Вакансии

Location: Москва; Санкт-Петербург; Екатеринбург; Новосибирск; Нижний Новгород Workplace: Офис, Гибридный Мы строим инфраструктуру Yandex Cloud, поверх которой запускаются виртуальные машины пользователей и внутренние сервисы. Приходите автоматизировать ручные операции, разрабатывать для Kubernetes, развивать инструменты планирования ресурсов. Ждём, что вы пишете на Go или готовы быстро его освоить. Команда Server Infrastructure занимается эксплуатацией быстро растущей инфраструктуры Yandex Cloud в рамках подразделения Cloud Foundation Services. Мы строим надёжную и масштабируемую инфраструктуру, поверх которой запускаются виртуальные машины пользователей и внутренние сервисы. В сервисах реализуем различные сценарии работы с железом: от процессов ввода, вывода, починки до бесшовного обновления ОС на всём кластере. Наши сервисы работают с большим количеством облачных и общих яндексовых систем, собирают данные о хостах, метрики состояния железа и кластера в целом, чтобы планировать обслуживание серверов и распределять ресурсы. Мы предоставляем сервисы и инструменты, которые упрощают и автоматизируют внутренние процессы, делают инфраструктуру прозрачнее и стабильнее, снимают с инженеров рутинную работу. Под нашим управлением уже более 20 тыс. серверов в трёх дата-центрах Яндекса, и их количество непрерывно растёт. Мы разрабатываем и постоянно совершенствуем способы мониторинга наших серверов и подходы к нему так, чтобы заранее и автоматически диагностировать неполадки и выполнять обслуживание, не дожидаясь выхода серверов из строя. В работе мы используем: * Golang и Python для разработки сервисов и автоматики * SaltStack и Terraform для описания инфраструктуры * TeamCity и Spinnaker для процессов CI/CD Обязанности Автоматизация жизненного цикла серверов Вам предстоит развивать систему эксплуатации инфраструктуры Yandex Cloud: заменять ручные операции автоматикой — от ввода и вывода серверов до бесшовного обновления ОС на всём кластере. Разработка системы инвентаризации Вы будете проектировать и дорабатывать систему инвентаризации, которая объединяет физическую и логическую информацию обо всём парке железа, — чтобы хранить и использовать данные об инфраструктуре было проще. Разработка для Kubernetes Вы будете участвовать в разработке Kubernetes-операторов и устройств на базе device plugin, а также интегрировать NRI (Node Runtime Interface) — инструменты, через которые облако управляет ресурсами узлов кластера и контейнерами на хостах. Разработка сервисов мониторинга Вы будете заниматься разработкой сервисов-агентов для мониторинга, сбора метрик и выполнения проверок на хостах — чтобы неполадки диагностировались автоматически, до выхода сервера из строя. Развитие инструментов планирования ресурсов Также вы займётесь поддержкой и развитием инструментов, которые помогают планировать и распределять ресурсы внутри облака. Больше о том, что под капотом платформы Yandex Cloud, — в канале Inside Yandex Cloud Требования * Пишете чистый код на Go — либо на Python и готовы быстро освоить Go * Разрабатывали и поддерживали отказоустойчивые системы * Выстраивали и эксплуатировали CI/CD-процессы для сервисов, использовали концепцию Infrasructure as Code * Знаете, как построить идеальный мониторинг * Любите улучшать процессы и автоматизировать задачи, писали сервисы и утилиты для автоматизации Будет плюсом * Работали с системами контейнеризации и управления конфигурациями: Docker, K8s, SaltStack, Ansible, Terraform * Разрабатывали операторы и плагины для K8s * Строили облачные сервисы * Глубоко знаете Linux

Location: Москва Workplace: Гибридный О компании ИРТЕЯ является дочерней компанией ПАО «МТС», сохраняя при этом атмосферу стартапа. У нас динамичность и стремление к результатам сочетаются с комфортом и стабильностью корпоративной среды. В стенах ИРТЕЯ создается будущее российской мобильной связи. Наш флагманский продукт для российских операторов – базовая станция LTE/5G, построенная на принципах открытой архитектуры OpenRAN. И в нашу команду мы приглашаем Ведущего DevOps-инженера! Обязанности Создавать пайплайны CI/CD, поддерживать текущие; Взаимодействовать с командами разработки и тестирования; Управлять стендозависимыми параметрами, конфигурациями и секретами; Дорабатывать пайплайны CI/CD (TeamCity); Осуществлять написание и оптимизацию манифестов (helm charts); Осуществлять оптимизацию времени выполнения джобов и доработок в соответствии с требованиями команды сопровождения. Требования Опыт работы DevOps/SRE-инженером от 4-х лет с пониманием полного жизненного цикла ПО; Уверенное администрирование Linux на уровне production (диагностика, тюнинг); Практический опыт с инструментами IaC: Terraform, Ansible, Helm; Глубокое понимание Docker и контейнерных окружений: multi-stage сборки, безопасность, оптимизация образов; Опыт работы с Kubernetes: понимание основных компонентов кластера, деплой приложений через Helm, работа с ConfigMaps, Secrets, Ingress; Опыт проектирования и поддержки CI/CD-процессов на базе TeamCity, GitLab CI/CD; Понимание специфики поддержки проектов на C, Python, Golang; Уверенное знание сетевых технологий: TCP/IP, DNS, HTTP/S, балансировка нагрузки, основы работы распределённых систем; Готовность к участию на оперативноное реагирование на инциденты; Будет существенным плюсом: опыт администрирования и тюнинга on-premise Kubernetes (понимание работы API-server, etcd, kubelet, CNI, NetworkPolicy, Persistent Volumes), знакомство с экосистемой HashiCorp (Vault, Consul, Packer, Terraform), понимание принципов DevSecOps и опыт внедрения проверок безопасности (SAST/DAST) в CI/CD (Kingfisher, track, wave, sonar). Условия Собственную платформу MTS Ocean для получения ИТ-ресурсов, а это значит, что деплой, мониторинг, observability не будут для тебя проблемой, ты сможешь сосредоточиться на фичах; Профессиональные гильдии инженеров, где мы поддерживаем друг друга и помогаем стать лучше; Внутреннюю площадку TechTalks для обмена опытом, дискуссий, развития навыков самопрезентации; Участие во внешних IT-конференциях. Мы выступаем на HighLoad++, DataFest, Mobius, Test Driven Conf, Joker, DevOps, Матемаркетинг и даже проводим собственную конференцию по архитектуре True Tech Arch; Полезные курсы и вебинары в корпоративном университете и электронную библиотеку. Медицинскую страховку после испытательного срока со 100% покрытием расходов, включая стоматологию, страхование жизни и здоровья в поездках за рубеж. А еще можно застраховать родственников с корпоративной скидкой; Единую подписку МТС Premium — KION light в онлайн-кинотеатре KION, сервис МТС Music, 30 дней бесплатного пользования подпиской OZON Premium; Скидки и предложения от партнеров на фитнес, занятия английским и прочее.

Location: Remote - Mexico Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . Job Summary If you like owning problems end to end, making security a default property of everything we build, and working closely with engineering, we want to meet you. Bugcrowd is looking for security engineers who move beyond standard tooling and drive measurable security outcomes our customers can rely on. You will help us shape a culture where security helps others succeed, not just points out problems. Essential Duties and Responsibilities Partner Closely with Engineering : Refine architecture, validate new features, and drive security investment while prioritizing engineering velocity Build Security Paved Roads : Contribute to the secure defaults, libraries, and "paved roads" that systematically eradicate entire classes of vulnerabilities rather than fixing bugs one by one Create Feedback Loops : Tune security tooling such as SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters Be our Best Customer : Ensure our bug bounty program can be a model for other customers. Experiment with new ways to leverage the creativity of the crowd. Provide feedback on new platform features to engineering and product Own Projects End to End : Lead cross-functional product security projects from scoping through delivery, influencing product and engineering roadmaps and clearly communicating risk to both technical and non-technical stakeholders Amplify our Impact : Use code and automation as a lever to scale coverage and eliminate repetitive work. Build systems based on incentives and accountability rather than just bureaucratic process Education, Experience, Knowledge, Skills, and Abilities 3+ years of experience in product security, application security, or secure software development Can review code, automate tasks, and build security tooling in at least one modern programming language (e.g., Python, Go, Ruby, Java) Hands-on experience with core application security practices — threat modeling, secure code review, and automated testing (SAST, DAST, SCA) — and a solid grasp of common vulnerability classes (e.g., OWASP Top 10) Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product. Bachelor's degree in engineering, computer science or relevant field, or equivalent practical experience Bonus Points (Preferred but not required) Previous experience with Bug Bounty or vulnerability disclosure programs A background in building "paved roads" or secure-by-default internal libraries to eliminate entire classes of vulnerabilities Hands-on experience securing cloud-native platforms and Infrastructure as Code (e.g., Terraform, AWS, GCP, Kubernetes, Docker) Experience working within a fast-paced, high-growth security or SaaS company Working Conditions and Physical Requirements The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and / or standing - Must be able to remain in a stationary position 50% of the time Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - remote, work-from-home 100% of the time Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

– Опыт работы/практика в области практического анализа защищенности веб-приложений;

Location: Москва Миссия роли: стать лидером компетенций в команде, обеспечивая бесперебойную работу и развитие CI/CD-платформы для 400+ продуктовых сервисов, выступая ключевым экспертом для продуктовых команд при разборе платформенных ошибок и трансформируя пользовательские тикеты в системные улучшения продукта в рамках концепции RunForChange. Обязанности * лидерство процесса troubleshooting пользовательских тикетов на L1 * совершенствование процесса и качества разбора тикетов L1 по CI/CD * обработка инцидентов (диагностика, устранение, разбор первопричин (RCA)) * консультирование пользователей и команд разработки по работе с платформой, решение обращений пользователей по вопросам CI/CD и инструментам * координация проведения работ на стенде со смежными командами * сопровождение и отладка существующих pipeline (Jenkins и аналоги) * участие в развитии и улучшении пайплайнов совместно с командами развития * автоматизация рутинных операционных задач (Python, Groovy, Bash) * реализация собственных мониторингов для отслеживания качества сопровождаемых сервисов * работа с системами сбора метрик и логов (Prometheus, Grafana, ELK или аналоги) * реализовывать автоматизации для оптимизации внутренних трудозатрат и трудозатрат продуктовых команд. Требования * опыт работы с CI/CD пайплайнами (Jenkins-pipeline) * базовые знания Linux (Debian/RHEL-семейство) * понимание контейнеризации и оркестрации: Kubernetes и/или OpenShift — ключевой стек * навыки написания скриптов для автоматизации: Python и/или Groovy * базовое понимание работы nginx (конфигурация, диагностика проблем) * навыки анализа логов и диагностики сетевых проблем * понимание REST API, базовые навыки работы с curl/HTTP * понимание принципов сетевого взаимодействия (TCP/IP, DNS, балансировка). **Будет преимуществом:** * умение читать и разбирать чужие конфигурации и манифесты (YAML, Helm-чарты) * способность самостоятельно разобраться в незнакомом сервисе и помочь пользователю * опыт работы с Helm, Operators, кастомными ресурсами Kubernetes/OpenShift * опыт с брокерами сообщений (Kafka) * опыт с Terraform или Ansible * английский язык на уровне чтения технической документации. Условия * офис: г Москва, проспект Кутузовский, 32 * ежегодный пересмотр зарплаты и годовая премия * корпоративный спортзал и зоны отдыха * более 400 образовательных программ СберУниверситета для профессионального и карьерного развития * расширенный ДМС, льготное страхование для семьи * гибкий дисконт по ипотечному кредиту, равный 1/3 ключевой ставки ЦБ * подписка Прайм с возможностью совместного использования на трёх близких * вознаграждение за рекомендацию друзей в команду Сбера.

Location: San Francisco; Remote (United States); Seattle; New York City Perplexity serves hundreds of millions of queries a month. Every answer, every Perplexity Computer task, and every enterprise deployment runs on production infrastructure owned by the Cloud Infrastructure team: a fleet of Kubernetes clusters across a multi-account AWS estate, private networks that reach hyperscalers and the neoclouds serving our models, and the storage underneath our user data and agentic workloads. We're looking for SREs who treat reliability as a software problem. You'll own compute, networking, and storage at scale and keep production stable while everything built on top of it is changing fast. RESPONSIBILITIES - Own production at scale. Run the compute, networking, and storage foundation behind Perplexity's consumer, Computer, API, and enterprise products, and own its availability, latency, and cost. - Run our Kubernetes fleet. Operate and upgrade the EKS clusters that host web services, search, datastores, and secure sandboxes. Tune scheduling, autoscaling, node lifecycle, DNS, and service networking so clusters stay healthy under bursty, fast-growing load. - Engineer the network. Design and operate VPC architectures, Transit Gateway and PrivateLink connectivity, load balancing, DNS, and egress across accounts, regions, and cloud providers. - Keep data durable and fast. Own the storage layer (EBS, S3, DynamoDB, and the managed databases and caches our services depend on), including performance, durability, backups, and restores that have actually been tested. - Manage everything as code. Run infrastructure through Terraform and CI/CD. Build reusable modules and guardrails, and make every change reviewable, repeatable, and safe to roll back. - Prepare for failures. Define SLOs, build alerts that someone can act on, design for zone and regional failure, and run game days and disaster-recovery exercises that prove recovery works. - Lead incident response. Be on the critical path when things break. Drive incidents to resolution, write blameless postmortems, and land the fixes so the same failure never pages anyone twice. - Scale ahead of demand. Own capacity planning, quotas, reservations, and cost efficiency so product launches and traffic spikes never wait on infrastructure. - Automate away the toil. Build tooling, increasingly agent-driven, that turns provisioning, upgrades, and remediation into self-serve, hands-off workflows for every engineering team. QUALIFICATIONS We expect you to have real depth in most of these: - Deep AWS expertise. You know VPC, IAM, EC2, EKS, ELB, Route 53, S3, EBS, etc. well past the console, including their limits, failure modes, and the bill that comes with them. - Production Kubernetes at scale: cluster upgrades, CNI, CoreDNS, autoscalers like Karpenter, and debugging a misbehaving node at 3 a.m. Writing Helm charts alone doesn't count. - Terraform mastery. You've designed module structures, managed state across many accounts, and run large refactors and imports without taking production down. - Strong networking fundamentals (TCP/IP, DNS, TLS, load balancing, routing). - You write real code in Python, Go, or Rust for automation, tooling, and controllers, and you'd rather automate a runbook than follow it. - Fluency with observability tools like Datadog, Prometheus, or Grafana, and the judgment to turn metrics, logs, and traces into SLOs and alerts that matter. - A track record of leading production incidents and turning root-cause analysis into durable fixes. - You own problems end-to-end and do well when the path forward isn't laid out for you. ADDITIONAL EXPERIENCE WE VALUE - Multi-region active-active or failover architectures, and disaster-recovery programs with real recovery targets. - Proxies, service meshes, and kernel-level networking: Envoy, Istio, Cilium, or eBPF. - GitOps and progressive delivery: Argo CD, Flux, or similar. - Enterprise and compliance environments: single-tenant or BYOC deployments, KMS/BYOK, SOC 2 or similar controls. - Running stateful systems in production: Postgres, Redis, or search engines like Vespa or Elasticsearch. - Multi-cloud or neocloud operations (GCP, CoreWeave, or similar). - FinOps: cost attribution, Savings Plans and reservations, and making infrastructure cheaper without making it fragile.

Location: San Francisco; Remote (United States); Seattle; New York City Perplexity serves hundreds of millions of queries a month. Every answer, every Perplexity Computer task, and every enterprise deployment runs on production infrastructure owned by the Cloud Infrastructure team: a fleet of Kubernetes clusters across a multi-account AWS estate, private networks that reach hyperscalers and the neoclouds serving our models, and the storage underneath our user data and agentic workloads. We're looking for SREs who treat reliability as a software problem. You'll own compute, networking, and storage at scale and keep production stable while everything built on top of it is changing fast. RESPONSIBILITIES - Own production at scale. Run the compute, networking, and storage foundation behind Perplexity's consumer, Computer, API, and enterprise products, and own its availability, latency, and cost. - Run our Kubernetes fleet. Operate and upgrade the EKS clusters that host web services, search, datastores, and secure sandboxes. Tune scheduling, autoscaling, node lifecycle, DNS, and service networking so clusters stay healthy under bursty, fast-growing load. - Engineer the network. Design and operate VPC architectures, Transit Gateway and PrivateLink connectivity, load balancing, DNS, and egress across accounts, regions, and cloud providers. - Keep data durable and fast. Own the storage layer (EBS, S3, DynamoDB, and the managed databases and caches our services depend on), including performance, durability, backups, and restores that have actually been tested. - Manage everything as code. Run infrastructure through Terraform and CI/CD. Build reusable modules and guardrails, and make every change reviewable, repeatable, and safe to roll back. - Prepare for failures. Define SLOs, build alerts that someone can act on, design for zone and regional failure, and run game days and disaster-recovery exercises that prove recovery works. - Lead incident response. Be on the critical path when things break. Drive incidents to resolution, write blameless postmortems, and land the fixes so the same failure never pages anyone twice. - Scale ahead of demand. Own capacity planning, quotas, reservations, and cost efficiency so product launches and traffic spikes never wait on infrastructure. - Automate away the toil. Build tooling, increasingly agent-driven, that turns provisioning, upgrades, and remediation into self-serve, hands-off workflows for every engineering team. QUALIFICATIONS We expect you to have real depth in most of these: - Deep AWS expertise. You know VPC, IAM, EC2, EKS, ELB, Route 53, S3, EBS, etc. well past the console, including their limits, failure modes, and the bill that comes with them. - Production Kubernetes at scale: cluster upgrades, CNI, CoreDNS, autoscalers like Karpenter, and debugging a misbehaving node at 3 a.m. Writing Helm charts alone doesn't count. - Terraform mastery. You've designed module structures, managed state across many accounts, and run large refactors and imports without taking production down. - Strong networking fundamentals (TCP/IP, DNS, TLS, load balancing, routing). - You write real code in Python, Go, or Rust for automation, tooling, and controllers, and you'd rather automate a runbook than follow it. - Fluency with observability tools like Datadog, Prometheus, or Grafana, and the judgment to turn metrics, logs, and traces into SLOs and alerts that matter. - A track record of leading production incidents and turning root-cause analysis into durable fixes. - You own problems end-to-end and do well when the path forward isn't laid out for you. ADDITIONAL EXPERIENCE WE VALUE - Multi-region active-active or failover architectures, and disaster-recovery programs with real recovery targets. - Proxies, service meshes, and kernel-level networking: Envoy, Istio, Cilium, or eBPF. - GitOps and progressive delivery: Argo CD, Flux, or similar. - Enterprise and compliance environments: single-tenant or BYOC deployments, KMS/BYOK, SOC 2 or similar controls. - Running stateful systems in production: Postgres, Redis, or search engines like Vespa or Elasticsearch. - Multi-cloud or neocloud operations (GCP, CoreWeave, or similar). - FinOps: cost attribution, Savings Plans and reservations, and making infrastructure cheaper without making it fragile.

Инженерные и платформенные задачи (60–70% времени): проектировать и разрабатывать инструменты для управления парком баз данных — развивать управление инстансами в сторону Kubernetes-операторов вместо статического Terraform-кода, переработать систему наполнения дев-стендов, заниматься подготовкой и обезличиванием данных.

- Разработка программного обеспечения от 8 лет, из них от 3 лет — руководство разработкой продуктов в промышленной эксплуатации: несколько команд, выпуск версий, сопровождение после выпуска. - Руководство разработкой, тестированием и инфраструктурой через руководителей команд: цели, план на месяц, загрузка в пределах нормы.

Location: Morocco; Egypt Intetics Inc. is a leading American technology company providing custom software application development, distributed professional teams creation, software product quality assessment, and “all-things-digital” solutions, is looking for a Senior DevOps Engineer to enrich its team with a skilled professional. Responsibilities: o Design and build resilient Cloud infrastructures that are protected against security threats o Develop and assess Cloud security solutions to secure systems, databases, and networks o Conduct assessment and make recommendations to ensure that appropriate controls are in place o Gain insight into security incidents and threats by monitoring/analyzing logs and performing vulnerability assessments o Participate in efforts that shape the company's security policies, procedures, and standards for use in Cloud environments o Create technical and managerial level security reports for Cloud-based applications and infrastructure o Implement and test network and security Disaster Recovery procedures to ensure business continuity o Monitor the use of sensitive data and regulate access to safeguard information o Ensure the confidentiality and integrity of data during transmission, storage, and processing o Review violations of security procedures and discuss procedures with violators to ensure they are not repeated o Provide support to end users regarding network and security-related issues Requirements o BSc/MSc in Information Security or any other related field o General experience of not less than 5 years in the DevOps field o Minimum 2 years of working experience in Information Security, with a proven focus on Cloud Security o Technical knowledge of Amazon Web Services (AWS) o Proficiency with AWS services such as IAM, Organizations, SO, VPC, Transit Gateway, S3, EC2, RDS, ELB, CloudTrail, Config, Inspector, GuardDuty, WAF, etc. o Clear understanding of current threats to Cloud infrastructure and advanced knowledge of securing such environments o Expertise in DevSecOps methodologies is considered a plus o Background building and deploying applications to the cloud (AWS, Azure, etc.) using Infrastructure as Code o Ability to work autonomously with minimum supervision and to integrate well within a team o Capability to quickly learn new technologies in depth o Availability to work in CET timezone Nice to Have: o Code tools such as Terraform o Expertise in container security o Proficiency with Microsoft Azure and Oracle Cloud o Experience with IntelicsML

Location: US, Remote Workplace: Remote The Luxor team has built a range of solutions for compute power, including a mining pool, custom firmware, an ASIC brokerage desk, Hashrate derivatives and compute to power CI and agents. We service clients across the globe. Our client base is growing rapidly and as such we are looking to expand our platform engineering team. We're looking for a Senior Platform Security Engineer with strong expertise in security and compliance. You'll join Luxor AI's Platform team and own the entire area of security and compliance within the team's scope, contributing to building and running production infrastructure. This role is ideal for someone who has experienced how security and compliance operate within a large organization and now seeks the autonomy to evolve that function at a fast-growing startup. It will suit an individual energized by the importance of the data we protect and the reliability we provide to our clients. This role will report directly to the Chief Technology Officer. This is a fully remote role based in U.S.A. with seldom travel if needed. RESPONSIBILITIES - Serve as a day-to-day security advisor for the team you support, advocating security requirements as an engineering team member during sprint planning, architecture reviews, process discussions, product direction, design decisions, and while work is in flight - Build and maintain centralized automated security testing and enforcement in CI/CD, including static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), secrets scanning, and infrastructure-as-code (IaC) scanning - Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate ongoing patching and hardening into engineering operations - Continually audit application environments and development processes to ensure compliance with internal and external requirements, and alignment with security standard methodologies - Implement and maintain cloud detection and response monitoring, and act as an incident CIRT responder - Document controls, configurations, and decisions to build durable institutional knowledge - Enforce policies and detection using device management tooling (e.g. FleetMDM) REQUIREMENTS - Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience - 8+ years of experience in DevOps, software engineering, or security engineering - Proficiency with CI/CD platforms (e.g. GitHub Actions), infrastructure as code tools (e.g.,Terraform), and configuration management (e.g. Ansible) - Proficiency in at least two of the following languages: Go, JavaScript, Rust, Python - Hands-on cloud security experience in GCP, Alibaba, AWS, OVH, Hetzner and/or Azure, including identity and access management, containerization, network security controls, encryption, logging, and monitoring - Harden access and controls (e.g. IAM Policy) - Hands-on experience with Kubernetes GitOps (e.g. Flux, ArgoCD) - Demonstrated experience implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement - Familiarity with penetration testing applications or experience conducting penetration testing engagements - Strong scripting skills in Python, or Bash for automation and integration - Experience supporting third-party attestations and audits (e.g., SOC 2 Type 2, ISO 27001), including preparation, implementation, and ongoing evidence collection - Operated and maintained Zero Trust network infrastructures using Tailscale and Cloudflare WARP, providing direct technical support to users while managing access policies and troubleshooting remote connectivity issues. - Deployed, configured, and administered SIEM (Security Information and Event Management). - Strong communication and governance skills, with the ability to translate technical risk into business terms for technical and non-technical audiences, and to advocate for security without slowing down delivery At Luxor we believe that meaningful contributions can be made by anyone. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Luxor welcomes all! Luxor does not accept unsolicited headhunter and agency resumes. Luxor will not pay any third-party agency or company that does not have a signed agreement with Luxor. HOW WE USE AI IN OUR HIRING PROCESS We use AI tools to support certain parts of our hiring process, and we believe in being transparent about how they’re used. During your application, AI may assist in reviewing CVs, qualifications, and assignments by providing additional insights, but it does not make decisions, every application is evaluated at each step by a member of our hiring team. We also use AI to transcribe interviews so our team can stay focused on the conversation rather than note-taking. Any voice recordings are automatically deleted within 15 days. In addition, AI helps us keep candidates informed about their application status and helps us understand how our process is working so we can improve it over time. In all cases, AI is used to support efficiency and consistency, not to replace human judgment. If you have any questions about how we use these tools or your data, or if you would prefer to opt out of any of these features, please include them in the dedicated section of the application form, and we’ll follow up accordingly.

Location: New York, NY; San Francisco, CA Workplace: OnSite ABOUT US Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Sierra was co-founded by Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/ who first met while working together at Google over 20 years ago. Bret currently serves as Chairman of the Board of Open AI. Previously, he was co-CEO of Salesforce and CTO of Facebook. Clay spent 18 years at Google, where he most recently led Google Labs. WHAT YOU'LL DO As Sierra’s founding Technical Program Manager for Enterprise Cloud Deployments, you’ll help define how we bring our AI platform into the cloud environments of some of the world’s largest and most regulated enterprises. Working alongside Agent Engineers, Deployed Infrastructure Engineers, and Agent Strategists, you’ll own the programs & strategy that take customers from deployment planning to agents live in production, and continue to support the upgrades and expansion that follow. You’ll bring your technical program management expertise to enterprise AI while establishing the playbooks and ways of working that help this new function scale. - Own the end-to-end program plan for a customer's in-VPC (Bring Your Own Cloud, BYOC) deployment. Translate customer requirements into a clear deployment plan, with clear workstreams, owners, milestones, and dependencies across Sierra and customer teams. - Keep the customer's teams (platform engineering, cloud provisioning, security, networking, model access) aligned and moving, and clear blockers before they hit the launch date. - Be the translation layer between our engineers and the customer's: define requirements such as model access, observability, and upgrade cadence, and turn technical discussions into actionable next steps. - Run the operating cadence (standups, weekly status, escalations) so leadership and working groups on both sides always know where the project stands. - Partner with Sierra's Platform and Deployed Infrastructure teams to feed customer-specific learnings back into our standard deployment offering, runbooks, and tooling, making each subsequent launch more predictable and repeatable. - Define the TPM function at Sierra as we scale & establish the playbooks, operating rhythms, and standards that future TPMs and customer teams will build on. WHAT YOU'LL BRING - 4+ years in technical program management, infrastructure or platform program management, deployment or solutions engineering, or a similar role where you were accountable for delivering complex technical projects across multiple teams. - A track record of bringing structure to complex technical programs, with strong attention to detail and the follow-through to turn plans into results. - A strong technical foundation from infrastructure, platform, or complex backend programs. You can work through technical dependencies with engineers, understand how requirements such as networking, permissions, and provisioning affect delivery, and translate those discussions into a clear plan. You’ll deepen your knowledge of Sierra’s architecture and customer deployment environments as you ramp. - Technical curiosity: you learn new systems quickly, ask thoughtful questions, build context, and apply what you learn to move programs forward. - Comfort operating inside large, complex enterprise organizations (change management, security reviews, ownership spread across many teams) with the persistence and resourcefulness to keep teams aligned and deployments moving. - Clear, structured communication: you make complex technical topics, program status, and decisions understandable to engineers and leaders, and adapt your approach to your audience. - Degree in Computer Science, Engineering, or a related field, or equivalent professional experience. EVEN BETTER… - Hands-on engineering background (software, DevOps, SRE, or infrastructure) before moving into program or product management, or direct experience with AWS, VPCs, IAM, Kubernetes, or Terraform. - Experience deploying software into customer-owned cloud environments (BYOC, VPC, or air-gapped), especially at banks or other regulated institutions. - Familiarity with LLM infrastructure: model gateways, Bedrock or Azure OpenAI, observability for AI systems. - Experience at an early-stage company where you built the program-management function from scratch. OUR VALUES - Trust: We build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work. - Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it. - Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn’t right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve. - Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time. - Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company for parents. We support and respect each other and celebrate each other’s personal and professional achievements. WHAT WE OFFER We want our benefits to reflect our values and offer the following to full-time employees: - Flexible (unlimited) paid time off - Medical, dental, and vision benefits for you and your family - Life insurance and disability benefits - Retirement plan dependent on country of employment - Parental leave - Fertility and family building benefits - Lunch, as well as delicious snacks and coffee to keep you energized when working onsite - Discretionary benefit stipend giving people the ability to spend where it matters most - Free alphorn lessons These benefits are further detailed in Sierra's policies, may vary by region and employment type, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full-time employees can participate in Sierra's equity plans subject to the terms of the applicable plans and policies. BE YOU, WITH US We're working to bring the transformative power of AI to every organization in the world. To do so, it is important to us that the diversity of our employees represents the diversity of our customers. We believe that our work and culture are better when we encourage, support, and respect different skills and experiences represented within our team. We encourage you to apply through the link on this page even if your experience doesn't precisely match the job description. Sierra is a proud equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by applicable federal, state or local laws, including veteran status and disability status. Hiring decisions are made by people, based on merit. If you need a reasonable accommodation for a disability, a religious practice, pregnancy or any related condition at any point in the application or interview process, contact us at accommodations@sierra.ai. Requests are handled confidentially and do not affect your candidacy. We will consider qualified applicants with arrest and conviction records in accordance with applicable fair chance laws.

Together AI is looking for Staff Engineers Distributed Storage HPC and AI Infrastructure to design and operate multi-petabyte AI storage systems and Kubernetes-native platforms.

Location: United States, San Mateo, CA Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. As a Senior Software Engineer, you will bring deep technical expertise, creative problem-solving, and strong communication skills to the design and development of cloud platforms, developer tools, and full-stack applications. You will help drive architectural decisions, build and scale production services, improve developer workflows, and establish engineering best practices. You will also serve as a technical resource for other engineers and users, providing technical guidance, documentation, troubleshooting, setup assistance, and expertise for the systems and tools you help build. Responsibilities Design, build, and maintain scalable, secure, reliable, and cost-effective cloud services on AWS, with a focus on serverless and event-driven architectures. Architect and implement production AWS solutions using services such as Lambda, Step Functions, ECS, DynamoDB, S3, and related technologies. Design and develop web applications and services spanning front-end, back-end, APIs, databases, and cloud infrastructure. Integrate cloud services with internal and external systems using secure, reliable, and maintainable interfaces and engineering practices. Design for operational reliability, including robust error handling, monitoring, and recovery from failures. Diagnose production issues and identify performance, reliability, usability, and developer-experience improvements. Collaborate with engineers, users, and partner teams to understand requirements, evaluate technical tradeoffs, and deliver practical solutions. Contribute to technical documentation, engineering standards, code reviews, and architectural decisions. Required Qualifications Bachelor’s or Master’s degree in Computer Science or a related field, or equivalent practical experience. 5+ years of professional software engineering experience in cloud platforms, backend systems, or related fields. Strong proficiency in Python, including software design, automated testing, and dependency management. Hands-on experience designing and implementing production systems on AWS. Experience with distributed, asynchronous, or event-driven system architectures. Demonstrated experience shipping and supporting at least one production cloud service. Experience with infrastructure as code (IaC), particularly Terraform. Experience designing and integrating REST APIs or other service-to-service interfaces. Experience debugging complex systems and diagnosing issues across multiple services and components. Strong written and verbal communication skills and the ability to collaborate effectively across teams. Desired Qualifications Experience with serverless and container-based AWS technologies such as Lambda, Step Functions, ECS/Fargate, DynamoDB, S3, API Gateway, SQS, SNS, or EventBridge. Experience with AWS security and identity concepts, including IAM, least-privilege access, secrets management, and service-to-service authentication. Experience with observability, tracing, monitoring, and debugging using tools such as Amazon CloudWatch and AWS CloudTrail. Experience designing CI/CD pipelines and automated deployment workflows. Experience developing full-stack web applications using technologies such as JavaScript/TypeScript, React, Node.js, Java, or SQL databases. Experience designing internal developer platforms, workflow systems, or developer-facing tools. Familiarity with Agile development methodologies such as Scrum. Familiarity with mobile application development, particularly Android or iOS. Familiarity with the PlayStation ecosystem. At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. The estimated base pay range for this role is listed below. $193,300 — $289,900 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice (where applicable) for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Professional Services Engineer at GitLab, you'll partner with public sector customers to help them successfully adopt and expand GitLab across their organization. You'll deliver services such as installation, migration, training, and advisory engagements, meeting customers where they are, from single-node Omnibus installations to larger reference architectures using infrastructure as code and configuration as code. In this role, you'll balance hands-on technical delivery with clear communication and project ownership, helping customers make practical choices that fit their goals, timelines, and environments. You'll also work closely with project managers and engagement managers to make delivery more consistent and improve how we run engagements. As you work with customers, you'll act as a feedback loop to GitLab's product and engineering teams by communicating insights that can improve GitLab features and delivery processes. This role is a strong fit for someone who enjoys solving complex problems, working across multiple engagements, and succeeding in a remote, largely asynchronous environment. Some examples of our projects: Delivering GitLab installations and upgrades using tools like Terraform or Ansible, from simple deployments to highly available architectures Leading migrations from existing systems to GitLab SaaS or self-managed GitLab, including planning, execution, and knowledge transfer What you'll do Deliver Professional Services engagements such as installation, migration, training, and advisory services to help customers achieve successful outcomes with GitLab, including completing projects on scope and on schedule. Plan and execute GitLab deployments across a range of architectures, from single-node Omnibus installations to large reference architectures using infrastructure as code and configuration as code practices. Oversee and perform migrations from multiple source systems to GitLab SaaS or self-managed GitLab, helping customers reduce risk, maintain momentum during change, and complete cutovers with minimal disruption. Provide technical guidance across the GitLab feature stack, helping customers adopt best practices that fit their goals, constraints, and operating environment. Partner closely with project managers and engagement managers by providing feedback and updates that improve delivery consistency, keep work on schedule, and reduce delivery issues across engagements. Manage and deliver multiple customer projects at once, balancing customer outcomes with awareness of billable time and delivery priorities to meet utilization and delivery goals. Mentor and assist other Professional Services Engineers by communicating expertise in specific technical areas and contributing to stronger, more repeatable delivery patterns. Work closely with GitLab's product and engineering teams to remove blockers for customers and help improve GitLab features and delivery processes based on field insights, leading to faster issue resolution and more consistent delivery. What you'll bring Professional experience with one or more infrastructure as code or configuration as code tools, such as Terraform, Ansible, Packer, Puppet, or Chef. Experience with one or more infrastructure as code or configuration as code tools such as Terraform, Ansible, Packer, Puppet, or Chef. Active TS/SCI clearance is required for this role due to the nature of the customers you’ll support. Occasional travel to SCIF sites as needed. Desirable locations - Reston or Springfield, VA Due to government security requirements, you must be a United States Citizen (defined as any individual who is a citizen of the United States by law, birth, or naturalization) to be eligible for this position Ability to support public sector customers with TS/SCI clearance-related requirements for their environments and engagements. Ability to lead technical delivery end-to-end, including discovery, planning, documentation, and knowledge transfer. About the team The Professional Services Engineer is part of GitLab's Professional Services organization, helping customers adopt GitLab successfully through installation, migration, training, and advisory engagements. The team works closely with Project Managers and customer stakeholders to deliver successful outcomes and help organizations expand how they use GitLab. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $138,080 — $230,040 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Remote Canada At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. About the InfoSec team The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. About the role We are building the next generation of enterprise Identity and Access Management at Affirm. This role combines hands-on IAM operations, automation, and production software engineering to make identity services more reliable, scalable, and easier to operate. You will help run core access lifecycle processes, troubleshoot production issues, and automate repetitive work. You will also build and maintain backend services, APIs, and integrations that connect identity platforms with internal systems. Software engineering is a must-have. You will work primarily with SailPoint and enterprise identity integrations, with CIAM-adjacent Auth0 work where enterprise systems intersect with customer identity. This is a strong opportunity for an engineer who wants to develop deep IAM expertise without stepping away from hands-on coding. What you’ll do Run and improve IAM operations, including access lifecycle work, requests, certifications, and issue resolution Automate repetitive processes with scripts, services, and workflow improvements Build and maintain production backend software, APIs, tests, and integrations Connect SailPoint and workforce identity events with internal systems Build a paved path that enables Affirm employees to create modern internal tools with Auth0 Partner with Security, IT, and Engineering on secure, auditable changes Maintain runbooks, operational metrics, and escalation support Example problems you may work on: Fixing a provisioning workflow and adding monitoring or retries Reconciling access between source systems and SailPoint Building an API integration for identity lifecycle events Creating reusable Auth0 patterns, tooling, and documentation for internal applications What we look for 2+ years of software engineering experience or equivalent internship/co-op experience with strong projects Ability to write, test, and operate production-quality backend code in Python or a similar language Strong foundations in APIs, debugging, logging, error handling, and distributed systems Experience with GitHub, CI/CD, testing, and code review Comfort owning operational work and troubleshooting production issues Familiarity with cloud environments; AWS preferred Strong written communication and documentation skills Nice to Have Exposure to IAM, IGA, SSO, SAML, OIDC, SCIM, RBAC, or identity governance Experience with SailPoint, Auth0, Okta, OneLogin, or similar platforms Experience with Terraform or other infrastructure-as-code tools Familiarity with audit or compliance environments Base Pay Grade - L Equity Grade - Canada 5 Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company). CAN base pay range per year: $133,000 - $183,000 $CAD. This remote role is open only to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan. #LI-Remote Remote-first with flexibility built in Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience. Benefits designed for you Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights: Health coverage at no cost: We cover 100% of premiums for employees and their dependents. Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you. Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to. Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount. We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help. For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law. By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and consent to the use of your personal information as described.

Location: Remote - India Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . Job Summary If you like owning problems end to end, making security a default property of everything we build, and working closely with engineering, we want to meet you. Bugcrowd is looking for security engineers who move beyond standard tooling and drive measurable security outcomes our customers can rely on. You will help us shape a culture where security helps others succeed, not just points out problems. Essential Duties and Responsibilities Partner Closely with Engineering : Refine architecture, validate new features, and drive security investment while prioritizing engineering velocity Build Security Paved Roads : Contribute to the secure defaults, libraries, and "paved roads" that systematically eradicate entire classes of vulnerabilities rather than fixing bugs one by one Create Feedback Loops : Tune security tooling such as SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters Be our Best Customer : Ensure our bug bounty program can be a model for other customers. Experiment with new ways to leverage the creativity of the crowd. Provide feedback on new platform features to engineering and product Own Projects End to End : Lead cross-functional product security projects from scoping through delivery, influencing product and engineering roadmaps and clearly communicating risk to both technical and non-technical stakeholders Amplify our Impact : Use code and automation as a lever to scale coverage and eliminate repetitive work. Build systems based on incentives and accountability rather than just bureaucratic process Education, Experience, Knowledge, Skills, and Abilities 3+ years of experience in product security, application security, or secure software development Can review code, automate tasks, and build security tooling in at least one modern programming language (e.g., Python, Go, Ruby, Java) Hands-on experience with core application security practices — threat modeling, secure code review, and automated testing (SAST, DAST, SCA) — and a solid grasp of common vulnerability classes (e.g., OWASP Top 10) Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product. Bachelor's degree in engineering, computer science or relevant field, or equivalent practical experience Bonus Points (Preferred but not required) Previous experience with Bug Bounty or vulnerability disclosure programs A background in building "paved roads" or secure-by-default internal libraries to eliminate entire classes of vulnerabilities Hands-on experience securing cloud-native platforms and Infrastructure as Code (e.g., Terraform, AWS, GCP, Kubernetes, Docker) Experience working within a fast-paced, high-growth security or SaaS company Working Conditions and Physical Requirements The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and / or standing - Must be able to remain in a stationary position 50% of the time Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - remote, work-from-home 100% of the time Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

Компания: — Формат: remote / hybrid Уровень ЗП: — Занятость: full-time / part-time 🖥 Формат Удалённая, гибрид 🕹 Работодатель 🕹 Список обязанностей: — Развертывание, настройка и эксплуатация production-инфраструктуры на базе Kubernetes. — Администрирование Linux-систем, контейнерной инфраструктуры Docker/Kubernetes, сетевых компонентов и хранилищ.