Location: United States of America
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
Reports to:
Director of Product Security and Incident Response
Location:
Remote US
Compensation Range:
$200,000.00 to $210,000.00 plus bonus and equity
What You’ll Do:
As a Staff CSIRT Analyst, you will be the cornerstone of Huntress’ internal security resilience. You will act as the primary internal escalation point from our SOC, ensuring we protect ourselves with the same rigor and products we use for our customers. In this role, you will strategize with leaders across multiple functions to identify work streams and own the end-to-end incident response lifecycle. You will guide teams, determine key milestones, and proactively anticipate blockers that could hinder our response capabilities.
Responsibilities:
Incident Response & Triage:
Lead the identification, triage, and validation of security incidents through various telemetry sources, acting as the ultimate escalation point for the SOC.
Strategic Preparedness:
Drive organizational incident readiness by designing and executing practical response exercises (tabletops and purple teaming) to ensure first responders are prepared at all levels of our organization.
Telemetry Optimization:
Partner with engineering, product security, and detection engineering teams to tune existing telemetry sources to a high true-positive rate, reducing noise and increasing detection efficacy.
Offensive Security Partnership:
Collaborate closely with the Offensive Security team to identify visibility gaps and ensure proper coverage against modern threat actor TTPs. Partner with product security, engineering, detection engineering, and other applicable business units to close these gaps rather than treating them as a blocker.
Continuous Improvement & Leadership
: Lead cross-functional Post-Incident Reviews (PIRs) to extract critical lessons learned; own the lifecycle of resulting remediation tasks, driving specific tooling and process enhancements that harden organizational defenses and response against future threats.
Stakeholder Communication:
Develop and present comprehensive reports and "lessons learned" to stakeholders at all levels following major incidents or exercises.
Documentation:
Create and maintain playbooks, system configurations, and incident response standards to ensure scalability and supportability.
What You Bring To The Team:
Experience:
8+ years of experience in Incident Response, SOC Operations, or Digital Forensics (DFIR).
Technical Expertise:
Advanced knowledge of EDR/MDR platforms, log aggregation (SIEM/ELK), and cloud security environments (AWS/Azure/M365).
Problem Solving:
Proven ability to articulate the root cause of complex problems using first principles and translate insights into technical solutions.
Strategic Thinking:
Experience leading small project teams and aligning tech stacks across functions.
Communication:
Exceptional ability to convey complex technical incident details to both technical teams and executive leadership.
Tooling:
Familiarity with automation/SOAR platforms and documentation tools like Confluence, Jira, and Lucid Chart.
Mindset:
A proactive, forward-thinking approach to security with a passion for building "stewardship of culture" through inclusive and actionable security behaviors.
What We Offer:
100% remote work environment - since our founding in 2015
Generous paid time off policy, including vacation, sick time, and paid holidays
12 weeks of paid parental leave
Highly competitive and comprehensive medical, dental, and vision benefits plans
401(k) with a 5% contribution regardless of employee contribution
Life and Disability insurance plans
Stock options for
all
full-time employees
One-time $500 reimbursement for building/upgrading home office
Annual allowance for education and professional development assistance
$75 USD/month digital reimbursement
Access to the BetterUp platform for coaching, personal, and professional growth
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to
accommodations@huntresslabs.com
. Please note that non-accommodation requests to this inbox will not receive a response.
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our
Candidate Privacy Notice
for more details on our practices and your data privacy rights.
#BI-Remote
Задачи:
— Аудит, Hardening конфигурации сетевого оборудования;
— Обеспечение защиты от сетевых атак (IPS);
— Обеспечение защиты беспроводных сетей;
— Анализ политик сетевой безопасности, сетевых сегментов;
— Тестирование и внедрение новых механизмов обеспечения сетевой защиты.
Требования:
— Высшее образование в сфере ИБ / ИТ;
— Знания: модель OSI, сетевые протоколы на уровне L7, особенности TLS и шифрования трафика, беспроводные сети (WiFi), роутинг (BGP, OSPF), межсетевое экранирование, Vlan, SDWAN (желательно), 802.1X, VPN;
— Умения: настройка IPS (Политики, сигнатуры, нагрузочные тесты и тесты работоспособности), NGFW (подход в настройке, вспомогательные механизмы AVZ, white\blacklist), анализ логов сетевых устройств и средств защиты информации, защита и hardening сетевых устройств и сетевых СЗИ, аудит конфигурации сетевого оборудования, правил межсетевого экранирования;
— Будет являться плюсом: знание языков программирования (python, powershell, sql-запросы, etc), опыт проведения расследований ИБ (forensics), опыт внедрения облачных информационных систем/платформ по защите пользователей, хорошее понимание технологий и средств защиты, применимых к концепции BYOD(в том числе модели ZeroTrust).
Условия:
— Официальное оформление по ТК РФ с первого дня работы в аккредитованной IT-компании, привлекательный уровень заработной платы;
— Дружеская атмосфера и поддержка с самого начала: для новичков предусмотрен онбординг с опытным наставником, который поможет разобраться в процессах, расскажет о продуктах и всегда будет на связи;
— Гибкие процессы, которые мы постоянно улучшаем, учитывая мнение каждого члена команды;
— Минимум бюрократии: большинство вопросов решается быстро через электронный документооборот;
— Удобный офис в отличной локации с современным оборудованием и всем необходимым для комфортной работы;
— Уникальные бенефиты: ДМС (включая стоматологию), фитнес, курсы иностранных языков, скидки на продукты банка и партнеров;
— Поддержка профессионального роста: оплата тренингов, курсов и участие в ИТ-мероприятиях (митапы, хакатоны, конференции);
— Свобода и комфорт: гибкий график, отсутствие дресс-кода, минимум бюрократии и максимум вовлеченности.
Location: Toronto, Ontario
Workplace: Hybrid
Artificial Intelligence. Actual Impact.
At Docebo, we’re using AI to change how people learn at work—and we mean actually change it. We’re an AI-powered learning platform that helps organizations create, deliver, and manage training all in one place. But our real mission goes deeper: we help teams move faster, work smarter, and focus on the work that truly matters. Our platform is built with intelligent, time-saving tools that personalize learning, eliminate busywork, and turn training from a checkbox into a superpower. The result? Better experiences for learners and real results for businesses.
We’re shaping the future of learning with a team that isn’t afraid to challenge the status quo. If you're excited by the idea of using AI to make work-life better for real people–you’ll feel right at home here. And it’s not just what we build, it’s how we show up. At Docebo, our values aren’t just posters on the wall—they guide how we work every day. We call it the Docebo Heart: trust by default, assume positive intent, and create space for different perspectives to thrive.
So… what are you waiting for? Join 900+ Docebians around the world and help us reinvent the way people learn, because learning never stops.
🚀 THE ADVENTURE AHEAD
As Senior Legal Counsel, you will serve as a trusted advisor and key strategic leader navigating complex global legal landscapes to directly accelerate Docebo’s growth. Partnering with cross-functional powerhouse teams—like Sales, Deal Desk, Finance, and Partnerships—you will lead high-stakes negotiations, champion innovative legal strategies, and safeguard our organization across multiple jurisdictions. If you are ready to apply your legal expertise to transform the future of AI-driven learning in an agile, high-impact environment, this is your next big move.
⚡ THE DAY-TO-DAY
- Lead the Charge: Partner closely with senior leadership and cross-functional teams across Sales, Deal Desk, Finance, and Partnerships to deliver high-impact legal guidance aligned with core business objectives.
- Architect the Future: Design, draft, and negotiate complex, high-value SaaS agreements, Master Service Agreements, vendor contracts, NDAs, and partnership deals.
- Revolutionize Process: Innovate and refine key legal workflows, contract templates, and operational processes to boost efficiency and decrease risk globally.
- Navigate Risk: Conduct forensic contract reviews to uncover potential risks and deliver practical, business-oriented solutions that protect Docebo’s interests.
- Advise & Empower: Act as a strategic counselor to internal stakeholders on data privacy, product compliance, disputes, and complex commercial negotiations.
- Fuel Expansion: Drive the legal framework behind high-stakes strategic growth, leading reviews for RFPs, tender responses, and M&A due diligence activities.
- Champion Knowledge: Create and deliver interactive internal training initiatives to educate teams on compliance, policies, and global legal best practices.
💪 YOUR SUPERPOWERS
- Legal Credentials: Holds a JD/LLB from an accredited law school and is active/admitted to practice law in any province.
- SaaS Expertise: 8+ years of dynamic legal experience, ideally built within a fast-paced technology or SaaS enterprise.
- Deal-Making Genius: Extensive experience negotiating and drafting complex SaaS subscriptions, professional services agreements, and privacy terms under tight deadlines.
- Privacy Sentinel: Deep expertise in global privacy framework regulations (such as GDPR) and their practical application in cloud and AI technology.
- Strategic Problem-Solver: A solution-oriented mindset with advanced negotiation, communication, and stakeholder management skills.
- Tech-Savvy Leader: Proficiency in tools like Salesforce or standard CRM systems and a track record of mentoring junior legal professionals.
🌟 BONUS POINTS
- M&A & Tender Experience: Hands-on experience driving legal due diligence for major M&A transactions and large-scale government/enterprise tenders.
OUR HYBRID WORK PHILOSOPHY 🤝
Great work can happen anywhere but coming together helps us go further. Our team spends three days a week in the office (Tuesday-Thursday) to collaborate, solve problems, and learn from each other. With flexibility the rest of the week, it’s a balance designed to help everyone do their best work and keep growing.
OUR TOTAL REWARDS PHILOSOPHY 🎉
Our Total Rewards Philosophy centers around three core areas to reward and care for our People:
- Rewarding Impact: We lead with competitive pay to reward the impact, skills and traits that fuel our success.
- Fostering Holistic Wellbeing: We care deeply about and invest in the whole person with programs that support our people’s physical, mental, and financial well-being.
- Empowering Our Talent Culture: We build a culture of trust and empowerment by designing our rewards and benefits with transparency, equity, and flexibility, enabling our people to do their best work and stay for the long haul.
OUR PROMISE TO YOU 😍
- Financial Wellness: Own a piece of Docebo through our Employee Share Purchase Plan (ESPP) at a 15% discount, plus a competitive compensation package.
- Your Well-Being, Covered: You’ll get access to health benefits, so you can get the care you need when you need it.
- Rest, Relax, Repeat: Rest and recharge with paid vacation days, two company-wide Docebo Days, floating holidays for cultural celebrations, and your birthday off!
- Family First: We provide coverage offering you time with your little one(s) so you can soak up all those precious moments. Fun fact: we had 30 Docebian babies join the family in 2025!
- Connections That Count: Connect with global communities through our Employee Resource Groups (including PRIDE, DWA, BIDOC, and Green Ambassadors) and company-wide events that keep the fun rolling all year long.
ABOUT DOCEBO 💙
At Docebo, we create seamless, AI-powered learning experiences for over 3,000 customers worldwide. We have successfully achieved two IPOs (TSX: DCBO & NASDAQ: DCBO https://www.docebo.inc/home/default.aspx), been recognized as a top SaaS e-learning solution, and are growing exponentially in the process. We're a global company, with office across North America, EMEA, APAC, and beyond. Our team is guided by five core values—Grow Together Win Together, Build with Our Customer, Clear is Kind, Own Outcomes, Progress Over Perfection—that shape everything we do. If this resonates with you, now is the perfect time to join one of the fastest-growing learning technology companies in the world.
Docebo is an Equal Employment Opportunity employer https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf. We are committed to diversity and inclusion in our workforce. All qualified applicants and employees will receive consideration for employment regardless of their race, colour, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, citizenship status, age, disability, genetic information, or any other category protected under applicable law.
As a federal contractor, Docebo is committed to the principles of affirmative action and equal employment opportunity for protected veterans and individuals with disabilities. Docebo does not discriminate because of protected veteran status or on the basis of disability, and Docebo takes affirmative action to employ and advance in employment qualified protected veterans and individuals with disabilities.
Any individuals requiring a reasonable accommodation or would like to voluntarily disclose a disability or protected veteran status to assist with their employment application should send an e-mail to their recruiter directly.
Location: Foster City, CA
Workplace: Hybrid
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
About the Role
We are looking for an AI Agent Security Architect to function as the primary technical authority for Replit’s autonomous and AI agent security blueprint. In this critical role, you will design, implement, and maintain the runtime defense systems, guardrail frameworks, and sandboxing architectures that govern AI agents executing code, invoking tools, and reasoning across our platform. You will be a key technical contributor—leading high-impact AI security initiatives and bridging the gap between non-deterministic AI behavior and rigorous cybersecurity controls for both engineering and executive leadership.
What You'll Do
- AI Agent Security Strategy & Technical Execution
- AI Agent Security Blueprint: Define the long-term vision and architectural patterns for securing autonomous agent workflows, Model Context Protocol (MCP) integrations, multi-turn reasoning loops, and multi-agent coordination.
- Runtime Guardrails & Policy Enforcement: Architect and deploy dynamic input/output guardrail systems, semantic firewalls, and real-time intent verification filters to prevent goal hijacking, system prompt leaks, and indirect prompt injections.
- Agent Execution & Tool Sandboxing: Partner with Infrastructure and AppSec teams to design secure, short-lived, micro-isolated environments (e.g., microVMs, WebAssembly, container sandboxes) where agents can dynamically execute code, run shell commands, and interact with host operating systems safely.
- Agentic Threat Modeling & Red Teaming: Conduct specialized threat modeling against non-deterministic systems. Lead automated and manual AI red-teaming initiatives to uncover vulnerabilities in RAG context pipelines, vector stores, and tool-calling interfaces.
- Identity, Delegation & Least Privilege: Architect fine-grained permission models and step-up Human-in-the-Loop (HITL) authorization patterns for agents acting on behalf of users—ensuring agents never exceed the delegated privileges of the end user or misuse API keys.
- Context & Memory Boundary Security: Design strict data isolation and poisoning prevention controls for vector databases, retrieval-augmented generation (RAG) pipelines, and long-term conversation memories across multi-tenant workloads.
- Risk Management & Cross-Functional Enablement
- Maintain the AI Security Source of Truth: Define, document, and maintain authoritative secure design patterns and SDKs for engineering teams building internal or customer-facing AI agent capabilities.
- Contribution to Risk Register: Identify, quantify, and document non-deterministic and agentic security risks (e.g., OWASP Top 10 for LLMs & AI Agents, MITRE ATLAS), ensuring they are accurately represented in the Cybersecurity Risk Register.
- Auditability & Observability: Design tamper-evident logging and telemetry standards for agent reasoning chains, tool execution history, and context assembly to support incident response, forensics, and GRC requirements.
- Compliance & Sales Enablement: Partner with GRC to translate complex AI security controls into enterprise-ready audit documentation (e.g., ISO 42001, NIST AI RMF, EU AI Act readiness) and support Sales on complex enterprise security inquiries regarding AI safety.
Required Skills & Experience
- 6+ years of experience in security engineering or security architecture, with at least 2+ years dedicated specifically to AI/ML security, LLM application security, or securing agentic frameworks.
- Deep understanding of agentic architectures and protocols (e.g., Model Context. Protocol (MCP), LangChain, AutoGen, CrewAI, ReAct frameworks, and vector database technologies).
- Hands-on expertise with threat vectors unique to agentic AI: Indirect Prompt
- Injection, Goal Hijacking, Tool Parameter Tampering, Data Poisoning, and Context Contamination.
- Strong background in applying safety standards and risk frameworks such as OWASP Top 10 for LLMs & AI Agents, NIST AI RMF, and MITRE ATLAS.
- Proficiency in Python, Go, or TypeScript/JavaScript with a proven track record of reviewing code and building functional security tooling or guardrails.
- Experience authoring, maintaining, and evangelizing technical security architecture documentation.
- Exceptional ability to communicate complex non-deterministic AI risks to both deep technical engineers and executive stakeholders.
- Proven track record of contributing to an enterprise Cybersecurity Risk Register.
Bonus Qualifications
- Experience designing runtime sandboxing and isolation technologies (e.g., Firecracker, gVisor, Docker, WebAssembly) for dynamic code execution environments.
Full-Time Employee Benefits Include:
💰 Competitive Salary & Equity
💹 401(k) Program with a 4% match (US Only)
⚕️ Health, Dental, Vision and Life Insurance
🩼 Short Term and Long Term Disability
🚼 Paid Parental, Medical, Caregiver Leave
🏝 Flexible Time Off (FTO) + Holidays
🚗 Commuter Benefits (In-Office & US Only)
📱 Monthly Wellness Stipend
🧑💻 Autonomous Work Environment
🖥 In Office Set-Up Reimbursement (In-Office Only)
🚀 Quarterly Team Gatherings
☕ In Office Amenities (In-Office Only)
Want to learn more about what we are up to?
- Self-driving Company https://replit.com/blog/self-driving-company
- Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale
- AI Adoption https://replit.com/blog/ai-adoption
- Build Open-Source Apps https://replit.com/build/open-source-app-builder
Interviewing + Culture at Replit
- Operating Principles https://blog.replit.com/operating-principles
- Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit
To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.
Location: Denver, Colorado, USA
Our Story:
At thinkcell, we’re on a mission to revolutionize the way professionals work—making presentation creation smarter, faster, and more efficient. Since our founding in 2002 in Berlin, we've been crafting powerful software that seamlessly integrates with Microsoft Office, helping users easily transform complex data into stunning charts and diagrams.
Driven by innovation and technical excellence, our diverse and dynamic team thrives on creativity and collaboration. We foster an inclusive culture where ideas flourish, and every team member has the opportunity to make a real impact. If you're passionate about shaping the future of productivity software, think-cell is the place for you!
What you will do:
Are you a driven, entrepreneurial sales professional ready to make a global impact? We’re looking for a high-energy Account Manager to lead our go to market efforts across a portfolio of high-potential accounts in the North America region.
In this role, you will manage and grow a book of existing customers with a focus on driving adoption, expanding licenses, and ensuring customers unlock the full value of thinkcell. You will own the full sales cycle from opportunity identification to close and work cross functionally to deliver an exceptional customer experience.
If you thrive on building strong relationships, uncovering growth opportunities, and driving impact across a broad customer base, this is your opportunity to lead from the front.
Key Responsibilities:
Own a portfolio of customers by managing and growing key accounts while identifying and executing expansion opportunities.
Prospecting into new teams and divisions within existing accounts, leveraging account mapping and data-driven sales strategies.
Manage the full sales cycle from lead generation to deal closure, including qualification, value positioning, live product demonstrations, negotiation, and contract execution.
Manage data-driven account forensics to identify areas for expansion and churn prevention.
Engage directly with end-users, procurement, and decision-makers to drive adoption and long-term value.
Develop and execute strategic account plans tailored to each customer’s structure, needs, and buying patterns.
Own pipeline generation, inbound requests, and trial conversions by refining outreach strategies, adjusting messaging, and executing sales plays.
Work cross-functionally with leadership, customer enablement, and solution consulting to drive training and adoption within key accounts.
Monitor account health and proactively mitigate churn risk through ongoing engagement, renewal strategies, and expansion planning.
Your profile
3-5+ years of experience in high growth or start-up SaaS sales, environment.
Proven track record of managing enterprise or mid-market accounts.
Strong ability to navigate complex customer organizations, multi-thread deals, and working with C-suite executives.
Highly self-sufficient and proactive, capable of operating in an entrepreneurial and fast-moving sales environment.
Experience in working with common GTM tools (e.g. Salesforce.com, Outreach.io, Gong, LinkedIn SalesNav).
Excellent virtual communication and presentation skills with the ability to build and maintain customer relationships.
Appreciation of our product – willingness to understand thinkcell’s product is a must (don’t worry, it’s very intuitive), experience with thinkcell a plus.
Bachelors degree, preferably in business or a related field.
Proficiency in Microsoft Office.
Based in Denver, CO region, with the ability to work on-site in at least 3 days per week.
Ability to travel to the Berlin, Germany x times a year.
Full work authorization, there is no visa sponsorship available for this role.
Why is thinkcell the right place for you?
At thinkcell, we’re not just building innovative software – we’re empowering over 1.3 million business users across 35,000 companies, including the world’s top consulting firms, DAX 40 leaders, and the biggest US blue-chip enterprises. With offices in Berlin, Munich, Denver, Boston, London, Tokyo, and Dubai, we are a diverse, passionate team of over 210 people, united by a shared commitment to excellence and innovation.
Our proprietary technology sets the standard in business document creation, and we're in a dynamic, growing market with enormous potential. As we continue to lead the way in our industry, we’re looking for talented individuals who can help us shape the future of business productivity.
Our Values
At thinkcell, our values are at the heart of everything we do. They guide how we work, collaborate, and create value for our customers. As part of our team, you will embody and help shape the following principles that define us:
Forward Thinking:
We are adaptable innovators – we embrace change, value progress, and challenge the status quo to find the best solutions.
Ownership:
We take pride in our work – we own our mistakes, learn from them, and go the extra mile to deliver exceptional results.
Customer First:
We are committed to our customers – we understand, prioritize, and deliver lasting value through meaningful solutions.
Unified Team:
We cultivate collaboration and value every voice – we prioritize integrity and respect, ensuring everyone feels heard, supported, and aligned in our shared mission.
Strive for Excellence:
We are driven by excellence – we set ambitious goals, pursue quality relentlessly, and foster growth through exceptional talent.
Join Our Journey
We encourage you to apply even if you don’t meet every requirement. At thinkcell, we celebrate diversity because it drives creativity and excellence. We welcome individuals from all backgrounds who are passionate about making a real impact. Joining us means more than just a job – it’s an opportunity to be part of an inclusive, innovative, and supportive team that values collaboration and growth. Together, we can push boundaries and achieve great things.
Compensation: thinkcell believes the value of pay transparency contributes towards an honest and supportive culture. For this role, we anticipate an OTE of $130K–$150K per year. The actual amount to be offered to the successful candidate will be dependent upon the key aspects of each case, which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any think-cell variable incentive includes a targeted dollar amount, and any actual payout amount is dependent on company and personal performance. think-cell provides comprehensive benefits package including medical, dental, vision, disability leave, parental leave, paid time off and 401k contribution (all benefits are subject to eligibility requirements).
At thinkcell, we value diversity. Thinkcell is proud to be an equal opportunity employer and does not discriminate based on race, color, religion, national origin, age, disability, sex, gender identity or expression, sexual orientation, marital status, military or veteran status, or any other characteristic protected by law.
Location: Doha, Qatar
NetWitness provides advanced threat detection, investigation, and response capabilities that help organizations detect sophisticated threats, investigate incidents, and protect critical IT and OT environments.
Job Summary
We are seeking a highly skilled Senior Cybersecurity & Operational Technology Specialist to join the NetWitness team and support customers in Qatar and the broader region.
This role requires the ability to work in Qatar and provide onsite support to customers as needed, including complex investigations, cybersecurity assessments, consulting engagements and incident response.
The role will also support the sales team as a senior technical advisor, helping customers understand NetWitness technologies and services, define requirements, scope engagements and develop technical solutions and proposals.
Key Responsibilities
Partner with local sales teams to develop technical solutions, proposals and customer engagement plans
Lead comprehensive reviews of customer cybersecurity posture across IT and OT environments.
Evaluate customer environments to identify vulnerabilities, security gaps, and opportunities to improve cyber resilience.
Translate assessment findings into actionable improvement plans, helping customers mature their security defenses.
Design and implement secure OT network architectures using segmentation, zero-trust principles, and industry recognized models such as the Purdue Model.
Conduct detailed cybersecurity assessments and threat modeling on physical industrial control systems (ICS), SCADA and other OT environments.
Develop and execute specialized OT incident response playbooks that prioritize process safety and plant availability.
Assist with aligning environments with recognized cybersecurity frameworks, including IEC 62443 and NIST SP 800-82.
Develop and maintain OT risk assessments and translate technical findings into actionable risk priorities for customers executive stakeholders. As part of the job, the resource will deliver cybersecurity consulting services both remotely and in-person.
Deliver proactive services including compromise assessments, gap analysis, threat hunting, incident readiness reviews and customer training.
Conduct digital forensics investigations on endpoints, networks, memory, OT and cloud environments using industry standard tools.
Lead incident response engagements, including triage, malware analysis, threat hunting, and root cause determination.
Develop forensic reports, timelines, and executive summaries for customers and stakeholders.
Develop or customize tools and scripts to improve investigation process.
Collaborate with cross-functional teams to mitigate threats and recommend remediation strategies.
Provide onsite support to customers in Qatar on short notice and travel regionally or internationally for customer engagements and incident response as required.
Mentor junior analysts and contribute to team knowledge-sharing initiatives.
Requirements
7+years of cybersecurity experience and significant hands-on experience in digital forensics and incident response.
Demonstrated hands-on experience securing or assessing OT/ICS environments, including industrial networks, segmentation, incident response, and security architecture.
Strong working knowledge of OT cybersecurity frameworks and standards, including IEC 62443 and NIST SP 800-82.
Strong executive-level and customer-facing communication skills, with the ability to translate complex technical findings into business and operational risk.
Relevant cybersecurity certifications such as GCFA, GCFE, GCIH, GNFA, GREM, CISSP, CISA, OSCP, or equivalent are strongly preferred.
Fluency in English and Arabic (spoken and written).
Must currently reside in Qatar or can legally work in Qatar and provide onsite customer support as required.
Location: New York; Stockholm; San Francisco
Workplace: OnSite
ABOUT US:
AI NEEDS A NEW INFRASTRUCTURE LAYER. WE'RE BUILDING IT AT MODAL.
Every era of computing brought new workloads that previous infrastructure couldn't support: mainframes, databases, and the cloud. Each time, the company that rebuilt the layer underneath defined the decade. AI is no different, except it touches everything instead of one slice, and the window to build the layer underneath it is open right now.
Our customers include category-defining companies like Ramp https://modal.com/blog/how-ramp-built-a-full-context-background-coding-agent-on-modal, Cognition, DoorDash, and Suno. They rely on Modal for instant GPU access, sub-second container starts, and native storage, so it's simple to serve low-latency inference, fine-tune models, and access production-ready sandboxes at scale.
We've passed $1B in annualized run rate, up 15x from a year ago. In October 2026 we raised a $750M Series D led by Accel at a $15.75B valuation.
Our team includes creators of popular open-source projects (e.g.,Seaborn https://github.com/mwaskom/seaborn,Luigi https://github.com/spotify/luigi), academic researchers, international olympiad medalists, and experienced engineering and product leaders with decades of experience.
THE ROLE:
We’re looking for a Detection & Response Engineer to build the systems that help us identify, investigate, and respond to threats across our platform.
This is an engineering role focused on automation. You’ll build detections, investigation tooling, and response capabilities that scale with our infrastructure, using AI where it meaningfully improves signal, investigation speed, and operational effectiveness.
You’ll work closely with infrastructure, platform, and security engineers to ensure every incident makes the platform more resilient.
WHAT YOU'LL WORK ON:
Detection Engineering
- Design and build high-fidelity detections for attacks, abuse, and anomalous behavior across our infrastructure and production systems
- Continuously improve detections based on telemetry, threat intelligence, and lessons learned from incidents
- Improve visibility across cloud infrastructure, containers, identity systems, and production services
Incident Response
- Lead or participate in investigations spanning production infrastructure, cloud environments, and internal systems
- Build playbooks and automation that reduce investigation time and improve response consistency
- Drive post-incident improvements that eliminate entire classes of future incidents
Security Tooling & Automation
- Build internal tooling that improves detection, investigation, and response workflows
- Leverage LLMs to automate repetitive analysis, accelerate investigations, and surface actionable insights from security telemetry
- Improve the collection, quality, and usability of security telemetry across the platform
Engineering Partnership
- Partner with engineering teams to ensure new systems are observable and secure by default
- Help teams instrument services with the telemetry needed for effective detection and response
- Drive security improvements that make the platform easier to defend over time
YOU MAY BE A FIT IF:
- You have experience in detection engineering, incident response, security engineering, or software engineering with a strong security focus
- You have strong software engineering skills and experience building production systems.
- You’ve investigated security incidents in cloud-native or distributed environments
- You’re familiar with modern cloud infrastructure, Kubernetes, Linux, and networking
- You’ve built detections using logs, telemetry, behavioral signals, or large-scale event data.
- You have strong SQL skills for investigating security events and developing detections
- You’re interested in applying AI and LLMs to detection, investigation, and response, and in understanding emerging threats involving AI-powered systems
- You have strong written and verbal communication skills
NICE-TO-HAVE:
- Experience building AI- or LLM-powered security tooling
- Experience with SIEM, SOAR, or EDR platforms
- Experience with Kubernetes security or large-scale cloud infrastructure
- Experience with threat hunting, malware analysis, or digital forensics
- Experience contributing to security operations in a high-growth engineering organization
Location: United Kingdom
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
Reports to: Manager, Security Operations Center
Location: Remote UK
Compensation Range: £62,000 to £70,500 base plus bonus and equity
What You’ll Do:
Huntress is looking for a Security Operations Center Analyst to add to our growing team. In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyber-attacks and will have daily opportunities to progress your analyst skillset and accelerate your career growth.
The Huntress Security Operations Center is an elite team of individuals who wake up every day to combat threat actors. You will have daily opportunities to progress your analysis skills while being at the forefront of what’s happening in the wild. If you’re looking to accelerate your career and skills, this is the team for you!
Responsibilities:
Triage, investigate, and respond to alerts from the Huntress platform
Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks where possible and provide remediations needed to remove the threat
Perform tactical malware analysis as part of investigating and triaging alerts
Investigate suspicious Microsoft M365 activity and provide remediations
Assist in escalations from the Product Support team for threat-related and SOC-relevant questions
Contribute to detection engineering creation and tuning efforts
Contribute to projects focused on driving better outcomes for our analysts and partners
Contribute to our collaboratively mentored team (we're all here to make each other better!)
What You Bring To The Team:
2+ years experience in a SOC or Digital Forensics (DFIR) role
Demonstrated experience with Windows, Linux, and MacOS as an attack surface
Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs)
Demonstrated experience with static and dynamic malware analysis concepts
Working knowledge of Windows Administration or Enterprise Domain Administration
Active Directory, Group Policy, Domain Trusts, etc.
Working knowledge of core networking concepts
Common ports/protocols, NAT, Public/Private IPs, VLANs, etc.
Working knowledge of web technologies and concepts
Web servers/applications, OWASP top 10, etc.
Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments
Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes
A strong sense of curiosity and a genuine excitement for learning
Preferred Qualifications:
Previous experience in an MSP/MSSP/MDR role
Linux and MacOS investigative experience
Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby)
Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc.
Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc.
Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc.
Familiarity with MSP tools such as RMMs
What We Offer:
100% remote work environment - since our founding in 2015
New starter home office set-up allowance (€480)
Generous personal leave entitlements
Digital monthly reimbursement (€111)
Travel to the US 1-2 times/year for various company events
Pension
Access to the BetterUp platform for coaching, personal, and professional growth
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to
accommodations@huntresslabs.com
. Please note that non-accommodation requests to this inbox will not receive a response.
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our
Candidate Privacy Notice
for more details on our practices and your data privacy rights.
#BI-Remote
Location: Ireland
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
Reports to: Manager, Security Operations Center
Location: Remote Ireland
Compensation Range: €70,000 to €90,000 base plus bonus and equity
What You’ll Do:
Huntress is looking for a Security Operations Center Analyst to add to our growing team. In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyber-attacks and will have daily opportunities to progress your analyst skillset and accelerate your career growth.
The Huntress Security Operations Center is an elite team of individuals who wake up every day to combat threat actors. You will have daily opportunities to progress your analysis skills while being at the forefront of what’s happening in the wild. If you’re looking to accelerate your career and skills, this is the team for you!
Responsibilities:
Triage, investigate, and respond to alerts from the Huntress platform
Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks where possible and provide remediations needed to remove the threat
Perform tactical malware analysis as part of investigating and triaging alerts
Investigate suspicious Microsoft M365 activity and provide remediations
Assist in escalations from the Product Support team for threat-related and SOC-relevant questions
Contribute to detection engineering creation and tuning efforts
Contribute to projects focused on driving better outcomes for our analysts and partners
Contribute to our collaboratively mentored team (we're all here to make each other better!)
What You Bring To The Team:
2+ years experience in a SOC or Digital Forensics (DFIR) role
Demonstrated experience with Windows, Linux, and MacOS as an attack surface
Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs)
Demonstrated experience with static and dynamic malware analysis concepts
Working knowledge of Windows Administration or Enterprise Domain Administration
Active Directory, Group Policy, Domain Trusts, etc.
Working knowledge of core networking concepts
Common ports/protocols, NAT, Public/Private IPs, VLANs, etc.
Working knowledge of web technologies and concepts
Web servers/applications, OWASP top 10, etc.
Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments
Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes
A strong sense of curiosity and a genuine excitement for learning
Preferred Qualifications:
Previous experience in an MSP/MSSP/MDR role
Linux and MacOS investigative experience
Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby)
Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc.
Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc.
Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc.
Familiarity with MSP tools such as RMMs
What We Offer:
100% remote work environment - since our founding in 2015
New starter home office set up reimbursement (£398)
Generous personal leave entitlements
Digital monthly reimbursement (£92)
Travel to the US 1-2 times/year for various company events
Pension
Access to the BetterUp platform for coaching, personal, and professional growth
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to
accommodations@huntresslabs.com
. Please note that non-accommodation requests to this inbox will not receive a response.
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our
Candidate Privacy Notice
for more details on our practices and your data privacy rights.
#BI-Remote
Location: Remote - USA
Workplace: Remote
The R&D team at Chainalysis is inspired by solving the hardest technical challenges and building products that establish trust in cryptocurrencies. We're a global organization that thrives on challenging work and doing it alongside exceptionally talented teammates. Our industry evolves rapidly, and our mission is to build a flexible, AI-driven platform that automates entity resolution, optimizes data labeling pipelines, and creates predictive models that identify illicit patterns before they escalate.
Our data and solutions have been used to solve some of the world's most high-profile criminal cases and grow consumer access to cryptocurrency safely. Now, by pairing the industry's most trusted blockchain data with agents that reason, investigate, and act, we help our customers scale their workflows as the cryptocurrency economy becomes increasingly mainstream.
Chainalysis data has helped solve some of the world’s highest-profile criminal and national-security cases and made it safer for people everywhere to access crypto. The Global Intelligence Team produces the attribution at the heart of that data — connecting on-chain activity to the real-world entities behind it, across the global crypto ecosystem. It’s the intelligence data moat beneath every Chainalysis product, and what investigators, sanctions authorities, and national-security agencies rely on to follow the money and disrupt threats.
Few threats test that mission harder than North Korea and China. Through Lazarus Group, the DPRK has stolen billions in crypto — via exchange and DeFi hacks and IT-worker schemes — to fund its weapons program, then laundered it through mixers, cross-chain bridges, and Chinese OTC networks. China, in turn, sits at the center of global crypto money laundering — from guarantee marketplaces and underground banking to scam compounds, fentanyl vendors, and cartel-linked laundering. The two are deeply intertwined, and making that activity visible on-chain is one of the most consequential problems in crypto intelligence today.
As our DPRK- and China-focused intelligence analyst — the team’s subject-matter expert on North Korea and China — you’ll own that problem end to end. This is a depth role: while our analysts cover the breadth of the crypto-services ecosystem, you’ll go deep on a single, high-stakes domain — becoming the person, inside Chainalysis and increasingly across the industry, who understands how DPRK and Chinese actors use crypto and can prove it on-chain. You’ll own the attribution for their crypto footprint, map how these networks actually operate, turn that into finished intelligence customers act on, and be the expert voice representing Chainalysis on DPRK and China crypto threats.
Who you’ll work with
You’ll join a fast-moving, globally distributed team — analysts, threat-domain SMEs, data scientists, and engineers — collaborating across time zones, async and in real time. We move fast, hold each other to a high bar, and back each other up across regions. As the DPRK & China SME, you’ll be the single point of depth for the domain and a force multiplier for everyone working adjacent to it.
In this role, you’ll:
- Own DPRK & China attribution end to end — the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Lazarus Group and DPRK state-sponsored theft and laundering, DPRK IT-worker networks, Chinese-language OTC and underground-banking networks, guarantee marketplaces (e.g., Huione-style platforms), scam-compound and pig-butchering laundering infrastructure, fentanyl and precursor vendors, and Chinese money-laundering organizations.
- Lead the attribution response to DPRK- and China-related sanctions events — when OFAC or allied authorities designate DPRK actors, exchange-hacking units, or Chinese laundering networks, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock.
- Map the networks on-chain — trace how stolen and illicit funds move through mixers, cross-chain bridges, no-KYC swaps, OTC brokers, and off-ramps, following DPRK hack proceeds into and through Chinese laundering infrastructure, and keep that picture current as they adapt to pressure.
- Produce finished intelligence — advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make DPRK theft/laundering and Chinese money laundering legible and actionable.
- Be the named external expert — represent Chainalysis on DPRK and China crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners.
- Help set the DPRK & China collection agenda — surface what data we need on these networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team’s apparatus and prioritization, not you alone.
- Translate typologies into detection — turn what you learn about DPRK and Chinese methods into guidance that our products and our customers can operationalize.
- Build with AI — design and tune the automation that scales your analysis and the team’s, and handle the hard cases automation can’t.
- Level up the team — raise the bar on DPRK, China, and money-laundering tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering.
We’re looking for candidates who have:
- Deep, demonstrable DPRK and/or China expertise — real command of DPRK state-sponsored crypto operations (Lazarus Group, exchange and bridge hacks, IT-worker schemes) and/or Chinese-language money laundering, OTC and underground banking, guarantee marketplaces, and organized-crime finance. This is the core of the role, and we’ll expect you to show it.
- On-chain tracing ability against DPRK/China targets — direct experience following DPRK hack laundering or Chinese OTC/laundering networks on-chain, or deep DPRK/China threat-finance expertise paired with proven blockchain-tracing skill you can bring to bear here from day one.
- A national-security or threat-finance background — intelligence, sanctions, counter-threat-finance, or investigations, from the IC, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector CTF/sanctions work.
- Regional fluency — a strong grasp of the DPRK and Chinese illicit-finance ecosystems and regional money-laundering flows. Mandarin and/or Korean language ability is a significant plus.
- Elite potential and a proven track record — exceptional aptitude, judgment, and work ethic; you’ve led hard problems end to end and you raise everyone around you.
- Excellent writing and communication — this is an outward-facing expert role; your intelligence has to land with analysts, customers, and senior audiences alike.
- AI-forward instincts — you build automation to scale your work and others’, not just use it.
- Comfort working with data; blockchain forensics experience strongly preferred.
- 5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire; 8+ years and recognized domain authority for a Staff hire.
You might also have:
- Mandarin and/or Korean language ability.
- Direct experience with OFAC sanctions, designations, or the designation process — especially involving DPRK or Chinese entities.
- A record of published research or public speaking on DPRK crypto theft, Lazarus Group, or Chinese money laundering.
- Familiarity with cross-chain bridge and mixer laundering, guarantee marketplaces (e.g., Huione-style platforms), or Chinese OTC and underground-banking networks.
AI at Chainalysis
AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.
AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before.
About Chainalysis
Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation.
You belong here.
At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture.
We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here https://go.chainalysis.com/rs/503-FAP-074/images/Interview%20Accommodations%20Request.pdf. We can’t wait to meet you.
Location: Singapore
Workplace: remote
About the Company
CertiK leads blockchain security by securing smart contracts and blockchains with cutting-edge Formal Verification technology. Founded by Computer Science professors of Yale University and Columbia University, CertiK has audited and secured over $500B in assets, including many of the world’s top blockchain projects.
About This Role
Singapore is where the institutional future of digital assets is being built.
As Business Development Manager for Singapore, you drive the commercial relationship with the institutions that need it — exchanges and DPT licensees, banks and financial institutions moving into tokenisation, protocols and Web3 native teams, and the funds and infrastructure providers around them. You will run the full cycle: build the pipeline, get in front of decision-makers, understand their security and compliance problem, and close.
You will work alongside a capital markets and policy team and a technical organisation whose auditors, forensics, and on-chain surveillance work sets the benchmark for the industry.
About You
You are a builder of relationships and a closer of deals, and you are comfortable doing both in a market where the buyer is sophisticated and the sale is technical. You can hold a conversation with a CTO about smart contract risk and, an hour later, hold one with a Chief Compliance Officer about transaction monitoring and licensing obligations — and be taken seriously in both. You are self-directed about pipeline: you find the opportunity rather than waiting for it to be routed to you.
Critically, you understand that in this market a regulatory shift is a commercial event, and you know how to move first when one lands.
Responsibilities
Pipeline generation
and prospecting.
Build and own the Singapore pipeline through outbound, inbound qualification, referrals, ecosystem relationships, and event presence — identifying and prioritising the accounts that matter across exchanges, financial institutions, VASPs, protocols, and infrastructure providers.
Full-cycle deal execution.
Run opportunities end to end: discovery, scoping with technical teams, proposal and commercial structuring, negotiation, and close.
Solution positioning.
Develop the depth to position CertiK’s portfolio credibly — audits and formal verification, penetration testing, on-chain surveillance and AML/compliance tooling, and incident response — and to map them to a specific client’s risk, regulatory, and commercial pressures.
Account management
and expansion.
Own relationships post-sale, drive renewals and expansion, and act as the client’s primary commercial point of contact.
Partnerships
and ecosystem.
Develop channel and referral relationships with law firms, consultancies, custodians, infrastructure providers, and industry associations that extend CertiK’s reach into the market.
Market intelligence
and feedback.
Track the competitive and pricing landscape, capture what you learn in the field, and feed it back into pricing, product, and go-to-market decisions.
Cross-functional coordination.
Work with policy, product, engineering, and marketing to build the proposals, materials, and campaigns that win business — and with the regional leadership team on territory strategy and forecasting.
Reporting
and CRM discipline.
Maintain accurate pipeline data, forecasts, and activity records; report against clear quarterly targets.
Ad hoc requests
Requirements
Bachelor’s degree in business, finance, economics, computer science, or a related field.
Minimum of 4 years of B2B business development, enterprise sales, or account management experience, with a demonstrable record of meeting or exceeding revenue targets. Prior experience at a Web3 security, blockchain analytics, RegTech, or cybersecurity vendor is a plus.
Solid working knowledge of smart contract security, on-chain analytics, AML/CFT, or virtual asset compliance concepts. Understanding of the digital asset and blockchain landscape, and of the security and compliance problems institutions in this market face.
Established network in the Singapore or wider Southeast Asian digital asset, fintech, or financial services ecosystem.
Excellent written and verbal English, and the ability to present with confidence to senior and technical audiences. Proficiency in another Asian language is a plus.
Strong commercial instincts.
Highly organized, self-directed, and able to run multiple opportunities and deadlines with limited supervision. Comfortable operating in a fast-paced environment.
Existing right to work in Singapore, or eligibility to obtain one.
Location: Boston, MA
Workplace: OnSite
At WHOOP, we're on a mission to unlock and inspire performance for life.
We are seeking a Incident Response Lead to drive security incident response across the enterprise. In this role, you will serve as the primary internal escalation point and hands-on responder for security incidents, partnering closely with WHOOP’s 24x7 SOC provider and cross-functional stakeholders to investigate, contain, and remediate threats.
This is a highly technical individual contributor role with significant ownership and visibility across Security, IT, GRC, and Legal.
RESPONSIBILITIES:
- Lead hands-on incident response activities, serving as the primary internal escalation point for security events
- Serve as the central incident commander across Security, IT, GRC, and Legal during active incidents
- Partner with the SOC to validate alerts, guide investigations, and drive containment and eradication efforts
- Conduct host, cloud, and log-based investigations, and coordinate with external forensic firms when needed
- Maintain and continuously improve incident response playbooks, escalation procedures, and communication workflows
- Lead post-incident reviews and root cause analysis, ensuring remediation actions are clearly defined and tracked
- Develop and execute tabletop exercises and incident simulations to test and strengthen response readiness
- Partner with GRC and Legal to support breach impact assessments and regulatory notification processes
- Drive continuous improvement of detection and response capabilities across SIEM, EDR, cloud monitoring, and identity systems
- Own incident metrics and reporting, including response times, trends, and systemic risk reduction initiatives
- Participate in an on-call escalation rotation to provide after-hours incident leadership when required
QUALIFICATIONS:
- 7+ years of experience in incident response, digital forensics, threat detection, or SOC operations
- Proven experience leading incident investigations in complex, cloud-native environments
- Strong experience conducting host, cloud, and log-based investigations
- Hands-on expertise with SIEM platforms, EDR tools, and cloud security monitoring
- Experience working with external SOC or MDR providers
- Strong understanding of attack frameworks (MITRE ATT&CK) and their application to detection and response
- Experience supporting breach response obligations under GDPR, HIPAA, PCI, or similar regulatory frameworks
- Excellent communication skills with the ability to coordinate cross-functional stakeholders under pressure
- Bachelor’s degree or relevant certifications (GCIH, GCFA, CISSP, or equivalent)
This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility
The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.
At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success.
The U.S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.
In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.
These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.
Location: UK, London
Workplace: OnSite
Here at Humanoid, we believe in a future where robots amplify human potential. That’s why we’ve set out on a mission to build the world’s most capable, commercially-scalable, and safe humanoid robots. We’re bringing that mission to life with HMND‑01 - our rapidly developed humanoid platform being deployed in real industrial environments - and we’re growing the team to take it even further.
ABOUT THE ROLE
We are looking for a Senior In-House Repair Technician the deepest hands-on repair capability in our Services Repair Centre. You will perform complex repair, rework, and full overhaul/restore on parts, sub-systems, and full robots, and deliver approved upgrades to existing units. You will also be our forensic-analysis specialist, determining root cause and supporting warranty decisions in both directions.
This is a senior, hands-on role. You will act as a “flying doctor” at customer sites for the most difficult interventions, help author the work instructions the rest of the team follows, and mentor Associate and Advanced technicians.
WHAT YOU’LL DO:
- Perform complex repair, rework, and full overhaul/restore on parts (SRUs), sub-systems, and full robots.
- Deliver approved upgrades to existing robots and parts.
- Lead physical troubleshooting and forensic analysis when Remote Services cannot localise a fault, determining root cause and supporting warranty determination (supplier claims, proof a fault was not caused by Humanoid…).
- Act as a flying doctor at customer sites for the most difficult on-site interventions.
- Partner with Product Services Engineering and the Training team to author clear, low-skill work instructions.
- Mentor Associate and Advanced technicians and contribute to the skills matrix and the unified career path across In-House, Remote, and Field roles.
- Own refurbishment throughput and quality for the most complex part families, and certify work to specification.
WE’RE LOOKING FOR:
- Mechanical/electrical technician training plus ~5+ years of hands-on repair experience, with deep specialisation.
- Proven ability to overhaul and restore complex electromechanical systems and full robots to specification.
- Strong forensic troubleshooting skills — you find root cause and can defend a warranty determination with evidence.
- Ability to author work instructions and mentor other technicians.
- Rigorous quality, certification, 5S and health-and-safety discipline.
- Willingness to travel for on-site interventions.
NICE TO HAVE:
- Experience with humanoid, legged, or advanced robotics hardware.
- Familiarity with calibration, metrology, and test/certification requirements for precision mechatronics.
- Exposure to failure-analysis methods and supplier-quality / warranty processes.
- Experience setting up or scaling a repair or refurbishment operation.
WHAT WE OFFER
- Competitive equity: stock options with meaningful upside as we scale.
- 30+ days off, including 23 days annual leave, all UK bank holidays, and additional company closure days (including Christmas–New Year shutdown).
- Private healthcare, including virtual and in-person care.
- Pension scheme with 8% total contribution (5% employee, 3% employer) on full earnings.
- Free daily breakfast, catered lunch, and snacks in-office.
- Work at the frontier - collaborate daily with world-class engineers, researchers, and product experts building the next generation of AI and humanoid robotics.
- Real ownership - direct access to founding leadership, meaningful input on product direction, and the ability to drive key initiatives from day one.
Location: Remote - United Kingdom
Who we are
At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to
hundreds of thousands of businesses
and empower millions of developers worldwide to craft personalized customer experiences.
Our dedication to
remote-first work
, and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.
.
Hiring and how we work
We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!
Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings.
.
See yourself at Twilio
Join the team as Twilio’s next
Security Engineer, Incident Response
About the job
The Security Incident Response Team (SIRT) is looking for a Security Engineer who is passionate about solving Twilio’s mission of security and reliability by working across the organization to lead the technical response to security events and incidents across Twilio’s global infrastructure, services and applications by effectively conducting triage, containment, remediation and driving post-incident betterments. You will work within a team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions.
You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program.
Responsibilities
In this role, you’ll:
Lead and support the response to all security events and incidents across Twilio’s complex global infrastructure, services and applications.
Be responsible for documentation of incidents and projects you work on and craft best practices as runbooks and standard operating procedures to share knowledge across teams.
Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity.
Work to improve Twilio’s security and reliability posture by driving identified betterments from security events and incidents.
Rapidly acquire new technical skills and knowledge in a fast-paced, highly disruptive industry environment.
Own the security incident lifecycle, respond to incidents and participate in on-call rotation and participate in RCAs for security incidents.
Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work.
Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale.
Qualifications
Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!
Required:
Proven experience: 3+ years of security incident response in a production-cloud environment
Subject-matter expert on security issues and technologies
Ability to utilize AI for comprehensive, complex security incident response activities delivering high fidelity detections
Advanced knowledge of service-oriented architectures, as well as experience with security tools and technologies fit for a cloud environment
Experience working across a technology stack on difficult security challenges and initiatives
Experience with SIEM platforms and the ability to extend their functionality
Experience with SOAR tools and automating manual security processes
Experience in either AWS, GCP, or other large cloud platform
Excellent written and verbal communication skills
Ability to influence and build effective working relationships with every level of the organization.
Desired:
AI Model Security & Posture Management: Support Implementation of controls and safeguards to prevent AI vulnerabilities, such as prompt injections, model evasion, and data poisoning
AI-Driven Threat Response: Utilize GenAI and LLM-based security use cases to rapidly interpret alerts, reduce false positives, and contextualize threat data
Artifact & Evidence Triage: Collects intrusion artifacts and forensically sound images to analyze malware, trojans, and source code.
Threat Intelligence Integration: Monitors external vendor data and threat intelligence to analyze trends and proactively defend against emerging risks.
Location
This role will be remote, and based in Ireland or U.K.
Travel
We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.
What We Offer
Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.
Twilio thinks big. Do you?
We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call
Twilio Magic
. Additionally, we empower employees to build
positive change in their communities
by supporting their volunteering and donation efforts.
So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for,
please consider other open positions.
.
Stay alert to recruitment fraud
We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @
twilio.com
email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps.
.
Twilio is proud to be an equal opportunity employer.
We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.
Location: United States, San Mateo, CA
Why Sony Interactive Entertainment?
Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity.
Senior Software Engineer – Logging, Diagnostics & Post-Release Incident Analysis
Overview
The PlayStation Portal Platform team is seeking a Senior Software Engineer to lead the design, development, and operation of Logging and Diagnostics infrastructure that enables rapid detection, investigation, and resolution of Performance, Stability, and Platform Quality issues occurring after products are released to customers.
In this role, you will be responsible for building scalable Logging Architecture, Crash Diagnostics, and Incident Analysis Frameworks that empower engineering teams to perform efficient root cause analysis of field issues. You will collaborate closely with Engineering, Quality Engineering (QE), Customer Support, Security, and Product teams to reduce the time from issue detection to root cause identification and drive continuous improvements in product quality and reliability.
We are looking for engineers who are passionate about quality, thrive on solving complex system-level problems, and take strong ownership in delivering exceptional user experiences through continuous improvement.
Key Responsibilities
Logging Architecture
Define and drive the overall platform logging strategy.
Design and implement logging frameworks for AOSP-based systems.
Establish log collection, storage, retention, and archival strategies.
Define structured logging standards and best practices.
Design logging mechanisms optimized for field debugging and post-release analysis.
Improve platform observability and telemetry quality.
Diagnostics & Debuggability
Build infrastructure for Crash, ANR, Native Crash, and Kernel Panic analysis.
Define strategies for collecting and analyzing Tombstones, DropBox entries, Bugreports, and diagnostic artifacts.
Develop diagnostic frameworks for system failure analysis and troubleshooting.
Create tools that support issue reproduction and root cause analysis.
Drive initiatives that improve platform debuggability and diagnosability.
Partner with development teams to ensure diagnostic capabilities are built into the platform.
Post-Release Incident Analysis
Investigate and analyze production issues occurring in customer environments.
Identify, classify, and track recurring failure patterns.
Lead incident reviews, postmortems, and corrective action initiatives.
Drive improvements in Mean Time to Detect (MTTD) and Mean Time to Resolution (MTTR).
Provide actionable recommendations to engineering teams for quality improvements.
Monitoring & Alerting
Design and implement log-based monitoring systems.
Develop anomaly detection mechanisms for platform health and stability.
Build automated alerting and escalation frameworks.
Create dashboards and reporting tools for field quality monitoring.
Define and track reliability metrics and operational KPIs.
Security & Compliance
Design and implement secure logging and diagnostics infrastructure.
Ensure protection of PII and sensitive customer information.
Support security incident investigations and forensic analysis.
Define log retention policies and ensure compliance with company and regulatory requirements.
Collaborate with Security teams to implement secure-by-design principles.
Required Qualifications
A genuine passion for delivering high-quality software and exceptional user experiences, with a strong sense of ownership and accountability for product quality.
Experience working in Agile development environments and driving continuous quality improvements through iterative development, data-driven decision making, and customer feedback.
Bachelor's or Master's degree in Computer Science or a related field, or equivalent practical experience.
5+ years of experience in Android native development with strong expertise in Java/Kotlin and Android Studio.
Experience developing Android/AOSP system software.
Experience designing and implementing Logging, Diagnostics, or Observability systems.
Strong experience with crash analysis, production debugging, and root cause investigation.
Experience debugging Linux Kernel or low-level system software issues.
Strong programming skills in C/C++, Java, and/or Kotlin.
Experience analyzing large-scale production incidents and system failures.
Proven track record of conducting Root Cause Analysis (RCA) and driving corrective actions.
Strong understanding of software architecture, operating systems, and system software fundamentals.
Excellent analytical, problem-solving, communication, and collaboration skills.
Preferred Qualifications
Experience developing Android Framework components.
Experience with Kernel Logging, Tracing, and low-level diagnostics.
Hands-on experience with Perfetto, Systrace, ftrace, or similar profiling and tracing tools.
Experience building or operating Crash Analytics platforms.
Experience with Security Incident Response and forensic investigations.
Experience developing Consumer Electronics products.
Site Reliability Engineering (SRE) experience.
Experience with modern JavaScript frameworks such as React, React Native, Angular, or similar technologies for building responsive user interfaces and dynamic applications.
Experience designing telemetry, observability, monitoring, or analytics platforms.
Familiarity with cloud-native logging and analytics solutions.
Experience developing developer tools, debugging tools, or operational dashboards.
What We're Looking For
Passion for quality, reliability, and operational excellence.
Strong ownership and accountability for outcomes.
Customer-focused mindset with a commitment to exceptional user experiences.
Ability to investigate complex system-level issues and identify root causes.
Strong collaboration skills across cross-functional teams.
Continuous improvement mindset and commitment to engineering excellence.
Impact
Your work will directly influence the quality, reliability, and supportability of PlayStation Portal products used by millions of players worldwide.
By building world-class logging, diagnostics, monitoring, and incident analysis capabilities, you will enable engineering teams to detect issues faster, resolve them more efficiently, and continuously improve the customer experience.
At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location.
Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location.
In addition, this role
is eligible
for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products.
This role also may be eligible for a bonus package.
Click
here
to learn more.
The estimated base pay range for this role is listed below.
$193,300
—
$289,900 USD
Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks.
Please refer to our
Candidate Privacy Notice
for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights.
Equal Opportunity Statement:
Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category.
We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.
Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.
Location: Remote US
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.
Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
Reports to: Manager, Security Operations Center
Location: Remote, US (West Coast)
Compensation Range: $100,000-$125,000 base plus bonus and equity.
This role may be eligible for on-call/call-in pay in addition to base pay
*The initial training period for this position will be Monday-Friday. Following training, the work schedule is subject to change and may include weekend or a 4x10 shift, depending on business requirements*
What You’ll Do:
Huntress is looking for a Security Operations Center Analyst to add to our growing team. In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyberattacks and will have daily opportunities to progress your analyst skillset and accelerate your career growth.
The Huntress Security Operations Center is an elite team of individuals who wake up every day to combat threat actors. You will have daily opportunities to progress your analysis skills while being at the forefront of what’s happening in the wild. If you’re looking to accelerate your career and skills, this is the team for you!
Responsibilities:
Triage, investigate, and respond to alerts coming in from the Huntress platform.
Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks, where possible, and provide remediations needed to remove the threat.
Perform tactical malware analysis as part of investigating and triaging alerts.
Investigate suspicious Microsoft M365 activity and provide remediations.
Assist in escalations from the Product Support team for threat-related and SOC-relevant questions.
Contribute to detection engineering creation and tuning efforts.
Contribute to projects focused on driving better outcomes for our analysts and partners
Contribute to our collaboratively mentored team (we're all here to make each other better!).
What You Bring To The Team:
4+ years of experience in a SOC or Digital Forensics (DFIR) role
Demonstrated experience with Windows, Linux, and MacOS as an attack surface
Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs)
Demonstrated experience with static and dynamic malware analysis concepts
Working knowledge of Windows Administration or Enterprise Domain Administration
Active Directory, Group Policy, Domain Trusts, etc.
Working knowledge of core networking concepts
Common ports/protocols, NAT, Public/Private IPs, VLANs, etc.
Working knowledge of web technologies and concepts
Web servers/applications, OWASP top 10, etc.
Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments
Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes
A strong sense of curiosity and a genuine excitement for learning
Preferred Qualifications:
Previous experience in an MSP/MSSP/MDR role
Linux and MacOS investigative experience
Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby)
Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc.
Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc.
Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc.
Familiarity with MSP tools such as RMMs
What We Offer:
100% remote work environment - since our founding in 2015
Generous paid time off policy, including vacation, sick time, and paid holidays
12 weeks of paid parental leave
Highly competitive and comprehensive medical, dental, and vision benefits plans
401(k) with a 5% contribution regardless of employee contribution
Life and Disability insurance plans
Stock options for
all
full-time employees
One-time $500 reimbursement for building/upgrading home office
Annual allowance for education and professional development assistance
$75 USD/month digital reimbursement
Access to the BetterUp platform for coaching, personal, and professional growth
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to
accommodations@huntresslabs.com
. Please note that non-accommodation requests to this inbox will not receive a response.
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our
Candidate Privacy Notice
for more details on our practices and your data privacy rights.
#BI-Remote
Location: Hamburg
Workplace: Hybrid
adjoe https://adjoe.io/ is a leading mobile ad platform developing cutting-edge advertising and monetization solutions that take its’ app partners’ business to the next level. Part of the applike group https://applike-group.com/ ecosystem, adjoe is home to an advanced tech stack https://adjoe.io/company/adtech-stack/, powerful financial backing from Bertelsmann, and a highly motivated workforce to be reckoned with.
Meet Your Team: Fraud Operations
Our Fraud Operations team tackles one of adtech's biggest challenges: fraud. As a specialized operational force within Anti-Fraud, we actively investigate, reproduce, and mitigate abuse to prevent fraud from impacting our partners' business.
At the core of our day-to-day work is rapid exploit analysis and telemetry forensics across Android and iOS platforms, dissecting device manipulation, hooking frameworks, and emulator-driven abuse. Partnering closely with core SDK and Backend teams, we query billions of daily events across our distributed data stores (Trino, ScyllaDB, DynamoDB) to isolate suspicious traffic anomalies in real time, translate complex attack vectors into actionable detection heuristics, and deploy pragmatic mitigations directly across our Go-based services. This means working hands-on with cutting-edge tech and adversarial forensics to continuously outsmart even the most creative tactics.
Your Mission & Who We Are Looking For:
- AdTech & Anti-Cheat Domain Expertise: You understand the mechanics of digital advertising (attribution, publisher monetization, traffic quality) or bring experience from adjacent anti-abuse environments like gaming anti-cheat. You will act as the escalation point for BI, Product, and Support, translating complex abuse patterns into concrete technical solutions.
- Reverse Engineering & Exploit Analysis: You have an adversarial security mindset. While our core SDK team develops production client libraries, you understand iOS and Android internals well enough to decompile binaries, understand and use hooking of APIs and work with frameworks to root/jailbreak devices (e.g., Magisk, Xposed, KernelSU, Dopamine), and reproduce emulator- or bot-driven exploits in a sandbox environment to find the root cause.
- Large-Scale Telemetry & Data Forensics: You can query and analyze billions of daily events across distributed databases (Trino SQL, DynamoDB, ScyllaDB). Using data analysis tools and LLM-assisted workflows, you quickly isolate anomalous clusters, model suspicious traffic patterns, and turn raw telemetry into actionable detection heuristics.
- Distributed Systems Observability & Profiling: You are comfortable working with high-throughput event pipelines. Leveraging Grafana, Kibana, and distributed tracing, you monitor system health, diagnose bottlenecks across Kafka and SQS queues, and verify that detection APIs maintain low-latency response times under heavy load.
- Technical Leadership & Team Enablement: You will serve as the technical lead for our new Fraud Operations unit within the Anti-Fraud Solutions team. Partnering with the Product Lead, you will drive technical strategy, conduct meaningful code and architecture reviews, and mentor engineers. We value clear communication and pragmatic decision-making over years of formal management hierarchy.
- Pragmatic Engineering & Rapid Mitigation: You are a hands-on engineer who can read, debug, and review Go microservices without needing to be a Go purist. Working alongside Backend, Mobile, and Data Science teams, you will prototype detection logic, deploy verified mitigation rules, and automate responses to emerging attack vectors.
🌎 We welcome applications from talent worldwide and provide relocation support to Hamburg, Germany for those ready to join our team.
What’s in It for You?
At adjoe, you’re not here to just close JIRA tickets, you’re helping build the infrastructure behind one of the most impactful platforms in adtech. The systems you work on will reach hundreds of millions of users and power billions of decisions every day.
- Go Big. Own projects with impact on 770M users and push adtech boundaries.
- Move Fast. Ship solutions multiple times a day, learn from results, and keep momentum.
- Be Direct. Solve problems openly and collaborate across teams.
- Thrive Together. Grow with a diverse, global team of people from over 40 different countries that learn from each other.
- Have Fun. Celebrate wins, enjoy daily victories, and bring your energy.
We welcome applications from people who will contribute to the diversity of our company.
Location: Riyadh, Saudi Arabia
As a Senior Email Security Engineer at Müller's Solutions, you will be responsible for designing, implementing, and managing email security solutions to protect the organization's email systems from cyber threats such as phishing, spam, malware, and data leakage. You will lead initiatives to strengthen email security posture, conduct threat analysis, and collaborate with IT teams to ensure secure and reliable email communication.
Key Responsibilities:
Own
enterprise email security gateways
in production environments
Design, tune, and operate:
Anti‑phishing, anti‑spoofing, and malware controls
Secure mail routing, TLS enforcement, and quarantine workflows
Lead incident response for email‑borne threats (BEC, malware, zero‑day phishing)
Integrate email security with
M365 Defender / SIEM / SOAR / DLP
Produce
audit‑ready evidence
aligned to SAMA / NCA frameworks
Mentor L1/L2 analysts and document operational runbooks
Design, deploy, and maintain email security solutions including anti-phishing, anti-spam, email encryption, and data loss prevention technologies.
Monitor and analyze email security incidents, respond to threats, and conduct investigations to mitigate risk.
Implement and manage email security protocols such as SPF, DKIM, DMARC to enhance email authentication and trustworthiness.
Collaborate with other IT and security teams to integrate email security with overall cybersecurity strategy.
Develop and enforce email security policies, procedures, and best practices.
Conduct regular security assessments and vulnerability testing on email systems.
Stay current on emerging email threats and advanced attack techniques to proactively recommend improvements.
Provide training and awareness sessions regarding email security to employees and stakeholders.
Requirements
Requirements:
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
FireEye EX / Trellix Email SecurityCisco Secure Email Gateway (ESA / IronPort)Trend Micro ScanMailProofpoint or Mimecast
Microsoft Defender for Office 365 & EOP
Exchange Online mail flow & hybrid email routing
DMARC, DKIM, SPF enforcement & troubleshooting
Email threat hunting & forensic analysis5+ years of experience in email security or related cybersecurity roles.
Strong knowledge of email security technologies such as Microsoft Defender for Office 365, Proofpoint, Mimecast, or similar platforms.
Proficiency in implementing and managing SPF, DKIM, and DMARC protocols.
Experience with email encryption standards and data loss prevention (DLP) solutions.
Demonstrated ability to analyze and respond to email-based threats such as phishing and malware.
Familiarity with incident response procedures and security information and event management (SIEM) tools.
Excellent problem-solving skills with strong attention to detail.
Strong communication skills to educate and collaborate with technical and non-technical teams.
Preferred Qualifications:
Relevant certifications such as Certified Email Security Specialist (CESS), CISSP, or CISM.
Experience with scripting and automation for email security processes.
Knowledge of compliance standards related to email security and data privacy (e.g., GDPR, HIPAA).
Experience in a managed security service provider (MSSP) environment is a plus.
Strong advantage
Experience in
regulated Saudi environments
Evidence‑driven operations (audits, compliance, KPIs)
Incident leadership during phishing or BEC events
Benefits
Why Join Us:
Opportunity to work with a talented and passionate team.
Competitive salary and benefits package.
Exciting projects and innovative work environment.
ГибридseniorToronto, Ontario
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
ГибридСША; 💹 401(k) Program with a 4% match (US Only); 🚗 Commuter Benefits (In-Office & US Only); We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds
Denver, Colorado, USA
Doha, Qatar
ОфисNew York; Stockholm; San Francisco
United Kingdom
Ireland
УдалённоseniorRemote - USA; You’ll join a fast-moving, globally distributed team — analysts, threat-domain SMEs, data scientists, and engineers — collaborating across time zones, async and in real time
УдалённоSingapore
ОфисleadBoston, MA
ОфисseniorUK, London
УдалённоRemote - United Kingdom
seniorUnited States, San Mateo, CA
УдалённоRemote US
Гибридlead🌎 We welcome applications from talent worldwide and provide relocation support to Hamburg, Germany for those ready to join our team