Вакансии

Location: United Kingdom; Brazil; United Arab Emirates; Ireland; Peru; Sweden; Colombia; Argentina; Romania; Cyprus; Switzerland; Portugal; Lithuania; South Africa; Czech Republic; Canada; Hungary; Mexico; Chile; Poland; Spain; Bulgaria Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. We are seeking a skilled & hands-on Senior Security Architect for Kraken Security Labs. Kraken Security Labs provides boutique-style, deeply technical internal security consulting on current and future products. We don't merely provide high-level guidance but indeed get deeply embedded in the different engineering teams and do not mind hands-on work. Our projects span from classical infrastructure security projects, over cryptography, web3, and complex Rust projects, to securing our next generation of AI products. You will work in a small, highly technical team and collaborate with teams all across the company & world.   THE OPPORTUNITY - Design, review & verify robust security architecture in a heterogeneous environment - Conduct thorough security assessments and audits of existing architectures, recommending practical improvements - Stay updated with latest (blockchain) security trends, threats and mitigation techniques - Provide expertise to our blockchain teams, ensuring secure operational practices   WHAT YOU BRING - Proven experience as an IT security expert, with a strong background in application security - Experience in security testing diverse application - Experience with infrastructure security - Basic familiarity with security frameworks (OWASP, NIST, etc) - Excellent problem-solving skills and the ability to work in a dynamic, fast-paced environment - Strong communication and collaboration skills to effectively remotely work with stakeholders across the organization Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Location: New York, NY (HQ); San Francisco, CA; Remote (US) Workplace: Remote ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. ABOUT THE ROLE Ramp is, at its core, a fintech company. Our financial infrastructure enables us to issue cards, move money globally, and manage treasury flows for our customers. Stablecoins are emerging as a critical lever to make these flows faster, cheaper, and more accessible. We are looking for a Software Engineer to join our engineering team with a dedicated focus on stablecoin-based payment and treasury systems. In this role, you will act as both a technical owner and multiplier: working on core stablecoin services, ensuring secure and reliable integrations with external partners, and guiding Ramp’s evolution toward next-generation fintech solutions. Our ideal candidate combines deep curiosity about eventually consistent distributed systems with strong financial infrastructure experience, thrives in highly regulated and mission-critical environments, and has a passion for diving into new problem spaces. WHAT YOU'LL DO - Help build & scale Ramp’s stablecoin-based payment and treasury infrastructure - Partner with external providers and internal stakeholders to deliver end-to-end product flows - Solve Ramp’s toughest fintech challenges with new technologies - Collaborate with engineers across Ramp to integrate stablecoin capabilities into core products WHAT YOU NEED - Minimum 5+ years of experience shipping high-quality architectures for critical systems preferred - Proven experience with stablecoin technologies, blockchain-based payment rails, and/or wallet infrastructure - Strong production experience with cloud environments (AWS, GCP, or Azure) and Infrastructure-as-Code (Terraform or equivalent) - Deep proficiency in at least one object-oriented or functional programming language (Python, Go, Java, or similar) - Experience working on security-sensitive systems, with interest in key management, wallet security, or secure transaction flows. - Experience building or operating payments, money movement, treasury, stablecoin, or crypto infrastructure in production environments NICE TO HAVE - Intuition for on-chain UX and settlement mechanics, including wallet-based transaction signing, confirmation/finality, and chain-level tradeoffs like fees and latency. - Direct experience building on-chain wallets or with integrating a crypto onramp / offramp APIs for custody and remittance flows - Experience integrating with external financial service providers and APIs at scale - Familiarity with cross-border settlement, FX, or treasury management systems - Background in highly regulated fintech environments (e.g., payments, banking, or government-compliant infrastructure) BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Location: Canada; United States Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ The DHI Content team builds and maintains Docker Hardened Images: a catalogue of security-hardened system packages, container images and Helm charts designed to be minimal, up to date and safe to use in security-conscious and regulated environments. This is a supply-chain and open-source maintainer role rather than a conventional backend engineering role. You will work across upstream OSS projects, package and image definitions, Helm charts, Kubernetes, integration tests, vulnerability remediation and the controls that prove content is ready to publish. The work is broad by design: customers should be able to select hardened packages and images and, where relevant, deploy them through hardened charts without the pieces drifting apart. We are moving DHI content production towards a machine-first factory. Routine work should begin with a machine-produced change and pass through automated build, test, policy and review controls. Engineers add the most value by handling difficult ecosystems, making security judgements, improving standards and turning repeated human corrections into better tooling. You will use AI-assisted engineering extensively, but remain accountable for the evidence and quality behind every result. As a Senior Supply Chain Security Engineer, you will own substantial content and improvement work from upstream discovery through release and ongoing maintenance. You will be expected to close the loop on customer and security outcomes, not only submit individual definition changes. SUCCESS IN THIS ROLE LOOKS LIKE You will succeed by becoming a trusted end-to-end owner for hardened content. Within your first year, you should have delivered complex new or updated DHI content across packages, images and Helm charts, improved the factory or its quality gates, reduced recurring manual work and raised the capability of the engineers around you. RESPONSIBILITIES - Author and maintain definitions for hardened system packages and container images, including build steps, upstream tracking, multi-architecture support and reproducibility controls. - Adapt and maintain upstream Helm charts so they work correctly with DHI images under non-root, restricted and production-shaped Kubernetes security constraints. - Track upstream releases, semver patterns, monorepos, dependency chains and breaking changes, then make pragmatic decisions about when to update, patch, pin or deviate. - Triage and remediate vulnerabilities across OS packages, application dependencies, images and charts, including VEX and no-upstream-fix cases that require explicit security judgement. - Write and improve Go-based integration tests, validators and policy checks that prove packages, images and charts behave correctly in real environments. - Review human-authored and machine-authored pull requests against DHI standards, distinguish blocking issues from advice and give contributors a clear path forward. - Improve the DHI Factory by converting repeated work, review corrections and escaped defects into automation, tests, validators and reusable authoring patterns. - Help classify work into deterministic, specialist and judgement paths so people spend time where their expertise changes the outcome. - Partner with Product, Security, Support and customer-facing teams to turn demand and incidents into prioritised content and durable improvements. - Engage constructively with upstream maintainers when hardened deployment requirements expose issues or useful improvements. - Participate in the team's paid on-call rotation and drive learning from customer escalations, failed builds and content defects. - Communicate decisions, risks and progress clearly in a remote, async-first environment. QUALIFICATIONS REQUIRED - Strong experience with containers, Linux and Kubernetes in production or production-shaped environments. - Practical experience reading, adapting or maintaining Helm charts and diagnosing how chart templates, values and workload security settings affect deployment behaviour. - Experience maintaining software you did not originate, such as Linux packages, container images, open-source integrations, charts or a comparable downstream distribution. - Strong YAML and configuration-review skills, including care for conventions, consistency and downstream impact across a large catalogue. - Working knowledge of container and Kubernetes security, including non-root execution, UID and GID, capabilities, filesystem restrictions, image layers and multi-architecture builds. - Practical programming ability in Go or a comparable language, sufficient to write and review integration tests, validators and content automation. - Experience tracking upstream releases and reasoning about semver, breaking changes, dependency graphs and reproducible builds. - A maintainer mindset: you catch drift, improve patterns for the next contributor and consider the effect of a change across many downstream consumers. - Familiarity with GitHub-heavy open-source workflows, including pull requests, review, release tracking and upstream contribution. - Comfort using AI-assisted engineering critically while retaining ownership of security assertions, test evidence and release quality. - A strong operational mindset and clear written and spoken communication suited to a remote, async-first company. HELPFUL, BUT NOT REQUIRED - Experience as a maintainer for Alpine, Debian, Fedora, Wolfi, Homebrew or another package ecosystem. - Helm chart authorship or meaningful contribution to an upstream chart. - Experience with SBOMs, VEX, SLSA, Sigstore, cosign, provenance or artefact signing. - Experience with apk, deb, rpm, Go modules, Maven or Gradle, npm, pip, Cargo or other dependency ecosystems. - Experience building automation for package, image or chart creation, validation and release. - Experience with FIPS, FedRAMP, PCI or other regulated and security-conscious environments. WHAT TO EXPECT FIRST 30 DAYS - Build context on the DHI catalogue, its package, image and chart definitions, the DHI Factory and the team's definition of done. - Pair across both image and Helm chart work and ship a useful production change. - Learn the build, test, signing, publishing and vulnerability-remediation workflows. - Take part in reviews and an incident, escalation or failed-build learning session. FIRST 90 DAYS - Own a complex image and chart addition or update from upstream analysis through release. - Resolve a meaningful CVE, dependency or compatibility problem with clear evidence and customer impact in mind. - Improve at least one factory control, integration test, validator or reusable content pattern. - Review across artefact types and help another engineer take on a broader piece of work. ONE YEAR OUTLOOK (FIRST YEAR) - Be a trusted senior owner across hardened packages, images and Helm charts. - Deliver material catalogue growth or quality improvements without increasing human effort linearly with demand. - Reduce recurring manual work by moving a class of changes into a proven automated path. - Improve DHI's security posture, content availability and release reliability for customers. - Raise review quality and grow the team's ability to work across artefact and dependency ecosystems. Docker considers visa sponsorship on a case-by-case basis based on business needs. Compensation & Equity Canada: CA$210,627 – CA$341,690 + equity United States: $154,600 – $250,800 + equity ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Location: Colombia; Mexico; Costa Rica; Argentina; Chile; Brazil About Huzzle At Huzzle, we connect exceptional talent with top opportunities at leading companies across the UK, US, Canada, Europe, and Australia. Our clients include fast-growing startups and established businesses in SaaS, MarTech, FinTech, and EdTech. Unlike traditional outsourcing, you’ll be placed directly with a client as a core member of their team—giving you real ownership, career progression, and long-term stability. Role Type: Full-time Engagement: Independent Contractor About the Company Our client is a leading SaaS-enabled Information Security consulting firm helping global enterprises reduce cyber risk and maintain compliance across complex environments. They partner with Fortune 500 organisations throughout North America, delivering specialised cybersecurity, governance, risk, and compliance solutions to highly technical stakeholders including CISOs, VPs of Information Security, and enterprise security leaders. This is a high-trust enterprise sales environment requiring strong cybersecurity knowledge, consultative communication skills, and confidence engaging executive-level buyers. Job Summary We are seeking an experienced and highly driven Senior Sales Development Representative (SDR) to support enterprise pipeline growth across North America. This role is ideal for someone with a strong cybersecurity or information security background who understands how to engage senior security decision-makers and navigate enterprise sales conversations. You will be responsible for both outbound prospecting and inbound lead qualification, working closely with sales leadership to generate qualified opportunities within Fortune 500 and mid-market accounts. Candidates must be fully bilingual in English and Spanish and have prior experience selling Information Security or IT Consulting services into US-based organisations. Key Responsibilities Prospect and engage enterprise accounts across North America through outbound cold calling, email sequencing, and LinkedIn outreach Qualify inbound leads and schedule discovery meetings for senior sales leadership Build relationships with CISOs, VPs of Information Security, IT Directors, and other cybersecurity stakeholders Conduct research on target accounts, security initiatives, compliance requirements, and organisational pain points Maintain accurate CRM records and activity tracking within HubSpot or Salesforce Use sales engagement tools, power dialers, and LinkedIn Sales Navigator to execute high-volume outreach campaigns Collaborate with marketing and leadership teams on webinars, events, and lead generation initiatives Support pipeline management and contribute to overall revenue growth goals Navigate enterprise sales cycles and compliance-driven conversations involving frameworks such as SOC 2, ISO 27001, and NIST Requirements 3+ years of SDR/BDR experience targeting US-based accounts with a proven track record 2+ years selling Cybersecurity, Information Security, or IT Consulting services Strong cybersecurity and compliance knowledge (SOC 2, ISO 27001, NIST, etc.) Experience selling to CISOs, VPs of Information Security, and enterprise security leaders Fully bilingual in professional English and Spanish (spoken and written) Proficiency with HubSpot or Salesforce, LinkedIn Sales Navigator, sequencing tools, and power dialers Experience handling both outbound prospecting and inbound lead qualification Strong consultative communication, objection handling, and enterprise sales skills Event coordination or marketing support experience is a plus Benefits 🌎 Fully remote role with flexible working hours 🚀 Work with high-growth international companies 📈 Clear career progression to Account Executive and beyond 🎯 Performance-based bonuses and incentives 🤝 Direct hire with global clients (not outsourced) 🧠 Ongoing training, mentorship, and sales development support

Location: San Francisco Bay Area, USA Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. ROLE OVERVIEW Higgsfield AI is looking for a hands-on Member of Technical Staff, Infrastructure Security to build, secure, and operate the systems that protect our corporate infrastructure, employee devices, identities, and applications. As we scale globally, you'll own the technical implementation of security controls across identity and access management, endpoint security, SaaS applications, and corporate networks. Working closely with IT, Security, and Engineering, you'll identify vulnerabilities, implement practical solutions, and automate security operations. This is a highly technical, hands-on role where you'll personally configure, troubleshoot, and maintain critical security systems rather than primarily managing vendors or directing other teams. We're looking for a well-rounded security engineer with strong technical judgment who can prioritize risks, move quickly, and build scalable security solutions without creating unnecessary friction. WHAT YOU'LL DO IDENTITY & ACCESS SECURITY - Design, implement, and maintain identity and access controls across Microsoft Entra ID and corporate applications. - Configure and manage SSO/SAML, SCIM provisioning, MFA, Conditional Access, and role-based access controls (RBAC). - Secure and automate employee joiner, mover, and leaver (JML) workflows. - Implement least-privilege access and strengthen authentication and authorization practices. ENDPOINT & CORPORATE APPLICATION SECURITY - Own endpoint security controls across corporate devices, including Microsoft Intune/MDM, device compliance, and endpoint detection and response (EDR). - Secure SaaS applications through access management, permissions, provisioning, and configuration reviews. - Design and implement Zero Trust access controls based on user identity, device posture, and least-privilege principles. - Identify and remediate security gaps across corporate systems and applications. SECURITY AUTOMATION & INCIDENT RESPONSE - Build scripts, API integrations, and automated workflows to improve security operations and reduce manual processes. - Develop and maintain security monitoring, alerting, and detection capabilities. - Investigate compromised accounts, suspicious activity, and endpoint security incidents, driving containment and remediation. - Troubleshoot security infrastructure issues and continuously improve technical controls. TECHNICAL OWNERSHIP & SECURITY ENGINEERING - Identify and prioritize corporate security risks, balancing security requirements with business and operational needs. - Lead technical security initiatives from design and implementation through ongoing operations. - Partner with IT and Engineering to establish scalable security standards and practical guardrails. - Evaluate and implement security tooling while maintaining direct ownership of configuration and operations. WHAT WE'RE LOOKING FOR - 5+ years of hands-on experience in corporate security engineering, IT security, or enterprise security infrastructure, ideally in a high-growth technology environment. - Proven experience personally implementing, configuring, troubleshooting, and operating corporate security systems. - Strong experience with Microsoft Entra ID, SSO/SAML, SCIM, MFA, Conditional Access, and identity lifecycle management. - Hands-on experience with endpoint management and security tools, including Intune/MDM, device compliance, and EDR. - Experience securing SaaS applications, managing permissions, and implementing Zero Trust access principles. - Proficiency in scripting and automation using Python, JavaScript, PowerShell, or similar languages, including API integrations. - Familiarity with security monitoring, incident investigation, and remediation of compromised accounts or devices. - Strong security judgment and the ability to independently identify, prioritize, and resolve high-impact risks. - Broad technical expertise across corporate security infrastructure rather than specialization in a single area such as IAM, SOC, or endpoint management. COMPENSATION & BENEFITS • We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth. • Base Salary: The anticipated salary range for this role is $200,000 - $300,000, depending on experience, skills, scope, and location. • Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth. • • Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally • The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team. • Significant ownership, direct impact, and opportunities for professional growth as the company scales.   This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams. Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.

Location: Remote Workplace: remote At Offchain, we aren’t just building products: we’re leading a movement.    As pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. We're laying the foundation that will define the next generation of digital commerce, governance, and human interaction. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security and transparency.    At the center of this vision is our people. Our team is made up of thinkers and doers that embrace new challenges and seek solutions that push existing boundaries. If you’re energized by solving unprecedented problems, and believe in the role that decentralized systems will play in creating a more equitable digital future, then we want to hear from you.    Why Offchain?   Offchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today.   Arbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack.   Arbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure.   To top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly. The Role As a Security Engineer at Offchain, you will play a key role in defining and improving our cloud security posture and collaborate across teams to ensure that our operations are secure, compliant, and aligned with regulatory and industry best practices - such as SOC2. What you'll do: Leverage your extensive experience in Cloud Security to design, implement, and improve secure cloud-native architectures and CI/CD pipelines. Apply deep expertise in cloud infrastructure security to proactively identify risks, enforce best practices, and harden systems across the entire technology stack. Automate security controls and educate developers for future-proofing against vulnerabilities. Play an active part in designing and evolving the company’s overall information security governance and compliance program through: policies, standards, procedures, awareness. Work closely with engineering, infrastructure, and product teams to make sure controls fit both business objectives and technical realities. What you'll need: 5+ years of experience in a security engineering role. Mastery of cloud infrastructure, particularly AWS. Prior experience focusing on infrastructure security and Kubernetes. Familiarity with secret management tools like Vault or KMS. Strong understanding of core information security concepts and major regulatory frameworks/standards (e.g. SOC2, ISO 27001, NIST CSF). Experience conducting security design reviews, threat modelling, and security testing. Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations. Perks: Remote-first global workforce + NY office Professional reimbursement program (facilitates industry conference attendance, certifications, and more) Medical, dental & vision coverage (US + some other countries) 401k retirement plan + company match (US only) Wellness stipend Home office set up / ergonomic equipment program Attention Offchain Job Seekers:   This role cannot be performed in California, or Colorado.   Please be advised that there has been a rise in fraudulent recruiter activities, particularly within the Web3 space. If you would like to confirm whether someone is an Offchain employee or the legitimacy of an offer you received, please email jobs@offchainlabs.com   At Offchain, we are committed to building a welcoming and supportive workplace for all employees, regardless of their background or identity. We strive to create an environment where everyone feels valued and has an equal opportunity to succeed and thrive. We encourage candidates from all walks of life to apply and join our team.

Location: Remote Workplace: Remote WHO WE ARE Hi, we're DuckDuckGo, the online protection company and remote-first team of 400+ on a mission to raise the standard of trust online. Founded in 2008 and profitable since 2014, our annual revenue is in the hundreds of millions USD and millions use our browser on Mac https://spreadprivacy.com/introducing-duckduckgo-for-mac/, Windows https://spreadprivacy.com/windows-browser-open-beta/, iOS https://spreadprivacy.com/duckduckgo-privacy-browser-ios14/, and Android https://spreadprivacy.com/introducing-app-tracking-protection/, our search engine https://duckduckgo.com/, and the DuckDuckGo subscription https://duckduckgo.com/pro. We also offer private, useful, and optional AI, including Duck.ai https://duck.ai/, which lets you chat privately with ChatGPT, Claude, and other AIs, all in one place.   Our culture https://duckduckgo.com/how-we-work of trust, inclusivity, and empowered project management underpins everything we do, where each team member takes full ownership of their projects, from scoping and execution to postmortem. If you're seeking end-to-end ownership of your work, you've come to the right place! YOUR TEAM AND ROLE Working on the Security Functional Team, you'll play a pivotal role in ensuring our security capabilities keep pace with our rapid product development, including our expanding AI offerings like Duck.ai and agentic browsing, directly protecting our users across all our products. You'll also maintain incident detection and response capabilities for the company, and work on related projects. Recent projects include: - SERP security mitigations - Agentic browsing security mitigations - Agentic browser hardening - Browser and sync security audits As a Senior Security Engineer, App Sec, you'll execute on SERP security mitigations (XSS prevention, tooling development to help engineers write safer code), manage application security scanning infrastructure setup, build and maintain harnesses that get security fixes out automatically, harden our agentic browsing and DuckAI experiences against emerging threats (like prompt injection), conduct browser and sync security audits (special pages, DuckAI integrations, password manager, etc.), deliver on internal red-team operations (simulated attack scenarios), support security triage, and more! ABOUT YOU - 7+ years of experience in web or application security (performing security assessments, vulnerability research, penetration testing, or secure code review) - Recent experience creating security focused agentic harnesses - Experience influencing large feature designs to have security baked in from the start - Advanced programming or scripting experience with JavaScript. Any additional experience with our stack is a bonus: Swift/Kotlin/C#/JavaScript (native apps) or JavaScript/Perl/Go (search). - An understanding of the web security model (such as the Same Origin Policy); experience with CSP, CORS, SameSite cookies, sec-fetch-*, CORB, CORP, Sanitizer API, and Trusted Types is beneficial - Hands-on experience identifying and exploiting web vulnerabilities (XSS, CSRF, injection attacks, authorization flaws, etc.) - Familiarity with security testing tools and frameworks - Experience partnering and collaborating with Product Engineers, advising on security matters and helping teams ship secure code faster - Experience shaping how an organisation thinks about security - driving best practices, improving processes, and raising the bar across teams COMPENSATION Compensation is transparent across the organization, and all team members within the same professional level and global region receive the same compensation, plus stock options: - United States: $190,500 USD - United Kingdom: £134,600 GBP - Canada: CA$253,500 CAD - All other regions*: €157,350 EUR   *Team members outside the US, UK and Canada are currently paid $178,500 USD. Pay converts to the EUR amount above on January 1, 2027 for Spanish team members, and approximately February 1, 2027 in all other regions.   Eligibility for company-sponsored health benefits is limited to team members based in the United States. This program does not extend to team members located in other countries, such as Canada or the UK.   Our Team Member Support Guide https://duckduckgo.com/assets/hiring/team_support_guide.pdf explains how we prioritize your wellbeing including paid parental leave, office setup, and co-working allowances. HIRING PROCESS Hiring works best when it's a two-way street. Learn how we help you get to know DuckDuckGo, envision your future role here, and find out more about how we hire https://duckduckgo.com/how-we-hire. DIVERSITY, EQUITY AND INCLUSION DuckDuckGo provides equal work opportunities to all team members and applicants, and it prohibits discrimination and harassment of any type on the basis of race, color, ethnicity, caste, religion, age, sex (including pregnancy), national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by our policies or federal, state, or local laws. We want to ensure that our hiring process is accessible. If you need reasonable accommodation for any part of the application process because of a medical condition or disability, please send an email to careers@duckduckgo.com to let us know the nature of your request. PLEASE NOTE THAT: - You’ll be required to attend meetings on camera via video conferencing - Expect to travel at least two times a year: once for our all-hands meetup and again for a team retreat (each around 4-5 days). While extenuating circumstances may impact attendance, everyone is strongly encouraged to attend. - While we offer a flexible work arrangement with no core hours, expect an average full-time commitment of 40 hours per week. - A successful candidate must pass a background check as a condition of joining the team. - By applying for this role, you confirm that all information submitted is accurate and complete. You further acknowledge that providing false or fraudulent information during the application process is cause for denial of an offer, revocation of any existing offer, or other adverse action, up to and including termination after the start of your commencement of work. Disclosure Statement: Use of AI in Hiring Process As part of our commitment to enhancing our recruitment process, we utilize artificial intelligence (AI) technology to assist in reviewing and summarizing job applications and test projects, including those tools integrated into our recruitment vendor platforms. We use AI to flag potentially fraudulent applications, analyze and summarize applicants’ experience, interviews, and project performance, and help streamline our selection process. Key Principles: - Data Privacy: All information provided in your application will be handled in accordance with our Recruiting Privacy Policy https://duckduckgo.com/static-assets/files/pages/careers/DuckDuckGo-Recruiting-Privacy-Policy-effective-September-30-2025.pdf. We ensure that your personal information is protected and used solely for recruitment purposes. - Human Oversight and Accountability: The AI technology is designed to support our hiring team by providing insights and summaries of applications and evaluations of test projects against scoring rubrics. All final evaluations and hiring decisions, however, will be made by our hiring team, who will consider the AI's input alongside other factors. - Transparency: We believe in transparency regarding our hiring practices. If you have any questions about how AI is used in our recruitment process, please feel free to reach out to us. By submitting your application, you acknowledge and consent to the use of AI technology in our review process. If you would like to request an alternative selection process, please contact us as at careers@duckduckgo.com. Thank you for your interest in joining DuckDuckGo! #LI-DNI

Location: Remote - Colombia ; Remote - Costa Rica ; Remote - Mexico About Backblaze Backblaze provides reliable, high-availability cloud storage trusted by consumers, SMBs, enterprises, and developers in over 150 countries. Backblaze B2 Cloud Storage supports data-intensive workloads including backup, media, analytics, and modern AI pipelines. Our teams focus on building secure, durable, scalable systems with a strong emphasis on application security from day one and protecting customers to keep them safe. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. About the Role We are seeking an Application Security Engineer to improve application security across the software used to enable Backblaze B2 Cloud Storage and Computer Backup. The primary role is to build security into how the product is used, how data is stored and how customers can use it. This role will require development skills and application security knowledge to build security into the product and new features. Leveraging AI is key. This is a hands-on role that requires application development knowledge. This role is expected to know and use the latest AI to help with both development and security. The primary requirements include; development in common web languages, application security and AI tool usage. Leverage AI tools and software for Building new and maintaining existing software security features Meeting evolving software security needs in existing software Developing new components as needed Perform security assessments and code reviews on internal and external customer-facing applications Work closely with engineers to remediate security vulnerabilities using AI tools Develop security automation and tooling to improve security Support bug bounty program and vulnerability handling Investigate newly reported vulnerabilities Determine ways to remediate them Provide guidance to engineering based on known vulnerabilities found in existing applications Understanding cryptography and secure authentication Knowledge of cloud environments and security they provide Support and develop on large software stack using Apache Tomcat running across a large number of servers JavaServer Pages (JSP) containing older features Node/JavaScript developed features and pages An architecture split among many different servers – supporting browsers and custom client software Strong security knowledge across large software stacks running on multiple servers Ability to reach out and learn about technologies or implementations as necessary The Right Fit: Application Development and Security knowledge AI knowledge and experience using it for development & security Understanding of: AI Frameworks and tooling, core web security, common web security flaws, coding agents Strong understanding of OWASP Top 10 vulnerabilities Experience with security testing tools such as: SAST / DAST scanners Fuzzing tools Vulnerability scanners Familiar with web technologies: HTTP, REST APIs, etc. Experience with Web Applications, Cloud Systems and Linux Environments Determining how new and old security needs can leverage AI workflows and integrations to improve them AI Coding tools such as Gemini, Claude Code, ChatGPT, Cursor or others Experience with programming languages such as: Java, JSP, JavaScript, TypeScript, Go, Python and C/C++ Why Backblaze Build secure software used by companies worldwide Work at the intersection of AI, data, and cloud storage Collaborate with experienced engineering, security, product, and QA teams Competitive compensation and benefits Remote-first culture supporting work-life balance At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here. At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer. To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice . #LATAM

Location: Canada; England; Portugal; Spain; Italy; Germany; United States Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ As a Senior Security Engineer embedded in the Desktop engineering team, you will own the security posture of a complex, cross-platform product that sits at the intersection of identity, OCI runtimes, and Linux kernel internals. You will be the team's primary security voice, reviewing features and code before they ship, partnering with our central security organization, and serving as the first line of triage for reported vulnerabilities. This is a hands-on engineering role for someone who thinks in threat models and communicates clearly with both product engineers and security specialists alike. RESPONSIBILITIES: - Partner with engineering and product teams throughout the development lifecycle to identify security risks early, from design review through code review and release. - Conduct threat modeling and security design reviews for new and evolving product features, with particular focus on authentication, authorization, and container runtime security. - Serve as the team's primary liaison to the organization's security group, attending security syncs, relaying guidance, and translating central policy into practical engineering decisions. - Act as the first point of contact for incoming vulnerability reports and CVEs: validate severity, reproduce issues, coordinate disclosure timelines, and drive remediation with the relevant engineers. - Review Go code with a security mindset, identifying classes of issues such as privilege escalation, insecure defaults, injection risks, and improper credential handling. - Contribute security-focused improvements directly to the codebase where appropriate. - Develop and maintain internal security documentation, guidelines, and runbooks for the team. - Stay current on the Linux security landscape as it pertains to containers: namespaces, cgroups, seccomp, AppArmor, capabilities, and the evolving OCI ecosystem. - This role may require participation in an on-call rotation to provide support outside of standard business hours, including evenings, weekends, and holidays, as needed. QUALIFICATIONS: - 6+ years of experience in security engineering, application security, or a closely related discipline, with a track record at senior or staff level. - Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience. - Strong proficiency in Go, with the ability to review and contribute to production-grade code. - Deep understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries. - Solid grasp of OCI specifications and container runtime security (e.g. runc, containerd, BuildKit). - Hands-on experience with identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts. - Experience performing security design reviews, threat modeling, and participating in secure development workflows. - Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters. - Strong written and verbal communication skills; comfortable bridging the gap between a dedicated security team and a product engineering team. WHAT TO EXPECT FIRST 30 DAYS You will onboard into the team and get hands-on with the Docker Desktop codebase, architecture, and development workflow. You will meet your counterparts in the central security organization and learn how vulnerability reports are currently handled. The goal is to listen, ask questions, and build a clear picture of the product's current security posture, not to change anything yet. FIRST 90 DAYS You will be an active participant in design and code reviews, bringing a security lens to features in flight. You will have taken ownership of the vulnerability intake process, handling your first end-to-end triage cycles with minimal guidance. You will have a working relationship with the engineers on the team and a growing sense of where the most meaningful security investments should be made. ONE YEAR OUTLOOK (FIRST YEAR) You will be the team's trusted authority on product security. You will have driven meaningful improvements to how the team approaches security across the development lifecycle, whether that's better threat modeling practices, improved auth flows, stronger container isolation defaults, or reduced time-to-remediation for reported issues. you will be a known presence in the broader security organization, and your work will be directly visible in the security and resilience of a product used by millions of developers every day. Docker considers visa sponsorship on a case-by-case basis based on business needs. Compensation & Equity Canada: CA$271,150 – CA$434,000 + equity United States: $194,150 – $312,950 + equity EU: €113,860 – €186,780 + equity ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Location: Riyadh, Saudi Arabia As a Senior Email Security Engineer at Müller's Solutions, you will be responsible for designing, implementing, and managing email security solutions to protect the organization's email systems from cyber threats such as phishing, spam, malware, and data leakage. You will lead initiatives to strengthen email security posture, conduct threat analysis, and collaborate with IT teams to ensure secure and reliable email communication. Key Responsibilities: Own enterprise email security gateways in production environments Design, tune, and operate: Anti‑phishing, anti‑spoofing, and malware controls Secure mail routing, TLS enforcement, and quarantine workflows Lead incident response for email‑borne threats (BEC, malware, zero‑day phishing) Integrate email security with M365 Defender / SIEM / SOAR / DLP Produce audit‑ready evidence aligned to SAMA / NCA frameworks Mentor L1/L2 analysts and document operational runbooks Design, deploy, and maintain email security solutions including anti-phishing, anti-spam, email encryption, and data loss prevention technologies. Monitor and analyze email security incidents, respond to threats, and conduct investigations to mitigate risk. Implement and manage email security protocols such as SPF, DKIM, DMARC to enhance email authentication and trustworthiness. Collaborate with other IT and security teams to integrate email security with overall cybersecurity strategy. Develop and enforce email security policies, procedures, and best practices. Conduct regular security assessments and vulnerability testing on email systems. Stay current on emerging email threats and advanced attack techniques to proactively recommend improvements. Provide training and awareness sessions regarding email security to employees and stakeholders. Requirements Requirements: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. FireEye EX / Trellix Email SecurityCisco Secure Email Gateway (ESA / IronPort)Trend Micro ScanMailProofpoint or Mimecast Microsoft Defender for Office 365 & EOP Exchange Online mail flow & hybrid email routing DMARC, DKIM, SPF enforcement & troubleshooting Email threat hunting & forensic analysis5+ years of experience in email security or related cybersecurity roles. Strong knowledge of email security technologies such as Microsoft Defender for Office 365, Proofpoint, Mimecast, or similar platforms. Proficiency in implementing and managing SPF, DKIM, and DMARC protocols. Experience with email encryption standards and data loss prevention (DLP) solutions. Demonstrated ability to analyze and respond to email-based threats such as phishing and malware. Familiarity with incident response procedures and security information and event management (SIEM) tools. Excellent problem-solving skills with strong attention to detail. Strong communication skills to educate and collaborate with technical and non-technical teams. Preferred Qualifications: Relevant certifications such as Certified Email Security Specialist (CESS), CISSP, or CISM. Experience with scripting and automation for email security processes. Knowledge of compliance standards related to email security and data privacy (e.g., GDPR, HIPAA). Experience in a managed security service provider (MSSP) environment is a plus. Strong advantage Experience in regulated Saudi environments Evidence‑driven operations (audits, compliance, KPIs) Incident leadership during phishing or BEC events Benefits Why Join Us: Opportunity to work with a talented and passionate team. Competitive salary and benefits package. Exciting projects and innovative work environment.

Location: Baku Workplace: onsite ABOUT YOU We are looking for a senior application security specialist to join a growing security team at Xsolla. This is a hands-on role where you will own security initiatives end-to-end - identifying, assessing, and driving remediation of security vulnerabilities across our products and infrastructure. You will lead day-to-day AppSec work - deep code reviews, vulnerability triage, threat modeling, and security testing - and set the standards for how this work is done. You are rigorous, pragmatic, and able to balance security risk against business velocity in a payment platform operating at scale. You will also mentor junior specialists and help raise the security bar across engineering teams. ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Own Vulnerability Management - Lead triage of bug bounty reports and scanner findings. Set severity standards, drive escalation policy, and ensure remediation SLAs are met across teams. Lead Security Assessments - Plan and conduct in-depth security assessments and penetration tests of web applications, APIs, and services. Define assessment scope and methodology. Drive Threat Modeling - Facilitate threat modeling sessions with engineering teams. Identify trust boundaries, data flows, and attack surfaces early in the design phase, and embed the practice into the SDLC . Own AppSec Tooling Strategy - Select, operate, and tune SAST , DAST , SCA , and secrets-scanning tooling. Design noise-reduction and auto-triage workflows; integrate security gates into CI/CD. Lead Secure Code Reviews - Perform security-focused code reviews across PHP, Python, and Go codebases. Define secure coding guidelines and review checklists for engineering teams. Mentor and Educate - Coach junior security specialists, run internal security training, and champion security awareness among developers. Write Clear Security Documentation - Document findings, reproduction steps, and remediation guidance in a way engineering teams can act on. Set the documentation standard for the team. What You Bring 4+ years in application security or a closely related security engineering role, with demonstrable ownership of AppSec programs or major initiatives. Deep Web Security Expertise - Expert-level understanding of vulnerability classes ( OWASP Top 10 and well beyond: SSRF , deserialization, request smuggling, OAuth/ OIDC flaws, business logic abuse). You understand root causes, exploitation chains, and realistic impact in production systems. Offensive Testing Proficiency - Extensive hands-on experience with Burp Suite and manual testing methodology. You can find vulnerabilities that scanners miss and chain low-severity issues into meaningful impact. Code Fluency - Comfortable reading and auditing code in at least one of: PHP, Python, Go, JavaScript. Able to trace data flows across services and spot vulnerable patterns without runtime access. Secure SDLC Experience - Practical experience embedding security into development workflows: security requirements, design review, CI/CD security gates, and developer enablement. Risk Communication - You can calculate and defend real severity, push back on inflated findings, and explain risk to both engineers and leadership in their own language. Analytical Thinking - You reason through problems methodically and can explain not just what a vulnerability is, but why it exists, how it is exploited, and what fixing it actually requires. Ownership and Follow-Through - You drive findings to resolution across team boundaries without being asked. Nice to Have Track record in bug bounty programs (accepted reports on major platforms) or notable CTF results; Strong automation skills - Python or Go for building internal security tooling; Experience securing cloud-native environments - GCP preferred; Kubernetes security a plus; Advanced certifications - OSWE , OSCP , BSCP , or GWAPT; Experience in payments, fintech, or other regulated environments ( PCI DSS familiarity); CVE credits, public security research, or conference talks. Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.

Location: New York City, NY; Remote-Friendly (Travel-Required) | San Francisco, CA | Washington, DC; San Francisco, CA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role: Anthropic sits at the frontier of AI development, which makes us one of the most interesting targets in the world for nation-state and advanced criminal actors. The Threat Intelligence function within our Detection & Response team exists to make sure we see them coming. As a Threat Intelligence Engineer, you'll be a hands-on practitioner responsible for producing the actionable intelligence that drives our detections, hunts, and defensive priorities. You'll track the adversaries most likely to target a frontier AI lab, build the tooling and pipelines that turn raw indicators into operational defenses, and work shoulder-to-shoulder with detection engineers and incident responders to make sure intelligence actually changes outcomes. This is a builder's role on a small, high-leverage team — you'll have broad latitude to shape how threat intelligence is collected, analyzed, and operationalized at Anthropic. Responsibilities: Research, track, and report on threat actors and campaigns targeting AI labs, cloud infrastructure, and the broader technology sector — producing timely, actionable intelligence for Security Engineering stakeholders Build and maintain tooling and automated pipelines to collect, enrich, correlate, and operationalize indicators of compromise into our detection and alerting stack Develop and execute intelligence-driven threat hunts across endpoint, cloud, identity, and SaaS telemetry, and turn findings into durable detections Perform technical analysis of malware, phishing infrastructure, and attacker tooling to extract indicators, TTPs, and attribution signals Partner with Detection Engineering and Incident Response to translate intelligence into detection rules, hunting hypotheses, and incident context in near-real-time Curate and triage inbound intelligence from commercial feeds, open source, government, and trusted peer relationships — prioritizing what matters for Anthropic's threat model Contribute to threat models and risk assessments that inform security architecture and defensive investment across the enterprise Build and maintain external intelligence-sharing relationships with peer companies, ISACs, and government partners You may be a good fit if you: Have 5+ years of hands-on experience in cyber threat intelligence, threat hunting, or intrusion analysis at an organization facing sophisticated adversaries Have deep, demonstrable knowledge of specific nation-state or advanced criminal threat actors — their tooling, infrastructure patterns, tradecraft, and targeting Are a strong engineer: you write production-quality Python (or similar), have built automation and data pipelines, and don't need to hand requirements to someone else to get tooling built Are comfortable performing malware analysis, infrastructure analysis (passive DNS, certificate pivoting, netflow), and log analysis to develop and validate your own findings Have experience authoring detection logic (YARA, Sigma, Snort/Suricata, or SIEM-native queries) and understand what makes a detection durable vs. brittle Can write clearly and concisely — your intelligence products are read and acted on, not filed away Have an existing network in the threat intelligence community and a track record of productive bidirectional sharing Strong candidates may have: Experience defending cloud-native and research-heavy environments (AWS/GCP, Kubernetes, ML infrastructure, developer tooling and supply chain) Prior work operating in a threat intelligence role tracking sophisticated or state-sponsored adversaries, where your analysis directly informed detection, threat hunting, and incident response Experience applying LLMs or other AI tooling to accelerate intelligence collection, enrichment, and analysis Public research, conference talks, or open-source tooling contributions in the CTI space Deadline to apply: None. Applications will be received on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $405,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: New York; Stockholm Workplace: OnSite ABOUT US: AI NEEDS A NEW INFRASTRUCTURE LAYER. WE'RE BUILDING IT AT MODAL. Every era of computing brought new workloads that previous infrastructure couldn't support: mainframes, databases, and the cloud. Each time, the company that rebuilt the layer underneath defined the decade. AI is no different, except it touches everything instead of one slice, and the window to build the layer underneath it is open right now. Our customers include category-defining companies like Ramp https://modal.com/blog/how-ramp-built-a-full-context-background-coding-agent-on-modal, Cognition, DoorDash, and Suno. They rely on Modal for instant GPU access, sub-second container starts, and native storage, so it's simple to serve low-latency inference, fine-tune models, and access production-ready sandboxes at scale. We've passed $1B in annualized run rate, up 15x from a year ago. In October 2026 we raised a $750M Series D led by Accel at a $15.75B valuation. Our team includes creators of popular open-source projects (e.g.,Seaborn https://github.com/mwaskom/seaborn,Luigi https://github.com/spotify/luigi), academic researchers, international olympiad medalists, and experienced engineering and product leaders with decades of experience. THE ROLE: We’re looking for an Infrastructure Security Engineer to design and secure the core systems that power our platform. This role focuses on building security directly into our infrastructure: from container isolation and orchestration to identity and secrets management in a multi-tenant, cloud-native environment. You’ll work closely with engineering teams to define secure primitives and ensure our platform is resilient, scalable, and trustworthy by design. This is a hands-on, deeply technical role focused on real systems, not compliance or policy. WHAT YOU’LL WORK ON: Platform & Runtime Security - Design and improve isolation mechanisms for multi-tenant workloads (containers, sandboxing, execution environments) - Strengthen boundaries between customers, workloads, and internal systems - Identify and mitigate risks in distributed, dynamic compute environments Container & Orchestration Security - Secure and harden containerized workloads and orchestration systems (e.g., Kubernetes or similar) - Improve workload isolation, scheduling boundaries, and runtime protections - Evaluate tradeoffs in multi-tenant execution models Identity & Access Management - Design and improve authentication and authorization systems across services - Implement strong service-to-service identity and least-privilege access patterns - Improve access controls across infrastructure and internal systems Secrets & Key Management - Build and maintain systems for securely managing secrets, tokens, and credentials - Improve rotation, auditing, and access controls - Reduce secret sprawl and integrate secure patterns into developer workflows Cloud & Infrastructure Security - Secure cloud environments across providers (AWS, GCP, etc.) with a focus on consistency and portability - Improve network boundaries, service segmentation, and access controls - Embed security into infrastructure-as-code and deployment systems Engineering Partnership - Work closely with product and infrastructure teams to design secure systems from the ground up - Review architecture and code for security risks and provide actionable guidance - Identify patterns in risks and drive cross-cutting improvements YOU MAY BE A FIT IF: Core Experience - You have experience securing cloud-native infrastructure and distributed systems in production - You have a background in infrastructure, backend, or security engineering - You’ve worked in multi-tenant or high-scale environments Technical Depth - You have a strong understanding of containerization and orchestration systems (e.g., Kubernetes or similar) - You’ve designed or secured isolation mechanisms in multi-tenant systems - You have a solid understanding of authentication, authorization, and service identity models - You have experience with secrets management and secure handling of credentials - You have a strong foundation in networking concepts (segmentation, service communication, access boundaries) Mindset - You have a builder mentality: you design and implement, not just review - You take a pragmatic approach to security in fast-moving environments - You’re comfortable working deeply with engineers and influencing system design NICE-TO-HAVE: - Experience with sandboxing or runtime isolation technologies (e.g., gVisor, Firecracker, seccomp, or similar) - Familiarity with kernel-level or low-level isolation primitives - Experience securing Kubernetes or similar orchestration systems in production - Background in developer infrastructure, compute platforms, or multi-tenant systems

Location: Remote - US Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as Twilio’s next Operator, Global Security Operations Center (GSOC). About the job This position is needed to maintain a broad situational awareness over internal and external physical events that could impact employee safety or pose a threat to business assets or operations across Twilio’s global footprint. GSOC Operators monitor a variety of data sources including internal access control systems, external incident aggregators, travel safety applications, and general open source reporting materials. GSOC Operators serve as the primary contact for employees with physical safety and security questions or concerns. When an incident occurs, the GSOC Operator may dispatch security resources, escalate to crisis management teams, send broad communications to Twilio employees, or execute a mass notification to account for employee safety. Responsibilities: In this role, you’ll: Monitoring and Surveillance Utilize various physical security asset monitoring and surveillance systems to detect potential unauthorized access,  suspicious activity, or other security incidents Monitor open-source threat intelligence and other internal SaaS tools to maintain situational awareness of persistent or emergency global events with potential or direct impact to operations Security Operations Support Support access control and visitor management processes Manage security-related calls for service and provide general guidance to employees, vendors, and guests Maintain awareness of business travelers and personnel accessing Twilio facilities Partner with local site security teams to escalate and dispatch resources for incident and alarm response Review travel requests to elevated risk locations, assist travelers through the approval process, and cross-reference live itineraries with external incidents Incident Management Perform the first point of incident intake across a variety of emergencies, including medical emergencies, natural disasters, fire/evacuation, travel disruptions, and security incidents Assess and triage events and incidents to determine their impact to operations Dispatch and coordinate response with emergency response personnel Communicate effectively on emerging incidents to large audiences to share situational awareness or tactical updates as warranted Maintain real-time incident documentation for reporting and analysis Perform Life-Safety checks for Twilio in areas impacted by potentially life-threatening conditions Participate in post-incident reviews to document and implement corrective action and improvements to future response Operational Excellence Maintain a strong understanding of security and emergency standard operating procedures Utilize critical thinking and problem solving skills to analyse situations and implement solutions Support large projects that will improve Twilio’s GSOC capabilities and initiatives Qualifications Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table! *Required: 3+ years of experience in a GSOC working environment Experience with physical safety and security technology, systems (ACS, IDS, VSS, VMS), travel safety, and mass notification tools Experience with open-source intelligence (OSINT) research tools Strong critical thinking and problem-solving skills Proven ability to follow standard operating procedures and playbooks Ability to prioritize tasks in a fast-paced environment Ability to stay calm, professional, and think clearly in high-stress situations Ability to communicate clearly and concisely; verbal and written Ability to work ‘non-standard’ shift hours, to overlap as needed with colleagues and stakeholders in other global locations, including weekend and holiday hours English Language Proficiency Desired: Customer service mindset Comfortable with a high-tech work environment Eager to learn new tools and processes Ability to work independently and as part of a team Proficiency in Google Suite Additional Language Proficiency Shift Details: Variable (8–10-hour shifts) Must be flexible to work holidays, weekends, and occasional overtime. Location This role will be remote, but is not eligible to be hired in CA, CT, NJ, NY, PA, WA. Travel We prioritize connection and opportunities to build relationships with our customers and each other. For this role, approximately 10% travel is anticipated to help you participate in project or team in-person meetings to help you connect in a meaningful way. What We Offer Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location. Compensation *Please note the salary range information provided applies only to candidates residing in California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State due to local requirements. Compensation for candidates in other locations will be discussed during the hiring process. Please note that hiring for this role is not restricted to the locations listed above. The estimated pay ranges for this role are as follows: Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $26.27 - $32.84 Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): $27.77 - $34.71 Based in the San Francisco Bay area, California: $30.85 - $38.56 This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave. The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location. Applications for this role are intended to be accepted until December 21st, 2026, but may change based on business needs. Twilio thinks big. Do you? We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call Twilio Magic . Additionally, we empower employees to build positive change in their communities by supporting their volunteering and donation efforts. So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for, please consider other open positions. . Stay alert to recruitment fraud We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @ twilio.com email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps. . Twilio is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.

Location: United Kingdom, Remote Workplace: remote Olo is a leading SaaS platform accelerating digital transformation in the restaurant industry, by helping customers deliver more personalised and profitable guest experiences. As a result, our digital ordering, payment, and guest engagement solutions enable brands to do more with less and make every guest feel like a regular. While our roots are in NYC, we’re intentionally investing in Belfast and Northern Ireland as a key hub, with an established leadership presence, a local team, and community for the long term. This role is fully remote, offering you flexibility to work from anywhere within the UK. Your new role As Senior Security Engineer, you will help Olo reduce identified risks, respond to adversarial attacks while maintaining the up-time of our systems, and implement the right strategic risk mitigation measures to safeguard the data of our clients and their customers while supporting innovation. You will also provide white glove service and support to internal and external stakeholders by addressing security questions and support issues as needed, and by mentoring other engineers in how to best provide support.  Additionally, you will help in the identification and prioritisation of future project initiatives based on risk, and execute on cross-functional projects with a high degree of ownership and excellence, all while actively mentoring other team members and elevating the collective team’s capabilities and skill sets through peering and informal training. How you’ll make an impact Lead improvements in detection and response capabilities, continuously optimising monitoring, alerting, and incident response processes. Mentor junior and mid-level engineers, setting a high standard in security practices and offering guidance for professional development. Participate actively in an on-call rotation, responding to escalated security incidents and coordinating effective resolutions. Demonstrate excellence in white-glove service delivery, ensuring security incidents are managed thoroughly and with professionalism. Define and collaborate on implementing leading security practices, ensuring strategies align with organisational security goals and industry standards. Take ownership of security project execution, prioritising tasks and aligning initiatives with team and company objectives. Use and optimise advanced security tools, including SIEMs and vulnerability scanners, to enhance detection, logging, and analysis capabilities. Conduct regular and detailed vulnerability assessments, identifying gaps in security controls and implementing mitigation strategies. Support compliance efforts, ensuring documentation, audits, and regulatory standards are met to maintain certifications and adherence to best practices. Collaborate with cross-functional teams, including development and IT, to integrate security best practices within architectural frameworks. Lead security awareness initiatives, educating technical teams on advanced security topics and secure coding practices. Stay informed on emerging security threats and technologies, continuously evaluating and integrating relevant tools or methodologies. Provide guidance for risk management processes, helping to establish and maintain effective risk identification and mitigation protocols. Develop and document security processes and procedures, ensuring consistency and readiness for both routine and high-stress security incidents. Support leadership with reporting by providing insights and data on incidents, vulnerabilities, project progress, and metrics to inform security decisions. Lead automation and process optimisation efforts by developing scripts and tools to automate repetitive security tasks as well as to enhance detection and response capabilities through the use of automation and integration of security tools. What will set you up for success Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent security experience). 5+ years of experience in security engineering and operations, including extensive experience in blue team operations, security architecture, DevOps, and general operations. Deep knowledge of information technology, evolving threats, attack patterns, incident response, and cybersecurity standards. Proven ability to develop and lead incident response, including remediation, mitigation, and regular status updates and reporting. Skilled in security event evaluation, discerning legitimate security incidents from false positives, incident investigation, countermeasures, and impact monitoring. Strong understanding of operating system, networking, and application hardening for Windows, macOS, and Linux, including virtualisation security. Experience deploying, maintaining, and administering security technologies like IDS, DLP, FIM, firewalls, SIEM, MFA, vulnerability assessment tools, web proxies, and WAFs. Experience with cloud providers and Infrastructure as Code (IaC) tools, such as Terraform, Ansible, or CloudFormation. Proficiency in AWS security best practices. Skills in automation, development, or scripting for enhanced security operations. Advanced knowledge of Application Security, modern web protocols, and Web Application Firewalls. Proficiency in email security protocols like SPF, DKIM, and DMARC. About Olo   Olo is a leading restaurant technology provider with ordering, payment, and guest engagement solutions that help brands increase orders, streamline operations, and improve the guest experience. Each day, Olo processes millions of orders on its open SaaS platform, gathering the right data from each touchpoint into a single source—so restaurants can better understand and better serve every guest on every channel, every time. Over 800 restaurant brands trust Olo and its network of more than 400 integration partners to innovate on behalf of the restaurant community, accelerating technology’s positive impact and creating a world where every restaurant guest feels like a regular. Learn more at olo.com   Applicant Privacy Notice (United Kingdom)

Location: New York, NY (HQ); Remote (Canada); Remote (US); Miami, FL Workplace: Hybrid ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. ABOUT THE ROLE The Security Engineering team helps make Ramp the most secure place for our customers to collect, manage, and put to work their business’ financial information  Our work centers in three areas: - Ramp builds products with an eye for security - Ramp detects and responds to threats before they cause harm - Security powers Ramp’s growth Check out our Engineering Blog https://engineering.ramp.com/ for more on our tech stack, mission and values! What You’ll Do - Drive our cloud security roadmap: review our cloud deployments to identify opportunities for improvement - Design and build security-focused infrastructure primitives and integrate them into our existing products and development processes - Lead remediation of prioritized issues across our technology stack - Partner with infrastructure, data, and devops teams to design and deploy solutions that are inherently secure WHAT YOU NEED - Minimum 5 years of experience building software - Minimum 3 years of experience building in AWS (with Terraform) - A strong sense of ownership: you need to drive projects from inception to scaling it in production - Desire to work in a fast-paced environment, continuously grow, and master your craft NICE-TO-HAVES - Experience with Python (Flask) and Terraform - Experience with Azure, GCP, and other cloud providers - Experience improving the developer experience and security properties of a multi-service deployment BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Location: The Netherlands; Poland; Portugal; United Kingdom; Spain; Italy; Israel The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for experienced, hands-on security practitioners, who will drive the adoption of modern security processes and tooling, with focus on automation and backed up by data-driven decisions. What you will do: - Secure cloud infrastructure supporting the ClickHouse products and services (AWS, GCP and Azure) - Collaborate with product and engineering teams to facilitate safe and secure use of public cloud infrastructure and resources - Develop and implement security systems (e.g. CSPM, infrastructure as code, secrets management) to secure and harden ClickHouse cloud infrastructure - Identify and respond to identified security issues, vulnerabilities, and incidents - Identify security gaps and vulnerabilities in ClickHouse assets - Develop processes, tooling and automation to scale security processes and mitigate risks to the business What you bring along: - Strong knowledge of and experience with multiple cloud service providers (AWS, GCP, Azure) - Experience securing large-scale customer-facing cloud infrastructures based on Kubernetes - Expertise in common cloud-based DevOps practices (e.g. CI/CD, infrastructure as code, secrets management) - Development and automation experience Bonus Points: - BS, MS, or PhD in Computer Science or related field - Previous contributions to open source projects - Security or cloud related certifications (AWS, GCP, Azure) #LI-JL1 PERKS - Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries. - Healthcare - Employer contributions towards your healthcare. - Equity in the company - Every new team member who joins our company receives stock options. - Time off - Flexible time off in the US, generous entitlement in other countries. - A USD$500 Home office setup if you’re a remote employee. - Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. CULTURE - WE ALL SHAPE IT As part of a rapidly scaling start-up, you will be instrumental in shaping our culture. Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse. EQUAL OPPORTUNITY & PRIVACY ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.

Location: Israel - Office - Tel Aviv Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Role: Design and develop complex, scalable, and high-performance features and systems within your team, ensuring clean, efficient, and maintainable code. Collaborate closely with product managers, architects, and fellow engineers to help shape technical approaches and project plans for your team’s roadmap. Provide technical input and recommendations to ensure solutions align with business objectives, compliance standards, and long-term maintainability, escalating cross-team architectural questions to staff/principal engineers as needed. Diagnose and resolve complex production issues within your team’s systems, driving root cause analysis and fixes, and escalating the most critical, cross-system issues appropriately. Mentor engineers through code review, pairing, and day-to-day guidance, helping raise the quality bar within the team. Review team members’ code with a focus on improving design and implementation quality. Your Opportunity: Develop and maintain key components and features, integrating new functionality and helping maintain the reliability and scalability of core infrastructure. Contribute to the evolution of software applications, database integration, interfaces, and system enhancements to meet business needs. Support automation, testing, and continuous deployment processes to ensure smooth and reliable delivery of new features. Own well-scoped projects from design through delivery, contributing ideas to design decisions and technical direction within your team. What You'll Need: BSc in Computer Science or an equivalent degree from a recognized institution, or an exceptional track record in server-side development with advanced technical expertise. 5+ years of professional experience in software engineering, with a proven ability to solve complex problems and deliver reliably within a team. Deep expertise in one or more programming languages such as C/C++, C#, Java, Go, Python, with an ability to adapt to new technologies as needed. Solid experience building scalable systems, with a strong understanding of microservices architecture, API design, and cloud-native development. Experience designing and deploying services on cloud platforms such as AWS, Azure, or GCP. Strong technical skills, with experience reviewing code, mentoring less experienced engineers day-to-day, and contributing to technical decisions within the team. Proven ability to manage multiple priorities and deliver reliably under tight deadlines. If you’ve reached this point, and you’re still not sure if you should apply…..Just do it! We’re human and we don’t fit a perfect mold. Having diverse backgrounds, experiences and perspectives, that’s a good thing! If you’re coming from outside of the cyber industry - great! If you’re looking to try something new - awesome! All we ask is you bring passion to all that you do, crave creativity and innovation, and embrace the hard work of gaining new skills and accepting big challenges. We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. #LI-EB1 #LI-Office We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice