Вакансии

Location: Amsterdam, Netherlands About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Role Overview Nebius is seeking an experienced Security Analyst - Tier 2 for its Security Operations Center (SOC). This role is a hands-on position built for depth, serving as the investigative core of the SOC, focused on evidence and grounded conclusions. This role reports to the SOC Manager, under the Detection and Response function within the CISO Office. You are welcome to work in our offices in Tel Aviv, Israel. Key Responsibilities Investigate escalated security alerts across endpoint, identity, cloud, email, and network layers. Determine scope, impact, and root cause using EDR, SIEM, and supporting telemetry. Escalate suspected incidents to the Incident Response team and complex investigations to Tier 3. Provide structured feedback to relevant stakeholders on detection or prevention quality, false-positive patterns, and coverage gaps discovered during investigations. Contribute to and refine SOC runbooks, triage guides, and investigation procedures. Review Tier 1 escalations, coach on handoff quality, and act as the analytical reference during triage. Document investigations to a standard that supports handoff, quality review, and lessons learned. Participate in the on-call rotation, acting as the investigative point of contact outside business hours. Required Qualifications: Experience Around 5-7 years of hands-on security operations experience, with proven depth in alert investigation. Experience taking investigations to a clear verdict, including confirmed incidents. Technical Expertise Strong working command of EDR platforms and SIEM-based investigation, including writing and adapting queries independently. Solid understanding of attacker techniques, with the ability to map findings to MITRE ATT&CK in analysis and reporting. Investigation capability across at least two of: endpoint, identity, cloud, email, or network domains. Windows and Linux internals at the depth required for log and artifact analysis: processes, authentication flows, and persistence mechanisms. Solid networking fundamentals: TCP/IP, DNS, HTTP/S, and the ability to interpret network telemetry. Scripting ability (Python or similar) for analysis at scale, and familiarity with SOAR platforms. Certifications such as BTL2, OSDA, or CDSA are an advantage. Leadership & Communication Intellectual honesty, clearly distinguishing important and vague data, what is known, what is assumed, and what is still unknown. Collaborative escalation habits, hands off with context and stays available to support what comes next. Structured written communication, writing investigation notes that tell the story on their own. Fluent in English, written and verbal, comfortable working with international teams and stakeholders. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Fluidstack is looking for a Security Systems Engineer to design, build, and operate a security control plane across growing data center sites.

Fluidstack is looking for a Security Systems Administrator to manage physical security systems, remediation, patching, and incident response.

Location: Москва Workplace: Гибрид, Удаленно, Офис Объединённая компания Wildberries и Russ — это международная технологическая компания, образованная в результате слияния двух лидеров рынка — IT-компании Wildberries и оператора наружной рекламы Russ. Ищем инженера, который будет отвечать за развитие и поддержку корпоративной экосистемы Kaspersky: Kaspersky Security Center (KSC), Kaspersky Endpoint Security для Windows и Linux, KEDR, KATA и связанные компоненты (включая KSMG). Значительная часть серверной инфраструктуры продуктов Kaspersky развернута в Linux-окружении, поэтому важен практический опыт администрирования и сопровождения решений Kaspersky на Linux. Роль предполагает ownership ключевых компонентов платформы: политики, деплой, health, detection, response, интеграции и развитие архитектуры. Мы ищем человека с сильным практическим опытом именно в продуктах Kaspersky. Обязанности Администрировать и развивать Kaspersky Security Center (KSC) на Linux: иерархия серверов, политики, группы, задачи, деплой агентов, контроль coverage и health, лицензирование, отчетность; Поддерживать и настраивать Kaspersky Endpoint Security для Windows и Linux (включая особенности KES for Linux): политики защиты, исключения, Application Control, Device Control, обновления, работа с агентами; Развивать и эксплуатировать KEDR (Kaspersky Endpoint Detection and Response): телеметрия, расследования, response-действия, playbooks, интеграция с другими компонентами; Работать с KATA (Kaspersky Anti Targeted Attack): интеграция с endpoint-агентами, анализ инцидентов, настройка detection и response; Администрировать и развивать KSMG (Kaspersky Secure Mail Gateway) и связанные почтовые/сетевые компоненты экосистемы; Настраивать интеграции внутри экосистемы Kaspersky (KSC ↔ KEDR ↔ KATA ↔ KES) и с внешними системами (SIEM и т.д.); Обеспечивать стабильную работу Linux-бэкенда Kaspersky-решений: обновления, troubleshooting, мониторинг, оптимизация; Участвовать в развитии архитектуры и roadmap платформы Kaspersky в компании. Требования Глубокий практический опыт работы с Kaspersky Security Center (желательно актуальные версии, опыт именно с Linux-версией KSC будет большим плюсом); Уверенный опыт администрирования Kaspersky Endpoint Security для Windows и Linux; Практический опыт работы с KEDR (Optimum/Expert или аналог) — телеметрия, расследования, response; Опыт или хорошее понимание KATA; Знание и опыт работы с KSMG или другими компонентами экосистемы Kaspersky (почтовые/сетевые шлюзы); Сильное понимание особенностей развертывания и эксплуатации продуктов Kaspersky на Linux; Умение читать логи продуктов Kaspersky, проводить troubleshooting агентов и серверной части; Опыт автоматизации (Bash + Python/PowerShell) в контексте администрирования Kaspersky. Желательно, но не обязательно: Опыт построения иерархии KSC и работы с несколькими Administration Server; Понимание интеграции KEDR/KATA с SIEM и Active Directory; Опыт работы с кастомными правилами и playbooks в KEDR/KATA; Знание особенностей KES for Linux (контейнеры, namespaces и т.д.). Будет преимуществом: Сертификации Kaspersky (KL 002, KL 048 или аналоги); Опыт миграций или крупных обновлений платформы Kaspersky; Опыт работы с Kaspersky в крупных инфраструктурах (тысячи+ endpoint’ов). Условия Обучение и развитие: языковые клубы, собственный корпоративный университет, программы развития управленческих навыков и многое другое; Благополучие сотрудников: корпоративный пакет ДМС со стоматологией, корпоративный спорт, консультации психолога и дополнительные возможности аккредитованной IT-компании; Множество сообществ: клуб спикеров, футбола, йоги, шахмат и т.д.; Забота о семьях: создаем условия, в которых легко сочетать карьеру и заботу о близких – от гибкого подхода до масштабных проектов для детей сотрудников; Скидки и партнерские программы: на обучение, страхование, покупки и многое другое; Комфортная рабочая среда: бесплатное питание в офисе, современные офисы рядом с метро, корпоративная техника и портал для сотрудников.

Senior DevSecOps Engineer / Cloud Security Engineer (FinTech) role focusing on multi-cloud security (AWS/Azure), Active Directory, incident response, and infrastructure automation in a regulated finan….

• Выявлять и оценивать риски, контролировать их устранение. • Самостоятельно внедрять и настраивать решения по безопасности: инфраструктура, доступы и секреты, разработка и релизы, мониторинг, резервное копирование.

Allium is looking for a Head of Security and IT to lead the security program, employee IT, cloud security, incident response, and enterprise trust.

Location: Prague, Czechia D-ploy is a dynamic IT and Engineering Solutions company operating across the EMEA region, including Switzerland, Germany, Czech Republic, Austria, the UK, and the USA. We are committed to delivering reliable and efficient services to our clients through strong partnerships and a people-focused culture. We are looking for an HR Manager to join our team and take ownership of the day-to-day HR operations across our international locations. This is a hands-on, execution-focused position, perfect for someone who enjoys being directly involved in all aspects of HR administration, employee lifecycle management, and compliance. It is a part-time remote position, approx. 16 hours in month with potential extension to some on-demand projects What you’ll do Evolves an information security vision, strategy and charter that is aligned to organizational priorities Directs an information security governance structure, including the formation of an information security steering committee or advisory board Develops and maintains a unified, risk-based control framework to integrate and normalize the requirements resulting from global laws, standards and regulations Works effectively with business units and functions to facilitate information security risk assessment and risk management processes, and empowers them to own and accept the level of risk they deem appropriate for their specific risk appetite Creates the necessary internal networks among information security stakeholders in IT, product development, corporate compliance, audit, physical security, procurement, legal and HR management teams. Implements and monitors a strategic, comprehensive information security management framework based on (ISO) 2700X to ensure appropriate levels of confidentiality, integrity, availability, safety, privacy and recovery of information assets Facilitates a metrics and reporting framework to measure the efficiency and effectiveness of the program, providing regular reporting on the current status to enterprise risk teams, senior business leaders and the board of directors Understands and interacts with related disciplines, to ensure the consistent application of policies and standards across all technology projects, systems and services Oversee the implementation and the use of IT Security technologies relating to key security control areas such as threat and vulnerability management, security monitoring, identity and access management and data loss prevention to ensure an effective use of these technologies in mitigating cyber security risks. Execute, improve and report on controls in accordance with internal security standards and regulatory requirements. Play an active role in IT projects and operational processes (e.g., change management, exception management) to assess from an IT security standpoint IT projects, changes and exceptions. Liaise with stakeholders to ensure long term security strategy objectives are met and controls addressing security risk are regularly monitored and reported Perform technical security reviews to ensure technologies are in compliance with information security standards, regulatory requirements and best practices. Assist with Data Leakage Prevention (DLP) incidents investigation and the ongoing improvement of the DLP programme Coordinate assurance tests (e.g., penetration tests) and issues remediation Develop and maintain security documentation including technical security hardening standards, methodologies and procedures Perform e-discovery searches and investigations as required Assist in the coordination of IT audits Requirements At least 3 years working experience in IT Security. Bachelor’s degree in Computer Science or IT Security related fields Knowledge of international security standards and frameworks such as NIST, CIS, ISO27001, etc. Strong understanding of IT Security architecture concepts, technologies and good security practices Self-motivated and delivery focused – the candidate must be able to work independently and switch between several simultaneous projects and effectively prioritise work Team playing and communication skills – the candidate must be a team player and able to effectively interact with other team members of TFL IT Strong problem solver and good analytical skills Willingness to provide a recent criminal record extract (not older than three months). Benefits Broad range of activities, tasks, and projects Fishing for Friends program – our referral program Further development and professional advancement Friendly and international working environment Is IT in your DNA?

Основная задача специалиста — создавать сложные, но реалистичные и проверяемые security-сценарии, в которых LLM-модели совершают ошибки именно из-за недостатков в рассуждении (reasoning) , а не из-за неоднозначных инструкций или ограничений среды.

Location: Indonesia; Nigeria; Turkey; United States About Gramian Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs. About the Role We are looking for experienced Application Security Engineers and Security-Focused Software Engineers to support a specialized AI security evaluation project. In this role, you will assess how effectively static analysis tools identify security vulnerabilities in Generative AI applications, particularly LLM agents and Retrieval-Augmented Generation (RAG) systems. You will build small, runnable repositories containing realistic examples of Sensitive Information Disclosure (SID) and Excessive Agency (EA) vulnerabilities, alongside fixed and near-miss versions. You will analyze code paths, identify security weaknesses, define authorization contexts, develop deterministic tests, and document findings. Your work will help improve the reliability of security tools and strengthen how AI systems are evaluated for application-level vulnerabilities. LOCATION: Remote EXPERIENCE: 5+ years in application/product security or security-focused software engineering PROJECT: GenAI application security evaluation and AI training TECHNICAL FOCUS: Python, TypeScript, SAST, CodeQL, Semgrep, LLM agents, RAG, and MCP AI EXPERIENCE: Hands-on experience building LLM agents or RAG applications is required. Key Responsibilities Build runnable agent and RAG repositories containing code-reachable Sensitive Information Disclosure and Excessive Agency vulnerabilities. Develop realistic security scenarios involving tool calling, agent memory, Model Context Protocol (MCP), and other LLM application components. Create vulnerable, fixed, and hard-negative code variants with minimal security-relevant differences. Evaluate static application security testing (SAST) tools and assess their ability to detect genuine vulnerabilities while avoiding false positives. Perform source-to-sink analysis and trace relevant data flows, action paths, and trust boundaries. Annotate security findings, including affected assets, root causes, controls, severity, and residual risk. Define authorization contexts covering actors, tenants, identities, permitted data, actions, purposes, and recipients. Develop deterministic tests to validate vulnerable, fixed, and negative security behaviors. Recommend appropriate security controls and remediation approaches. Participate in technical calibration, peer reviews, and quality assurance activities. Requirements 5+ years of professional experience in application security, product security, or security-focused software engineering. Strong experience conducting secure code reviews and identifying application-level vulnerabilities. Practical knowledge of source-to-sink analysis, taint analysis, and static application security testing (SAST). Hands-on experience with security analysis tools such as CodeQL or Semgrep. Experience building or securing LLM agents and/or Retrieval-Augmented Generation (RAG) applications. Familiarity with frameworks and technologies such as LangChain, LlamaIndex, OpenAI or Anthropic SDKs, and Model Context Protocol (MCP). Strong understanding of authorization models, including: Actors, identities, and trust boundaries. Multi-tenant authorization and access control. OAuth, IAM, and identity management. Permitted data access and actions. Purpose and recipient restrictions. Document-level access control. Production-level coding experience in Python and/or TypeScript. Ability to distinguish genuine Sensitive Information Disclosure and Excessive Agency vulnerabilities from non-findings and false positives. Strong analytical skills and the ability to communicate technical security findings clearly.

Location: Bangladesh; Brazil; Colombia; Egypt; Ghana; India About Gramian Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs. About the Role We are looking for experienced Application Security Engineers and Security-Focused Software Engineers to support a specialized AI security evaluation project. In this role, you will assess how effectively static analysis tools identify security vulnerabilities in Generative AI applications, particularly LLM agents and Retrieval-Augmented Generation (RAG) systems. You will build small, runnable repositories containing realistic examples of Sensitive Information Disclosure (SID) and Excessive Agency (EA) vulnerabilities, alongside fixed and near-miss versions. You will analyze code paths, identify security weaknesses, define authorization contexts, develop deterministic tests, and document findings. Your work will help improve the reliability of security tools and strengthen how AI systems are evaluated for application-level vulnerabilities. LOCATION: Remote EXPERIENCE: 5+ years in application/product security or security-focused software engineering PROJECT: GenAI application security evaluation and AI training TECHNICAL FOCUS: Python, TypeScript, SAST, CodeQL, Semgrep, LLM agents, RAG, and MCP AI EXPERIENCE: Hands-on experience building LLM agents or RAG applications is required. Key Responsibilities Build runnable agent and RAG repositories containing code-reachable Sensitive Information Disclosure and Excessive Agency vulnerabilities. Develop realistic security scenarios involving tool calling, agent memory, Model Context Protocol (MCP), and other LLM application components. Create vulnerable, fixed, and hard-negative code variants with minimal security-relevant differences. Evaluate static application security testing (SAST) tools and assess their ability to detect genuine vulnerabilities while avoiding false positives. Perform source-to-sink analysis and trace relevant data flows, action paths, and trust boundaries. Annotate security findings, including affected assets, root causes, controls, severity, and residual risk. Define authorization contexts covering actors, tenants, identities, permitted data, actions, purposes, and recipients. Develop deterministic tests to validate vulnerable, fixed, and negative security behaviors. Recommend appropriate security controls and remediation approaches. Participate in technical calibration, peer reviews, and quality assurance activities. Requirements 5+ years of professional experience in application security, product security, or security-focused software engineering. Strong experience conducting secure code reviews and identifying application-level vulnerabilities. Practical knowledge of source-to-sink analysis, taint analysis, and static application security testing (SAST). Hands-on experience with security analysis tools such as CodeQL or Semgrep. Experience building or securing LLM agents and/or Retrieval-Augmented Generation (RAG) applications. Familiarity with frameworks and technologies such as LangChain, LlamaIndex, OpenAI or Anthropic SDKs, and Model Context Protocol (MCP). Strong understanding of authorization models, including: Actors, identities, and trust boundaries. Multi-tenant authorization and access control. OAuth, IAM, and identity management. Permitted data access and actions. Purpose and recipient restrictions. Document-level access control. Production-level coding experience in Python and/or TypeScript. Ability to distinguish genuine Sensitive Information Disclosure and Excessive Agency vulnerabilities from non-findings and false positives. Strong analytical skills and the ability to communicate technical security findings clearly.

Задачи: — Расследование алертов в облачных сервисах, SaaS, электронной почте и на устройствах. — Сбор доказательств и сопровождение инцидентов до их документированного завершения. — Улучшение процессов детектирования, создание инструкций по реагированию и автоматизация процессов. Требования: — Практический опыт расследования алертов в SOC или в рамках Incident Response. — Опыт работы с системами SIEM, EDR или средствами защиты электронной почты. — Умение анализировать логи, расследовать случаи фишинга и компрометации учётных записей. — Навыки написания небольших скриптов на Python или другом языке программирования.

Location: United States Workplace: Remote At ClickUp, we're building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an AI-native company. Every team member is expected to leverage AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what's possible. 🚀 Security at ClickUp Security at ClickUp is engineering-focused. We partner with teams across the company to protect our platform, our internal systems and our customers through secure design, defensive controls, detection and response. We build tooling and automation, including AI-powered workflows, to turn what we learn into lasting improvements.   About the team Infrastructure Security at ClickUp secures the cloud, compute, network and access layers underneath ClickUp: a multi-account AWS organization, a large Kubernetes fleet, infrastructure managed as code and the identity systems engineers use to reach production. We are a small team that works agentic first, using AI agents we build and maintain ourselves to multiply what a team our size can cover.   You will support this mission by thinking like a developer, breaking down a problem that we face, testing a method to approach it with automation, and implementing solutions that yield compounding value. Your skills to uncover threat indicators will be the foundation of this work.   The role - Architecture, proposals and reviews. Act as an initial reviewer on infrastructure proposals and designs from engineering and non-engineering teams such as business systems and go-to-market. Write our own security proposals and review the changes that follow. Translate security requirements and agent findings into clear guidance for less-technical partners, and bring their needs back into our designs. - Agentic security tooling and agent infrastructure. Build, evaluate and maintain the agents behind our reviews, triage and investigations, and help run the sandboxed, observable infrastructure they operate on. - Detection, investigation and response. Lead cloud and infrastructure alerts and incidents through to resolution and root cause, working alongside AppSec and incident response on incidents that span both. - Identity, access and least privilege. Move people, CI and services toward least privilege and just-in-time access across our cloud organization and the tooling engineers use to reach production. Deliver fixes as secure building blocks that teams adopt by default. - Compute, network and pipeline security. Harden our container, serverless and virtual machine workloads, our network perimeter and our CI/CD pipelines, and add checks so each class of issue is caught automatically next time. - Continuous review and audit evidence. Move vulnerability, access and attack-surface reviews from point-in-time checks to continuous monitoring that also produces evidence for our infrastructure controls. Qualifications - 5+ years in security engineering, cloud infrastructure or SRE, with at least 2 years securing AWS at organization scale. - At least a year of agentic development experience: building agent skills and tools for real engineering work, and developing and maintaining the development harness they run in, from configuration and permissions to integrations, evaluations and cost controls. You can secure agents against prompt injection, over-privileged tools and unaudited actions, and explain how agents fall into the confused deputy problem and the lethal trifecta. You validate agent output against evidence and decide where human review is required. - Deep AWS IAM experience: IAM Identity Center or an equivalent SSO model, SCPs, permission boundaries, resource and key policies, cross-account trust, and the ability to prove a policy's effect with simulation rather than inference. - Production Kubernetes security on EKS or similar, covering RBAC, workload identity, network policy, admission control and container runtime hardening. - AWS networking for security: VPC design, endpoints and endpoint policies, network and DNS firewalls, egress control, and WAF. - Fluency with infrastructure as code such as Terraform, including reusable patterns, multi-environment rollouts and reading plans for security impact. - Experience with CNAPP, SIEM or runtime security tooling and the cloud detection sources around it, such as CloudTrail, GuardDuty and Access Analyzer. - Experience investigating cloud and infrastructure security events: correlating cloud audit, Kubernetes, identity and network logs to establish what happened, its blast radius and its root cause. - A track record of reviewing architecture and writing design proposals, guiding teams toward secure designs through conversation rather than mandate, mentoring others through reviews, and turning a review into a change another team is glad to make. - Python, Go or TypeScript for security automation. - Clear written and verbal communication, including explaining technical risk to non-technical partners. Most of our work with other teams is asynchronous, so much of the job is a well-evidenced finding, proposal or design note that another team can act on without a meeting. Desirable - Experience using AI agents in a SOC or other incident response workflows. - Sandboxed runtime experience with gVisor, Firecracker or Kata. - Offensive security or red-team experience in cloud and Kubernetes environments. - Policy engines such as OPA or Rego. - Supporting audits like SOC 2 with automated evidence collection.   Our stack AWS, Kubernetes, infrastructure as code, CI/CD with federated identity, an enterprise identity provider, observability and cloud security platforms, and AI agent tooling. Equal Opportunity Employer ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. Privacy Notice ClickUp collects and processes personal data in accordance with applicable data protection laws. You can find further details by viewing our Global Candidate Privacy Notice. https://clickup.com/careers-terms/candidate-privacy-notice If you are a Philippine Job Applicant, please also see our Philippine Data Privacy Notice https://t333.s.clickup-attachments-stg.com/t333/d9a53ce2-6d2c-48cd-84b1-ed4e525f9613/Philippine%20Data%20Privacy%20Notice_2024.pdf?view=open for further details. Visa Sponsorship Please note we are unable to sponsor or take over sponsorship of an employment visa for roles outside of engineering and product at this time. Sponsorship for engineering and product roles is not guaranteed, but is instead based on the business needs for that specific role at that time. Please reach out to the recruiter with any questions. Fraud Alert ClickUp Talent Acquisition will only initiate contact via an @clickup.com http://clickup.com email or through our official careers portal on clickup.com http://clickup.com. We will never request fees, payments, or sensitive personal information. Please disregard any offers received outside these channels and report them to support@clickup.com. AI Processing Notice ClickUp may use artificial intelligence and machine learning technologies to help review and screen candidates' employment applications against role-related criteria. These tools support, but do not replace, human decision‑making. If you have questions or need an accommodation in the recruitment process, please contact us at AskPeople@ClickUp.com.

Location: United States Workplace: Remote At ClickUp, we're building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an AI-native company. Every team member is expected to leverage AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what's possible. 🚀 Security at ClickUp Security at ClickUp is engineering-focused. We partner with teams across the company to protect our platform, our internal systems and our customers through secure design, defensive controls, detection and response. We build tooling and automation, including AI-powered workflows, to turn what we learn into lasting improvements.   About the team Application Security at ClickUp investigates threats, platform abuse and security incidents affecting our product and internal systems. We turn investigation findings into response tooling, automation and stronger product defenses, partnering with engineering and product teams to prevent repeat issues. This is an engineering-first team that uses AI tools and agentic workflows to improve how we investigate and respond.   You will support this mission by thinking like a developer, breaking down a problem that we face, testing a method to approach it with automation, and implementing solutions that yield compounding value. Your skills to uncover threat indicators will be the foundation of this work.   The role - Digital forensics and incident response. Investigate threats affecting the ClickUp platform and internal systems, collect and analyze relevant evidence, and establish what happened and its impact. Lead investigations through findings, response and root cause, working with the owning teams to follow remediation through to completion. - Platform abuse investigations. Identify and respond to abuse of the ClickUp platform. Uncover threat indicators and recurring patterns, develop actionable threat intelligence, and use the findings to improve detection and prevent repeat abuse. - Agentic security tooling. Build and improve AI-assisted and agentic workflows for incident response, digital forensics and ongoing audits. Automate repeatable investigation work, validate outputs against evidence, and keep human review and appropriate access controls around consequential actions. - Product defenses and security controls. Design, develop and deploy controls that protect our product and internal systems. Turn investigation findings into software changes, response tooling and automated checks that address the underlying issue rather than just the individual incident. - Engineering partnership. Work directly with engineering, product, data and operations teams as a security player-coach. Explain observed threats with clear evidence, help teams design practical defenses, and mentor others so the improvements last beyond a single investigation. Qualifications - Multiple years of experience in technology or software development, including building and maintaining tooling or automation that solves operational problems. - Practical experience using AI-assisted development or agentic workflows for engineering or security work, with an ability to validate their output and recognize when human review is needed. - Experience investigating security threats or platform abuse: analyzing logs and other evidence, identifying threat indicators, and explaining findings and impact. - Ability to translate a security finding into a practical software design change, response improvement or automated control. - Experience working with cloud or SaaS systems, including using their application, identity or audit data to investigate suspicious activity. - Clear written communication: findings and recommendations that another team can act on, supported by evidence. - Ability to build relationships and mentor others on technical topics, including security. Desirable - Experience using AI agents in a SOC or other incident response workflows. - Understanding of agent security risks, including the confused deputy problem and the lethal trifecta. - You can facilitate a conversation rather than dictate it. - 3+ years of software development experience and 1+ year of security-specific experience. - Experience with security tools such as SAST, DAST, RASP, dependency checkers and SIEM. - 1 year of AWS experience, including IAM and least-privilege architectures.   Our stack Cloud and SaaS environments, software development and security automation, AI-assisted and agentic workflows, and security investigation tooling.   If you are a software engineer who is only starting to learn security, please do apply! Equal Opportunity Employer ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. Privacy Notice ClickUp collects and processes personal data in accordance with applicable data protection laws. You can find further details by viewing our Global Candidate Privacy Notice. https://clickup.com/careers-terms/candidate-privacy-notice If you are a Philippine Job Applicant, please also see our Philippine Data Privacy Notice https://t333.s.clickup-attachments-stg.com/t333/d9a53ce2-6d2c-48cd-84b1-ed4e525f9613/Philippine%20Data%20Privacy%20Notice_2024.pdf?view=open for further details. Visa Sponsorship Please note we are unable to sponsor or take over sponsorship of an employment visa for roles outside of engineering and product at this time. Sponsorship for engineering and product roles is not guaranteed, but is instead based on the business needs for that specific role at that time. Please reach out to the recruiter with any questions. Fraud Alert ClickUp Talent Acquisition will only initiate contact via an @clickup.com http://clickup.com email or through our official careers portal on clickup.com http://clickup.com. We will never request fees, payments, or sensitive personal information. Please disregard any offers received outside these channels and report them to support@clickup.com. AI Processing Notice ClickUp may use artificial intelligence and machine learning technologies to help review and screen candidates' employment applications against role-related criteria. These tools support, but do not replace, human decision‑making. If you have questions or need an accommodation in the recruitment process, please contact us at AskPeople@ClickUp.com.

Location: Remote Workplace: Remote About Prefect Prefect builds automation for an unpredictable world. The last decade of automation was about protecting workflows from unpredictability; in the agentic era, unpredictability is the point. Our mission is to give people confidence in automated work, whether that work is a mission-critical data pipeline or a fleet of AI agents. In August 2026, Prefect and Dagster, competitors for eight years, joined forces to build the next generation of automation infrastructure. Today, our ecosystem includes Dagster, the data platform; Prefect, the agent platform; and FastMCP, the leading open-source developer framework for the MCP ecosystem. Together, our open-source and commercial products are trusted by Fortune 500 companies, data innovators, and high-growth technology companies around the world. We think of our culture as the operating system of the company. We’ve carefully created a supportive, high-performance environment that empowers our team to do the best work of their careers, have meaningful impact, and continue growing personally and professionally. We’re a remote-first team that values high standards, ownership, and thoughtful collaboration. THE ROLE In August, Dagster and Prefect became one company. Behind the scenes, that left us with two of nearly everything: two SOC 2 programs, two ways of managing laptops, overlapping tools and accounts, and a long list of tools that each need one clear owner. We're hiring a Security & IT Operations Engineer to turn all of it into one setup that runs well and gets easier to run every quarter. You'll own the day-to-day of our security compliance program and our corporate IT. You'll report to our Security & Systems Lead as the first hire on this new team. Our customers are enterprise data, infrastructure, ML and AI teams, and our products run code inside their data infrastructure. AI has made attacks cheap and fast, so customers look hard at how we protect them, and a well-run security and compliance program is a big part of our answer. You won’t be pushing security uphill here. More engineers volunteered for our new Security Guild than its first sprint had room for. Building on both companies’ existing security work, the guild is implementing shared product security tools and consistent vulnerability management and incident response processes across Prefect and Dagster. That commitment is helping us stay ahead of AI-accelerated attacks. You’ll enjoy this role if you like a mix of hands-on work and longer-term improvements, and want a meaningful say in how our IT and compliance programs run. WHAT YOU’LL OWN - Run day-to-day compliance. Keep SOC 2 controls, evidence collection, access reviews, policy acknowledgments and training on track. Work directly with auditors and control owners, and follow findings through to resolution. - Help consolidate our compliance programs. With our team lead and consultant, choose a GRC platform and set up both programs. Help adapt control descriptions across environments and design activities that minimize manual work. - Own corporate IT. Run Google Workspace and our SaaS apps, handle onboarding and offboarding with People Operations, and manage our Mac fleet in Rippling. Help employees with laptop and access issues, and improve the setup as you learn where people get stuck. - Improve access management. Work with our identity partner on how access is requested, approved, granted and removed. Own the daily processes and keep them documented. - Protect corporate systems. Manage macOS and application updates, investigate endpoint alerts, and track vulnerabilities through remediation. Verify fixes and participate in phishing and other corporate incident response with our team lead. - Automate repetitive work. Use scripts, APIs, workflow tools or AI to reduce manual IT and compliance tasks and make common requests self-service. Recently completed projects include consolidating Mac device management into Rippling, running access reviews that support both SOC 2 programs, and working with teams to assign tool owners and retire duplicates. WHERE THE ROLE CAN GROW We’re building the Security & Systems function for the combined company, and this role will help shape it. Starting with ownership of day-to-day IT and compliance, you can grow toward broader security operations and engineering—including vulnerability management, corporate incident response, and corporate security engineering—or toward risk management and AI governance. The direction will depend on your strengths, interests, and the company’s needs, with opportunities to take on more program ownership and planning as the function develops. WHAT YOU’LL BRING We’re looking for hands-on IT and compliance experience, practical technical judgment, and the ability to take ownership. Your experience may be deeper in one area, but you should be comfortable across both. - You’ve owned recurring SOC 2 activities and worked directly with external auditors, or bring auditing experience. You understand how controls work, what evidence demonstrates they’re operating, and how to adapt them across systems and teams. - You’ve administered and secured corporate IT systems, including account management, onboarding/ offboarding and Macs managed through an MDM. You’re comfortable with patching, endpoint alerts, remediation tracking, phishing or suspicious account activity, and helping employees troubleshoot problems. - You’re comfortable automating recurring tasks with scripts, APIs, workflow tools or AI, and can explain something you’ve built. A small, useful improvement is a good example. - You drive work across teams: establish owners and deadlines, work through blockers, and follow through until tasks are completed and documented. You know when to resolve something yourself and when to escalate. NICE TO HAVE - Experience with Google Workspace, Rippling, or a GRC platform such as Vanta, Drata or Thoropass. - Familiarity with SSO, SCIM provisioning or other ways to automate account access. - Experience helping implement or migrate an IT or compliance system, or improving a process that involved several teams. WHO THIS ROLE IS NOT FOR - You’re looking to leave hands-on IT support behind. Helping someone with a laptop or access problem is part of the job, alongside larger projects and automation work. - You need a settled, fully documented environment from day one. We’re still bringing two companies’ systems together, and you’ll help work out how the combined setup should run. WHAT YOU'LL GET IN RETURN: Base Salary Ranges: - San Francisco Bay Area and NYC metro: $165,000 - $219,000 - Washington, D.C., Boston, LA metro and Seattle: $150,000 - $194,000 - Denver, Chicago, Atlanta and all other US metros: $149,000 - $193,000 Actual base salary within each range depends on the candidate's location, experience, and qualifications. Equity and benefits are not included in the range above. Your recruiter can share more about the salary range for your preferred location during the hiring process. Perks and Benefits: - Remote-first team with flexible-first culture - Equity Stock Options - 401(k) with 5% company match (vests immediately!) - Unlimited PTO - Medical, Dental and Vision insurance - Generous Parental Leave - Life Insurance and Disability benefits - $800/month remote work stipend And that's just the start — for more info check out our benefits and perks on our careers page. BELONGINGNESS AT PREFECT: Belongingness at Prefect is our commitment to ensuring mutual power, access, and opportunity among all groups and individuals who make up our community. We operationalize belongingness through actions large and small on a daily basis, but always with the goal that all groups and individuals can contribute as their most authentic self to the evolution of our product, our team, and our community. Belongingness is also our commitment to bridge with individuals or groups not yet established in our community, acknowledge differences in a way that affirms distinct identities, and allows for a new, more expansive group identity to form. EQUAL OPPORTUNITY AT PREFECT: Prefect is an equal opportunity employer and encourages applications from people of all backgrounds. All applicants will be considered for employment without attention to race, religion, color, sex (including pregnancy, sexual orientation and gender identity/expression), national origin, disability or any other status protected under applicable federal, state, or local laws. Delaney is a real live person (👋🏻) and is looking forward to learning more about you through your application.

We are looking for a Senior IT Security Engineer (based in #Cyprus, #Serbia, or #Remote) to establish and lead our day-to-day security function. This is a hands-on, senior-level role focusing on infrastructure, cloud security, access controls, and endpoint defense.

Понимание архитектуры web-приложений и микросервисов. Опыт анализа кода на Java, JavaScript/TypeScript, Python, C/C++, C#.

Location: Vilnius 500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating. Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down. With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better. The job Millions of people trust Flo with their most personal health data. As our Security Architect, you’ll make sure we deserve that trust. This is a hands-on individual contributor role. You’ll work side by side with engineering, product and platform teams to shape secure architectures and build the guardrails that let both humans and AI coding agents ship quickly and safely. The role combines security architecture, product and application security engineering and security risk expertise: you will set secure patterns and standards, lead threat modelling and design reviews, embed security into the SDLC and CI/CD, and translate security risk into clear, pragmatic decisions. What you’ll do Shape secure architecture from day one. Partner with teams early in design, lead security design reviews for new services and major changes, and record key decisions and risk trade-offs. Build security harnesses for human and AI-agent development. Design guardrails, sandboxing, least-privilege access for agents and tools, secrets handling, policy-as-code and automated checks that run inside developer and agent workflows. Lead on AI and agentic security. Define secure patterns for LLM integrations, MCP servers and tool use, and tackle risks like prompt injection, data leakage, excessive agency and supply-chain compromise. Create paved roads. Publish reusable patterns, reference architectures and standards that teams adopt because they’re the easiest option. Scale threat modelling. Build tools and skills that let engineers run threat models themselves, and carry out internal security assessments. Remove whole classes of vulnerabilities. Automate vulnerability triage and investigation, find systemic root causes, and feed the fixes back into patterns and guardrails. Turn risk into clear decisions. Explain security risk in pragmatic terms so the business can prioritise based on risk and value. Advise and enable. Be a trusted partner to engineering, product and leadership, coach engineers, and help evaluate third-party and AI tools so they can be adopted securely. Support ISO 27001/27701 so that controls are built into how we engineer, not bolted on afterwards. What you’ll bring 7+ years in security engineering, application/product security or security architecture, including hands-on work securing cloud-native systems Deep knowledge of Secure SDLC: threat modelling, security testing, app security review and CI/CD security Hands-on experience with AWS and Cloudflare (or equivalents) and Terraform or similar IaC A strong grasp of the OWASP Top 10 and the ability to assess exploitability and impact Solid coding skills (e.g. Python, Go, Scala) and experience building security tooling or automation Practical understanding of the risks in AI-assisted and agentic development and LLM applications (e.g. OWASP Top 10 for LLMs) Experience with security risk analysis and risk management methods The ability to explain trade-offs clearly to engineers and senior stakeholders, and to win people over Nice to have Experience building guardrails, sandboxes or policy-as-code (e.g. OPA) for developer platforms or AI coding agents iOS or Android security experience Experience with ISO 27001, ISO 27701 or SOC 2 audits A background in health tech, femtech or another regulated, privacy-sensitive industry Certifications or degrees such as CISSP, CCSP, OSCP or an MSc in Information Security Why Flo You’ll protect data that matters deeply to millions of people. You’ll also help set the standard for how a company adopts agentic engineering safely, and you’ll have real ownership: you design and build the first version, then hand it off to the teams who will run it. Salary Range - gross per month (ranges may vary based on skills and experience) €8.000 — €10.000 EUR How we work We’re a mission-led, product-driven team. We move fast, stay focused and take ownership – from brief to build to impact. Debate is encouraged. Decisions are shared. We care about craft, ship with purpose, and always raise the bar. You’ll be working with people who take their work seriously, not themselves. It takes commitment, resilience, and the drive to keep going when things get tough. Because better health outcomes are worth it. What you'll get We support impact with meaningful reward. Here’s what that looks like: Competitive salary and annual reviews Opportunity to participate in Flo’s performance incentive scheme Paid holiday, sick leave, and female health leave Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents Accelerated professional growth through world-changing work and learning support In-person collaboration and work in a hybrid model, with 3 days per week spent in the office 5-week fully paid sabbatical at 5-year Floversary Flo Premium for friends & family, plus more health, pension and wellbeing perks Diversity, equity and inclusion Our strength is in our differences. At Flo, hiring is based on merit, skill and what you bring to the role – nothing else. We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities. Read our privacy notice for job applicants .