Вакансии

Требования: — 4+ года опыта Задачи: — Опыт работы в SOC/операциях безопасности — Активное использование AI для автоматизации и обнаружения в SOC — Практический опыт работы с SIEM — Глубокое понимание фреймворков реагирования на инциденты

Location: PL Workplace: remote Overview: SOFTSWISS is hiring a Senior SOC Detection Engineer to join our Security Operations team. We are seeking a hands-on security professional to help build and develop our detection engineering function, strengthening the company’s ability to identify, investigate, and respond to security threats across Windows, Linux, and Kubernetes environments. Purpose of the role: You will be responsible for owning the full lifecycle of security detections, from researching attack techniques and defining logging requirements to developing, testing, deploying, and continuously improving detection content in Splunk. Your work will help enhance detection coverage, improve telemetry quality, reduce false positives, and ensure that security teams can reliably identify and respond to real threats. Key responsibilities: Develop, test, deploy, and maintain detection and correlation rules in Splunk or a similar SIEM. Translate incident investigations, threat hunting, and attack research into effective detections. Analyze false positives, false negatives, and detection gaps. Improve detection coverage and map detections to MITRE ATT&CK techniques. Develop and optimize SPL queries, dashboards, reports, and risk-based detections. Define requirements for logging, parsing, normalization, enrichment, and data quality. Develop monitoring and health checks for detection rules and data sources. Contribute to automated detection testing, synthetic events, telemetry replay, and CI/CD workflows. Participate in incident investigations, threat hunting, purple team exercises, and attack emulation. Collaborate with SOC, Incident Response, Threat Intelligence, Infrastructure, and Engineering teams. Document detection logic, data sources, dependencies, limitations, and expected behavior. Required Experience: Strong hands-on experience in SOC, Detection Engineering, Threat Hunting, Incident Response, or a related field. Deep understanding of MITRE ATT&CK, common attack techniques, and detection methodologies. Strong proficiency in Splunk SPL or another enterprise SIEM platform. Experience developing complex queries, correlations, dashboards, and reports. Practical experience tuning detections and managing exceptions and allowlists. Ability to define and evaluate logging and telemetry requirements. Proficiency in Python, PowerShell, or Bash for automation. Experience with Git, code reviews, APIs, and basic CI/CD practices. Understanding of Windows and Linux security monitoring. Ability to independently investigate complex problems and drive solutions to completion. Strong communication skills and the ability to work effectively across teams. Nice to have: Experience with Splunk Enterprise Security, CIM, data models, macros, and lookups. Experience with Sysmon, Windows security auditing, Active Directory, auditd, osquery, Tetragon, Docker, or Kubernetes. Experience with YARA, CALDERA, Shuffle, or other security automation and attack emulation tools. Experience building detection quality metrics and automated validation frameworks. Experience with Terraform, Ansible, or other infrastructure-as-code tools. Participation in security research, conferences, or the broader security community. Our technology focus: Splunk Enterprise Security, MITRE ATT&CK, Windows and Linux telemetry, Kubernetes and container logs, Python, PowerShell, Bash, Git, and CI/CD. Learn more about our hiring process here ( link ) – what to expect, how to prepare, and what makes SOFTSWISS different. Main Advantages Private health insurance Sports benefits Comprehensive Mental Health Program Free English lessons (online) Local language courses Paid time off Maternity leave support Referral program rewards Upskilling, internal workshops, and participation in professional conferences and corporate events

Задачи: — Развивать antifraud-направление: определять стратегию, roadmap и приоритеты; — Руководить командой scientists/developers и развивать экспертизу; — Разрабатывать и внедрять antifraud-правила, scoring-модели и автоматизировать ручные процессы; — Развивать единый antifraud-сервис и выводить решения в production. Требования: — Опыт построения fraud prevention в iGaming, fintech, marketplace или payments; — Опыт работы с разными типами фрода и управления antifraud-направлением; — Опыт управления разработкой в роли лида + готовность самостоятельно писать и выводить код в production; — Уверенный SQL и Python; опыт Machine Learning для classification и scoring-задач будет плюсом; — Опыт взаимодействия с бизнесом и другими стейкхолдерами. Условия: — Компенсация на основании ваших ожиданий; — 24 дня оплачиваемого отпуска; — Корпоративные занятия английским; — Для сотрудников офиса на Кипре - компенсация питания, GYM & SPA в офисе и корпоративные мероприятия.

Location: Москва, удалённая работа или гибрид, RU; Россия О команде Наша команда защищает технологическую платформу и офисную инфраструктуру Авито. Мы используем множество современных технологий, поэтому вы получите ценный опыт в обеспечении их безопасности. Какие задачи вас ждут: обеспечивать комплексную безопасность корпоративной и продуктовой инфраструктуры компании; выстраивать непрерывный цикл мониторинга, детектирования и реагирования на киберугрозы; управлять командой SOC полного цикла; развивать процесс реагирования на инциденты информационной безопасности; развивать инфраструктуру и контентную базу SIEM и средств защиты информации; автоматизировать рутинные операции и оркестрировать процессы реагирования с помощью SOAR. Мы ждём, что вы: имеете глубокий практический опыт построения и управления SOC или руководства аналогичным подразделением защиты инфраструктуры; уверенно разбираетесь в процессах детектирования угроз и реагирования на инциденты; имеете глубокий практический опыт работы с SIEM — Elastic Stack, MS Sentinel и аналогами, EDR, средствами сетевой безопасности и автоматизации SOAR; понимаете специфику и имеете опыт моделирования угроз — threat modeling и оценки рисков информационной безопасности применительно к инфраструктурным компонентам и сервисам; имеете опыт управления командой инженеров SOC или смежных направлений от трёх человек: найм, наставничество, развитие инженеров L1/L2/L3; обладаете отличными коммуникативными навыками, умеете ясно доносить технические детали и уровень рисков до стейкхолдеров; эффективно взаимодействуете с DevOps, IT Ops, разработкой и смежными подразделениями в ходе инцидентов и плановых работ. Работа у нас — это: расширенная забота о здоровье: ДМС, страхование жизни, онкострахование; сервис психологической поддержки, а также финансовые, юридические и ЗОЖ-консультации для вас и ваших близких; корпоративный спорт: групповые тренировки, велбиинг-приложение; спецпредложения от партнёров и скидки на сервисы Авито: бронирование жилья, услуги продвижения, ипотечное страхование; компенсация питания; комфортные офисы с панорамным видом, питанием и зоной отдыха; прозрачная система целей и возможность влиять на приоритеты компании; возможность развиваться в сильной команде лидеров и помогать расти другим; чёткая матрица компетенций с прозрачными ожиданиями на всех уровнях; уникальный культурный код и сильное экспертное комьюнити; возможность работать с современными технологиями и инфраструктурой масштаба Авито; профессиональное развитие: обучение за счёт компании, курсы, тренинги, менторство.

Location: Remote Canada At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. In this role, you'll build and run Affirm's end-to-end security review process for enterprise AI/LLM systems evaluating architecture, prioritizing AI-specific risks, and designing the controls and guardrails that let Affirm adopt AI safely, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to make it scalable and repeatable. What you’ll do You will lead and continuously improve Affirm's enterprise AI security review process  evaluating the architecture, data flows, permissions, and design of internal AI tools, agentic/MCP-based systems, and AI features — and embed security requirements into the design phase. You will threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure, and drive remediation. You will review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and help tool owners build security-focused test cases and red-team/eval scenarios to verify requirements before launch. You will design and build security guardrails and tooling for AI systems permission boundaries, authn/authz for agentic tools and MCP servers, data-handling controls, logging/monitoring, and policy-as-code (Python, IaC) — to enforce and automate AI security. You will evaluate the AI capabilities of third-party SaaS vendors (e.g., Notion, Slack, Google Workspace) as part of vendor and SaaS security reviews and drive risk-based adoption decisions. You will identify emerging classes of AI/agentic security vulnerabilities, develop mitigations before they become incidents, and contribute to AI-specific incident response playbooks as a senior escalation point. You will lead cross-functional AI security initiatives to closure, advise technical and executive stakeholders as an internal point of expertise, and stay current on the AI security landscape (OWASP LLM Top 10, MITRE ATLAS) to translate new research into practical controls. What we look for You are a seasoned security engineer with hands-on experience designing, evaluating, and maintaining security architecture for AI/LLM-based systems, plus deep expertise in enterprise security systems, processes, and controls. You have practical experience threat modeling and reviewing AI/LLM applications (e.g., against the OWASP Top 10 for LLM Applications) and securing agentic systems and tool-calling frameworks — MCP servers/clients, tool-permission models, and agent-to-tool trust boundaries. You have built AI governance artifacts (acceptable use policy, data-handling standards, vendor/model risk assessments) and evaluated AI capabilities within SaaS platforms (e.g., Notion AI, Slack AI, Google Workspace AI, GitHub Copilot) as part of vendor reviews. You have experience with enterprise tools for AI visibility and control (e.g., CASB, IDP/Okta) and familiarity with the corporate systems where AI is adopted (OpenAI, Anthropic, GitHub, Google Workspace, Slack, Notion, Jira). You can build security tooling, guardrails, and detections with Python or similar, and deploy cloud services and policy-as-code using Infrastructure as Code (Terraform or similar); familiarity with Kubernetes and AWS. You understand how LLMs and agentic systems are built (RAG, embeddings, fine-tuning, tool use) and authn/authz models (OAuth2, SAML, service-account/non-human identities) for agentic and machine-to-machine access, with strong application-architecture and threat-modeling fundamentals. You can lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance and drive them to closure, and communicate effectively with technical and executive audiences. Experience in regulated environments (SOC 2, PCI DSS) and applying IAM to non-human/agent identities is a plus. This posting is for an existing vacancy This remote role is open only to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan. Base Pay Grade - P Equity Grade - 7 Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company). CAN base pay range per year: $173,000 - $233,000 #Li-Remote Remote-first with flexibility built in Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience. Benefits designed for you Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights: Health coverage at no cost: We cover 100% of premiums for employees and their dependents. Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you. Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to. Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount. We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help. For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law. By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and consent to the use of your personal information as described.

Location: Remote US At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. In this role, you'll build and run Affirm's end-to-end security review process for enterprise AI/LLM systems evaluating architecture, prioritizing AI-specific risks, and designing the controls and guardrails that let Affirm adopt AI safely, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to make it scalable and repeatable. What you’ll do You will lead and continuously improve Affirm's enterprise AI security review process  evaluating the architecture, data flows, permissions, and design of internal AI tools, agentic/MCP-based systems, and AI features — and embed security requirements into the design phase. You will threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure, and drive remediation. You will review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and help tool owners build security-focused test cases and red-team/eval scenarios to verify requirements before launch. You will design and build security guardrails and tooling for AI systems permission boundaries, authn/authz for agentic tools and MCP servers, data-handling controls, logging/monitoring, and policy-as-code (Python, IaC) — to enforce and automate AI security. You will evaluate the AI capabilities of third-party SaaS vendors (e.g., Notion, Slack, Google Workspace) as part of vendor and SaaS security reviews and drive risk-based adoption decisions. You will identify emerging classes of AI/agentic security vulnerabilities, develop mitigations before they become incidents, and contribute to AI-specific incident response playbooks as a senior escalation point. You will lead cross-functional AI security initiatives to closure, advise technical and executive stakeholders as an internal point of expertise, and stay current on the AI security landscape (OWASP LLM Top 10, MITRE ATLAS) to translate new research into practical controls. What we look for You are a seasoned security engineer with hands-on experience designing, evaluating, and maintaining security architecture for AI/LLM-based systems, plus deep expertise in enterprise security systems, processes, and controls. You have practical experience threat modeling and reviewing AI/LLM applications (e.g., against the OWASP Top 10 for LLM Applications) and securing agentic systems and tool-calling frameworks — MCP servers/clients, tool-permission models, and agent-to-tool trust boundaries. You have built AI governance artifacts (acceptable use policy, data-handling standards, vendor/model risk assessments) and evaluated AI capabilities within SaaS platforms (e.g., Notion AI, Slack AI, Google Workspace AI, GitHub Copilot) as part of vendor reviews. You have experience with enterprise tools for AI visibility and control (e.g., CASB, IDP/Okta) and familiarity with the corporate systems where AI is adopted (OpenAI, Anthropic, GitHub, Google Workspace, Slack, Notion, Jira). You can build security tooling, guardrails, and detections with Python or similar, and deploy cloud services and policy-as-code using Infrastructure as Code (Terraform or similar); familiarity with Kubernetes and AWS. You understand how LLMs and agentic systems are built (RAG, embeddings, fine-tuning, tool use) and authn/authz models (OAuth2, SAML, service-account/non-human identities) for agentic and machine-to-machine access, with strong application-architecture and threat-modeling fundamentals. You can lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance and drive them to closure, and communicate effectively with technical and executive audiences. Experience in regulated environments (SOC 2, PCI DSS) and applying IAM to non-human/agent identities is a plus. Base Pay Grade - P Equity Grade - 13 Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.) USA base pay range (CA, WA, NY, NJ, CT) per year: $220,000 - $280,000 USA base pay range (all other U.S. states) per year: $195,000 - $255,000 #LI-Remote Remote-first with flexibility built in Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience. Benefits designed for you Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights: Health coverage at no cost: We cover 100% of premiums for employees and their dependents. Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you. Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to. Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount. We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help. For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law. By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and consent to the use of your personal information as described.

Требования: — Опыт Security Code Review — Знание основных уязвимостей Java, Kotlin, .NET и умение находить их в коде — Знание логических уязвимостей, где они могут возникать, и опыт их нахождения в коде и диаграммах последовательности — Опыт работы с SemGrep, Solar AppScreener — Опыт написания правил и их оптимизации — Опыт написания правил для GitLeaks — Опыт оптимизации сканирования AppScreener — Знание основных уязвимостей веб и мобильных приложений, умение оценить их критичность — Опыт триажа уязвимостей — Опыт разработки отчетов и рекомендаций по результатам анализа безопасности — Опыт проведения анализа защищенности веб и мобильных приложений — Опыт моделирования угроз и проведения ревью безопасности нового функционала приложений — Умение применять паттерны ООП на Python и написание скриптов инструментов с применением паттернов ООП — Знание английского языка на уровне чтения технической литературы — Готовность самостоятельно разбираться в чужом коде (скриптах) — Ведение базы знаний и технической документации — Работа в Agile/SCRUM командах — Опыт работы с GIT — Знание и опыт работы с CI/CD на базе GitLab

Требования: Опыт Security Code Review Знание основных уязвимостей Java/Kotlin/.NET и умение находить их в коде Знание логических уязвимостей, где они могут возникать и опыт их нахождения в коде и диаграммах последовательности Опыт работы с SemGrep, Solar AppScreener. Опыт написания правил и их оптимизации Опыт написания правил для GitLeaks Опыт оптимизации сканирования AppScreener Знание основных уязвимостей веб и мобильных приложений. Умение оценить их критичность Опыт триажа уязвимостей Опыт разработки отчетов и рекомендаций по результатам анализа безопасности Опыт проведения анализа защищенности веб и мобильных приложений Опыт моделирования угроз и проведения ревью безопасности нового функционала приложений Уметь применять паттерны ООП на Python и написание скриптов инструментов с применением паттернов ООП Знать английский язык на уровне чтения технической литературы Готовность самостоятельно разбираться в чужом коде (скриптах) Ведение базы знаний и технической документации Работа в Agile/SCRUM командах Опыт работы с GIT Знание и опыт работы с CI|CD на базе GitLab

Location: Davao, Philippines; Metro Manila, Philippines; Philippines As a Security Analyst, you will be a crucial part of our cybersecurity team. This role is designed for individuals who are passionate about cybersecurity and eager to develop their skills in a dynamic and supportive environment. This resource will assist in monitoring, analyzing, and responding to security incidents, ensuring the protection of our clients' data and systems. Key Responsibilities: Security Monitoring and Analysis: Monitor security alerts and events using various security tools and platforms. Analyze security incidents to determine their impact and severity. Assist in the investigation and resolution of security incidents. Assist with checking and resolving security agent related issues. Incident Response: Participate in the incident response process, including identification, containment, eradication, and recovery. Document and report security incidents and actions taken. Vulnerability Management: Assist in the identification and assessment of vulnerabilities in client systems. Support the implementation of remediation measures to address identified vulnerabilities. Threat Intelligence: Stay updated on the latest cybersecurity threats and trends. Assist in the collection and analysis of threat intelligence to enhance security posture. Security Awareness and Training: Support the development and delivery of security awareness training for clients. Promote best practices for cybersecurity within the organization and to clients. Participate in group tabletop exercises Compliance and Reporting: Assist in ensuring compliance with relevant security standards and regulations. Prepare and maintain security documentation and reports. Collaboration and Support: Work closely with senior security analysts and other IT teams to enhance overall security. Provide support for security-related projects and initiatives. Direct Manager: Security Operations Manager Qualifications: Bachelor's degree in Cybersecurity, Information Technology, or a related field. Basic understanding of cybersecurity principles and practices. Familiarity with security tools and technologies (e.g., SIEM, firewalls, antivirus software). Strong analytical and problem-solving skills. Excellent communication and teamwork abilities. Eagerness to learn and adapt in a fast-paced environment. Preferred Skills: Relevant certifications (e.g., CompTIA Cybersecurity Analyst / CySA+). Experience with scripting or programming languages (e.g., Python, PowerShell). Knowledge of network protocols and operating systems. Salary: $1,000 – $2,000 / month

Location: Remote (United States | Canada) Workplace: Remote 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we’re building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. As a Staff Security Engineer on Security Incident Response, you'll serve as a senior technical leader and builder for the team, helping shape both how we respond to incidents today and how our response capabilities evolve over time.This role is about advancing what the team is capable of, not just responding when something breaks. You'll design and build the AI-assisted systems that extend the team's reach, lead the response to the most complex incidents, and own programs that make the organization more prepared over time, from tabletop exercises and gamedays to the continued advancement of threat hunting and insider risk capabilities. You bring engineering depth, sound incident judgment, and the ability to plan, and deliver complex work against a longer-term maturity roadmap not just execute against a queue. This is a senior individual contributor role with organization-wide impact on how 1Password investigates, contains, and learns from security incidents. This role reports to the Manager, Security Incident Response. How we’re using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is a remote opportunity within Canada and the US. What we're looking for: - Significant experience leading complex, high-severity security incidents across multiple environments, including serving as an incident commander or equivalent technical lead. - Experience designing and building AI-assisted or agentic automation for security operations (triage, investigation, containment), with sound judgment about where automation should and shouldn't hold decision authority. - Strong software engineering skills, and experience building production tooling, automation, or systems rather than only operating existing security platforms. - Experience owning a security program or capability roadmap end to end, including planning, sequencing, and delivering multi-quarter work. - Strong understanding of cloud-native, SaaS, and identity-driven attack techniques and response approaches. - Experience designing and running tabletop exercises, gamedays, or comparable readiness programs and translating findings into improvements.. - Strong written and verbal communication skills, including the ability to represent technical tradeoffs to senior leadership and cross-functional stakeholders. - Experience mentoring engineers or otherwise raising the technical and investigative capabilities of a team. How you'll work: - You look for opportunities to build systems that scale the team's capabilities rather than relying on repeated manual effort, and you're interested in thoughtfully applying AI and automation where they can improve security outcomes. - An experienced incident commander who brings structure to complex incidents, makes sound decisions with incomplete information, and helps teams move forward during high-pressure situations. - You're comfortable taking ownership of a capability from strategy through execution, including defining priorities, sequencing work, navigating dependencies, and delivering against a longer-term roadmap. - You can operate as a technical partner to leaders and cross-functional teams, independently representing technical priorities, risks, and tradeoffs. - You value continuous improvement and contribute to an environment where teams can examine incidents, decisions, and failures openly and turn what they learn into stronger systems and practices. What you can expect: - Serve as incident manager and technical escalation point for complex, high-severity events, bringing structure, sound judgement, and clear decision-making under pressure. - Design and build AI-assisted and automated systems that improve how quickly and consistently the team can triage, investigate, and contain incidents. - Establish appropriate safety controls, approval gates, auditability, and rollback mechanisms for automated and AI-assisted actions, ensuring high-impact decisions remain appropriately human-controlled. - Own the team's readiness programs, including tabletop exercises and incident gamedays, from scenario design and execution through debriefing and translating finishes into concrete (or measurable) improvements - Advance the team’s threat hunting and insider risk capabilities by identifying opportunities, defining priorities, and delivering roadmap work that improves investigative depth and coverage - Plan, sequence, and deliver multi-quarter initiatives that mature the team's capabilities, bringing project management discipline to work that doesn't fit neatly into a sprint. - Mentor and provide technical leadership to other engineers, strengthening engineering rigor and investigative judgement across the team. - Partner with Security Operations, Product Security, and Engineering teams to close gaps surfaced through investigations, hunting, and simulations. - Foster psychological safety and blameless learning across incident retrospectives, gamedays, and tabletop debriefs. - Extend strong incident response practices beyond the immediate team by building reusable systems, tooling, and operating patterns that strengthen response capabilities across areas such as PSIRT, Privacy, and Engineering. USA-based roles only: The annual base salary for this role is between $192,000 USD and $278,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $167,000 CAD and $242,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. Our culture At 1Password, we prioritize collaboration, clear and transparent communication, receptiveness to feedback, and alignment with our core values: keep it simple, lead with honesty, and put people first. You’ll be part of a team that challenges the status quo, and is excited to experiment and iterate in search of the best solution. That said, 1Password is not for everyone https://blog.1password.com/inside-the-culture-powering-1passwords-next-chapter/. Our work is demanding, we strive for excellence, and the pace is fast. We need people who are keen to take on challenging problems, who seek feedback to grow, and who are driven to make an impact. If you're looking for a place where you can settle into a comfortable routine, this might not be the right fit for you. We’re looking for individuals who are proven experts in their fields, as well as those who are highly adaptable, can thrive in ambiguity and through change, are curious, and above all deliver results. How we work with AI We are committed to leveraging cutting-edge technology—including AI—to achieve our mission. We also understand that thinking critically about AI in its current forms will help us create better solutions for our customers and ourselves with its future forms, which will help us continue to close the gap between security and privacy and achieve our mission. We want team members at all levels to take the approach of actively learning AI best practices, identifying opportunities to apply AI in meaningful ways, and driving innovative solutions in their daily work. Embracing the future of AI isn't just encouraged—it's an essential part of how we will be successful at 1Password. This approach extends to our hiring process—candidates are welcome to use AI tools responsibly and thoughtfully during the application process. To us, this means we do ask that you join live interviews without using AI tools so we can get to know how you communicate, solve problems, and collaborate with others. Our approach to remote work We believe in the power of remote work, but recognize that in-person connection is important to help us achieve our mission. While we are a remote-first company, travel for in-person engagement is a part of almost all roles, and we require our employees to be ready and willing to take part. Frequency will depend on role and responsibilities, and may include, but is not limited to: annual department-wide offsites, team meetings, and customer/industry events. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing 👶 Maternity and parental leave top-up programs 🩺 Competitive health benefits 🏝 Generous PTO policy Growth and future 📈 RSU program for most employees 💸 Retirement matching program 🔑 Free 1Password account Community 🤝 Paid volunteer days 🏆 Peer-to-peer recognition through Bonusly 🌎 Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting. You belong here. 1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love. Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs. Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you. Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law. 1Password uses artificial intelligence (AI) and machine learning (ML) technologies, including natural language processing and predictive analytics, to assist in the initial screening of employment applications and improve our recruitment process. See here https://www.ashbyhq.com/downloadables/ashby-bias-audit-08-2024.pdf for the latest third party bias audit information. If you prefer not to have your application assessed using AI/ML features, you may opt out by completing this form https://jobs.ashbyhq.com/1password/automation-notice. For additional information see our Candidate Privacy Notice https://1password.com/files/candidate-privacy-notice.pdf.

Location: Remote - Europe About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Role Summary We are looking for a Network Security Engineer to join our Network team. This role combines deep expertise in network engineering and cybersecurity. You will help implement end-to-end network security architectures for enterprise and data center backbone/fabric environments, work with network architects and the management team to guide these designs through review and approval with the Security team, and operate and maintain the implemented solutions day-to-day. You are expected to be hands-on with leading firewall platforms (Palo Alto, Check Point, etc.), understand complex routing and switching designs, and be comfortable implementing and troubleshooting these networks. Responsibilities Implement and maintain Zero Trust-aligned security architectures for both enterprise and data center networks. Configure Layer 3/4 & Multi-VRF Segmentation, Security Policies, Secure Remote access. Implement and test large hyper scale DC Security solutions :  IPS/NDR solutions ,  AntiDDOS solutions. Integrate NGFW platforms with modern identity providers such as Microsoft Entra ID and Okta, maintain NGFW management, automation, and logging capabilities required by the Security team. Implement and maintain Security Capabilities, including Layer 7 application inspection, IPS, user identification, ZTNA, and SASE integrations. Integrate and operate monitoring tools such as Zabbix, Grafana, and Akvorado. Regularly perform security hardening, vulnerability management, and patching and upgrades on network and infrastructure devices, and verify the effectiveness of these procedures. Required Qualifications Experience in networking and security protocols (TCP/IP, HTTP(S), DNS, TLS, IPsec, Routing protocols ) Experience and Knowledge of  Backbone & Datacenter technologies (EVPN, L3VPN MPLS, MPBGP, L2VPN..) Hands-on experience with next-generation firewalls (Palo Alto Networks, Check Point, or similar). Experience with automation using Python, Go, or equivalent. Proficiency in Unix/Linux and experience with major network vendors (Cisco, Juniper, Aruba, etc.). Experience configuring and troubleshooting NGFW capabilities and integrations, including IPS, User-ID, Microsoft Entra ID, and ZTNA. Preferred Qualifications Good knowledge of IPv6. Experience with automation tools (Ansible, Terraform, NetBox, SaltStack, etc.). Experience with large-scale, highly available distributed systems. Knowledge of Zero Trust principles and micro-segmentation approaches. Relevant certifications (CCNP/CCIE, PCNSE, NSE 4/7) and professional working proficiency in English. Familiarity with commercial or open-source monitoring, logging, and security analytics solutions such as Splunk; EDR/XDR platforms such as CrowdStrike; and centralized NGFW management platforms such as Panorama, Strata Cloud Manager, and FortiManager. Bonus: Exposure to DevSecOps practices (SAST/DAST), CSPM/CWPP platforms such as Wiz, EDR, offensive security (OSCP/CPTS, red teaming), or security frameworks, standards, and regulations such as ISO/IEC 27001, NIST CSF, and GDPR. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: Prague Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work. Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you. Our vision: A world where everyone is free to focus on their most purposeful work, together. About the Role: Wrike relies on a dynamically changing set of integrated SaaS tools, and securing them requires dedicated, end-to-end ownership of their data security posture. Asking questions like what data is collected, why, how long it’s retained, and how it flows between systems. As Business Systems Security Analyst, you will own this space by establishing continuous data governance, SaaS integration governance, and identity & access management across our business systems. Helping Wrike stay proactive and prevention-focused rather than reactive. Your Impact: Own data governance across business systems: what’s collected, why, retention, and data flows between systems Govern SaaS integrations: inventory, risk assessment, and secure onboarding/offboarding of third-party tools Manage and review access provisioning and deprovisioning across integrated SaaS platforms, ensuring least-privilege principles are enforced throughout the identity lifecycle Oversee SSO configurations, OAuth scopes, and service account permissions across business-critical systems, identifying overprivileged accounts and stale access Monitor and help harden the security posture of business-critical SaaS platforms and their connected tools Conduct periodic access reviews and certifications for SaaS platforms, with a focus on privileged and third-party system accounts Conduct security reviews of integrations from a data flow perspective before they connect to business-critical systems, including evaluating IAM implications such as API keys, OAuth tokens, and service accounts Partner with system owners to remediate risks and embed security into business processes Focus on AI-driven integration workflows: MCP, A2A, and emerging agent-based protocols Your Qualifications: Experience securing SaaS business platforms and their integrations, including identity and access management across those environments Solid understanding of data governance principles: data classification, retention, and data flow mapping Technical hands-on skills: ability to independently investigate configurations, permissions, API connections, and logs across SaaS platforms Knowledge of integration best practices: secure API design, least-privilege service accounts, token/secret management, and integration lifecycle management Understanding of AI tooling and its security implications: how AI-powered tools access, process, and store business data Experience with third-party/vendor risk assessment and SaaS security posture management Ability to work cross-functionally with business system owners (Sales Ops, Marketing Ops, RevOps) Standout Qualities: Hands-on experience with SSPM tools or Salesforce security tooling Familiarity with OAuth/API integration security and supply-chain risk Experience with AI-driven data flows and integrations (e.g., MCP, A2A, agent-based workflows) Knowledge of Salesforce is a strong plus Team Dynamics: You will be joining Wrike's 15-member global Security team led by Maksim Pekuryn, Director of Security. You will report directly to Swen Groeneveld, Head of Security Operations, whose 8-person sub-team includes Security Engineers, Application Security, and SOC specialists. You'll also work closely with cross-functional partners in RevOps, Marketing, and Legal. Our Work Style: Tech stack: Salesforce, Marketo, Salesloft, OAuth integrations, connected apps, and related business SaaS tooling. Collaborative environment working closely with RevOps, Legal, and Marketing teams. Hybrid mode. Benefits & Perks: 5 Weeks of paid vacation Sick Leave Compensation 5 Paid Uncertified Sick Days 2 weeks fully paid w/ medical certificate, additional 4 weeks paid at 80% salary rate Parental Leave (fully paid): 18 Weeks Maternity / 4 Week Paternity 2 Volunteer Days Meal Vouchers (CZK 220 per working day) Annual Prague Travel Card (Lítačka) Hybrid Working Model Benefit budget with flexible options, including a MultiSport card, Canadian Medical membership, contributions to a pension savings plan and additional choices available through Benefit Plus What's Next? Recruiter Screen (30 mins) Department Interview / Technical Discussion (60 mins) Cultural Interview with Hiring Manager, CISO, and HRBP Your recruitment buddy will be Aleksandar Chernev , Senior Technical Recruiter. #LI-AC1 Who Is Wrike and Our Culture We’re a team of innovators and creators who solve the complex work problems of today and tomorrow. Hybrid work mode Wrike is our people, not a place. With 1,000+ employees collaborating across nearly every time zone, we support talent through 10 global hubs — Australia, Costa Rica, Cyprus, Czechia, Estonia, France, India, Ireland, Japan, and the United States — offering flexible ways of working that include remote work, hybrid environments, and co-working spaces across many locations. While flexibility looks different across teams and regions, employees located near certain hubs — particularly in Prague (CZ), Nicosia (CY), Bangalore (IN), and Rennes (FR) — are generally expected to collaborate in person around 2–3 days per week, balancing the flexibility of distributed work with opportunities for in-person collaboration and connection. Our persona 💡  Smart: We love what we do, and we’re great at it because this is our domain. Our combined knowledge in this space is unmatched. 💚  Dedicated: We get up every day focused on helping our customers win. We’re committed to helping our teammates win, too! 🤗  Approachable: We're friendly, easy to get along with, considerate, and helpful. Our culture and Values 🤩 Customer-Focused We care about our customers. We understand the customer journey, experience, and value derived from Wrike. Decision-making and action-taking are done with the customer in mind. 🤝 Collaborative We work as one and win together, each bringing unique strengths that contribute to diversity of thought for better outcomes. Leveraging our own work management platform, we foster an environment of creative collaboration and shared achievement. 🎨 Creative We strive to succeed through continuous innovation. It’s our pursuit of novel concepts that helped us create a market category. We continue to cultivate a workplace that fosters creative thinking as a means of transcending conventional boundaries and empowers us to break new ground to deliver extraordinary work management solutions. 💪 Committed We believe in ownership at all levels of the organization, by owning workflows from start to finish. Each member of our team is an integral part of this commitment, establishing work as a platform for personal growth and transformation, as well as collective success and growth. Check out our LinkedIn Life Page , Company culture page , Instagram , Wrike Engineering Team , Medium , Meetup.com , Youtube for a feel for what life is like at Wrike.

Fastly is seeking a Threat Detection Analyst for the APAC region who is Japanese speaking. The role is part of the Fastly Customer Security Operations Center (CSOC) team, focusing on operational support of Fastly’s security products and services, particularly integrating and supporting agent software installed on customer systems. The position involves monitoring and analyzing customer activity with emphasis on security functions such as identifying account-takeover, Bot Attacks, and WAF administration, focusing on application layer security and web technologies. The role requires working Friday to Tuesday, 0000 - 0800 UTC (9am - 6pm AEST). Responsibilities include: — Ensuring security for customers and providing outstanding responses to security issues. — Providing deep application-security expertise on escalated cases from customers and automated systems. — Conducting continuous improvement and research to enhance customer security products and operations. — Contributing to processes and policies to scale the organization. — Creating and reviewing security service reports for customers. — Creating and managing security content for customer environments. Requirements: — Prior experience working in a SOC environment. — Experience with SaaS/Cloud or hybrid cloud deployments; Apache, NGINX, IIS or other web server platforms and associated application server technologies and frameworks. — Scripting skills in Python, Java, Go, Rust, PHP, Unix/Linux Shell, C#, or other common web languages. — Strong information security background with practical skills in application security. — Experience in IT or security technical support, operations, or research roles. — Unix/Linux or Windows system administration skills. — Ability to work with limited supervision and mentor others on security knowledge. — Fluent spoken and written English, adaptable to different audiences. — Experience troubleshooting software products. — Focus on delivering exceptional customer experiences. Work hours require availability during core business hours. The position is remote based with potential to become hybrid as Fastly expands in the region. Travel to the US and internationally may be required. Benefits include a comprehensive package starting from day one, with variations depending on country. Fastly emphasizes a positive work environment, diversity, inclusion, and support for employees' passions and causes. Applications must be submitted through Fastly's official careers site. Fastly is an equal opportunity employer committed to a safe and welcoming work environment free of discrimination and harassment. Reasonable accommodations are available for applicants with disabilities.

Задачи: — Проводить оценку архитектуры решений и готовности сервиса к запуску с точки зрения безопасности; — Анализировать отчеты SSDLC сканеров, bug bounty; — Разрабатывать рекомендации по устранению уязвимостей, ставить задачи на команды, проверять устранения; — Дорабатывать правила для SSDLC сканеров и WAF; — Заниматься построением и развитием процессов SSDLC; — Заниматься написанием политик и инструкций по информационной безопасности в своей зоне ответственности; — Обучать и консультировать команды разработки в области информационной безопасности. Требования: — Знаешь принципы безопасной разработки; — Имеешь опыт анализа архитектуры приложений и отдельных технологических процессов с точки зрения безопасности; — Имеешь навыки определения и устранения уязвимостей в веб и мобильных приложениях; — Работал с инструментами SAST, DAST, SCA, WAF; — Знаешь типовые протоколы аутентификации, базовые принципы криптографии; — Имеешь навыки работы в команде. Желательно, но не обязательно: — Умение разбираться в чужом коде (Java, JavaScript, TypeScript, Kotlin, Swift); — Навыки автоматизации задач с помощью скриптовых языков (Python, Go); — Практический опыт работы с Linux, Docker, Kubernetes. Условия: — Оформление по трудовому кодексу. Полностью белая зарплата. — Каждый месяц отдельная сумма на питание. — Регулярные тимбилдинги, спортивные забеги, корпоративные праздники. — ДМС включает стоматологию и полис путешественника. — Обучение за счёт компании: тренинги, конференции, митапы, курсы английского. — Выдача ноутбука и всего необходимого для работы. — Возможность работать в красивом и удобном офисе с кофе, сладостями и фруктами. — Бесплатные онлайн-консультации психологов, юристов, специалистов по финансам и ЗОЖ, ветеринаров. — Офисы в Нижнем Новгороде, Москве и Петербурге.

Location: Hybrid About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations: Hybrid from Austin, TX About the Department The Identity and Access Management (IAM) team is dedicated to ensuring the secure and efficient management of user identities, access privileges, and authentication mechanisms across internal systems, applications, and data. Our mission is to safeguard the organization against unauthorized access, protect sensitive information, and enable seamless user experiences while adhering to industry best practices and compliance standards. About the Role As an Identity and Access Management (IAM) Security Engineer, you will play a crucial role in designing, implementing, and scaling identity and access management solutions for Cloudflare’s internal workforce and workloads. You will be responsible for safeguarding our systems, applications, and data by ensuring secure user access, authentication, and authorization mechanisms. What You’ll Do Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting Leverage Cloudflare products to secure our identities Build SSO integrations leveraging SAML, OIDC, OAuth, and SCIM Build and manage the Identity Governance and Administration platform Develop automated roles leveraging RBAC and ABAC Build and manage an access certification platform Build and manage a Privileged Access Management (PAM) platform Provide operational support of IAM systems including an on-call rotation that may include after hours calls Desirable skills, knowledge and experience Security engineers take part in a wide variety of tasks and projects in the team. One individual is not expected to know everything, but a working knowledge in several of the following areas is required: Strong understanding of identity federation (SAML, OAuth, OpenID Connect, etc.) Experience implementing Identity Governance and Administration (IGA) solutions including lifecycle management, SCIM, birthright access (RBAC, ABAC), and access certifications Demonstrated ability to build production-grade automation scripts and tools. Must possess hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges. Experience with secure configuration of containerized application platforms (e.g. Kubernetes) Advanced scripting experience (Python, TypeScript, Bash, etc.) Experience implementing Zero Trust controls Experience integrating with applications and SaaS solutions Experience with Identity and Access Management policy application and enforcement Experience working with Identity Threat Detection & Response (ITDR) Experience working with infrastructure as code and configuration management tools like Terraform, Ansible, etc. What Makes Cloudflare Special? We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet. Project Galileo : Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost. Athenian Project : In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states. 1.1.1.1 : We released 1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers. Sound like something you’d like to be a part of? We’d love to hear from you! Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs.  More details about this will be available at that stage of the interview process. This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license. Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer. Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

Location: APAC - Remote; Hong Kong SAR About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. Key Responsibilities： Contract Audit: Participate in code reviews of ERC-20, ERC-721, and other token and related smart contracts to identify common security risks; AI Audit Tool Development: Explore and apply AI/LLM, Agent, and other technologies to automate the smart contract vulnerability detection process, improving audit efficiency and vulnerability discovery coverage; Security Incident Analysis: Combine manual analysis with AI technology to participate in the analysis of the causes, vulnerability types, and impacts of attacks on Web3 projects, providing references for audit process optimization. Requirements： Bachelor's or above in Computer Science, Information Security, Cryptography, PhD Year 2 and Master's Year 1 candidates are strongly preferre Proficient in Solidity; solid understanding of EVM internals and common ERC standards (ERC-20/721/777, etc.) Familiar with Ethereum/BSC ecosystems; understanding of DeFi and L1/L2 architectures preferred Able to identify common smart contract vulnerability patterns and attack vectors Nice to Have Experience using AI/LLM for smart contract vulnerability detection CTF or audit competition experience; track record of finding medium/high-severity bugs Familiarity with DeFi protocols (Uniswap V2/V3, AAVE, etc.) Proficiency in Rust or Go Contributions to Web3 open-source projects or automated auditing tools Why Join Us At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.

Задачи: — Проверять безопасность сервисов, приложений, архитектуры, новых фич и сопровождать внедрение мер по устранению выявленных рисков — Давать рекомендации по построению безопасной архитектуры, описывать целевую архитектуру по лучшим практикам (в том числе OWASP) — Анализировать код разрабатываемых сервисов на наличие уязвимостей — Проводить аудит безопасности сред и приложений (web, API, mobile) — Проводить аудит и тестирование программ лояльности на предмет безопасности и возможных злоупотреблений, включая анализ бизнес-логики — Составлять отчеты по результатам аудитов, заводить задачи в Jira с рекомендациями, сопровождать их до закрытия и перепроверки, контролировать недопущение роста технического долга безопасности — Строить и поддерживать модели угроз по закрепленным сервисам — Составлять рекомендации по улучшению автоматических сканеров анализа уязвимостей совместно с DevSecOps — Анализировать уязвимости по программе bug bounty: триаж, оценка, рекомендации — Оказывать помощь младшим специалистам команды, участвовать в их обучении и передаче экспертизы Требования: — Коммерческий опыт работы в AppSec / анализе защищённости от 5 лет — Глубокие знания web-технологий, понимание архитектуры микросервисных приложений — Понимание природы уязвимостей из OWASP Top 10 и OWASP Mobile Top 10 и умение их эксплуатировать — Умение работать с инструментами: nmap, BurpSuite, ZAP, MSF, SQLmap, nuclei, mobsf, gobuster и другими, способность объяснить их работу в боевом режиме — Опыт построения моделей угроз (STRIDE / threat modeling) и ревью архитектуры — Опыт анализа кода с точки зрения безопасности хотя бы на одном из распространенных стеков — Опыт тестирования на проникновение веб-приложений, мобильных приложений и API от 3 лет — Знания принципов работы средств защиты информации (WAF и решений на уровне сервиса) — Умение обходить защиту на уровне приложений и средств защиты информации Преимущества: — Опыт работы в e-commerce, fintech или маркетплейсах (понимание рисков платежей, авторизации, бонусных систем, программ лояльности) — Понимание инфраструктурных уязвимостей — Навыки работы со скриптами (Python, Bash) для автоматизации тестов — Наличие профильных сертификатов — Успешный опыт участия в CTF — Высшее образование в сфере ИБ или ИТ Условия: — Аккредитованная IT-компания, развивающая один из ТОП-10 крупнейших интернет-магазинов страны — Персональное предложение по заработной плате и официальное трудоустройство — Гибридный формат работы — Помощь карьерного консультанта для выбора индивидуального направления развития — Широкий социальный пакет со стоматологией, компенсация питания в офисе, скидки и бонусы от партнеров — Современное оборудование для работы — Стильный и уютный офис в центре Екатеринбурга и Москвы — Корпоративная культура, уважение индивидуальности, отсутствие дресс-кода — Изучение английского языка, компенсация обучений и развитие в онлайн-университете