scopely consistently delivers experiences players love today and return to for years to come. Recognized multiple times as one of the "100 Most Influential Companies in the World" by TIME magazine and one of Fast Company's "World's Most Innovative Companies" and “Best Workplaces for Innovators,” Scopely believes that video games can be a force for good — creating meaningful connections, vibrant communities, and making life better through play. Scopely has global operations and partners across four continents in more than a dozen countries worldwide. For more information, visit: https://www.scopely.com/ . Notice to Candidates: Scopely will never request payment or financial information during the application or hiring process. Please apply only through our official website and verify that all Talent Partner communications come from an email address ending in @ scopely.com . Should you have any questions or encounter any fraudulent requests/emails/websites, please immediately contact recruiting@scopely.com. Our job applicant privacy policies are available here: California Privacy Notice and EEA/UK Privacy Notice . Employment at Scopely is based solely on a person's merit and qualifications. Scopely does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law. We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state and local law.

Location: Remote (US) About Onramp Onramp is building the money platform of the future for individuals, businesses, and financial institutions: Bitcoin, dollars, and stablecoins in one place, secured by multi-institution custody and delivered through products people love and APIs institutions build on. We are a FinCEN-registered Money Services Business, SOC 2 Type I compliant with the Type II observation period underway, and work directly with banks, custodians, and financial institutions. Security is not a department here. It is the product. The Role You'll be the day-to-day owner of Onramp's security roadmap, reporting to our Engineering Lead and partnering with our CCO, who owns SOC 2 and compliance. We already run a layered program mapped to our SOC 2 controls; your job is to take it further and keep it ahead of the threat landscape. About two-thirds of your time is security, the rest is product engineering on the same team. On any given week, you might: Advance our controls across identity, endpoint, network, email, and browser layers, and handle the change management that gets a small team to adopt them Lead incident response: triage, run the response, coordinate with custody partners when needed, and turn every event into a stronger playbook Build AI-driven offensive testing: continuous, agent-assisted pen testing and attack simulation that complements our manual program and feeds findings straight to engineering Harden the developer pipeline and cloud posture across GitHub, GCP, and Vercel: supply chain scanning, secrets management, IAM least-privilege, required checks on auth, withdrawal, and KYC paths Extend custody-specific monitoring and runbooks: fee wallet controls, signing and quorum alerting, address verification Refine the verification SOPs sales and ops use against deepfakes, synthetic identity, impersonation, and coerced withdrawals, and train the team on them Run access reviews, service account inventory, vendor risk reviews, and SOC 2 evidence as part of the work rather than after it Govern our AI-native toolchain with a lightweight pre-adoption review for new connectors and agents Ship product code in our TypeScript/Next.js and Elixir/Phoenix services Who You Are 4+ years hands-on security engineering, ideally at an early- or growth-stage fintech, custody, or exchange, where you owned the controls, not just the findings You've run incident response end to end and written the post-incident review Offensive-minded, with pen testing experience and real interest in making it continuous with AI agents A working software engineer on at least one side of a modern stack (React/Next.js and TypeScript, or Elixir/Phoenix, Node, or comparable) Deep on identity, endpoint, and cloud security in a Google Workspace, GitHub, GCP, and Vercel environment, and opinionated about right-sizing tooling for a small team Fluent in today's threats: AI-driven supply chain attacks, session theft, OAuth phishing, deepfake social engineering SOC 2 in practice: you know what an auditor asks for and build evidence into the workflow Insanely AI-native, with strong views on securing agents without adding friction A clear writer of runbooks, threat models, and async updates people actually read Calm in an incident, direct in a review, comfortable with early-stage ambiguity and pace You don't need bitcoin protocol experience to apply. You do need to be curious about it and willing to go deep on custody fast. Nice to Have Bitcoin custody experience (multisig, PSBT, key-agent architectures), Elixir/Phoenix, agentic security tooling, GCP Security Command Center or Wiz, Terraform, OSCP or equivalent, CTFs or public disclosures. Why This Role, Why Now Ownership: the program, standards, and tooling are yours to drive as we scale Stakes: we custody bitcoin for HNW clients, RIAs, and institutions. Withdrawals are irreversible The AI moment: budget and mandate to push AI-native security on both the defensive and offensive side Range: security engineer and product engineer in one seat, on a small team where you see the whole system How We Work Remote-first (US), high-trust, low-ceremony. Small pods, direct communication, written culture, biweekly all-hands with live AI demos. We care about output, not hours. This role starts as a remote contract with a clear path to full-time and equity once fit is confirmed on both sides. The Process Intro call, technical conversation with the Engineering Lead and CCO, a working session (bring your AI toolkit), founder conversation, offer. What We Offer High agency and first-principles thinkers Flat structure, builder-first execution culture Mission-driven: Bitcoin only, no altcoins Collaborative, transparent, and low-ego Competitive compensation, with meaningful equity on conversion to full-time How to Apply Send your resume and a short intro video to hiring@onrampbitcoin.com covering: A security control or program you owned end to end and how you got a team to adopt it An incident you helped run and what changed because of it One AI-leveraged workflow you've built or wished you had Why Onramp Email subject: Application — Security Engineer Apply Send us your application Email Your Application

Location: Remote What you’ll be part of Garner is on a mission to transform the U.S. healthcare system — and we’re the only proven player doing exactly that. We partner with employers to redesign how healthcare works: applying 550+ proprietary clinical metrics across 80+ specialties to a dataset of 320M+ patients to identify the best-performing doctors, then using compelling incentives to steer members to the care that helps them get healthier, faster. The result is a rare “win win” — better care and lower costs for both members and employers. In just five years, our work has helped over 2.5 million people access higher-quality care and saved $1B in healthcare costs. We recently raised our Series E and have doubled five years running. If you've ever wanted your work to solve a problem that touches every person in this country, this is the opportunity to do exactly that. You'd be joining a team fundamentally reimagining healthcare in the U.S. — and using AI to scale that impact further and faster than anyone else can. About the role: We are seeking a Staff Security Engineer to serve as a technical anchor for our security function. This role is critical for leading technical design reviews and ensuring our security posture scales alongside our rapid customer growth. You will be responsible for defining the security standards that protect sensitive healthcare data, ensuring our systems are resilient against evolving threats while maintaining high engineering velocity. Where you will work: Garner is headquartered in NYC, but this position is available for individuals who are comfortable with remote work and occasional travel to HQ. What you will do: Lead technical security design: Own the technical design and review process for security-critical systems, ensuring all new features meet Garner's high standards for data protection and resilience Master complex domains: Maintain and apply a mastery of one or more technical security domains (e.g., Cloud Security, AppSec, or Data) to solve the most complex business and technical challenges Course-correct technical direction: Identify when technical paths are inefficient or insufficient and proactively redirect efforts to capture higher ROI for the firm Architect automated defenses: Create and implement advanced tools and automation that increase the efficacy of security monitoring and incident response Translate ambiguity into execution: Take broad, complex security objectives and break them down into well-defined deliverables and architectural requirements for the broader engineering team Mentor through technical rigor: Raise the bar for the engineering function by providing high-level feedback during code and design reviews, fostering a culture of security-first development The ideal candidate has: Exceptional Technical Judgment: Proven ability to make high-stakes technical decisions that result in positive long-term outcomes for the company's security posture Strategic Problem-Solving: Effectively leverages context and data to analyze root causes and prioritize security initiatives that offer the greatest impact on risk reduction Influential Stakeholder Management: Builds strong relationships across the organization, conveying complex security risks in a clear and compelling manner to both technical and non-technical partners Drive for Innovation: Continuously identifies and implements creative solutions to pay down technical debt and improve the efficiency of our security infrastructure Reliability Under Pressure: Handles complex escalations and security incidents with discipline, ensuring rigorous analysis and comprehensive resolution without jumping to conclusions A desire to be a part of a high-performing, mission-driven team that operates with intense urgency, a strong sense of individual accountability, and a commitment to authentic feedback Technologies we use: Python, Kubernetes, Snowflake, AWS, Terraform, Wiz, Cyberhaven, and more This is a unique opportunity to join a fast-growing company in a transformative role, helping shape the future of healthcare. Compensation Transparency: The target salary range for this position is $258,000 - $310,000. Individual compensation for this role will depend on various factors, including qualifications, skills, and applicable laws. In addition to base compensation, this role is eligible to participate in our equity incentive and competitive benefits plans, including but not limited to: flexible PTO, Medical/Dental/Vision plan options, 401(k), Teladoc Health and more. Fraud and Security Notice: Please be aware of recent job scam attempts. Our recruiters use getgarner.com and garnerhealth.com email domains exclusively. If you have been contacted by someone claiming to be a Garner recruiter or a hiring manager from a different domain about a potential job, please report it to law enforcement here and to candidateprotection@garnerhealth.com . Equal Employment Opportunity: Garner Health is proud to be an Equal Employment Opportunity employer and values diversity in the workplace. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. Garner Health is committed to providing accommodations for qualified individuals with disabilities in our recruiting process. If you need assistance or an accommodation due to a disability, you may contact us at talent@garnerhealth.com .

Location: London, United Kingdom - Deliveroo Our Global Structure Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team. About the Role As a Senior Enterprise Security Engineer, you will lead the design and operation of security controls that protect our internal networks, workforce identities, endpoints and corporate systems. You will be working globally with security teams across US, EU and APAC, delivering against our goals and objectives - reducing risk and maturing controls. As a Senior, you will operate with a high degree of autonomy. You will define technical direction, make architectural decisions, and deliver complex security initiatives end-to-end. You will be expected to balance risk reduction with usability, ensuring controls are robust without impeding employee productivity. This role focuses on Identity and Access Management (IAM), Endpoint security (EDR), Network Security, logging and detection engineering, and secure SaaS enablement. You will work closely with IT, Legal, Privacy, Engineering and business stakeholders to embed security as a default practice across the organisation. Security controls will be aligned to recognised frameworks such as the CIS Critical Security Controls and the NIST Cybersecurity Framework (CSF). Key Responsibilities Architecture & Control Implementation: Design, deploy, and maintain core corporate security controls, including phishing-resistant MFA, Just-In-Time (JIT) access, strict role-based access control (RBAC), zero-trust architectures, device and identity bound proofing and modern network isolation. Tooling Ownership: Serve as the technical owner for a broad suite of corporate security systems, managing deployments, configurations, and API integrations for tools across the corporate environment. Technical Leadership: Lead and implement the technical strategy for Endpoint Device trust, Data Loss Prevention, Intellectual property storage, and SaaS application security. Alongside wider corporate security technical controls. Automation & Engineering: Write scripts and build tools to automate security workflows, incident response tasks, and audit evidence collection for compliance. Cross-Functional Collaboration: Work with IT and business operations to integrate security tools into everyday workflows. Guide non-security teams to adopt secure baselines (e.g., CIS Benchmarks) as standard practice. Mentorship: Mentor junior and mid-level engineers, explain technical concepts clearly to non-technical staff, and help improve the team's engineering standards. Minimum Qualifications Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience. 5+ years’ experience in Security Engineering, Corporate Security, Detection & Response, or a related field. Hands-on experience administering IAM platforms (e.g. Okta, GoogleWorkspace). Deep hands-on experience with GoogleWorkspace products Practical hands-on experience with Cloud platforms (e.g AWS, GCP) Relevant and practical experience with Infrastructure-as-code (e.g Terraform) Experience implementing modern authentication standards (FIDO2, WebAuthn, SAML, OAuth 2.0, OpenID Connect). Practical experience securing macOS, Windows and Linux endpoints using MDM and EDR/XDR tooling. Experience operating SIEM and/or SOAR platforms and tuning detection logic. Experience with vulnerability management and patch governance. Ability to write production-quality automation scripts. Demonstrated experience leading cross-functional technical initiatives. Desirable Skills Experience with SASE or Zero Trust Network Access platforms. Hands on experience deploying applications into K8 and Docker environments Data Loss Prevention (DLP) and SaaS security governance. Advanced detection engineering or SOAR playbook development. Experience supporting ISO 27001 or SOC 2 audits. Relevant certifications (e.g. CISSP, CISM, GIAC). Diversity, Equity and Inclusion At Deliveroo, we know that a great workplace reflects the world around us and that true diversity and inclusion make us stronger, more creative, and better at what we do. We’re committed to fostering an environment where everyone can do their best work and feel they belong. We believe in equality of opportunity and welcome candidates from all backgrounds regardless of age, gender, ethnicity, disability, sexual orientation, gender identity, socio-economic background, religion, or belief. If you have a disability or long-term health condition and need support to apply for one of our roles, or require any reasonable adjustments during the recruitment process, you’ll have the opportunity to let us know once you’ve submitted your application. We’ll share details on how to request support so we can ensure you have a fair and equitable experience. If you’re excited about making a real impact in a fast-moving marketplace and growing your career alongside ambitious, supportive teams, we’d love to hear from you! Beware of recruitment scams: DASH Brands will never ask you to pay money or share sensitive financial information during hiring — learn more about DASH Brands' legitimate recruiting process at careersatdoordash.com/recruitment-scam-awareness .

Location: Москва Мы приглашаем специалиста по кибербезопасности для индийского филиала Сбера – того, кто возьмёт на себя методологию, процессы, комплаенс и аудиты, став надёжным связующим звеном между подразделением кибербезопасности филиала и головным офисом. Ваша цель – поддерживать надёжную основу для устойчивого развития бизнеса в Индии. Обязанности * Обеспечивать соответствие филиала требованиям Сбера и локальных регуляторов * Развивать процессы КБ филиала * Поддерживать стратегические инициативы филиала в области КБ * Сопровождать аудиты КБ * Готовить аналитические материалы и отчётность * Консультировать сотрудников по вопросам КБ и лучшим практикам Требования * 3+ года в кибербезопасности; * опыт в банках или международных компаниях * Английский — Upper-Intermediate и выше: вы готовы к регулярной коммуникации с зарубежными коллегами * Техническое образование или сильный практический опыт * Опыт участия в ИТ- или КБ-проектах. Опыт ведения проектов — плюс * Понимание ландшафта современных угроз, векторов атак и методов защиты * Умеете применять ИИ-инструменты в работе * Командный игрок, который берёт ответственность и доводит до результата в многозадачной среде Условия * Комфортный современный офис (ст.м.Кутузовская) * ежегодный пересмотр зарплаты, годовая премия * корпоративный спортзал и зоны отдыха * более 400 образовательных программ СберУниверситета для профессионального и карьерного развития * программа адаптации и помощь руководителя на старте * расширенный ДМС, льготное страхование для семьи и корпоративная пенсионная программа * гибкий дисконт по ипотечному кредиту, равный 1/3 ключевой ставки ЦБ * бесплатная подписка СберПрайм+, скидки на продукты компаний-партнеров * вознаграждение за рекомендацию друзей в команду Сбера.

Location: Serbia; Poland; Kazakhstan; Georgia; European Union Workplace: Remote 🌍 Remote Salmon is a technology-driven financial company building a banking and lending platform across Southeast Asia, starting in the Philippines. We combine global fintech expertise with deep local market knowledge to make financial services simple, accessible, and useful for millions of people across the region. 7M+ app downloads. 2M+ monthly active users. 7,000+ partner stores. US$310M+ raised from leading global investors. Manila-based, globally distributed, and hybrid-first — our team spans 45+ countries. If you want to solve complex problems at scale and impact how millions of people access and manage money, come build with us. Southeast Asia’s fintech moment starts here. About the role: You’ll build one ISMS framework for the whole Salmon Group, so every new regulation, licence, entity or market extends it instead of starting a new compliance project. What you’ll do: - Run the core GRC processes yourself while leading a GRC Engineer and growing the function. You report to the Group CISO. - Work with the Bank CISO, the Bank IS governance team, SOC, AppSec, IT, Risk, Compliance and Legal to apply one set of controls across every Group entity. BSP rules are one input to the framework, not its boundary. - Keep ISO/IEC 27001:2022 certification and PCI DSS v4.0.1 compliance as outputs of the common framework, and act as the main contact for the certification body and the QSA. What you’ll own: - Own the common controls framework: a single control catalogue with named owners, mapped to ISO/IEC 27001, PCI DSS, BSP regulations and the Data Privacy Act. It includes entity and jurisdiction overlays and standard risk and control matrices (RCMs). - Track changes in regulations and standards, and map each new obligation to an existing control or to a gap with an owner and a date. - Define how a new entity, licence, product or market joins the framework, and review new initiatives early for security and compliance impact. - Run information security risk management: methodology, risk register, annual assessment, treatment plans and risk acceptance. Own the policy lifecycle, an exception process with expiry dates, and the third-party security risk methodology. - Define how controls are tested and what counts as evidence. Automate control checks towards continuous monitoring, and select and implement a GRC platform. - Lead internal audits, external audits and regulatory examinations, and track findings to closure. Own responses to partner and client security due diligence. - Run the security and risk committees, report on risks and compliance status to the Group CISO and management, and brief and train managers and risk owners. Formalise the security services the Group provides to each entity. What makes you a strong fit: - 6+ years in information security GRC, including 2+ years leading a GRC function or programme - A track record of building or scaling a GRC programme, ideally around a common controls framework and RCMs mapped to several standards - Hands-on experience taking an ISO/IEC 27001 ISMS through certification and surveillance audits - Practical PCI DSS experience, ideally v4.0.1 in a payments or service provider environment - Experience in regulated financial services (banking, payments or lending), including designing control testing and working with auditors and regulators on findings - Working knowledge of ISO/IEC 27005 or NIST SP 800-30, clear writing for senior management, and daily use of AI tools to build your own automations with AI-assisted coding What we offer: Ownership and flexibility - Fully remote work - Company-provided tools and equipment Health and time off - Medical insurance support for you and your family through co-funding or reimbursement, depending on your location and subject to policy limits - Access to an internal mental health support specialist - 22 vacation days, Philippine public holidays, and 15 sick days Growth and team experience - Opportunities to learn and share your expertise through internal expert meetups, external conferences, speaking opportunities, and industry publications - Company-sponsored trips to Manila to meet and work with your team in person - High-performing teams can earn a dedicated beach house week in Southeast Asia We believe strong teams are built by people with different backgrounds, experiences, and points of view. Salmon is an equal opportunity employer, and we make hiring decisions based on skills, experience, and potential.

Location: India Job Overview We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations. The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms. Key Responsibilities Design, deploy, and manage enterprise network security solutions Configure and administer Fortinet, SonicWall, and Palo Alto firewalls Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies Monitor security events using SIEM, XDR, and SOC monitoring platforms Investigate security incidents, perform threat analysis, and support incident response activities Manage firewall policies, security rules, and compliance controls Implement Zero Trust Network Access (ZTNA) and identity-based security controls Support cloud security initiatives across AWS, Azure, and hybrid infrastructure Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions Conduct vulnerability assessments and remediation activities Collaborate with infrastructure, cloud, and application teams to secure enterprise environments Maintain security documentation, diagrams, SOPs, and audit records Participate in on-call rotations and critical incident handling GPU East-West and North-South traffic control and security AI networking and security integration expertise Understanding of AI infrastructure design and reference architectures SOP and runbook development and maintenance Incident, problem, and capacity management Business continuity and disaster recovery planning for AI workloads Proactive risk identification and mitigation to avoid business impact Compliance with industry frameworks and standards such as NIST, ISO, etc. Required Skills & Technologies Firewall & Network Security Fortinet FortiGate SonicWall Palo Alto Networks Check Point (preferred) Cisco Firepower / ASA VPN Technologies (IPSec / SSL VPN) IDS/IPS Web Application Firewall (WAF) NAC (Network Access Control) Modern Security Technologies Zero Trust Architecture (ZTA) ZTNA (Zero Trust Network Access) SASE (Secure Access Service Edge) SD-WAN Security SSE (Security Service Edge) CASB (Cloud Access Security Broker) Micro-segmentation Secure Remote Access Solutions SIEM, SOC & Threat Detection Experience with one or more: Splunk QRadar Microsoft Sentinel LogRhythm ArcSight Elastic SIEM Knowledge of: SOC operations Threat hunting Log correlation MITRE ATT&CK framework Incident response Threat intelligence integration Cloud & Infrastructure Security AWS Security Microsoft Azure Security Hybrid cloud networking Cloud firewall management Security Groups / NSGs Identity & Access Management (IAM) Endpoint & Advanced Security EDR/XDR platforms CrowdStrike Microsoft Defender SentinelOne Endpoint hardening DLP (Data Loss Prevention) Email security solutions Networking Fundamentals Strong understanding of: TCP/IP Routing & Switching VLANs BGP / OSPF DNS / DHCP Load Balancing Network troubleshooting Automation & Scripting (Preferred) Python PowerShell Bash scripting Security automation SOAR platforms Preferred Certifications Fortinet NSE / FCP Palo Alto PCNSA / PCNSE CCNP Security CISSP CEH CompTIA Security+ Microsoft SC Certifications AWS Security Specialty Education Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred. Soft Skills Strong analytical and troubleshooting skills Ability to work in high-pressure environments Excellent communication and stakeholder management Strong documentation and reporting abilities Proactive mindset with focus on continuous improvement

Location: Malaysia Job Overview We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations. The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms. Key Responsibilities Design, deploy, and manage enterprise network security solutions Configure and administer Fortinet, SonicWall, and Palo Alto firewalls Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies Monitor security events using SIEM, XDR, and SOC monitoring platforms Investigate security incidents, perform threat analysis, and support incident response activities Manage firewall policies, security rules, and compliance controls Implement Zero Trust Network Access (ZTNA) and identity-based security controls Support cloud security initiatives across AWS, Azure, and hybrid infrastructure Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions Conduct vulnerability assessments and remediation activities Collaborate with infrastructure, cloud, and application teams to secure enterprise environments Maintain security documentation, diagrams, SOPs, and audit records Participate in on-call rotations and critical incident handling GPU East-West and North-South traffic control and security AI networking and security integration expertise Understanding of AI infrastructure design and reference architectures SOP and runbook development and maintenance Incident, problem, and capacity management Business continuity and disaster recovery planning for AI workloads Proactive risk identification and mitigation to avoid business impact Compliance with industry frameworks and standards such as NIST, ISO, etc. Required Skills & Technologies Firewall & Network Security Fortinet FortiGate SonicWall Palo Alto Networks Check Point (preferred) Cisco Firepower / ASA VPN Technologies (IPSec / SSL VPN) IDS/IPS Web Application Firewall (WAF) NAC (Network Access Control) Modern Security Technologies Zero Trust Architecture (ZTA) ZTNA (Zero Trust Network Access) SASE (Secure Access Service Edge) SD-WAN Security SSE (Security Service Edge) CASB (Cloud Access Security Broker) Micro-segmentation Secure Remote Access Solutions SIEM, SOC & Threat Detection Experience with one or more: Splunk QRadar Microsoft Sentinel LogRhythm ArcSight Elastic SIEM Knowledge of: SOC operations Threat hunting Log correlation MITRE ATT&CK framework Incident response Threat intelligence integration Cloud & Infrastructure Security AWS Security Microsoft Azure Security Hybrid cloud networking Cloud firewall management Security Groups / NSGs Identity & Access Management (IAM) Endpoint & Advanced Security EDR/XDR platforms CrowdStrike Microsoft Defender SentinelOne Endpoint hardening DLP (Data Loss Prevention) Email security solutions Networking Fundamentals Strong understanding of: TCP/IP Routing & Switching VLANs BGP / OSPF DNS / DHCP Load Balancing Network troubleshooting Automation & Scripting (Preferred) Python PowerShell Bash scripting Security automation SOAR platforms Preferred Certifications Fortinet NSE / FCP Palo Alto PCNSA / PCNSE CCNP Security CISSP CEH CompTIA Security+ Microsoft SC Certifications AWS Security Specialty Education Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred. Soft Skills Strong analytical and troubleshooting skills Ability to work in high-pressure environments Excellent communication and stakeholder management Strong documentation and reporting abilities Proactive mindset with focus on continuous improvement

Location: Singapore Job Overview We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations. The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms. Key Responsibilities Design, deploy, and manage enterprise network security solutions Configure and administer Fortinet, SonicWall, and Palo Alto firewalls Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies Monitor security events using SIEM, XDR, and SOC monitoring platforms Investigate security incidents, perform threat analysis, and support incident response activities Manage firewall policies, security rules, and compliance controls Implement Zero Trust Network Access (ZTNA) and identity-based security controls Support cloud security initiatives across AWS, Azure, and hybrid infrastructure Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions Conduct vulnerability assessments and remediation activities Collaborate with infrastructure, cloud, and application teams to secure enterprise environments Maintain security documentation, diagrams, SOPs, and audit records Participate in on-call rotations and critical incident handling GPU East-West and North-South traffic control and security AI networking and security integration expertise Understanding of AI infrastructure design and reference architectures SOP and runbook development and maintenance Incident, problem, and capacity management Business continuity and disaster recovery planning for AI workloads Proactive risk identification and mitigation to avoid business impact Compliance with industry frameworks and standards such as NIST, ISO, etc. Required Skills & Technologies Firewall & Network Security Fortinet FortiGate SonicWall Palo Alto Networks Check Point (preferred) Cisco Firepower / ASA VPN Technologies (IPSec / SSL VPN) IDS/IPS Web Application Firewall (WAF) NAC (Network Access Control) Modern Security Technologies Zero Trust Architecture (ZTA) ZTNA (Zero Trust Network Access) SASE (Secure Access Service Edge) SD-WAN Security SSE (Security Service Edge) CASB (Cloud Access Security Broker) Micro-segmentation Secure Remote Access Solutions SIEM, SOC & Threat Detection Experience with one or more: Splunk QRadar Microsoft Sentinel LogRhythm ArcSight Elastic SIEM Knowledge of: SOC operations Threat hunting Log correlation MITRE ATT&CK framework Incident response Threat intelligence integration Cloud & Infrastructure Security AWS Security Microsoft Azure Security Hybrid cloud networking Cloud firewall management Security Groups / NSGs Identity & Access Management (IAM) Endpoint & Advanced Security EDR/XDR platforms CrowdStrike Microsoft Defender SentinelOne Endpoint hardening DLP (Data Loss Prevention) Email security solutions Networking Fundamentals Strong understanding of: TCP/IP Routing & Switching VLANs BGP / OSPF DNS / DHCP Load Balancing Network troubleshooting Automation & Scripting (Preferred) Python PowerShell Bash scripting Security automation SOAR platforms Preferred Certifications Fortinet NSE / FCP Palo Alto PCNSA / PCNSE CCNP Security CISSP CEH CompTIA Security+ Microsoft SC Certifications AWS Security Specialty Education Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred. Soft Skills Strong analytical and troubleshooting skills Ability to work in high-pressure environments Excellent communication and stakeholder management Strong documentation and reporting abilities Proactive mindset with focus on continuous improvement

Location: United States Job Overview We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations. The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms. Key Responsibilities Design, deploy, and manage enterprise network security solutions Configure and administer Fortinet, SonicWall, and Palo Alto firewalls Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies Monitor security events using SIEM, XDR, and SOC monitoring platforms Investigate security incidents, perform threat analysis, and support incident response activities Manage firewall policies, security rules, and compliance controls Implement Zero Trust Network Access (ZTNA) and identity-based security controls Support cloud security initiatives across AWS, Azure, and hybrid infrastructure Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions Conduct vulnerability assessments and remediation activities Collaborate with infrastructure, cloud, and application teams to secure enterprise environments Maintain security documentation, diagrams, SOPs, and audit records Participate in on-call rotations and critical incident handling GPU East-West and North-South traffic control and security AI networking and security integration expertise Understanding of AI infrastructure design and reference architectures SOP and runbook development and maintenance Incident, problem, and capacity management Business continuity and disaster recovery planning for AI workloads Proactive risk identification and mitigation to avoid business impact Compliance with industry frameworks and standards such as NIST, ISO, etc. Required Skills & Technologies Firewall & Network Security Fortinet FortiGate SonicWall Palo Alto Networks Check Point (preferred) Cisco Firepower / ASA VPN Technologies (IPSec / SSL VPN) IDS/IPS Web Application Firewall (WAF) NAC (Network Access Control) Modern Security Technologies Zero Trust Architecture (ZTA) ZTNA (Zero Trust Network Access) SASE (Secure Access Service Edge) SD-WAN Security SSE (Security Service Edge) CASB (Cloud Access Security Broker) Micro-segmentation Secure Remote Access Solutions SIEM, SOC & Threat Detection Experience with one or more: Splunk QRadar Microsoft Sentinel LogRhythm ArcSight Elastic SIEM Knowledge of: SOC operations Threat hunting Log correlation MITRE ATT&CK framework Incident response Threat intelligence integration Cloud & Infrastructure Security AWS Security Microsoft Azure Security Hybrid cloud networking Cloud firewall management Security Groups / NSGs Identity & Access Management (IAM) Endpoint & Advanced Security EDR/XDR platforms CrowdStrike Microsoft Defender SentinelOne Endpoint hardening DLP (Data Loss Prevention) Email security solutions Networking Fundamentals Strong understanding of: TCP/IP Routing & Switching VLANs BGP / OSPF DNS / DHCP Load Balancing Network troubleshooting Automation & Scripting (Preferred) Python PowerShell Bash scripting Security automation SOAR platforms Preferred Certifications Fortinet NSE / FCP Palo Alto PCNSA / PCNSE CCNP Security CISSP CEH CompTIA Security+ Microsoft SC Certifications AWS Security Specialty Education Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred. Soft Skills Strong analytical and troubleshooting skills Ability to work in high-pressure environments Excellent communication and stakeholder management Strong documentation and reporting abilities Proactive mindset with focus on continuous improvement

Location: Serbia Job Overview We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations. The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms. Key Responsibilities Design, deploy, and manage enterprise network security solutions Configure and administer Fortinet, SonicWall, and Palo Alto firewalls Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies Monitor security events using SIEM, XDR, and SOC monitoring platforms Investigate security incidents, perform threat analysis, and support incident response activities Manage firewall policies, security rules, and compliance controls Implement Zero Trust Network Access (ZTNA) and identity-based security controls Support cloud security initiatives across AWS, Azure, and hybrid infrastructure Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions Conduct vulnerability assessments and remediation activities Collaborate with infrastructure, cloud, and application teams to secure enterprise environments Maintain security documentation, diagrams, SOPs, and audit records Participate in on-call rotations and critical incident handling GPU East-West and North-South traffic control and security AI networking and security integration expertise Understanding of AI infrastructure design and reference architectures SOP and runbook development and maintenance Incident, problem, and capacity management Business continuity and disaster recovery planning for AI workloads Proactive risk identification and mitigation to avoid business impact Compliance with industry frameworks and standards such as NIST, ISO, etc. Required Skills & Technologies Firewall & Network Security Fortinet FortiGate SonicWall Palo Alto Networks Check Point (preferred) Cisco Firepower / ASA VPN Technologies (IPSec / SSL VPN) IDS/IPS Web Application Firewall (WAF) NAC (Network Access Control) Modern Security Technologies Zero Trust Architecture (ZTA) ZTNA (Zero Trust Network Access) SASE (Secure Access Service Edge) SD-WAN Security SSE (Security Service Edge) CASB (Cloud Access Security Broker) Micro-segmentation Secure Remote Access Solutions SIEM, SOC & Threat Detection Experience with one or more: Splunk QRadar Microsoft Sentinel LogRhythm ArcSight Elastic SIEM Knowledge of: SOC operations Threat hunting Log correlation MITRE ATT&CK framework Incident response Threat intelligence integration Cloud & Infrastructure Security AWS Security Microsoft Azure Security Hybrid cloud networking Cloud firewall management Security Groups / NSGs Identity & Access Management (IAM) Endpoint & Advanced Security EDR/XDR platforms CrowdStrike Microsoft Defender SentinelOne Endpoint hardening DLP (Data Loss Prevention) Email security solutions Networking Fundamentals Strong understanding of: TCP/IP Routing & Switching VLANs BGP / OSPF DNS / DHCP Load Balancing Network troubleshooting Automation & Scripting (Preferred) Python PowerShell Bash scripting Security automation SOAR platforms Preferred Certifications Fortinet NSE / FCP Palo Alto PCNSA / PCNSE CCNP Security CISSP CEH CompTIA Security+ Microsoft SC Certifications AWS Security Specialty Education Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred. Soft Skills Strong analytical and troubleshooting skills Ability to work in high-pressure environments Excellent communication and stakeholder management Strong documentation and reporting abilities Proactive mindset with focus on continuous improvement

Location: Romania Job Overview We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations. The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms. Key Responsibilities Design, deploy, and manage enterprise network security solutions Configure and administer Fortinet, SonicWall, and Palo Alto firewalls Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies Monitor security events using SIEM, XDR, and SOC monitoring platforms Investigate security incidents, perform threat analysis, and support incident response activities Manage firewall policies, security rules, and compliance controls Implement Zero Trust Network Access (ZTNA) and identity-based security controls Support cloud security initiatives across AWS, Azure, and hybrid infrastructure Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions Conduct vulnerability assessments and remediation activities Collaborate with infrastructure, cloud, and application teams to secure enterprise environments Maintain security documentation, diagrams, SOPs, and audit records Participate in on-call rotations and critical incident handling GPU East-West and North-South traffic control and security AI networking and security integration expertise Understanding of AI infrastructure design and reference architectures SOP and runbook development and maintenance Incident, problem, and capacity management Business continuity and disaster recovery planning for AI workloads Proactive risk identification and mitigation to avoid business impact Compliance with industry frameworks and standards such as NIST, ISO, etc. Required Skills & Technologies Firewall & Network Security Fortinet FortiGate SonicWall Palo Alto Networks Check Point (preferred) Cisco Firepower / ASA VPN Technologies (IPSec / SSL VPN) IDS/IPS Web Application Firewall (WAF) NAC (Network Access Control) Modern Security Technologies Zero Trust Architecture (ZTA) ZTNA (Zero Trust Network Access) SASE (Secure Access Service Edge) SD-WAN Security SSE (Security Service Edge) CASB (Cloud Access Security Broker) Micro-segmentation Secure Remote Access Solutions SIEM, SOC & Threat Detection Experience with one or more: Splunk QRadar Microsoft Sentinel LogRhythm ArcSight Elastic SIEM Knowledge of: SOC operations Threat hunting Log correlation MITRE ATT&CK framework Incident response Threat intelligence integration Cloud & Infrastructure Security AWS Security Microsoft Azure Security Hybrid cloud networking Cloud firewall management Security Groups / NSGs Identity & Access Management (IAM) Endpoint & Advanced Security EDR/XDR platforms CrowdStrike Microsoft Defender SentinelOne Endpoint hardening DLP (Data Loss Prevention) Email security solutions Networking Fundamentals Strong understanding of: TCP/IP Routing & Switching VLANs BGP / OSPF DNS / DHCP Load Balancing Network troubleshooting Automation & Scripting (Preferred) Python PowerShell Bash scripting Security automation SOAR platforms Preferred Certifications Fortinet NSE / FCP Palo Alto PCNSA / PCNSE CCNP Security CISSP CEH CompTIA Security+ Microsoft SC Certifications AWS Security Specialty Education Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred. Soft Skills Strong analytical and troubleshooting skills Ability to work in high-pressure environments Excellent communication and stakeholder management Strong documentation and reporting abilities Proactive mindset with focus on continuous improvement

Location: Poland Job Overview We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations. The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms. Key Responsibilities Design, deploy, and manage enterprise network security solutions Configure and administer Fortinet, SonicWall, and Palo Alto firewalls Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies Monitor security events using SIEM, XDR, and SOC monitoring platforms Investigate security incidents, perform threat analysis, and support incident response activities Manage firewall policies, security rules, and compliance controls Implement Zero Trust Network Access (ZTNA) and identity-based security controls Support cloud security initiatives across AWS, Azure, and hybrid infrastructure Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions Conduct vulnerability assessments and remediation activities Collaborate with infrastructure, cloud, and application teams to secure enterprise environments Maintain security documentation, diagrams, SOPs, and audit records Participate in on-call rotations and critical incident handling GPU East-West and North-South traffic control and security AI networking and security integration expertise Understanding of AI infrastructure design and reference architectures SOP and runbook development and maintenance Incident, problem, and capacity management Business continuity and disaster recovery planning for AI workloads Proactive risk identification and mitigation to avoid business impact Compliance with industry frameworks and standards such as NIST, ISO, etc. Required Skills & Technologies Firewall & Network Security Fortinet FortiGate SonicWall Palo Alto Networks Check Point (preferred) Cisco Firepower / ASA VPN Technologies (IPSec / SSL VPN) IDS/IPS Web Application Firewall (WAF) NAC (Network Access Control) Modern Security Technologies Zero Trust Architecture (ZTA) ZTNA (Zero Trust Network Access) SASE (Secure Access Service Edge) SD-WAN Security SSE (Security Service Edge) CASB (Cloud Access Security Broker) Micro-segmentation Secure Remote Access Solutions SIEM, SOC & Threat Detection Experience with one or more: Splunk QRadar Microsoft Sentinel LogRhythm ArcSight Elastic SIEM Knowledge of: SOC operations Threat hunting Log correlation MITRE ATT&CK framework Incident response Threat intelligence integration Cloud & Infrastructure Security AWS Security Microsoft Azure Security Hybrid cloud networking Cloud firewall management Security Groups / NSGs Identity & Access Management (IAM) Endpoint & Advanced Security EDR/XDR platforms CrowdStrike Microsoft Defender SentinelOne Endpoint hardening DLP (Data Loss Prevention) Email security solutions Networking Fundamentals Strong understanding of: TCP/IP Routing & Switching VLANs BGP / OSPF DNS / DHCP Load Balancing Network troubleshooting Automation & Scripting (Preferred) Python PowerShell Bash scripting Security automation SOAR platforms Preferred Certifications Fortinet NSE / FCP Palo Alto PCNSA / PCNSE CCNP Security CISSP CEH CompTIA Security+ Microsoft SC Certifications AWS Security Specialty Education Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred. Soft Skills Strong analytical and troubleshooting skills Ability to work in high-pressure environments Excellent communication and stakeholder management Strong documentation and reporting abilities Proactive mindset with focus on continuous improvement

О проекте: Международный проект в области AI Security, связанный с разработкой сред, которые помогают LLM-моделям проходить обучение с подкреплением для задач, связанных с кибербезопасностью. Эти среды содержат задания в различных областях кибербезопасности (пентестинг, реагирование на инциденты, эксплуатация, вредоносное ПО и т.д.), цель — создавать достаточно сложные задачи, чтобы модель допускала ошибки, но которые остаются решаемыми для профессиональных специалистов. Это не классическая позиция Pentester или Red Team Engineer. Основная задача — создавать сложные, но реалистичные и проверяемые security-сценарии, в которых LLM-модели совершают ошибки из-за недостатков в рассуждении (reasoning), а не из-за неоднозначных инструкций или ограничений среды. Задачи: — Проектировать security-сценарии для оценки и обучения LLM-моделей — Создавать environments с использованием GitHub, Slack и других инструментов, встречающихся в реальной разработке — Разрабатывать задачи, требующие сложного многошагового reasoning — Моделировать реальные offensive security-сценарии (supply chain attacks, malicious pull requests, exploitation через GitHub Actions и другие техники) — Проверять сценарии на нескольких frontier-моделях и анализировать причины ошибок — Формулировать ожидаемое поведение модели и описывать, почему ошибка считается reasoning failure — Автоматизировать создание и проверку задач с использованием Python и других инструментов Требования: — 5+ лет практического опыта в Offensive Security, Application Security или Web Penetration Testing — Глубокое понимание современных техник атак и поверхности атаки веб-приложений, API, GitHub, CI/CD и связанных экосистем — Практический опыт penetration testing и исследования безопасности приложений — Опыт разработки на Python и/или JavaScript — Навыки статического и динамического анализа кода (Python, JavaScript, Java) — Умение самостоятельно исследовать новые направления, проектировать сложные сценарии и объяснять результаты — Свободный английский язык (Upper-Intermediate / B2+) — Практический опыт работы с современными LLM-моделями — Понимание особенностей работы LLM, ограничений и типичных failure modes — Интерес к AI Security и исследованию поведения LLM Будет плюсом: — Практический опыт AI Red Teaming или LLM Security — Опыт работы с Agentic AI, AI Agents или Model Evaluation — Опыт исследований безопасности GitHub Actions, CI/CD, Supply Chain Security — Сертификаты OSWE, eWPTXv2, OWEE, OSWA или аналогичные — Публикации, write-ups, участие в Bug Bounty, HackTheBox, TryHackMe, Pwn2Own или других проектах Условия: — B2B-контракт (с ИП) — Оплата в долларах США — Part-time: ориентировочно 5–20 часов в неделю — Минимальный объем — 1–2 задачи в неделю — На выполнение одной задачи обычно требуется 5–10 часов — Локация — строго вне РФ (либо уже за пределами РФ, либо готовность к релокации) — Старт — ASAP

О проекте: Международный проект в области AI Security, связанный с разработкой сред, которые помогают LLM-моделям проходить обучение с подкреплением для задач, связанных с кибербезопасностью. Эти среды содержат задания в различных областях кибербезопасности (пентестинг, реагирование на инциденты, эксплуатация, вредоносное ПО и т.д.), цель — создавать достаточно сложные задачи, чтобы модель допускала ошибки, но которые остаются решаемыми для профессиональных специалистов. Это не классическая позиция Pentester или Red Team Engineer. Основная задача — создавать сложные, но реалистичные и проверяемые security-сценарии, в которых LLM-модели совершают ошибки из-за недостатков в рассуждении (reasoning), а не из-за неоднозначных инструкций или ограничений среды. Задачи: — Проектировать security-сценарии для оценки и обучения LLM-моделей — Создавать environments с использованием GitHub, Slack и других инструментов, встречающихся в реальной разработке — Разрабатывать задачи, требующие сложного многошагового reasoning — Моделировать реальные offensive security-сценарии (supply chain attacks, malicious pull requests, exploitation через GitHub Actions и другие техники) — Проверять сценарии на нескольких frontier-моделях и анализировать причины ошибок — Формулировать ожидаемое поведение модели и описывать, почему ошибка считается reasoning failure — Автоматизировать создание и проверку задач с использованием Python и других инструментов Требования: — 5+ лет практического опыта в Offensive Security, Application Security или Web Penetration Testing — Глубокое понимание современных техник атак и поверхности атаки веб-приложений, API, GitHub, CI/CD и связанных экосистем — Практический опыт penetration testing и исследования безопасности приложений — Опыт разработки на Python и/или JavaScript — Навыки статического и динамического анализа кода (Python, JavaScript, Java) — Умение самостоятельно исследовать новые направления, проектировать сложные сценарии и объяснять результаты — Свободный английский язык (Upper-Intermediate / B2+) — Практический опыт работы с современными LLM-моделями — Понимание особенностей работы LLM, ограничений и типичных failure modes — Интерес к AI Security и исследованию поведения LLM Будет плюсом: — Практический опыт AI Red Teaming или LLM Security — Опыт работы с Agentic AI, AI Agents или Model Evaluation — Опыт исследований безопасности GitHub Actions, CI/CD, Supply Chain Security — Сертификаты OSWE, eWPTXv2, OWEE, OSWA или аналогичные — Публикации, write-ups, участие в Bug Bounty, HackTheBox, TryHackMe, Pwn2Own или других проектах Условия: — B2B-контракт (с ИП) — Оплата в долларах США — Part-time: ориентировочно 5–20 часов в неделю — Минимальный объем — 1–2 задачи в неделю — На выполнение одной задачи обычно требуется 5–10 часов — Локация — строго вне РФ (либо уже за пределами РФ, либо готовность к релокации) — Старт — ASAP

Location: Remote Workplace: Remote Phantom https://phantom.com is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets that never close, including perpetuals, prediction markets, tokenized assets, stablecoins and memes. Phantom users are able to discover the markets that matter and the cultural moments that shape them, building conviction through real-time data and the verified performance of top traders. With self-custody and access to open networks at its core, Phantom lets them control their financial moves in the same app they use to safely store or spend money worldwide. Phantom has reached #1 in Google Play's finance category and consistently ranks in the top 50 apps across all categories. Check out our Forbes Fintech 50 https://www.forbes.com/sites/ninabambysheva/2026/02/23/inside-phantoms-battle-plan-to-win-the-crypto-fueled-superapp-war/ and CNBC and Statista's World's Top Fintech Companies 2026 https://www.cnbc.com/worlds-top-fintech-companies-2026/! We are around 180 people, fully remote, backed by a $150M Series C investment from a16z, Sequoia Capital and Paradigm. Platform security is foundational to protecting Phantom and the systems our users rely on. We’re hiring a Senior Platform Security Engineer to own and improve security across our AWS and Kubernetes environments. You’ll work directly with infrastructure and engineering teams to secure the control planes, identities, workloads, and deployment systems behind our most critical products. We’re building an AI-native security team that aggressively uses AI to expand the speed, depth, and reach of our work. We’re looking for a strong security engineer with high agency who can identify the risks that matter, build practical controls, and own problems through verified remediation. This is a hands-on role for someone who is comfortable working in production systems, writing code and infrastructure, responding to incidents, and making security improvements without slowing down the teams building on the platform. This role is fully remote; however, we’re only open to candidates based in the US and Canada. RESPONSIBILITIES - AWS Security: Own and improve security across Phantom’s multi-account AWS environment, including IAM, Identity Center, networking, compute, storage, secrets, logging, and organization-level guardrails. - Kubernetes Security: Secure production Kubernetes environments running on Amazon EKS, including cluster configuration, workload identity, RBAC, admission controls, network boundaries, secrets, container security, and tenant isolation. - Identity and Access: Design least-privilege access models for engineers, services, and automation. Build scoped, auditable, and time-bound access paths for sensitive production systems. - Mission-Critical Systems: Protect the infrastructure supporting products and services that handle sensitive data and high-value operations. - Cloud Security Architecture: Lead security design for new infrastructure, platform services, and major architectural changes. - Infrastructure and Policy as Code: Build reusable security controls using tools such as Pulumi, Terraform, Kubernetes policy engines, and automated configuration validation. - CI/CD and Supply Chain Security: Harden build, deployment, and release systems, including GitHub Actions, workload federation, build runners, dependencies, artifacts, signing, provenance, and access to production environments. - Security Automation: Build tools that identify and remediate cloud and Kubernetes risks at scale. Apply AI-assisted workflows where they materially improve analysis, coverage, or response speed. - Cross-Functional Leadership: Partner closely with Infrastructure, SRE, Developer Experience, and product engineering teams. Establish practical platform-security standards and help teams adopt them. QUALIFICATIONS - 7+ years of experience in platform security, cloud security, infrastructure security, security engineering, or a closely related engineering role. - Deep, hands-on experience securing production AWS environments. You understand IAM and resource policies, workload identity, network security, secrets management, logging, organization-level controls, and the ways these systems fail in practice. - Deep experience securing Kubernetes in production, preferably Amazon EKS, including RBAC, workload identity, admission policy, network policy, pod security, secrets, and cluster hardening. - Experience designing or securing mission-critical systems where compromise, excessive privilege, or loss of availability could have significant customer or business impact. - Strong understanding of identity, authorization, least privilege, isolation, and blast-radius reduction across both human and machine access. - Experience securing CI/CD and software supply chains, including GitHub Actions or similar systems, build runners, workload federation, artifacts, and production deployment paths. - Experience writing and reviewing infrastructure as code using Pulumi, Terraform, CloudFormation, or similar tools. - Ability to write production-quality code or automation in a language such as TypeScript, Python, Go, or Rust. - High agency and ownership. You can take an ambiguous platform-security problem from initial investigation through implementation and verified remediation. - Clear communication and a strong track record of partnering with infrastructure and engineering teams while maintaining a high security bar. NICE TO HAVES - Experience with AWS Nitro Enclaves or other trusted execution environments, including attestation, isolation boundaries, secure key handling, and operational lifecycle management. - Experience securing financial, payments, wallet, custody, or other high-value transaction systems. - Familiarity with key-management infrastructure, AWS KMS, CloudHSM, cryptographic signing systems, or secrets-management platforms. - Experience operating or securing multi-region Kubernetes and AWS environments at significant scale. - Familiarity with service meshes and cloud-native networking technologies such as Istio, PrivateLink, Transit Gateway, or eBPF-based controls. - Experience with GitHub OIDC, Argo CD, Helm, Crossplane, or Kubernetes-based infrastructure delivery. - Experience using cloud-security and observability platforms such as Wiz, Datadog, GuardDuty, Security Hub, or CloudTrail. - Experience building policy-as-code, automated remediation, or security tooling used by a large engineering organization. - Familiarity with blockchain infrastructure or self-custodial wallet architecture. The target base salary for this role will range between $200,000 to $250,000 with the addition of equity and benefits. This is determined by a few factors including your skillset, prior relevant experience, quality of interviews and market factors (such as location) at the point in time of offer. Why Work With Us Phantom's journey to becoming a global trading app began with making crypto easier to use. Today, we’re building on that foundation to help people discover the markets that matter, make informed financial moves, and safely store or spend their money worldwide. Joining Phantom means helping shape that next chapter: building products that bring the freedom of open markets to more people.   - Build for global impact: Create products used by tens of millions of people, making innovative financial markets more accessible to users around the world. - Make complexity feel simple: Solve meaningful challenges across design, engineering, and user experience to make discovering markets and managing money seamless. - Put users in control: Help build a future where people have greater freedom over their assets and financial decisions, with security and self-custody at the foundation. Benefits (only available to full-time employees) - Competitive salary and equity - Comprehensive insurance (medical/dental/vision): base plan 100% covered - Flexible hours and a long-standing, supportive remote environment - Unlimited vacation: Take time when you need it (and we really mean it!) - 401(k) retirement plan - Wellness stipend - Weekly meal stipend - Learning & Development stipend - Remote / WFH set-up stipend We strongly encourage candidates of all backgrounds to apply. We believe that our work is stronger with a variety of perspectives, and we’re eager to further diversify our company. If you have a background that you feel would make an impact at Phantom, please consider applying. We’re committed to building an inclusive, supportive place for you to do the best work of your career. By submitting your resume and application materials, you acknowledge and agree that Phantom Technologies, Inc. ("Phantom") collects and processes your personal information (including application materials, interview records, and related data) to evaluate your candidacy. Phantom may use AI-powered tools and third-party service providers for transcription, note-taking, scheduling, and other administrative tasks. Phantom does not sell your information and your materials will be handled securely and in accordance with applicable data protection laws.