Задачи:
— Создавать Kubernetes-операторы для управления жизненным циклом ресурсов.
— Разрабатывать публичное API платформы и внутренние сервисы на Go.
— Участвовать в полном цикле SDLC: от проектирования до эксплуатации и мониторинга.
— Реализовывать оркестрацию компонентов платформы и интеграцию с внешними системами.
— Обеспечивать бесперебойную работу облачной платформы и развивать инструментарий поддержки.
Требования:
— Опыт разработки на Golang от 4-5 лет.
— Опыт работы с Kubernetes и написания k8s-операторов.
— Глубокое понимание работы с PostgreSQL, Redis, NATS, S3.
— Навыки администрирования Linux и понимание сетевых основ (L2/L3, TCP/IP).
— Опыт проектирования распределенных систем.
Условия:
— ДМС со стоматологией с первого дня работы.
— Компенсация психологических консультаций и 50% оплаты фитнеса.
— Оплата обучения английскому языку и разговорные клубы.
— Возможность участия в профессиональных конференциях.
— Развитая корпоративная культура: спортивные турниры, киновечера, настольные игры.
Location: Remote (United States)
Thank you for considering Tailscale. If this job description resonates with you, please apply.
Frequently cited statistics show that people who identify with historically marginalized groups are likely to apply to jobs only if they meet 100% of the qualifications.
We encourage you to help us break that statistic!
About Tailscale
Tailscale is making safe connection effortless by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.
About the Role
Tailscale is seeking an experienced Commercial Solutions Engineer to partner with Sales in driving new business for Commercial customers. You will co-own a book of business with Account Executives, lead technical discovery and architecture design, and act as a trusted advisor to customers. This role blends deep networking and security expertise with strong sales acumen to win competitive deals, scale enablement, and influence product direction.
Key Responsibilities
Partner with AEs to identify, qualify, and close new Commercial customer opportunities.
Lead technical discovery, solution architecture, demos, and POCs to accelerate decision-making.
Guide complex multi-stakeholder deals, aligning technical and business objectives.
Provide structured feedback to shape product roadmap and GTM strategy.
Build scalable enablement resources, demo environments, and solution blueprints for the SE team.
What We Are Looking For
4/5+ years in a customer-facing SE/SA role within networking or security software.
Proven experience co-owning pipeline and influencing quota outcomes with Sales.
Strong networking fundamentals (TCP/IP, DNS, routing, firewalls) and troubleshooting skills.
Deep understanding of zero-trust networking, secure connectivity, and IAM integrations (SSO, SAML, OIDC).
Understanding of AI gateway and governance platforms for centralized LLM access, usage visibility, and audit
Familiarity with privileged access management (PAM) including session recording, just-in-time access, and protocol-aware controls (e.g., Border0, CyberArk, Teleport).
Experience with infrastructure as code tools such as Terraform, Pulumi, Ansible, or CloudFormation.
Hands-on architecture experience with AWS, GCP, and/or Azure.
Excellent communication skills, capable of translating technical features into business value.
Experience thriving in high-growth or startup environments.
As a company, we strive to maintain fair and equitable compensation practices within our team across all roles and all levels. Tailscale's compensation package includes base salary, equity, and comprehensive benefits. The salary range displayed on each job posting represents the target range for a new hire's base salary. Individual offers may vary based on experience and skill set.
For this position, our pay ranges reflect target OTE (on target earnings), inclusive of base salary and variable compensation tied to the attainment of quarterly sales targets.
US Pay Range (OTE)
$150,000
—
$200,000 USD
What We Offer
An inclusive, flexible environment where you can be your authentic self.
We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life.
A competitive total compensation package.
This includes a base salary, an equity incentive plan and variable commission (for quota-based roles).
Comprehensive group benefits with no waiting period.
Take advantage of coverage for health, vision, dental, and more for you and your family!
Remote first company
—most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description.
Employer-funded retirement contributions.
Tailscale will match your retirement contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of your eligible compensation.
Connect with other Tailscalars IRL.
Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, the United Kingdom, and Singapore. We support intentional in-person connection through team travel and distributed collaboration.
Support for your personal and professional development.
Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities.
Paid time off and a healthy work-life integration.
Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world!
A build-your-own home office setup.
You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $500 USD to customize your workstation to make it your own.
Paid parental leave program
. We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups (20 weeks for birthing parents, 16 weeks for non-birthing parents).
Tailscale is committed to providing an accessible and inclusive hiring process. If you require an accommodation at any stage of the recruitment process or related to any aspect of this role, please contact your recruiter.
Our hiring process uses AI-assisted tools to help screen and assess candidates. All hiring decisions are made by people.
Please be aware that legitimate emails from Tailscale's talent team will only originate from @tailscale.com, @greenhouse.io, and @interviews.modernloop.io email addresses. For more information about protecting yourself from impersonators and scams, please visit
https://tailscale.com/scam-awareness
.
Location: Remote (Canada)
Thank you for considering Tailscale. If this job description resonates with you, please apply.
Frequently cited statistics show that people who identify with historically marginalized groups are likely to apply to jobs only if they meet 100% of the qualifications.
We encourage you to help us break that statistic!
About Tailscale
Tailscale is making safe connection effortless by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.
About the Role
Tailscale is seeking an experienced Commercial Solutions Engineer to partner with Sales in driving new business for Commercial customers. You will co-own a book of business with Account Executives, lead technical discovery and architecture design, and act as a trusted advisor to customers. This role blends deep networking and security expertise with strong sales acumen to win competitive deals, scale enablement, and influence product direction.
Key Responsibilities
Partner with AEs to identify, qualify, and close new Commercial customer opportunities.
Lead technical discovery, solution architecture, demos, and POCs to accelerate decision-making.
Guide complex multi-stakeholder deals, aligning technical and business objectives.
Provide structured feedback to shape product roadmap and GTM strategy.
Build scalable enablement resources, demo environments, and solution blueprints for the SE team.
What We Are Looking For
4/5+ years in a customer-facing SE/SA role within networking or security software.
Proven experience co-owning pipeline and influencing quota outcomes with Sales.
Strong networking fundamentals (TCP/IP, DNS, routing, firewalls) and troubleshooting skills.
Deep understanding of zero-trust networking, secure connectivity, and IAM integrations (SSO, SAML, OIDC).
Understanding of AI gateway and governance platforms for centralized LLM access, usage visibility, and audit
Familiarity with privileged access management (PAM) including session recording, just-in-time access, and protocol-aware controls (e.g., Border0, CyberArk, Teleport).
Experience with infrastructure as code tools such as Terraform, Pulumi, Ansible, or CloudFormation.
Hands-on architecture experience with AWS, GCP, and/or Azure.
Excellent communication skills, capable of translating technical features into business value.
Experience thriving in high-growth or startup environments.
As a company, we strive to maintain fair and equitable compensation practices within our team across all roles and all levels. Tailscale's compensation package includes base salary, equity, and comprehensive benefits. The salary range displayed on each job posting represents the target range for a new hire's base salary. Individual offers may vary based on experience and skill set.
For this position, our pay ranges reflect target OTE (on target earnings), inclusive of base salary and variable compensation tied to the attainment of quarterly sales targets.
CAN Pay Range (OTE)
$201,000
—
$268,000 CAD
What We Offer
An inclusive, flexible environment where you can be your authentic self.
We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life.
A competitive total compensation package.
This includes a base salary, an equity incentive plan and variable commission (for quota-based roles).
Comprehensive group benefits with no waiting period.
Take advantage of coverage for health, vision, dental, and more for you and your family!
Remote first company
—most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description.
Employer-funded retirement contributions.
Tailscale will match your retirement contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of your eligible compensation.
Connect with other Tailscalars IRL.
Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, the United Kingdom, and Singapore. We support intentional in-person connection through team travel and distributed collaboration.
Support for your personal and professional development.
Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities.
Paid time off and a healthy work-life integration.
Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world!
A build-your-own home office setup.
You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $500 USD to customize your workstation to make it your own.
Paid parental leave program
. We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups (20 weeks for birthing parents, 16 weeks for non-birthing parents).
Tailscale is committed to providing an accessible and inclusive hiring process. If you require an accommodation at any stage of the recruitment process or related to any aspect of this role, please contact your recruiter.
Our hiring process uses AI-assisted tools to help screen and assess candidates. All hiring decisions are made by people.
Please be aware that legitimate emails from Tailscale's talent team will only originate from @tailscale.com, @greenhouse.io, and @interviews.modernloop.io email addresses. For more information about protecting yourself from impersonators and scams, please visit
https://tailscale.com/scam-awareness
.
Location: Ukraine
Workplace: Remote
What this role actually is
This is a hands-on operational role. Your customers are our employees. The work is a mix of live support, access administration, endpoint and MDM management, onboarding and offboarding, equipment logistics, and documentation, plus improving those processes so the same problems stop coming back.
You will own requests end-to-end rather than passing them along, work directly with non-technical colleagues, and handle several things at once on a busy day. Routine service work is a permanent part of the job, not a temporary phase before something else.
Key Responsibilities
- Own employee IT requests end-to-end: prioritize by impact and urgency, keep people informed, resolve, document, and prevent recurrence.
- Administer user accounts, permissions, and access across Google Workspace, Atlassian, GitHub, and AWS, applying least privilege.
- Run IT onboarding and offboarding: accounts provisioned on day one, access revoked promptly on exit, devices recovered.
- Prepare, configure, and maintain macOS and Windows workstations through MDM: policies, software deployment, patching, encryption, and recovery.
- Own IT equipment procurement, delivery, returns, and inventory accuracy for employees across supported locations, including international shipping and vendor coordination.
- Troubleshoot hardware, software, network, and SaaS issues methodically: reproduce, isolate, verify.
- Maintain IT documentation, knowledge-base articles, and asset records so support does not depend on one person being online.
- Reduce repetitive work through practical scripting and automation, and improve support processes without weakening security controls.
- Enforce IT security and access policies; recognize and escalate suspicious activity and access gaps.
Requirements
- 3+ years of hands-on experience in IT support, Service Desk, or system administration, with personal ownership of the areas above (not adjacent exposure while other teams handled them).
- Practical experience supporting macOS in a production employee environment.
- Hands-on MDM administration (Jamf, Kandji, Intune, JumpCloud, Hexnode, or similar): enrollment, policies, software deployment, compliance.
- Administration of Google Workspace, plus at least two of: Atlassian, GitHub access management, or cloud IAM (AWS / GCP / Azure).
- Demonstrated ownership of access lifecycle - joiners, movers, leavers - including approval flows and least-privilege practice.
- Experience with equipment provisioning, inventory, and remote/international delivery.
- Solid understanding of network fundamentals (DNS, DHCP, VPN, TCP/IP) and endpoint security basics (encryption, EDR, MFA/SSO).
- Experience working in a ticketing system with SLAs, and maintaining written documentation.
- Ability to handle a high volume of concurrent requests, interruptions, and difficult support situations while communicating calmly and clearly.
- At least one concrete example of automating or redesigning a repetitive support process, where you can explain your own contribution and the measurable outcome.
- Ukrainian: fluent. English: B1 or higher — enough to support colleagues, write tickets, and maintain documentation in an international company.
Nice to Have
- Scripting and automation (Bash, PowerShell, Python).
- Apple Business Manager, Zero-Touch / automated device deployment.
- Experience with VPN, LDAP, or ZTNA solutions.
- Exposure to ISO 27001 / SOC 2 processes or security audits.
- Interest in security topics (access control, endpoint security, Zero Trust).
- iGaming industry experience.
- Relevant certifications (CompTIA A+/Network+, Google Workspace, Microsoft, Apple, or similar).
What We Offer
- Competitive Salary
- Quarterly Bonuses
- Unlimited Paid Time Off
- Unlimited Paid Sick Leave
- Remote & Flexible Working
- Private Medical Insurance
- Financial Support for Life Events
- Professional Development Budget
- International Exposure
- Regular Company Events
*Benefits may vary depending on location and contractual agreement
Recruiting Process
- HR Interview
- Technical Interview
- Final Interview
By submitting your application, you acknowledge that your personal data will be processed in accordance with our Privacy Policy https://playson.com/privacy.
О проекте: Вы присоединитесь к ключевой команде, которая занимается разработкой и развитием основной эквайринговой платформы SmartCore. Это сложная, высоконагруженная система с микросервисной архитектурой, работающая в режиме 24/7. Платформа отвечает за весь жизненный цикл платежа — от инициации до клиринга, обеспечивая минимальные задержки, высокую отказоустойчивость и соответствие строгим стандартам безопасности (PCI DSS).
Задачи:
— Проектирование и разработка новых микросервисов и бизнес-логики на Kotlin и Java.
— Оптимизация производительности существующих компонентов системы, работа с высоконагруженными участками кода.
— Принятие ключевых архитектурных решений для повышения отказоустойчивости, масштабируемости и безопасности платформы.
— Интеграция со сторонними платежными системами, банками и процессинговыми центрами.
— Работа с асинхронными потоками данных с использованием Kafka и RabbitMQ.
— Проведение code review, наставничество менее опытных коллег и внедрение лучших практик разработки.
— Активное участие в R&D, исследование и внедрение новых технологий в стек проекта.
— Покрытие кода unit- и интеграционными тестами, поддержание высокого качества кодовой базы.
Требования:
— Коммерческий опыт бэкенд-разработки на Java/Kotlin от 10 лет.
— Экспертное владение Kotlin: идиомы, корутины, функциональные возможности.
— Глубокое знание Java Core и экосистемы JVM.
— Отличное знание Spring Boot, включая REST API, автоконфигурацию, Spring Security, Actuator.
— Экспертный уровень работы с PostgreSQL: проектирование сложных схем, оптимизация запросов, уровни изоляции транзакций, репликация.
— Опыт работы с MongoDB.
— Практический опыт построения систем на базе Kafka: брокер, паттерны producer/consumer, гарантии доставки сообщений.
— Опыт работы с RabbitMQ и Redis (кэширование, pub/sub, распределённые блокировки).
— Опыт проектирования и разработки распределённых, отказоустойчивых систем (микросервисная архитектура, CQRS, Event Sourcing).
— Знание современных AI-технологий, включая AI-агентов и LLM.
— Понимание сетевых протоколов TCP/IP, HTTP/2, gRPC.
— Опыт работы с Docker и Kubernetes.
— Навыки написания чистого, поддерживаемого и хорошо тестируемого кода.
— Высокая степень самостоятельности, проактивность, ответственность за результат и качество продукта.
Будет плюсом:
— Опыт работы в финтехе или процессинге платежей, знание стандарта PCI DSS.
— Опыт работы с реактивными стеками (Project Reactor, WebFlux).
— Опыт использования инструментов мониторинга и трассировки (Prometheus, Grafana, Jaeger).
— Опыт проведения нагрузочного тестирования (JMeter, Gatling).
Условия:
— Конкурентоспособная заработная плата, обсуждаемая индивидуально.
— Современный технологический стек и отсутствие бюрократии.
— Бюджет на обучение, посещение профильных конференций и покупку литературы.
— Корпоративный доступ ко всем передовым LLM моделям в Max комплектации.
— Работа в команде экспертов, где мнение каждого учитывается.
Location: Bratislava Hub
Workplace: Hybrid
About the role
Help build the internal technology experience behind an engineering-driven technology company.
We're looking for a hands-on IT Operations Engineer to support our colleagues across multiple international locations, with regular on-site presence in Bratislava.
This role goes beyond traditional IT support. You'll be responsible for delivering a seamless employee IT experience - from onboarding and workstation setup to identity and access management, troubleshooting and continuous improvement of internal IT processes.
We're looking for someone who enjoys ownership, solving complex operational problems and continuously improving how internal technology works.
If you're curious, proactive and naturally look for better ways of doing things instead of simply following established processes, we'd love to meet you.
What you'll do
- Provide day-to-day IT support to employees remotely and on-site
- Own IT onboarding and offboarding processes, ensuring a smooth employee experience
- Configure and maintain macOS workstations
- Manage user accounts, permissions and access across internal systems
- Maintain IT assets throughout their lifecycle, including procurement, inventory and logistics
- Troubleshoot hardware, software and network-related issues
- Administer and support internal platforms, including Google Workspace, Atlassian and GitHub
- Support identity and access management across cloud environments (AWS, Azure, GCP)
- Maintain clear and up-to-date technical documentation
- Identify opportunities to simplify, automate and improve internal IT processes
What we're looking for
We're more interested in how you think than in the exact number of years on your CV.
You might currently work in IT Support, Systems Administration, NOC, Infrastructure, or be at the beginning of your DevOps journey.
What matters most is your technical curiosity, ownership mindset and willingness to continuously improve the way things work.
You'll likely be successful if you have:
- Good understanding of networking fundamentals (DNS, DHCP, VPN, TCP/IP)
- Experience with identity and access management
- Experience administering Google Workspace or similar collaboration platforms
- Experience with ticketing systems
- Strong troubleshooting and problem-solving skills
- Good documentation habits and attention to detail
- A proactive mindset with the confidence to suggest and implement improvements
Nice to have
- Experience with MDM solutions
- Experience administering Atlassian products or GitHub
- Familiarity with AWS, Azure or GCP
- Experience with LDAP, VPN or identity management solutions
- Scripting or automation experience
- Interest in IT security and modern access management practices
Why this role
This role is for someone who enjoys building better ways of working - not just keeping things running.
You'll work closely with engineering and business teams, improve the internal technology experience across the company and have the opportunity to introduce automation, standardize processes and make everyday work easier for hundreds of colleagues.
If you naturally question repetitive manual work and enjoy turning good ideas into practical improvements, you'll likely thrive in this role.
What we offer
- Competitive salary
- Professional development budget
- Private medical insurance
- Financial support for important life events
- International and collaborative environment
- Regular company events
Benefits may vary depending on location and contractual agreement.
Recruitment process
- HR Interview
- Technical Interview
- Final Interview
By submitting your application, you acknowledge that your personal data will be processed in accordance with our Privacy Policy https://playson.com/privacy.
Задачи:
— разворачивание новых web-сервисов в инфраструктуре компании;
— поддержание высокой доступности этих highload web-сервисов;
— ответственность за сохранность данных;
— автоматизация процессов;
— взаимодействие с командами разработки/PM/GM;
— поддержка документации в актуальном состоянии.
Требования:
— администрирование (Linux/Unix) от 3-х лет;
— умение дебажить проблемы (top, iostat, iotop, strace, ltrace, tcpdump/wireshark, traceroute, mtr и другие);
— понимание стека tcp/ip, пакетные фильтры;
— администрирование Kubernetes;
— понимание контейнеризации (docker/lxc), умение писать Dockerfile;
— умение создавать шаблоны в Helm;
— владение любым скриптовым языком программирования (Python/Bash или другие);
— знание систем управления конфигурациями (saltstack/ansible или другие);
— опыт написания CI/CD пайплайнов в Gitlab-ci/Jenkins или другие;
— базовое понимание и конфигурирование Nginx;
— опыт администрирования реляционных баз данных (Mysql и Postgresql);
— умение настраивать бэкапы баз данных, репликацию, навыки дебага баз данных, умение искать и анализировать медленные запросы;
— знания английского языка на уровне чтения и понимания технической документации;
— коммуникабельность, инициативность, самостоятельность.
Будет плюсом:
— понимание основ методологии SRE;
— понимание основ методологии DevOps;
— опыт администрирования ceph и radosgw (s3).
Условия:
— сложные и интересные задачи, быстрый рост и амбициозные цели перед проектом;
— сильная команда специалистов по разным направлениям;
— отличная рабочая атмосфера и отсутствие бюрократии;
— возможность реализовывать собственные идеи на проекте, участвовать в разных этапах реализации проектов, проявлять инициативу и воплощать идеи в жизнь.
Задачи:
— Мониторинг сервисов и оперативное реагирование на инциденты.
— Диагностика и устранение технических неисправностей.
— Анализ логов и поиск причин возникновения ошибок.
— Выполнение регламентных технических работ.
— Взаимодействие с командами разработки, DevOps и телеком-направлением.
Требования:
— Уверенное владение Linux и работа в командной строке.
— Базовые знания сетевых технологий (TCP/IP, DNS, VPN, HTTP/HTTPS).
— Умение работать с SQL (SELECT, JOIN, UPDATE).
— Базовые знания Docker.
— Умение анализировать логи приложений и операционной системы.
— Английский язык на уровне чтения технической документации.
Будет плюсом:
— Опыт работы с Grafana, Zabbix, Prometheus.
— Знание Redis.
— Опыт работы с Git.
— Опыт работы с Asterisk, FreeSWITCH или другими VoIP-решениями.
— Понимание CI/CD и опыт сопровождения SaaS-продуктов.
Условия:
— Работа в международной AI-компании.
— Сменный график работы.
— Комфортный офис в Алматы.
— Бесплатные обеды.
— Оплата тренажерного зала.
— Возможность работать с современной AI-инфраструктурой и развиваться в направлении Linux/DevOps.
Location: Hong Kong SAR; Kuala Lumpur, Malaysia
About Us
Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.
Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.
Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.
Job responsibilities
Red-blue confrontation drill
Responsible for developing and executing penetration testing, red-blue confrontation, and practical attack and defense drills that simulate real attack scenarios, identifying potential security risks in enterprise networks, applications, cloud environments, work networks, and core business systems.
Lead or participate in red-blue confrontation exercises to evaluate the defense team's ability in attack detection, alarm analysis, traceability analysis, emergency response, and recovery.
Based on the real attack chain design exercise scenario, covering extranet breakthrough, web vulnerability exploitation, phishing entrance, privilege escalation, lateral movement, Data Discovery, privilege maintenance, and defense bypass stages.
Combining the attack review results, promote the continuous optimization of security detection rules, response processes, asset governance, and security base lines.
Attack Surface Analysis and Threat Research
Identify enterprise network exposure, internet assets, cloud assets, APIs, supply chain components, and third-party access risks, evaluate attack paths, and provide mitigation recommendations.
Monitor and collect threat intelligence, track vulnerability exploitation trends, APT attack methods, red team toolchain changes, and apply them to enterprise attack and defense exercises.
Combining business scenarios to model attack paths and discover feasible attack chains from external exposure surfaces to core assets.
Tracking AI-related security risks, including security issues in large-scale model applications, RAG systems, Agent systems, plug-in/tool calls, MCP services, AI code generation, and automated workflows.
AI Security and Large Model Attack and Defense
Responsible for the security evaluation of AI applications, intelligent agent systems, RAG Knowledge Base, AI Agent toolchain and model services within the enterprise.
Research and verify large-scale model-related attack techniques, including Prompt Injection, Jailbreak, Indirect Prompt Injection, data leakage, unauthorized tool invocation, security risks caused by model illusions, RAG poisoning, vector library pollution, sensitive information leakage, etc.
Design AI red team test cases and evaluation framework, and conduct security verification on model input and output, context isolation, permission control, tool call chain, and data access boundary.
Participate in the construction of AI security protection plan, including prompt word security policy, content security detection, tool call permission constraints, sensitive data desensitization, audit tracking, Agent sandbox isolation and security evaluation benchmark construction.
Explore the application of AI in red team automation, vulnerability analysis, attack path planning, PoC verification, and report generation, and promote the platformization, automation, and intelligence of attack and defense capabilities.
Tool and platform development
Develop and optimize Red Team-specific tools and scripts for vulnerability mining, information collection, privilege escalation, lateral movement, credential analysis, traffic disguise, defense bypass, and automated report generation.
Study and validate new attack techniques, and simulate real threats in combination with enterprise business scenarios.
Build or participate in the construction of automated security evaluation platform, integrated vulnerability scanning, audio fingerprint recognition, asset mapping, PoC verification, attack path analysis, AI Agent arrangement and other capabilities.
Combining LLM/Agent technology to explore automated penetration testing, intelligent vulnerability verification, code security auditing, and red team task scheduling.
Security evaluation and reporting
Conduct security evaluations on critical business systems, internal networks, cloud environments, work end points, API services, and AI applications, and output detailed technical reports, attack paths, impact analysis, and repair recommendations.
Output AI security evaluation reports for AI applications, including attack examples, risk levels, exploitable paths, data leakage risks, permission boundary issues, and governance recommendations.
Assist in improving enterprise security protection mechanisms, promote optimization of WAF, EDR, SIEM, NDR, HIDS, zero trust, identity permissions, and log auditing capabilities.
Transform attack and defense discovery into security detection rules, base line specifications, develop security requirements, and continuous governance mechanisms.
XFN collaboration
Collaborate with the blue team, security operation, infrastructure, R & D, algorithm, data, and business teams to complete attack review, vulnerability repair, detection rule optimization, and security capability building.
Provide security support to other departments of the enterprise, including emergency response drills, development security consulting, AI application pre-launch security review, and security training.
Participate in the security design review of AI applications and security products, and promote the advance of security capabilities in R & D, testing, and Pushonline.
Job requirements
Basic skills
Proficient in basic knowledge of cyber security, including TCP/IP protocol, network architecture, identity authentication, access control, principles and configurations of common security devices.
Proficient in common attack techniques and red team toolchains, such as Sliver, Cobalt Strike, NPS, Burp Suite, Metasploit, Nmap, Masscan, Frida, Impacket, etc.
Familiar with mainstream operating systems Windows, Linux, macOS security mechanism, log system, permission model and common use.
Familiar with common web frameworks, API architectures, microservice structures, containers, and security risks in Kubernetes environments.
Offensive and defensive technical capabilities
Proficient in penetration testing and red team processes, including information collection, vulnerability scanning, vulnerability exploitation, intranet penetration, privilege escalation, lateral movement, privilege maintenance, Data Discovery, and trace cleaning.
Familiar with the working principles and adversarial methods of enterprise-level security products, including WAF, EDR, SIEM, NDR, HIDS, zero-trust gateway, bastion host, and identity authentication system.
Possess independent vulnerability analysis and PoC writing capabilities, able to reproduce, verify, and assess the impact of public vulnerabilities and 0day/1day risks.
Proficient in one or more programming/scripting languages, such as Python, Go, Bash, PowerShell, JavaScript, etc., with experience in tool development and automation platform construction.
AI security capabilities
Familiar with the basic architecture of large-scale model applications, familiar with technical forms such as Prompt, RAG, Embedding, vector databases, Agent, Function Calling, MCP, and plugin systems.
Understand or practice AI security testing methods, including Prompt Injection, Jailbreak, RAG data poisoning, sensitive information leakage, unauthorized tool invocation, model output security, Agent permission escape, etc.
Able to design security test cases for AI applications, evaluate model input/output, context isolation, data boundaries, permission control, and tool invocation chain risks.
Experience in using AI to assist security work, including vulnerability analysis, code auditing, intelligence analysis, attack path planning, report generation, or automated testing.
Familiar with AI application security governance ideas, including model call auditing, prompt word security, sensitive data protection, content security detection, permission minimization, and sandbox isolation.
Experience requirements
More than 5 years of experience in red team, penetration testing, security research, or offensive and defensive exercises.
Candidates with experience in large-scale enterprise attack and defense drills, red-blue confrontation, HW/major support, cloud attack and defense, or intranet penetration are preferred.
Candidates with experience in AI security, large-scale model security, intelligent agent security, automated penetration testing platform or security tool platform construction are preferred.
Familiar with enterprise security construction system, able to promote defense capability, detection capability, and governance process optimization from an attack perspective.
Other capabilities
Priority will be given to those who hold security-related certifications such as ♀ P, OSCE, CISSP, CISP, CEH, CISSP, CCSP, etc.
Possess strong document writing and expression abilities, able to output high-quality technical reports, review documents, attack chain analysis, and security construction plans.
Possess good problem analysis ability, learning ability, teamwork ability, and stress resistance.
Be sensitive to new technologies, new Attack Surfaces, and new tools, and be able to proactively research and share internally.
Bonus points
Familiar with Cloud Computing Platform security and cloud attack and defense technologies, such as AWS, Azure, GCP, Tencent Cloud, Alibaba Cloud, etc.
Familiar with Kubernetes, containers, Service Mesh, CI/CD, DevSecOps and supply chain security.
Possess experience in zero trust, secure operation, threat hunting, Attack Surface management, and vulnerability management platform construction.
Familiar with MCP Server, AI Agent framework, RAG system, vector database, LLM API gateway, model security evaluation framework.
Experience in Automated Red Team, AI Penetration Testing, Intelligent Vulnerability Verification, Agent Orchestration, Security Knowledge Base or Security RAG System Construction.
Experience in vulnerability submission, CVE, technical articles, open source projects, topic sharing, or tool release in the security community.
Familiar with security frameworks such as MITRE ATT & CK, OWASP Top 10, OWASP LLM Top 10, NIST AI RMF, etc.
Why Join Us
At Bybit, we are committed to fostering a supportive and enriching work environment.
Our benefits include:
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.
Обязанности:
• Разработка программного обеспечения микроконтроллеров;
• Взаимодействие с разработчиком схемотехники изделий;
• Участие в разработке программ и методик изделий в части программного обеспечения микроконтроллеров;
• Участие в наладке программного обеспечения микроконтроллеров;
• Участие в разработке программной документации совместно с техническим писателем.
Требования:
• Профильное высшее техническое образование;
• Продвинутое знание языка С, понимание семантики, умение применять паттерны проектирования;
• Базовое владение C++ и любым языком для создания десктопных приложений (Python, C#, Java);
• Опыт работы с микроконтроллерами семейства STM32 (ARM Cortex-M), умение настраивать основную периферию, умение работать с отладочными интерфейсами;
• Опыт настройки и отладки основных интерфейсов: UART, SPI, I2C, CAN, понимание физических уровней RS485, RS232, MII;
• Разработка сетевых приложений, знание стека TCP/IP, работа с протоколами транспортного уровня (TCP, UDP);
• Умение работать с RTOS (FreeRTOS);
• Опыт разработки документации на программное обеспечение;
• Базовое знание схемотехники, умение анализа принципиальных схем;
• Умение работать с системами контроля версий (Git);
• Опыт работы с протоколом Modbus RTU (TCP).
Условия:
• Официальное трудоустройство с первого рабочего дня по ТК РФ;
• Место работы: г. Москва, МФК «Поклонка Плейс»;
• Стабильная и своевременная выплата заработной платы 2 раза в месяц;
• График работы: 5/2, с 09:00 до 18:00, выходной: суббота, воскресенье;
• ДМС + стоматология с первого дня работы.
Задачи:
— разработка backend API и распределённых сервисов
— поддержка высоконагруженных и конкурентных систем
Требования:
— 3+ года профессионального опыта в разработке
— сильный production-опыт с Python
— практический опыт с PostgreSQL и Redis
— опыт построения и поддержки backend API и распределённых сервисов
— опыт работы с конкурентными и высоконагруженными системами
— понимание принципов software architecture и system design
— опыт с Git и современными процессами разработки
— хорошее понимание сетевых основ: HTTP, TCP/IP, веб-технологии
— опыт с Prometheus, Grafana, Loki
— покрытие тестами (Pytest, Unit тесты, Интеграционные тесты) не менее 80%
Будет плюсом:
— опыт работы в доменах финансовый сектор, логистика, карты, 1С, документооборот
Требования к софт скиллам:
— самостоятельность
— проактивность
Условия:
— fulltime
— работа с проживанием в таунхаусе на время разработки проекта в Москве
— компания предоставляет релокацию
О компании:
Djatu — B2B-маркетплейс (агрегатор) для тяжёлых и негабаритных грузоперевозок с акцентом на доверие, безопасность сделки и полный цифровой цикл. Стадия — Seed.
ГибридseniorМосква; Формат: fulltime, работа с проживанием в таунхаусе на время разработки проекта в Москве; Компания предоставляет релокацию
Location: Lugano, Switzerland; Lausanne, Switzerland; Geneve, Switzerland; Chiasso, Switzerland; Berne, Switzerland; Stockholm, Sweden; Colombo, Sri Lanka; Madrid, Spain; Barcelona, Spain; Seoul, South Korea; Johannesburg, South Africa
Workplace: remote
Join Tether and Shape the Future of Digital Finance
At Tether, we’re not just building products, we’re pioneering a global financial revolution. Our cutting-edge solutions empower businesses—from exchanges and wallets to payment processors and ATMs—to seamlessly integrate reserve-backed tokens across blockchains. By harnessing the power of blockchain technology, Tether enables you to store, send, and receive digital tokens instantly, securely, and globally, all at a fraction of the cost. Transparency is the bedrock of everything we do, ensuring trust in every transaction.
Innovate with Tether
Tether Finance:
Our innovative product suite features the world’s most trusted stablecoin,
USDT
, relied upon by hundreds of millions worldwide, alongside pioneering digital asset tokenization services.
But that’s just the beginning:
Tether Power:
Driving sustainable growth, our energy solutions optimize excess power for Bitcoin mining using eco-friendly practices in state-of-the-art, geo-diverse facilities.
Tether Data:
Fueling breakthroughs in AI and peer-to-peer technology, we reduce infrastructure costs and enhance global communications with cutting-edge solutions like
KEET
, our flagship app that redefines secure and private data sharing.
Tether Education
: Democratizing access to top-tier digital learning, we empower individuals to thrive in the digital and gig economies, driving global growth and opportunity.
Tether Evolution
: At the intersection of technology and human potential, we are pushing the boundaries of what is possible, crafting a future where innovation and human capabilities merge in powerful, unprecedented ways.
Why Join Us?
Our team is a global talent powerhouse, working remotely from every corner of the world. If you’re passionate about making a mark in the fintech space, this is your opportunity to collaborate with some of the brightest minds, pushing boundaries and setting new standards. We’ve grown fast, stayed lean, and secured our place as a leader in the industry.
If you have excellent English communication skills and are ready to contribute to the most innovative platform on the planet, Tether is the place for you.
Are you ready to be part of the future?
About the job
P2P Node.js Engineer (Remote)
We're big fans of Node.js — Holepunch is built on it. During this next growth phase, we could use your help to expand and strengthen our core P2P networking and storage primitives. Our P2P technology covers a wide surface area, so if the parts of this following tech profile fits you, we’d love to talk to you.
Requirements
Extensive knowledge of P2P protocols (Kademlia, BitTorrent, libp2p, hypercore)
Demonstrable experience optimizing network protocols for performance
Advanced JavaScript skills for implementing high-performance networking code
Deep understanding of UDP and TCP/IP networking, including NAT traversal techniques
Experience implementing custom binary protocols and serialization formats
Familiarity with cryptographic primitives for secure P2P communication
Experience with performance profiling and optimization of networked systems
Preferred Qualifications
5+ years experience building production P2P systems or distributed systems
Experience optimizing JavaScript for low-latency networking applications
Knowledge of V8 internals and JavaScript performance characteristics
Experience with libuv and asynchronous I/O in C
Contributions to open-source P2P projects or networking libraries
Experience building reliable systems on unreliable networks
Experience with
Node.js
native addons and bridging between JS and C
Location: Remote (United States)
Thank you for considering Tailscale. If this job description resonates with you, please apply.
Frequently cited statistics show that people who identify with historically marginalized groups are likely to apply to jobs only if they meet 100% of the qualifications.
We encourage you to help us break that statistic!
About Tailscale
Tailscale is making safe connection effortless by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.
About the Role
Tailscale is seeking an experienced Commercial Solutions Engineer to partner with Sales in driving new business for Commercial customers. You will co-own a book of business with Account Executives, lead technical discovery and architecture design, and act as a trusted advisor to customers. This role blends deep networking and security expertise with strong sales acumen to win competitive deals, scale enablement, and influence product direction.
Key Responsibilities
Partner with AEs to identify, qualify, and close new Commercial customer opportunities.
Lead technical discovery, solution architecture, demos, and POCs to accelerate decision-making.
Guide complex multi-stakeholder deals, aligning technical and business objectives.
Provide structured feedback to shape product roadmap and GTM strategy.
Build scalable enablement resources, demo environments, and solution blueprints for the SE team.
What We Are Looking For
4/5+ years in a customer-facing SE/SA role within networking or security software
Proven experience co-owning pipeline and influencing quota outcomes with Sales
Strong networking fundamentals (TCP/IP, DNS, routing, firewalls) and troubleshooting skills
Deep understanding of zero-trust networking, secure connectivity, and IAM integrations (SSO, SAML, OIDC)
Understanding of AI gateway and governance platforms for centralized LLM access, usage visibility, and audit
Familiarity with privileged access management (PAM) including session recording, just-in-time access, and protocol-aware controls (e.g., Border0, CyberArk, Teleport)
Experience with infrastructure as code tools such as Terraform, Pulumi, Ansible, or CloudFormation
Hands-on architecture experience with AWS, GCP, and/or Azure
Excellent communication skills, capable of translating technical features into business value
Experience thriving in high-growth or startup environments
As a company, we strive to maintain fair and equitable compensation practices within our team across all roles and all levels. Tailscale's compensation package includes base salary, equity, and comprehensive benefits. The salary range displayed on each job posting represents the target range for a new hire's base salary. Individual offers may vary based on experience and skill set.
For this position, our pay ranges reflect target OTE (on target earnings), inclusive of base salary and variable compensation tied to the attainment of quarterly sales targets.
US Pay Range (OTE)
$150,000
—
$200,000 USD
What We Offer
An inclusive, flexible environment where you can be your authentic self.
We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life.
A competitive total compensation package.
This includes a base salary, an equity incentive plan and variable commission (for quota-based roles).
Comprehensive group benefits with no waiting period.
Take advantage of coverage for health, vision, dental, and more for you and your family!
Remote first company
—most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description.
Employer-funded retirement contributions.
Tailscale will match your retirement contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of your eligible compensation.
Connect with other Tailscalars IRL.
Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, the United Kingdom, and Singapore. We support intentional in-person connection through team travel and distributed collaboration.
Support for your personal and professional development.
Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities.
Paid time off and a healthy work-life integration.
Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world!
A build-your-own home office setup.
You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $500 USD to customize your workstation to make it your own.
Paid parental leave program
. We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups (20 weeks for birthing parents, 16 weeks for non-birthing parents).
Tailscale is committed to providing an accessible and inclusive hiring process. If you require an accommodation at any stage of the recruitment process or related to any aspect of this role, please contact your recruiter.
Our hiring process uses AI-assisted tools to help screen and assess candidates. All hiring decisions are made by people.
Please be aware that legitimate emails from Tailscale's talent team will only originate from @tailscale.com, @greenhouse.io, and @interviews.modernloop.io email addresses. For more information about protecting yourself from impersonators and scams, please visit
https://tailscale.com/scam-awareness
.
Location: Remote (Canada)
Thank you for considering Tailscale. If this job description resonates with you, please apply.
Frequently cited statistics show that people who identify with historically marginalized groups are likely to apply to jobs only if they meet 100% of the qualifications.
We encourage you to help us break that statistic!
About Tailscale
Tailscale is making safe connection effortless by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.
About the Role
Tailscale is seeking an experienced Commercial Solutions Engineer to partner with Sales in driving new business for Commercial customers. You will co-own a book of business with Account Executives, lead technical discovery and architecture design, and act as a trusted advisor to customers. This role blends deep networking and security expertise with strong sales acumen to win competitive deals, scale enablement, and influence product direction.
Key Responsibilities
Partner with AEs to identify, qualify, and close new Commercial customer opportunities.
Lead technical discovery, solution architecture, demos, and POCs to accelerate decision-making.
Guide complex multi-stakeholder deals, aligning technical and business objectives.
Provide structured feedback to shape product roadmap and GTM strategy.
Build scalable enablement resources, demo environments, and solution blueprints for the SE team.
What We Are Looking For
4/5+ years in a customer-facing SE/SA role within networking or security software
Proven experience co-owning pipeline and influencing quota outcomes with Sales
Strong networking fundamentals (TCP/IP, DNS, routing, firewalls) and troubleshooting skills
Deep understanding of zero-trust networking, secure connectivity, and IAM integrations (SSO, SAML, OIDC)
Understanding of AI gateway and governance platforms for centralized LLM access, usage visibility, and audit
Familiarity with privileged access management (PAM) including session recording, just-in-time access, and protocol-aware controls (e.g., Border0, CyberArk, Teleport)
Experience with infrastructure as code tools such as Terraform, Pulumi, Ansible, or CloudFormation
Hands-on architecture experience with AWS, GCP, and/or Azure
Excellent communication skills, capable of translating technical features into business value
Experience thriving in high-growth or startup environments
As a company, we strive to maintain fair and equitable compensation practices within our team across all roles and all levels. Tailscale's compensation package includes base salary, equity, and comprehensive benefits. The salary range displayed on each job posting represents the target range for a new hire's base salary. Individual offers may vary based on experience and skill set.
For this position, our pay ranges reflect target OTE (on target earnings), inclusive of base salary and variable compensation tied to the attainment of quarterly sales targets.
CAN Pay Range (OTE)
$201,000
—
$268,000 CAD
What We Offer
An inclusive, flexible environment where you can be your authentic self.
We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life.
A competitive total compensation package.
This includes a base salary, an equity incentive plan and variable commission (for quota-based roles).
Comprehensive group benefits with no waiting period.
Take advantage of coverage for health, vision, dental, and more for you and your family!
Remote first company
—most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description.
Employer-funded retirement contributions.
Tailscale will match your retirement contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of your eligible compensation.
Connect with other Tailscalars IRL.
Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, the United Kingdom, and Singapore. We support intentional in-person connection through team travel and distributed collaboration.
Support for your personal and professional development.
Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities.
Paid time off and a healthy work-life integration.
Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world!
A build-your-own home office setup.
You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $500 USD to customize your workstation to make it your own.
Paid parental leave program
. We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups (20 weeks for birthing parents, 16 weeks for non-birthing parents).
Tailscale is committed to providing an accessible and inclusive hiring process. If you require an accommodation at any stage of the recruitment process or related to any aspect of this role, please contact your recruiter.
Our hiring process uses AI-assisted tools to help screen and assess candidates. All hiring decisions are made by people.
Please be aware that legitimate emails from Tailscale's talent team will only originate from @tailscale.com, @greenhouse.io, and @interviews.modernloop.io email addresses. For more information about protecting yourself from impersonators and scams, please visit
https://tailscale.com/scam-awareness
.
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Locations:
Austin, TX
New York, NY
Washington DC
San Francisco Bay Area
About the role:
Cloudflare provides consultative and hands-on-keyboard implementation and migration services for enterprise customers. As a Senior Zero Trust Consultant within Professional Services, you are a senior individual contributor in the post-sales landscape, responsible for the technical execution of our most complex Zero Trust / SASE solutions and for guiding our customers to get the most value possible from their Cloudflare investment. You are a technical leader in the room — trusted to own the hardest engagements end to end, unblock escalations, and set the standard for how the practice delivers.
You are a security and networking specialist with deep, hands-on experience across ZTNA, Secure Web Gateway, DNS filtering, Data Loss Prevention, CASB, Remote Browser Isolation, Cloud Email Security, and the identity and network on-ramps that tie a SASE architecture together. You are equally comfortable designing an architecture, configuring it hands-on-keyboard (including as code), troubleshooting a packet capture, and explaining the outcome to a customer's security leadership.
This position has working hours Monday to Friday, 09:00–18:00. Occasionally we support customers over weekends for specific changes that must be done outside their business hours. Less than 15% of travel is expected. Work is performed in English; fluency in Spanish or Portuguese is a strong advantage.
Responsibilities:
Plan and deliver timely and organized services for customers, ensure customers see the full value in Cloudflare’s products and advice on product best practices.
Gather business and technical requirements, use cases and any other information required to build, migrate and deliver a solution on behalf of the customer and transition the Cloudflare working environment to the customer. Produce a Solution Design, HLD, LLD, databuilds, procedures, scripts, test plans, drawings, deployment plan, migration plan, as-builts, and any other artifacts necessary to deliver the solution and transition smoothly into the customer’s technical teams.
Implement changes on behalf of the customer in the Cloudflare environment following the customer's change-management process. Provide guidance to the customer to configure their CPEs and integration points (identity providers, endpoints/MDM, DNS, network on-ramps, SIEM).
Troubleshoot implementation issues and collaborate with Customer Support, Engineering, and other teams to drive technical escalations to resolution.
Contribute to the success of the organization through knowledge-sharing — internal and external documentation, technical Q&A, and iterating on best practices. Build operational assets such as templates, automation scripts, procedures, and workflows.
Lead multi-workstream engagements and act as the senior technical owner for complex deployments; support pre-sales scoping and solution design; and mentor junior consultants, helping scale the practice through reusable intellectual property.
Experience might include a combination of the skills below:
3+ years in a customer-facing technical implementation or onboarding team, security engineering team, security operations center, or other highly technical team, including 3+ years focused on Zero Trust / SASE.
Strong command of the OSI model and core protocols: TCP/IP, TLS (including TLSv1.3 and mTLS), DNS, HTTP/2.
Deep understanding of Zero Trust technologies: Zero Trust Network Access (ZTNA), Secure Web Gateway (SWG), Remote Browser Isolation (RBI), Data Loss Prevention (DLP), CASB, and Cloud Email Security.
Deep understanding of internet and security technologies: forward and reverse proxies with content filtering & DLP, sandboxing, firewalls/NGFW, WAF, bot management, rate limiting, and SSL/IPsec & SSL/TLS VPN appliances and services.
Modern identity: SSO via SAML and OIDC, SCIM user/group provisioning and deprovisioning, LDAP/Active Directory, MFA/FIDO2, and the role of the IdP — with hands-on experience on Microsoft Entra ID, Okta, or Ping.
DNS in depth: DNS filtering, DoH/DoT, conditional forwarding / split-DNS, internal-zone resolution, and local domain fallback.
Endpoints: software distribution and deployment across Windows, macOS, and Linux; Windows and Linux server administration; and client-endpoint troubleshooting across all three platforms.
Networking troubleshooting: debugging network connectivity with standard tools (packet capture, DNS/HTTP tracing).
Ability to manage a project, work to deadlines, and prioritize between competing demands.
Work performed in English; fluency in Spanish or Portuguese is a strong advantage.
Demonstrated technical experience (hands-on-keyboard) with:
At the senior level we expect these to be hands-on-keyboard — configured, deployed, migrated, or troubleshot in production — not just understood conceptually.
Experience working with Reverse & Forward proxies with Content Filtering & DLP technologies
Software distribution & deployment in Microsoft, Mac and Linux environments
Detailed working knowledge of web based security, network segmentation, security proxies, Firewalls and NGFWs, SSL/IPSec and SSL/TLS VPN appliances & services, etc
Integrating identity providers with enterprise applications end to end — SSO (SAML/OIDC) and SCIM provisioning, group/attribute mapping, and troubleshooting the IdP handshake.
Windows & Linux Server system administration
Windows, MacOS and Linux client endpoints troubleshooting
Experience debugging Network connectivity issues using Network Troubleshooting Tools
Preferred but not mandatory:
Automation / Infrastructure-as-Code: Terraform (ideally the Cloudflare provider), REST APIs, Python/Bash scripting, Git, CI/CD, and policy-as-code.
Cloud platforms: AWS / Azure / GCP networking — VPC/VNet, Security Groups / NSG / NACL, cloud-native DNS resolvers (Route 53 Inbound Endpoints, Azure Private DNS), cloud IAM, and deploying connectors in IaaS.
SASE on-ramp networking: IPsec/GRE tunnel configuration, BGP, Anycast, network segmentation for Zero Trust, and SD-WAN / MPLS / WAN-optimization background.
MDM software distribution (Intune, Jamf).
Identity & directory tooling: Microsoft Active Directory, GPO, Entra ID, and Intune.
Observability: log export (Logpush) and SIEM integration (Splunk, Microsoft Sentinel, Elastic, Chronicle); Digital Experience Monitoring (DEX).
Frameworks & compliance: NIST Zero Trust Architecture; GDPR, DORA, NIS2, ISO 27001, PCI DSS, HIPAA, SOC 2 (FedRAMP if US-government work applies).
Certifications: CISSP, CCSP, SC-300, AZ-500, AWS Security Specialty, CCNP/CCIE, CompTIA, or equivalent are a strong plus. Forensic certifications (GCFA, GCFE, GCIA, GCIH) are welcome but not central to this role.
Emerging: familiarity with AI security / shadow-AI governance — AI-tool discovery and gating, and AI Gateway concepts.
Application Deadline:
January 26,
2027
Compensation
Compensation may be adjusted depending on work location.
For SF, SJ, and Bay Area Metro based hires: Estimated annual salary of $163,000 - $224,000
.
For California - Remote, DC Metro, New York City, NY Metro: Estimated annual salary of $156,000 - $215,000
.
For Colorado: Estimated annual salary of $142,000 - $195,000
.
Estimated variable compensation target of $14,200 - $19,500
.
This role is also eligible to earn variable compensation in accordance with Cloudflare's Sales Compensation Plan.
Equity
This role is eligible to participate in Cloudflare's equity plan.
Benefits
Cloudflare offers a complete package of benefits and programs to support you and your family. Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun! The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S.
Health & Welfare Benefits
Medical/Rx Insurance
Dental Insurance
Vision Insurance
Flexible Spending Accounts
Commuter Spending Accounts
Fertility & Family Forming Benefits
On-demand mental health support and Employee Assistance Program
Global Travel Medical Insurance
Financial Benefits
Short and Long Term Disability Insurance
Life & Accident Insurance
401(k) Retirement Savings Plan
Employee Stock Participation Plan
Time Off
Flexible paid time off covering vacation and sick leave
Leave programs, including parental, pregnancy health, medical, and bereavement leave
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Location:
Singapore or Tokyo, Japan
This position is open to experienced candidates, as well as fresh graduates who will be graduating in December 2026 or Jan 2027.
About the Team
The Cloudflare Customer Support Team solves complicated problems and answers technical questions via phone, email, chat and social media. Whether it is a Wordpress blogger using our services for free or a global Enterprise business with petabytes of web traffic, we are always eager to assist. We are the eyes and ears of Cloudflare, acting as the real-time voice of the customer to help communicate their needs and real-world use cases back to the rest of the company - for better service and future product development.
What You'll Do
Do you love solving complex technical issues and interacting with people? Are you passionate about providing premium-level support to customers and are a standout colleague? Cloudflare is seeking an experienced
Network Security Engineer
to join our team and support our largest and most technically sophisticated customers in resolving technical problems, threats or attacks on their infrastructure at OSI Layers 3, 4, and 7. This will span the range of Cloudflare products from Magic Transit Infrastructure Protection, Argo Smart Routing, DDoS mitigation and Network Firewall, to using the Web Application firewall (WAF), Spectrum and Rate Limiting to help customers.
Serve as a trusted technical advisor for our enterprise customers, responding to and resolving inquiries and incidents related to network security and performance, while delivering timely, high-quality and personalized assistance.
Work directly with customers to diagnose, troubleshoot and resolve complex technical issues involving DDoS mitigation, firewall rules, SSL/TLS, network confirmation, and other security configurations.
Create and maintain knowledge base articles, technical guides, and troubleshooting documentation for internal and customer use.
Compare traffic signatures and attributes including IP addresses, cookie variations, HTTP headers, and JavaScript footprints to determine what is good traffic and what is malicious
DDoS mitigation for OSI layers 3,4, & 7: advise customers on how to filter malicious traffic using Cloudflare tools like Magic Transit, Network Firewall, WAF, IP reputation lists, packet inspection, blocklisting, allowlisting, and rate limiting
Work with Engineering and Product teams to improve products and tools
Utilize generative AI and automation tools to streamline log analysis, accelerate root-cause analysis during security incidents, and optimize customer response times.
What We're Looking For
You have a minimum of 4 years experience working as a Network Security Engineer / Technical Support Engineer / Sr. Support Engineer supporting networking or web security products.
Exceptional troubleshooting and problem-solving skills, with the ability to simplify complex concepts for customers.
Strong customer service orientation and communication skills
Ability to work independently and collaboratively in a fast-paced, dynamic environment.
Strong understanding of network protocols, including TCP/IP, DNS, HTTP/S, and BGP, with a particular focus on anycast routing concepts and implementation, as well as tools such as iptables and looking glass.
Proven experience troubleshooting network connectivity issues, BGP routing, and GRE tunnels, and performing packet capture analysis
Confident with command line and tools, including curl, dig, traceroute, openssl, git
Experience in a web development and / or hosting environment such as installing and configuring web servers like Apache, Nginx, Caddy and IIS.
You are competent at writing scripts in Bash, Python, JavaScript or other scripting languages.
You have worked with PostgreSQL, MySQL, MS SQL, and other database servers.
Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
Relevant certifications such as CISSP, GCIA GCIH, GCFA, GCFE or equivalent.
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Location: Serbia
POWER A WORLD OF TRUST
Incode is the leading provider of world-class identity solutions that is reinventing the way humans authenticate and verify their identities online to power a world of digital trust.
Through our revolutionary identity solutions, we are unleashing the business potential of universal industries including finance, government, retail, hospitality, gaming, and more, by reducing fraud and transforming human interactions with data, products, and services.
We’re in the process of rapidly scaling our diverse global team and we’re looking for entrepreneurial individuals and leaders who are curious, driven, and excited by ownership to join a Unicorn-status scale-up!
About Incode
Incode is a Series B unicorn ($1.25 B valuation) rewriting how the world proves identity. Our AI-powered platform lets leading banks, fintechs, marketplaces, and governments deliver friction-free experiences while defeating fraud and safeguarding privacy. Customers such as Citi, AirBnB, Block, Chime, Sixt, and TikTok rely on Incode to power their identity verification and security. Recently named a leader in the Gartner® Magic Quadrant™ for Identity Verification, we’re scaling fast - and we need a product-marketing leader who can turn breakthrough technology into a category-defining narrative.
The Impact You’ll Make
As a DevOps Engineer at Incode, you will play an important role in supporting and improving the cloud infrastructure behind our AI-driven identity verification platform. You’ll work on scalable, cloud-native systems that power secure and seamless identity experiences globally, with a focus on AWS, Kubernetes, and Terraform.
In this role, you’ll help set up new environments, maintain and upgrade existing systems, support infrastructure automation, and help make our platforms more stable, reliable, and ready for further scaling. You’ll work closely with developers and other engineering teams to troubleshoot issues, improve deployment processes, and ensure our applications run smoothly in production.
Your work will directly contribute to the reliability, efficiency, and scalability of Incode’s infrastructure, helping us deliver trusted identity verification solutions to customers around the world.
What You’ll Own & Drive
Cloud-Native Infrastructure
- Help design, implement, and maintain Kubernetes-based environments that support scalability, resilience, and security.
Environment Setup & System Upgrades
- Support the setup of new cloud environments, assist with system upgrades, and help keep infrastructure components up to date and aligned with best practices.
Infrastructure as Code (IaC)
- Work with Terraform to manage and improve infrastructure automation, ensuring consistency and reliability across environments.
Production Reliability
- Investigate, troubleshoot, and resolve infrastructure-related issues in live environments, helping minimize downtime and maintain a smooth customer experience.
Monitoring & Logging
- Support and improve observability solutions using tools such as Prometheus, Loki, ELK, or similar stacks.
Developer Support
- Collaborate closely with development teams, helping them resolve infrastructure, deployment, and environment-related challenges.
Engineering Standards
- Contribute to internal best practices, documentation, automation improvements, and processes that help the DevOps team operate more efficiently.
Continuous Improvement
- Stay curious about AWS, Kubernetes, Terraform, and DevOps practices, bringing ideas that can improve stability, automation, and scalability.
The Qualities That Set You Apart
Cloud-Native Mindset
- You have hands-on experience working with Kubernetes and understand its core concepts, including deployments, services, pods, ingress, and basic troubleshooting.
Infrastructure as Code Enthusiast
- You have practical experience with Terraform and understand how infrastructure automation helps create consistent and repeatable environments.
CI/CD Experience
- You have worked with CI/CD pipelines using tools such as GitLab CI/CD or GitHub Actions and understand how they support reliable software delivery.
AWS Knowledge
- You are familiar with core AWS services such as EC2, VPC, S3, IAM, and related offerings, and are comfortable working in cloud environments.
Systems & Networking Understanding
- You understand networking fundamentals such as TCP/IP, DNS, and HTTP/S, and can apply this knowledge when troubleshooting or supporting infrastructure.
Problem Solver
- You are comfortable investigating issues, asking questions, and working with others to find practical solutions.
Collaborative Communicator
- You can communicate clearly with technical peers and developers, explain issues or solutions, and contribute constructively in a team environment.
Your Background
Experience as a DevOps Engineer, Cloud Engineer, Infrastructure Engineer, or in a similar role.
Hands-on experience working with Kubernetes-based applications or environments.
Practical experience with Terraform and infrastructure automation.
Experience working with CI/CD pipelines, preferably GitLab CI/CD or GitHub Actions.
Familiarity with AWS services such as EC2, VPC, S3, IAM, and related cloud services.
Understanding of networking protocols and best practices, including TCP/IP, DNS, and HTTP/S.
Experience supporting developers with infrastructure, deployment, or environment-related topics.
Experience helping set up new environments, upgrade systems, or maintain cloud infrastructure.
Strong written and verbal communication skills, with the ability to explain technical topics clearly.
Why Incode?
Mission with Meaning
- Shape how billions of people prove identity - safely, simply, and ethically.
Rocket-Ship Growth
- Join at an inflection point where your strategies will compound in value for years.
Elite Team & Backing
- Work a truly global with top engineers, designers, and investors who share your ambition to dominate a category.
Ownership & Autonomy
- Operate like a founder with the resources of a unicorn.
Global Impact
- Every program you launch will reverberate across industries and continents.
Ready to ignite the future of trust?
Lead the narrative. Empower the field. Join Incode and turn innovation into unstoppable market momentum.
Aspects of our Culture:
High performance
Freedom & responsibility
Context, not control
Highly aligned, loosely coupled
Continuous Feedback
Promotions & Development
Learn more about
Life at Incode
!
Benefits & Perks:
Flexible Working Hours & Workplace
Open Vacation Policy
Equal Opportunities:
Incode is an equal opportunity employer, committed to creating a diverse and inclusive work environment. We take great pride in having an inclusive, diverse, and global team, and we are always looking for talented and passionate individuals from all backgrounds and walks of life. As part of our commitment to inclusion, we ensure that reasonable accommodations are available throughout the hiring process. If you require any accommodation due to a disability or specific need, please let our Talent Acquisition team know—we’ll do our best to support you.
Applicant Data Privacy:
We will only use your personal information concerning Incode’s application, recruitment, and hiring processes.
Responsible for planning, designing, optimizing, and assuring end-to-end transport networks supporting 2G, 3G, 4G, and 5G services.
Key Responsibilities
Develop HLD and LLD solutions for microwave, IP/MPLS, optical, and enterprise transport networks.
Perform microwave path planning, link-budget calculations, frequency planning, interference analysis, and capacity dimensioning.
Audit transport network capacity, configuration, quality, resilience, and performance.
Monitor KPIs such as utilization, throughput, latency, jitter, packet loss, availability, and congestion.
Troubleshoot performance issues and provide optimization and capacity-expansion recommendations.
Design and validate QoS, redundancy, route diversity, and synchronization solutions.
Support rollout, modernization, migration, acceptance, and service-readiness activities.
Coordinate with RAN, Core, IP, Optical, and Operations teams.
Required Qualifications
Bachelor’s degree in Telecommunications, Electrical, Electronics, Computer, or related Engineering.
Strong knowledge of 2G/3G/4G/5G transport architecture, including fronthaul, midhaul, and backhaul.
Experience in microwave and mobile transport planning and optimization.
Proficiency with Ellipse, Atoll, Pathloss, or similar planning tools.
Good knowledge of TCP/IP, Ethernet, VLAN, MPLS, routing, QoS, and traffic engineering.
Hands-on experience with transport NMS/EMS and RAN OSS platforms such as NCE, NSP, ENM, NetAct, or iMaster.
Knowledge of microwave, routing, switching, optical transport, SyncE, PTP, and NTP.
Experience in GIS, KPI analysis, time-series data, probes, and benchmarking tools.
Strong analytical, troubleshooting, communication, and reporting skills.
Fluent in written and spoken English.
Preferred
Knowledge of RAN and Core Networks.
Experience in forecasting, anomaly detection, automation, Python, SQL, Power BI, or Grafana.
Relevant Cisco, Juniper, Nokia, Huawei, or Ericsson certification.
География найма не уточнена
УдалённоRemote (Canada)
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
ГибридWe're looking for a hands-on IT Operations Engineer to support our colleagues across multiple international locations, with regular on-site presence in Bratislava
Hong Kong SAR; Kuala Lumpur, Malaysia
УдалённоLugano, Switzerland; Lausanne, Switzerland; Geneve, Switzerland; Chiasso, Switzerland; Berne, Switzerland; Stockholm, Sweden; Colombo, Sri Lanka; Madrid, Spain; Barcelona, Spain; Seoul, South Korea; Johannesburg, South Africa