О ПРОЕКТЕ
StarTribe — часть крупного международного холдинга с 10-летней историей. Мы разрабатываем высоконагруженные IT-продукты для мировых брендов. Сейчас мы усиливаем команду безопасности для тестирования внутренних и публичных приложений собственной разработки.
ВАШИ КЛЮЧЕВЫЕ ЗАДАЧИ
— Pentesting: Проведение глубоких тестов веб-приложений (White/Grey/Black box).
— Remediation: Подготовка конкретных рекомендаций по устранению уязвимостей.
— Collaboration: Тесное взаимодействие с разработчиками для внедрения Security Best Practices.
— DevSecOps: Участие в разработке внутреннего инструментария и автоматизации проверок.
— Mentoring: Помощь коллегам и развитие экспертизы внутри команды.
ЧТО МЫ ЖДЕМ ОТ ВАС
— Опыт: 4+ года в области AppSec и тестирования безопасности веб-приложений.
— Инструментарий: Экспертное владение Burp Suite и другими средствами анализа (Manual & Auto).
— Коммуникация: Умение аргументированно доносить риски до бизнеса и находить компромиссы с Dev-командами.
— Стек: Понимание специфики безопасности Node.js и PHP (дополнительно .NET / Go).
БУДЕТ ПЛЮСОМ
— Сертификации уровня OSCP, OSWE или Burp Suite Certified Practitioner.
— Активное участие в CTF, наличие рейтинга на HackTheBox.
— Наличие подтвержденных Bug Bounty репортов.
УСЛОВИЯ И БЕНЕФИТЫ
— Оформление: Официальный контракт по ТК Кипра.
— Релокация: Частичная компенсация аренды жилья и корпоративная мобильная связь.
— Бонусы: Годовой бонус по результатам, 4 дополнительных Day Off в году.
— Life Quality: Корпоративное питание, спорт, мероприятия для семей и активности для детей.
— Развитие: Скидка 50% на SkyEng, поддержка образовательных инициатив.
Location: Riyadh, Saudi Arabia; Dubai, United Arab Emirates; Casablanca, Morocco; Cairo, Egypt; Delhi, India
Müller’s Solutions is looking for a skilled Google Cloud Security Engineer to enhance our cloud security framework and protect our critical systems and data on Google Cloud Platform (GCP). In this role, you will be responsible for identifying security vulnerabilities, implementing robust security measures, and ensuring compliance with industry standards while safeguarding our cloud architecture and applications.
Key Responsibilities:
Design, implement, and manage security controls and procedures for GCP services and resources.
Perform risk assessments and security reviews to identify vulnerabilities and prioritize remediation measures.
Monitor and analyze security alerts, events, and incidents across the cloud environment.
Develop and enforce security policies, standards, and best practices for cloud operations.
Implement Identity and Access Management (IAM) policies to control access to GCP resources effectively.
Conduct regular security assessments and collaborate with development teams to ensure secure coding practices.
Stay up to date with the latest security threats, vulnerabilities, and trends in cloud security.
Provide security training and awareness for engineering teams to promote a security-first culture.
Collaborate with incident response teams to investigate and respond to security incidents effectively.
Maintain documentation of security policies, architecture, and processes related to GCP.
Requirements
Requirements:
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
3+ years of experience in cloud security, specifically within Google Cloud Platform.
Strong knowledge of cloud security best practices, frameworks, and compliance (e.g., ISO 27001, NIST, GDPR).
Experience with GCP security tools and services, including Security Command Center, Cloud Armor, and Cloud Identity.
Expertise in Identity and Access Management (IAM), data encryption, and security configurations in GCP.
Familiarity with network security principles and solutions, such as firewalls and VPNs.
Excellent analytical and problem-solving skills, with the ability to handle complex security scenarios.
Strong communication skills to effectively convey technical information to diverse audiences.
Preferred Qualifications:
Google Cloud certifications (e.g., Google Cloud Professional Cloud Security Engineer) are desirable.
Experience in scripting or programming languages, such as Python or Bash, for security automation.
Knowledge of DevSecOps practices and tools.
Experience with tools like SIEM, vulnerability scanners, and penetration testing frameworks.
Benefits
1- Attractive Package.
2- Family Benefits.
3- Visa.
4-Air Tickets.
Riyadh, Saudi Arabia; Dubai, United Arab Emirates; Casablanca, Morocco; Cairo, Egypt; Delhi, India
Location: San Francisco, CA | New York City, NY | Seattle, WA
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the Team
The Security Engineering team protects Anthropic's AI systems and maintains the trust of our users and society. We define the authentication architecture for our training infrastructure, design the cryptographic foundations that protect model weights and training data, and drive the developer security program that shapes how engineers build and ship software.
The team works across several areas that collaborate closely: identity and secrets management, developer security and supply chain, infrastructure security, and secure frameworks. You will own one or two of these areas and contribute to others, with your focus shaped by your strengths and the team's priorities. This is largely greenfield work, and you will help define the architecture.
About the role:
Scope, design, and build complex security systems end to end, maintaining them through production and driving through ambiguous technical challenges with minimal oversight
Identify systematic risks through threat modeling and risk assessment, then build the controls and infrastructure that address them
Mentor engineers across the security team and broader engineering organization, contribute to hiring, and grow security engineering culture at Anthropic
Enable other teams to build their own security solutions by providing design pattern guidance and expanding security ownership beyond the security team
Developer security and supply chain
Build and advance our developer security program by embedding security practices into the software development lifecycle and developer workflows
Harden CI/CD pipelines against supply chain attacks through isolated build environments, signed attestations, dependency verification, and automated policy enforcement
Identity and secrets management
Architect systems that protect sensitive assets including model weights, customer data, and training datasets
Build and operate credential issuance, rotation, and workload authentication across our multi-cloud environments
Infrastructure security
Implement and maintain cloud security controls including IAM, network segmentation, VPC architecture, and encryption across our multi-cloud and on-prem environments
Contribute to cluster security controls including RBAC policies, namespace isolation, workload identity, and pod security
Contribute to continuous cloud security posture management using infrastructure-as-code scanning, misconfiguration detection, and automated remediation
Secure frameworks
Build critical security foundations including cryptographic frameworks, mTLS infrastructure, secure serialization, and authorization systems, designed to prevent entire classes of vulnerabilities and empower engineering teams to work securely without becoming security experts themselves
Partner with product, research, infrastructure, and other security teams to ensure frameworks integrate smoothly with lower-layer security controls
You may be a good fit if you have:
At least 8 years of software engineering experience with deep security expertise, including leading complex security initiatives independently
Bachelor's degree in Computer Science or equivalent industry experience
Strong programming skills in Python or at least one systems language such as Go, Rust, or C/C++
Deep understanding of identity systems, cryptographic primitives, and secrets management
Working knowledge of Kubernetes security primitives including RBAC, namespaces, network policies, and service accounts
Experience leading cross-functional security initiatives and navigating complex organizational dynamics
Outstanding communication skills, translating technical concepts effectively across all levels of the organization
A track record of bringing clarity and ownership to ambiguous technical problems and driving them to resolution
Low ego and high empathy, with a history of growing the engineers around you and supporting diverse, inclusive teams
Passion for AI safety and the role security engineering plays in building trustworthy AI systems
Strong candidates may also have:
Designed or operated identity and secrets management systems for large-scale AI or cloud infrastructure
Built security frameworks or libraries adopted across an engineering organization
Led a developer security program including supply chain security, secure build infrastructure, and SDLC integrations
Built or secured CI infrastructure using Nix, Bazel, or Kubernetes-based deploy systems, with depth in toolchain issues, CI/CD pipelines, and developer workflow optimization
Implemented machine identity or workload authentication systems using SPIFFE/SPIRE, mTLS, or equivalent
Understanding of Linux systems internals including namespaces, cgroups, and seccomp, and how these underpin container and workload isolation
Contributed to the security architecture of multi-cloud environments including network segmentation, data protection, and access governance
Experience with network security controls including admission controllers, CNI-level policy, service mesh security, and east-west traffic enforcement
Experience building runtime security monitoring using eBPF or kernel security policies
Deadline to apply:
None, applications will be received on a rolling basis.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$405,000
—
$485,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Remote US
At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.
Remote US
The Director, Information Technology & Security will serve as a key member of the Bank's Management Team, serving as the Chief Information Security Officer, and will be responsible for establishing and leading the Bank's information security and cybersecurity programs. As the Bank prepares to launch as a de novo Industrial Loan Company (ILC), this leader will design and implement an enterprise-wide security framework that meets FDIC and state regulatory expectations, supports the Bank's risk appetite, and protects customer and institutional data.
This is a blended leadership role requiring both high-level strategic influence and deep technical execution. You will lead the development of information security governance, technical controls, and oversight of infrastructure and engineering, ensuring a strong and scalable security posture from inception. This leader must be a practitioner at heart—willing to "roll up their sleeves" to lead the technical build phase, collaborate closely with engineering on architecture, and ensure security is integrated into every aspect of the Bank's systems and operations.
What You’ll Do
Oversee infrastructure design and IT Engineering
Information Security Program Development
Design, implement, and maintain a comprehensive Information Security Program consistent with FDIC guidance (e.g., FIL-66-2019, FIL-13-2021) and the Interagency Guidelines Establishing Information Security Standards.
Develop and oversee policies, standards, and procedures governing cybersecurity, data protection, and incident response.
Ensure alignment with the Bank’s overall risk management and governance frameworks.
Provide regular reporting to executive management and the Board on the Bank’s security posture, emerging risks, and mitigation efforts.
Lead the technical build phase of the Bank's infrastructure, providing direct oversight and hands-on guidance for cloud security and DevOps integration.
Partner deeply with Engineering to define and implement secure technical architectures, including network segmentation, encryption standards, and identity governance.
Cybersecurity and Threat Management
Establish and manage a threat monitoring and detection capability to identify, assess, and respond to cybersecurity risks.
Oversee implementation of layered security controls (e.g., network segmentation, encryption, access controls, endpoint protection, vulnerability management).
Lead the Bank’s Incident Response Program, ensuring timely escalation and coordination with regulators when required.
Maintain relationships with information-sharing groups (e.g., FS-ISAC) and law enforcement to stay informed of emerging threats.
Third-Party and Affiliate Risk Oversight
Evaluate the information security posture of third-party and affiliate service providers in accordance with the Bank’s Vendor Management Program and FDIC third-party risk guidance.
Establish due diligence, ongoing monitoring, and contractual requirements for vendors handling sensitive data or performing critical services.
Coordinate with Operations, Compliance, and Internal Audit to ensure third-party risks are identified, assessed, and mitigated.
Manage the technical lifecycle of security-critical third-party service providers, ensuring rigorous operational oversight of vendors handling sensitive financial data.
Data Governance and Privacy Protection
Ensure compliance with applicable privacy and data protection requirements (e.g., GLBA, Regulation P, state privacy laws).
Implement processes to safeguard customer information and prevent unauthorized access, disclosure, or misuse.
Partner with business and technology teams to integrate privacy-by-design principles into new products and services.
Business Continuity and Resilience
Assist Risk Officer in development and testing of the Bank’s Business Continuity and Disaster Recovery (BC/DR) plans, ensuring they are integrated with information security objectives.
Coordinate regular testing and simulations to validate readiness for cyber incidents and system disruptions.
Support resilience planning for key systems, vendors, and communication protocols.
De Novo and Pre-Opening Readiness
Build and document the Bank’s technology and information security program as part of the de novo application process.
Establish security architecture, monitoring tools, and vendor relationships prior to launch.
Prepare readiness materials for FDIC and state examinations related to cybersecurity and operational resilience.
Ensure security risk assessments and third-party reviews are completed and incorporated into pre-opening milestones.
Leadership and Culture
Serve as the Bank’s senior advocate for cybersecurity and data protection, promoting a culture of security awareness and accountability.
Provide training and guidance across the organization to enhance information security awareness.
Collaborate with peers in Risk, Compliance, Operations, and Technology to align security priorities with business strategy.
Build and lead a capable, mission-driven security team to support the Bank’s evolving needs.
What We Look For
Minimum of 10 years of experience in information technology, and security and technology risk management, with a proven track record of moving between strategic planning and hands-on technical execution.
Demonstrated experience designing and implementing information security programs compliant with FDIC and FFIEC standards.
Strong familiarity with third-party risk frameworks and financial services cybersecurity expectations.
Experience leading incident response, penetration testing, and security operations in cloud-based and hybrid environments.
Proven ability to communicate complex technical topics to executive leadership, the Board, and regulators.
Strong leadership, analytical, and problem-solving skills with a risk-based and pragmatic approach to decision-making.
Deep expertise in cloud-native infrastructure (AWS/GCP), DevOps practices, and software-defined security controls.
Demonstrated ability to "roll up sleeves" and contribute directly to the technology build while simultaneously managing executive stakeholders and regulators.
Core Competencies
Expert knowledge of information security principles, frameworks, and regulatory requirements.
Strategic thinker with strong operational execution and control discipline.
Effective communicator capable of influencing across technical and business functions.
Collaborative leader who fosters a culture of accountability, awareness, and continuous improvement.
Affirm Values
At Affirm, we live by our values: People Come First, No Fine Print, It’s On Us, Simplify, and Push the Envelope. As CCO, you will embody these principles while building the foundation of Affirm Bank as a trusted, transparent, and innovative financial institution.
Compensation & Benefits
Base Pay Grade
- T
Equity Grade
- 14
Employees new to Affirm
typically come in at the start of the pay range.
Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company).
USA Pacific base pay range (CA, WA, NY, NJ, CT) per year:
$300,000 - $360,000
USA Sapphire base pay range (all other U.S. states) per year:
$267,000 - $327,000
Please note that visa sponsorship is not available for this position.
#LI-Remote
Remote-first with flexibility built in
Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience.
Benefits designed for you
Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights:
Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.
Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.
Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount.
We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help.
For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law.
By clicking "Submit Application," you acknowledge that you have read Affirm's
Global Candidate Privacy Notice
and consent to the use of your personal information as described.
Location: New York, NY (HQ); San Francisco, CA; Remote (US)
Workplace: Hybrid
ABOUT RAMP
Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books.
The problems are high-stakes, data-dense, and unforgiving.
We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome.
The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same.
If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it.
As Ramp’s founding Privacy engineer, you will build a privacy program that powers Ramp’s growth while earning trust from customers and prospects.
What You’ll Do
- Build privacy-focused application primitives and integrate them into our existing products
- Partner with other engineering teams to design and deploy solutions which are inherently privacy-centric and secure
- Improve, implement, and deploy data retention and anonymization strategies across our environment
- Track shifting legal standards (alongside with Ramp’s Privacy Counsel) and update Ramp systems and processes to match
What You Need
- Minimum of 4 years of experience building software
- Minimum of 2 years of experienced focused on platform, privacy, and/or security
- Desire to work in a fast-paced environment, continuously grow, and master your craft
- Ability to turn business and product ideas into engineering solutions
Nice-to-Haves
- Working knowledge of data-protection legal requirements
- Experience with Python (Flask), React, and AWS (ECS, as well as other core services)
BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL)
- Flexible PTO
- Centralized home-office equipment ordering
- Health and wellness stipend
- Budget for intra-office travel
- Weekly coffee stipend
UNITED STATES
- 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents
- One Medical annual membership
- 401(k), including employer match on contributions made while employed by Ramp
- Fertility HRA (up to $10,000 per year)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay
- Pet insurance
- In-office perks: lunch, snacks, drinks, and more
- Relocation expense coverage to NYC or SF (if needed)
CANADA
- Group medical, dental, and vision coverage through Sun Life
- Life, AD&D, and disability coverage
- Fertility drug coverage (up to $4,000 lifetime)
- Group Retirement Plan with employer match (RRSP + DPSP)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay
- Employee Assistance Program and virtual care through Lumino Health
UNITED KINGDOM
- Private medical insurance through Freedom Elite
- Virtual GP and at-home care via eMed x Livi
- Workplace pension through Penfold, with salary sacrifice option
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay
REFERRAL INSTRUCTIONS
If you are being referred for the role, please contact that person to apply on your behalf.
OTHER NOTICES
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.
Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice
Location: New York, NY (HQ)
Workplace: Hybrid
ABOUT RAMP
Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books.
The problems are high-stakes, data-dense, and unforgiving.
We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome.
The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same.
If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it.
About the Role
The Product Security team helps make Ramp the most secure place for our customers to collect, manage, and put to work their business’ financial information.
Our work centers in three areas:
- Ramp builds products with an eye for security
- Ramp detects and responds to threats before they cause harm
- Security powers Ramp’s growth
Check out our Engineering Blog https://engineering.ramp.com/ for more on our tech stack, mission and values!
What You’ll Do
- Build security-focused application primitives and integrate them into our existing products
- Design and deploy platform-level mitigations to common security issues
- Lead remediation of prioritized issues across our technology stack: collaborating with other engineers to triage and fix vulnerabilities discovered internally, through penetration testing, and through our bug bounty program
- Partner with engineering teams to design and deploy solutions which are inherently secure
- Champion the use of tooling (linters, static analysis, posture assessment scanners, query inspectors, etc.) which help Ramp engineers build secure systems more quickly
What You Need
- Minimum of 5 years of experience building software
- Minimum of 2 years of experience focused on platform, infrastructure, and/or security
- Desire to work in a fast-paced environment, continuously grow, and master your craft
- Ability to turn business and product ideas into engineering solutions
- Alignment with Ramp’s core values of enabling businesses to grow more by spending less
Nice to Haves
- Experience with Python (Flask), Elixir, and AWS (ECS, as well as other core services)
- Experience analyzing and improving the security posture of infrastructure in AWS
BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL)
- Flexible PTO
- Centralized home-office equipment ordering
- Health and wellness stipend
- Budget for intra-office travel
- Weekly coffee stipend
UNITED STATES
- 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents
- One Medical annual membership
- 401(k), including employer match on contributions made while employed by Ramp
- Fertility HRA (up to $10,000 per year)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay
- Pet insurance
- In-office perks: lunch, snacks, drinks, and more
- Relocation expense coverage to NYC or SF (if needed)
CANADA
- Group medical, dental, and vision coverage through Sun Life
- Life, AD&D, and disability coverage
- Fertility drug coverage (up to $4,000 lifetime)
- Group Retirement Plan with employer match (RRSP + DPSP)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay
- Employee Assistance Program and virtual care through Lumino Health
UNITED KINGDOM
- Private medical insurance through Freedom Elite
- Virtual GP and at-home care via eMed x Livi
- Workplace pension through Penfold, with salary sacrifice option
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay
REFERRAL INSTRUCTIONS
If you are being referred for the role, please contact that person to apply on your behalf.
OTHER NOTICES
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.
Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice
Location: Remote Global (US, EU)
Aptos is a people-first blockchain on a mission to help billions of people achieve universal and fair access to decentralized assets in a safe and scalable way.
Founded by some of the original creators and maintainers that researched, designed, and built the Diem blockchain to serve this purpose, we have dedicated several years toward this mission. We believe the open-source Diem technology we have developed is an important foundation of a safe and scalable web3 world where everyone has more equitable opportunities to grow and access financial assets with lower fees and fewer intermediaries.
Aptos (Ohlone for "The People") encompasses our mission and ethos for why we build.
About the Role
At Aptos Labs we’re pioneering the future of web3 and need a passionate Product Security Engineer to help secure our core technologies. In this role, you’ll be at the forefront of safeguarding our Aptos core infrastructure and Aptos Labs products. Your proactive approach will help us identify and mitigate emerging threats, ensuring our systems remain resilient and trustworthy. You will work closely with our developers, influence security best practices, and lead initiatives that shape the future of web3 security.
Responsibilities
Analyze and assess novel and recurring security issues via design reviews, code audits, and penetration tests.
Design and build security tools, and develop mitigations, frameworks, and hardening strategies tailored for vulnerability prevention and detection.
Review and develop secure operational practices, and provide security guidance for engineers.
Respond to and triage reports from bug bounty programs.
Minimum Qualifications
B.S. or M.S. in Computer Science, a related technical field, or equivalent experience.
3+ years of experience in vulnerability research and exploitation.
Experience with native development practices and common vulnerability patterns (e.g., Rust, C, etc.)
Experience with automated security analysis tooling and frameworks (fuzzing, static analysis, etc.)
Preferred Qualifications
Contributions to the security community (public research, blogging, talks in relevant conferences, etc.)
Experience with virtual machines or complex runtime environments, such as MoveVM (extra bonus), EVM, WASM, or LLVM-based runtimes, including their security models, sandboxing, and execution isolation.
Familiarity with smart contract programming languages (extra bonus for Move), security tools, and frameworks, including formal verification.
Our Benefits
100% insurance premium coverage for medical, dental, and vision for you and your dependents (US Employees)
Equipment of your choice
Flexible vacation time, 11 holidays, and floating company days off
Competitive Salary
Protocol Token Grants
401k matching (US Employees)
Fun and inclusive in-person and digital events
Aptos is committed to diversity in the workplace, and we’re proud to be an Equal Opportunity Employer. We do not hire on the basis of race, color, religion, creed, gender, national origin, citizenship, age, disability, veteran status, marital status, pregnancy, parental status, sex, gender expression or identity, sexual orientation, or any other basis protected by local, state or federal law. All employment is decided based on qualifications, merit, and business need.
We are committed to providing a safe and secure hiring process for all applicants. Unfortunately, there are individuals who may attempt to impersonate Aptos or our employees for fraudulent purposes.
To protect yourself, please be aware of the following:
We will
never
ask you for payment of any kind during the application or onboarding process, including fees for background checks, training, or equipment.
We will
always
communicate with you using our official company email domain.
We will
never
request your personal financial information, such as your social security number or bank account details, during the initial application stages or via email or a video/voice call when onboarding.
Location: USA (Remote)
Workplace: Remote
Tempo is a layer-1 blockchain purpose-built for stablecoins and real-world payments, born from Stripe’s experience in global payments and Paradigm’s expertise in crypto tech.
Tempo’s payment-first design provides a scalable, low-cost predictable backbone that meets the needs of high-volume payment use cases. Our goal is to move money reliably, cheaply, and at scale. Our north star is simplicity for users: fintechs, traditional banks, merchants, platforms, and anyone else looking to move their payments into the 21st century.
We're building Tempo with design partners who are global leaders in AI, e-commerce, and financial services: Anthropic, Coupang, Deutsche Bank, DoorDash, Mercury, Nubank, OpenAI, Revolut, Shopify, Standard Chartered, Visa, and more.
We’re a team of crypto-optimists, building the infrastructure needed to bring real, substantial economic flows onchain. We like to move fast and swing for the fences — join us!
The Role
We are building a full-time internal Red Team to continuously stress-test our own infrastructure. As a security engineer, you won't just be ticking compliance boxes; you will be writing Rust fuzzers, simulating economic attacks on our testnet, and dissecting the EVM to find edge cases in our execution client. We are looking for a builder who understands that the best way to secure a protocol is to try to break it continuously. If you have a history of topping CTF leaderboards, submitting high-severity bug bounties, or building your own security tooling because the standard ones weren't good enough—this role is for you.
Responsibilities
- Proactively hunt for vulnerabilities in the Tempo protocol, consensus engine, and bridge architecture, treating our mainnet like a continuous CTF challenge.
- Design and implement security tooling and automation in liaison with the Foundry team to catch logic errors and edge cases.
- Partner with engineering teams to review critical architecture across our codebase.
- Analyze incentives and game-theoretic risks within the protocol, such as MEV and staking dynamics, to prevent economic exploits.
Qualifications
- Fluency in reading and writing production-level code in systems languages, with a strong preference for Rust.
- Deep expertise in EVM internals, including intimate knowledge of opcodes, storage slots, gas metering, and precompiles.
- Proven track record of offensive security, such as high rankings in CTFs (e.g., Paradigm CTF), high-severity bug bounty submissions, or published research.
- Experience building custom security automation or tooling rather than relying solely on off-the-shelf scanners.
- Bleeding-edge knowledge of the latest blockchain security research, including recent hacks and how these could have been mitigated.
Attributes
- High motor
- Razor-sharp thinker with precise command of language
- Concise, evidence-based communicator
- Excellent organizational and logistical skills
- Intense curiosity and open-mindedness
- Scrappiness; willingness to roll up sleeves
- Growth mindset
Location: NYC or Remote
Workplace: remote
Olo is a leading SaaS platform accelerating digital transformation in the restaurant industry, by helping customers deliver more personalized and profitable guest experiences. As a result, our digital ordering, payment, and guest engagement solutions enable brands to do more with less and make every guest feel like a regular.
Reporting to the Security Engineering Director, the Staff Security Engineer will act as technical lead of the Olo Security Blue Team and work on security defences that allow our systems to keep running while protecting the data of our clients and their customers.
Additionally, you will help in the identification and prioritization of future project initiatives based on risk and execute on cross-functional projects with a high degree of ownership and excellence, all while actively mentoring other team members and elevating the collective team’s capabilities and skill sets. If you are passionate about reducing risk while supporting innovation we encourage you to apply!
You can work remotely from anywhere in the U.S. or at Olo's headquarters in NYC.
What You'll Do
Guide and coach Olo’s Blue Team on Information Protection, Incident Detection and Response and Service Delivery.
You will provide strategic and technical oversight to the team and the program.
Technically lead a team of security engineers and analysts who hunt, detect, and respond to internal and external threats.
Collaborate with customers and partners to strengthen their security posture.
Drive ongoing optimizations by implementing new technologies, replacing technologies, addressing evolving threats, scaling practices and automating security activities.
Ultimately you will keep team member and customers data safe by identifying and mitigating vulnerabilities and risks by providing actionable guidance to product teams.
Information Protection
Lead Olo’s Information Protection program including the selection, testing, implementation and maintenance of security tools and services, security awareness, service provider management and the ongoing testing of those controls.
Oversee Vulnerability Management program including vulnerability assessments, risk scoring and vulnerability resolution.
Oversee Threat Hunting program to detect and mitigate advanced threats.
Manage non-event driven security reviews, including concept reviews, design reviews, patching, firewall rules and system configuration checks.
Apply Web application and API security principles and techniques, such as zero trust, RBAC, authentication, authorization, auditing, rate limiting, challenges, etc., to protect our cloud-based services from unauthorized access and abuse.
Incident Detection and Response
Oversee Incident Detection and Response program including ownership of incident response processes, tools and services and the ongoing continuous improvement of those controls.
Coordinate the detection and response to attacks through all incident phases.
Ensure incident reports are accurate, detailed and relevant.
Monitor, detect, and remediate misconfigurations and security risks across our cloud environments.
Participate in a 24/7 on-call rotation.
Security Services
Oversee Security Services program including security support requests, risk assessments, vendor assessments, PCI and SOC audit support and service provider management.
What We'll Expect from You
5+ years of Security Engineering, Security Operations or Security Architecture experience.
CISSP, GCIH or similar certification preferred.
Experience acting as technical lead to distributed teams consisting largely of remote engineers.
Experience complying with PCI-DSS and other compliance and regulatory standards.
Experience with attacker tactics, techniques and procedures.
Knowledge of information technology, evolving threats, attack patterns, incident response and cyber security standards.
Experience developing and leading incident response, remediation and mitigation activities, and providing status updates and reports.
Experience analyzing security events to discern events that qualify as a legitimate security incident as opposed to non-incidents (ie. incident investigation, implementing countermeasures, and conducting incident response).
Deep understanding of operating system, networking and application concepts.
Experience hardening Windows, MacOS, Linux Containers and Kubernetes.
Familiarity with AWS security best practices and Infrastructure-as-Code.
Experience deploying and maintaining security technologies. (e.g. Access Proxies, API Gateway, Anti-Malware, Application Control, Cloud Security Posture, Data Leak Prevention, Data Mapping, Endpoint Detection & Response, Intrusion Detection System, File Integrity Monitoring, Firewalls, Mobile Device Management, Multi Factor Authentication, SIEM, Static Inspection, Vulnerability Assessment, Web Proxies, WAF and Zero Trust).
Adept at working with internal Product & Engineering, Legal, People & Culture, Finance and GTM teams and external partners, auditors and customers.
Ability to work during critical incidents or to support coverage requirements.
About Olo
Olo is a leading restaurant technology provider with ordering, payment, and guest engagement solutions that help brands increase orders, streamline operations, and improve the guest experience. Each day, Olo processes millions of orders on its open SaaS platform, gathering the right data from each touchpoint into a single source—so restaurants can better understand and better serve every guest on every channel, every time. Over 800 restaurant brands trust Olo and its network of more than 400 integration partners to innovate on behalf of the restaurant community, accelerating technology’s positive impact and creating a world where every restaurant guest feels like a regular. Learn more at olo.com.
We’re remote-friendly. Since 2015, we have been evolving our culture to continue to support a more distributed workforce and now over 75% of our team works remotely across the U.S. If you're in the New York City area, you can choose to work remotely or from Olo's headquarters.
We offer great benefits, such as 20 days of paid time off, 10 sick days, 11 holidays, plus year-end closure, health, dental, and vision coverage for yourself and your family, a 401k match, remote-office stipend, a generous parental leave plan, volunteer time off, gift matching policy, and more!
Our best estimate of the compensation range for this opportunity is $161,000-$220,000 annually, depending on the experience you bring and your location. We look forward to discussing your salary expectations and our full total rewards offerings throughout the interview process.
We encourage you to apply!
At Olo, we believe bringing together people with varied experiences and viewpoints leads to better results. Don't check every box in the job description? Research shows many qualified candidates hold back from applying unless they meet all listed requirements. We're committed to creating a genuine workplace where everyone can contribute their best work—this improves our decision-making and helps us better serve our communities. So if you're enthusiastic about this role but your background doesn't align perfectly with every qualification, we encourage you to apply anyway. You might be exactly the right fit for this or other positions.
All applicants receive consideration for employment. We do not discriminate on the basis of race, religion, colour, national origin, gender identity, sexual orientation, pregnancy, age, marital status, veteran status, or disability status.
California Residents: CCPA notice
Location: London, UK
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
The Security Engineering team's mission is to safeguard our AI systems and maintain the trust of our users and society at large. Whether we're developing critical security infrastructure, building secure development practices, or partnering with our research and product teams, we are committed to operating as a world-class security organization and keeping the safety and trust of our users at the forefront of everything we do.
Responsibilities:
Build security for large-scale AI clusters across multiple clouds and bare-metal data centers, including IAM, network segmentation and encryption controls
Design and implement network security controls: default-deny ingress and egress, segmentation between research, training and production environments, private connectivity across clouds and data centers, cloud firewall policy and mTLS with service identity
Ship these controls as secure defaults using infrastructure as code and GitOps workflows, so new clusters, VPCs and data center links inherit the right boundaries
Build visibility into network traffic and boundary drift, with detection for exfiltration paths and automated remediation where it is safe to do so
Design secure-by-design development workflows and CI/CD pipelines across our services, with expertise in Kubernetes security, container orchestration and identity management
Threat model and assess risk for complex multi cloud and networked environments, and join infrastructure networking, cluster and data center teams at design time so topology, routing and firewall decisions carry our security requirements from day one
Mentor engineers and contribute to hiring and growth of the Security team
You may be a good fit if you:
Have 8-15+ years of software engineering experience implementing and maintaining critical systems at scale
Strong software engineering skills in Python or at least one systems language (Go, Rust, C/C++)
Experience implementing and operating critical systems at scale using DevOps and cloud automation practices such as infrastructure as code
Hands-on network security engineering in cloud or on-prem environments, for example VPC design, cloud firewall policy, egress control, private service connectivity or network segmentation
Working knowledge of Kubernetes security and networking, including network policy, service identity and container hardening
Experience with threat modeling and risk assessment for networked and multi cloud systems
Track record of driving engineering excellence through high standards, constructive code reviews and mentorship
Clear communicator who can translate technical concepts across organizational levels and bring clarity and ownership to ambiguous technical problems
Low ego, high empathy engineer who attracts talent and supports diverse, inclusive teams
Experience supporting fast-paced startup engineering teams
Strong candidates may also have experience with:
Secured Kubernetes networking at scale (CNI, network policy, service mesh or mTLS rollouts) or worked in high-assurance environments where controls had to be evidenced, not just deployed
Worked on interconnects and private connectivity between cloud providers and physical data centers, including management-plane and out-of-band network security
Built network traffic visibility or exfiltration detection systems
Exposure to large-scale distributed training and what it demands of a network
Led cross-functional security initiatives and navigated complex organizational dynamics
Managing infrastructure through automated configuration and policy enforcement
Hardening containerized applications and enforcing security policies
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
£255,000
—
£325,000 GBP
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Athens, Greece
Oikonomakis Law, an international law firm with a demanding and high-profile clientele, is seeking to expand its team in Greece by hiring security personnel.
Requirements
Minimum of five (5) years of professional experience in the security sector.
Clean criminal record.
Valid Category A’ Private Security Personnel License (I.E.P.Y.A. A’).
High School Diploma.
English language proficiency at Lower (B1–B2) level.
Motorcycle license for unlimited engine capacity (Category A).
Private vehicle driving license (Category B).
Graduation from a VIP Protection / Security Escort training school.
Certified training in rapid and defensive driving.
Knowledge of martial arts.
Knowledge and experience in the use of firearms, with an active shooter’s license issued by a recognized shooting club, held for at least two (2) years.
Location: AMER/EMEA/APAC
Workplace: Remote
Asymmetric Research:
Asymmetric Research is a specialized security firm focused on long-term, integrated partnerships with L1/L2 blockchains and DeFi protocols. We help teams build resilient systems, strengthen security posture, and proactively address emerging threats.
About the Role:
We are seeking a Security Engineer to review and secure leading blockchain protocols and web3 projects. You will partner with clients to harden their products through design feedback, deep manual analysis, and automated tooling (fuzzing, static analysis).
Culture:
AR is a fully remote organization and members of our team have been strongly committed to open-source values for decades, having worked at organizations with deep open-source roots and strong security programs including Google, Netflix, Mozilla, Stripe, and Jump Crypto. We pride ourselves on maintaining the highest levels of confidentiality, trust, and professionalism.
Responsibilities:
- Design and implement security and defense-in-depth controls to prevent and limit vulnerabilities.
- Perform cutting-edge security research in popular blockchains and smart contract platforms.
- Develop security tooling and developer workflows to aid in the early detection of vulnerabilities.
- Collaborate with core contributors to conduct internal security audits.
- Shepherd external security audits with the help of leading third-party audit firms.
- Operate bug bounty programs on Immunefi, including leading, monitoring, and triaging submissions.
- Work in a diverse, decentralized team environment with web3 professionals.
- Clearly communicate security risks, findings, and proposed solutions.
- Adhere to the highest standards of integrity, trust, and professionalism.
Requirements:
- Strong desire to understand how things work, with the ability to quickly absorb new information.
- Prior experience with code reviews, reverse engineering, fuzzing and/or binary exploitation.
- Willingness and aptitude to learn different web3 technology stacks written in Rust, Golang or C.
- Prior high ranking on bug bounty leaderboards, code audit contests, or CTF competitions. [Nice to have]
Benefits:
- 25+ days of paid time off
- Comprehensive stipends for home office, wellbeing, professional development, and more
- Pension/401(k) programs
- Life insurance
- Premium healthcare
- Competitive base salary
- Lucrative bonus programs
Location: Cairo, Egypt; Rabat, Morocco
As the Chief Security Officer (CSO) at Müller’s Solutions, you will be responsible for developing and implementing a comprehensive security strategy to protect the organization’s assets, reputation, and overall business operations. This executive-level position entails overseeing all aspects of security, including physical security, information security, and cybersecurity, aligning security initiatives with the organizational goals.
Your role will involve leading a team of security professionals, collaborating with other executives, and serving as the primary point of contact for all security matters. You will ensure that the security policies, standards, and procedures are effectively communicated and adhered to across all levels of the organization.
Key Responsibilities:
Develop and implement a robust security strategy that encompasses risk management, incident response, and compliance with regulatory and industry standards.
Lead and manage the security team, providing direction, mentorship, and fostering a culture of security awareness across the organization.
Conduct regular security audits and assessments to identify vulnerabilities, recommend improvements, and ensure compliance with security policies.
Serve as a key advisor to senior management on security matters and report on security incidents, risks, and the status of security programs.
Work closely with IT and operations teams to integrate security measures into the organization's infrastructure and processes.
Develop and manage security budgets, ensuring resources are allocated effectively to meet security objectives.
Stay informed of the latest security threats, trends, and technologies to continuously enhance the organization's security posture.
Requirements
Requirements:
Bachelor’s degree
in cybersecurity, information technology, or a related field; a Master’s degree is preferred.
10+ years of experience
in security management, with a proven track record of leadership roles, particularly in a corporate environment.
Extensive knowledge of security frameworks and standards including ISO 27001, NIST, and CIS.
Proven experience in developing, implementing, and managing security programs related to both
cybersecurity
and
physical security
.
Strong understanding of risk management practices, incident response protocols, and security incident management.
Experience with security technologies, including firewalls, intrusion detection systems, and data loss prevention tools.
Exceptional analytical skills and problem-solving abilities, coupled with strong communication and leadership skills.
Certification such as CISSP, CISM, or CCISO is highly desirable.
Ability to thrive in a fast-paced, dynamic environment with changing priorities.
Preferred Qualifications:
Experience with compliance frameworks such as GDPR, HIPAA, or PCI-DSS.
Experience in incident response and developing business continuity planning.
Proven ability to influence and drive change at all levels of the organization.
Benefits
Why Join Us:
Opportunity to work with a talented and passionate team.
Competitive salary and benefits package.
Exciting projects and innovative work environment.
Location: US / Remote
Workplace: remote
About You
You’re a self-starter who thrives on tackling the toughest and most meaningful problems, even if they are the most difficult problems. You’re comfortable with the unknown and understand that #startuplife means that you’re going to be wearing multiple hats. And that’s what motivates you. You’re accountable and obsessed with improvement, both in yourself and in others. You’re up to the challenge of building a world-class company that aims to be the infrastructure for more secure software for all.
About the Company
CertiK leads blockchain security by protecting smart contracts and blockchains with cutting-edge Formal Verification technology. Founded by Computer Science professors of Yale University and Columbia University, CertiK has audited and secured over $500B in assets, including many of the world’s top blockchain projects.
About the Role
The primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more.
As a Security Engineer at CertiK, you will contribute to the security offerings of the company, working with the rest of the security team to deliver the best products and services. You might engage directly with CertiK’s existing and future clients, participate in expanding security-related products and services, and follow the blockchain world on emerging security problems and trends.
Responsibilities
Conduct in-depth security evaluations on blockchain nodes, validators, consensus mechanisms, mempool behavior, networking layers, and chain modules.
Review and analyze blockchain frameworks such as Cosmos SDK, CometBFT, Geth, Hyperledger, and other L1/L2/L3 infrastructures.
Identify security issues related to consensus safety, chain halting, permission models flaws, block production vulnerabilities.
Implement and run custom scripts and test scenarios to simulate real-world validator/network behaviors, chain stress conditions, and edge cases.
Requirements
Strong written and spoken English communication skills.
High diligence and strong attention to detail, especially in multi-step testing and long-running experiments.
Solid understanding of blockchain architecture and node internals (e.g., Cosmos SDK / CometBFT, Go-Ethereum (Geth) internals, and Hyperledger Fabric / Besu)
Strong scripting & automation skills with Python or Bash
Familiarity with Docker and containerized testing environments.
Prior experience in manual Web3 security auditing is preferred, but not required.
What We Offer
Opportunity to shape the national conversation on blockchain and security.
Collaborate with industry-leading security researchers, technologists, and global institutions.
Flexible work environment and mission-driven culture.
Compensation: If the role is performed in the US, the target annual compensation is $120,000 - $180,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
#blockchain
#startups
#hiring
CertiK accepts applications for this position on an ongoing basis.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Location: US / Remote
Workplace: remote
About You
You’re a self-starter. You believe in tackling the most important problems, even if they are the most difficult problems. You’re comfortable with the unknown and understand that #startuplife means that you’re going to be wearing multiple hats. And that’s what motivates you. You’re accountable and obsessed with improvement, both in yourself and in others. You’re up to the challenge of building a world-class company that aims to be the infrastructure for more secure software for all.
About the Company
CertiK leads blockchain security by securing smart contracts and blockchains with cutting-edge Formal Verification technology. Founded by Computer Science professors of Yale University and Columbia University, CertiK has audited and secured over $500B in assets, including many of the world’s top blockchain projects.
About the Role
The primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more.
As a Security Engineer at CertiK, you will contribute to the security offerings of the company, working with the rest of the security team to deliver the best products and services. You might engage directly with CertiK’s existing and future clients, participate in expanding security-related products and services, and follow the blockchain world on emerging security problems and trends.
Responsibilities
Perform end-to-end security services, including consulting, reviewing, auditing, verifying, testing, and delivering detailed security assessments for blockchain systems such as smart contracts, web3 protocols, L1/L2/L3 infrastructures, and dApps.
Conduct comprehensive manual code reviews to identify vulnerabilities, logical flaws, economic attacks, and non-obvious edge cases across Solidity, Golang, Rust or other blockchain languages.
Develop and refine threat models and attack surfaces, covering economic, technical, operational, and trust-assumption risks for blockchain protocols.
Design and execute security tests, including property-based testing and gas-related analysis.
Requirements
Bachelor's degree in Security, Computer Science, Mathematics, Physics, and Engineering
The ability to efficiently triage and juggle multiple priorities and deadlines.
Specialist-level knowledge of cybersecurity and security auditing. Can write and deploy smart contracts/blockchain infrastructure and write tests with frameworks.
Familiar with classic attack vectors and vulnerabilities such as reentrancy, sandwich attacks, overflow/underflow
The ability to effectively communicate with the clients and internal team, both verbally in English and in writing, about security services and requirements.
[Preferred] Prior hands-on security auditing experience.
What We Offer
Opportunity to shape the national conversation on blockchain and security.
Collaborate with industry-leading security researchers, technologists, and global institutions.
Flexible work environment and mission-driven culture.
Compensation: If the role is performed in the US, the target annual compensation is $120,000 - $180,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
#blockchain
#startups
#hiring
CertiK accepts applications for this position on an ongoing basis.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Location: Dubai, United Arab Emirates
As a Security Architect at Müller’s Solutions, you will be pivotal in defining the security architecture strategy for our organization. You will be responsible for designing and implementing comprehensive security solutions and frameworks that protect our critical information assets. This role requires a deep understanding of security principles, technologies, and industry standards as you collaborate with various departments to safeguard our digital infrastructure.
Key Responsibilities:
• Develop and maintain the security architecture framework, policies, and procedural guidelines to ensure compliance with regulatory and organizational requirements.
• Conduct security assessments, threat modeling, and risk analysis to identify vulnerabilities and recommend appropriate mitigation strategies.
• Collaborate with IT and development teams to integrate security practices throughout the software development lifecycle.
• Design and implement robust security solutions, including identity and access management, encryption, and network security measures.
• Stay updated on the latest security trends, threats, and technologies to proactively address emerging risks.
• Provide training and guidance to team members and stakeholders on security best practices and risk management.
Requirements
Requirements:
Bachelor’s degree
in Computer Science, Information Technology, Cybersecurity, or a related field.
5+ years of experience
in security architecture or a related role, with a strong focus on
designing and implementing secure systems and infrastructures
.
End-to-end experience in
designing and implementing secure infrastructure environments
supporting
classified data
(Top Secret, Secret, Confidential, etc.).
Proven expertise in
data classification
,
data governance
, and
secure data transfer workflows
between
classified and non-classified zones
.
In-depth knowledge of
security frameworks, practices, and standards
such as:
ISO/IEC 27001:2022
NIST SP 800-53 Rev. 5
NIST SP 800-37 Rev. 2
NIST SP 800-46 Rev. 2
NIST FIPS 140-2
NIST FIPS 199
Secure Controls Framework (SCF)
CIS Critical Security Controls Version 8
CIS Benchmarks
OWASP
Familiarity with
regional and governmental security regulations
, including
UAE Information Assurance (IA)
and
Ministry of Defence (MOD)
requirements.
Experience with
security technologies
such as firewalls, SIEM, endpoint protection, and
identity and access management (IAM)
solutions.
Technical proficiency in cloud security
, with experience in platforms such as
AWS
or
Microsoft Azure
.
Strong
analytical
,
problem-solving
, and
communication skills
, with the ability to clearly articulate complex security concepts to technical and non-technical audiences.
Preferred Qualifications:
Master's degree in a related field.
Relevant certifications such as CISSP, CISM, or CCSP.
Experience with security compliance and governance frameworks.
Knowledge of secure coding practices and experience in a DevSecOps environment.
TOGAF certification would be an asset.
Benefits
1- Attractive Package.
2- Family Benefits.
3- Visa.
4-Air Tickets.
Location: San Francisco, CA | New York City, NY | Seattle, WA; Washington, DC
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
At Anthropic, we are pioneering new frontiers in AI that have the potential to greatly benefit society. However, developing advanced AI also comes with risks if not properly safeguarded. That's why we are seeking an exceptional Detection and Response engineer that will be on the frontlines to build solutions to monitor for threats, rapidly investigate incidents, and coordinate response efforts with other teams. In this role, you will have the opportunity to shape our security capabilities from the ground up alongside our world-class research and security teams.
Responsibilities:
Lead cybersecurity Incident Response efforts covering diverse domains from external attacks to insider threats involving all layers of Anthropic’s technology stack
Develop and deploy novel tooling that may leverage Large Language Models to enhance detection, investigation, and response capabilities
Create and optimize detections, playbooks, and workflows to quickly identify and respond to potential incidents
Review Incident Response metrics and procedures and drive continuous improvement
Work cross functionally with other security and engineering teams
Note: This position will require participation in an on-call rotation
You may be a good fit if you:
3+ years of software engineering experience, with security experience a plus and/or
5+ years of detection engineering, incident response, or threat hunting experience
A solid understanding of cloud environments and operations
Experience working with engineering teams in a SaaS environment
Exceptional communication and collaboration skills
An ability to lead projects with little guidance
The ability to pick up new languages and technologies quickly
Experience handling security incidents and investigating anomalies as part of a team
Knowledge of EDR, SIEM, SOAR, or related security tools
Strong candidates may also have experience with:
Experience performing security operations or investigations involving large-scale Kubernetes environments
A high level of proficiency in Python and query languages such as SQL
Experience analyzing attack behavior and prototyping high quality detections
Experience with threat intelligence, malware analysis, infrastructure as code, detection engineering, or forensics
Experience contributing to a high growth startup environment
Deadline to apply:
None. Applications will be reviewed on a rolling basis.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$300,000
—
$405,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Cairo, Egypt
As a Remote Huawei Network and Security Administrator at Müller's Solutions, you will oversee the management and security of our Huawei network infrastructure from a remote work setting. This role demands proficiency in Huawei technologies along with a strong grasp of network security principles. You will be instrumental in maintaining the performance, reliability, and security of our network systems, working closely with various teams to apply best practices in network security.
The responsibilities of the Huawei Network and Security Administrator include the
design, implementation, configuration, administration, and daily operation
of the organization’s Huawei network and security infrastructure.
This encompasses
LAN/WAN, SD-WAN, WLAN, firewalls, VPNs, NAC, and iMaster NCE management systems
. The position guarantees
high availability, security, scalability, and performance
of network and security services throughout datacenter, cloud, and branch environments.
Key Responsibilities:
Design
enterprise network architecture
using Huawei switches, routers, firewalls, and SD-WAN technologies.
Participate in network capacity planning, redundancy, and high availability design.
Design and implement
segmentation, VLANs, QoS policies
, and routing strategies (OSPF, BGP, and static routing).
Support network integration with
cloud environments
and third-party services.
Develop
network topology diagrams, documentation, and configuration standards
.
Deploy and configure
Huawei switches (S series), routers (AR series), and firewalls (USG, HiSec)
.
Configure
Huawei iMaster NCE-Campus / NCE-WAN / SD-WAN controllers
for centralized orchestration and policy enforcement.
Implement
NAC (Network Access Control)
and user authentication using
Huawei Agile Controller
.
Manage
VPN configurations
, including IPsec and SSL VPNs for secure remote access.
Configure
WLAN controllers (ACs) and APs
for campus wireless networks.
Integrate Huawei devices with
SIEM or centralized monitoring tools
(e.g., eSight, iMaster NCE, or 3rd-party tools).
Monitor and maintain
network availability, performance, and security posture
through iMaster NCE dashboards and alarms.
Perform
daily health checks
, log reviews, and event correlation.
Troubleshoot connectivity, latency, and configuration issues across LAN, WAN, and SD-WAN.
Manage
user and device access
, network policies, and firewall rule changes following security best practices.
Maintain
IP address management, DNS, DHCP, and routing tables
.
Ensure
network configuration backups
, firmware updates, and patch management are regularly performed.
Perform
root cause analysis
for network incidents and produce detailed incident reports.
Requirements
Requirements:
Bachelor’s degree
in Computer Science, Information Technology, or a closely related discipline.
Over 5 years of experience
in network and security administration, ideally with Huawei products.
Practical experience with:
Huawei iMaster NCE (Campus / WAN / SD-WAN / Security)
Huawei AR routers, S-Series switches, USG firewalls, and AC controllers
Routing protocols including OSPF, BGP, RIP, and static routing
NAT, ACL, QoS, VLAN, VRRP, MSTP, DHCP, and DNS
Network monitoring solutions (eSight, NCE, SolarWinds, or equivalent)
In-depth understanding of
network security principles, VPNs, IPS/IDS, SSL inspection, and NAC
.
Experience working in
multi-site enterprise settings
and
cloud environments
.
Familiarity with
Huawei HCIA / HCIP / HCIE certifications
is strongly preferred.
Exceptional troubleshooting, analytical, and documentation capabilities.
Strong ability to communicate and collaborate effectively across teams.
Preferred Certifications
Huawei HCIP-R&S / HCIP-Security / HCIP-Datacom / HCIP-SDWAN
Huawei HCIE-Datacom or HCIE-Security
ITIL Foundation v4
(for operational process management)
CCNA/CCNP
or equivalent multi-vendor network understanding (advantageous)
San Francisco, CA | New York City, NY | Seattle, WA
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.