Вакансии

Location: San Francisco; Remote (United States); London; Belgrade; New York City Workplace: Hybrid Perplexity is seeking a highly skilled, experienced and hands-on Offensive Security Engineer to join our dynamic security team, taking an adversarial approach to hardening Perplexity's infrastructure, applications, and AI systems. You'll plan and execute red team operations, penetration tests, and attack simulations across our cloud infrastructure, web and mobile applications, AI/ML pipeline, and corporate environment—finding real vulnerabilities before adversaries do and working directly with engineering teams to drive remediation. Responsibilities - Plan and execute red team and purple team engagements simulating advanced threat actors across cloud infrastructure (AWS, Kubernetes), endpoints, and application surfaces - Conduct continuous penetration testing of web applications, APIs, mobile clients, browser extensions, cloud infrastructure, and internal services - Assess AI/ML-specific attack surfaces including prompt injection, model exfiltration, agent abuse, tool-use exploitation, and MCP security boundaries - Develop and maintain custom offensive tooling, exploits, and automation to improve the efficiency and coverage of security testing - Perform open-scope adversary simulations that test detection and response capabilities end to end, collaborating closely with the defensive security team - Drive threat modeling sessions with engineering teams to identify and prioritize attack vectors in new features and architectures - Deliver clear, actionable findings to both technical and executive audiences; partner with engineering to validate remediations - Contribute to the security of CI/CD pipelines, supply chain integrity, and secrets management through offensive assessment - Stay current on emerging attack techniques, vulnerability research, and adversary tradecraft; bring external perspective into Perplexity's security strategy Qualifications - 5+ years of hands-on experience in offensive security, red teaming, or penetration testing - Deep technical expertise in at least two of: cloud security (AWS/GCP/Azure), web/API application security, Kubernetes and container security, macOS/Linux endpoint security, network penetration testing, or CI/CD pipeline security - Track record of discovering impactful vulnerabilities or developing novel attack techniques in production environments - Strong programming and scripting skills in Python, Go, or similar languages; comfortable writing custom tooling and exploits - Experience with industry-standard offensive tools (Burp Suite, Cobalt Strike / Sliver / Mythic, Metasploit, BloodHound, nuclei, etc.) and ability to operate beyond them - Excellent written and verbal communication; able to translate complex technical findings into clear risk narratives - Experience assessing AI/ML systems, LLM applications, or agentic workflows for security vulnerabilities - Bonus: Published security research, conference talks (DEF CON, Black Hat, BSides), CVE credits, or meaningful bug bounty contributions

Location: San Francisco; Remote; Toronto; New York; Montreal; Seattle Workplace: Hybrid ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F https://www.baseten.co/blog/announcing-our-series-f/, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE We are seeking an experienced and proactive Security Engineer to help us build, maintain, and continuously improve the security posture of our rapidly growing ML infrastructure platform. As one of the first dedicated security hires at Baseten, you will work cross-functionally with engineering and operations teams to ensure we’re meeting the highest standards of confidentiality, integrity, and availability. You’ll have an opportunity to shape our security strategy and best practices from the ground up, influencing the way our platform handles sensitive data for both internal and external stakeholders. RESPONSIBILITIES - Security architecture and design: Collaborate with engineering teams to design and implement secure systems and infrastructure, including cloud (AWS/GCP) environments and container orchestration platforms. - Vulnerability management: Lead proactive vulnerability assessments, pen tests, and remediation efforts to ensure our products and infrastructure remain secure. - Incident response: Develop and maintain incident response processes, including detection, analysis, containment, eradication, and post-incident reviews. - Identity and access management (IAM): Oversee IAM strategies and tools to ensure the right people have the right level of access to our systems and data. - Security compliance and audits: Work closely with operations to ensure compliance with relevant standards (e.g., SOC 2, ISO 27001) and assist with audits, policy creation, and risk assessments. - Employee security training: Develop and deliver security training programs and documentation to keep our team informed about best practices, social engineering threats, and secure coding standards. - DevSecOps integration: Partner with DevOps teams to embed security into the CI/CD pipeline, automating security checks and fostering a culture of “security as code.” REQUIREMENTS - 3+ years of experience in a Security Engineer or similar security-focused role, preferably in a fast-paced startup environment. - Strong knowledge of cloud security (AWS/GCP), container security, and infrastructure-as-code best practices. - Hands-on experience with security tooling (SIEM, IDS/IPS, vulnerability scanners) and scripting languages to automate security tasks. - Familiarity with compliance frameworks such as SOC 2, ISO 27001, and GDPR, and the ability to translate requirements into actionable security controls. - Incident response expertise, including forensic analysis and root cause investigation. - Excellent communication skills and the ability to collaborate with cross-functional teams to promote a security-first culture. BENEFITS - Competitive compensation, including meaningful equity - (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents - Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!) - Paid parental leave - Fertility and family-building stipend through Carrot - (U.S. only) Company-facilitated 401(k) - Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities. Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you. At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).

Location: Lisbon, Portugal About the Role iCapital is looking for a Assistant Vice President, Cyber Cloud Security Engineer to join the Security Engineering team, within the Information Security organization. This role will establish and manage cloud security programs, build new security architecture, drive automation, and continuously identify and address security gaps across iCapital's technology landscape. The ideal candidate is a deeply technical individual contributor who can research, design, and implement security technologies, and collaborate effectively across teams and functions. Responsibilities Build and manage Cloud Security Programs across AWS, Azure, and GCP infrastructure Design, implement, and validate secure cloud infrastructure architectures, ensuring new capabilities meet established security standards and requirements. Apply Zero Trust architecture principles and best practices across cloud infrastructure design and access models. Drive continuous detection, remediation, and resolution of cloud vulnerabilities and security misconfigurations, leveraging CSPM tooling (e.g., AWS Security Hub, Wiz, or equivalent) and automation to continuously improve and maintain cloud security posture. Build automation capabilities for continuous monitoring and alerting across cloud infrastructure. Partner with engineering teams to drive the adoption of security standards and best practices, embedding security early across the development lifecycle and supporting a shift-left security culture. Collaborate with the SOC to develop and strengthen cloud detection engineering capabilities. Assist the Risk and Governance teams with the development and implementation of cloud-related policies, procedures, and standards. Engage with Platform, DevOps, and Software Engineering teams to deliver security initiatives and provide security guidance to projects across the organization. Qualifications 6–9 years of experience in cloud environments, with AWS as the primary platform, including proven hands-on expertise in cloud security architecture and infrastructure design. Relevant cloud or security certifications are a plus (e.g., AWS Certified Solutions Architect, AWS Certified Security – Specialty, CISSP, or CCSP). Proficiency with AWS-native security services, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty. Experience with cloud identity and access architecture, including federation (e.g., Okta), RBAC, ABAC, and service-to-service authentication models. Hands-on experience with Infrastructure as Code tooling such as AWS CDK, CloudFormation, or Terraform. We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday). Benefits iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO). For additional information on iCapital Network, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc

Location: Remote - European Region Workplace: hybrid Coinspaid Dev is the engineering brand behind the technology, infrastructure, and R&D expertise built within Coinspaid. With more than 120 engineersand over 11 years of industry experience, Coinspaid Dev brings together software engineering, infrastructure, security and R&D teams with experience building distributed systems and blockchain infrastructure operating across more than 20 blockchain networks. Coinspaid Dev emerges as an independent engineering brand with a straightforward mission: to advance blockchain infrastructure engineering and contribute practical expertise back to the industry. The structure is new. The experience behind it is not. We are looking for a Middle SecOps Engineer to join our Security Operations team. The candidate will have hands-on experience in monitoring, detecting, and responding to security threats across multiple environments, including endpoints, networks, and cloud platforms. This role requires strong practical knowledge of SIEM and EDR/XDR systems, data loss prevention technologies, and vulnerability management, combined with the ability to follow and improve incident response playbooks. The engineer will collaborate closely with SOC analysts, DevOps, and IT teams to ensure effective threat detection, containment, and remediation. Responsibilities: Monitor security alerts from different systems, triage and investigate potential threats. Perform end-to-end incident response: detection, analysis, containment, eradication, and recovery. Identify false positives, escalate real threats, and provide actionable remediation guidance. Analyze logs from multiple systems (OS, applications, network, cloud) to support investigations. Collaborate with DevOps, IT, and development teams to remediate vulnerabilities and misconfigurations. Participate in vulnerability management activities: scanning, prioritization, coordination with relevant teams. Follow and contribute to improvement of SOC playbooks and standard operating procedures. Provide documentation and reporting for incidents, investigations, and security events. Stay updated on emerging threats, vulnerabilities, and security technologies. Requirements: Experience working with SIEM platforms: writing and tuning detection rules, log ingestion, and investigation workflows. Experience working in a Security Operations Center (SOC) environment. Strong experience with EDR/XDR solutions: alert triage, investigation, scoping, and remediation of incidents. Experience with Data Loss Prevention (DLP) technologies and their operational use. Practical experience in triaging security alerts, identifying false positives, escalating or resolving real threats. Involvement in end-to-end incident response: detection, analysis, containment, eradication, and recovery. Understanding of incident response processes and ability to follow or improve playbooks. Experience with vulnerability management: scanning, prioritization, and coordination of remediation efforts. Ability to read and analyze logs from various systems. Nice to have: Experience with cloud environments. Knowledge of Kubernetes environment and containerized applications. Familiarity with the fintech domain. Why join CryptoProcessing by Coinspaid You’ll be joining a company that is actively shaping its space – with enough scale to matter and enough room to make an impact. At Coinspaid, people are expected to think, contribute, and take ownership – and are supported in doing so. We focus on flexibility, wellbeing, and long-term growth – without overcomplicating how benefits work. Flexible Benefits Benefit Bar – up to €230/monthA flexible monthly budget you can use for what matters most to you – from sports and mental health to coworking, home office, or medical-related expenses. Work & Flexibility Fully remote work from almost anywhere Optional offices and relocation support Flexible, async-friendly environment Growth & Learning Budget for courses, certifications, and professional development Language learning support Cross-team learning and knowledge sharing Wellbeing & Support Medical insurance or reimbursement depending on location Access to mental health support Financial support for important life events Extras Merch shop with rewards system Team offsites and company events Sounds good? Well then, we can’t wait to see your resume! To learn more please visit: https://coinspaid.com/about-us/ & https://coinspaid.com/careers/

Location: London; New York; Edinburgh; Paris; Toronto; Montreal Workplace: Hybrid WHO ARE WE? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! Role Overview: As a Member of Technical Staff in the Safety for Agents team, you will make a meaningful impact on the development of better, fairer, more trustworthy, and more secure Large Language Models (LLMs). Your primary focus will be on data generation, post-training algorithms, and evaluation methods to ensure Safety in the next generation of models that can access external resources and take actions in the world. You will work closely with other cross-functional machine learning teams and data annotation teams, and will also collaborate with product and policy teams. This role combines expertise in machine learning, ethical and responsible AI, experimental design, and data generation and management. It will require curiosity to tackle totally new scientific problems, engineering skills to implement the pieces we need to test solutions to these, and a desire to dive into messy data and results. You will be on a small team with a lot of autonomy and decision-making power, responsible for making the next generation of LLMs better for society as a whole. Please Note: The existing team work in offices in London, Edinburgh, Paris, Toronto, and New York, but we also embrace being remote-friendly! For this role you need to have ~50% working day overlap with UK/EU timezone (e.g. US East is fine) but there are otherwise no restrictions on where you can be located for this role. Key responsibilities: - Strong statistical skills and experience evaluating scientific experiments related to data collection and model performance. - Extremely strong software engineering skills. - Strong expertise in designing and conducting data collection tasks, including working with human annotators. - Experience analyzing datasets with respect to their quality, biases, and suitability for training ML models. - Hands-on experience training large language models (LLMs) on distributed training infrastructures. - Familiarity with evaluating and improving the generalizability and robustness of ML systems. - Proficiency in programming languages such as Python and ML frameworks (e.g., PyTorch, TensorFlow, JAX). - Excellent communication skills to collaborate effectively with cross-functional teams and present findings. - One or more papers at top-tier venues (such as NeurIPS, ICML, ICLR, AIStats, MLSys, JMLR, AAAI, Nature, COLING, ACL, EMNLP). Working Location: This role can be based remotely or from one of our office locations listed on the job description - there is no minimum in-office qualification requirement. We care most about hiring exceptional people regardless of locations, though please check the location listed on the posting for guidance around the core time zone or working hours alignment expected for the role. FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS: - A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch. - Full health and dental benefits, including a separate budget for mental health. - RRSP matching, 401K, Pension Scheme. - 100% Parental Leave top-up for up to 6 months, for either parent. - Annual enrichment benefits: Arts & culture, fitness/wellness, quality time, and a workspace improvement credit. Education & learning stipend for conferences, courses, and coaching. - 6 weeks of paid vacation (30 working days!) - Budget for traveling to other offices if you are remote, plus an annual company offsite. HOW AND WHERE WE WORK: - Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon. - For those in the office: a daily lunch program, plenty of snacks, and regular community and social events. - For those not near an office: a co-working benefit so you can work alongside others in your city. - Everyone receives a $500 home office stipend to set up your workspace properly. If any of the above doesn’t line up exactly with your experience, we still encourage you to apply. We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs. We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider. Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.

Location: San Francisco, CA • New York, NY • United States Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As a Security Engineer you will identify and drive impactful projects to improve the security of Figma’s product, platform, and IT systems. We are hiring for multiple teams within Security Engineering: AI Security, Platform Security, Product Security, and Anti-Abuse. This is a remote first role. You will partner closely with teams across the company and focus on systemic security improvements and risk reduction. You will also participate in operational security responsibilities like security reviews, consulting, vulnerability triage, and security incident response. Examples of what you may work on across teams: AI Security Perform technical security assessments, code audits, and design reviews for new AI infrastructure, platforms, and products. Design and develop technical solutions to secure AI models, tooling, debugging workflows, and data pipelines. Advocate for secure practices across Figma’s AI infrastructure, platforms, and data systems. Build the next generation of internal AI-powered access insights and security tooling. Help run penetration testing and offensive security exercises against Figma’s AI infrastructure, platforms, and products. Platform Security Perform technical security assessments, code audits, and design reviews for changes to Figma’s cloud and corporate infrastructure. Design and develop solutions to prevent or mitigate cloud and corporate security risks. Advocate for secure practices within Figma’s cloud and corporate infrastructure. Build platforms and tooling to detect and respond to infrastructure and corporate security threats. Product Security Perform technical security assessments, code audits, and design reviews for new product features. Design and develop solutions to prevent or mitigate product security vulnerabilities. Advocate for secure development practices across Figma’s products and services. Help run penetration testing, offensive security exercises, and support our bug bounty program. Help respond to product security incidents. Anti-Abuse Design and build technical systems to prevent spam, fraud, and abuse. Partner closely with product teams to identify and address potential abuse vectors. Develop new signals and improve the use of existing signals to detect abusive behavior. Help respond to spam, fraud, and abuse incidents. This is a full-time role that can be held from one of our US hubs or remotely in the United States. We’d love to hear from you if you have: 5+ years of proven engineering experience working in either a Security Engineering or a Software Engineering role. In the case of the latter, some security experience is preferred. Strong security judgment in threat modeling and risk prioritization and/or strong technical judgment in designing and building maintainable, scalable systems. Proficiency in at least one general-purpose coding language. Strong communication and interpersonal skills, with demonstrated experience collaborating across functions. While not required, it’s an added plus if you also have: Subject matter expertise in Application Security, Cloud Security, Corporate Security, Data Access Governance, and/or IAM (Identity and Access Management). Demonstrated ability to make hard prioritization decisions in security controls. At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. #LI-Remote Pay Transparency Disclosure Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law. Annual Base Salary Range: $153,000 — $376,000 USD At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status , or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com . These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: Holding interviews in an accessible location Enabling closed captioning on video conferencing Ensuring all written communication be compatible with screen readers Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice . Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles: Candidates may submit up to 5 applications during any rolling 30-day period. Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection. Once the applicable days has passed, candidates are welcome to apply again.

Location: London Workplace: OnSite ABOUT US Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/. Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. WHAT YOU’LL DO - Act as a primary point of accountability for customer trust enablement, including participation in customer meetings, security reviews and AI governance. - Contribute to AI Governance including building guardrails to align with AI regulations (EU AI Act, ISO 42001, NIST AI RMF and local EU laws). - Partner closely with Legal and Privacy to interpret regulatory requirements and support complex, security-sensitive contractual discussions, escalating risks and tradeoffs appropriately. - Collaborate with Engineering and Product to ensure expectations are reflected in system design and operational effectiveness. - Translate regulatory and privacy expectations into scalable, region-aware technical controls across model governance, agent security and safety, and data handling. - Own and evolve customer-facing trust materials and narratives related to AI, privacy, and security. - Represent Sierra in customer audits and formal assessments, clearly explaining security posture, governance decisions, and risk management approaches. - Support resilience and response expectations as part of broader governance, with an emphasis on learning and continuous improvement. - Continuously improve trust by identifying opportunities to streamline workflows, increase automation, and improve signal quality, while maintaining a high bar for accuracy and quality. WHO YOU’LL WORK WITH You will act as a strategic partner to Platform, Security, Product, Agent Development, Legal, and GTM, ensuring security and compliance requirements are embedded into architecture decisions, product roadmaps, and go to market execution while supporting product velocity and technical complexity. WHAT YOU’LL BRING - 8+ years of experience in security compliance, privacy, or regulatory roles in SaaS, fintech, or AI companies. - Deep experience with EU regulatory frameworks, including GDPR, DORA, EU AI Act and emerging AI regulations, paired with strong awareness of US and APAC regulatory norms. - Demonstrated ability to operate globally understanding where requirements must diverge and where alignment is possible. - Experience engaging directly with enterprise and regulated customers as a trusted representative of security, privacy, and compliance. - Ability to translate abstract or evolving regulatory requirements into defensible, real-world practices. - Comfort operating in ambiguity, making reasoned judgment calls, and clearly articulating rationale and tradeoffs. - Strong written and verbal communication skills, including close collaboration with Legal and external stakeholders. EVEN BETTER... - Direct experience preparing for or operationalizing DORA, EU AI Act or ISO/IEC 42001. - Experience working in and/or supporting fintech or AI companies globally - Familiarity with AI governance frameworks such as NIST AI RMF or CSA AI controls. - Experience navigating cross-border data transfer, residency, and localization consideration in a multi-cloud environment. - Prior experience in customer-facing, sales-adjacent, or deal-support contexts. - Experience automating global security and compliance workflows. OUR VALUES - Trust: We build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work. - Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it. - Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn’t right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve. - Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time. - Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company for parents. We support and respect each other and celebrate each other’s personal and professional achievements. WHAT WE OFFER We want our benefits to reflect our values and offer the following to full-time employees: - Flexible (unlimited) paid time off - Medical, dental, and vision benefits for you and your family - Life insurance and disability benefits - Retirement plan dependent on country of employment - Parental leave - Fertility and family building benefits through Carrot - Lunch, as well as delicious snacks and coffee to keep you energized  - Discretionary benefit stipend giving people the ability to spend where it matters most - Free alphorn lessons These benefits are further detailed in Sierra's policies, may vary by region, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full-time employees can participate in Sierra's equity plans subject to the terms of the applicable plans and policies. BE YOU, WITH US We're working to bring the transformative power of AI to every organization in the world. To do so, it is important to us that the diversity of our employees represents the diversity of our customers. We believe that our work and culture are better when we encourage, support, and respect different skills and experiences represented within our team. We encourage you to apply even if your experience doesn't precisely match the job description. We strive to evaluate all applicants consistently without regard to race, color, religion, gender, national origin, age, disability, veteran status, pregnancy, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.

О ПРОЕКТЕ StarTribe — часть крупного международного холдинга с 10-летней историей. Мы разрабатываем высоконагруженные IT-продукты для мировых брендов. Сейчас мы усиливаем команду безопасности для тестирования внутренних и публичных приложений собственной разработки. ВАШИ КЛЮЧЕВЫЕ ЗАДАЧИ — Pentesting: Проведение глубоких тестов веб-приложений (White/Grey/Black box). — Remediation: Подготовка конкретных рекомендаций по устранению уязвимостей. — Collaboration: Тесное взаимодействие с разработчиками для внедрения Security Best Practices. — DevSecOps: Участие в разработке внутреннего инструментария и автоматизации проверок. — Mentoring: Помощь коллегам и развитие экспертизы внутри команды. ЧТО МЫ ЖДЕМ ОТ ВАС — Опыт: 4+ года в области AppSec и тестирования безопасности веб-приложений. — Инструментарий: Экспертное владение Burp Suite и другими средствами анализа (Manual & Auto). — Коммуникация: Умение аргументированно доносить риски до бизнеса и находить компромиссы с Dev-командами. — Стек: Понимание специфики безопасности Node.js и PHP (дополнительно .NET / Go). БУДЕТ ПЛЮСОМ — Сертификации уровня OSCP, OSWE или Burp Suite Certified Practitioner. — Активное участие в CTF, наличие рейтинга на HackTheBox. — Наличие подтвержденных Bug Bounty репортов. УСЛОВИЯ И БЕНЕФИТЫ — Оформление: Официальный контракт по ТК Кипра. — Релокация: Частичная компенсация аренды жилья и корпоративная мобильная связь. — Бонусы: Годовой бонус по результатам, 4 дополнительных Day Off в году. — Life Quality: Корпоративное питание, спорт, мероприятия для семей и активности для детей. — Развитие: Скидка 50% на SkyEng, поддержка образовательных инициатив.

Location: Riyadh, Saudi Arabia; Dubai, United Arab Emirates; Casablanca, Morocco; Cairo, Egypt; Delhi, India Müller’s Solutions is looking for a skilled Google Cloud Security Engineer to enhance our cloud security framework and protect our critical systems and data on Google Cloud Platform (GCP). In this role, you will be responsible for identifying security vulnerabilities, implementing robust security measures, and ensuring compliance with industry standards while safeguarding our cloud architecture and applications. Key Responsibilities: Design, implement, and manage security controls and procedures for GCP services and resources. Perform risk assessments and security reviews to identify vulnerabilities and prioritize remediation measures. Monitor and analyze security alerts, events, and incidents across the cloud environment. Develop and enforce security policies, standards, and best practices for cloud operations. Implement Identity and Access Management (IAM) policies to control access to GCP resources effectively. Conduct regular security assessments and collaborate with development teams to ensure secure coding practices. Stay up to date with the latest security threats, vulnerabilities, and trends in cloud security. Provide security training and awareness for engineering teams to promote a security-first culture. Collaborate with incident response teams to investigate and respond to security incidents effectively. Maintain documentation of security policies, architecture, and processes related to GCP. Requirements Requirements: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. 3+ years of experience in cloud security, specifically within Google Cloud Platform. Strong knowledge of cloud security best practices, frameworks, and compliance (e.g., ISO 27001, NIST, GDPR). Experience with GCP security tools and services, including Security Command Center, Cloud Armor, and Cloud Identity. Expertise in Identity and Access Management (IAM), data encryption, and security configurations in GCP. Familiarity with network security principles and solutions, such as firewalls and VPNs. Excellent analytical and problem-solving skills, with the ability to handle complex security scenarios. Strong communication skills to effectively convey technical information to diverse audiences. Preferred Qualifications: Google Cloud certifications (e.g., Google Cloud Professional Cloud Security Engineer) are desirable. Experience in scripting or programming languages, such as Python or Bash, for security automation. Knowledge of DevSecOps practices and tools. Experience with tools like SIEM, vulnerability scanners, and penetration testing frameworks. Benefits 1- Attractive Package. 2- Family Benefits. 3- Visa. 4-Air Tickets.

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Team The Security Engineering team protects Anthropic's AI systems and maintains the trust of our users and society. We define the authentication architecture for our training infrastructure, design the cryptographic foundations that protect model weights and training data, and drive the developer security program that shapes how engineers build and ship software. The team works across several areas that collaborate closely: identity and secrets management, developer security and supply chain, infrastructure security, and secure frameworks. You will own one or two of these areas and contribute to others, with your focus shaped by your strengths and the team's priorities. This is largely greenfield work, and you will help define the architecture. About the role: Scope, design, and build complex security systems end to end, maintaining them through production and driving through ambiguous technical challenges with minimal oversight Identify systematic risks through threat modeling and risk assessment, then build the controls and infrastructure that address them Mentor engineers across the security team and broader engineering organization, contribute to hiring, and grow security engineering culture at Anthropic Enable other teams to build their own security solutions by providing design pattern guidance and expanding security ownership beyond the security team Developer security and supply chain Build and advance our developer security program by embedding security practices into the software development lifecycle and developer workflows Harden CI/CD pipelines against supply chain attacks through isolated build environments, signed attestations, dependency verification, and automated policy enforcement Identity and secrets management Architect systems that protect sensitive assets including model weights, customer data, and training datasets Build and operate credential issuance, rotation, and workload authentication across our multi-cloud environments Infrastructure security Implement and maintain cloud security controls including IAM, network segmentation, VPC architecture, and encryption across our multi-cloud and on-prem environments Contribute to cluster security controls including RBAC policies, namespace isolation, workload identity, and pod security Contribute to continuous cloud security posture management using infrastructure-as-code scanning, misconfiguration detection, and automated remediation Secure frameworks Build critical security foundations including cryptographic frameworks, mTLS infrastructure, secure serialization, and authorization systems, designed to prevent entire classes of vulnerabilities and empower engineering teams to work securely without becoming security experts themselves Partner with product, research, infrastructure, and other security teams to ensure frameworks integrate smoothly with lower-layer security controls You may be a good fit if you have: At least 8 years of software engineering experience with deep security expertise, including leading complex security initiatives independently Bachelor's degree in Computer Science or equivalent industry experience Strong programming skills in Python or at least one systems language such as Go, Rust, or C/C++ Deep understanding of identity systems, cryptographic primitives, and secrets management Working knowledge of Kubernetes security primitives including RBAC, namespaces, network policies, and service accounts Experience leading cross-functional security initiatives and navigating complex organizational dynamics Outstanding communication skills, translating technical concepts effectively across all levels of the organization A track record of bringing clarity and ownership to ambiguous technical problems and driving them to resolution Low ego and high empathy, with a history of growing the engineers around you and supporting diverse, inclusive teams Passion for AI safety and the role security engineering plays in building trustworthy AI systems Strong candidates may also have: Designed or operated identity and secrets management systems for large-scale AI or cloud infrastructure Built security frameworks or libraries adopted across an engineering organization Led a developer security program including supply chain security, secure build infrastructure, and SDLC integrations Built or secured CI infrastructure using Nix, Bazel, or Kubernetes-based deploy systems, with depth in toolchain issues, CI/CD pipelines, and developer workflow optimization Implemented machine identity or workload authentication systems using SPIFFE/SPIRE, mTLS, or equivalent Understanding of Linux systems internals including namespaces, cgroups, and seccomp, and how these underpin container and workload isolation Contributed to the security architecture of multi-cloud environments including network segmentation, data protection, and access governance Experience with network security controls including admission controllers, CNI-level policy, service mesh security, and east-west traffic enforcement Experience building runtime security monitoring using eBPF or kernel security policies Deadline to apply: None, applications will be received on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $405,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco, CA Workplace: OnSite ABOUT US Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/. Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. WHAT YOU'LL DO - Own independent audits and regulatory programs including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, HIPAA, and related frameworks. - Drive scope definition, readiness assessments, auditor engagement, remediation planning, and executive level reporting. - Develop a strong working understanding of Sierra’s Conversational AI Platform, model providers, and cloud architecture. Partner with Platform and Agent Engineering to design and operationalize controls across multi cloud environments, infrastructure, inference and data platforms. - Build a centralized and evolving security controls library mapped to compliance, regulatory and customer requirements. Continuously assess control effectiveness, identify gaps, prioritize risk, and drive remediation that strengthens Sierra’s security and compliance posture. - Define and enforce security baselines for cloud infrastructure, containerized workloads, Kubernetes, identity, encryption, logging, and network security controls. Partner with engineering teams to integrate security requirements into configuration and change management. - Design and operate automated compliance workflows using AI, infrastructure as code, and security tooling to reduce manual effort, improve control assurance, and scale with platform evolution. WHO YOU’LL WORK WITH You will act as a strategic partner to Platform, Product, Agent Development, Legal, and GTM, ensuring security and compliance requirements are embedded into architecture decisions, product roadmaps, and go to market execution while supporting product velocity and technical complexity. WHAT YOU’LL BRING - 8+ years of experience in security compliance or GRC or security adjacent roles within fast growing technology companies. - Deep expertise in security compliance frameworks including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, and similar regulatory environments. - A systems oriented and engineering focused GRC mindset, with the ability to reason about cloud architecture, data flows, and control effectiveness alongside engineers. - Experience owning complex audits and driving risk based remediation across distributed teams. - Hands-on experience with multi-cloud infrastructure (AWS, Azure, GCP). - Strong experience implementing and automating security controls across cloud infrastructure, configuration management, container security, Kubernetes, encryption, identity, and authentication systems. - Ability to clearly communicate compliance requirements internally to engineering teams and externally to customers in a technically credible way. - Relevant certifications such as CISSP, CISA, PCI ISA, ISO 27001 Lead Auditor, or equivalent experience. EVEN BETTER... - Experience supporting AI platforms, fintech, healthcare, or other highly regulated environments. - Familiarity with global regulatory environments including GDPR, DORA, the EU AI Act, and emerging security and AI governance requirements across APAC regions. - Experience supporting public sector or FedRAMP aligned environments. WHY JOIN US? You will operate at the center of AI systems, cloud infrastructure, and global compliance, shaping how security controls are designed and scaled for modern AI platforms. This role offers high ownership, deep technical partnership with engineering, and the opportunity to define what strong GRC looks like at Sierra. OUR VALUES - Trust: We build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work. - Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it. - Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn’t right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve. - Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time. - Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company for parents. We support and respect each other and celebrate each other’s personal and professional achievements. WHAT WE OFFER We want our benefits to reflect our values and offer the following to full-time employees: - Flexible (unlimited) paid time off - Medical, dental, and vision benefits for you and your family - Life insurance and disability benefits - Retirement plan dependent on country of employment - Parental leave - Fertility and family building benefits through Carrot - Lunch, as well as delicious snacks and coffee to keep you energized  - Discretionary benefit stipend giving people the ability to spend where it matters most - Free alphorn lessons These benefits are further detailed in Sierra's policies, may vary by region, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full-time employees can participate in Sierra's equity plans subject to the terms of the applicable plans and policies. BE YOU, WITH US We're working to bring the transformative power of AI to every organization in the world. To do so, it is important to us that the diversity of our employees represents the diversity of our customers. We believe that our work and culture are better when we encourage, support, and respect different skills and experiences represented within our team. We encourage you to apply even if your experience doesn't precisely match the job description. We strive to evaluate all applicants consistently without regard to race, color, religion, gender, national origin, age, disability, veteran status, pregnancy, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.

Location: New York, NY (HQ); San Francisco, CA; Remote (US) Workplace: Hybrid ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. As Ramp’s founding Privacy engineer, you will build a privacy program that powers Ramp’s growth while earning trust from customers and prospects. What You’ll Do - Build privacy-focused application primitives and integrate them into our existing products - Partner with other engineering teams to design and deploy solutions which are inherently privacy-centric and secure - Improve, implement, and deploy data retention and anonymization strategies across our environment - Track shifting legal standards (alongside with Ramp’s Privacy Counsel) and update Ramp systems and processes to match What You Need - Minimum of 4 years of experience building software - Minimum of 2 years of experienced focused on platform, privacy, and/or security - Desire to work in a fast-paced environment, continuously grow, and master your craft - Ability to turn business and product ideas into engineering solutions Nice-to-Haves - Working knowledge of data-protection legal requirements - Experience with Python (Flask), React, and AWS (ECS, as well as other core services) BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Location: New York, NY (HQ) Workplace: Hybrid ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. About the Role The Product Security team helps make Ramp the most secure place for our customers to collect, manage, and put to work their business’ financial information. Our work centers in three areas: - Ramp builds products with an eye for security - Ramp detects and responds to threats before they cause harm - Security powers Ramp’s growth Check out our Engineering Blog https://engineering.ramp.com/ for more on our tech stack, mission and values! What You’ll Do - Build security-focused application primitives and integrate them into our existing products - Design and deploy platform-level mitigations to common security issues - Lead remediation of prioritized issues across our technology stack: collaborating with other engineers to triage and fix vulnerabilities discovered internally, through penetration testing, and through our bug bounty program - Partner with engineering teams to design and deploy solutions which are inherently secure - Champion the use of tooling (linters, static analysis, posture assessment scanners, query inspectors, etc.) which help Ramp engineers build secure systems more quickly What You Need - Minimum of 5 years of experience building software - Minimum of 2 years of experience focused on platform, infrastructure, and/or security - Desire to work in a fast-paced environment, continuously grow, and master your craft - Ability to turn business and product ideas into engineering solutions - Alignment with Ramp’s core values of enabling businesses to grow more by spending less Nice to Haves - Experience with Python (Flask), Elixir, and AWS (ECS, as well as other core services) - Experience analyzing and improving the security posture of infrastructure in AWS BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Location: Remote Global (US, EU) Aptos is a people-first blockchain on a mission to help billions of people achieve universal and fair access to decentralized assets in a safe and scalable way. Founded by some of the original creators and maintainers that researched, designed, and built the Diem blockchain to serve this purpose, we have dedicated several years toward this mission. We believe the open-source Diem technology we have developed is an important foundation of a safe and scalable web3 world where everyone has more equitable opportunities to grow and access financial assets with lower fees and fewer intermediaries. Aptos (Ohlone for "The People") encompasses our mission and ethos for why we build. About the Role At Aptos Labs we’re pioneering the future of web3 and need a passionate Product Security Engineer to help secure our core technologies. In this role, you’ll be at the forefront of safeguarding our Aptos core infrastructure and Aptos Labs products. Your proactive approach will help us identify and mitigate emerging threats, ensuring our systems remain resilient and trustworthy. You will work closely with our developers, influence security best practices, and lead initiatives that shape the future of web3 security. Responsibilities Analyze and assess novel and recurring security issues via design reviews, code audits, and penetration tests. Design and build security tools, and develop mitigations, frameworks, and hardening strategies tailored for vulnerability prevention and detection. Review and develop secure operational practices, and provide security guidance for engineers. Respond to and triage reports from bug bounty programs. Minimum Qualifications B.S. or M.S. in Computer Science, a related technical field, or equivalent experience. 3+ years of experience in vulnerability research and exploitation. Experience with native development practices and common vulnerability patterns (e.g., Rust, C, etc.) Experience with automated security analysis tooling and frameworks (fuzzing, static analysis, etc.) Preferred Qualifications Contributions to the security community (public research, blogging, talks in relevant conferences, etc.) Experience with virtual machines or complex runtime environments, such as MoveVM (extra bonus), EVM, WASM, or LLVM-based runtimes, including their security models, sandboxing, and execution isolation. Familiarity with smart contract programming languages (extra bonus for Move), security tools, and frameworks, including formal verification. Our Benefits 100% insurance premium coverage for medical, dental, and vision for you and your dependents (US Employees) Equipment of your choice Flexible vacation time, 11 holidays, and floating company days off Competitive Salary Protocol Token Grants 401k matching (US Employees) Fun and inclusive in-person and digital events Aptos is committed to diversity in the workplace, and we’re proud to be an Equal Opportunity Employer. We do not hire on the basis of race, color, religion, creed, gender, national origin, citizenship, age, disability, veteran status, marital status, pregnancy, parental status, sex, gender expression or identity, sexual orientation, or any other basis protected by local, state or federal law. All employment is decided based on qualifications, merit, and business need. We are committed to providing a safe and secure hiring process for all applicants. Unfortunately, there are individuals who may attempt to impersonate Aptos or our employees for fraudulent purposes. To protect yourself, please be aware of the following: We will never ask you for payment of any kind during the application or onboarding process, including fees for background checks, training, or equipment. We will always communicate with you using our official company email domain. We will never request your personal financial information, such as your social security number or bank account details, during the initial application stages or via email or a video/voice call when onboarding.

Location: USA (Remote) Workplace: Remote Tempo is a layer-1 blockchain purpose-built for stablecoins and real-world payments, born from Stripe’s experience in global payments and Paradigm’s expertise in crypto tech.   Tempo’s payment-first design provides a scalable, low-cost predictable backbone that meets the needs of high-volume payment use cases. Our goal is to move money reliably, cheaply, and at scale. Our north star is simplicity for users: fintechs, traditional banks, merchants, platforms, and anyone else looking to move their payments into the 21st century.   We're building Tempo with design partners who are global leaders in AI, e-commerce, and financial services: Anthropic, Coupang, Deutsche Bank, DoorDash, Mercury, Nubank, OpenAI, Revolut, Shopify, Standard Chartered, Visa, and more.   We’re a team of crypto-optimists, building the infrastructure needed to bring real, substantial economic flows onchain. We like to move fast and swing for the fences — join us! The Role We are building a full-time internal Red Team to continuously stress-test our own infrastructure. As a security engineer, you won't just be ticking compliance boxes; you will be writing Rust fuzzers, simulating economic attacks on our testnet, and dissecting the EVM to find edge cases in our execution client. We are looking for a builder who understands that the best way to secure a protocol is to try to break it continuously. If you have a history of topping CTF leaderboards, submitting high-severity bug bounties, or building your own security tooling because the standard ones weren't good enough—this role is for you. Responsibilities - Proactively hunt for vulnerabilities in the Tempo protocol, consensus engine, and bridge architecture, treating our mainnet like a continuous CTF challenge. - Design and implement security tooling and automation in liaison with the Foundry team to catch logic errors and edge cases. - Partner with engineering teams to review critical architecture across our codebase. - Analyze incentives and game-theoretic risks within the protocol, such as MEV and staking dynamics, to prevent economic exploits. Qualifications - Fluency in reading and writing production-level code in systems languages, with a strong preference for Rust. - Deep expertise in EVM internals, including intimate knowledge of opcodes, storage slots, gas metering, and precompiles. - Proven track record of offensive security, such as high rankings in CTFs (e.g., Paradigm CTF), high-severity bug bounty submissions, or published research. - Experience building custom security automation or tooling rather than relying solely on off-the-shelf scanners. - Bleeding-edge knowledge of the latest blockchain security research, including recent hacks and how these could have been mitigated. Attributes - High motor - Razor-sharp thinker with precise command of language - Concise, evidence-based communicator - Excellent organizational and logistical skills - Intense curiosity and open-mindedness - Scrappiness; willingness to roll up sleeves - Growth mindset

Location: San Francisco, CA Workplace: OnSite ABOUT US Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/. Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. SOFTWARE ENGINEER, SECURITY Security Engineering builds the foundations that let Sierra deliver powerful AI agents while protecting customer data and trust. We partner across product and platform to make security, privacy, and safety core product capabilities and secure defaults.   WHAT YOU’LL DO Our work spans several security domains. You’ll go deep where your strengths and interests are strongest, with opportunities to explore new areas alongside the team. Build the Foundations of Trust. Design and ship systems that make Sierra’s platform secure by default — spanning agent safety/security, privacy, identity, authentication, authorization, and data security. You’ll work across all layers of production (agents, infrastructure, backend, frontend) to embed security-conscious design into the core of our product. Own Cross-Cutting Systems. Partner with product and platform teams to implement and evolve Sierra’s trust primitives: identity management, access control, auditability, and data lifecycle management. You’ll make pragmatic design trade-offs between usability, performance, and security. Secure Agentic AI Systems. Build controls that ensure AI agents can't leak customer data, execute unauthorized actions, or be manipulated into unintended behavior. Design runtime policy enforcement for tool use, implement safe agent sandboxing, and create boundaries that protect data while keeping agents powerful and useful. Automate and Scale Security-Adjacent Workflows. Create developer-friendly tooling to reduce risk and friction — whether through automating security checks in CI/CD, enforcing privacy boundaries through schema validation, or instrumenting runtime monitoring for sensitive events.   WHAT YOU’LL BRING Strong Software Engineering Skills. Experience building and maintaining production systems. You’re comfortable designing APIs, integrating with authentication or identity frameworks, and thoughtfully using AI-assisted development tools to build, test, and ship high-quality code faster without lowering the quality bar. Security Mindset. You think like a security engineer — considering how data flows, where it’s stored, who can access it, and how to design for least privilege and transparency. Product and Platform Mindset. You care about building secure scalable systems that enable, not block, innovation. You work closely with product teams to make trade-offs clear and help them move quickly without sacrificing trust. Curiosity and Ownership. You take ambiguous, cross-cutting problems from first principles to production and go deep when needed: tracing an authorization decision from agent intent through policy enforcement and downstream effects, or following sensitive data across model context, logs, storage, and tenant boundaries. You define the problem, align partners, ship the solution, and own it in production. EVEN BETTER IF… - You’ve worked on privacy, identity, trust & safety, authN/authz, or data protection systems. - You’ve built security frameworks, libraries, or tooling that developers actually use or integrated security automation into CI/CD pipelines. - You have exposure to AI systems or care about designing secure-by-default LLM applications. - You think like an attacker — you naturally ask "what could go wrong?" when reviewing designs or while building systems. You've found or fixed real security issues in production systems. - You thrive in 0→1 environments, where foundational systems have to balance speed, reliability, and trust.   OUR VALUES - Trust: We build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work. - Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it. - Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn’t right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve. - Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time. - Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company for parents. We support and respect each other and celebrate each other’s personal and professional achievements. WHAT WE OFFER We want our benefits to reflect our values and offer the following to full-time employees: - Flexible (unlimited) paid time off - Medical, dental, and vision benefits for you and your family - Life insurance and disability benefits - Retirement plan dependent on country of employment - Parental leave - Fertility and family building benefits through Carrot - Lunch, as well as delicious snacks and coffee to keep you energized  - Discretionary benefit stipend giving people the ability to spend where it matters most - Free alphorn lessons These benefits are further detailed in Sierra's policies, may vary by region, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full-time employees can participate in Sierra's equity plans subject to the terms of the applicable plans and policies. BE YOU, WITH US We're working to bring the transformative power of AI to every organization in the world. To do so, it is important to us that the diversity of our employees represents the diversity of our customers. We believe that our work and culture are better when we encourage, support, and respect different skills and experiences represented within our team. We encourage you to apply even if your experience doesn't precisely match the job description. We strive to evaluate all applicants consistently without regard to race, color, religion, gender, national origin, age, disability, veteran status, pregnancy, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.

Location: Remote Workplace: Remote Blockstream https://blockstream.com/ was founded in 2014 by Dr. Adam Back https://en.wikipedia.org/wiki/Adam_Back and a group of fellow cryptographers and engineers who are passionate about Bitcoin and its potential to change the world. Today, Blockstream is the leading Bitcoin company, providing cutting-edge infrastructure solutions for enterprises, institutions, and individual Bitcoin users. We develop industry-leading Bitcoin self-custody solutions, Bitcoin-based financial products, second-layer scaling technologies, and enterprise-grade blockchain infrastructure. We’re looking for an experienced Security Architect to design, implement, and oversee secure systems and applications across Blockstream’s enterprise products and infrastructure. The ideal candidate is a full-stack engineer with a strong backend focus, deep understanding of secure application design, and prior experience building or securing platforms in fintech, banking, or blockchain. You’ll partner closely with product, DevOps, and engineering teams to ensure Blockstream’s systems and data are protected from evolving threats — without compromising innovation or performance. What You’ll Be Doing (Responsibilities): - Define and drive security architecture across applications, services, and infrastructure. - Partner with engineering teams to design and implement secure software systems, focusing on backend and data security. - Conduct threat modeling, risk assessments, and security reviews for new and existing products. - Develop and enforce secure coding practices, frameworks, and review processes. - Collaborate with DevOps on cloud and container security, CI/CD hardening, and access controls. - Evaluate and integrate security tools for code scanning, vulnerability management, and incident response. - Guide and mentor engineers on best practices for secure application development. - Stay ahead of emerging security trends, compliance standards, and attack vectors — particularly in fintech and blockchain domains. What We Look For in You (Required Qualifications): - 10+ years of experience in software engineering or security architecture roles. - Strong full-stack background with deep backend security expertise (Python, Go, C/C++, Rust, or similar languages). - Demonstrated experience designing and securing systems for enterprise fintech, banking, or blockchain environments. - Knowledge of cryptography, authentication, and key management. - Hands-on experience with cloud security (AWS, GCP, or similar). - Familiarity with threat modeling, secure SDLC, and modern application security frameworks (OWASP, NIST, ISO 27001). - Excellent communication skills — able to clearly articulate risks and solutions to both technical and non-technical stakeholders. Nice To Haves (Preferred Qualifications): - Experience with Bitcoin, Lightning, or blockchain protocols. - Contributions to open-source security tools or projects. - Security certifications (CISSP, OSCP, CEH, or equivalent) are a plus but not required. 🔒 Stay Safe from Job Scams All official Blockstream communication will come from an @blockstream.com email address. We will never ask you to share sensitive information or purchase equipment during the hiring process. If in doubt, contact us at hr@blockstream.com. Learn more about avoiding job scams here https://consumer.ftc.gov/consumer-alerts/2022/05/want-work-home-spot-scams-first.

Location: NYC or Remote Workplace: remote Olo is a leading SaaS platform accelerating digital transformation in the restaurant industry, by helping customers deliver more personalized and profitable guest experiences. As a result, our digital ordering, payment, and guest engagement solutions enable brands to do more with less and make every guest feel like a regular.   Reporting to the Security Engineering Director, the Staff Security Engineer will act as technical lead of the Olo Security Blue Team and work on security defences that allow our systems to keep running while protecting the data of our clients and their customers.   Additionally, you will help in the identification and prioritization of future project initiatives based on risk and execute on cross-functional projects with a high degree of ownership and excellence, all while actively mentoring other team members and elevating the collective team’s capabilities and skill sets. If you are passionate about reducing risk while supporting innovation we encourage you to apply!   You can work remotely from anywhere in the U.S. or at Olo's headquarters in NYC. What You'll Do Guide and coach Olo’s Blue Team on Information Protection, Incident Detection and Response and Service Delivery. You will provide strategic and technical oversight to the team and the program. Technically lead a team of security engineers and analysts who hunt, detect, and respond to internal and external threats. Collaborate with customers and partners to strengthen their security posture. Drive ongoing optimizations by implementing new technologies, replacing technologies, addressing evolving threats, scaling practices and automating security activities. Ultimately you will keep team member and customers data safe by identifying and mitigating vulnerabilities and risks by providing actionable guidance to product teams. Information Protection Lead Olo’s Information Protection program including the selection, testing, implementation and maintenance of security tools and services, security awareness, service provider management and the ongoing testing of those controls. Oversee Vulnerability Management program including vulnerability assessments, risk scoring and vulnerability resolution. Oversee Threat Hunting program to detect and mitigate advanced threats. Manage non-event driven security reviews, including concept reviews, design reviews, patching, firewall rules and system configuration checks. Apply Web application and API security principles and techniques, such as zero trust, RBAC, authentication, authorization, auditing, rate limiting, challenges, etc., to protect our cloud-based services from unauthorized access and abuse. Incident Detection and Response Oversee Incident Detection and Response program including ownership of incident response processes, tools and services and the ongoing continuous improvement of those controls. Coordinate the detection and response to attacks through all incident phases. Ensure incident reports are accurate, detailed and relevant. Monitor, detect, and remediate misconfigurations and security risks across our cloud environments. Participate in a 24/7 on-call rotation. Security Services Oversee Security Services program including security support requests, risk assessments, vendor assessments, PCI and SOC audit support and service provider management. What We'll Expect from You 5+ years of Security Engineering, Security Operations or Security Architecture experience. CISSP, GCIH or similar certification preferred. Experience acting as technical lead to distributed teams consisting largely of remote engineers. Experience complying with PCI-DSS and other compliance and regulatory standards. Experience with attacker tactics, techniques and procedures. Knowledge of information technology, evolving threats, attack patterns, incident response and cyber security standards. Experience developing and leading incident response, remediation and mitigation activities, and providing status updates and reports. Experience analyzing security events to discern events that qualify as a legitimate security incident as opposed to non-incidents (ie. incident investigation, implementing countermeasures, and conducting incident response). Deep understanding of operating system, networking and application concepts. Experience hardening Windows, MacOS, Linux Containers and Kubernetes. Familiarity with AWS security best practices and Infrastructure-as-Code. Experience deploying and maintaining security technologies. (e.g. Access Proxies, API Gateway, Anti-Malware, Application Control, Cloud Security Posture, Data Leak Prevention, Data Mapping, Endpoint Detection & Response, Intrusion Detection System, File Integrity Monitoring, Firewalls, Mobile Device Management, Multi Factor Authentication, SIEM, Static Inspection, Vulnerability Assessment, Web Proxies, WAF and Zero Trust). Adept at working with internal Product & Engineering, Legal, People & Culture, Finance and GTM teams and external partners, auditors and customers. Ability to work during critical incidents or to support coverage requirements. About Olo   Olo is a leading restaurant technology provider with ordering, payment, and guest engagement solutions that help brands increase orders, streamline operations, and improve the guest experience. Each day, Olo processes millions of orders on its open SaaS platform, gathering the right data from each touchpoint into a single source—so restaurants can better understand and better serve every guest on every channel, every time. Over 800 restaurant brands trust Olo and its network of more than 400 integration partners to innovate on behalf of the restaurant community, accelerating technology’s positive impact and creating a world where every restaurant guest feels like a regular. Learn more at olo.com.   We’re remote-friendly. Since 2015, we have been evolving our culture to continue to support a more distributed workforce and now over 75% of our team works remotely across the U.S. If you're in the New York City area, you can choose to work remotely or from Olo's headquarters.   We offer great benefits, such as 20 days of paid time off, 10 sick days, 11 holidays, plus year-end closure, health, dental, and vision coverage for yourself and your family, a 401k match, remote-office stipend, a generous parental leave plan, volunteer time off, gift matching policy, and more!   Our best estimate of the compensation range for this opportunity is $161,000-$220,000 annually, depending on the experience you bring and your location. We look forward to discussing your salary expectations and our full total rewards offerings throughout the interview process.   We encourage you to apply!   At Olo, we believe bringing together people with varied experiences and viewpoints leads to better results. Don't check every box in the job description? Research shows many qualified candidates hold back from applying unless they meet all listed requirements. We're committed to creating a genuine workplace where everyone can contribute their best work—this improves our decision-making and helps us better serve our communities. So if you're enthusiastic about this role but your background doesn't align perfectly with every qualification, we encourage you to apply anyway. You might be exactly the right fit for this or other positions.   All applicants receive consideration for employment. We do not discriminate on the basis of race, religion, colour, national origin, gender identity, sexual orientation, pregnancy, age, marital status, veteran status, or disability status.    California Residents: CCPA notice