Location: US, San Diego, CA
Workplace: OnSite
Here at Humanoid, we believe in a future where robots amplify human potential. That’s why we’ve set out on a mission to build the world’s most capable, commercially-scalable, and safe humanoid robots. We’re bringing that mission to life with HMND‑01 - our rapidly developed humanoid platform being deployed in real industrial environments - and we’re growing the team to take it even further.
ABOUT THE ROLE
We’re hiring a Software Engineer to join our Platform Infrastructure team in San Diego. You’ll partner with a technical lead engineer and embedded in device identity and security—this is one area form the backbone of how we build, provision, deploy, and manage our robots at scale.
You will have the opportunity to contribute to:
- Device Identity & Security — The cryptographic chain of trust from secure boot through disk encryption and device attestation to cloud enrollment. Key management infrastructure, certificate lifecycles, and the tooling that ensures only trusted software runs on trusted hardware.
This role is designed for someone who is curious, technically sharp, and eager to learn, grow and build. Much of what you’ll work on—from secure boot pipelines to fleet-scale cloud infrastructure—isn’t taught in a classroom. We’re looking for the right attitude, aptitude and experience. We’ll invest in continuing your development into a world class platform engineer.
WHAT YOU'LL DO
Our platform infrastructure spans from the factory floor to the cloud and everything running on the robot in between.
- Build and ship software — Write production-quality code that contributes to our platform infrastructure, from backend services and automation tooling to provisioning and test systems.
- Learn alongside experts — Pair directly with a senior engineer who will mentor you in your focus area while giving you real ownership of deliverables.
- Collaborate across a global team — Work daily with firmware, applications, cloud, manufacturing, systems, and operations team members across the local San Diego office and global offices in London, Boston, and Vancouver.
- Embrace agentic development workflows — Use modern AI-assisted coding tools and practices we expect everyone on the team to leverage these to move faster with higher quality.
- Own your growth — As the team scales and business needs evolve, your focus within the platform infrastructure workstream will grow with you.
WHAT WE'RE LOOKING FOR
- Strong technical communication — You can explain your thought process clearly to a technical teammate, in writing and in person.
- Receptive to feedback — You have a demonstrated history of receiving and responding to feedback constructively.
- Leans into hard problems — You don’t shy away from unfamiliar territory; you dig in and figure it out.
- Humble — You are able to put your own ideas aside, listen, and genuinely consider others’ perspectives.
- Collaborative — You see knowledge as something to share, not withhold, in order to solve problems faster, together.
- Responsible — You strive to understand the “why” of your work and have the passion and ambition to push to get it over the line.
- Technically grounded — You have a solid foundation in CS fundamentals and can write clean, readable code even if you’re still building experience in our specific stack.
Experience:
- 5+ years of professional experience.
- B.S. or M.S. in Computer Science, Computer Engineering, Electrical Engineering, or a related field.
- Proficiency in at least one systems or backend language (Python, C/C++, TypeScript, or Rust).
- Proficiency in AI tools for research, iteration, feedback, development and test.
- Comfort working in Linux environments.
- Ability to work on-site at our San Diego office.
WHAT WE OFFER
- Comprehensive health coverage for US‑based employees, including fully paid medical, dental, and vision insurance, with virtual care and employee assistance resources.
- Meaningful time off to rest and recharge: 23 days of PTO (accrued), separate sick leave, and paid company holidays.
- 401(k) retirement plan with employer match.
- Equity included–we believe builders should share in what they build.
- Free daily catered lunch, snacks, and drinks in‑office.
- Collaboration with top‑tier engineers, researchers, and product experts in AI and robotics.
- Freedom to influence the product and own key initiatives.
For this role in California, the expected base salary range is $155,000-$185,000 USD per year; your placement in that range depends on how your experience maps to our internal leveling.
Location: Paris
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
Role summary
As a Platform Security Engineer on the Security team, you will architect and maintain the security posture of our rapidly scaling AI infrastructure and application lifecycle. Security is not a gate but an enabler, and you will embed robust controls into our continuous integration and deployment pipelines, infrastructure environments, and developer workflows to protect our systems without sacrificing velocity.
Your role exists to ensure that our research and engineering teams can move fast while staying secure. You will shape how security integrates with every layer of our stack, from code to cloud, making secure practices invisible to developers and automatic by default.
What you will do
- Drive threat modeling and risk prioritization exercises as the security counterpart in system-design reviews for core infrastructure and new products.
- Own end-to-end vulnerability management across continuous integration and deployment pipelines and runtime environments, covering infrastructure and applications.
- Secure our container orchestration deployments and containerized workloads, implementing advanced hardening to prevent lateral movement across distributed systems.
- Define and enforce Infrastructure-as-Code security by building robust guardrails and integrating policy-as-code directly into deployment pipelines.
- Design and execute a comprehensive security tooling strategy, managing solutions for cloud-native application protection, cloud security posture, static code analysis, dependency scanning, secrets management, and vulnerability tracking.
- Champion developer enablement by building secure defaults, streamlining remediation workflows, and drafting actionable security guidelines.
- Build foundational security automation to scale alongside hyper-growth, minimizing manual overhead while establishing a pragmatic security culture.
What we're looking for:
- Five or more years of experience in Platform Security, Security Engineering, or Cloud Security, ideally as an early security hire in a fast-scaling environment.
- Deep understanding of container orchestration and container security, alongside strong experience securing Infrastructure-as-Code across major cloud providers.
- Strong programming and scripting skills in languages such as Python or Go to build security automation and integrate diverse security tools into developer workflows.
- Extensive experience deploying and tuning modern security tooling with a pragmatic approach to vulnerability management and threat modeling.
- Strong communication skills with a proven track record of partnering with developers and researchers to embed secure defaults without creating engineering friction.
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: Metn, Lebanon
The Company
Toters is an on-demand e-commerce and delivery platform that enables customers to get anything in their city with the highest level of convenience.
At Toters, technology is at the heart of everything we do. Our product teams build features that simplify customers’ lives, while our engineers create scalable solutions to deliver faster and more cost-effectively. If you thrive in a high-growth startup environment and want to help reshape how people shop across the Middle East, join us.
Role Overview
As a Senior Offensive Security Engineer (L5), you will own complex offensive security initiatives that span multiple teams. You will lead advanced penetration testing, red team exercises, and adversarial simulations to uncover systemic weaknesses in our web applications, APIs, mobile apps, cloud infrastructure, identity, payment-adjacent flows, and overall attack surface.
You will act as a
hands-on technical leader
: influencing secure design decisions with evidence, mentoring mid-level and junior offensive engineers, and driving improvements that meaningfully reduce risk.
Description
In this senior role, you will take end-to-end ownership of offensive security efforts with a focus on high-impact outcomes. Your responsibilities include:
Lead comprehensive penetration tests and red team / assumed-breach exercises targeting web applications, APIs, mobile applications, cloud infrastructure, and authentication systems (including identity and privileged-access paths).
Lead mobile offensive testing on Android and iOS, including evaluation and bypass/validation of runtime protection, tamper resistance, certificate pinning / Certificate Transparency, and key/secret shielding using DexProtector or similar RASP / app-shielding tools, plus complementary tooling such as MobSF.
Perform in-depth threat modeling and identify complex attack paths across services and trust boundaries (including authorization flaws, tenant isolation, token/session issues, edge/WAF bypass, and client-secret exposure).
Deliver high-quality security assessment reports with clear risk ratings, business impact analysis, practical remediation guidance, and evidence quality that engineering and audit stakeholders can use in a SOC 2 and PCI DSS context—then re-test and validate fixes before closure.
Collaborate with Engineering, DevOps, Product, and the Security Engineer track to influence secure architecture decisions and ensure vulnerabilities are addressed at the root cause.
Develop and improve offensive security methodologies, tools, and automation to increase efficiency and coverage. AI-assisted testing is a must.
Mentor mid-level and junior offensive security engineers, conduct offensive-focused code/design reviews, and help raise the overall security capability of the team.
Participate in purple team exercises with the detection and incident response teams to improve defenses based on real attack simulations.
Stay at the forefront of offensive security research, emerging threats, and TTPs, and assess their relevance to Toters.
Contribute offensive input to security standards, policies, and secure development practices across the engineering organization (you advise; you do not own policy issuance or GRC evidence packs).
Support structured disclosure (VDP / researcher reports) through reproduce, rate, de-duplicate, and validate.
Key Qualifications
Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
6+ years of hands-on experience in offensive security, penetration testing, or red teaming.
Strong expertise in web application, API, and mobile security testing (Android and iOS).
Working knowledge of DexProtector or similar mobile shielding / RASP tooling: what it protects, how testers evaluate residual risk, and how to validate that hardening holds.
Advanced proficiency with offensive security tools (Burp Suite, Metasploit, Cobalt Strike or equivalent adversary-emulation platforms, custom tooling, etc.).
Proficient in writing robust, reusable scripts and small tools for automation (Python preferred, Bash for quick tasks).
Solid experience with cloud security testing (AWS preferred) and infrastructure attack techniques.
Proven ability to lead complex security assessments from scoping to reporting and remediation validation.
Strong risk assessment and threat modeling skills, with the ability to communicate technical risks clearly to both technical and non-technical stakeholders.
Familiarity with SOC 2 and PCI DSS as they apply to offensive work (scoped pentests, application/API/payment-adjacent testing, evidence-quality reporting). This role does not own control design or audit evidence collection.
Experience mentoring engineers and influencing cross-team security practices.
Excellent written and verbal communication skills in English.
Nice to Have
Industry-recognized certifications such as OSCP, OSCE, OSEP, CRTO, or PNPT.
Experience running full-scope red team or assumed-breach exercises.
Experience developing custom exploits, tooling, or automation for offensive security.
Knowledge of MITRE ATT&CK and adversary emulation.
AI and AI pentesting: testing LLM/agent applications (prompt injection, tool/plugin abuse, data-exfil via agents) and using AI-assisted pentest workflows with mandatory human review.
Previous experience in high-scale e-commerce, delivery, or fintech environments, including payment API / tokenization / third-party PSP testing as a tester (not as PCI control owner).
Fluency in Arabic and English (French is a plus).
What We Offer
Competitive compensation package.
Discounts on Toters orders.
First-class medical insurance.
Ready to own offensive security at scale and help build a safer platform for millions across the Middle East? Apply now!
Location: US / Remote
Workplace: remote
About the Company
Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem.
Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.
About This Role
This role is for a Web3 security researcher who can act as a public face for CertiK. This means having a strong social media presence, speaking at conferences, and being openly helpful to the wider security community. This doesn't mean you have to have tens of thousands of followers on X, but you do need to be comfortable interacting with the general public. The specific type of security researcher is flexible - contract/chain auditors, pen testers, engineers, and multi-talented individuals can apply. This is a great role for a generalist.
Responsibilities
Work closely with the Web3 Task Force Team to create stronger connections to the blockchain ecosystem.
Speak at conferences about your area of expertise on behalf of CertiK.
Complete interviews about various Web3 security topics.
Perform tasks cross-functionally among the various teams at CertiK.
Support the marketing and feedback collection of CertiK’s products and services.
Requirements
3+ years of experience in the Web3 space.
Strong social media presence and high visibility.
Experience speaking at conferences or in front of large audiences.
Strong technical skills in the areas of web3 security or related fields.
Bonus Points
Large number of social media followers.
Previous experience being the public face of an organization.
Location: Spain; United Kingdom; Serbia; Germany
Who we are
Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in minutes—it just works and is always free for the first 200 endpoints with no functional limits.
By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment without requiring a VPN, Action1 eliminates routine IT labor, helps prevent ransomware and security risks, and protects the digital employee experience.
In 2025, Action1 was recognized by
Inc. 5000 as the fastest-growing private software company in America
.
The company is founder-led by
Alex Vovk and Mike Walters
, entrepreneurs who previously founded Netwrix, a multi-billion-dollar cybersecurity company.
The Role
We are looking for a Product Security Engineer to join the team responsible for securing Action1’s multi-tenant SaaS product.
In this role, you will work closely with engineering, product, and security teams to identify risks early, support vulnerability handling, improve secure development practices, and help make product security practical, clear, and actionable.
This is a hands-on role for someone who understands both software engineering and cybersecurity, enjoys working directly with developers, and wants to help build security into the product without slowing teams down unnecessarily.
What you’ll do
Support PSIRT and vulnerability handling activities
Validate, triage, track, and coordinate security reports
Provide practical remediation guidance to engineering teams
Help validate security fixes and reduce product security risks
Review code, APIs, and architecture to identify security issues early
Conduct threat modeling and security design reviews
Improve security automation in engineering workflows
Support SAST, SCA, secrets scanning, and other security controls
Maintain SBOMs, dependency visibility, and remediation follow-up
Support security assessments, vulnerability assessments, and penetration testing
Maintain vulnerability handling playbooks, product security procedures, and incident response runbooks
What we’re looking for
3+ years of experience in product security, application security, DevSecOps, or a related cybersecurity field
Strong software engineering background and ability to work effectively with engineering teams
Understanding of application, API, infrastructure, and software supply chain security risks
Experience applying cloud security concepts and practices
Understanding of IAM, network security, logging, monitoring, and secure cloud architecture patterns
Familiarity with vulnerability management, incident response, security assessments, and secure SDLC practices
Experience with threat modeling and security design reviews
Strong communication skills, including professional communication with external researchers and vendors
Ability to work independently and as part of a team in a fast-moving environment
Nice to have
Genuine interest in cybersecurity and motivation to grow as a product security expert
Hands-on experience with AWS security controls, best practices, and architecture patterns
Hands-on experience with C++ or JavaScript
Experience with security testing and automation using scripting, APIs, CI/CD pipelines, or specialized tools
Experience with threat modeling for SaaS, API, cloud, or on-prem product components
Experience with SBOM generation, dependency visibility, or software supply chain security
What we offer
Fully remote work environment
Opportunity to work on a real security product used by IT and security teams
High ownership and direct impact on product security practices
Close collaboration with engineering, product, and security teams
Fast-growing software company with low bureaucracy and practical decision-making
Opportunity to improve security processes, automation, and engineering workflows
Supportive team that values clear thinking, ownership, and continuous learning
Location: London, England
Fin
, now part of Salesforce, is on a mission to help businesses provide perfect customer experiences.
Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey, from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk, giving modern support teams one single system.
Together with Salesforce, the #1 AI CRM, where humans with agents drive customer success, we're building the future of customer experience. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword, it's a way of life. The world of work as we know it is changing, and we're looking for Trailblazers who are passionate about bettering business and the world through AI.
Ready to level up your career at the company leading workforce transformation in the agentic era? You're in the right place. Agentforce is the future of AI, and you are the future of Salesforce.
What's the opportunity?
Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission.
The Cloud Security team is responsible for protecting the platforms that power Fin. We partner closely with infrastructure and product engineering teams to secure cloud environments, detect emerging threats, respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms and production systems that underpin every Fin customer interaction.
The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how our cloud platforms, production systems, and engineering workflows are designed, deployed, and operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI-first approach to security, investing in areas such as AI-assisted detection engineering, automated investigations, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape.
What will I be doing?
Design and implement secure cloud architectures across our AWS environments.
Build and maintain protective and detective controls that improve visibility into threats across our cloud environments.
Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response.
Lead cloud security investigations and incident response activities in partnership with engineering teams.
Participate in a shared on-call rotation and help coordinate containment, remediation, and recovery efforts during security incidents.
Build automation that improves the scalability, reliability, and effectiveness of security controls.
Partner with infrastructure teams to embed security into cloud platforms, infrastructure-as-code workflows, and engineering practices.
Develop and improve cloud security standards, guidance, and best practices across Fin.
Drive security initiatives from problem definition through design, implementation, and measurable outcomes.
Assess emerging threats to cloud environments and help evolve our defensive capabilities.
Help shape Fin's AI-first approach to security, including AI-assisted detection, automated investigations, continuous monitoring, and emerging defensive capabilities.
Support the secure adoption of AI-assisted software development tools and engineering workflows.
What skills do I need?
Proven experience in cloud security, security engineering, detection engineering, or a closely related field.
Strong experience securing and operating production AWS environments.
Deep understanding of cloud security principles, modern attack techniques, and security best practices.
Experience building or operating detection, monitoring, or threat detection capabilities.
Hands-on experience investigating security incidents, leading technical investigations, and driving remediation efforts.
Experience implementing security controls across cloud platforms and production environments.
Strong programming skills and experience building automation, tooling, or operational workflows.
Experience working with infrastructure-as-code practices and modern cloud-native technologies.
Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness.
Ability to communicate security concepts clearly and collaborate effectively with engineering teams.
A pragmatic approach to balancing security, customer impact, and engineering velocity.
Bonus skills & attributes
Experience building detection engineering, threat hunting, or security operations capabilities at scale.
Experience with cloud-native security platforms, CNAPP technologies, or large-scale cloud security monitoring.
Experience applying AI to detection, response, threat analysis, or security operations workflows.
Familiarity with AWS networking, identity, and cloud security patterns.
Experience working across both large-scale SaaS environments and high-growth companies.
#LI-Hybrid
Unleash Your Potential
When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.
In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. At Fin, we want to give people what they need to do the best work of their careers. Our benefits and programs are designed to support your health and wellbeing, your family, your time away from work, and your financial future. Offerings vary by location in line with local practices and requirements. Learn more about working at Fin and the benefits we offer at
fin.ai/careers
. Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.
Policies
Fin has a hybrid working policy. We believe that working in person helps us stay connected, collaborate easier and create a great culture while still providing flexibility to work from home. We expect employees to be in the office at least three days per week.
We have a radically open and accepting culture at Fin. We avoid spending time on divisive subjects to foster a safe and cohesive work environment for everyone. As an organization, our policy is to not advocate on behalf of the company or our employees on any social or political topics out of our internal or external communications. We respect personal opinion and expression on these topics on personal social platforms on personal time, and do not challenge or confront anyone for their views on non-work related topics. Our goal is to focus on doing incredible work to achieve our goals and unite the company through our
core values
.
Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination.
Know your rights: workplace discrimination is illegal.
Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.
Location: Dublin, Ireland
Fin
, now part of Salesforce, is on a mission to help businesses provide perfect customer experiences.
Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey, from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk, giving modern support teams one single system.
Together with Salesforce, the #1 AI CRM, where humans with agents drive customer success, we're building the future of customer experience. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword, it's a way of life. The world of work as we know it is changing, and we're looking for Trailblazers who are passionate about bettering business and the world through AI.
Ready to level up your career at the company leading workforce transformation in the agentic era? You're in the right place. Agentforce is the future of AI, and you are the future of Salesforce.
What's the opportunity?
Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission.
The Cloud Security team is responsible for protecting the platforms that power Fin. We partner closely with infrastructure and product engineering teams to secure cloud environments, detect emerging threats, respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms and production systems that underpin every Fin customer interaction.
The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how our cloud platforms, production systems, and engineering workflows are designed, deployed, and operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI-first approach to security, investing in areas such as AI-assisted detection engineering, automated investigations, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape.
What will I be doing?
Design and implement secure cloud architectures across our AWS environments.
Build and maintain protective and detective controls that improve visibility into threats across our cloud environments.
Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response.
Lead cloud security investigations and incident response activities in partnership with engineering teams.
Participate in a shared on-call rotation and help coordinate containment, remediation, and recovery efforts during security incidents.
Build automation that improves the scalability, reliability, and effectiveness of security controls.
Partner with infrastructure teams to embed security into cloud platforms, infrastructure-as-code workflows, and engineering practices.
Develop and improve cloud security standards, guidance, and best practices across Fin.
Drive security initiatives from problem definition through design, implementation, and measurable outcomes.
Assess emerging threats to cloud environments and help evolve our defensive capabilities.
Help shape Fin's AI-first approach to security, including AI-assisted detection, automated investigations, continuous monitoring, and emerging defensive capabilities.
Support the secure adoption of AI-assisted software development tools and engineering workflows.
What skills do I need?
Proven experience in cloud security, security engineering, detection engineering, or a closely related field.
Strong experience securing and operating production AWS environments.
Deep understanding of cloud security principles, modern attack techniques, and security best practices.
Experience building or operating detection, monitoring, or threat detection capabilities.
Hands-on experience investigating security incidents, leading technical investigations, and driving remediation efforts.
Experience implementing security controls across cloud platforms and production environments.
Strong programming skills and experience building automation, tooling, or operational workflows.
Experience working with infrastructure-as-code practices and modern cloud-native technologies.
Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness.
Ability to communicate security concepts clearly and collaborate effectively with engineering teams.
A pragmatic approach to balancing security, customer impact, and engineering velocity.
Bonus skills & attributes
Experience building detection engineering, threat hunting, or security operations capabilities at scale.
Experience with cloud-native security platforms, CNAPP technologies, or large-scale cloud security monitoring.
Experience applying AI to detection, response, threat analysis, or security operations workflows.
Familiarity with AWS networking, identity, and cloud security patterns.
Experience working across both large-scale SaaS environments and high-growth companies.
#LI-Hybrid
Unleash Your Potential
When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.
In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. At Fin, we want to give people what they need to do the best work of their careers. Our benefits and programs are designed to support your health and wellbeing, your family, your time away from work, and your financial future. Offerings vary by location in line with local practices and requirements. Learn more about working at Fin and the benefits we offer at
fin.ai/careers
. Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.
Policies
Fin has a hybrid working policy. We believe that working in person helps us stay connected, collaborate easier and create a great culture while still providing flexibility to work from home. We expect employees to be in the office at least three days per week.
We have a radically open and accepting culture at Fin. We avoid spending time on divisive subjects to foster a safe and cohesive work environment for everyone. As an organization, our policy is to not advocate on behalf of the company or our employees on any social or political topics out of our internal or external communications. We respect personal opinion and expression on these topics on personal social platforms on personal time, and do not challenge or confront anyone for their views on non-work related topics. Our goal is to focus on doing incredible work to achieve our goals and unite the company through our
core values
.
Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination.
Know your rights: workplace discrimination is illegal.
Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.
Location: Hybrid - San Francisco, New York City
About Vercel:
Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.
Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.
About the role
We are looking for a Product Security Engineer to build the systems that triage and validate bug bounty and other externally reported security findings, not to work the queue. This role suits a software engineer moving into security or a security engineer with a strong engineering background. You will build large language model (LLM) and agent-based tooling that validates findings, traces them to their root cause, and opens fixes for well-understood vulnerability classes. This is a hybrid role based in San Francisco or New York City, with three days a week in the office.
What you’ll do
Build the systems that take in externally reported vulnerabilities and assess validity, severity, and reproducibility at a volume manual triage cannot match
Build LLM and agent-based analysis that validates business logic, authentication, and design-level findings, not just known signatures
Build systems that trace validated findings to their root cause and propose, and increasingly open, fixes for well-understood vulnerability classes, with human review gates
Own the bug bounty program, including scope, policy, and researcher engagement, and feed every resolved report back into automated triage
Extend the tooling into security testing capabilities that customers can use on what they build and deploy
What you need
5+ years of software engineering or security engineering experience, building and shipping production systems or internal tools
Wrote production code in JavaScript/TypeScript on Node.js, with hands-on experience in web frameworks such as Next.js or React
Built with LLM or agent-based tooling
Reproduced and assessed externally reported vulnerabilities, including judging severity
Bonus if you
Built security automation used across an engineering org, not just for your own team
Built systems that auto-generate or propose code fixes, not just findings
Tested or secured multi-tenant platforms where customer-built applications run on shared infrastructure
Compensation & Benefits:
Competitive compensation package, including equity.
Inclusive Healthcare Package.
Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
Flexible Time Off.
We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.
The San Francisco, CA base pay range for this role is $208,000.00 - $312,000.00. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.
Disclosures:
Privacy:
Please review our
Job Applicant Privacy Policy
for more information on how we handle your data.
Equal Opportunity:
Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.
Location: Remote - United States
About Vercel:
Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.
Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.
About the role
We're looking for a Security Engineer to join our Cloud Security Engineering team. In this role, you'll help strengthen the security of our platform by building and improving the controls that protect our infrastructure. You'll play a key role in making security a core part of how we build, deploy, and scale our systems, while helping the company grow securely and confidently.
You'll report to the Security Operations Manager, and this is a hybrid or fully remote within the United States. If you're based within commuting distance of our SF or NY offices, the role includes in-office anchor days on Monday, Tuesday, and Friday.
What you'll do
Design and implement scalable security controls across our cloud-native platform.
Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation.
Build secure by default infrastructure and code CI/CD pipelines.
Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows.
Stay ahead of cloud security trends and adopt cutting-edge technologies to enhance platform resilience.
Conduct threat modeling, risk analysis, and mitigation planning for critical systems.
Drive improvements in monitoring, detection, and incident response at the platform level.
Build, deploy and maintain relevant tooling.
What you need
8+ years of experience in infrastructure or platform security roles.
Deep understanding of secure cloud infrastructure (AWS/GCP), identity and access management, and system hardening.
Proficient with tools like Terraform, CDK, Kubernetes, and CI/CD security.
Skilled at balancing engineering realities with principled security practices.
Proven track record of shipping secure, resilient systems at scale.
Bonus if you
Have built or scaled security automation pipelines.
Contributed to open-source security projects or tools.
Hold certifications such as GCP Security Engineer, AWS certifications, CISSP, or OSCP.
Hold a bachelor's or master's degree in Cybersecurity or similar disciplines.
Benefits & Compensation:
Competitive compensation package, including equity.
Inclusive Healthcare Package.
Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
Flexible Time Off.
We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.
The San Francisco, CA base pay range for this role is $208,000.00 - $312,000.00. This salary range is an estimate. Actual salary will be based on job related skills, experience and location. Pay ranges outside San Francisco may be adjusted based on employee location. The total compensation package also includes benefits and equity-based compensation. Your recruiter can share more about the specific pay range for your location during the hiring process.
Disclosures:
Privacy:
Please review our
Job Applicant Privacy Policy
for more information on how we handle your data.
Equal Opportunity:
Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.
Задачи:
— Проектировать, поддерживать и оптимизировать решения для обеспечения безопасности конечных точек.
— Разрабатывать и внедрять стандарты усиления безопасности операционных систем для минимизации уязвимостей корпоративных устройств.
— Тестировать, оценивать и внедрять новые продукты и технологии безопасности для рабочих станций сотрудников.
— Настраивать расширенный сбор логов и телеметрии для обнаружения угроз.
— Проактивно выявлять, оценивать и устранять уязвимости и ошибки конфигурации на рабочих станциях.
— Реагировать на инциденты безопасности на уровне рабочих станций и поддерживать качественную документацию.
Требования:
— Опыт управления и обеспечения безопасности Windows и MacOS в корпоративной среде на большом масштабе.
— Опыт администрирования облачных решений AV/EDR.
— Умение использовать скриптовые языки, такие как PowerShell, Python или Bash, для автоматизации задач безопасности.
— Экспертиза в управлении системными конфигурациями через MDM или другие инструменты управления конфигурациями.
— Знание механизмов сбора логов и лучших практик усиления безопасности операционных систем.
— Английский язык на уровне B1 и выше.
Преимущества:
— Опыт обеспечения безопасности Linux рабочих станций.
— Опыт работы с SIEM решениями, такими как Splunk, ArcSight ESM, IBM QRadar или Elastic Security.
— Профессиональные сертификаты в области информационной безопасности (офенсивной или дефенсивной).
— Участие в CTF соревнованиях.
Условия:
— Официальное трудоустройство с стабильной зарплатой и медицинской страховкой.
— Гибридный режим работы и гибкий график.
— Пакет релокации для кандидатов из других регионов.
— Доступ к профессиональным консультациям (психологическим, финансовым, юридическим).
— Внутренние обучающие программы и частично или полностью оплачиваемые дополнительные курсы.
— Членство в клубе скидок и предоставление всего необходимого рабочего оборудования.
Процесс найма:
— Рассмотрение заявки.
— Предложение.
— Прием на работу.
Location: Remote - United States
About Vercel:
Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.
Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.
About the role
We are looking for a Security Software Engineer, IAM, to build identity and access management (IAM) infrastructure as software, not administer identity products, and this role suits a software engineer who has gone deep on identity or an IAM engineer with a strong engineering background. You will own identity and IAM end to end, replacing the approval queue with access that is self-serve, time-bound, and provable, built so identity is defined as code, reviewed in pull requests, deployed through CI, and observable in production, and you will help decide how agents act on behalf of users and systems. This is a hybrid role based in San Francisco or New York City, with three days a week in the office.
What you’ll do
Migrate Okta and related IAM configuration to Terraform so every identity change is reviewed, tested, and versioned, and help engineering teams adopt infrastructure as code
Build a self-serve access platform, including just-in-time (JIT) access, that lets team and system owners define, request, and time-bound their own access
Own provisioning, deprovisioning, and access review workflows that generate System and Organization Controls 2 (SOC 2) audit evidence automatically
Unify corporate IAM (employee identity, SaaS access, devices) and production IAM (service accounts, infrastructure permissions, on-call access) into one identity plane, and enforce least-privilege access across cloud, SaaS, and production infrastructure
Define and build how agents request and hold access, working with the Accounts team on product-facing identity
What you need
7+ years building and owning identity, access management, or platform security systems, including IAM design across corporate (Okta or equivalent) and production (AWS or GCP) environments
Built and operated production services or self-service platforms in TypeScript/Node.js, Go, or Python, including REST APIs
Implemented OAuth2, OpenID Connect (OIDC), Security Assertion Markup Language (SAML), and System for Cross-domain Identity Management (SCIM) at the protocol level, including failure modes such as token replay and sync drift
Managed IAM infrastructure as code in Terraform
Bonus if you
Led a Terraform migration for IAM or identity infrastructure at scale
Designed or built a JIT access system or access governance platform
Designed delegation or scoped-credential models for agents or service identities
Compensation & Benefits:
Competitive compensation package, including equity.
Inclusive Healthcare Package.
Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
Flexible Time Off.
We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.
The San Francisco, CA base pay range for this role is $208,000 - $312,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.
Disclosures:
Privacy:
Please review our
Job Applicant Privacy Policy
for more information on how we handle your data.
Equal Opportunity:
Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.
Задачи:
— Разработка и улучшение biometric и identity verification решений
— Создание production-level Computer Vision и ML-систем
— Разработка алгоритмов Face Verification, Liveness Detection, Anti-Spoofing и Deepfake Detection
— Оптимизация моделей для высоконагруженных систем
— Работа с большими датасетами и подготовка данных
— Внедрение современных исследований SOTA в production
— Разработка и поддержка полного ML/CV pipeline
— Участие в подготовке решений к международным сертификациям и тестированиям
— Работа над AI-продуктами для банков, финтех-компаний, криптоплатформ, телеком-операторов и государственных организаций
Требования:
— Опыт работы ML Engineer / Computer Vision Engineer от 3 лет
— Опыт работы с Face Biometrics, KYC, Identity Verification или Anti-Fraud решениями
— Глубокие знания Computer Vision и Deep Learning
— Уверенное владение Python
— Опыт работы с PyTorch и/или TensorFlow
— Опыт построения production-grade ML/CV систем
— Опыт работы с large-scale datasets
— Опыт оптимизации inference, latency и производительности моделей
— Понимание архитектуры enterprise biometric systems
— Английский язык на уровне B2
— Обязательное преимущество: Опыт подготовки решений к сертификации iBeta Level 2 или Опыт прохождения / участия в сертификации iBeta Level 2
Будет большим плюсом:
— Опыт работы в biometric, KYC или identity verification компаниях
— Участие в NIST FRVT Evaluations
— Опыт разработки Anti-Spoofing и Liveness Detection систем
— Опыт работы с Deepfake Detection
— Понимание международных biometric compliance и certification standards
— Опыт внедрения SOTA research papers в production
— Опыт teamleading
Условия:
— Работа в международной AI-компании
— Участие в разработке production-grade AI-продуктов для международных рынков
— Официальное трудоустройство по трудовому договору
— График 5/2, 8-часовой рабочий день
— Работа в офисе в Алматы
— Финальный оффер зависит от уровня экспертизы
— Возможность работать над сложными задачами в области Face Biometrics, Digital Identity, KYC, AML, Fraud Prevention и Identity Verification
Location: Jakarta, Jakarta, Indonesia
Dexis is a dynamic professional services firm dedicated to partnering with government and community leaders both in the U.S. and internationally to achieve critical social outcomes in a rapidly changing world.
At Dexis, you will experience a corporate culture of inclusiveness, respect, fairness, and trust. You will be given the means and mentorship needed to succeed, and your creativity will be rewarded.
LEAP Program Description
Global Solutions Ventures (GSV) – a joint-venture partnership between ZemiTek, LLC and Dexis Consulting Group – is implementing the Long-term Exceptional Technical Assistance Project (LEAP Global), a mechanism originally used by USAID to battle against infectious diseases such as malaria, HIV/AIDS, tuberculosis, neglected tropical diseases, and pandemic influenza. As of July 1, 2025, LEAP Global transitioned to the U.S. Department of State (DOS). This initiative aims to address the complex human resource challenges faced by national infectious disease programs in the USA-supported countries.
The intervention of this project is to hire and embed technical expert advisors and subject matter experts within government entities. By directly embedding the technical expertise within the national programs, LEAP provides long-term, sustainable lifesaving support to empower host governments to lead and manage key aspects of their infectious disease portfolios and improve coordination between the U.S. Government and the host country.
About the Position
The Senior Global Health Security (GHS) Epidemiology Advisor will support the U.S. Embassy Jakarta ECON Health Unit in carrying out life-saving humanitarian assistance (LHA) service delivery in full alignment with the new Presidential Executive Order (EO) directives and advancing Global Health Security initiatives in Indonesia. The Senior Advisor will provide strategic technical advice to support and strengthen USG and Ministry of Health (MoH) systems for detecting and responding to infectious disease threats and pandemic preparedness, with particular emphasis on epidemiology, disease surveillance, and outbreak response. The Senior Advisor will also develop action plans for zoonotic control and public health threats.
The Senior Advisor will work remotely with occasional on-sites presence at the Ministry of Health or selected events and will collaborate with GHS implementers and other stakeholders. The Senior Advisor will work closely with the MOH Zoonotic Team Leader and U.S. Embassy Jakarta ECON Health Unit points of contact, who will provide supervision, guidance, and collaborative oversight.
Responsibilities
Provide high-level technical guidance on epidemiological methods, surveillance systems, risk communications, and outbreak investigations to support evidence-based decision making.
Lead the design, assessment and recommendations for the implementing and evaluating zoonotic disease surveillance and early warning systems.
Lead the drafting and development of One Health guidelines focusing on zoonotic prevention and control as part of the pandemic preparedness plan, in collaboration with the MoH.
Analyze epidemiological data to inform evidence-based decision-making and policy development relevant to zoonotic diseases prevention and response and One Health data systems.
Mentor and build capacity of national and sub-national epidemiology teams.
Participate in the coordination and responses to infectious disease outbreaks and other public health emergencies when needed.
Contribute to technical reports, publications, and strategic documents.
Collaborate with partners and stakeholders to align strategies and avoid duplication of efforts.
Participate in regular bi-weekly coordination meetings with U.S. Embassy Jakarta ECON Health Unit to review progress, discuss activities, and address emerging issues.
Reporting
Submit a detailed monthly report to the U.S. Embassy Jakarta ECON Health Unit by the 5th day of the following month.
Submit weekly progress updates with key successes to the U.S. Embassy Jakarta ECON Health Unit and participate in weekly calls.
Qualifications
Advanced degree (Master or PhD) in Epidemiology, Public Health, or a related field.
Minimum of fifteen (15) years of proven experience in applied epidemiology and global health with published materials and international experiences
(candidates must specify and provide links to their publications for verification)
.
Advanced expertise in applied epidemiology, strong analytical skills, and the ability to work collaboratively with governments, international partners, and multidisciplinary teams in complex environments.
Demonstrated experience in outbreak investigation and emergency response.
Strong knowledge of global health security principles and frameworks.
Experience working with government health systems and international organizations.
Excellent data analysis skills and proficiency in epidemiological software (e.g., R, Stata, SAS, or similar).
Strong communication and interpersonal skills, including experience working in multicultural settings.
Advanced understanding of zoonotic diseases, and emerging infectious diseases.
Prior experience in writing MOH guidelines and providing high level technical guidance to MOH leadership are highly desirable.
Previous leadership or advisory role in large-scale public health programs.
Familiarity with USG GHS programs, global GHS framework and platforms such as IHR JEE, the Pandemic Fund.
Experience working with international donor mechanisms and reporting requirements such as Global Fund, DFAT, World Bank, or other GHS mechanisms are highly desirable, as the candidate will support the implementation of the GHS portfolio.
Professional proficiency in spoken and written Bahasa Indonesia is required.
Fluency in English (written and verbal) with minimum edits are required.
Work authorization in Indonesia required.
Core Competencies
Strategic thinking and problem-solving
Leadership and team development
Cross-cultural communication
Adaptability in dynamic and high-pressure environments
Strong ethical standards and professionalism
Benefits
Dexis offers benefits to support employees’ health, financial security, and well-being. The benefits outlined below are for
full-time, US-based
positions only. These benefits include:
Medical and prescription drug coverage:
A choice of three UnitedHealthcare medical plans, with coverage options for employees and eligible dependents.
Dental insurance:
Dental coverage for employees and eligible dependents, including preventive, basic, major, and orthodontic services, subject to plan limits.
Company-paid vision insurance:
Vision coverage for employees and eligible dependents, with premiums paid in full by Dexis.
Employer-funded health reimbursement arrangement (HRA):
Employees who enroll in the Silver HRA medical plan receive an employer-funded HRA to help pay eligible in-network deductible expenses.
Company-paid life and disability insurance:
Basic life and accidental death and dismemberment (AD&D) insurance, plus short-term and long-term disability coverage.
Optional supplemental insurance:
Voluntary supplemental life and AD&D insurance options, including life insurance options for eligible dependents.
Employee Assistance Program (EAP):
Company-paid access to confidential counseling and legal and financial support resources for employees and their families.
Health and wellness resources:
Virtual care, behavioral health resources, and wellness programs available through the medical plan.
Benefits assistance:
Personalized support with benefit enrollment, coverage questions, claims, and finding providers through the Employee Care Center.
Participation, coverage, and employee contributions are subject to applicable benefit plan terms and eligibility requirements.
Dexis is on a mission to help solve today’s most pressing global political, social, and economic challenges and create a world where all people are safe and prosperous. As a Dexis employee, you will be challenged, empowered, and mentored. Our motto is “find a way or make a way” — that’s how Dexis goes “all in.” How will you?
If you are passionate about this opportunity, apply now!
Only those applicants who meet the above criteria will be contacted for interview.
Dexis is an Equal Opportunity Employer, and does not discriminate on the basis of race, color, sex, national origin, religion, pregnancy, disability, age, genetic information, military service, veteran status, ethnicity, citizenship, sexual orientation, gender identity, marital status, childbirth and related medical conditions, including lactation, or any other protected class under applicable law.
Location: Al Khobar, Saudi Arabia
Eram Talent is presently hiring for a Receptionist to join their client's team based in Al-Khobar. The role holder is responsible for assisting the Facility management in planning, coordinating, and managing all aspects of facility management reception activities within the client's facilities. This role is vital to be the first point of contact for visitors, clients, and customers to welcoming, answering calls, managing appointment and administrative support for the assigned facility.
Responsibilities
▪ Greet and welcome visitors in a professional and friendly manner.
▪ Answer, screen, and direct incoming calls to the appropriate person or department.
▪ Manage the reception area, ensuring it is neat, organized, and presentable.
▪ Schedule and coordinate appointments, meetings, and conference room bookings.
▪ Assist with administrative tasks such as filing, data entry, and document preparation.
▪ Handle incoming and outgoing mail and packages.
▪ Maintain office supplies inventory and place orders when necessary.
▪ Provide information to callers and visitors regarding the organization and its services.
▪ Ensure security and access control procedures are followed, including issuing visitor badges.
▪ Assist with special projects and tasks as assigned by office management.
▪ Collaborate with other administrative staff to ensure efficient office operations.
▪ Manage and coordinate travel arrangements for employees, including booking flights, hotels, and transportation.
▪ Assist with event planning and coordination for meetings, conferences, and other events.
▪ Update and maintain internal databases and records, ensuring accuracy and confidentiality.
▪ Assist with basic IT support, such as troubleshooting minor technical issues or coordinating with IT support for assistance.
▪ Coordinate and oversee the maintenance of office equipment, including printers, copiers, and fax machines.
▪ Assist with onboarding new employees by preparing workspace, providing orientation information, and guiding them through office procedures.
▪ Collaborate with vendors and service providers to ensure timely and effective delivery of services.
▪ Monitor and replenish office supplies, including stationery, kitchen supplies, and other consumables.
▪ Coordinate with building maintenance staff for repairs, maintenance, and other facility-related issues.
▪ Ensure that all relative reports are prepared timely and accurately, and meet the Department’s requirements, policies, and standards.
Requirements
Bachelor’s degree in business administration from a recognized university.
Demonstrated proficiency in oral and written English
0-3 years’ experience in a similar role
Proven experience in managing the receptions front desk
Задачи:
- Разрабатывать и внедрять передовые решения в сфере Digital Risk Protection (DRP), создавая и совершенствуя комплексные системы защиты от цифровых угроз
- Работать с интеграциями и обработкой данных от различных API-источников, оптимизируя извлечение и обработку информации
- Создавать высокопроизводительные парсеры данных для обработки больших объемов данных из различных источников
- Автоматизировать процессы обнаружения и реагирования на цифровые угрозы, создавая автоматизированные системы для своевременного обнаружения и нейтрализации угроз
- Разрабатывать инструменты для мониторинга контента в мессенджерах и на веб-платформах по ключевым словам, ссылкам, медиафайлам с последующим анализом и реагированием
Требования:
- Уверенное владение Python, опыт разработки сложных, масштабируемых и высокопроизводительных приложений, знание Django, FastAPI
- Знание сетевых основ и клиент-серверного взаимодействия
- Опыт работы с API (REST, GraphQL), включая обработку JSON и XML, оптимизация запросов и обработки больших объемов данных
- Опыт асинхронного программирования (asyncio, aiohttp), понимание конкурентности и параллелизма (asyncio, threads, multiprocessing)
- Глубокое понимание веб-скрапинга и парсинга данных, опыт работы с библиотеками для парсинга (Beautiful Soup, Selenium или аналогичные)
- Опыт работы с базами данных, уверенное владение SQL и одной реляционной базой данных (PostgreSQL, ClickHouse), опыт с ORM (Django ORM, SQLAlchemy) и созданием миграций
- Опыт создания веб-интерфейсов на основе макетов
- Опыт работы с Docker
- Опыт работы с системами контроля версий Git
Location: Hong Kong, Hong Kong SAR; Singapore, Singapore
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom.
OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves.
Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er.
About the Opportunity
This is not a traditional GRC hire. The Tech G
overnance
Office is looking for someone who combines the governance judgment of a seasoned compliance professional with the drive of a forward-deployed engineer — someone who closes gaps by shipping solutions, navigates ambiguity without hand-holding, and operates with the urgency of a startup and the rigour of a regulated financial institution.
You will own complex cross-functional workstreams independently — coordinating across Engineering, Legal, Product, and Finance — while managing external auditors and regulators. Strong written and verbal communication in both English and Mandarin is a meaningful advantage in this role. AI tooling is not optional; it is how you work.
Who You Are
Self-directed driver
— You run cross-functional workstreams without being managed. Ambiguity is a starting point, not a blocker.
AI-native operator
— You already use AI to do more, faster — and you raise the floor for the teams around you.
Clear communicator
— You earn trust across regulators, auditors, and C-suite through precision and consistency — in any room.
Culture Fit
Pace
Standards
Startup velocity
— Decisions move fast. Priorities shift. You ship, iterate, and adapt — without waiting for perfect conditions or top-down direction.
Financial institution rigour
— Audit trails matter. Regulators scrutinise. The bar for accuracy, documentation, and accountability is institutional-grade — always.
> The tension between these two is not a bug — it is the job. We are looking for someone who holds both without compromise.
What You’ll Be Doing
Independently lead audit remediation programmes — assess gaps, develop structured plans, and drive verified closure across engineering, product, legal, and operations without escalation dependency.
Own cross-functional governance workstreams — set milestones, coordinate accountability, and remove blockers across departments with limited management oversight.
Conduct IT security and architecture governance reviews — assess whether systems and processes meet applicable standards, and issue findings with clear ownership and remediation timelines.
Build and maintain the policy estate — draft, refine, and operationalise IT governance policies and procedures; translate regulatory requirements into implementation-ready guidance for first-line teams.
Lead regulator and auditor engagement — serve as the primary coordination interface for external audit and regulatory correspondence, representing the Tech G
overnance
Office with credibility and precision.
Deploy AI to accelerate compliance operations — prototype and scale AI-assisted workflows for evidence collection, control monitoring, audit response, and policy generation; drive team-wide adoption.
Deliver Tech G
overnance
-level reporting — produce governance dashboards and executive briefs on remediation status, risk exposure, and regulatory posture, independently and to publication standard.
Track the regulatory horizon — monitor evolving requirements across active jurisdictions, translate changes into prioritised internal action, and brief senior leadership proactively.
What We Look For In You
AI Adoption & Application — Must Have
Active daily use of AI tools to accelerate compliance and governance work — demonstrated practice with measurable output impact, not theoretical awareness.
Ability to identify, build, and scale AI-assisted workflows within a Tech G
overnance
office context — evidence automation, policy generation, audit response, or control monitoring.
Working knowledge of AI governance and risk — sufficient to contribute to internal AI oversight frameworks and assess AI-related compliance obligations.
Independent Cross-Functional Leadership — Must Have
Demonstrated ability to own and drive complex, multi-stakeholder workstreams independently — setting direction, coordinating accountability, and delivering outcomes without management escalation.
Track record of influencing without authority across engineering, legal, finance, and operations in a fast-moving environment.
Comfortable operating under ambiguity and shifting priorities while maintaining institutional-grade standards for accuracy and documentation.
Experience
8+ years in IT audit, risk management, compliance, or security governance
3+ years leading governance programmes at a large-scale internet, financial services, or crypto firm
Exposure to IPO-readiness or high-scrutiny regulatory examination programmes preferred
Frameworks & Standards
ISO 27001, SOC 1/2, PCI-DSS, COBIT, NIST — deep working knowledge
GDPR and APAC data protection regimes
Crypto and blockchain-specific compliance risk awareness a strong asset
Engineering Sensibility
Able to read and interpret code, architecture diagrams, and technical design documents without engineer-translation dependency
Familiarity with cloud environments (Alibaba Cloud, AWS, GCP) and associated security tooling
Communication
Executive-level written and verbal communication in English — board-ready governance briefs, regulator responses, and Tech G
overnance
-level reporting produced independently
Proficiency in Mandarin (written and verbal) is a strong advantage for APAC regulatory and stakeholder engagement
Preferred Qualifications
Professional security or governance certification:
CISA · CISSP · CRISC · CISM · CCISO · Agentic AI
Experience building AI-powered compliance tooling — audit automation, continuous control monitoring, or policy-to-control mapping
Prior involvement in SOX ITGC, SEC Reg S-K Item 106, or equivalent listing-authority tech governance programmes
Crypto-native compliance exposure — Proof of Reserves, SAB 121, Travel Rule, AML/CFT programme governance
Active regulatory footprint across MAS, VARA, FCA, HKMA/SFC, or equivalent
Why This Role
OKX operates across 50+ jurisdictions with live regulatory programmes. The Tech G
overnance
Office is building infrastructure-grade compliance capability — not checkbox compliance. This is a rare opportunity to shape how that work gets done: independently, at pace, and with AI at the centre of the method.
Perks &
Benefits
Competitive total compensation package
L&D programs and Education subsidy for employees' growth and development
Various team building programs and company events
Wellness and meal allowances
Comprehensive healthcare schemes for employees and dependants
More that we love to tell you along the process!
OKX Statement:
OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Задачи:
— Проектирование архитектур безопасности для облачной инфраструктуры и приложений с применением принципов secure-by-design.
— Сотрудничество с командами продукта и архитектуры для внедрения средств контроля безопасности и автоматизации моделирования угроз.
— Аудит и проверка реализации мер безопасности в инфраструктурных манифестах и CI/CD пайплайнах.
— Контроль безопасности продукта при миграции из дата-центров в публичные облака, такие как AWS.
— Консультирование инженерных команд по лучшим практикам безопасности и требованиям нормативного соответствия.
Требования:
— Возможность релокации из России или Беларуси.
— Опыт обеспечения безопасности микросервисов, разработанных на JavaScript и TypeScript.
— Владение инструментами CI/CD (GitLab, Jenkins) и Infrastructure-as-Code (Terraform, Helm, CloudFormation).
— Практические навыки разработки на Python или Shell.
— Глубокое понимание безопасности цепочки поставок, целостности программного обеспечения и безопасной доставки ПО.
— Опыт работы с Docker и mesh-технологиями, такими как ISTIO.
Будет плюсом:
— Опыт проектирования безопасных сервисов на Kubernetes и AWS.
— Знание законов о конфиденциальности, таких как GDPR, и отраслевых стандартов PCI, ISO 27001, NIST.
— Профессиональные сертификаты в области безопасности (CISSP, CISM, CCSK, CCSP, CEH).
Условия:
— Медицинская страховка с глобальным покрытием.
— 23 рабочих дня отпуска в году плюс оплачиваемый больничный.
— Пакет релокации, включающий билеты, проживание в отеле до 2 недель и визовую поддержку для сотрудника и семьи.
— Возможности профессионального развития и изучения языков.
— Ежегодный пересмотр вознаграждения и регулярные тимбилдинги.
Location: San Francisco, CA | New York City, NY | Seattle, WA
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
We're seeking a Platform Hardware Security Engineer to design and implement security architectures for bare-metal infrastructure. You'll work with teams across Anthropic to build firmware, bootloaders, operating systems, and attestation systems to ensure the integrity of our infrastructure from the ground up.
This role requires expertise in low-level systems security and the ability to architect solutions that balance security requirements with the performance demands of training AI models across our massive fleet.
Key responsibilities
Design and implement secure boot chains from firmware through OS initialization for diverse hardware platforms (CPUs, BMCs, switches, peripherals, and embedded microcontrollers)
Architect attestation systems that provide cryptographic proof of system state from hardware root of trust through application layer
Develop measured boot implementations and runtime integrity monitoring
Create reference architectures and security requirements for bare-metal deployments
Integrate security controls with infrastructure teams without impacting training performance
Prototype and validate security mechanisms before production deployment
Conduct firmware vulnerability assessments and penetration testing
Build firmware analysis pipelines for continuous security monitoring
Document security architectures and maintain threat models
Collaborate with software and hardware vendors to ensure security capabilities meet our requirements
Minimum qualifications
Hands-on experience with secure boot, measured boot, and attestation technologies (TPM, Intel TXT, AMD SEV, ARM TrustZone)
Strong understanding of cryptographic protocols and hardware security modules
Experience with UEFI/BIOS or embedded firmware security, bootloader hardening, and chain of trust implementation
Proficiency in low-level programming (C, Rust, Assembly) and systems programming
Knowledge of firmware vulnerability assessment and threat modeling
Track record of designing security architectures for complex, distributed systems
Experience with supply chain security
Ability to work effectively across hardware and software boundaries
Knowledge of NIST firmware security guidelines and hardware security frameworks
Preferred qualifications
8+ years of experience in systems security, with at least 5 years focused on firmware and hardware security (firmware, bootloaders, and OS-level security)
Experience with confidential computing technologies and hardware-based TEEs
Knowledge of SLSA framework and software supply chain security standards
Experience securing large-scale HPC or cloud infrastructure
Contributions to open-source security projects (coreboot, CHIPSEC, etc.)
Background in formal verification or security proof techniques
Experience with silicon root of trust implementations
Experience working with building foundational technical designs, operational leadership, and vendor collaboration
Previous work with AI/ML infrastructure security
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$320,000
—
$405,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Paris; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks
seniorГеография найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.