Вакансии

Location: Remote Who We Are: Galaxy Digital Inc. (Nasdaq: GLXY) is a global leader in digital assets and data center infrastructure, growing the economy that runs on code. Galaxy delivers the onchain infrastructure that connects institutions to digital assets, including trading, advisory, asset management, staking, self-custody, and tokenization. Galaxy also develops and operates data center infrastructure to power AI and HPC workloads. Anchored by its Helios campus in Texas, Galaxy is building a multi-gigawatt pipeline of more than 5.7 GW of potential capacity, positioning it among the largest and fastest-growing data center developers in North America. The Company is headquartered in New York City, with offices across North America, Europe, the Middle East, and Asia. Additional information about Galaxy's businesses and products is available on www.galaxy.com . What We Value: We are a diverse team of free thinkers, and fast movers united to help investors and creators energize the global economy. We are looking for individuals who thrive in a culture of builders and overachievers and embrace high performance, transparent feedback, and a mission-first approach. Our culture shapes our way of working and gets us where we want to be. Seek Excellence. Be Selective To Be Effective. Be Highly Aligned, Loosely Coupled. Disagree Transparently. Encourage Independent Decision-Making. Build Dream Teams. Who You Are: The Blockchain Security Lead owns the security posture of on-chain systems and protocols across the organization. This role blends strategic leadership with deep hands-on expertise, overseeing a small team of blockchain security engineers while actively contributing to design reviews, threat modeling, and code audits. You’ll partner closely with on-chain product and engineering teams to embed security into architecture, development, and operations—building scalable, reusable security controls that grow with the business. What You’ll Do: Lead, mentor, and grow a team of blockchain security engineers. Define and evolve the blockchain security strategy and roadmap. Serve as a trusted security partner to product, protocol, and infrastructure teams. Lead threat modeling and architecture reviews for on-chain systems. Perform and guide security reviews and audits of smart contracts (Solidity, Rust/Solana) and backend services and supporting infrastructure. Design and implement reusable security controls, patterns, and reference architectures. Support secure deployment of cloud-native infrastructure (containers, Kubernetes). Research emerging blockchain threats, exploits, and mitigations, and translate them into actionable controls. Embrace and champion the thoughtful adoption of AI to improve team performance and business outcomes. Leverage AI tools (e.g., generative AI, automation platforms, data copilots) to improve productivity, decision-making, and output quality in your day-to-day work. What We’re Looking For: Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience) 10+ years of security software engineering experience 5+ years working with blockchain technologies 5+ years working with smart contract security across multiple chains Experience leading or mentoring a small, highly technical team Published material on vulnerabilities/security bugs within the Web3 community Expertise in secure SDLC, threat modeling, and application architecture review Multi agent code reviews for vulnerabilities using frontier models Secure coding practices and in-depth code review capability Strong familiarity with smart contracts (Solidity, Rust), cloud-native environments (Docker, Kubernetes), authentication and authorization, TLS/PKI, and cloud, infrastructure, and network security Clear, confident communicator across technical and non-technical audiences Comfortable balancing hands-on execution with strategic ownership; detail-oriented, pragmatic, and strong in problem solving under ambiguity Bonus Points: Direct exposure to Solana, staking systems, or similar Layer 1 protocols Prior experience at a blockchain security audit firm (e.g., Trail of Bits, Halborn, Ottersec, Zellic) Background in financial services or institutional crypto security Familiarity with DeFi protocol security, key management, and custody architectures Experience contributing to or leading security programs at a crypto exchange, protocol foundation, or digital asset firm What We Offer: Competitive base salary and discretionary bonus Hybrid/Flexible Working Arrangements Flexible Time Off (paid) 3% 401(k) company contribution Company-paid health and protective benefits for employees, partners, and other dependents Generous paid Parental Leave Competitive family planning benefits for US employees Opportunities to learn about the Crypto industry Smart, entrepreneurial, and fun colleagues Free daily snacks and weekly breakfasts/lunches Employee Resource Groups Free coaching and counseling sessions through Headspace Apply now and join us as we grow the economy that runs on code. Galaxy respects diversity and seeks to provide equal employment opportunities to all employees and job applicants for employment without regard to actual or perceived age, race, color, creed, religion, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, marital or partnership or caregiver status, ancestry, national origin, citizenship status, disability, military or veteran status, protected medical condition as defined by applicable state or local law, genetic information or predisposing genetic characteristic, or other characteristic protected by applicable federal, state, or local laws and ordinances. We will endeavor to make a reasonable accommodation to the known limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business. If you believe you require such assistance to complete the application process or to participate in an interview, please contact careers@galaxy.com.

Location: Hong Kong, Hong Kong SAR Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Opportunity We are looking for a Security Operations Engineer who combines hands-on engineering skills with security operations expertise. You will be deeply involved in the operations and troubleshooting of both server-side and client-side components within our Zero Trust architecture, drive security risk governance initiatives, and leverage AI tools to continuously improve system stability and compliance. Key Responsibilities K8s Operations & Vendor Engagement: Develop deep expertise in K3s / Kubernetes, including version management and disaster recovery. Independently identify and reproduce system issues, proactively engage with vendors to drive root cause analysis and resolution — not just workarounds. Zero Trust Network Access Governance: Work closely on Zero Trust initiatives, participate in cluster network configuration and troubleshooting, identify device compliance risks, drive remediation of non-compliant devices, and continuously optimize access control policies. Monitoring & Observability: Build and continuously improve log monitoring systems; proactively surface system risks through alert rules and trend analysis. AI Agent Implementation: Lead the adoption of AI Agents in security operations — design and deploy AI Agent workflows for log analysis, alert triage, and automated incident remediation (e.g., Multi-step Agents using Claude / GPT with tool-calling), reducing manual intervention and improving response efficiency. Requirements Must Have Solid understanding of Kubernetes / K3s core concepts; able to independently diagnose cluster-level issues. Foundational knowledge of security principles and Zero Trust model; strong networking fundamentals with the ability to independently troubleshoot and analyze network connectivity issues. Hands-on experience with AI tools (e.g., Claude, Codex, or equivalents) for day-to-day tasks including log analysis, scripting, fault diagnosis, and documentation. Bachelor's degree or above in Computer Science, Information Security, Network Engineering, or a related field; 3–5 years of relevant experience. Nice to Have Experience with DACS / NAC or similar device access control system operations or risk governance. Familiarity with monitoring and logging platforms such as Prometheus + Grafana, ELK, or Loki. Hands-on experience building AI Agents or implementing tool-calling workflows. Proven track record of collaborating with external vendors to drive issue resolution. Who You Are AI-Forward: You actively explore and integrate AI tools into your daily workflow to boost efficiency. Owner Mindset: You take genuine ownership of system health — you don't just close tickets. Strong Communicator & Driver: You can clearly articulate technical issues and effectively push cross-functional teams and vendors toward resolution. Self-Starter: You don't wait to be told — you proactively spot problems and drive them to closure. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Please note that Hong Kong is a group-level service hub, and OKX does not carry on a business of operating a virtual asset trading platform in Hong Kong. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE: Notion is looking for an experienced engineer who has designed and built secure software systems to help define the security foundations for our AI products. You’ll work with product and engineering teams on agent runtimes, tool permissions, retrieval, content writes, observability, and abuse-resistant design. You’ll turn product risks into clear architecture, reusable guardrails, automated tests, and production systems that help teams ship new features safely. This role is based in San Francisco. We work from our offices on Mondays, Tuesdays and Thursdays (our Anchor Days) because we do our best thinking and building together in person. We’re looking for someone who’s excited to work alongside the team during those days. WHAT YOU'LL ACHIEVE: - Define and build security architecture for product surfaces that operate across customer workspace content, including tool execution, content writes, retrieval, permission checks, provenance, and auditability. - Make the secure path the easy path for product teams by shipping reusable libraries, review patterns, test fixtures, and guardrails that prevent classes of vulnerabilities. - Build automated red-team and regression testing for risks such as prompt injection, indirect instruction following, data exfiltration, tool misuse, cross-tenant leakage, and unsafe workspace mutations. - Translate threat models for new product surfaces into concrete engineering requirements, production checks, and launch criteria. - Use production signals, incident learnings, and targeted experiments to harden Notion over time, then feed those learnings back into architecture and developer workflows. - Help define the security bar for how engineers use coding agents, MCP-enabled tools, hooks, and internal automation without introducing new risk. SKILLS YOU'LL NEED TO BRING: - Secure software engineering craft: You have 8-10+ years of experience designing, building, or securing complex software systems, and you are comfortable working in production code with product and platform engineers. - Security architecture judgment: You can look at a complex system and reason about where the permissions, data flow, or trust boundaries are likely to get weird, and help re-design it to make them better. - Security product strategy: You can turn a complex security risk you see into a product design or architecture that can be built. - Builder mindset: You’d rather leave behind a useful tool, test, library, or pattern than a task or project for someone else to pick up later. NICE TO HAVES: - Experience building or securing products with tool use, retrieval, workflow automation, content writes, or complex permission boundaries. - Hands-on experience with prompt-injection testing, red teaming, model behavior evaluation, or abuse-resistant application design. - Experience with enterprise SaaS security models: permissions, sharing, audit logs, data residency, encryption, compliance, or customer-facing trust guarantees. - Experience building developer tooling, CI checks, coding-agent workflows, MCP integrations, or internal frameworks that shape how engineers build software. - Public security research, vulnerability writeups, conference talks, or open-source work related to product security or secure developer infrastructure. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco, the estimated base salary range for this role is $270,000 - $340,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550. https://dev.notion.so/a3ce416456924276a59de91bca740028?pvs=21 #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: Mumbai Who We Are: Galaxy Digital Inc. (Nasdaq: GLXY) is a global leader in digital assets and data center infrastructure, growing the economy that runs on code. Galaxy delivers the onchain infrastructure that connects institutions to digital assets, including trading, advisory, asset management, staking, self-custody, and tokenization. Galaxy also develops and operates data center infrastructure to power AI and HPC workloads. Anchored by its Helios campus in Texas, Galaxy is building a multi-gigawatt pipeline of more than 5.7 GW of potential capacity, positioning it among the largest and fastest-growing data center developers in North America. The Company is headquartered in New York City, with offices across North America, Europe, the Middle East, and Asia. Additional information about Galaxy's businesses and products is available on www.galaxy.com . What We Value: We are a diverse team of free thinkers, and fast movers united to help investors and creators energize the global economy. We are looking for individuals who thrive in a culture of builders and overachievers and embrace high performance, transparent feedback, and a mission-first approach. Our culture shapes our way of working and gets us where we want to be. Seek Excellence. Be Selective To Be Effective. Be Highly Aligned, Loosely Coupled. Disagree Transparently. Encourage Independent Decision-Making. Build Dream Teams. Who We Are: Galaxy is a global leader in digital assets and data center infrastructure, delivering solutions that accelerate progress in finance and artificial intelligence. We believe that blockchain and digital asset innovation will transform how value moves through the world – and we’re building the products and services to make that future a reality. Our institutional digital assets platform spans trading, investment banking, asset management, staking, self-custody, and tokenization technology. We also invest in and operate cutting-edge data center infrastructure to power AI and high-performance computing, addressing the growing demand for scalable energy and compute in the U.S. We work at the intersection of finance and technology, helping institutions, startups, and developers navigate a digitally native economy. Led by CEO and Founder Michael Novogratz, our team blends deep crypto expertise with institutional experience and a shared commitment to shaping the future of Web3 and AI. Galaxy is headquartered in New York City, with offices across North America, Europe, the Middle East, and Asia. To learn more about our businesses and products, visit www.galaxy.com. What We Value: We are a diverse team of free thinkers, and fast movers united to help investors and creators energize the global economy. We are looking for individuals who thrive in a culture of builders and overachievers and embrace high performance, transparent feedback, and a mission-first approach. Our culture shapes our way of working and gets us where we want to be. Seek Excellence. Be Selective To Be Effective. Be Highly Aligned, Loosely Coupled. Disagree Transparently. Encourage Independent Decision-Making. Build Dream Teams. Who You Are: Galaxy is seeking a Senior Product Security Engineer with an expertise in securing micro services and cloud applications, and with a thorough understanding of product and software engineering processes. The engineer will participate in assessments of advanced trading systems and blockchain architectures, followed by the facilitation and/or implementation of remediations. The engineer will report to the Director of Product Security and work closely with Engineering, Product and Infrastructure teams to design and deliver secure software solutions at a rapid growth company. What You’ll Do: Assist engineering and software delivery teams in assessing the security of the applications, software, and operational components including: Participate in relevant secure software design and code reviews Assist with development and review of test plans to ensure effective security coverage Assist teams with the mitigation of findings: assess the impacts, propose possible solutions, and provide technical guidance for implementation Provide expertise and advice on cloud application and infrastructure security design patterns Provide training and thought leadership for secure software development practices Review and improve implementations of authentication, authorization, data access and other security layers of our product stack Research and collaborate with product team members to make proposals to adopt advanced security patterns - e.g. MPC, multi-signature, confidential computing What We’re Looking For: Bachelor or post-graduate diploma in cybersecurity or technology 5 years work experience in product security, application security, cloud security, or software development of security features Threat modeling, risk assessment, controls review Programming languages Managing SAST, DAST, SCA, and helping software engineers with understanding vulnerabilities and selecting appropriate mitigation In depth understanding of at least a few of the following topics: authentication and authorization technology, TLS and PKI, network security, cloud security, system security Strong analysis skills, detail oriented, strategic thinking Strong verbal and written communication skills, collaborative and solution-driven Security or cloud certifications Bonus Points: Familiar with Cryptocurrency What We Offer: Competitive base salary and discretionary bonus Competitive paid time off Great office location in central Mumbai (BKC) Company-paid health and protective benefits for employees and their eligible dependents Free virtual coaching sessions through Headspace Opportunities to learn about the Crypto industry Smart, entrepreneurial, and fun colleagues *Benefits may vary depending on location. Galaxy respects diversity and seeks to provide equal employment opportunities to all employees and job applicants for employment without regard to actual or perceived age, race, color, creed, religion, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, marital or partnership or caregiver status, ancestry, national origin, citizenship status, disability, military or veteran status, protected medical condition as defined by applicable state or local law, genetic information or predisposing genetic characteristic, or other characteristic protected by applicable federal, state, or local laws and ordinances. We will endeavor to make a reasonable accommodation to the known limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business. If you believe you require such assistance to complete the application process or to participate in an interview, please contact careers@galaxy.com.

Location: Remote - Colombia ; Remote - Costa Rica ; Remote - Mexico Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We are seeking a Sr. AI Security Engineer to join our team! About The Role Backblaze is seeking a Senior AI Security Engineer to design and implement safeguards for internal AI usage , with a focus on agentic systems, developer protection, and runtime security . This is a hands-on role for a practitioner who has built and deployed security controls , not just defined policy. You will enable teams to safely use AI by creating enforcement layers, identity controls, and detection capabilities that constrain and monitor AI-driven activity. What You’ll Do: Agentic AI Safeguards Architect and implement guardrails for tool-using AI systems , including: Tool access controls and allowlists Context and memory isolation Step-level validation of agent actions Apply mitigations aligned to the OWASP Agentic AI Top 10 (e.g., prompt injection, unsafe tool use, data leakage, excessive autonomy) Runtime Security Controls Build enforcement mechanisms that govern AI behavior at execution time: Interceptors, proxies, or middleware for tool/API calls Policy decision and enforcement layers Rate limits, execution bounds, and kill-switches Prevent unsafe or unauthorized actions initiated by AI systems Non-Human Identity (NHI) Design and implement identity and access controls for agents and automation , including: Short-lived credentials and scoped permissions Clear separation between human and non-human access Strong binding of identity to task context and execution Ensure all AI actions are attributable and auditable Observability & Detection Implement logging and tracing for AI activity : Prompts, tool usage, and decision flows Build detection capabilities using: Behavioral baselining and anomaly detection techniques Identify and alert on: Abnormal tool usage Suspicious prompt patterns Unexpected data access Threat Modeling (MAESTRO) Perform agentic system threat modeling using MAESTRO , including: Mapping agent capabilities, trust boundaries, and attack paths Modeling misuse and adversarial scenarios Translate findings into practical safeguards and detection logic Developer Safeguards Protect developers using AI tools by: Preventing sensitive data exposure Validating AI-generated code and actions Constraining unsafe automation Enable safe usage of AI-assisted development tools (e.g., Claude Code, Codex, Cursor ) with: Security validation layers Controlled prompting and output handling patterns The Right Fit: 7+ years in security engineering or backend systems Proven experience designing and deploying security controls , such as: Runtime enforcement layers (proxies, middleware, policy engines) Identity and access systems, especially for non-human entities Strong programming skills (Python preferred; Go, Java, or TypeScript a plus) Experience using AI-assisted development tools such as Claude Code in real workflows, including understanding associated security risks and safeguards Experience with: Logging, monitoring, and detection systems Building or securing API/service interactions Practical familiarity with: Agentic AI systems or tool-integrated LLM workflows OWASP guidance for AI/agent risks Practitioner Knowledge Experience applying (not just referencing): OWASP Agentic AI / LLM risk guidance NIST AI RMF concepts in real systems CSA guidance on workload and machine identity Strong understanding of: Zero Trust for non-human identities Secrets management and credential scoping Observability tooling (e.g., OpenTelemetry, ELK) Bonus Points For: Experience securing internal AI platforms or developer-facing AI tools Background in detection engineering, threat hunting, or adversarial testing Familiarity with agent frameworks (e.g., LangChain, LlamaIndex) Experience mentoring engineers and guiding secure design At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here. At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer. To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice. #LATAM

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT US: Notion helps you build beautiful tools for your life’s work. In today's world of endless apps and tabs, Notion provides one place for teams to get everything done, seamlessly connecting docs, notes, projects, calendar, and email—with AI built in to find answers and automate work. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, love Notion for its flexibility and choose it because it helps them save time and money. In-person collaboration is essential to Notion's culture. We require all team members to work from our offices on Mondays, Tuesdays, and Thursdays, our designated Anchor Days. Certain teams or positions may require additional in-office workdays. ABOUT THE ROLE: Millions of people rely on Notion to do their most important work. Protecting that trust starts with protecting the people who build Notion: our employees, their laptops, their identities, and the SaaS apps they rely on every day. We are looking for a hands-on Corporate Security Engineer to own and improve the technical controls that keep our workforce and corporate environment safe. This is a security engineering role focused on building scalable controls and automation across identity, endpoints, SaaS, and workforce infrastructure, not a traditional IT support or corporate engineering role. You'll own and evolve core security controls, design systems and automation that scale with the company, and help make security both stronger and easier to use. You'll partner closely with IT, Infrastructure, GRC, and Detection & Response to improve the security foundations that employees rely on every day. WHAT YOU'LL ACHIEVE: - Harden our identity and access management stack, including Okta and Google Workspace, with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS. - Run our endpoint security program across a macOS-first fleet, including MDM, EDR, and configuration baselines, with working coverage for Windows and ChromeOS. - Secure AI tool usage at the endpoint, including governance of large language models, AI agents, and model context protocol (MCP) integrations; detect and prevent unauthorized or risky AI service access and data exfiltration through AI-enabled tools. - Reduce SaaS risk at scale through SSPM tooling and custom automation, including detection of risky OAuth grants, excessive permissions, shadow IT, and configuration drift. - Write code (Python, Terraform) to automate access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection. - Partner with Detection & Response to ensure corporate systems produce the telemetry needed to detect identity, endpoint, and SaaS abuse. - Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering, not a separate workstream. - Partner with Detection & Response on investigation and response for corporate security incidents, including phishing, account compromise, lost devices, and BEC. SKILLS YOU NEED TO BRING: - Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company. - Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM). - Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments. - Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration. - Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors. - Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level. - Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC. NICE TO HAVES: - Experience at a fast-growing tech or AI company where the security program had to outpace headcount. - A background in IT engineering, SRE, or production engineering that transitioned into security engineering. - Experience building internal security tooling or workflows that improved employee or developer experience. - Contributions to the security community through open-source tools, blog posts, or conference talks. We hire talented and passionate people from a variety of backgrounds because we want our global employee base to represent the wide diversity of our customers. If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply. If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $200,000 - $220,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74 and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role The Security Risk team is responsible for how Anthropic identifies, prioritizes, and drives treatment of its most important security risks. We are rebuilding risk management to operate as an engineering function through automation and AI-native platforms to enable decision making. The systems we assess span Anthropic’s full security landscape, from authorization primitives to cryptographic foundations, so the team needs breadth across domains and the ability to go deep in any of them. Security Risk, in deep partnership with Security Engineering, will help define the security program to shape how both engineers and non-engineers build and ship software. The conventional GRC playbook was not built for a company shipping frontier AI. You will help define what replaces it, with a direct line to CISO-level decisions and the mandate to build the AI-native platform underneath. You’ll work across a breadth of areas from identity and secrets management to infrastructure security, with your focus shaped by your strengths, ability to learn quickly, and the team’s priorities. This is largely greenfield work, and you will help define the architecture and discipline. Key responsibilities Take ownership of Anthropic’s most complex security risk problems and drive them end to end with minimal oversight, turning ambiguous signals into a defensible view of severity and likelihood and seeing them through escalation, treatment decisions, and remediation Build the systems that make risk measurable and let risk work scale, including quantification tooling, automated intake and triage, and the observability that partner teams use to understand their own risk posture Work alongside Security Engineering as a calibrated technical peer who pressure tests architectures and treatment plans, translates findings into prioritized remediation roadmaps, and makes the investment case for what to fix now, what to accept and track, and what to defer Mentor engineers and risk practitioners across Security and the broader engineering organization, and help build a risk engineering culture in which teams own their risks and our team provides the visibility and judgment that supports the Security risk engineering Work across the breadth of Anthropic’s security landscape, spanning areas like identity and secrets management, developer security and supply chain, infrastructure security, and secure frameworks, and build the context needed to reason about risk credibly in each Go deep where a risk demands it, understanding how these systems are built and how they fail so that assessments and treatment plans reflect engineering reality rather than abstraction Risk assessment and quantification Identify systematic risks through threat modeling and structured assessment, then drive the severity calibration and escalation conversations that follow, bringing leadership a defensible position and a clear recommendation that holds up under pointed questions Contribute to the team’s quantitative risk work, applying methods such as calibrated estimation and Monte Carlo simulation where they meaningfully change a resource or treatment decision Risk platform and automation Design and build AI-native risk tooling that uses Claude to classify incoming risks, augment triage, and continuously sense changes in our risk landscape as teams ship Create the dashboards and data pipelines that give engineering and product teams real-time visibility into their risk posture and make distributed ownership of risk practical Remediation strategy and investment Partner with Security Engineering and risk owners to design remediation roadmaps that are explicit about sequencing, ownership, and the investment required Measure outcomes rather than activity, focusing on decisions made and risk reduced Minimum qualifications At least 8 years of software engineering or security engineering experience, including leading and remediating complex security risks independently Bachelor’s degree in a related field or equivalent experience Strong programming skills in Python or at least one systems language such as Go, Rust, or C/C++ Broad knowledge across the core security engineering domains, with depth in at least one, including identity and secrets management, developer security and supply chain, infrastructure and cloud security, and secure frameworks Calibrated risk judgment, meaning you can put a defensible severity and likelihood on an ambiguous problem and change your position when the evidence changes Experience leading cross-functional security initiatives and navigating complex organizational dynamics Outstanding communication skills, translating technical concepts effectively across all levels of the organization A track record of bringing clarity and ownership to ambiguous technical problems and driving them to resolution Low ego and high empathy, with a history of growing the engineers around you and supporting diverse, inclusive teams Passion for AI safety and the role security and risk management play in building trustworthy AI systems Preferred qualifications Owned a named security risk and driven it from discovery through remediation across multiple teams Briefed executives on risk decisions and defended accept, remediate, or transfer recommendations under challenge Built security automation, detection, or risk platforms adopted across an engineering organization Shipped LLM or agent-powered tooling and workflows that automate security or risk activities A security engineering, detection engineering, or offensive security background with a risk-based prioritization mindset Built or operated a quantified security risk program (FAIR-style decomposition, Monte Carlo simulation, loss exceedance analysis) whose outputs changed real resource decisions Enough familiarity with SOC 2, ISO 27001, or FedRAMP to know what compliance does and does not buy you The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $405,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco, CA • New York, NY • United States Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's Security team is growing, and we're looking for a Security Operations Manager to lead the strategy and execution of our security operations program. In this role, you'll build and scale the systems, processes, and tooling that help protect Figma and our community. You'll partner closely with Security Engineering, Platform Security, IT, GRC, and Legal to strengthen our detection and response capabilities, improve operational resilience, and help shape the future of our DART and SOC functions. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Own Figma's security monitoring and incident response program, from detection engineering through post-incident review and continuous improvement Build and automate security operations workflows, including alert triage, enrichment, investigation, and response actions using SOAR and custom tooling Develop and maintain incident response run books, escalation procedures, and communication plans for security events of varying severity Lead incident response preparedness initiatives, including tabletop exercises, red team engagements, and response capability assessments Improve the effectiveness of our SIEM and SOAR platforms by reducing noise, increasing signal fidelity, and closing detection coverage gaps Build and operationalize threat intelligence capabilities to identify adversary behaviors, prioritize investments, and strengthen detection and response programs Partner with Legal, Privacy, and Communications teams to support breach notification and regulatory response obligations during significant security incidents Drive security operations strategy through vendor management, operational metrics, and cross-functional initiatives spanning IAM, vulnerability management, DLP, and exposure reduction We'd love to hear from you if you have: 7+ years of experience in security operations, incident response, or a related security engineering function Hands-on experience building and automating detection and response workflows using scripting, APIs, or security automation platforms Deep expertise with SIEM and SOAR technologies in a cloud-native or SaaS environment Demonstrated success building, scaling, or significantly improving a detection and response program Experience leading complex security incidents and partnering with Legal, Privacy, and business stakeholders during high-impact events While it's not required, it's an added plus if you also have: Operated in a public company environment with SOX, ISO 27001, SOC 2, or FedRAMP requirements Applied AI risk management frameworks such as NIST AI RMF, OECD AI Principles, or ISO 42001 Utilized AI-powered tools to automate security operations workflows and improve team efficiency At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. Pay Transparency Disclosure Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law. Annual Base Salary Range: $204,000 — $317,000 USD At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status , or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com . These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: Holding interviews in an accessible location Enabling closed captioning on video conferencing Ensuring all written communication be compatible with screen readers Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice . Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles: Candidates may submit up to 5 applications during any rolling 30-day period. Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection. Once the applicable days has passed, candidates are welcome to apply again.

Location: Remote US What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Security Operations Center Location: Remote, US (West Coast) Compensation Range: $100,000-$125,000 base plus bonus and equity. This role may be eligible for on-call/call-in pay in addition to base pay *The initial training period for this position will be Monday-Friday. Following training, the work schedule is subject to change and may include weekend or a 4x10 shift, depending on business requirements* What You’ll Do: Huntress is looking for a Security Operations Center Analyst to add to our growing team. In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyberattacks and will have daily opportunities to progress your analyst skillset and accelerate your career growth. The Huntress Security Operations Center is an elite team of individuals who wake up every day to combat threat actors. You will have daily opportunities to progress your analysis skills while being at the forefront of what’s happening in the wild. If you’re looking to accelerate your career and skills, this is the team for you! Responsibilities: Triage, investigate, and respond to alerts coming in from the Huntress platform. Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks, where possible, and provide remediations needed to remove the threat. Perform tactical malware analysis as part of investigating and triaging alerts. Investigate suspicious Microsoft M365 activity and provide remediations. Assist in escalations from the Product Support team for threat-related and SOC-relevant questions. Contribute to detection engineering creation and tuning efforts. Contribute to projects focused on driving better outcomes for our analysts and partners Contribute to our collaboratively mentored team (we're all here to make each other better!). What You Bring To The Team: 4+ years of experience in a SOC or Digital Forensics (DFIR) role Demonstrated experience with Windows, Linux, and MacOS as an attack surface Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs) Demonstrated experience with static and dynamic malware analysis concepts Working knowledge of Windows Administration or Enterprise Domain Administration Active Directory, Group Policy, Domain Trusts, etc. Working knowledge of core networking concepts Common ports/protocols, NAT, Public/Private IPs, VLANs, etc. Working knowledge of web technologies and concepts Web servers/applications, OWASP top 10, etc. Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes A strong sense of curiosity and a genuine excitement for learning Preferred Qualifications: Previous experience in an MSP/MSSP/MDR role Linux and MacOS investigative experience Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby) Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc. Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc. Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc. Familiarity with MSP tools such as RMMs What We Offer: 100% remote work environment - since our founding in 2015 Generous paid time off policy, including vacation, sick time, and paid holidays 12 weeks of paid parental leave Highly competitive and comprehensive medical, dental, and vision benefits plans 401(k) with a 5% contribution regardless of employee contribution Life and Disability insurance plans Stock options for all full-time employees One-time $500 reimbursement for building/upgrading home office Annual allowance for education and professional development assistance $75 USD/month digital reimbursement Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Location: Berlin Workplace: OnSite - Job Title: Security Officer – Classified Information - Department: ICEYE Germany - Location: Germany (Berlin) - Reports to: CEO, ICEYE Germany - Employment type: Permanent - Working type: On-Site - Employment is subject to applicable security screening (incl. SUPO, where required) THE MISSION OF THE SECURITY OFFICER Build and own the classified information security posture that lets ICEYE Intelligence GmbH handle Verschlusssachen (VS) and the NATO and EU equivalents. You will build the defensible, audit-ready Geheimschutz framework for ICEYE Germany. You design it, run it, and represent it to the competent authorities. You are also the trusted advisor to the Geschäftsführer and the first point of contact for all security matters. This is a role for a builder: someone who is confident in defining, maintaining and communicating the security framework that enables ICEYE's continued growth and lets us meet our obligations to our customers. WHO WE ARE ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth. ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system. ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future. Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific. WHAT YOU'LL DO - Own the roadmap. Define and execute the plan that takes ICEYE Intelligence GmbH from today's baseline to fully cleared operations at the required national, NATO and EU levels. This covers admission to the Geheimschutzbetreuung (facility security clearance), personnel clearances, IT approval and the operational processes underneath. - Be the appointed Geheimschutzbeauftragter. Act as the company's official security officer. Represent ICEYE with the respective authorities. Lead all interactions with these bodies with credibility and precision. - Build the framework. Partner with Global Security to implement the hardened frameworks and systems. - Run the clearance pipeline. Coordinate Sicherheitsüberprüfungen (SÜG) and Sicherheitserklärungen across the German organisation, plus NATO/EU personnel clearance certificates, in close coordination with Global Security so the business stays ahead of programme needs. - Drive IT approval. Work with IT and Global Security to take classified systems through BSI-aligned approval (Zulassung) for the required classification levels. - Enable the business. Translate security requirements into practical guidance: handling of VS, visit requests, travel, subcontractors and procurement. Run incident reporting and rehearsed crisis procedures. WHAT WE ARE LOOKING FOR - Deep, hands-on knowledge of the German classified-information regime. - Track record as Sicherheitsbevollmächtigter or directly equivalent in a relevant organisation. - Working fluency in NATO and EU classification frameworks and how they map to national classification levels. - Credibility with the relevant authorities and administrative bodies. - Fluent German and English, with the ability to brief at executive, authority and working level. - An existing valid security clearance is a strong plus.   APPLICATION PROCESS 1. Intro conversation with Talent Acquisition or local Chief of Staff (30 min) 2. Technical case: a take-home roadmap exercise. Show how you would get from the current state to the highest target classification level, covering facility, personnel and IT approval, presented and defended in person to a panel (90 min) 3. Hiring manager interview with the CEO, ICEYE Intelligence GmbH (60 min) 4. Cross-functional interviews with Operations, Legal/Compliance and ICEYE's Chief Security Officer (3 x 45 min) 5. Final conversation with the Group CEO of ICEYE WHAT WE OFFER AT ICEYE At ICEYE, you will join a diverse and highly engaged team united by the ambition to make the impossible possible. We know that we will succeed only through exceptional people in our team — which is why your growth, wellbeing, and success are a priority. As a global scale-up, we combine speed and ambition with the opportunity to take real ownership from day one. You will benefit from continuous professional development, training opportunities, and a culture that values collaboration, curiosity, and integrity. ICEYE is a place where your contributions have a visible impact, and where we celebrate success together. BENEFITS - A job that matters in a dynamic Defence Technology and Earth Observation environment with a scale-up approach - An independent role with a supportive and diverse work environment - Time for self-development, research, training, conferences, or certification schemes Employment is subject to applicable security screening, including German Sicherheitsüberprüfung (Ü1/Ü2/Ü3 as required by the role). OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION At ICEYE, we believe that diversity isn't just a buzzword – it's our greatest asset. We're committed to fostering an inclusive environment where every voice is not only heard but celebrated. We know that diverse perspectives breed innovation and creativity, which is why we actively seek out individuals from all walks of life, backgrounds, and experiences. Whatever your background, we want you to bring your authentic self to the table. Join us and be part of a team where differences are not only embraced but cherished, because together, we're stronger. We welcome applications from people of all backgrounds, including those who may need workplace adjustments. If you require any specific accommodations or assistance during the recruitment process for any reason, please let us know. Apply now to start your ICEYE journey, and help us continue to make the impossible possible together. Read more about ICEYE and working with us at iceye.com http://iceye.com.

Location: Lagos, Nigeria Governance & Policy Develop, review, and maintain information security policies, standards, procedures, and guidelines. Ensure alignment with recognized frameworks and standards (e.g. ISO/IEC 27001, PCIDSS, CBN Cybersecurity Framework). Define security governance structures, roles, and decision‑making processes. Risk Management Support enterprise information security risk assessments and risk treatment plans. Maintain the security risk register and track remediation activities. Advise business units on risk acceptance, mitigation, transfer, or avoidance. Compliance & Regulatory Assurance Ensure compliance with applicable laws, regulations, and contractual requirements (e.g. NDPR, CBN Cybersecurity Framework, PCI DSS, ISO 27001). Coordinate internal and external audits, assessments, and certifications. Track and remediate audit findings and compliance gaps. Metrics, Reporting & Assurance Define and maintain security governance KPIs, KRIs, and dashboards. Prepare security posture reports for management, risk committees, and auditors. Support board‑level and executive reporting on information security matters. Third‑Party & Vendor Security Governance Support third‑party security risk assessments and due diligence processes. Review supplier security controls and contractual security clauses. Monitor ongoing compliance of critical vendors. Awareness & Continuous Improvement Support security awareness and policy training initiatives. Monitor regulatory changes and emerging governance trends. Drive continuous improvement of governance and control maturity. Requirements Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field. Minimum of 5–9 years’ experience in information security governance, risk, and compliance (GRC). Hands-on experience implementing or managing security frameworks (e.g., ISO 27001, CBN Cybersecurity Framework, NDPR, PCI DSS). Strong understanding of risk management methodologies and control frameworks. Experience working with audits, compliance reviews, and regulatory requirements. Familiarity with security tools and platforms supporting governance and compliance activities. Experience in financial services, fintech, or telecommunications is an added advantage.

Location: Philippines As a Security Analyst at Intelice Solutions, you will be a crucial part of our cybersecurity team. This role is designed for individuals who are passionate about cybersecurity and eager to develop their skills in a dynamic and supportive environment. This resource will assist in monitoring, analyzing, and responding to security incidents, ensuring the protection of our clients' data and systems. Key Responsibilities: Security Monitoring and Analysis: Monitor security alerts and events using various security tools and platforms. Analyze security incidents to determine their impact and severity. Assist in the investigation and resolution of security incidents. Assist with checking and resolving security agent related issues. Incident Response: Participate in the incident response process, including identification, containment, eradication, and recovery. Document and report security incidents and actions taken. Vulnerability Management: Assist in the identification and assessment of vulnerabilities in client systems. Support the implementation of remediation measures to address identified vulnerabilities. Threat Intelligence: Stay updated on the latest cybersecurity threats and trends. Assist in the collection and analysis of threat intelligence to enhance security posture. Security Awareness and Training: Support the development and delivery of security awareness training for clients. Promote best practices for cybersecurity within the organization and to clients. Participate in group tabletop exercises Compliance and Reporting: Assist in ensuring compliance with relevant security standards and regulations. Prepare and maintain security documentation and reports. Collaboration and Support: Work closely with senior security analysts and other IT teams to enhance overall security. Provide support for security-related projects and initiatives. Direct Manager: Security Operations Manager Qualifications: Bachelor's degree in Cybersecurity, Information Technology, or a related field. Basic understanding of cybersecurity principles and practices. Familiarity with security tools and technologies (e.g., SIEM, firewalls, antivirus software). Strong analytical and problem-solving skills. Excellent communication and teamwork abilities. Eagerness to learn and adapt in a fast-paced environment. Preferred Skills: Relevant certifications (e.g., CompTIA Cybersecurity Analyst / CySA+). Experience with scripting or programming languages (e.g., Python, PowerShell). Knowledge of network protocols and operating systems.

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. ABOUT THE ROLE We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks. You will also serve as a technical infrastructure responder during security incidents, deploying real-time cloud or network countermeasures to protect our production ecosystem. WHAT YOU'LL DO CORE RESPONSIBILITIES - Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure. - Posture Management & Visibility: Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines. - Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production. - Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build automated base-image patching and rolling upgrade pipelines. - Compliance-Driven Tracking: Track, document, and manage infrastructure vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of infrastructure remediation timelines and exception approvals. - Executive Reporting & Alerting: Escalate and report critical production exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize infrastructure risk trends and cloud compliance posture. - Remediation Collaboration: Partner with SRE, DevOps, and Platform teams to provide clear infrastructure mitigation paths. Assist in writing, reviewing, or modifying cloud configuration templates directly when necessary to resolve security flaws. - Incident Response Support: Assist Incident Response teams during active cloud or host-level breaches. Help develop and implement immediate, real-time cloud, network, or IAM configuration countermeasures to contain threats. REQUIRED SKILLS & EXPERIENCE - Experience: 5 years of experience in Cloud Security, DevSecOps, or Systems Engineering roles. - Cloud Infrastructure Depth: Strong foundational experience working with multi-cloud environments (Deep GCP expertise preferred, with working knowledge of AWS or Azure). - Posture Management & Scanning Tooling: Hands-on experience operating modern infrastructure security platforms such as Wiz, Orca, Prisma Cloud, Lacework, or cloud-native options (GCP Security Command Center). - IaC and Automation Fluency: Strong proficiency with Infrastructure as Code platforms (Terraform, Pulumi) and GitOps deployment workflows. Ability to evaluate and configure IaC scanners like Checkov, Tfsec, or KICS. - Containerization & Orchestration: Deep understanding of Docker/container security and Kubernetes architectures (e.g., GKE, EKS), including runtime security, network policies, and workload identity. - Compliance Awareness: Understanding of how infrastructure configurations and vulnerability management map to security compliance frameworks like SOC 2, ISO 27001, CIS Benchmarks, or NIST. WHAT WE VALUE - Systems Thinking: The ability to see the "big picture" and understand how security decisions impact the entire stack. - Technical Influence: The ability to drive technical alignment across the organization through expertise and collaboration rather than direct authority. - Autonomy: Comfortable leading major technical initiatives and driving outcomes with minimal oversight. - Problem-Solving Mindset: A passion for breaking down complex security challenges into elegant, scalable engineering solutions. This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Location: United States, San Diego, CA Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Sony Interactive Entertainment is seeking an experienced and collaborative Regional Security Manager to lead physical security operations across the Americas (AMER) region. Reporting to the Director, Global Security Operations, this role will oversee a team responsible for regional security programs, incident response, crisis support, and operational readiness across SIE offices, studios, and events. The ideal candidate brings strong operational leadership, sound judgment, and the ability to build trusted partnerships across a global organization. This position plays a key role in helping create safe, secure, and resilient environments for employees, visitors, and business operations. What You’ll Do Regional Security Leadership Lead and support a regional team of security professionals across the AMER region. Partner with global security teams to help maintain consistent standards, processes, and operational practices. Contribute to the development and execution of regional security strategies aligned with business priorities. Use metrics and operational insights to evaluate effectiveness and identify opportunities for improvement. Support budget planning, resource management, and vendor oversight within the security function. Physical Security Operations Oversee physical security programs, policies, and procedures across offices and studio locations. Conduct risk assessments and coordinate security reviews to identify and address potential vulnerabilities. Collaborate with internal stakeholders and external partners to strengthen site security and emergency preparedness. Manage third-party security providers to ensure quality service delivery and alignment with organizational expectations. Provide guidance and operational support to regional sites on security best practices and compliance. Incident & Crisis Response Lead or support responses to workplace security incidents and safety-related matters. Partner closely with Workplace, Legal, HR/People, and other teams to support investigations and incident management. Prepare clear documentation, reporting, and recommendations following incidents or security reviews. Support emergency planning activities, tabletop exercises, and preparedness initiatives. Coordinate response efforts during significant incidents impacting employees, facilities, or operations. Event Security Support security planning and operational readiness for PlayStation events, activations, and executive engagements. Conduct event-related risk assessments and coordinate appropriate security measures. Provide on-site leadership and incident management support during key regional events. Collaboration & Communication Build strong partnerships with teams across HR, IT, Workplace, Legal, and other business functions. Communicate regularly with leadership regarding security priorities, risks, and operational updates. Maintain relationships with industry peers, security organizations, and external partners to stay informed on emerging trends and best practices. What We’re Looking For 8+ years of experience in physical security, corporate security operations, investigations, law enforcement, military, intelligence, or a related field. Demonstrated experience managing security initiatives across multiple locations or regions. Strong leadership and people management skills, including coaching and team development. Ability to assess complex situations, make informed decisions, and communicate effectively during incidents. Excellent collaboration and stakeholder management skills across diverse teams and functions. Experience managing vendors, contractors, or third-party security providers. Familiarity with crisis management, emergency response, and event security operations. Flexibility to support occasional evening/weekend work and regional travel as needed. Preferred Qualifications Experience in technology, gaming, entertainment, or other fast-paced global organizations. Industry certifications such as CPP (Certified Protection Professional) or similar credentials. Bachelor’s degree in Criminal Justice, Security Management, Emergency Management, Business, or a related field — or equivalent professional experience. Location: This position can be based in one of our California offices, including San Mateo, San Diego, Aliso Viejo, or Los Angeles. * Hybrid role with an expectation to work in-office on average 2 days per week #LI-GM1 At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. The estimated base pay range for this role is listed below. $150,700 — $226,100 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: Remote About us OpenZeppelin is the security standard onchain finance is built on. Founded in 2015, our mission is to accelerate the world's transition to an open financial system, built on open standards and secured by rigorous research. Our open-source Contract Libraries have facilitated over $35 trillion in onchain value and are used by 10 of the top 10 tokenized money market funds and 9 of the top 10 stablecoins by market cap. We combine AI-native security tooling with deep research and a decade of audit expertise to support leading institutions and crypto-native teams shaping the next generation of digital assets like DTCC, Fidelity, Coinbase, Uniswap, Aave, the Ethereum Foundation, and many more across the full secure development lifecycle. Please note: Always refer to OpenZeppelin's official job page for the most accurate information about our open roles, as we have seen multiple third party job sites posting inaccurate information. The Secure Development team ❤️ OpenZeppelin is the security partner of choice for the most important protocols in Web3. Our Secure Development team sits at the intersection of building and breaking: we design, implement, and harden production-grade libraries and smart contracts for leading projects across EVM, Starknet, Stellar/Soroban, Arbitrum Stylus, Aptos, and beyond, often as an embedded extension of the client's engineering team. We work the way the rest of the industry will five years from now. Every developer on the team is a fully AI-native engineer, supported by outstanding internal AI tooling built for every phase of secure development. Developers own their workstreams end-to-end — agents amplify their effectiveness, and peers, security researchers, and external auditors provide rigorous review on every piece of work that ships. The Canton Network engagement This role joins an active 24-month, multi-million-dollar commitment to build the open-source DeFi foundations of the world's most institutional blockchain. You'll deliver production-ready Reference Implementations (privacy-preserving DEX, lending, cross-chain stablecoin settlement, confidential auction launchpad, and more), the OpenZeppelin Contracts Library for Daml that Canton developers will import, and Canton standards implementation. Within this, you will: Own features of the OpenZeppelin Contracts Library for Daml end to end, from design through audit: examples include a Timelock, access control, vaults, or token standard support. Design and implement components of the year-1 Reference Implementations: privacy-preserving DEX, lending protocol, cross-chain stablecoin settlement, and confidential auction launchpad. Implement and shepherd the OZ Daml versions of CIP-56, CIP-86, CIP-103, future CIPs. Coordinate with Digital Asset on spec evolution and with ChainSafe on middleware alignment. Present and defend your designs in technical discussions with Digital Asset, the Canton Foundation, and other partners. Work with OpenZeppelin's security researchers on threat models, audit preparation, and fixes for the components you own. Use AI systems as core daily tools for research, design, implementation, testing, and security work. Build agents, skills, and workflows, and share what works with the team. Contribute developer-experience and security feedback upstream into the Canton protocol, Splice, the Daml SDK, and the Splice Wallet Kernel. Research privacy-preserving DeFi, multi-party authorization patterns, and Canton-specific primitives, and share what you learn with the team. You have Production Daml fluency. You understand templates, choices, controllers/observers/signatories, multi-party authorization, sub-transaction views, and propose/accept patterns as first-class primitives. Running an SV, contributing to Splice internals, governance, or Canton Coin tokenomics. Canton architecture depth. You understand the network, not only the code: the Global Synchronizer and private synchronizers, what each party and synchronizer sees in a transaction, smart contract upgrades, and the token standards (CIP-56, CIP-112). 3+ years of smart contract development in production. This includes hands-on work on Canton or another UTXO-based or privacy-preserving architecture (Cardano, Midnight, Zcash, Aleo, Mina, or similar). You can reason about Canton's privacy boundaries the way an EVM developer reasons about storage slots. Production DeFi experience. You have shipped DeFi primitives such as AMMs, vaults (ERC-4626 or equivalent), lending protocols, or cross-chain settlement, and you understand the security pitfalls of each. You know the standard EVM patterns (access control, token standards, lending pools, DEXs), because many Canton standards reuse them. A security-first mindset. This is non-negotiable. You build secure code by default, you think adversarially about every line you write, and you find vulnerabilities when you review Daml code. We look for a developer with a security mindset, not a security researcher. Published audits, threat models, or disclosures are a plus. An AI-native workflow. Claude Code, Cursor, or equivalent is your daily driver. You know agents, harnesses, and skills, not only autocomplete. You hold AI output to the same standard as a colleague's pull request, and you stay accountable for everything you ship. Fluency in client-facing communication (English) Autonomy and proactivity. Nice to have Cryptography or financial-engineering background. Privacy-preserving DeFi rewards both. Institutional finance and compliance design experience. Credential gates, multi-party attestation, custody flows, capital-markets microstructure, RWA tokenization, settlement. Experience running an SV , contributing to Splice internals, governance, or Canton Coin tokenomics. Cross-chain interoperability exposure. Production work with at least one major cross-chain messaging protocol (Chainlink CCIP, LayerZero, Wormhole, Axelar, or similar). Library / SDK API design taste. You've built reusable, import-first developer libraries, not just applications. You have opinions on extensibility patterns (hooks, modular components, override points) and on what makes an audited primitive pleasant to consume. Experience applying AI to security work. You've already used AI as a serious instrument in security workflows: audit assistance, vulnerability research, fuzzing, invariant or spec analysis, static-analysis augmentation, or similar. Hands-on experience with non-EVM ecosystems. Starknet, Stellar/Soroban, Arbitrum Stylus, Aptos, Move-based chains. Open-source contributions to widely-used libraries in the smart-contract or AI-tooling space. Logistics Our interview process is designed to be fast (we target ~30 days from first call to offer) while still giving both sides a clear "yes." The full process consists of: Recruiter interview (30-45 minutes) Manager interview (60 minutes) Team interview (45 minutes) Leadership Interview (30 minutes) Paid technical work trial Please let us know if you require any accommodations for the interview process, and we’ll do our best to provide assistance. Benefits Meet your teammates at company gatherings around the world 😎 Enjoy the flexibility of fully remote work 🌎 Take the time you need with flexible time off 🏝 Grow your family with 8 weeks of paid leave for primary caregivers, 4 weeks for secondary caregivers, and a one-time $3,600 baby bonus 💙 Build your ideal home office with up to $500 in equipment support 🪑 Stay covered with medical insurance 🏥 Keep growing with learning and development opportunities 🧠 Get a monthly stipend for your preferred co-working space 💻 At OpenZeppelin , we are an equal opportunity employer and we value different perspectives. We are committed to building a diverse workforce. This includes but is not limited to gender, race, sexual orientation, religion, national origin and other characteristics that make each one of us unique. In this uniqueness, we find the most value. Come join us! Use of AI as part of the recruiting process As part of OpenZeppelin’s recruitment process, we may use automated tools, including artificial intelligence, to assist in reviewing applications and assessing candidate qualifications. These tools are used to support our People team by identifying relevant skills and experience, and are not used to make decisions solely by automated means. All hiring decisions involve human review. Any personal data provided as part of your application will be processed in accordance with OpenZeppelin’s Data Privacy Notice . If you have questions about this recruitment process or would like to request human review of your application, please contact us at talent@openzeppelin.com.

Location: US, San Diego, CA Workplace: OnSite Here at Humanoid, we believe in a future where robots amplify human potential. That’s why we’ve set out on a mission to build the world’s most capable, commercially-scalable, and safe humanoid robots. We’re bringing that mission to life with HMND‑01 - our rapidly developed humanoid platform being deployed in real industrial environments - and we’re growing the team to take it even further. ABOUT THE ROLE We’re scaling from prototypes to manufacturing, and the process maturity needs to match. This role owns the secure manufacturing pipeline — the procedures, tooling, and controls that take a bare board in an untrusted CM facility and turn it into a cryptographically enrolled, OTA-ready device that our cloud fleet trusts. You’ll be the bridge between our secure boot/firmware teams and the cloud control plane, connecting them at the point of manufacture. WHAT YOU'LL DO - Design the secure manufacturing station — Architect the hardware, software, and network stack (HSM, key injection, AWS Private CA) for factory floor provisioning stations. Integrate the secure boot fuse/flashing flow from our secure boot/firmware team. - Build the provisioning toolchain — Own the automation pipeline that takes a bare device through identity provisioning, enrollment, firmware flashing, calibration, and functional test. - Bridge device and cloud identity Enroll every device into a registry with correct credentials for OTA, session heartbeating, and deployment tracking. - Own the End-Of-Line (EOL) test framework — Work with globally distributed teams to define pass/fail criteria for devices leaving the line: sensor calibration, actuator checks, and initial OTA health check. - Work with contract manufacturers —Translate security requirements into CM-executable procedures; threat-model the factory for key leakage, firmware tampering, and supply chain substitution. - Maintain chain of custody — Link each physical serial number to its provisioned identity, calibration records, test results, and firmware version at manufacture. - Collaborate across teams — Work daily with a globally distributed team of firmware, cloud, manufacturing, systems and operational team members. WHAT WE'RE LOOKING FOR - 10+ years of experience which includes manufacturing engineering, with a comparable depth of experience developing test tools and frameworks. Plus experience working with networking in a manufacturing environment, and time focused on secure device provisioning and/or secure manufacturing processes. Ideally 3 years at a Staff level or equivalent. - PKI and device identity — Experience with X.509 certificate lifecycles, mTLS, device authentication and attestation, and managed CA services like AWS Private CA. - AWS infrastructure — S3, IAM, ECS, KMS, CloudHSM and Secrets Manager for secure provisioning workflows. - EOL test and calibration — Hands-on experience defining manufacturing test frameworks, experience with hardware test fixtures. - Scripting and automation — Advanced skills in Python or Bash for developing production-grade provisioning toolchains. - Advanced skills and understanding of Rust, Bazel, Systemd - Embedded Linux systems — Experience with NVIDIA Jetson Orin/Thor platforms. - Secure manufacturing design — Ability to design secure processes for untrusted or semi-trusted offshore CMs and air-gapped station design. - Experience managing quality gates with contract manufacturers - Hardware root of trust understanding — General understanding of secure boot chains, TPM/TrustZone, cryptographic key injection, certificate provisioning, and eFuse programming. WHAT WE OFFER - Comprehensive health coverage for US‑based employees, including fully paid medical, dental, and vision insurance, with virtual care and employee assistance resources. - Meaningful time off to rest and recharge: 23 days of PTO (accrued), separate sick leave, and paid company holidays. - 401(k) retirement plan with employer match. - Equity included–we believe builders should share in what they build. - Free daily catered lunch, snacks, and drinks in‑office. - Collaboration with top‑tier engineers, researchers, and product experts in AI and robotics. - Freedom to influence the product and own key initiatives. For this role in California, the expected base salary range is $260,000–$320,000 USD per year; your placement in that range depends on how your experience maps to our internal leveling.

Location: United Kingdom; Ireland; Dublin; Croatia; Hungary; Bulgaria; Sofia; Belgium; Denmark; Portugal; Poland; Sweden; Italy; Madrid; London; Czechia; Amsterdam Workplace: Remote ABOUT ELEVENLABS ElevenLabs is an AI research and product company transforming how we interact with technology. We launched in January 2023 with the first human-like AI voice model. Today, we serve millions of users and thousands of businesses - from fast-growing startups to large enterprises like Deutsche Telekom and Meta. Our investors are some of the world's most prominent, including Andreessen Horowitz, ICONIQ Growth and Sequoia. We've raised $781M in funding and our last valuation was $22B - multiples of 11, always. We have expanded from voice into three main platforms: - ElevenAgents enables businesses to deliver seamless and intelligent customer experiences, with the integrations, testing, monitoring, and reliability necessary to deploy voice and chat agents at scale. - ElevenCreative empowers creators and marketers to generate and edit speech, music, image, and video across 70+ languages. - ElevenAPI gives developers access to our leading AI audio foundational models. Everything we do is the result of the creativity and commitment of our team - builders doing the best work of their lives. We are researchers, engineers, and operators. IOI medalists and ex-founders. If you want to work hard and create lasting positive impact, we want to hear from you. HOW WE WORK - High-velocity: Rapid experimentation, lean autonomous teams, and minimal bureaucracy. - Impact not job titles: We don’t have job titles. Instead, it’s about the impact you have. No task is above or beneath you. - AI first: We use AI to move faster with higher-quality results. We do this across the whole company—from engineering to growth to operations. - Excellence everywhere: Everything we do should match the quality of our AI models. - Global team: We prioritize your talent, not your location. WHAT WE OFFER - Innovative culture: You’ll be part of a generational opportunity to define the trajectory of AI, surrounded by a team pushing the boundaries of what’s possible. - Growth paths: Joining ElevenLabs means joining a dynamic team with countless opportunities to drive impact - beyond your immediate role and responsibilities. - Learning & development: ElevenLabs proactively supports professional development through an annual discretionary stipend. - Social travel: We also provide an annual discretionary stipend to meet up with colleagues each year, however you choose. - Annual company offsite: Each year, we bring the entire team together in a new location - past offsites have included Croatia and Italy. - Co-working: If you’re not located near one of our main hubs, we offer a monthly co-working stipend. ABOUT THE ROLE We’re looking for a Security Engineer to join the ElevenLabs Security team. In this role, you’ll work at the intersection of security, software and infrastructure engineering, building the platforms, controls and tooling that let teams ship and operate cloud infrastructure securely at high velocity. You will: - Design and build security tools and guardrails that integrate directly into our infrastructure and products - Partner with Engineering and Infrastructure teams to review application architectures, develop threat models and build in secure by default patterns throughout the software development lifecycle - Identify, prioritise and remediate security vulnerabilities, working directly with engineers and contributing to fixes where required, across the entire stack. - Ship new security features which directly improve the security posture of our products in production - Design and implement supply chain security controls across build and deployment pipelines, including artefact signing, provenance, dynamic admission controls and SBOM generation REQUIREMENTS - Strong engineering background, with experience building and shipping production systems - Proven track record of building and scaling security programs - Fluency in at least one programming language (Python, Typescript, Golang etc) with the ability to read, write and maintain production quality code - Hands on experience in cloud-native environments (AWS or GCP), Kubernetes, and infrastructure-as-code (Terraform) - Strong understanding of cloud security fundamentals: IAM, networking, PKI, linux internals - Experience securing CI/CD pipelines to prevent supply chain attacks Bonus: - Experience securing AI or Machine Learning systems, including training pipelines - Background in developer experience or platform engineering, especially building developer tooling - Contributions to open source security projects, published research or talks at security conferences - Experience working in regulated environments (SOC 2, ISO27001, PCI, HIPAA or similar) LOCATION This role is remote and can be executed globally. However, to facilitate working with the Security Team, we prefer candidates based in GMT to GMT+3 or UK. If you prefer, you can work from our offices in London or Warsaw We are an equal opportunity employer and do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, veteran status, disability or other legally protected statuses.

Location: United States Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. We are seeking a skilled & hands-on Senior Security Architect for Kraken Security Labs. Kraken Security Labs provides boutique-style, deeply technical internal security consulting on current and future products. We don't merely provide high-level guidance but indeed get deeply embedded in the different engineering teams and do not mind hands-on work. Our projects span from classical infrastructure security projects, over cryptography, web3, and complex Rust projects, to securing our next generation of AI products. You will work in a small, highly technical team and collaborate with teams all across the company & world.   THE OPPORTUNITY - Design, review & verify robust security architecture in a heterogeneous environment - Conduct thorough security assessments and audits of existing architectures, recommending practical improvements - Stay updated with latest (blockchain) security trends, threats and mitigation techniques - Provide expertise to our blockchain teams, ensuring secure operational practices   WHAT YOU BRING - Proven experience as an IT security expert, with a strong background in application security - Experience in security testing diverse application - Experience with infrastructure security - Basic familiarity with security frameworks (OWASP, NIST, etc) - Excellent problem-solving skills and the ability to work in a dynamic, fast-paced environment - Strong communication and collaboration skills to effectively remotely work with stakeholders across the organization Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice