Вакансии

Location: Lisbon, Portugal About the role iCapital is building a modern Application Security program. We’re looking for a senior, hands-on engineer to join a small team and help shape how we design, build and secure our applications—from secure design and threat modelling to API security, automation and security checks in CI/CD. You will sit within the Information Security organization and work directly with the Head of AppSec, engineering teams and product stakeholders. You should enjoy understanding complex applications, investigating weaknesses in code and architecture, and helping developers implement practical fixes. We’re still developing the program’s processes, so you’ll take ownership of defined technical workstreams and help establish how we work. This role combines hands-on delivery with the ability to set technical direction, influence engineering decisions and build repeatable security practices. What you’ll do Help build and mature the Secure Design and Threat Modeling practice, defining review methodology, standards and sign-off criteria with the Head of AppSec. Drive API security posture, assessing exposure, authentication, authorization and business-logic risks. Conduct targeted application and API security testing and support offensive security initiatives to identify weaknesses and validate controls. Build and maintain Python automation for security workflows, finding triage, data enrichment and integrations with development tools. Work with developers to investigate and fix findings from penetration testing, static application security testing (SAST) and software composition analysis (SCA), improving scan quality and reducing unnecessary friction. Embed security into development through design reviews, CI/CD checks, secure coding guidance and reusable solutions. Establish clear remediation ownership, priorities, timelines and escalation paths, working with engineering teams to validate fixes and resolve risks. What you’ll bring Substantial hands-on application security experience, whether gained in a dedicated security role or through security-focused software engineering work. Secure design and threat modeling skills, grounded in practical knowledge of web and API vulnerabilities, exploitation patterns and effective fixes. The ability to review application code, investigate security issues and engage with developers at technical depth. Python proficiency and experience building maintainable automation that others can rely on. Experience integrating security into development workflows through design reviews, developer guidance or CI/CD. Comfort owning technical workstreams independently, making risk-based decisions and influencing architecture across engineering and product teams. We value demonstrated security expertise and engineering ability over specific previous job titles. You should bring depth in the core disciplines, but you do not need to have led every AppSec specialty. Helpful, but not required Deeper experience in application penetration testing, GraphQL security or business-logic testing. Familiarity with cloud-native environments and attack surface management. Software development experience with Ruby or Scala. Experience with AI-assisted security tooling or AI/LLM application security. We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday). Benefits iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO). For additional information on iCapital Network, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc

Location: San Francisco; New York Workplace: Hybrid WHY HARVEY At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come. This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched. Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you. At Harvey, the future of professional services is being written today — and we’re just getting started. ROLE OVERVIEW As a Senior Software Engineer on the Product Security team at Harvey, you will have the opportunity to build security directly into the product. Harvey stores and processes our customers’ most sensitive data and our entire business model depends on a foundation At Harvey, you will find that security is paramount at every stage of our product lifecycle. In this role you will drive high-leverage security initiatives that raise the bar for the entire company — balancing hands-on technical work with cross-functional leadership and mentorship. This is a rare opportunity to design and build a world-class product security program at one of the fastest growing AI-native companies. The Harvey Security organization has an engineering-first mindset and team members bring a variety of skills and come from various backgrounds. What the team shares in common is a desire to drive impact at scale and solve complex security challenges together. The problems we are solving today are often unsolved in the industry - making this an incredible career and personal growth opportunity. WHAT YOU’LL DO - Lead critical security initiatives with Engineering, Product and Design. - Build cross-functional partnerships and repeatable business processes at scale. - Define and implement product security standards. - Incorporate secure design principles at every stage of development. - Proactively identify potential threats and vulnerabilities in our systems. - Develop and implement solutions to safeguard Harvey products. - Review product features and engineering code changes - Drive secure baselines and security-first principles company-wide. - Build secure-by-default libraries and tooling that enable product velocity at scale. - Mentor and guide engineers through code reviews, design reviews, and technical guidance WHAT YOU HAVE - 5+ years of experience in product security, application security, offensive security, and/or security-focused software engineering - Experience identifying and remediating software vulnerabilities, demonstrated through CVEs, bug bounty awards, published research, or prior work experience. - Experience delivering high-quality, production software. - Ability to drive prioritization and tradeoff discussions with cross functional teams. - Excellent communication and collaboration skills, particularly when translating security risks into business terms for non-security stakeholders. - Excel at measuring and communicating security metrics and business risk reduction as it relates to product security investments. - Experience mentoring engineers across engineering through code and design reviews. - Proactive approach to solving complex security challenges. - Positive attitude and willingness to learn. NICE TO HAVE - Experience building security programs or practices at hyper-growth startups - Background with cloud environments (Azure, GCP, AWS) and cloud-native security patterns - Experience with AI/ML systems and emerging security considerations for LLM-based applications Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing accommodations@harvey.ai

Location: San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Corporate Security protects the environment Anthropic's people work in every day: their laptops and phones, their identities, the tools they collaborate in and the company data that flows through all of it. Everything that makes Claude what it is sits behind that environment. We keep company access on devices we manage, make those devices hard to compromise and right-size what any one of them can reach, while caring a great deal about the day-to-day experience of the people using them. The company is growing quickly and this team is growing with it, so we treat the work as an engineering discipline: controls as code and automation over queues, built to scale with headcount rather than strain against it. As a Security Engineer here you'll drive significant parts of that work end to end. You'll set technical direction and turn it into shipped tooling. When a control collides with someone's workflow, you'll find the path that keeps them moving without giving up the protection. You'll be handed problems rather than task lists and you'll find as many yourself: threat-modeling the environment to surface what matters, fixing it and bringing the evidence that shapes what the team prioritizes next. This is a senior, hands-on individual contributor role. Key responsibilities Drive endpoint hardening across macOS, Windows, Linux, and ChromeOS, including device management configuration, application allowlisting, patching, and browser policy, favoring controls that are versioned, reviewable, and repeatable over one-off configuration Extend device-trust and zero-trust access controls so company systems are reached from managed devices bound to the right person and carrying the right level of access, treating the experience of fellow employees as a design constraint rather than an afterthought Build the automation and integrations that let the team scale with the company: joiner/mover/leaver automation across identity and device management, exception and expiry workflows, posture-driven policy, and Claude-assisted triage of review queues Lead SaaS and identity governance, including third-party OAuth grants, delegated admin access, chat-platform apps, browser extensions, and software security reviews, turning recurring decisions into policy and tooling Partner across the wider Security team, IT, and Engineering on telemetry, detections, and shared standards, and help define how a company that increasingly runs on AI agents does so securely and at scale Minimum qualifications Hands-on endpoint security engineering on macOS, Windows, Linux, or ChromeOS, such as MDM and declarative device management profile engineering, application allowlisting or binary authorization, system extensions and endpoint security frameworks, or their platform equivalents Proficiency in Python and scripting languages generally; you architect and build integrations, automation, and internal tooling as a normal part of the job, and can write a detection when the work calls for it Working depth in identity and access management, SaaS security, and zero-trust access Threat-modeling judgment that finds the problems worth solving and the ability to scope them, define "done," and drive them to completion Care for Anthropic's mission and the part corporate security plays in it Preferred qualifications Experience defining the scope and choosing the tooling for a security program rather than inheriting it Experience shipping an enforcement change to a large user population: using data to find what will break before it does, staging the rollout, building the alternative path for affected workflows, and moving people onto it ahead of enforcement Endpoint depth across more than one of macOS, Windows, Linux, and ChromeOS, with the judgment to harden for the threats that matter rather than to a checklist Mobile security across managed and BYOD contexts, including protecting people and devices in higher-risk settings such as international travel Experience bringing security governance to a modern SaaS environment, including third-party integrations, delegated access, and the long tail of internally built and AI-generated apps, in a way that speeds decisions up rather than slowing them down Configuration-as-code, infrastructure-as-code, and CI/CD applied to corporate infrastructure LLM-assisted security tooling you built that materially changed what a team could cover, and the judgment to know which work to hand to a model, which to keep, and how to combine the two A track record of getting security controls adopted across an organization through influence and partnership rather than authority Deadline to apply: None. Applications will be received on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $405,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Обязанности: • Работать с системами информационной безопасности (SIEM, SOAR/IRP, NTA) • Заниматься мониторингом и анализом событий ИБ • Регистрировать инциденты ИБ и доводить их до закрытия • Взаимодействовать с коллегами. Требования: • Знание современных тактик и техник атакующих, основных векторов атак на корпоративные инфраструктуры, способов их обнаружения и противодействия; • Опыт работы с KSC, IRP/SOAR системами; • Понимание работы SOC (Security Operation Center) • Понимание работы средств защиты информации (FW, IDS/IPS, АВЗ, SIEM и пр.); • Ответственный подход к решению задач, способность работать в режиме многозадачности; • Высшее техническое образование (ИБ или ИТ); • Опыт работы не менее года. Условия: • Работу в федеральной компании стратегического масштаба; • Сменный график работы (сутки/трое) в комфортных условиях • Широкий стек технологий и проектов, возможность гибко строить свой карьерный трек; • Зарплату, соответствующую опыту и навыкам, прозрачную систему мотивации; • Поддержку профессионального развития - курсы и тренинги внутри департамента; • Расширенный пакет ДМС со стоматологией; • Корпоративная профсоюзная программа; • Комфортный офис рядом с м. ВДНХ; • Материальную помощь к отпуску, конкурентоспособную систему премирования.

Обязанности: • Работать с системами информационной безопасности (SIEM, SOAR/IRP, NTA) • Заниматься мониторингом и анализом событий ИБ • Регистрировать инциденты ИБ и доводить их до закрытия • Взаимодействовать с коллегами. Требования: • Знание современных тактик и техник атакующих, основных векторов атак на корпоративные инфраструктуры, способов их обнаружения и противодействия; • Опыт работы с KSC, IRP/SOAR системами; • Понимание работы SOC (Security Operation Center) • Понимание работы средств защиты информации (FW, IDS/IPS, АВЗ, SIEM и пр.); • Ответственный подход к решению задач, способность работать в режиме многозадачности; • Высшее техническое образование (ИБ или ИТ); • Опыт работы не менее года. Условия: • Работу в федеральной компании стратегического масштаба; • Сменный график работы (сутки/трое) в комфортных условиях • Широкий стек технологий и проектов, возможность гибко строить свой карьерный трек; • Зарплату, соответствующую опыту и навыкам, прозрачную систему мотивации; • Поддержку профессионального развития - курсы и тренинги внутри департамента; • Расширенный пакет ДМС со стоматологией; • Корпоративная профсоюзная программа; • Комфортный офис рядом с м. ВДНХ; • Материальную помощь к отпуску, конкурентоспособную систему премирования.

Location: New York; Stockholm; San Francisco Workplace: OnSite ABOUT US: AI NEEDS A NEW INFRASTRUCTURE LAYER. WE'RE BUILDING IT AT MODAL. Every era of computing brought new workloads that previous infrastructure couldn't support: mainframes, databases, and the cloud. Each time, the company that rebuilt the layer underneath defined the decade. AI is no different, except it touches everything instead of one slice, and the window to build the layer underneath it is open right now. Our customers include category-defining companies like Ramp https://modal.com/blog/how-ramp-built-a-full-context-background-coding-agent-on-modal, Cognition, DoorDash, and Suno. They rely on Modal for instant GPU access, sub-second container starts, and native storage, so it's simple to serve low-latency inference, fine-tune models, and access production-ready sandboxes at scale. We've passed $1B in annualized run rate, up 15x from a year ago. In October 2026 we raised a $750M Series D led by Accel at a $15.75B valuation. Our team includes creators of popular open-source projects (e.g.,Seaborn https://github.com/mwaskom/seaborn,Luigi https://github.com/spotify/luigi), academic researchers, international olympiad medalists, and experienced engineering and product leaders with decades of experience. THE ROLE: We’re looking for a Detection & Response Engineer to build the systems that help us identify, investigate, and respond to threats across our platform. This is an engineering role focused on automation. You’ll build detections, investigation tooling, and response capabilities that scale with our infrastructure, using AI where it meaningfully improves signal, investigation speed, and operational effectiveness. You’ll work closely with infrastructure, platform, and security engineers to ensure every incident makes the platform more resilient. WHAT YOU'LL WORK ON: Detection Engineering - Design and build high-fidelity detections for attacks, abuse, and anomalous behavior across our infrastructure and production systems - Continuously improve detections based on telemetry, threat intelligence, and lessons learned from incidents - Improve visibility across cloud infrastructure, containers, identity systems, and production services Incident Response - Lead or participate in investigations spanning production infrastructure, cloud environments, and internal systems - Build playbooks and automation that reduce investigation time and improve response consistency - Drive post-incident improvements that eliminate entire classes of future incidents Security Tooling & Automation - Build internal tooling that improves detection, investigation, and response workflows - Leverage LLMs to automate repetitive analysis, accelerate investigations, and surface actionable insights from security telemetry - Improve the collection, quality, and usability of security telemetry across the platform Engineering Partnership - Partner with engineering teams to ensure new systems are observable and secure by default - Help teams instrument services with the telemetry needed for effective detection and response - Drive security improvements that make the platform easier to defend over time YOU MAY BE A FIT IF: - You have experience in detection engineering, incident response, security engineering, or software engineering with a strong security focus - You have strong software engineering skills and experience building production systems. - You’ve investigated security incidents in cloud-native or distributed environments - You’re familiar with modern cloud infrastructure, Kubernetes, Linux, and networking - You’ve built detections using logs, telemetry, behavioral signals, or large-scale event data. - You have strong SQL skills for investigating security events and developing detections - You’re interested in applying AI and LLMs to detection, investigation, and response, and in understanding emerging threats involving AI-powered systems - You have strong written and verbal communication skills NICE-TO-HAVE: - Experience building AI- or LLM-powered security tooling - Experience with SIEM, SOAR, or EDR platforms - Experience with Kubernetes security or large-scale cloud infrastructure - Experience with threat hunting, malware analysis, or digital forensics - Experience contributing to security operations in a high-growth engineering organization

Location: San Francisco, CA; New York, NY Workplace: OnSite ABOUT US At LangChain, our mission is to enable every company to own its intelligence. We believe agents will transform how companies operate, and we're building the foundation to make that future possible. Our open-source harnesses and LangSmith platform give developers and enterprises the infrastructure to run, improve, and govern agents at scale. We've raised $460M to date, with our most recent funding round valuing the company at $3B, backed by leading investors including Sequoia, Benchmark, IVP, and CapitalG. As we continue to expand our platform and tackle some of the hardest challenges in agent engineering, every team member has the opportunity to make a meaningful impact and help shape both our technology and the future of the industry. More than 7,000 organizations rely on LangSmith, from fast-growing startups to Fortune 500 enterprises, including NVIDIA, Bridgewater, LinkedIn, Workday, and Rippling. We're just getting started on making high-performing agents easier to build and manage at scale. ABOUT THE TEAM The Security team ensures that while AI moves at breakneck speed, everyone driving the racecar is wearing a seatbelt. We secure LangChain's core platform and protect AI agents from emerging threats. We work across the stack so developers can confidently ship from prototype to production without compromising on safety or privacy. ABOUT THE ROLE You'll be the hands-on detection and response engineer responsible for how we see, stop, and learn from threats across LangChain's production platform, cloud infrastructure, and the services that host and execute agentic workloads. You'll partner closely with Product Security to turn threat models, vulnerabilities, and incidents into telemetry, detections, and durable defenses. Your primary focus is engineering: building detection, investigation, and response systems that scale the Security team's impact beyond what manual operations allow. We are looking for engineers who think like builders, not just operators — strong software skills are a must. This role participates in an incident on-call rotation, but its core focus is engineering systems that reduce risk, speed up investigations, and make incidents less frequent and less costly. Location/City: San Francisco or NYC WHAT YOU'LL DO - Own the detection lifecycle: Translate threat models, incidents, and attacker behavior into telemetry requirements and detections-as-code. Validate coverage, measure signal quality, tune false positives, and continuously test whether defenses work. - Build security monitoring and telemetry: Design the telemetry pipeline end-to-end across cloud (GCP/AWS), Kubernetes, and the LangSmith/LangGraph control plane. Instrument services, define the signals that matter, and make security data reliable and useful. - Engineer investigations and threat hunting: Build tools and workflows for proactive hunting, evidence collection, incident scoping, and containment. Turn investigation findings into new detections and lasting improvements. - Use agents to scale the team: Build reliable internal AI agents and automation that triage alerts, enrich findings, gather evidence, scope incidents, and accelerate routine security work. Design human-in-the-loop controls and evaluations so automation is safe, observable, and trustworthy. - Lead incident response and participate in on-call: Triage, scope, contain, and remediate security incidents, then drive postmortems that produce durable engineering changes. - Partner with Product Security: Turn product threat models and vulnerability findings into production monitoring, and feed real-world detection and incident learnings back into secure design. WHAT YOU'LL BRING - 5+ years in security engineering, with meaningful experience in detection engineering, security operations, or incident response — and the software skills to build your way out of repetitive work. - Strong software engineering in Python or Go (TypeScript a plus). You design maintainable systems and write production code, not just one-off scripts. - Cloud and Kubernetes detection depth: Experience with GCP or AWS logging, Kubernetes audit and runtime telemetry, workload identity, and turning raw signals into actionable detections. - Detection and adversary expertise: The ability to model realistic attacker behavior, hunt across complex systems, test detection coverage, and distinguish meaningful signal from noise. - Hands-on incident response: You've participated in on-call, led incidents, and written postmortems that changed how a team operates. - Experience building reliable automation or developer-facing systems: You can design APIs and workflows, instrument what you build, evaluate quality, and operate it in production. - A pragmatic product mindset: You can identify users and requirements, prioritize the highest-leverage problems, define success, and ship iteratively. NICE TO HAVE - Experience building or operating AI agents for security workflows such as alert triage, investigation, evidence collection, or human-in-the-loop response. - Proficiency using AI tooling to accelerate security investigations and engineering work. - Understanding of AI threats, adversarial testing, and the security boundaries of LLM and agent workloads. - Exposure to SOC 2 or ISO 27001 monitoring and evidence automation. - Experience with infrastructure as code such as Terraform or Helm. - Experience securing both SaaS and self-hosted or air-gapped deployments. Annual salary range: $185,000- $250,000 USD COMPENSATION PHILOSOPHY: We offer competitive compensation that includes base salary, variable compensation for relevant roles, meaningful equity, benefits, and perks. We are hiring for this role across a range of scope, and the compensation band reflects that. Your offer depends on what we learn about your impact, craft, leadership, and communication during the interview process. We will tell you early where you’re tracking and talk comp with you before offer stage. Team members in the EU, UK, and APAC receive locally competitive benefits aligned with regional norms and regulations. BENEFITS Benefits include medical, dental, and vision coverage, flexible vacation, a 401(k) plan, meals on in-office days in the US and more.

Location: Noida, India Workplace: hybrid TeamViewer provides a leading Digital Workplace platform that connects people with technology—enabling, improving and automating digital processes to make work work better. Our software solutions harness the power of AI and shape the future of digitalization. We believe that our diverse teams and strong company culture are key to the success of our products and technologies, that hundreds of millions of users around the world and around 645,000 customers across all industries rely on. With more than 1,900 employees worldwide, we celebrate the unique perspectives and talents that each individual brings to the table and foster a dynamic work environment where new ideas thrive. Are you ready to join our team and make an impact? Responsibilities Join our company as Security Engineer (all genders) and become part of an agile team designing, building, and improving security features across the TeamViewer product line and its supporting infrastructure. These will be some of your responsibilities: Design and implement security controls and mechanisms directly in our products, with a strong focus on secure-by-design principles. Identify, analyze, and mitigate vulnerabilities through threat modeling, security reviews, and hands-on testing (including aspects of offensive security). Collaborate closely with development teams to integrate security into the SDLC, from design to deployment, and improve existing security architectures. Drive the implementation of technical solutions to detect and prevent abuse scenarios in TeamViewer products. Contribute to security-related automation, tooling, and processes to scale security across engineering teams. Act as a security consultant for product and engineering teams, helping them make risk-informed design and implementation decisions aligned with the overall security strategy. Participate in applied AI security initiatives, focusing on securing AI-driven features and leveraging AI to improve security capabilities. Prepare and deliver secure coding trainings, workshops, and guidance to development teams. Requirements Degree in computer science or security or equivalent working experience Ideally 5+ years professional experience in a similar position, specifically focused on security issues Strong interest and understanding of security aspects of AI usage in Software Development process Knowledge of C++ and at least a basic understanding of other programming languages such as Java, C# or Go Good foundation in web architectures as well as scalable distributed systems Experience in implementing encryption, cryptography, software security and authentication, both in the field of software development and the design of network protocols. Passion about finding secure, innovative and user-friendly solutions for highly complex problems Experience in mentoring, consulting and guiding other developers and teams of developers in building secure solutions Experience and interest in working in distributed teams Fluency in English is mandatory, further languages such as German are a plus TeamViewer is an equal opportunities employer and is committed to building an inclusive culture where everyone feels welcome and supported. We C-A-R-E and understand that our diverse, values-driven culture makes us stronger. As we continue to grow as a company, we also focus on enabling our employees to grow both personally and professionally. We are proud to have an open and embracing workplace environment that will empower you to be your best no matter your gender, civil or family status, sexual orientation, religion, age, disability, education level, or race. If you require any accommodations or adjustments during the application or hiring process, including interview or onboarding support, please reach out to your Talent Acquisition Partner, who will be happy to support you.

Location: Singapore, Singapore Workplace: Hybrid ABOUT PAVE BANK Pave Bank is the world’s first programmable business bank. Built by the founders behind Monzo and BigPay, we’re redefining global business banking by combining programmable financial infrastructure with world-class client experiences. ABOUT THE ROLE We’re looking for a Junior Security Engineer who is independent, curious, and has an adversary first mindset - someone who thinks like an attacker to keep our platform secure. You'll be a critical guardian of Pave Bank: identifying weaknesses, closing loopholes, and empowering our Product and Engineering teams to ship quickly without compromising security. You'll get hands-on exposure across the full security lifecycle - from code review to penetration testing - with mentorship from experienced engineers. WHAT YOU'LL DO - Review platform and product code to identify security issues and guide engineers toward secure solutions - Build internal tools, libraries, and automation to improve security testing and enforcement - Continuously test internal and external applications for vulnerabilities - Support third-party application security reviews and penetration tests - Help educate engineering and product teams on secure coding and design practices - Stay current on emerging threats and attack techniques, and assess how they apply to our systems WHAT WE'RE LOOKING FOR MUST HAVE - An adversary-first mindset - you instinctively ask "how would I break this?" - Familiarity with common attacker tools and techniques, and how insecure development practices get exploited (e.g. OWASP Top 10) - Programming experience in at least one modern language (Go, Python, or TypeScript). - Clear communication skills - you can explain security concepts to technical and non-technical audiences alike. - Self-motivation and a genuine drive to keep learning NICE TO HAVE: - Exposure to blockchain technologies and cryptocurrency systems, and their security implications - Experience with security tooling, CTFs, bug bounties, or open-source security contributions - Prior internship or work experience in a fast-moving startup environment WHY JOIN US - We recently raised a $39M Series A led by Accel, positioning us for major growth — a rare chance to join while things are still moving fast - We're building a fully-licensed programmable bank, rearchitecting how money moves between businesses, across borders, and between traditional and digital finance - We ship fast, think deeply, and expect high ownership — your work will hit production quickly across several parts of the business - You'll work alongside engineers from Monzo, Atom Bank, Blockdaemon, GXS, and Grab

Location: USA (Remote); Canada (Remote) Workplace: Remote Mysten Labs’ mission is to advance the internet through step-function improvements in what technology makes possible. We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value. Our work spans on-chain finance and the emerging agent economy. Through Sui, Move, and our broader technology stack, we’re building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact. The Role: We are hiring a Staff Security Engineer to act as the primary security partner for the Walrus team, providing deep architectural guidance and embedding security practices throughout the development lifecycle, starting from the design phase. What You'll Do: - Lead security assessments for new Walrus features while also contributing to security initiatives across the broader Mysten ecosystem, identifying systemic risks and providing actionable remediation plans for complex architectural challenges. - Drive a "security-by-design" culture, ensuring that security considerations are front-and-center before code is written, within Walrus and the wider Mysten organization. - Leverage AI-driven tools and advanced automation to identify and remediate low-hanging fruit, allowing the team to focus on high-impact, complex security research. - Maintain a generalist security perspective, providing strategic oversight on broader infrastructure and product security issues as they impact Walrus and beyond. - Collaborate with engineering leadership to prioritize security roadmap items, balancing feature velocity with the security posture of the platform. - Mentor senior and junior engineers, setting technical direction for security standards and establishing best practices across the engineering organization. What You'll Have: Minimum Qualifications - Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or equivalent experience. - 8+ years of industry experience in security engineering, with a proven track record of operating at a Staff (E6) level or equivalent. - Extensive experience as a security generalist, capable of navigating infrastructure, application, and cryptographic security domains. - Strong proficiency in building, deploying, and managing automated security tooling; demonstrated history of using AI/ML or advanced static/dynamic analysis to improve security outcomes at scale. - Deep expertise in collaborating with engineering teams during the design phase to proactively identify and mitigate high-risk design flaws. - Excellent communication skills, with the ability to influence technical direction and lead cross-functional security initiatives. What You'll Have Preferred Qualifications - Technical understanding of decentralized storage, distributed systems, or the Web3 stack (prior experience is a plus, not a requirement). - Experience leading security-focused transformations or implementing security-by-design frameworks in high-growth engineering environments. - Ability to balance tactical, hands-on security work with strategic long-term planning and leadership. Employment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information. Regarding the recent rash of technology job scams: Be aware that emails from genuine Mysten Labs group recruiters will always come from the @mystenlabs.com http://mystenlabs.com domain or related subdomains (e.g., mystenlabs.com/careers http://mystenlabs.com/careers). Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers http://www.mystenlabs.com/careers. To support an efficient and fair hiring process, we may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers. Our team is remote first and we are hiring across the world. Here at Mysten Labs, you’ll be joining a world-class team with tremendous growth potential as we bring the next billion users to web3. We raised a $300M Series B round from top Silicon Valley led venture funds like Jump Crypto, Andreessen Horowitz (a16z), Binance Labs, Redpoint, Lightspeed, Coinbase Ventures, Electric Capital, Standard Crypto, NFX, Slow Ventures, Scribble Ventures, Samsung Next, Lux Capital, among other investment firms and strategic partners. Come join us and build the future of web3!

Location: New York Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology- and data-driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped our collaborative mindset, which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high-quality returns for our investors. You will join our newly established Security team in New York, working as part of QRT’s global Security function, which safeguards QRT's technology platforms, data, and operational environments. You will design, build, and operate secure infrastructure platforms that support the evaluation and adoption of emerging technologies, combining deep security expertise with strong engineering skills to deliver scalable controls, effective risk management, and a low-friction experience for engineers, researchers, and data scientists. Your Future Role within QRT Design and build secure platforms for the evaluation and adoption of emerging technologies across cloud and on-premises environments. Develop reusable security architectures, isolation patterns, trust boundaries and guardrails. Evaluate new technologies, identify risks and translate them into practical engineering controls. Design security across networks, identity, privileged access, containers, Kubernetes and workload isolation. Automate security by default using infrastructure-as-code, policy-as-code, APIs and software engineering. Apply LLMs, AI-assisted tooling and emerging technologies to improve security engineering and automation. Perform threat modeling and risk assessments for new infrastructure, software, cloud services, and emerging technologies, translating risks into practical controls. Partner with Infrastructure, Engineering, Research, and business teams to deliver secure, usable solutions and communicate risk clearly to technical and non-technical stakeholders. Your Present Skillset 7+ years of experience in security engineering, platform security, cloud security or infrastructure engineering. Strong experience designing secure hybrid infrastructure, ideally including AWS. Deep knowledge of network security, IAM, least privilege and defence-in-depth. Hands-on experience with containers, Kubernetes, virtualisation and workload security. Strong infrastructure-as-code and automation experience, particularly Terraform. Strong scripting or software development skills in Python, Go, PowerShell or similar. Practical experience with threat modelling, CI/CD security and software supply-chain security. Curious, automation-minded and comfortable working with new and unfamiliar technologies. High ownership, can-do and low ego, with strong collaboration, communication and judgement. Base salary range for this position is $180,000 to $260,000 per year. QRT Total Compensation includes discretionary performance-based bonuses and a competitive benefits package.

Location: In-Office About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations: Bengaluru About the Department: The Identity and Access Management (IAM) team is dedicated to ensuring the secure and efficient management of user identities, access privileges, and authentication mechanisms across internal systems, applications, and data. Our mission is to safeguard the organization against unauthorized access, protect sensitive information, and enable seamless user experiences while adhering to industry best practices and compliance standards. About the Role: As an Identity and Access Management (IAM) Security Engineer, you will play a crucial role in designing, implementing, and scaling identity and access management solutions for Cloudflare’s internal workforce and workloads. You will be responsible for safeguarding our systems, applications, and data by ensuring secure user access, authentication, and authorization mechanisms. What You’ll Do: Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting Leverage Cloudflare products to secure our identities Build SSO integrations leveraging SAML, OIDC, OAuth, and SCIM Build and manage the Identity Governance and Administration platform Develop automated roles leveraging RBAC and ABAC Build and manage an access certification platform Build and manage a Privileged Access Management (PAM) platform Provide operational support of IAM systems including an on-call rotation that may include after hours calls Desirable skills, knowledge and experience: Security engineers take part in a wide variety of tasks and projects in the team. One individual is not expected to know everything, but a working knowledge in several of the following areas is required: 5 -10 years experience of identity federation (SAML, OAuth, OpenID Connect, etc.) Experience implementing Identity Governance and Administration (IGA) solutions including lifecycle management, SCIM, birthright access (RBAC, ABAC), and access certifications Demonstrated ability to build production-grade automation scripts and tools. Must possess hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges. Experience with secure configuration of containerized application platforms (e.g. Kubernetes) Advanced scripting experience (Python, TypeScript, Bash, etc.) Experience implementing Zero Trust controls Experience integrating with applications and SaaS solutions Experience with Identity and Access Management policy application and enforcement Experience working with Identity Threat Detection & Response (ITDR) Experience working with infrastructure as code and configuration management tools like Terraform, Ansible, etc. What Makes Cloudflare Special? We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet. Project Galileo : Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost. Athenian Project : In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states. 1.1.1.1 : We released 1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers. Sound like something you’d like to be a part of? We’d love to hear from you! Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs.  More details about this will be available at that stage of the interview process. This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license. Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer. Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

Location: Salt Lake City, Utah, United States About the Role iCapital is seeking a Cyber Case Manager to join the Global Information Security team within Cyber Security Operations. As the Security Operations Center (SOC) continues to grow, dedicated ownership of the case lifecycle has become essential to ensuring incidents and investigations are consistently tracked and driven to closure. The Cyber Case Manager serves as the single point of accountability for that lifecycle – from intake through resolution – ensuring every case is owned, prioritized, progressing, and documented. This individual-contributor will report to the Security Operations leader. Responsibilities Own the end-to-end lifecycle of security cases including intake, ownership assignment, progress tracking, and driving cases to resolution and closure. Serve as the single point of accountability for case status across the SOC, maintaining an accurate, prioritized, real-time view of all open incidents and investigations. Exercise authority to assign, reprioritize, and escalate cases across SOC Analysts, Threat Detection Engineering, and Incident Response to keep work moving and eliminate stalled cases. Enforce case-handling SLAs and quality standards; proactively identify aging, blocked, or at-risk cases and escalate to the Security Operations Leader. Coordinate cross-functional workstreams spanning incident response, DFIR, insider-threat cases, vulnerability-remediation tracking, audit and GRC findings, and eDiscovery and legal-hold requests. Manage case documentation and evidence integrity – ensuring timelines, actions, decisions, and artifacts are captured consistently and remain audit-ready. Integrate case workflows with SIEM/SOAR so alerts, enrichment, and automated actions flow into and out of the case record without manual re-keying. Produce case metrics and leadership reporting, including MTTD, MTTR, backlog, aging, closure rates, and SLA adherence for SOC leadership and stakeholders. Build and continuously improve case-management processes, intake criteria, and runbooks to increase throughput and reduce manager overhead. Facilitate case reviews, shift and regional handoffs, and post-incident lessons-learned, ensuring action items are tracked to completion. Leverage the SOC’s SIEM and SOAR platforms, with Jira and Confluence as the system of record. Collaborate with Legal, Compliance, Human Resources, SOC Analysts, Security Engineering, Cloud Security, Incident Response, and business stakeholders to support sensitive investigations, maintain confidentiality and chain of custody, and strengthen iCapital’s overall cyber resiliency. Participate in incident-driven after-hours coordination as needed to keep high-priority cases moving. Qualifications 3–6 years of experience in cyber security operations, incident response, or security case and program management Bachelor’s degree in information security, computer science, or information technology is preferred Experience in a regulated industry; financial services or fintech is preferred Hands-on experience managing incident or case queues in a SOC or incident response environment Working knowledge of SIEM and SOAR platforms and how alerts and cases flow through them Proficiency with Jira and Confluence for workflow management, tracking, and documentation Strong understanding of the incident response lifecycle and frameworks such as NIST and MITRE ATT&CK Demonstrated ability to coordinate across teams and drive work to closure through influence and follow-through, without direct reporting authority over those teams Familiar with handling sensitive investigations, evidence handling, and chain-of-custody principles Exceptional organization, prioritization, and attention to detail while managing many concurrent cases Excellent written and verbal communication skills, with the ability to report status clearly to both technical and executive audiences Relevant certifications (i.e. GCIH, GCFE, PMP, ITIL, or Splunk and SOAR) are preferred Experience with dedicated case-management or SOAR platforms (i.e. ServiceNow SIR, TheHive, Splunk SOAR and Phantom) Exposure to insider-threat, DFIR, eDiscovery, legal-hold, or GRC and audit workflows Familiar with cloud environments, AWS is preferred and knowledge of Agile frameworks is preferred Benefits The base salary range for this role is $100,000 to $130,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO). We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday. For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/ iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Location: London 500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating. Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down. With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better. The job About the role You’ll help Flo build a trusted, secure, audit-ready platform for the millions of people who use our women’s health app. You’ll support our SOC 2 Type II and ISO 27001 programs and help implement HIPAA safeguards, all within Flo’s integrated Information Security and Privacy Management System (ISPMS). This is a hands-on role. It needs strong applied security architecture skills, especially secure design reviews and technical control validation across AWS (EKS, Lambda, RDS, S3, VPC, IAM, KMS). You’ll work with our professional services partners, auditors, the Security team, and the Privacy, Product and Platform Engineering teams. Together you’ll design controls that reduce friction, so the business can move fast and stay secure. What you’ll do Support SOC 2 and ISO 27001 certifications and HIPAA safeguard implementation, and act as a point of contact for external auditors. Define and maintain security policies, standards and procedures. Help control owners put controls into practice and automate evidence gathering for audit readiness. Run technical design reviews and architectural risk assessments for AWS services, including data flows that handle PHI. Work with Engineering to harden AWS workloads (EKS, EC2, data pipelines) against industry best practices. Improve Flo’s security risk management framework, and track and report risks to leadership. Contribute to vendor risk management, including contract reviews and security assessments. Roll out security training and awareness campaigns. What you’ll bring 7+ years in security architecture, compliance or risk management. A degree in a related field is a plus. Hands-on experience with ISO 27001 and/or SOC 2 in a cloud-based SaaS environment. Familiarity with security controls for sensitive data. Experience with GRC and compliance automation platforms. The ability to manage several audit workstreams at once. Excellent communication skills, and the ability to turn compliance requirements into clear actions for engineering and business teams. Nice to have Working knowledge of the HIPAA Security Rule and PHI handling (highly valued). CISA, CISM or CISSP certification. Experience with NIST 800-53, CSA, CIS or HITRUST. A background in healthcare or another regulated industry. Experience building compliance roadmaps at a startup. Exposure to Kubernetes/Docker, serverless, big data platforms or DevSecOps. Experience with Agile delivery and vendor management. Annual Salary Range (ranges may vary based on skills and experience) £100,000 — £130,000 GBP How we work We’re a mission-led, product-driven team. We move fast, stay focused and take ownership – from brief to build to impact. Debate is encouraged. Decisions are shared. We care about craft, ship with purpose, and always raise the bar. You’ll be working with people who take their work seriously, not themselves. It takes commitment, resilience, and the drive to keep going when things get tough. Because better health outcomes are worth it. What you'll get We support impact with meaningful reward. Here’s what that looks like: Competitive salary and annual reviews Opportunity to participate in Flo’s performance incentive scheme Paid holiday, sick leave, and female health leave Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents Accelerated professional growth through world-changing work and learning support In-person collaboration and work in a hybrid model, with 3 days per week spent in the office 5-week fully paid sabbatical at 5-year Floversary Flo Premium for friends & family, plus more health, pension and wellbeing perks Diversity, equity and inclusion Our strength is in our differences. At Flo, hiring is based on merit, skill and what you bring to the role – nothing else. We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities. Read our privacy notice for job applicants .

Location: Tel Aviv, Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is seeking a deeply experienced Security Analyst - Tier 3 for its Security Operations Center (SOC). This role is a senior individual-contributor position, leading challenging investigations, setting the standards the SOC operates by. This role reports to the SOC Manager, under the Detection and Response function within the CISO Office. Your responsibilities will include: Lead complex, multi-stage, multi-domain investigations end to end, from scoping through deep technical analysis to a clear determination of impact and root cause. Serve as the SOC's senior escalation point and the quality gate for investigations across the team. Support the Incident Response team during confirmed incidents with continued telemetry investigation, scoping, and analytical depth. Continuously sharpen how the SOC investigates, identifying gaps in methods, runbooks, and tooling through daily casework and turning them into concrete improvements. Mentor Tier 1 and Tier 2 analysts through case reviews, coaching, and pairing during investigations. Partner with Security Engineering, Platform Security, Threat Intelligence, SOC Automation, and additional teams to turn what the SOC learns into stronger detection and response across Nebius. Participate in readiness activities - tabletops, post-incident reviews, and purple-team engagements. Participate in the on-call rotation as the senior point of contact outside business hours. We expect you to have: Experience Around 8-10 years of hands-on experience in security operations or incident response, with a track record of leading complex investigations. Technical Expertise Expert-level investigation capability across multiple domains: endpoint, identity, cloud, and network. Solid understanding of cloud-native environments, including containers, Kubernetes. Deep practical fluency with EDR, SIEM query languages, and log analysis. Deep knowledge of Windows and Linux internals, applied to artifact and behavioral analysis. Fluency in attacker TTPs (MITRE ATT&CK), including the Cloud and Containers matrices. Strong scripting and data-analysis skills (Python, SQL/KQL) for investigation at scale, with the ability to validate findings independently and challenge assumptions. Advanced certifications such as GCIH, GCFA, GNFA, GCFE, or OSCP are an advantage. Leadership & Communication Technical leadership through credibility, raising the team's bar without relying on formal authority. Calm and structured during high-severity incidents, making sound decisions amid uncertainty. Excellent written communication, turning complex investigations to clear narratives others can act on. Fluent in English, written and verbal, comfortable working with international teams and stakeholders. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: United Kingdom What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 6M endpoints and 17M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Security Operations Center Location: Remote UK Compensation Range: £62,000 to £70,500 base plus bonus and equity What You’ll Do: Huntress is looking for a Security Operations Center Analyst to add to our growing team. In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyber-attacks and will have daily opportunities to progress your analyst skillset and accelerate your career growth. The Huntress Security Operations Center is an elite team of individuals who wake up every day to combat threat actors. You will have daily opportunities to progress your analysis skills while being at the forefront of what’s happening in the wild. If you’re looking to accelerate your career and skills, this is the team for you! Responsibilities: Triage, investigate, and respond to alerts from the Huntress platform Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks where possible and provide remediations needed to remove the threat Perform tactical malware analysis as part of investigating and triaging alerts Investigate suspicious Microsoft M365 activity and provide remediations Assist in escalations from the Product Support team for threat-related and SOC-relevant questions Contribute to detection engineering creation and tuning efforts Contribute to projects focused on driving better outcomes for our analysts and partners Contribute to our collaboratively mentored team (we're all here to make each other better!) What You Bring To The Team: 2+ years experience in a SOC or Digital Forensics (DFIR) role Demonstrated experience with Windows, Linux, and MacOS as an attack surface Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs) Demonstrated experience with static and dynamic malware analysis concepts Working knowledge of Windows Administration or Enterprise Domain Administration Active Directory, Group Policy, Domain Trusts, etc. Working knowledge of core networking concepts Common ports/protocols, NAT, Public/Private IPs, VLANs, etc. Working knowledge of web technologies and concepts Web servers/applications, OWASP top 10, etc. Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes A strong sense of curiosity and a genuine excitement for learning Preferred Qualifications: Previous experience in an MSP/MSSP/MDR role Linux and MacOS investigative experience Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby) Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc. Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc. Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc. Familiarity with MSP tools such as RMMs What We Offer: 100% remote work environment - since our founding in 2015 New starter home office set-up allowance (€480) Generous personal leave entitlements Digital monthly reimbursement (€111) Travel to the US 1-2 times/year for various company events Pension Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Location: Ireland What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 6M endpoints and 17M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Security Operations Center Location: Remote Ireland Compensation Range: €70,000 to €90,000 base plus bonus and equity What You’ll Do: Huntress is looking for a Security Operations Center Analyst to add to our growing team. In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyber-attacks and will have daily opportunities to progress your analyst skillset and accelerate your career growth. The Huntress Security Operations Center is an elite team of individuals who wake up every day to combat threat actors. You will have daily opportunities to progress your analysis skills while being at the forefront of what’s happening in the wild. If you’re looking to accelerate your career and skills, this is the team for you! Responsibilities: Triage, investigate, and respond to alerts from the Huntress platform Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks where possible and provide remediations needed to remove the threat Perform tactical malware analysis as part of investigating and triaging alerts Investigate suspicious Microsoft M365 activity and provide remediations Assist in escalations from the Product Support team for threat-related and SOC-relevant questions Contribute to detection engineering creation and tuning efforts Contribute to projects focused on driving better outcomes for our analysts and partners Contribute to our collaboratively mentored team (we're all here to make each other better!) What You Bring To The Team: 2+ years experience in a SOC or Digital Forensics (DFIR) role Demonstrated experience with Windows, Linux, and MacOS as an attack surface Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs) Demonstrated experience with static and dynamic malware analysis concepts Working knowledge of Windows Administration or Enterprise Domain Administration Active Directory, Group Policy, Domain Trusts, etc. Working knowledge of core networking concepts Common ports/protocols, NAT, Public/Private IPs, VLANs, etc. Working knowledge of web technologies and concepts Web servers/applications, OWASP top 10, etc. Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes A strong sense of curiosity and a genuine excitement for learning Preferred Qualifications: Previous experience in an MSP/MSSP/MDR role Linux and MacOS investigative experience Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby) Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc. Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc. Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc. Familiarity with MSP tools such as RMMs What We Offer: 100% remote work environment - since our founding in 2015 New starter home office set up reimbursement (£398) Generous personal leave entitlements Digital monthly reimbursement (£92) Travel to the US 1-2 times/year for various company events Pension Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Location: Remote WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. At Box, we believe unique and diverse experiences benefit our culture, our products, our customers, our company, and our world. We aim to recruit a passionate, high-performing workforce that reflects the world we live in. If you are head-over-heels about this role but unsure if you meet all the requirements, we encourage you to apply! WHY BOX NEEDS YOU We are looking for an experienced and driven GRC Controls Automation Engineer who is looking to put their demonstrated awareness of regulatory standards to help bridge compliance requirements, technical infrastructure and engineering workflows. You will be focused on modernizing, designing, building and scaling frameworks that embed compliance directly into the software development (SDLC) process.  As our GRC Controls Automation Engineer, you will play a key role building a scalable, efficient program and process using your technical leadership focusing on automation within Box. You will work with all functions of this fast-paced, rapidly changing business, and directly with key stakeholders to drive continuous improvement, communication and education with Box's internal customers.  The right person will be excellent at communicating vertically and horizontally across the company and will be comfortable explaining Box's compliance posture internally and externally, working cross-functionally and providing technical and creative guidance to technical teams. WHAT YOU'LL DO Drive improvements in existing processes, process standardization and develop new innovative and efficient solutions Design, develop, and implement controls with a focus on compliance and automation Provide compliance guidance on new product features, deviations, and changes in the infrastructure Participate in cloud and application security strategic planning and execution Implement improvements by assessing the current environment, evaluate trends, and anticipating future enhancements/requirements Assess the existing security and compliance posture, and provide guidance on implementing products into Box's production environment Work across multiple frameworks and regulatory standards, including but not limited to ISO, PCI, NIST, AICPA SOC Support audits by maintaining accurate process documentation Drive improvements in existing processes and develop new innovative and efficient solutions Communicate gaps to management and coordinate cross functional team meetings to remediate and close the control gaps Monitor and identify compliance issues and follow-up Build relationships with internal and external stakeholders WHO YOU ARE We are an AI-first company. This means you approach your work with a growth mindset and find ways to leverage AI to help make faster, smarter decisions that will 10X your impact at Box. 5+ years of professional experience working in a SaaS company in GRC, Information Security or similar function Familiar with GCP cloud computing, AI architectures, Data governance and model validations Deep understanding of global frameworks, such as NIST 800-53, PCI, ISO 27x, and SOC 2 BS degree in Business or Management Information Systems or related field OR equivalent work experience CISSP, CCSK, CISM or other related certifications a plus Excellent written, verbal communication and presentation skills with a willingness to wear different hats and work in areas where needed Amazing organizational skills with a drive to succeed in a fast-paced environment Ability to hustle, get stuff done, and has strong integrity - make mom proud! Box lives its values, with community and in-person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 3 days per week.Your Recruiter will share more about how we work and company culture during the hiring process. EQUAL OPPORTUNITY We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and ‎‎independence of people with disabilities and is committed to giving them the same ‎‎opportunity to succeed as all other employees. Inclusiveness is core to our culture at Box, and we strive to ensure you get the most from your interview experience. Box makes reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please complete this form . Reasonable accommodations may include scheduling adjustments, document dictation and beyond. Notice to applicants in Los Angeles:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the Los Angeles Fair Chair Ordinance.  The Fair Chance Ordinance is provided here . Notice to applicants in San Francisco:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chair Ordinance.  The Fair Chance Ordinance is provided here . For details on how we protect your information when you apply, please see our Personnel Privacy Notice. If you are a California-resident, please read our California Applicant & Candidate Privacy Notice here . NOTICE OF USE OF AI At Box, we believe in the power of AI to improve the recruiting process while keeping people at the heart of every decision. For more information on the use of AI in our hiring process, please visit our webpage here . Box is committed to fair and equitable compensation practices. Actual base salary is dependent upon factors such as: knowledge, skill level, experience, and work location. This role is also eligible for equity and benefits. For more information, check out our benefits and perks . In accordance with OFCCP compliance, here is the Pay Transparency Provision . United States Pay Range $115,500 — $145,000 USD