Location: San Francisco, CA
Workplace: OnSite
ABOUT US
Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia.
We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do.
Our co-founders are Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/. Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace.
SECURITY ENGINEER
Security Engineering builds the foundations that let Sierra deliver powerful AI agents while protecting customer data and trust. We partner across product and platform to make security, privacy, and safety core product capabilities and secure defaults.
WHAT YOU’LL DO
Our work spans several security domains. You’ll go deep where your strengths and interests are strongest, with opportunities to explore new areas alongside the team.
Build the Foundations of Trust.
Design and ship systems and controls that make Sierra secure by default — spanning product security, infrastructure security, enterprise security, identity, and detection and response. You’ll work across all layers of our platform to identify risk, strengthen architectures, and build durable defenses.
Own Cross-Cutting Systems.
Partner with product, platform, and infrastructure team to threat model designs, review code and architectures, and implement and evolve Sierra’s security primitives. You’ll make pragmatic design trade-offs between usability, performance, reliability, and security.
Find and Reduce Real Risk.
Identify vulnerabilities, investigate suspicious behavior, and improve detections and response workflows across applications, cloud infrastructure, identity, endpoints, and internal systems. Turn what you learn into systemic fixes and controls that prevent entire classes of issues.
Automate and Scale Security Workflows.
Create developer-friendly tooling to reduce risk and friction — whether through automating security checks in CI/CD, building secure paved paths, improving vulnerability discovery, or instrumenting high-signal detection and response.
WHAT YOU’LL BRING
Deep Security Expertise.
Strong security fundamentals and depth in at least one domain, such as product security, platform or cloud security, enterprise security, identity, detection and response, or offensive security. You can apply that expertise across unfamiliar systems and emerging threats.
Product and Platform Mindset.
You care about building secure, scalable systems that enable, not block, innovation. You work closely with teams across Sierra to make trade-offs clear and help them move quickly without sacrificing trust.
Software Engineering and Systems Thinking.
You’re comfortable reading and writing code, understanding how production systems fit together, and building pragmatic software solutions to security problems. You can reason about system design and contribute to APIs, services, and security controls, with an eye toward reliability and maintainability.
Curiosity and Ownership.
You take ambiguous, cross-cutting problems from first principles to production and go deep when needed: threat modeling a distributed system, tracing an authorization decision across services, or following an investigation from weak signal to root cause. You define the problem, align partners, build the solution, and own it in production.
EVEN BETTER IF…
- You’ve worked across more than one of product security, infrastructure security, enterprise security, detection and response, or offensive security.
- You’ve built security frameworks, platforms, or solutions that engineers and responders rely on to prevent, detect, investigate, and remediate security issues at scale.
- You have exposure to AI systems or care about designing secure-by-default LLM applications and agentic systems.
- You think like an attacker — you naturally ask “what could go wrong?” when reviewing designs or investigating systems. You’ve found or fixed real security issues in production.
- You thrive in 0→1 environments, where foundational systems have to balance speed, reliability, and trust.
OUR VALUES
- Trust: We build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work.
- Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it.
- Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn’t right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve.
- Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time.
- Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company for parents. We support and respect each other and celebrate each other’s personal and professional achievements.
WHAT WE OFFER
We want our benefits to reflect our values and offer the following to full-time employees:
- Flexible (unlimited) paid time off
- Medical, dental, and vision benefits for you and your family
- Life insurance and disability benefits
- Retirement plan dependent on country of employment
- Parental leave
- Fertility and family building benefits through Carrot
- Lunch, as well as delicious snacks and coffee to keep you energized
- Discretionary benefit stipend giving people the ability to spend where it matters most
- Free alphorn lessons
These benefits are further detailed in Sierra's policies, may vary by region, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full-time employees can participate in Sierra's equity plans subject to the terms of the applicable plans and policies.
BE YOU, WITH US
We're working to bring the transformative power of AI to every organization in the world. To do so, it is important to us that the diversity of our employees represents the diversity of our customers. We believe that our work and culture are better when we encourage, support, and respect different skills and experiences represented within our team. We encourage you to apply even if your experience doesn't precisely match the job description. We strive to evaluate all applicants consistently without regard to race, color, religion, gender, national origin, age, disability, veteran status, pregnancy, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.
Location: New York City, NY | Seattle, WA; San Francisco, CA | New York City, NY | Seattle, WA; Washington, DC
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
We're seeking an exceptional engineer to join Anthropic's Detection Platform team to build and scale our next-generation security analytics infrastructure. In this role, you'll architect and implement data pipelines that process massive amounts of security telemetry, develop ML-powered detection systems, and create innovative solutions that leverage Claude to transform security operations.
Responsibilities:
Build AI-powered platform responsible for all aspects of D&R capabilities from detection development to incident response
Design and implement scalable data pipelines for ingesting and processing security telemetry across our rapidly growing infrastructure
Architect solutions for storing and efficiently querying large volumes of security-relevant data
Create rapid prototypes and proof-of-concepts for new security tooling and analytics capabilities
Work closely with security and infrastructure teams to understand requirements and deliver solutions
Mentor engineers and contribute to hiring and growth of the Security team
Participate in on-call shifts
You may be a good fit if you:
7+ years of experience in software engineering with a focus on security, infrastructure and/or data pipelines
Track record of building and maintaining internal developer tools or security platforms
Strong understanding of data processing pipelines and experience working with large-scale logging systems
Experience with:
Test-driven software development and/or CI/CD (plus for direct experience with Detection-as-code workflows)
Infrastructure-as-code (Terraform, CloudFormation)
Query optimization for large datasets
Experience with building stable and scalable services on cloud infrastructure and serverless architectures
Ability to write maintainable and secure code in Python
Experience working with security teams and translating requirements into technical solutions
Ability to lead technical projects with minimal guidance
Track record of driving engineering excellence through high standards, constructive code reviews, and mentorship
Proven ability to lead cross-functional security initiatives and navigate complex organizational dynamics
Outstanding communication skills, translating technical concepts effectively across all organizational levels
Demonstrated success in bringing clarity and ownership to ambiguous technical problems
Strong systems thinking with ability to identify and mitigate risks in complex environments
Strong candidates may also have experience with:
Experience building security tooling from the ground up
Background in implementing security monitoring solutions (SIEM, log aggregation, EDR)
Background in detection engineering or security operations
Experience with:
SOAR platform/automation development
Data lake / Database architecture
API design and internal platform creation
Track record of applying ML/AI to security problems
Experience scaling security operations in a high-growth environment
Deadline to apply:
None. Applications will be reviewed on a rolling basis.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$320,000
—
$405,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: New York, New York / Remote
Workplace: remote
About the Company
Founded in 2018 by professors of Yale University and Columbia University, CertiK is a pioneer in blockchain security, utilizing best-in-class AI technology to secure and monitor blockchain protocols and smart contracts. CertiK’s mission is to secure the cyber world. Starting with blockchain, CertiK applies cutting-edge innovations from academia into enterprise, enabling mission-critical applications to be built with security and correctness. CertiK is one of the fastest growing and most trusted companies in blockchain security and has become a true market leader. Our clients include leading projects such as Aave, Polygon, Binance Smart Chain, Yearn, and Chiliz. Our investors include top VCs like Tiger Global, Coatue Management, Shunwei Capital and Hillhouse Capital as well as industry leaders like Coinbase Ventures and Binance.
About the Position
The primary focus of this role is to pioneer the development of an intelligent AI agent powered by large language models (LLMs) to enhance our security audit tools in the blockchain space. As a Blockchain Security Expert intern, you will work closely with our blockchain security team to bridge cutting-edge academic research with practical applications. Your efforts will be dedicated to designing, fine-tuning, and integrating LLM-driven AI agents that automatically analyze smart contracts and identify potential vulnerabilities. In this role, you'll be immersed in research and experimentation, exploring new methods to improve threat detection and risk assessment within our security audit platform, thereby directly contributing to more secure blockchain infrastructures.
Responsibilities
Collaborate with our blockchain security team to design and implement a large language model (LLM)-based AI agent for security audit tools.
Experiment with novel AI techniques to enhance threat detection and risk assessment in blockchain environments.
Assist in transforming cutting-edge research on AI agents into practical, scalable security auditing solutions.
Continuously research emerging trends in LLMs, AI agent architectures, and cybersecurity, and proactively propose improvements.
Requirements
Currently pursuing or recently completed a PhD in Artificial Intelligence, Computer Science, or a related field, with a strong emphasis on machine learning, natural language processing, and/or cybersecurity.
Deep understanding of LLM architectures (e.g., transformers) and hands-on experience in training or fine-tuning such models.
Proficiency in Python and experience with deep learning frameworks (e.g., PyTorch or TensorFlow).
Basic familiarity with blockchain technology and smart contract development is a plus.
Excellent analytical skills, problem-solving capabilities, and the ability to thrive in a fast-paced, innovative startup environment.
Strong written and verbal communication skills in English.
Bonus Points
Prior research or project experience in developing AI agents or automated security analysis tools.
Exposure to security audit methodologies and vulnerability assessment, particularly in blockchain or smart contract environments.
Familiarity with blockchain programming languages (e.g., Solidity) and platforms (e.g., Ethereum).
Publications or contributions to leading conferences/journals in AI, NLP, or cybersecurity.
Demonstrated ability to translate research insights into effective, production-ready tools.
Target monthly salary for this role performed is $6,000 - $8,000 if based in the US. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
CertiK accepts applications for this position on an ongoing basis.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Location: US / Remote
Workplace: remote
About the Company
Founded in 2018 by professors of Yale University and Columbia University, CertiK is a pioneer in blockchain security, utilizing best-in-class AI technology to secure and monitor blockchain protocols and smart contracts. CertiK’s mission is to secure the cyber world. Starting with blockchain, CertiK applies cutting-edge innovations from academia into enterprise, enabling mission-critical applications to be built with security and correctness. CertiK is one of the fastest growing and most trusted companies in blockchain security and has become a true market leader. Our clients include leading projects such as Aave, Polygon, Binance Smart Chain, Yearn, and Chiliz. Our investors include top VCs like Tiger Global, Coatue Management, Shunwei Capital and Hillhouse Capital as well as industry leaders like Coinbase Ventures and Binance.
About the Position
The primary responsibility of this role is contributing to CertiK’s security-related services at the intersection of cybersecurity and blockchain. CertiK’s offerings include security consulting, security reviews, and security auditing of smart contracts and blockchains, alongside penetration testing and various verification processes.
As a Security Engineer at CertiK, , You’ll discover and analyze security vulnerabilities in blockchain smart contracts, summarize attacked vulnerabilities, and design feature code analysis tools. You’ll also stay up-to-date with analysis tools and new technology trends to further strengthen CertiK’s security offerings and expand our services.
Responsibilities
Participate in blockchain smart contract audits, identifying, analyzing, and addressing security vulnerabilities.
Help evaluate and define attack models for blockchain security.
Summarize and extract key characteristics from exploited code to build and maintain tools for feature code analysis.
Research and work with different analysis tools, continually learning and adapting to emerging technologies in the space.
Requirements
A bachelor’s degree (or higher) in full-time education, preferably in a science or engineering field, plus 3+ years of work experience.
Familiarity with fundamental information security concepts.
Proficiency in at least one of the following languages: Solidity, Go, Rust, C++, Python, or Node.js, along with a solid grasp of common algorithms.
A demonstrated ability to function in an English working environment with strong English reading and writing skills.
A passion for blockchain technology and a drive to learn and adapt to new technologies.
Bonus Points
Experience working with production pipelines—maintaining or developing them.
Familiarity with static code analysis (e.g., Syntax Analysis, Semantic Analysis, Taint analysis).
Exposure to popular blockchain-related platforms and technologies (e.g., Ethereum, Hyperledger, Cosmos).
Prior knowledge of blockchain smart contracts, security audits, and associated best practices.
Hands-on blockchain experience such as evaluating risks for blockchain projects or analyzing on-chain security events.
Target annual salary for this role performed is $90,000 - $150,000 if based in the US. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
CertiK accepts applications for this position on an ongoing basis.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Location: Delhi, India
Workplace: remote
About us:
TechBiz Global is a leading recruitment and software development company. Our diverse, globally distributed team provides IT recruitment, outstaffing, outsourcing, software development, and different consulting services with a primary focus on making our partners achieve their business goals successfully.
With headquarters in Germany we have successful clients all over the world. We can understand your unique needs. Our team has hands-on experience with the challenges that come with rapid growth and the IT sector. That’s why all of our offerings are built with a tech mindset.
Job Summary:
We are seeking for client
for a one month project
highly skilled and experienced SIEM Engineer with 5-8 years of hands-on experience working on Security Information and Event Management (SIEM) tools such as QRadar, Splunk, Microsoft Sentinel, Elastic Stack (Elasticsearch, Logstash, Kibana), and other SIEM platforms. The candidate will be responsible for the design, deployment, configuration, and management of SIEM solutions, ensuring efficient monitoring and proactive threat detection across the organization. This role involves collaboration with security teams to optimize incident detection, analysis, and response processes.
Key Responsibilities:
SIEM Implementation & Configuration:
Design, deploy, and configure SIEM solutions, including Elastic Stack (Elasticsearch, Logstash, Kibana), Wazuh, QRadar, Splunk & Microsoft Sentinel.
Integrate various log sources (e.g., firewalls, IDS/IPS, network devices, applications),/OT/IOT into the SIEM platform.
Develop and fine-tune correlation rules, dashboards, and alerts for proactive threat detection.
Perform system upgrades, patches, and manage the overall health of the SIEM environment.
Log Management & Monitoring:
Ensure proper log ingestion from multiple data sources, including Elasticsearch and Kibana, and troubleshoot any logging issues.
Maintain data retention policies, manage storage, and optimize SIEM performance.
Monitor and analyze system and security logs for anomalies, potential threats, or suspicious activities.
Elastic Stack Management or any open source like Wazuh:
Configure and maintain Elasticsearch clusters for log storage and search functionality.
Utilize Kibana to create custom dashboards, visualizations, and reports for security monitoring.
Work with Logstash or other log shippers for effective data parsing and enrichment before SIEM ingestion.
Experience:
5-8 years of experience working in SIEM engineering and administration roles.
Proven expertise with SIEM platforms like QRadar, Splunk, Microsoft Sentinel, and Elastic Stack (Elasticsearch, Logstash, Kibana).
Experience in integrating and managing log sources from diverse systems and platforms.
Strong understanding of security incident detection, threat analysis, and response processes.
Technical Skills:
Proficiency in SIEM platform management, rule creation, and performance tuning.
Hands-on experience with Elastic Stack (Elasticsearch, Logstash, Kibana) for log management, search, and security monitoring.
Strong scripting abilities (e.g., Python, PowerShell, Bash) for automation.
Knowledge of security protocols, network traffic analysis, and intrusion detection systems.
Experience working with security frameworks such as MITRE ATT&CK, NIST, or CIS.
Certifications (Preferred):
SIEM-related certifications (e.g., IBM QRadar Certified, Splunk Certified Architect, Elastic Certified Engineer)
Security certifications such as CISSP, CISM, or CEH are a plus.
Soft Skills:
Strong problem-solving and analytical thinking abilities.
Excellent communication skills to convey complex technical concepts to stakeholders.
Ability to work independently or in a team with minimal supervision.
Education:
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent experience).
Location: Home based - EMEA
Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office based roles. Teams meet two to four times yearly in person, in interesting locations around the world, to align on strategy and execution.
The company is founder led, profitable and growing.
Canonical’s product management team are technologists who have a passion for delivering products and solutions that help shape market demands while elevating open source software everywhere. This is a general application track for the product management positions at Canonical. You will set a clear vision, prioritize work effectively, and ensure the team delivers high-quality products that meet business and user needs. Apply here if you excel at leadership, communication, and technical vision, and believe you can drive product strategy for the business needs of tomorrow. During the interview process we will identify specific software products which would be a good fit for your interests.
We believe that open source is transforming the way that enterprises solve their business needs. Although open source has been around for thirty years, it is only now fundamental to every corner of the software landscape. Going forward we believe open source will have an even bigger impact as it moves into specialised vertical markets. Our goal is to make open source easier, more reliable and more secure for deployment and development. We strive to be the provider of ‘most software to most companies’, starting with Ubuntu but expanding to cover every class of application on every class of compute. To deliver on that ambition, we select product managers for their intellect and strong drive to advance the open source community. Together, we aim to improve open source quality, outreach, and impact. Our product managers set the vision and the direction to ensure teams deliver the right products in the right markets at the right time. They push the boundaries of the technology landscape to identify and deliver products into new and existing market opportunities.
Our product managers are technology professionals with a software engineering background who strive to become business executives and entrepreneurs. We discuss strategy, plan product development, drive engagement, and promote the open source way. We oversee the entire product lifecycle from conception to delivery, blending technical expertise, strategic thinking, analytics, project management skills and effective communication to ensure products meet both user needs and business objectives.
We have open product manager roles across a wide range of product domains, including:
Ubuntu Platform - Our Ubuntu experience on Desktop, Server, Windows (WSL), Multipass, Gaming, Enterprise, & Hardware Enablement
Ubuntu Pro Services - Our key commercial offerings Ubuntu Pro, Compliance, Standards, Security Engineering, and Managed Services on cloud and on prem
AI/ML & MLOps - Open source AI/ML solutions, AIOps automation, model lifecycle management, Kubeflow, MLFlow, KServe, and AI infrastructure on cloud and edge
IoT - Ubuntu on embedded devices and/or edge servers, device management, and robotics
Cloud - Ubuntu in public and private clouds, promoting automation frameworks, and including technologies such as Kubernetes, MAAS, and LXD
Telco - Open source for Telco's including technologies and standards related to Core Network, RAN/vRAN, SoNIC, DENT, and SmartNICs
Finance - Open source solutions for financial institutions including trading platforms, blockchain technologies, regulatory compliance, and AI-driven analytics
Automotive - Open source solutions for autonomous driving, in-vehicle infotainment, connected vehicles, and compliance with automotive industry standards such as ISO 26262 and ISO 21434
Application Management - Open source solutions in the enterprise including Observability, IAM, App Stores and technologies such Grafana, GitOps, and Juju Charms
If your domain of expertise isn’t listed above, yet you feel it’s relevant to Canonical, then feel free to apply anyway. We will route you to the most suitable team.
Location:
These roles are home based in the EMEA time zone. You will be expected to be located in this region.
The role entails
Lead the product development lifecycle, reviewing the priorities and goals for your product
Collaborate with cross-functional teams such as engineering, design, marketing, and sales
Address common challenges across projects, align on priorities, enable informed decisions, and keep business execution on track
Conduct market research, analyse industry trends, and gather customer feedback to identify opportunities
Communicate your product vision, status updates, and key decisions to ensure alignment and manage expectations
Conduct usability testing, analyse user feedback, and iterate on the product to improve the user experience
Collaborate with marketing, sales, and support teams to develop go-to-market strategies, create product documentation, and provide training
Contribute to the success of our sales team in winning new opportunities, reviewing customer feedback and participating in customer meetings
Oversee the work of a product line, ensuring consistency in strategy and execution across different teams
Facilitate collaboration and resolve conflicts within different teams and across other departments
What we are looking for in you
Exceptional academic results at high school and university
Understanding of Linux and the wider open source software community
Understanding of computer architecture, application development, datacenters, cloud or devices
Passion to write about technologies and the tech landscape
A strong work ethic, and personal interests aligned with the open source movement
Curiosity, and the habit of continuous learning
A strong sense of ownership
Problem solving and the ability to innovate
Outstanding communications skills in English, both verbal and written
For more senior positions, product management experience in the software industry
Ability to manage multiple projects or product lines while maintaining focus on key priorities
Demonstrated leadership in aligning diverse teams and driving consensus around product strategies
Willingness to travel internationally up to 4 times a year for company events up to two weeks long
Additional skills that we value
Familiarity with a particular verticals (e.g. Telco, Finance, Industrial, Automotive)
Familiarity with the technology ecosystem including Silicon, IHV, ISV, ODM/OEMs, cloud service providers and channel
Familiarity with cloud native technologies such as Kubernetes, Docker containers & Snaps
Familiarity with embedded and connected device technology and ecosystems
Familiarity with networking technologies - ethernet, IPv4 and IPv6, routing, firewalling, overlays such as OVN/OVS, VPNs, SR-IOV, infiniband
Familiarity with telco networking - RAN, Core, CPE
Experience in leading distributed teams across different time zones
Demonstrated ability to foster collaboration and innovation in team settings
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus or commission. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Program
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world of software. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Most colleagues at Canonical have worked from home since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Remote-Friendly (Travel-Required) | San Francisco, CA | Seattle, WA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role:
Anthropic's Application Security team secures the systems that build, serve, and increasingly
are
Claude. The attack surface is unlike most AppSec work: multi-agent orchestration, sandboxed code execution, agents holding delegated credentials, untrusted tool output crossing trust boundaries — problems with little prior art and no off-the-shelf playbook.
The way the team works is also different. We use Claude as our primary tool across every part of the job: it drives our static analysis, drafts and fixes vulnerabilities as pull requests, performs first-line bug bounty triage, and assists threat modeling for design reviews. The human work is the judgment layer — system-level reasoning, deciding what matters, and building the next thing the model can't do yet.
This is a builder's role on a senior team. We hire engineers who ship production systems
and
clear a hands-on threat-modeling bar — people who can find the vulnerability but would rather build the system that finds them all. Every engineer owns a system end-to-end, and the team's work has shaped customer-facing product security — including Claude Code's security review tooling, its security guidance plugin, sandboxing, and auto mode.
Key responsibilities:
Design, build, and operate Claude-powered security systems — LLM-driven code analysis, automated vulnerability remediation, AI-assisted threat modeling — and own one or more of them end-to-end, including the cross-functional relationships that come with it
Lead secure design reviews and threat modeling for novel AI systems, identifying risks that don't map to existing frameworks
Evolve a public bug bounty program where automation handles routine triage and root-cause work, and engineers handle escalations and corner cases
Partner with Product, Infrastructure, and Research teams as an embedded security owner — consulting on launches, shaping architecture, and influencing decisions where security is the constraint
Share an operational on-run rotation with the rest of the team — bounty escalations, incident response, and launch consults on systems serving Claude in production
Minimum qualifications:
Hands-on application and infrastructure security experience, including cloud and containerized environments
Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript, with a track record of building durable systems rather than one-off scripts
Practical threat-modeling and vulnerability-identification skills — you've found and reasoned about real bugs in real systems, even if breaking isn't your primary mode
Demonstrated ability to operate with high autonomy and ambiguity — comfortable being handed a problem and a lot of latitude rather than a spec
Clear technical communication with both engineers and leadership
Preferred qualifications:
7+ years in application security, security engineering, or security-focused software engineering
Already use LLMs as a core part of how you work, with opinions about where they help and where they don't
Experience securing agentic, code-execution, or LLM-integrated systems specifically
Prior ownership of a bug bounty program, vulnerability disclosure program, or vulnerability-management infrastructure at scale
Background building security automation or developer-facing security tooling
Offensive security or penetration testing experience
Representative projects
An increasingly autonomous vulnerability pipeline — LLM-driven code analysis finds the issue, scores it for real exploitability, and opens the fix PR, with humans as the review step rather than the author
Bug bounty operations where Claude handles first-line triage and drafting, and engineers focus on the reports that actually need judgment
AI-assisted threat modeling that generates intake questions, drafts the model, and recommends which design reviews need a human in the room
Automated dependency vulnerability remediation across Anthropic's codebase
The company-wide vulnerability dashboard and SLA enforcement layer every engineering team works against
Threat models and security architecture for agentic product surfaces — code execution sandboxing, agent identity and delegated auth, tool-use boundaries
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$320,000
—
$485,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Limassol; Nicosia
Workplace: hybrid
The Role:
We are looking for an experienced, passionate and self-motivated professional to join our fast-growing Information Security team. As part of our Information Security Audit Program, you will have the opportunity to assess and improve security controls across a dynamic and fast-paced environment. You will work with cutting-edge technologies and talented professionals, gaining hands-on experience in security assessments, compliance audits, and risk management.
The main responsibilities of the position include:
Perform hands-on complex security audits in IT infrastructure, applications, technologies and third parties
Assess internal controls, processes and policies related to Information Technology and Security identifying deficiencies, and developing remediation strategies
Prepare comprehensive audit reports summarizing the audit scope, results of test work, findings and recommend corrective actions
Identify information security risks and make recommendations which are appropriate, practical and cost-effective
Manage and monitor the progress of remediation steps on audit findings
Ensure the organization meets all information security requirements of applicable laws and regulations
Liaise with external auditors and internal stakeholders in successful execution of all compliance audits
Provide regular reports and metrics on the security posture to the relevant stakeholders
Main requirements:
BSc/MSc in Information Security or any other related field
Minimum 2 years working experience in an Information Security related field
Experience in IT Systems and Security audit, vulnerability assessments and security risk management
Demonstrated experience in auditing large scale infrastructures, information systems, IT processes and advanced security controls
Good knowledge of information and security technologies such as Windows and Active Directory, Linux, virtualization, host and application security, networking, firewalls, security architecture etc
Hands-on experience in auditing cloud infrastructures (AWS, Azure, GCP etc) will be considered an advantage
Good understanding of security regulations and frameworks such as ISO 27001, NIST CSF and 800-53, GDPR, DORA etc
Strong project and time management skills with the ability to work independently under minimal supervision and as part of a team
Meticulous attention to detail with an analytical mind and outstanding problem-solving skills
Excellent communication skills with the ability to explain technical concepts to a non-technical audience
Audit-related and other information security certifications such as CISA, ISO 27001 Lead Auditor, CISSP, CCSP etc will be considered an advantage
Benefit from:
Attractive remuneration package plus performance related reward
Private health insurance
Corporate pension fund
Intellectually stimulating work environment
Continuous personal development and international training opportunities
The Hiring Experience: What Awaits You
Let’s Connect – Intro Chat with Talent Acquisition
Deep Dive – First Interview with Your Future Team
Final Connection – Final Interview
All applications will be treated with strict confidentiality!
By submitting this application, I confirm that I have read and agree to the terms of the Privacy and Data Protection Notice and the Confidentiality Undertaking.
Location: Algiers, Algeria
Müller's Solutions is looking for an experienced Security Subject Matter Expert (SME) to join our team in Brussels, Belgium. In this crucial on-site role, you will leverage your expertise in cybersecurity to drive the development and implementation of security strategies and policies across the organization. Your insights and knowledge will be invaluable in guiding teams to enhance their security posture and protect sensitive information.
Key Responsibilities:
Firewall Management: Hands-on experience with
Palo Alto Firewalls and Palo Alto Prisma Access
, including configuration, monitoring, and troubleshooting.
Routing Expertise:
Strong knowledge of BGP routing on Palo Alto platforms.
Platform Administration: Proficient in tools such as Algosec FireFlow, Log Analyzer, and AppViz for security operations, analysis, and platform management.
Policy Optimization: Enhance network security policies and streamline incident response processes.
Provide expert guidance on all aspects of information security, ensuring compliance with industry standards and regulations.
Manage and optimize firewall systems, particularly
Palo Alto Firewalls and Palo Alto Prisma Access
, to ensure robust defense mechanisms.
Utilize your expertise in
BGP routing on Palo Alto platforms
to enhance network security protocols.
Administer security management tools like
Algosec FireFlow, Log Analyzer, and AppViz
to monitor and analyze security incidents.
Lead vulnerability assessments and conduct regular audits to identify and address security weaknesses.
Develop, implement, and review security policies and procedures to mitigate risks.
Conduct training sessions for staff on security best practices and incident response strategies.
Monitor the threat landscape and keep abreast of emerging security trends and technologies.
Collaborate with cross-functional teams to integrate security into all organizational processes and projects.
Requirements
Requirements:
Bachelor's degree in Cybersecurity, Information Technology, or a related field.
5+ years of experience in cybersecurity, with a focus on security architecture or risk management.
Demonstrated expertise as a Security Subject Matter Expert or in a similar capacity.
Strong knowledge of security frameworks (NIST, ISO 27001) and regulatory compliance.
Hands-on experience with firewall management and network security.
Exceptional analytical and problem-solving skills with a thorough understanding of security principles.
Strong communication skills, capable of conveying complex information to diverse audiences.
Relevant certifications such as CISSP, CISM, or CEH are strongly preferred.
Location: Rabat, Morocco
Müller's Solutions is excited to announce an opening for a Security Subject Matter Expert (SME) based in Brussels, Belgium. In this crucial on-site role, you will be responsible for providing specialized knowledge and guidance on cybersecurity strategies, aiming to bolster our overall security posture. You will collaborate with various teams across the organization to implement security best practices and ensure compliance with industry standards.
Key Responsibilities:
Firewall Management: Hands-on experience with
Palo Alto Firewalls and Palo Alto Prisma Access
, including configuration, monitoring, and troubleshooting.
Routing Expertise:
Strong knowledge of BGP routing on Palo Alto platforms.
Platform Administration: Proficient in tools such as Algosec FireFlow, Log Analyzer, and AppViz for security operations, analysis, and platform management.
Policy Optimization: Enhance network security policies and streamline incident response processes.
Act as the Security Subject Matter Expert, advising on all security-related matters and developing robust security strategies.
Oversee and manage the configuration and operation of security technologies, including
Palo Alto Firewalls and Palo Alto Prisma Access
.
Apply your expertise in
BGP routing
on Palo Alto platforms to enhance network security.
Utilize security management tools such as
Algosec FireFlow, Log Analyzer, and AppViz
to monitor and analyze security incidents.
Conduct thorough risk assessments and security audits to identify vulnerabilities and develop mitigation strategies.
Collaborate with IT teams to integrate and apply security measures across systems and applications.
Develop and refine organizational security policies, standards, and protocols in alignment with industry regulations.
Facilitate training sessions and create awareness programs to educate employees about security best practices.
Stay updated on the latest security trends, threats, and technologies to enhance our defense mechanisms.
Requirements
Requirements:
Bachelor's degree in Cybersecurity, Information Technology, or a related field.
5+ years of experience in cybersecurity or a related field, specifically in a subject matter expert capacity.
Proven expertise in security frameworks and best practices, including NIST and ISO 27001.
Hands-on experience with firewall management and incident response.
Strong analytical skills with the ability to assess and address complex security challenges.
Exceptional communication skills, capable of communicating complex technical information to various stakeholders.
Certifications such as CISSP, CISM, or CEH are preferred.
Fluency in English; proficiency in French or Dutch is an advantage.
Benefits
Why Join Us:
Opportunity to work with a talented and passionate team.
Competitive salary and benefits package.
Exciting projects and innovative work environment.
Location: Amman, Jordan
Müller's Solutions is actively looking for a Security Subject Matter Expert (SME) to join our team in Brussels, Belgium. This on-site role requires a seasoned professional with a deep understanding of cybersecurity and a passion for advancing security practices across the organization. As the SME, you will provide strategic advice, support security initiatives, and lead risk assessments to ensure our systems and data remain secure.
Key Responsibilities:
Firewall Management: Hands-on experience with
Palo Alto Firewalls and Palo Alto Prisma Access
, including configuration, monitoring, and troubleshooting.
Routing Expertise:
Strong knowledge of BGP routing on Palo Alto platforms.
Platform Administration: Proficient in tools such as Algosec FireFlow, Log Analyzer, and AppViz for security operations, analysis, and platform management.
Policy Optimization: Enhance network security policies and streamline incident response processes.
Utilize your expertise to guide the organization in securing its information and technology assets.
Perform security assessments to identify vulnerabilities, threats, and risks, developing strategies to mitigate them.
Collaborate with IT and security teams to enhance existing security protocols and safeguards.
Develop and implement comprehensive security policies, standards, and practices aligned with industry regulations.
Facilitate training sessions to improve staff awareness of security threats and best practices.
Research new security technologies, trends, and threats, implementing best practices to strengthen our defenses.
Act as a key liaison with internal departments and external stakeholders on security matters.
Requirements
Requirements:
Bachelor's degree in Cybersecurity, Information Technology, or a related field.
A minimum of 5-7 years of experience in cybersecurity and information security.
Proven experience as a Security Subject Matter Expert or in a similar role.
In-depth knowledge of security frameworks such as NIST, ISO 27001, and GDPR compliance.
Experience with security assessments, audits, and incident response.
Strong analytical skills with a solid understanding of risk management principles.
Excellent communication skills, both verbal and written.
Relevant certifications such as CISSP, CISM, or CEH are preferred.
Location: Cairo, Egypt
Müller’s Solutions is seeking a dedicated Security Subject Matter Expert (SME) to join our dynamic team. In this pivotal role, you will be responsible for providing expert guidance on security practices and policies, helping us identify threats and vulnerabilities. You will collaborate with various departments to implement effective security measures and promote a culture of security awareness throughout the organization.
Key Responsibilities:
Firewall Management: Hands-on experience with
Palo Alto Firewalls and Palo Alto Prisma Access
, including configuration, monitoring, and troubleshooting.
Routing Expertise:
Strong knowledge of BGP routing on Palo Alto platforms.
Platform Administration: Proficient in tools such as Algosec FireFlow, Log Analyzer, and AppViz for security operations, analysis, and platform management.
Policy Optimization: Enhance network security policies and streamline incident response processes.
Act as the primary consultant on all cybersecurity matters, offering best practice insights and strategic recommendations to enhance security protocols.
Lead the development, implementation, and management of security initiatives and programs.
Conduct security assessments and audits to identify vulnerabilities and develop mitigation strategies.
Monitor and analyze security incidents; respond effectively and efficiently to security breaches.
Design and deliver training sessions aimed at improving employee understanding of security policies and procedures.
Research and stay updated on the latest cybersecurity trends, technologies, and threat landscapes.
Requirements
Requirements:
Bachelor's degree in Cybersecurity, Information Technology, or a related field.
Minimum of 5 years of experience in information security or a related field.
Proven experience as a security consultant or expert.
In-depth knowledge of various cybersecurity frameworks (NIST, ISO 27001, etc.).
Familiarity with firewall management and network security practices.
Strong analytical and problem-solving skills.
Excellent communication skills, with the ability to convey complex concepts to non-technical stakeholders.
Relevant certifications such as CISSP, CISM, or CEH are highly preferred.
Location: Brussels, Belgium
As a Security Subject Matter Expert (SME) at Müller's Solutions, you will play a critical role in shaping our security strategies and implementing best practices across the organization. You will leverage your deep expertise in cybersecurity to advise and guide various teams on security policies, risk management, and compliance requirements. Your insights will be invaluable in enhancing the overall security posture of the organization while protecting our data assets.
Key Responsibilities:
Firewall Management: Hands-on experience with
Palo Alto Firewalls and Palo Alto Prisma Access
, including configuration, monitoring, and troubleshooting.
Routing Expertise:
Strong knowledge of BGP routing on Palo Alto platforms.
Platform Administration: Proficient in tools such as Algosec FireFlow, Log Analyzer, and AppViz for security operations, analysis, and platform management.
Policy Optimization: Enhance network security policies and streamline incident response processes.
Serve as the primary authority on security topics, providing expertise and guidance to various stakeholders throughout the organization.
Analyze and assess security risks, recommending appropriate mitigation strategies to minimize vulnerabilities.
Develop and review security policies, standards, and guidelines that align with industry best practices and regulatory requirements.
Conduct training sessions and workshops to educate employees about security awareness and best practices.
Collaborate with IT and security teams to implement effective security measures and technologies.
Stay abreast of the latest security trends, threats, and technologies, and adjust strategies accordingly.
Participate in security audits and assessments to ensure compliance with internal and external regulations.
Requirements
Requirements:
Experience in network security infrastructure.
CCIE Certification is a plus.
Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.
7+ years of experience in cybersecurity, with a focus on security architecture and risk management.
Demonstrated experience as a security subject matter expert in previous roles.
In-depth knowledge of security frameworks, including ISO 27001, NIST, and PCI DSS.
Strong understanding of security technologies, including firewalls, intrusion detection/prevention systems, encryption methods, and identity management.
Excellent analytical and problem-solving skills, with the ability to identify and resolve complex security issues.
Strong communication and interpersonal skills, with the ability to effectively convey technical information to non-technical audiences.
Relevant security certifications, such as CISSP, CISM, or CEH are highly desirable.
Preferred Qualifications:
Master's degree in Cybersecurity or a related field.
Experience in incident response and management, including leading post-event reviews.
Knowledge of cloud security models and solutions.
Experience with regulatory compliance and legal implications of data protection.
Location: Home based - Worldwide
We have opened several senior/staff Security Operations Engineer (SOC) positions, creating a new team reporting to the CISO. We are looking for a range of experience in these positions - at the high end we are looking for deep experience defending highly contested critical assets and high-value cyber targets against advanced persistent threats and state-level actors. We have more junior roles for exceptional individuals with a proven personal interest an engagement in cyber attack and defence, and outstanding academic and career performance even if experience is limited.
Our goal is to build an entirely new level of assurance and observable rigour into the open source supply chain. We have our own estate to monitor, but more broadly our goal is to raise the robustness of the entire global Ubuntu estate through the work of this team.
The Security Operations (SecOps) team is responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our own infrastructure and product deployments. They design and implement technical security controls that ensure security threats are automatically identified, contained and remediated. The team will also contribute ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attack.
The SecOps team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.
What you will do in this role:
Implement and evolve Canonical's SecOps security standards and playbooks
Analyse and improve Canonical's security architecture
Evaluate, select and implement new security tools and practices
Identify, contain and guide the remediation of security threats and cyber attacks
Grow the presence and thought leadership of Canonical SecOps practice
Contribute to open source threat intelligence initiatives
Drive threat modelling, table top exercises and other SecOps practices across Engineering, IS and Canonical
Develop Canonical SecOps learning and development materials
Publish blog posts, whitepapers and conference presentations
Identify, implement and track SecOps KPIs
Plan and deliver SecOps work in the framework of Canonical's agile engineering practice
Work with Security leadership to present information and influence change
What we are looking for
An exceptional academic track record
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
Deep personal motivation to be at the forefront of technology security
Expertise in threat modelling and risk management frameworks
Knowledge of security architecture and market-leading security tools
Experience contributing to, and consuming, threat intelligence feeds
Experience in security risk management frameworks such as NIST CSF
Experience with security standards such as ISO 27001
Optional things we value
Experience in a security operations team or a security operations centre (SOC)
Experience in offensive or defensive security teams with hands-on ability
Experience with state-actor and other advanced persistent threats
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Brussels, Belgium
As a Network Security Engineer at Müller's Solutions, you will be responsible for ensuring the confidentiality, integrity, and availability of our network infrastructure. Your role will include designing, implementing, and managing network security measures to protect our organization's sensitive data from cyber threats. You will work closely with various teams to monitor network traffic, respond to security incidents, and maintain compliance with industry standards.
Key Responsibilities:
Design, configure, and implement network security solutions, including firewalls, intrusion detection/prevention systems (IDS/IPS), and VPNs.
Security ,Load balancing and Routing/Switching.
Monitor network traffic for unusual activity and conduct regular security assessments and vulnerability tests.
Respond to security incidents and provide detailed analysis to mitigate the impact and prevent future occurrences.
Develop and enforce network security policies, procedures, and best practices to enhance the organization’s security posture.
Work closely with other IT teams to support secure network operations and troubleshoot security-related issues.
Stay up to date with the latest cybersecurity trends and emerging threats to continually enhance network security measures.
Requirements
Requirements:
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
3-5 years of experience in network security engineering or a related field.
Work experience and expertise in security network engineering(installation/management/troubleshooting of security equipment such as Checkpoint and Palo Alto Firewall, ASA VPN).
Strong knowledge of network security protocols, technologies, and best practices, including firewalls, IDS/IPS, VPNs, and network segmentation.
Experience with security tools and technologies, including SIEM systems, vulnerability scanners, and security analytics platforms.
Excellent troubleshooting and analytical skills, with the ability to identify and resolve complex security issues.
Strong communication skills to effectively collaborate with cross-functional teams and explain technical concepts to non-technical stakeholders.
At least 5 years of expertise in F5 WAF, Load Balancing, and Reverse Proxy (APM, ASM, LTM).
Able to set up and follow an RFP process.
Very good knowledge of network technology (BGP,OSPF, spanning-tree).
Analytical mindset for analyzing security solutions.
CCNA/CCNP/AWS Certificates are required.
Preferred Qualifications:
Relevant certifications such as Cisco CCNP Security, CompTIA Security+, or Certified Information Systems Security Professional (CISSP).
Knowledge of compliance frameworks, such as PCI DSS, HIPAA, or ISO 27001, is a plus.
Knowledge of network equipment such as Cisco ACI, DNA.
Knowledge and experience with cloud network management (Microsoft Azure).
Knowledge of Windows (MS Office Tools, Active Directory, etc.).
CCIE is a plus
Technical Expertise and Problem-Solving Abilities Adaptability and Continuous Learning.
Location: Home based - Worldwide
As the most widely used Linux distribution, Ubuntu underpins the security of the entire internet. The role of Security Engineering Manager directly impacts the safety and security of millions of users worldwide. Join a team of security experts dedicated to protecting the open-source ecosystem and driving innovation. Your leadership will be instrumental in addressing emerging threats, developing robust security measures, and ensuring the continued integrity of Ubuntu. This is an opportunity to make a tangible difference and leave a lasting legacy on the digital landscape.
As we place ever more trust in software and data security in our increasingly connected world, Canonical’s mission to deliver the world’s best open source platform comes with a responsibility: to set the highest possible standard for software security, not only for the OS, but also for the wide range of open source infrastructure and software that developers enjoy within the Ubuntu ecosystem. With Canonical’s Ubuntu being the leading open source platform for large-scale cloud and edge deployments, we are increasingly called upon to help customers meet strict security requirements such as FIPS, CIS, STIG, FedRAMP and the new CRA.
This role is about leading the charge to set the security standards for open source software across the Ubuntu platform, from desktops, servers and edge devices to cloud infrastructure, Kubernetes and OpenStack, by certifying core components to meet industry standards and guiding development teams across the company in security best practices. We work primarily within the areas of cryptographic modules (FIPS 140) and system hardening, where we collaborate with industry partners including CIS and DISA to define and build secure operating system deployments.
An Engineering Manager is responsible for line management and career guidance. The ability to develop engineering talent, to represent your team and product from a technical perspective, and to drive collaboration with other teams and customers are all critical to success in this role.
What you will do in this role
Lead and develop a team of engineers, ranging from graduate to senior
Coach, mentor, and offer career development feedback
Identify and measure team health indicators
Implement disciplined engineering processes
Represent your team and product to stakeholders, partners, and customers
Develop and evangelise great engineering and organisational practices
Plan and manage progress on agreed goals and projects
Support our products and customers to meet strict product security requirements such as FIPS, CIS, STIG, FedRAMP and the new CRA
Support the work addressing specific cryptography modules (FIPS 140) and system hardening efforts with indrustry partners, including CIS and DISA
What we are looking for in you
An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive, and a track record of going above-and-beyond expectations
Excellent verbal and written communication skills in English
A love of developing and growing people and a track record of it
Organised and able to ensure your team delivers timely, high quality results
Professional manner interacting with colleagues, partners, and community
Prior experience working on FIPS/Common Criteria certified products and in-depth knowledge of the underlying standards
Prior experience working directly with DISA-STIG or CIS benchmarks, including related audit + remediation tooling (e.g. Compliance as Code)
Knowledgeable and passionate about software and application security
Solid experience working in an agile development environment
A demonstrated drive for continual learning
Builds trust, relationships and confidence
Result-oriented, with a personal drive to meet commitments
Ability to travel twice a year, for company events up to two weeks each
Optional things we value
Hands-on domain knowledge of Linux cryptography libraries (OpenSSL, GnuTLS)
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
In security risk management we’re looking to harness the power of industry best practice combined with driving new innovation on how we do security risk assessments and modelling. Our security risk management team is the primary owner of the strategy and practices of how we identify, track and reduce our security risk across everything we do.
To support this we need to use industry best practices paired with emerging threat information to to promote risk identification, quantification, impact analysis, and modelling to ultimately drive decision making. In this role, you will help establish and execute a broad strategic vision for the security risk program at Canonical. You will not only work within the team but also cross-functionally with various teams across the organisation. The team contributes ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attacks. Additionally, the team collaborates with our Organisational Learning and Development team to develop playbooks and facilitate security training across Canonical.
The security risk management team’s mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.
What you will do in this role:
Define Canonical's security risk management standards and playbooks
Analyse and improve Canonical's security risk practices
Evaluate, select and implement new security requirements, tools and practices
Grow the presence and thought leadership of Canonical security risk management practice
Develop Canonical security risk learning and development materials
Work with Security leadership to present information and influence change
Participate in developing key risk indicators, provide inputs to the development of key control indicators, and key performance indicators for various programs
Apply statistical models to risk frameworks (such as FAIR, sensitivity analysis, and others)
Participate in risk management, decision-making, and collaborative discussions
Lead quantified risk assessments and understand the value of qualitative data for improvements to quality and engineering processes
Interpret internal or external cyber security risk analyses in business terms and recommend a responsible course of action
Develop templates and materials to help with self-service risk management actions
Monitor and identify opportunities to improve the effectiveness of risk management processes
Launch campaigns to perform security assessments and help mitigate security risks across the company
Build evaluation methods and performance indicators to measure efficiency of security functions and capabilities.
What we are looking for
An exceptional academic track record
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
Deep personal motivation to be at the forefront of technology security
Leadership and management ability
Excellent business English writing and presentation skills
Problem-solver with excellent communication skills, a deep technical understanding of security assessments and risk management
Expertise in threat modelling and risk management frameworks
Broad knowledge of how to operationalize the management of security risk
Experience in Secure Development Lifecycle and Security by Design methodology
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Limassol; Nicosia; Athens; Thessaloniki
Workplace: hybrid
The role:
Join our dynamic Information Security GRC team to play a crucial role in strengthening our business operations. As a key member, you'll enforce our Information Security Framework, conduct internal risk assessments, and collaborate your line manager to define assessment scopes. Your responsibilities will include: review internal systems, processes, and procedures, record risks, and prepare insightful reports. Additionally, you'll contribute to Information Security projects, ensuring state-of-the-art solutions in line with regulatory requirements and best practices. This is an opportunity to make a significant impact in a forward-thinking environment, safeguarding our business while driving innovation in Information Security. Join us for a fulfilling journey!
The main responsibilities of the position include:
Plan and execute technical and targeted risk assessments in IT infrastructure, applications, technologies, and third parties
Assess internal controls, processes, and policies related to Information Technology and Security, identify deficiencies, and develop remediation strategies
Perform risk analysis on current risks and identify potential risks at operational, tactical, and strategic level
Perform risk evaluation on previously handled risks and compare mitigation approaches to potential risks
Maintain the risk register and the Information Security Risk Management Program
Identify information security risks and make recommendations that are appropriate, practical, and cost-effective
Manage and monitor the progress of remediation steps on risk assessment findings
Prepare comprehensive reports summarising the actions taken for to remediate identified risks
Provide regular reports and metrics on the security posture of the company
Act as the escalation point of the information security department for any information security related risks
Main requirements:
BSc/MSc in Information Security or any other relevant degree
At least 3 years of work experience in information security risk management and information security risk assessment
Technical knowledge of operations, physical, network, host and application security, as well as security architecture, virtualisation, and cloud infrastructures
Good understanding of security regulations and frameworks, such as ISO 27005, ISO 27001, NIST CSF and 800-53, DORA, GDPR, etc
Risk-related certifications, such as CRISC, CGRC, and CISSP, are a plus
Ability to work autonomously with minimum supervision and to integrate well within a team
Ability to articulate security risks and communicate effectively to various levels of management
Self-motivated, proactive, and efficient
Ability to work under pressure in a fast paced environment
Strong interpersonal, organisational, and project management skills
Excellent communication skills with the ability to explain technical concepts to a non-technical audience.
Excellent written and verbal skills in English
Benefit from:
Attractive remuneration package
Private health insurance
Corporate pension fund
Intellectually stimulating work environment
Continuous personal development and international training opportunities
The Hiring Experience: What Awaits You
Let’s Connect – Intro Chat with Talent Acquisition
Deep Dive – First Interview with Your Future Team
Final Connection – Final Interview
All applications will be treated with strict confidentiality!
By submitting this application, I confirm that I have read and agree to the terms of the Privacy and Data Protection Notice and the Confidentiality Undertaking.
География найма не уточнена
УдалённоСтажёрГеография найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.