Location: US / Remote
Workplace: remote
About the Company
CertiK is the largest blockchain security auditor and provides a comprehensive suite of tools to secure the industry at scale. To date, CertiK has worked with over 4,900 Enterprise clients, secured over $557 billion worth of digital assets, and has detected over 18,000 vulnerabilities in blockchain code. Our clients include leading projects such as OKX, Tether, Ripple, and Pancakeswap. Our investors include top VCs like Tiger Global, Coatue Management, Shunwei Capital and Hillhouse Capital as well as industry leaders like Coinbase Ventures and Binance.
About the Role
We are seeking a Junior Blockchain Security Engineer with a strong security mindset and foundational technical expertise across smart contracts, blockchain nodes, and decentralized infrastructure. In this role, you will support Web3 projects by assisting in code audits, contributing to security tools, and conducting research under guidance. If you are eager to grow your career in blockchain security and passionate about securing decentralized technologies, we’d love to hear from you.
Responsibilities
Audit and review codebases for smart contracts, blockchain protocols, and decentralized applications (dApps) to identify and remediate vulnerabilities.
Conduct guided security research, explore new attack vectors, and deliver actionable insights.
Contribute to the design, development, and maintenance of internal security tools and frameworks.
Support improvements to internal processes, methodologies, and service offerings, ensuring high-quality delivery for clients.
Requirements
Bachelor’s, Master’s, or PhD in Mathematics, Computer Science, or Information Security.
At least 1 years of hands-on experience with blockchain technologies, including: Smart contracts (EVM chains, Solana, Move, etc.), Blockchain protocols (nodes, SDKs, Cosmos, etc.)
Experience in threat modeling, risk assessment, and security analysis.
Proficiency in one or more programming languages: Rust, Go, Solidity, Python, etc.
Passion for Cryptocurrency, DeFi, and Blockchain technologies.
Preferred Qualifications
Solid academic or practical background in Mathematics, Cryptography, or Cybersecurity.
Demonstrated experience conducting audits and collaborating with leading Web3 protocols.
Recognized achievements such as published CVEs, or strong placements in Attackathons, Bug Bounties, or Audit Contests.
Compensation
Target annual salary for this role performed in the US is $102,000 - $180,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
CertiK accepts applications for this position on an ongoing basis. CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements. https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Location: Cairo, Egypt
As a Network & Security Administrator at Müller's Solutions, you will play a crucial role in maintaining the integrity, security, and performance of our network systems. This multifaceted position involves monitoring and managing both network infrastructure and security protocols to protect sensitive data from potential threats. You will work collaboratively with IT teams to ensure seamless network operations, implement security measures, and respond to incidents effectively.
Key Responsibilities:
Configure, monitor, and maintain network devices, including routers, switches, firewalls, and access points.
Implement and enforce network security policies and procedures to safeguard the organization's data and systems.
Conduct regular network and security assessments to identify vulnerabilities and recommend improvements.
Respond to and investigate security incidents, coordinating efforts for resolution and reporting.
Manage user access controls and permissions within network systems, ensuring compliance with security standards.
Document network configurations, security policies, and procedures to maintain accurate records.
Stay current with the latest cybersecurity trends and technologies, applying best practices in network management and security.
Requirements
Requirements:
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
3-5 years of experience in network administration and security management.
Strong understanding of networking concepts, protocols (TCP/IP, DNS, DHCP), and technologies.
Experience with configuring and managing network security devices, such as firewalls (Palo Alto, Cisco ASA), IDS/IPS, and VPNs.
Familiarity with active directory, user authentication, and access management.
Proficiency in troubleshooting and resolving network and security-related issues in a timely manner.
Excellent analytical and problem-solving skills, coupled with strong communication abilities.
Relevant certifications such as CompTIA Security+, Cisco CCNA, or equivalent are preferred.
Preferred Qualifications:
Experience with cloud services and network management in platforms such as AWS or Azure.
Knowledge of network monitoring tools and security best practices.
Familiarity with compliance frameworks (PCI DSS, HIPAA) and incident response processes.
Advanced certifications such as CCNP Security or CISSP are a plus.
Demonstrated ability to work collaboratively in a fast-paced environment and manage multiple priorities.
Location: San Francisco, CA | New York City, NY | Seattle, WA
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the Team
The Security Engineering team protects Anthropic's AI systems and maintains the trust of our users and society. We define the authentication architecture for our training infrastructure, design the cryptographic foundations that protect model weights and training data, and drive the developer security program that shapes how engineers build and ship software.
The team works across several areas that collaborate closely: identity and secrets management, developer security and supply chain, infrastructure security, and secure frameworks. You will support one of these areas while contributing across others, with your focus shaped by your strengths and the team's priorities.
Responsibilities:
Build and maintain identity and secrets management systems, including credential issuance, rotation, and workload authentication across our multi-cloud environments
Contribute to cluster security controls including RBAC policies, namespace isolation, workload identity, and pod security
Implement and maintain cloud security controls including IAM, network segmentation, VPC architecture, and encryption across our multi-cloud and on-prem environments
Design and implement secure development frameworks and libraries that make secure coding the path of least resistance for our engineering teams, including service to service authentication, serialization libraries, and tool proxies.
Harden CI/CD pipelines against supply chain attacks through isolated build environments, signed attestations, dependency verification, and automated policy enforcement
Identify and remediate security gaps through code review, threat modeling, and hands-on debugging
Contribute to continuous cloud security posture management using infrastructure-as-code scanning, misconfiguration detection, and automated remediation
You may be a good fit if you have:
At least 5 years of software engineering experience implementing and maintaining security-relevant systems in production
Bachelor's degree in Computer Science or equivalent industry experience
Strong programming skills in Python or at least one systems language such as Go or Rust
Experience contributing to cloud security controls
A track record of taking ownership of problems end to end, from identifying the issue to shipping and monitoring the fix
Clear communication skills and the ability to work collaboratively across engineering teams
Low ego and high empathy, with a genuine interest in helping teammates succeed
Passion for AI safety and the role security engineering plays in building trustworthy AI systems
Strong candidates may also have:
Contributions to developer security tooling including SAST, dependency scanning, or secure build infrastructure
Familiarity with Kubernetes security primitives including RBAC, namespaces, network policies, and admission controllers
Experience with cloud security posture management tooling, infrastructure-as-code security scanning, or automated remediation
Experience with network security and isolation techniques including east-west controls, traffic inspection, and cloud network policy
Experience with eBPF for security monitoring and enforcement, or developing kernel security policies
Experience building secrets management or workload authentication systems, including familiarity with protocols such as OAuth 2.0, OIDC, SAML, or SPIFFE/SPIRE
Background building or operating security systems in environments that support research workflows and rapid iteration
Deadline to apply:
None. Applications will be reviewed on a rolling basis.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$320,000
—
$405,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Tel Aviv, Israel
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
Role Overview
Nebius is seeking an experienced Security Analyst - Tier 2 for its Security Operations Center (SOC). This role is a hands-on position built for depth, serving as the investigative core of the SOC, focused on evidence and grounded conclusions. This role reports to the SOC Manager, under the Detection and Response function within the CISO Office.
You are welcome to work in our offices in Tel Aviv, Israel.
Key Responsibilities
Investigate escalated security alerts across endpoint, identity, cloud, email, and network layers.
Determine scope, impact, and root cause using EDR, SIEM, and supporting telemetry.
Escalate suspected incidents to the Incident Response team and complex investigations to Tier 3.
Provide structured feedback to relevant stakeholders on detection or prevention quality, false-positive patterns, and coverage gaps discovered during investigations.
Contribute to and refine SOC runbooks, triage guides, and investigation procedures.
Review Tier 1 escalations, coach on handoff quality, and act as the analytical reference during triage.
Document investigations to a standard that supports handoff, quality review, and lessons learned.
Participate in the on-call rotation, acting as the investigative point of contact outside business hours.
Required Qualifications:
Experience
Around 5-7 years of hands-on security operations experience, with proven depth in alert investigation.
Experience taking investigations to a clear verdict, including confirmed incidents.
Technical Expertise
Strong working command of EDR platforms and SIEM-based investigation, including writing and adapting queries independently.
Solid understanding of attacker techniques, with the ability to map findings to MITRE ATT&CK in analysis and reporting.
Investigation capability across at least two of: endpoint, identity, cloud, email, or network domains.
Windows and Linux internals at the depth required for log and artifact analysis: processes, authentication flows, and persistence mechanisms.
Solid networking fundamentals: TCP/IP, DNS, HTTP/S, and the ability to interpret network telemetry.
Scripting ability (Python or similar) for analysis at scale, and familiarity with SOAR platforms.
Certifications such as BTL2, OSDA, or CDSA are an advantage.
Leadership & Communication
Intellectual honesty, clearly distinguishing important and vague data, what is known, what is assumed, and what is still unknown.
Collaborative escalation habits, hands off with context and stays available to support what comes next.
Structured written communication, writing investigation notes that tell the story on their own.
Fluent in English, written and verbal, comfortable working with international teams and stakeholders.
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: Worldwide
We are looking for an
Application Security Engineer
to join our Information Security team.
The
Information Security
team is responsible for protecting Plata’s products, systems, and data by embedding security throughout the technology lifecycle. We work closely with engineering teams to identify and mitigate security risks, strengthen application defenses, and ensure security is integrated into every stage of software development.
As an
Application Security Engineer
, you will serve as a key link between development and security teams, designing, implementing, and maintaining robust application security controls. You’ll help embed security across the entire software development lifecycle — from design and development to testing and deployment — while continuously improving our application security practices.
Challenges that await you:
Collaborate with Dev & Ops teams. Guide secure coding practices, participate in code reviews, and embed security seamlessly into the SDLC
Conduct security reviews & threat modeling. Analyze application architecture, define threat models, and drive proactive risk identification
Integrate security tools. Deploy and manage SAST, DAST, IAST, RASP, and SCA tools within CI/CD pipelines to automate early detection and remediation
Handle security incidents
Implement “shifting left” strategies, enforce continuous testing, fast remediation, and embed security culture across teams
Educate and train. Conduct workshops to elevate developer security awareness and promote adherence to OWASP, ASVS, and secure design standards
What makes you a great fit:
Proficient in programming languages (web/mobile)
Strong understanding of web architectures (microservices)
Deep knowledge of OWASP Top 10, threat modeling, and security testing frameworks
Familiarity with security tools such as ZAP, Dependency-Track, Burp
Strong analytical skills with precise and thorough attention to detail
Your bonus skills:
Security certifications (OSCP, OSWE, GWAPT, GCPN)
Contributions to or experience with bug bounty or ethical-hacking programs
SaaS or cloud-native environments experience
Familiarity with Kubernetes or container security
Our ways of working:
Innovative Spirit:
A commitment to creativity and groundbreaking solutions
Honest Feedback:
valuing open, transparent communication
Supportive Team:
a strong, collaborative community
Celebrating Achievements:
recognizing our wins together
High-Tech Environment
:
a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances
Our benefits:
Relocation support
to Kazakhstan, Spain, Cyprus, or Georgia with full visa & permit support to the employee and family
Flexible work
from one of our offices or remote
Healthcare
Coverage
Education Budget:
Language lessons, professional training and certifications
Wellness Budget:
Mental health and fitness activity reimbursements
Vacation Policy:
Annual leave and paid sick leave as per applicable policies
Location: San Francisco, CA
Workplace: OnSite
ABOUT US
Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia.
We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do.
Sierra was co-founded by Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/ who first met while working together at Google over 20 years ago. Bret currently serves as Chairman of the Board of Open AI. Previously, he was co-CEO of Salesforce and CTO of Facebook. Clay spent 18 years at Google, where he most recently led Google Labs.
SECURITY ENGINEER
Security Engineering builds the foundations that let Sierra deliver powerful AI agents while protecting customer data and trust. We partner across product and platform to make security, privacy, and safety core product capabilities and secure defaults.
WHAT YOU’LL DO
Our work spans several security domains. You’ll go deep where your strengths and interests are strongest, with opportunities to explore new areas alongside the team.
Build the Foundations of Trust.
Design and ship systems and controls that make Sierra secure by default — spanning product security, infrastructure security, enterprise security, identity, and detection and response. You’ll work across all layers of our platform to identify risk, strengthen architectures, and build durable defenses.
Own Cross-Cutting Systems.
Partner with product, platform, and infrastructure team to threat model designs, review code and architectures, and implement and evolve Sierra’s security primitives. You’ll make pragmatic design trade-offs between usability, performance, reliability, and security.
Find and Reduce Real Risk.
Identify vulnerabilities, investigate suspicious behavior, and improve detections and response workflows across applications, cloud infrastructure, identity, endpoints, and internal systems. Turn what you learn into systemic fixes and controls that prevent entire classes of issues.
Automate and Scale Security Workflows.
Create developer-friendly tooling to reduce risk and friction — whether through automating security checks in CI/CD, building secure paved paths, improving vulnerability discovery, or instrumenting high-signal detection and response.
WHAT YOU’LL BRING
Deep Security Expertise.
Strong security fundamentals and depth in at least one domain, such as product security, platform or cloud security, enterprise security, identity, detection and response, or offensive security. You can apply that expertise across unfamiliar systems and emerging threats.
Product and Platform Mindset.
You care about building secure, scalable systems that enable, not block, innovation. You work closely with teams across Sierra to make trade-offs clear and help them move quickly without sacrificing trust.
Software Engineering and Systems Thinking.
You’re comfortable reading and writing code, understanding how production systems fit together, and building pragmatic software solutions to security problems. You can reason about system design and contribute to APIs, services, and security controls, with an eye toward reliability and maintainability.
Curiosity and Ownership.
You take ambiguous, cross-cutting problems from first principles to production and go deep when needed: threat modeling a distributed system, tracing an authorization decision across services, or following an investigation from weak signal to root cause. You define the problem, align partners, build the solution, and own it in production.
EVEN BETTER IF…
- You’ve worked across more than one of product security, infrastructure security, enterprise security, detection and response, or offensive security.
- You’ve built security frameworks, platforms, or solutions that engineers and responders rely on to prevent, detect, investigate, and remediate security issues at scale.
- You have exposure to AI systems or care about designing secure-by-default LLM applications and agentic systems.
- You think like an attacker — you naturally ask “what could go wrong?” when reviewing designs or investigating systems. You’ve found or fixed real security issues in production.
- You thrive in 0→1 environments, where foundational systems have to balance speed, reliability, and trust.
OUR VALUES
- Trust: We build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work.
- Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it.
- Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn’t right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve.
- Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time.
- Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company for parents. We support and respect each other and celebrate each other’s personal and professional achievements.
WHAT WE OFFER
We want our benefits to reflect our values and offer the following to full-time employees:
- Flexible (unlimited) paid time off
- Medical, dental, and vision benefits for you and your family
- Life insurance and disability benefits
- Retirement plan dependent on country of employment
- Parental leave
- Fertility and family building benefits
- Lunch, as well as delicious snacks and coffee to keep you energized when working onsite
- Discretionary benefit stipend giving people the ability to spend where it matters most
- Free alphorn lessons
These benefits are further detailed in Sierra's policies, may vary by region and employment type, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full-time employees can participate in Sierra's equity plans subject to the terms of the applicable plans and policies.
BE YOU, WITH US
We're working to bring the transformative power of AI to every organization in the world. To do so, it is important to us that the diversity of our employees represents the diversity of our customers. We believe that our work and culture are better when we encourage, support, and respect different skills and experiences represented within our team. We encourage you to apply through the link on this page even if your experience doesn't precisely match the job description.
Sierra is a proud equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by applicable federal, state or local laws, including veteran status and disability status. Hiring decisions are made by people, based on merit. If you need a reasonable accommodation for a disability, a religious practice, pregnancy or any related condition at any point in the application or interview process, contact us at accommodations@sierra.ai. Requests are handled confidentially and do not affect your candidacy.
We will consider qualified applicants with arrest and conviction records in accordance with applicable fair chance laws.
Location: US / Remote
Workplace: remote
About the Company
Founded in 2018 by professors of Yale University and Columbia University, CertiK is a pioneer in blockchain security, utilizing best-in-class AI technology to secure and monitor blockchain protocols and smart contracts. CertiK’s mission is to secure the cyber world. Starting with blockchain, CertiK applies cutting-edge innovations from academia into enterprise, enabling mission-critical applications to be built with security and correctness. CertiK is one of the fastest growing and most trusted companies in blockchain security and has become a true market leader. Our clients include leading projects such as Aave, Polygon, Binance Smart Chain, Yearn, and Chiliz. Our investors include top VCs like Tiger Global, Coatue Management, Shunwei Capital and Hillhouse Capital as well as industry leaders like Coinbase Ventures and Binance.
About the Position
The primary responsibility of this role is contributing to CertiK’s security-related services at the intersection of cybersecurity and blockchain. CertiK’s offerings include security consulting, security reviews, and security auditing of smart contracts and blockchains, alongside penetration testing and various verification processes.
As a Security Engineer at CertiK, , You’ll discover and analyze security vulnerabilities in blockchain smart contracts, summarize attacked vulnerabilities, and design feature code analysis tools. You’ll also stay up-to-date with analysis tools and new technology trends to further strengthen CertiK’s security offerings and expand our services.
Responsibilities
Participate in blockchain smart contract audits, identifying, analyzing, and addressing security vulnerabilities.
Help evaluate and define attack models for blockchain security.
Summarize and extract key characteristics from exploited code to build and maintain tools for feature code analysis.
Research and work with different analysis tools, continually learning and adapting to emerging technologies in the space.
Requirements
A bachelor’s degree (or higher) in full-time education, preferably in a science or engineering field, plus 3+ years of work experience.
Familiarity with fundamental information security concepts.
Proficiency in at least one of the following languages: Solidity, Go, Rust, C++, Python, or Node.js, along with a solid grasp of common algorithms.
A demonstrated ability to function in an English working environment with strong English reading and writing skills.
A passion for blockchain technology and a drive to learn and adapt to new technologies.
Bonus Points
Experience working with production pipelines—maintaining or developing them.
Familiarity with static code analysis (e.g., Syntax Analysis, Semantic Analysis, Taint analysis).
Exposure to popular blockchain-related platforms and technologies (e.g., Ethereum, Hyperledger, Cosmos).
Prior knowledge of blockchain smart contracts, security audits, and associated best practices.
Hands-on blockchain experience such as evaluating risks for blockchain projects or analyzing on-chain security events.
Target annual salary for this role performed is $90,000 - $150,000 if based in the US. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
CertiK accepts applications for this position on an ongoing basis.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Location: Delhi, India
Workplace: remote
About us:
TechBiz Global is a leading recruitment and software development company. Our diverse, globally distributed team provides IT recruitment, outstaffing, outsourcing, software development, and different consulting services with a primary focus on making our partners achieve their business goals successfully.
With headquarters in Germany we have successful clients all over the world. We can understand your unique needs. Our team has hands-on experience with the challenges that come with rapid growth and the IT sector. That’s why all of our offerings are built with a tech mindset.
Job Summary:
We are seeking for client
for a one month project
highly skilled and experienced SIEM Engineer with 5-8 years of hands-on experience working on Security Information and Event Management (SIEM) tools such as QRadar, Splunk, Microsoft Sentinel, Elastic Stack (Elasticsearch, Logstash, Kibana), and other SIEM platforms. The candidate will be responsible for the design, deployment, configuration, and management of SIEM solutions, ensuring efficient monitoring and proactive threat detection across the organization. This role involves collaboration with security teams to optimize incident detection, analysis, and response processes.
Key Responsibilities:
SIEM Implementation & Configuration:
Design, deploy, and configure SIEM solutions, including Elastic Stack (Elasticsearch, Logstash, Kibana), Wazuh, QRadar, Splunk & Microsoft Sentinel.
Integrate various log sources (e.g., firewalls, IDS/IPS, network devices, applications),/OT/IOT into the SIEM platform.
Develop and fine-tune correlation rules, dashboards, and alerts for proactive threat detection.
Perform system upgrades, patches, and manage the overall health of the SIEM environment.
Log Management & Monitoring:
Ensure proper log ingestion from multiple data sources, including Elasticsearch and Kibana, and troubleshoot any logging issues.
Maintain data retention policies, manage storage, and optimize SIEM performance.
Monitor and analyze system and security logs for anomalies, potential threats, or suspicious activities.
Elastic Stack Management or any open source like Wazuh:
Configure and maintain Elasticsearch clusters for log storage and search functionality.
Utilize Kibana to create custom dashboards, visualizations, and reports for security monitoring.
Work with Logstash or other log shippers for effective data parsing and enrichment before SIEM ingestion.
Experience:
5-8 years of experience working in SIEM engineering and administration roles.
Proven expertise with SIEM platforms like QRadar, Splunk, Microsoft Sentinel, and Elastic Stack (Elasticsearch, Logstash, Kibana).
Experience in integrating and managing log sources from diverse systems and platforms.
Strong understanding of security incident detection, threat analysis, and response processes.
Technical Skills:
Proficiency in SIEM platform management, rule creation, and performance tuning.
Hands-on experience with Elastic Stack (Elasticsearch, Logstash, Kibana) for log management, search, and security monitoring.
Strong scripting abilities (e.g., Python, PowerShell, Bash) for automation.
Knowledge of security protocols, network traffic analysis, and intrusion detection systems.
Experience working with security frameworks such as MITRE ATT&CK, NIST, or CIS.
Certifications (Preferred):
SIEM-related certifications (e.g., IBM QRadar Certified, Splunk Certified Architect, Elastic Certified Engineer)
Security certifications such as CISSP, CISM, or CEH are a plus.
Soft Skills:
Strong problem-solving and analytical thinking abilities.
Excellent communication skills to convey complex technical concepts to stakeholders.
Ability to work independently or in a team with minimal supervision.
Education:
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent experience).
Location: Remote - Europe
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
Application Security
The team is responsible for the security of Nebius's main public offerings : Compute, VPC, Managed K8s, Marketplace, Managed Soperator, and others. This includes building out the Secure
SDLC
, threat modeling, and vulnerability management platforms.
The Role
We are looking for an
Senior/Staff Application Security Engineer
who will ensure the security of our software by identifying and mitigating vulnerabilities, implementing best security practices, and collaborating with development teams. The ideal candidate will have a strong background in secure coding, threat modeling and building Secure SDLC.
What you will do
Build and maintain Application Security Posture Management (ASPM) at the Company scale.
Automate and support SAST, SCA tools, etc as part of CI/CD pipelines.
Improving SAST, secrets detection rules. Keeping false positive rate low.
Identify, analyze, and remediate application security vulnerabilities.
Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC).
Develop and maintain secure coding guidelines for development teams.
Conduct, run threat modeling and risk assessments for new and existing applications.
Provide development teams with instruments that facilitate security-related work like threat modelling, vulnerability detection, etc.
Stay updated on the latest security threats, vulnerabilities, and mitigation techniques.
Serve as an application security subject matter expert to other teams.
What we look for
6+ years of experience in application security.
Strong knowledge of common application security risks (e.g. OWASP Top 10) and how to mitigate them.
Experience with secure coding practices in languages such as Python, Go, Java, or JavaScript.
Proficiency in a common programming language (such as Go or Python) with a willingness to learn Go, if necessary.
Hands-on experience with security testing tools (Burp Suite, ZAP, Semgrep, etc.).
Understanding of authentication protocols like SAML or OIDC.
Experience in conducting threat-modeling sessions.
Bonus points
Confidence in presenting your ideas and opinions in a manner that can be challenged, while responding well to feedback.
Experience in designing, building, and maintaining security automation.
Experience in translating compliance and regulation requirements into technical specifications.
Experience in exploiting vulnerabilities in web applications, Linux kernels, containers, and networks.
Security certifications such as OSCP or OSWE.
Hiring process
Recruiter's chat (30mins)
Live-coding interview (60mins) to asses basic coding skills
Security interview (60mins) to asses domain expertise
Security System Design interview (90mins) to assess practical experience
(Optional) Technical deep dive (90mins) to present a complex and impact project.
Final interview to close the hiring process (45mins)
#LI-CP1
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: Remote-Friendly (Travel-Required) | San Francisco, CA | Seattle, WA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role:
Anthropic's Application Security team secures the systems that build, serve, and increasingly
are
Claude. The attack surface is unlike most AppSec work: multi-agent orchestration, sandboxed code execution, agents holding delegated credentials, untrusted tool output crossing trust boundaries — problems with little prior art and no off-the-shelf playbook.
The way the team works is also different. We use Claude as our primary tool across every part of the job: it drives our static analysis, drafts and fixes vulnerabilities as pull requests, performs first-line bug bounty triage, and assists threat modeling for design reviews. The human work is the judgment layer — system-level reasoning, deciding what matters, and building the next thing the model can't do yet.
This is a builder's role on a senior team. We hire engineers who ship production systems
and
clear a hands-on threat-modeling bar — people who can find the vulnerability but would rather build the system that finds them all. Every engineer owns a system end-to-end, and the team's work has shaped customer-facing product security — including Claude Code's security review tooling, its security guidance plugin, sandboxing, and auto mode.
Key responsibilities:
Design, build, and operate Claude-powered security systems — LLM-driven code analysis, automated vulnerability remediation, AI-assisted threat modeling — and own one or more of them end-to-end, including the cross-functional relationships that come with it
Lead secure design reviews and threat modeling for novel AI systems, identifying risks that don't map to existing frameworks
Evolve a public bug bounty program where automation handles routine triage and root-cause work, and engineers handle escalations and corner cases
Partner with Product, Infrastructure, and Research teams as an embedded security owner — consulting on launches, shaping architecture, and influencing decisions where security is the constraint
Share an operational on-run rotation with the rest of the team — bounty escalations, incident response, and launch consults on systems serving Claude in production
Minimum qualifications:
Hands-on application and infrastructure security experience, including cloud and containerized environments
Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript, with a track record of building durable systems rather than one-off scripts
Practical threat-modeling and vulnerability-identification skills — you've found and reasoned about real bugs in real systems, even if breaking isn't your primary mode
Demonstrated ability to operate with high autonomy and ambiguity — comfortable being handed a problem and a lot of latitude rather than a spec
Clear technical communication with both engineers and leadership
Preferred qualifications:
7+ years in application security, security engineering, or security-focused software engineering
Already use LLMs as a core part of how you work, with opinions about where they help and where they don't
Experience securing agentic, code-execution, or LLM-integrated systems specifically
Prior ownership of a bug bounty program, vulnerability disclosure program, or vulnerability-management infrastructure at scale
Background building security automation or developer-facing security tooling
Offensive security or penetration testing experience
Representative projects
An increasingly autonomous vulnerability pipeline — LLM-driven code analysis finds the issue, scores it for real exploitability, and opens the fix PR, with humans as the review step rather than the author
Bug bounty operations where Claude handles first-line triage and drafting, and engineers focus on the reports that actually need judgment
AI-assisted threat modeling that generates intake questions, drafts the model, and recommends which design reviews need a human in the room
Automated dependency vulnerability remediation across Anthropic's codebase
The company-wide vulnerability dashboard and SLA enforcement layer every engineering team works against
Threat models and security architecture for agentic product surfaces — code execution sandboxing, agent identity and delegated auth, tool-use boundaries
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$320,000
—
$485,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Algiers, Algeria
Müller's Solutions is looking for an experienced Security Subject Matter Expert (SME) to join our team in Brussels, Belgium. In this crucial on-site role, you will leverage your expertise in cybersecurity to drive the development and implementation of security strategies and policies across the organization. Your insights and knowledge will be invaluable in guiding teams to enhance their security posture and protect sensitive information.
Key Responsibilities:
Firewall Management: Hands-on experience with
Palo Alto Firewalls and Palo Alto Prisma Access
, including configuration, monitoring, and troubleshooting.
Routing Expertise:
Strong knowledge of BGP routing on Palo Alto platforms.
Platform Administration: Proficient in tools such as Algosec FireFlow, Log Analyzer, and AppViz for security operations, analysis, and platform management.
Policy Optimization: Enhance network security policies and streamline incident response processes.
Provide expert guidance on all aspects of information security, ensuring compliance with industry standards and regulations.
Manage and optimize firewall systems, particularly
Palo Alto Firewalls and Palo Alto Prisma Access
, to ensure robust defense mechanisms.
Utilize your expertise in
BGP routing on Palo Alto platforms
to enhance network security protocols.
Administer security management tools like
Algosec FireFlow, Log Analyzer, and AppViz
to monitor and analyze security incidents.
Lead vulnerability assessments and conduct regular audits to identify and address security weaknesses.
Develop, implement, and review security policies and procedures to mitigate risks.
Conduct training sessions for staff on security best practices and incident response strategies.
Monitor the threat landscape and keep abreast of emerging security trends and technologies.
Collaborate with cross-functional teams to integrate security into all organizational processes and projects.
Requirements
Requirements:
Bachelor's degree in Cybersecurity, Information Technology, or a related field.
5+ years of experience in cybersecurity, with a focus on security architecture or risk management.
Demonstrated expertise as a Security Subject Matter Expert or in a similar capacity.
Strong knowledge of security frameworks (NIST, ISO 27001) and regulatory compliance.
Hands-on experience with firewall management and network security.
Exceptional analytical and problem-solving skills with a thorough understanding of security principles.
Strong communication skills, capable of conveying complex information to diverse audiences.
Relevant certifications such as CISSP, CISM, or CEH are strongly preferred.
Location: Rabat, Morocco
Müller's Solutions is excited to announce an opening for a Security Subject Matter Expert (SME) based in Brussels, Belgium. In this crucial on-site role, you will be responsible for providing specialized knowledge and guidance on cybersecurity strategies, aiming to bolster our overall security posture. You will collaborate with various teams across the organization to implement security best practices and ensure compliance with industry standards.
Key Responsibilities:
Firewall Management: Hands-on experience with
Palo Alto Firewalls and Palo Alto Prisma Access
, including configuration, monitoring, and troubleshooting.
Routing Expertise:
Strong knowledge of BGP routing on Palo Alto platforms.
Platform Administration: Proficient in tools such as Algosec FireFlow, Log Analyzer, and AppViz for security operations, analysis, and platform management.
Policy Optimization: Enhance network security policies and streamline incident response processes.
Act as the Security Subject Matter Expert, advising on all security-related matters and developing robust security strategies.
Oversee and manage the configuration and operation of security technologies, including
Palo Alto Firewalls and Palo Alto Prisma Access
.
Apply your expertise in
BGP routing
on Palo Alto platforms to enhance network security.
Utilize security management tools such as
Algosec FireFlow, Log Analyzer, and AppViz
to monitor and analyze security incidents.
Conduct thorough risk assessments and security audits to identify vulnerabilities and develop mitigation strategies.
Collaborate with IT teams to integrate and apply security measures across systems and applications.
Develop and refine organizational security policies, standards, and protocols in alignment with industry regulations.
Facilitate training sessions and create awareness programs to educate employees about security best practices.
Stay updated on the latest security trends, threats, and technologies to enhance our defense mechanisms.
Requirements
Requirements:
Bachelor's degree in Cybersecurity, Information Technology, or a related field.
5+ years of experience in cybersecurity or a related field, specifically in a subject matter expert capacity.
Proven expertise in security frameworks and best practices, including NIST and ISO 27001.
Hands-on experience with firewall management and incident response.
Strong analytical skills with the ability to assess and address complex security challenges.
Exceptional communication skills, capable of communicating complex technical information to various stakeholders.
Certifications such as CISSP, CISM, or CEH are preferred.
Fluency in English; proficiency in French or Dutch is an advantage.
Benefits
Why Join Us:
Opportunity to work with a talented and passionate team.
Competitive salary and benefits package.
Exciting projects and innovative work environment.
Location: Amman, Jordan
Müller's Solutions is actively looking for a Security Subject Matter Expert (SME) to join our team in Brussels, Belgium. This on-site role requires a seasoned professional with a deep understanding of cybersecurity and a passion for advancing security practices across the organization. As the SME, you will provide strategic advice, support security initiatives, and lead risk assessments to ensure our systems and data remain secure.
Key Responsibilities:
Firewall Management: Hands-on experience with
Palo Alto Firewalls and Palo Alto Prisma Access
, including configuration, monitoring, and troubleshooting.
Routing Expertise:
Strong knowledge of BGP routing on Palo Alto platforms.
Platform Administration: Proficient in tools such as Algosec FireFlow, Log Analyzer, and AppViz for security operations, analysis, and platform management.
Policy Optimization: Enhance network security policies and streamline incident response processes.
Utilize your expertise to guide the organization in securing its information and technology assets.
Perform security assessments to identify vulnerabilities, threats, and risks, developing strategies to mitigate them.
Collaborate with IT and security teams to enhance existing security protocols and safeguards.
Develop and implement comprehensive security policies, standards, and practices aligned with industry regulations.
Facilitate training sessions to improve staff awareness of security threats and best practices.
Research new security technologies, trends, and threats, implementing best practices to strengthen our defenses.
Act as a key liaison with internal departments and external stakeholders on security matters.
Requirements
Requirements:
Bachelor's degree in Cybersecurity, Information Technology, or a related field.
A minimum of 5-7 years of experience in cybersecurity and information security.
Proven experience as a Security Subject Matter Expert or in a similar role.
In-depth knowledge of security frameworks such as NIST, ISO 27001, and GDPR compliance.
Experience with security assessments, audits, and incident response.
Strong analytical skills with a solid understanding of risk management principles.
Excellent communication skills, both verbal and written.
Relevant certifications such as CISSP, CISM, or CEH are preferred.
Location: Cairo, Egypt
Müller’s Solutions is seeking a dedicated Security Subject Matter Expert (SME) to join our dynamic team. In this pivotal role, you will be responsible for providing expert guidance on security practices and policies, helping us identify threats and vulnerabilities. You will collaborate with various departments to implement effective security measures and promote a culture of security awareness throughout the organization.
Key Responsibilities:
Firewall Management: Hands-on experience with
Palo Alto Firewalls and Palo Alto Prisma Access
, including configuration, monitoring, and troubleshooting.
Routing Expertise:
Strong knowledge of BGP routing on Palo Alto platforms.
Platform Administration: Proficient in tools such as Algosec FireFlow, Log Analyzer, and AppViz for security operations, analysis, and platform management.
Policy Optimization: Enhance network security policies and streamline incident response processes.
Act as the primary consultant on all cybersecurity matters, offering best practice insights and strategic recommendations to enhance security protocols.
Lead the development, implementation, and management of security initiatives and programs.
Conduct security assessments and audits to identify vulnerabilities and develop mitigation strategies.
Monitor and analyze security incidents; respond effectively and efficiently to security breaches.
Design and deliver training sessions aimed at improving employee understanding of security policies and procedures.
Research and stay updated on the latest cybersecurity trends, technologies, and threat landscapes.
Requirements
Requirements:
Bachelor's degree in Cybersecurity, Information Technology, or a related field.
Minimum of 5 years of experience in information security or a related field.
Proven experience as a security consultant or expert.
In-depth knowledge of various cybersecurity frameworks (NIST, ISO 27001, etc.).
Familiarity with firewall management and network security practices.
Strong analytical and problem-solving skills.
Excellent communication skills, with the ability to convey complex concepts to non-technical stakeholders.
Relevant certifications such as CISSP, CISM, or CEH are highly preferred.
Location: Brussels, Belgium
As a Security Subject Matter Expert (SME) at Müller's Solutions, you will play a critical role in shaping our security strategies and implementing best practices across the organization. You will leverage your deep expertise in cybersecurity to advise and guide various teams on security policies, risk management, and compliance requirements. Your insights will be invaluable in enhancing the overall security posture of the organization while protecting our data assets.
Key Responsibilities:
Firewall Management: Hands-on experience with
Palo Alto Firewalls and Palo Alto Prisma Access
, including configuration, monitoring, and troubleshooting.
Routing Expertise:
Strong knowledge of BGP routing on Palo Alto platforms.
Platform Administration: Proficient in tools such as Algosec FireFlow, Log Analyzer, and AppViz for security operations, analysis, and platform management.
Policy Optimization: Enhance network security policies and streamline incident response processes.
Serve as the primary authority on security topics, providing expertise and guidance to various stakeholders throughout the organization.
Analyze and assess security risks, recommending appropriate mitigation strategies to minimize vulnerabilities.
Develop and review security policies, standards, and guidelines that align with industry best practices and regulatory requirements.
Conduct training sessions and workshops to educate employees about security awareness and best practices.
Collaborate with IT and security teams to implement effective security measures and technologies.
Stay abreast of the latest security trends, threats, and technologies, and adjust strategies accordingly.
Participate in security audits and assessments to ensure compliance with internal and external regulations.
Requirements
Requirements:
Experience in network security infrastructure.
CCIE Certification is a plus.
Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.
7+ years of experience in cybersecurity, with a focus on security architecture and risk management.
Demonstrated experience as a security subject matter expert in previous roles.
In-depth knowledge of security frameworks, including ISO 27001, NIST, and PCI DSS.
Strong understanding of security technologies, including firewalls, intrusion detection/prevention systems, encryption methods, and identity management.
Excellent analytical and problem-solving skills, with the ability to identify and resolve complex security issues.
Strong communication and interpersonal skills, with the ability to effectively convey technical information to non-technical audiences.
Relevant security certifications, such as CISSP, CISM, or CEH are highly desirable.
Preferred Qualifications:
Master's degree in Cybersecurity or a related field.
Experience in incident response and management, including leading post-event reviews.
Knowledge of cloud security models and solutions.
Experience with regulatory compliance and legal implications of data protection.
Location: Home based - Worldwide
We have opened several senior/staff Security Operations Engineer (SOC) positions, creating a new team reporting to the CISO. We are looking for a range of experience in these positions - at the high end we are looking for deep experience defending highly contested critical assets and high-value cyber targets against advanced persistent threats and state-level actors. We have more junior roles for exceptional individuals with a proven personal interest an engagement in cyber attack and defence, and outstanding academic and career performance even if experience is limited.
Our goal is to build an entirely new level of assurance and observable rigour into the open source supply chain. We have our own estate to monitor, but more broadly our goal is to raise the robustness of the entire global Ubuntu estate through the work of this team.
The Security Operations (SecOps) team is responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our own infrastructure and product deployments. They design and implement technical security controls that ensure security threats are automatically identified, contained and remediated. The team will also contribute ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attack.
The SecOps team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.
What you will do in this role:
Implement and evolve Canonical's SecOps security standards and playbooks
Analyse and improve Canonical's security architecture
Evaluate, select and implement new security tools and practices
Identify, contain and guide the remediation of security threats and cyber attacks
Grow the presence and thought leadership of Canonical SecOps practice
Contribute to open source threat intelligence initiatives
Drive threat modelling, table top exercises and other SecOps practices across Engineering, IS and Canonical
Develop Canonical SecOps learning and development materials
Publish blog posts, whitepapers and conference presentations
Identify, implement and track SecOps KPIs
Plan and deliver SecOps work in the framework of Canonical's agile engineering practice
Work with Security leadership to present information and influence change
What we are looking for
An exceptional academic track record
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
Deep personal motivation to be at the forefront of technology security
Expertise in threat modelling and risk management frameworks
Knowledge of security architecture and market-leading security tools
Experience contributing to, and consuming, threat intelligence feeds
Experience in security risk management frameworks such as NIST CSF
Experience with security standards such as ISO 27001
Optional things we value
Experience in a security operations team or a security operations centre (SOC)
Experience in offensive or defensive security teams with hands-on ability
Experience with state-actor and other advanced persistent threats
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Brussels, Belgium
As a Network Security Engineer at Müller's Solutions, you will be responsible for ensuring the confidentiality, integrity, and availability of our network infrastructure. Your role will include designing, implementing, and managing network security measures to protect our organization's sensitive data from cyber threats. You will work closely with various teams to monitor network traffic, respond to security incidents, and maintain compliance with industry standards.
Key Responsibilities:
Design, configure, and implement network security solutions, including firewalls, intrusion detection/prevention systems (IDS/IPS), and VPNs.
Security ,Load balancing and Routing/Switching.
Monitor network traffic for unusual activity and conduct regular security assessments and vulnerability tests.
Respond to security incidents and provide detailed analysis to mitigate the impact and prevent future occurrences.
Develop and enforce network security policies, procedures, and best practices to enhance the organization’s security posture.
Work closely with other IT teams to support secure network operations and troubleshoot security-related issues.
Stay up to date with the latest cybersecurity trends and emerging threats to continually enhance network security measures.
Requirements
Requirements:
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
3-5 years of experience in network security engineering or a related field.
Work experience and expertise in security network engineering(installation/management/troubleshooting of security equipment such as Checkpoint and Palo Alto Firewall, ASA VPN).
Strong knowledge of network security protocols, technologies, and best practices, including firewalls, IDS/IPS, VPNs, and network segmentation.
Experience with security tools and technologies, including SIEM systems, vulnerability scanners, and security analytics platforms.
Excellent troubleshooting and analytical skills, with the ability to identify and resolve complex security issues.
Strong communication skills to effectively collaborate with cross-functional teams and explain technical concepts to non-technical stakeholders.
At least 5 years of expertise in F5 WAF, Load Balancing, and Reverse Proxy (APM, ASM, LTM).
Able to set up and follow an RFP process.
Very good knowledge of network technology (BGP,OSPF, spanning-tree).
Analytical mindset for analyzing security solutions.
CCNA/CCNP/AWS Certificates are required.
Preferred Qualifications:
Relevant certifications such as Cisco CCNP Security, CompTIA Security+, or Certified Information Systems Security Professional (CISSP).
Knowledge of compliance frameworks, such as PCI DSS, HIPAA, or ISO 27001, is a plus.
Knowledge of network equipment such as Cisco ACI, DNA.
Knowledge and experience with cloud network management (Microsoft Azure).
Knowledge of Windows (MS Office Tools, Active Directory, etc.).
CCIE is a plus
Technical Expertise and Problem-Solving Abilities Adaptability and Continuous Learning.
Location: Home based - Worldwide
The Canonical Security Operations team is hiring for a Senior or Staff engineer. The Security Operations team is responsible for designing, building, and operating a world-class Security Operations Center, and the successful candidate will provide leadership, mentorship, expertise, and outstanding individual contributions towards those ends.
This role involves aspects of:
Traditional SOC duties - security monitoring, threat hunting, and response.
Security engineering - assessing and protecting Canonical platforms and products.
Software engineering - building custom tools and platforms.
Site reliability engineering - deploying, maintaining, and automating security tools.
We are looking for individuals with engineering and security experience, as well as a history of remarkable achievement. Senior security operations personnel with engineering experience and senior developers with security experience are equally well-suited to this role.
Beyond securing Canonical’s digital estate, this position represents a unique opportunity to contribute to the open source ecosystem. Team members may present at industry conferences, share threat intelligence with the wider community, or publish open source security software.
Junior positions are also available for less-experienced individuals with a compelling academic or professional background.
In this role, you will:
Provide operational and engineering leadership.
Implement and evolve Canonical’s Security Operations Center.
Design and develop security software and platforms.
Monitor for, identify, respond to, and remediate security incidents.
Assess and improve Canonical’s security controls.
Mentor early-career Security Operations engineers.
Plan and deliver work within Canonical's agile engineering framework.
Contribute to open source security.
Publish blog posts, whitepapers and conference presentations.
We are looking for:
An exceptional academic track record.
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path.
10+ years of relevant professional experience
Professional cybersecurity experience, preferably working or leading a Security Operations Center.
Professional engineering experience.
An eagerness to contribute to open source security.
Proficiency in common scripting languages, such as Python and Bash.
Knowledge of Git, GitOps, Infrastructure-as-Code, and common orchestration platforms (e.g., Kubernetes)
Though optional, we value:
Familiarity with security frameworks such as the NIST CSF, CIS CSC, and ISO 27001
Knowledge of security architecture and market-leading security tools.
Experience in a security operations team or a security operations center.
Experience in offensive or defensive security teams with hands-on ability.
Experience with advanced persistent threats.
Proficiency in additional programming languages, such as Golang.
What we offer you:
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
seniorSan Francisco, CA | New York City, NY | Seattle, WA
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.