Вакансии

Location: London Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. ROLE OVERVIEW As a Junior Application Security Analyst in the Information Security team, you will help secure Checkout.com http://Checkout.com’s software applications throughout the Secure Software Development Lifecycle (SSDLC). You will work closely with developers and product teams to integrate security early in the development process, identify and oversee the remediation of vulnerabilities, and ensure adherence to secure coding practices and application security standards. This role focuses on practical, hands-on security support while also growing your expertise in application security.   KEY RESPONSIBILITIES SSDLC & Secure Coding - Assist in integrating security controls into the SSDLC. - Support the creation and maintenance of secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards). Application Security Testing - Run a Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans. - Conduct API security testing. - Support CI/CD pipelines to keep secure and effective integration. THREAT MODELING & APPLICATION SECURITY ANALYSIS - Participate in threat modeling sessions. - Document identified threats, assess risks and provide mitigation recommendations. - Assist in code and system reviews to analyse security in company’s products. VULNERABILITY MANAGEMENT - Triage and prioritise vulnerabilities from automated scans. - Track, verify and ensure security flaws remediation. - Assist to automate an AppSec pipelines COLLABORATION & AWARENESS - Collaborate with engineering teams to integrate security into product design and improve existing systems. - Help deliver training and awareness on SSDLC best practices and secure coding. - Contribute to security documentations. REQUIRED SKILLS & EXPERIENCE - 1–3 years in application security, secure software development, or related IT/security role. - Understand basic network technologies and protocols (HTTP, TCP/IP, DNS and the OSI model). - Understanding of common software vulnerabilities and their mitigations. - Basic programming experience in a popular language (e.g., Python, JavaScript, Golang). - Understanding of CI/CD pipelines and DevSecOps principles. - Basic understanding of cloud technologies (AWS, GCP or Azure) and GitHub security features. - Strong attention to detail in documentation and assessments. PREFERRED - Familiarity with SAST/DAST/SCA tools and API security testing platforms. - Exposure to cloud-native application security (AWS, Azure, GCP). - Understanding of container security (Docker, Kubernetes). - Experience of participating in Capture The Flag (CTF) competitions. KEY COMPETENCIES - Eager to learn and expand technical skills in application security. - Effective communicator with both technical and non-technical audiences. - Collaborative and proactive problem solver. - Ability to prioritise work. Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Анализ безопасности программного обеспечения, создаваемого не техническими специалистами. Организация процессов безопасной разработки, внедрение инструментов безопасной разработки.

Встраивать и сопровождать процессы SSDLC / DevSecOps в CI/CD. Настраивать и развивать инструменты SAST, DAST, SCA, Secret Detection, снижать количество ложных срабатываний.

Location: Prague, Czechia D-ploy is an IT and Engineering Solutions company with operations throughout the EMEA region including Switzerland, Germany, Czech Republic, Austria, UK, as well as the USA. We pride ourselves on delivering innovative and superior services and solutions to numerous industry-leading clients. By building relationships and trusted partnerships within the IT community, we optimize our customer‘s IT productivity and contribute to the organization’s success and value. We are interested in talking to engaging, flexible, and solution-oriented individuals who are looking to become a part of a dynamically growing and international organization. We are focused on creating value where IT counts, join us! We are looking for an experienced full-stack software and AI engineer to build internal cybersecurity platforms and developer tools. The role combines AI-assisted development, agent harness engineering, application security, Python development, MCP server design, and AWS cloud architecture. You will use coding agents to move rapidly from requirements to working software while remaining accountable for architecture, security, quality, and production outcomes. Fast-paced delivery is expected without compromising reliability or engineering quality. Tasks and Responsibilities Deliver secure, reliable software at a consistently fast pace using Claude Code. Develop Python services, web applications, integrations, and developer tools. Design MCP servers and agent workflows. Build and tune custom AI harnesses for security scanning, including hardcoded secrets, SAST, and SCA. Review AI-generated code and validate agent outputs. Design and operate secure AWS architecture and deployment workflows. Requirements Strong production experience with AI coding agents and harness engineering. Experience designing MCP servers, tools, and agent workflows. A security engineering or application security background is strongly preferred. Professional Python development and automated testing experience. Strong cloud engineering and architecture experience, predominantly on AWS. Strong technical judgment, ownership, and communication skills. Experience building developer-facing CLI tools is an advantage. Fluent English (oral and written) Candidates must declare Criminal record extract not older than three months Benefits Broad range of activities, tasks, and projects Flexible working conditions Minimum 5 weeks of vacation Paid sick days Meal vouchers Vouchers (B-day voucher, wedding, and new born surprise) Contributions to wellness programs (multisport card) Fishing for Friends program – our referral program Refreshments in the D-ploy office Further development and professional advancement Friendly and international working environment Company-sponsored events Competitive salary and various benefits Is IT in your DNA?

Location: US - Headquarters - Maryland - Columbia Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Role: As an AI Security Engineer on Tenable's Information Security team, you will help shape and mature our approach to securing AI both within Tenable's products and across the enterprise. AI introduces a new class of risk at the intersection of application security, cloud risk, and data governance, and you will be on the front lines of defining how we assess, test, and address it. You will apply hands-on AI engineering experience alongside product security and application security skills to design security controls for AI systems, lead assessments, and help engineering teams ship AI features securely. You will establish security standards for responsible AI use, influence decisions across the organization, and build tooling that raises our security posture. This role is ideal for a practitioner who has spent time building or tinkering with AI systems, looking under the hood of model internals, and wants to channel that experience into a security specialty. Your Opportunity: Design, implement, and maintain end-to-end security controls across the AI/ML lifecycle. Assist in the implementation of robust security guardrails, controls, and boundary mechanisms for Large Language Models (LLMs), Small Language Models (SLMs), and open-source models. Continuously monitor the AI landscape for novel vulnerabilities and attack techniques, applying deep engineering experience to proactively defend enterprise AI deployments. Assist in developing security reference architectures for AI deployment patterns, including MCP servers and agentic AI workflows and harnesses. Deploy controls to ensure model integrity, governance, and proper access control across models and feature stores. Build AI-driven tooling to strengthen cybersecurity posture across identity, incident management, vulnerability management, third-party risk, and emerging AI threat vectors. Perform AI safety, security assessments, threat modeling for AI/ML systems, identifying risks such as data poisoning, model evasion, model extraction, adversarial inputs, and integrity attacks. Collaborate with software engineers, and product teams to integrate security best practices into AI development, training, validation, and deployment processes. Create security guidance, documentation, and training for internal engineering and development teams; develop metrics that drive desired security behaviors and outcomes. Assist in researching emerging trends in AI security and contribute to innovative solutions that support Tenable's AI initiatives. What You'll Need: 2 or more years of professional experience in information security or application security, with at least a demonstrated interest on securing AI/ML systems. Bachelor’s Degree in Computer Science, Cybersecurity, Data Science, or a related field preferred. Awareness of AI-specific security threats, including adversarial ML, data poisoning, prompt injection, model inversion, model evasion, and inference attacks. Knowledge of data security principles, including encryption, masking, and tokenization. Knowledge of SSDLC, DevSecOps, and security testing practices, including SAST, DAST, SCA, and threat modeling. Knowledge of application security architecture best practices and patterns, including modern web applications, Docker, and microservices. Ability to work cross-functionally across engineering, product, and business teams. Strong written and verbal communication skills; able to clearly translate complex AI security risks for both technical and non-technical audiences. Strong problem-solving skills, attention to detail, and ability to lead projects with end-to-end ownership. Self-motivated and effective working independently and across distributed teams. And Ideally: Hands-on experience with AI red teaming, adversarial prompt testing, or LLM security assessments. Basic coding experience in Python and/or Go. Experience with frameworks & libraries such as PyTorch, Hugging Face Transformers, TensorFlow or similar. Strong understanding of the ML/AI lifecycle and the security risks associated with each stage. Experience with application security assessment tools (Burp Suite, ZAP, Tenable WAS, etc.) Knowledge of cloud security platforms: AWS, Azure, or GCP including AI/ML-related services. Security certifications: CISSP, CSSLP, SANS GIAC, CEH, or AI-focused security certifications are a plus, but not necessary. #LI-Hybrid #LI-MS1 This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs. US Pay Range $102,500 — $136,500 USD We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Zenus is looking for an Application Security Engineer AppSec to test applications and APIs, identify vulnerabilities, establish secure coding standards, and validate remediation.

Zenus is looking for a Secure Site Reliability Engineer to automate and enforce security controls across CI/CD pipelines, monitor control execution, and maintain audit evidence.

Location: United States (Remote); Canada (Remote) Workplace: Remote ROLE SUMMARY Join our dynamic team as a Staff Application Security Engineer, where you'll play a pivotal role in securing the Temporal development pipeline, product, and customer execution environment. In this position, you'll work closely with software engineering teams and customers to build security deeply into our platform across multiple clouds. You'll also build production ready AI assisted security workflows with the right guardrails. We're looking for individuals who are passionate about enabling engineering teams to build and ship securely, serving as trusted security partners across the organization. WHAT YOU’LL DO - Collaborate with product and engineering teams to integrate security principles into the design and architecture of products. - Lead complex threat modeling and risk assessments to identify vulnerabilities and potential attack vectors across the full product surface. - Drive strategy, influence architecture, and set direction for security across multiple teams or org-wide. - Manage the Secure Development pipeline including code security and 3rd party library supply chain security. - Stay current on emerging standards and guidance (e.g. OWASP Top 10 for LLMs, MCP security specifications) and translate these into actionable internal policy. - Own responsibility disclosed vulnerabilities in both Cloud and Open Source products. - Able to participate in on-call rotation. WHAT YOU’LL BRING - Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience). - 7+ years in application or product security or a related role. - Proven partnership with engineering teams, bringing security expertise to the planning and development process. - Ability to write production-quality code in at least one programming language, with a history of development beyond simple scripting. - Knowledge of encryption, authentication, and secure communication protocols. - Familiarity with tools like SAST, DAST, and penetration testing frameworks. - A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages - Excellent communication and ability to explain complex security concepts to non-technical stakeholders. - Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control. - Demonstrated experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention. NICE TO HAVE - Distributed computing and related vulnerability experience. - Familiarity with Go. - Running a Security Champions program. - Open Source automation or automation projects. - Expertise in other areas of security. - Security conference talks or published research. Temporal Technologies is an Equal Opportunity Employer. Temporal Technologies does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need. We embrace and celebrate differences and diversity. Temporal is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. If you need to request a reasonable accommodation, please let your Recruiter know so we can assist.

Location: Москва Workplace: гибкий Мы разрабатываем крупнейший мессенджер в России, чтобы соединять людей, сервисы и компании. Наша миссия — создавать простые и удобные инструменты коммуникации. Ищем в команду опытного инженера Application Security для поддержки и развития процессов безопасной разработки. Задачи Внедрение и развитие процессов Security SDLC: интеграция проверок безопасности на всех этапах разработки — от проектирования (Security Champions, threat modeling) до запуска в продакшен Пентест и исследования: проведение ручного тестирования безопасности веб-приложений, мобильных приложений и API; участие в программах Bug Bounty Работа со статическим и динамическим анализом кода (SAST/DAST): использование автоматизированных инструментов сканирования, триаж и написание рекомендаций по устранению Код-ревью: проведение экспертного анализа исходного кода на предмет уязвимостей (OWASP Top 10, CWE) Консультирование команд: тесная работа с разработчиками, архитекторами и DevOps-инженерами. Объяснение уязвимостей, помощь в поиске лучших способов их устранения, проведение воркшопов Управление уязвимостями: классификация, приоритизация и контроль устранения найденных уязвимостей Разработка безопасных стандартов: создание и внедрение чек-листов, гайдов и лучших практик (secure coding guidelines) для разработчиков Требования Опыт работы на позиции AppSec Engineer или пентестера веб-приложений от двух лет Глубокое понимание OWASP Top 10, CWE Top 25, принципов построения веб-приложений и типовых уязвимостей Опыт работы с одним или несколькими инструментами SAST, DAST, SCA (Burp Suite, OWASP ZAP и так далее) Умение читать и понимать код на одном из языков программирования, например на Python, Go, Java, Java Script Знание основных протоколов и технологий: HTTP/HTTPS, SSL/TLS, REST API, JSON Web Tokens (JWT) Понимание принципов работы современных CI/CD-систем (GitLab CI, GitHub Actions, Jenkins) Умение понятно объяснять сложные концепции безопасности разработчикам Стремление автоматизировать рутину и постоянно учиться новому Будет плюсом Опыт проведения threat modeling Навыки в области облачной безопасности Знание контейнеризации (Docker, Kubernetes) и принципов DevSecOps Наличие публичных работ (статьи, доклады, выводы CVE) или участие в программах Bug Bounty и конференциях Соответствующие сертификации: OSCP, OSWE, GWEB, CSSLP и другие

Location: Remote - Mexico Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . Job Summary If you like owning problems end to end, making security a default property of everything we build, and working closely with engineering, we want to meet you. Bugcrowd is looking for security engineers who move beyond standard tooling and drive measurable security outcomes our customers can rely on. You will help us shape a culture where security helps others succeed, not just points out problems. Essential Duties and Responsibilities Partner Closely with Engineering : Refine architecture, validate new features, and drive security investment while prioritizing engineering velocity Build Security Paved Roads : Contribute to the secure defaults, libraries, and "paved roads" that systematically eradicate entire classes of vulnerabilities rather than fixing bugs one by one Create Feedback Loops : Tune security tooling such as SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters Be our Best Customer : Ensure our bug bounty program can be a model for other customers. Experiment with new ways to leverage the creativity of the crowd. Provide feedback on new platform features to engineering and product Own Projects End to End : Lead cross-functional product security projects from scoping through delivery, influencing product and engineering roadmaps and clearly communicating risk to both technical and non-technical stakeholders Amplify our Impact : Use code and automation as a lever to scale coverage and eliminate repetitive work. Build systems based on incentives and accountability rather than just bureaucratic process Education, Experience, Knowledge, Skills, and Abilities 3+ years of experience in product security, application security, or secure software development Can review code, automate tasks, and build security tooling in at least one modern programming language (e.g., Python, Go, Ruby, Java) Hands-on experience with core application security practices — threat modeling, secure code review, and automated testing (SAST, DAST, SCA) — and a solid grasp of common vulnerability classes (e.g., OWASP Top 10) Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product. Bachelor's degree in engineering, computer science or relevant field, or equivalent practical experience Bonus Points (Preferred but not required) Previous experience with Bug Bounty or vulnerability disclosure programs A background in building "paved roads" or secure-by-default internal libraries to eliminate entire classes of vulnerabilities Hands-on experience securing cloud-native platforms and Infrastructure as Code (e.g., Terraform, AWS, GCP, Kubernetes, Docker) Experience working within a fast-paced, high-growth security or SaaS company Working Conditions and Physical Requirements The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and / or standing - Must be able to remain in a stationary position 50% of the time Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - remote, work-from-home 100% of the time Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

Location: United States, Remote Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Do you want to help bring PlayStation technology to a worldwide audience? Are you passionate about securing infrastructure that constantly pushes the boundary of the gaming industry? Are you ready to work with innovative technology, forward-thinking engineers, and a passionate security team? If so, join us! The role is a senior-level application security position combining strong technical expertise with leadership, initiative, and collaboration. You will provide strategic mentorship and hands-on support in designing, implementing, and testing secure solutions that strengthen PlayStation products and services. As a technical leader within Product Security, you’ll guide practices and influence multiple teams to embed security throughout the software development lifecycle. Key Responsibilities Lead security initiatives across the SDLC and improve development practices through scalable automation. Conduct and guide threat modeling and security requirements early in design phases. Partner with developers, architects, and product managers to align business goals with security needs. Lead security architecture and code reviews for distributed systems. Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams. Advance the Product Security strategy through multi-functional initiatives and cultural influence. Balance business and security risks through technically grounded, pragmatic recommendations. Translate lessons learned into reusable organizational assets that enhance overall security posture. Mentor engineers and practitioners, promoting secure-by-default thinking and shared accountability. Demonstrate proactive leadership, coordinating teams to deliver measurable security and business impact. Qualifications 7+ years in information security and 3+ years in software development. Bachelor’s degree or equivalent in Computer Science, Information Security, or related field. Effective communication and leadership abilities; capable of influencing technical and non-technical collaborators including management. Dedicated and proactive, finding opportunities and leading initiatives independently. Deep understanding of enterprise and cloud-native architectures and their secure design. Expertise in network and web protocols (TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect) and common attack vectors. Proven expertise in guiding security development and code evaluations and providing actionable, risk-based recommendations. Skilled in multiple programming languages (e.g., Java, C/C++, JavaScript, Python) and mitigating vulnerabilities such as OWASP Top 10. Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines. Familiar with Agile, DevOps, and modern delivery practices. Hands-on experience with cloud technologies (AWS, Azure, GCP, Kubernetes, service mesh, CDN) including secure configuration and identity management. Desired Experience Strong analytical and problem-solving skills with an attacker perspective — able to anticipate and simulate real-world attacks. Experience in penetration testing, automated testing, or testing frameworks (JUnit, pytest, REST Assured, Playwright). Security certifications preferred (GIAC, OSCP, CEH, CISSP, CCSP, or equivalent). At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. This is a flexible role that can be remote, with varying pay ranges based on geographic location. For example, if you are based out of Seattle, the estimated base pay range for this role is listed below. $177,300 — $265,900 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice (where applicable) for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: Remote - India Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . Job Summary If you like owning problems end to end, making security a default property of everything we build, and working closely with engineering, we want to meet you. Bugcrowd is looking for security engineers who move beyond standard tooling and drive measurable security outcomes our customers can rely on. You will help us shape a culture where security helps others succeed, not just points out problems. Essential Duties and Responsibilities Partner Closely with Engineering : Refine architecture, validate new features, and drive security investment while prioritizing engineering velocity Build Security Paved Roads : Contribute to the secure defaults, libraries, and "paved roads" that systematically eradicate entire classes of vulnerabilities rather than fixing bugs one by one Create Feedback Loops : Tune security tooling such as SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters Be our Best Customer : Ensure our bug bounty program can be a model for other customers. Experiment with new ways to leverage the creativity of the crowd. Provide feedback on new platform features to engineering and product Own Projects End to End : Lead cross-functional product security projects from scoping through delivery, influencing product and engineering roadmaps and clearly communicating risk to both technical and non-technical stakeholders Amplify our Impact : Use code and automation as a lever to scale coverage and eliminate repetitive work. Build systems based on incentives and accountability rather than just bureaucratic process Education, Experience, Knowledge, Skills, and Abilities 3+ years of experience in product security, application security, or secure software development Can review code, automate tasks, and build security tooling in at least one modern programming language (e.g., Python, Go, Ruby, Java) Hands-on experience with core application security practices — threat modeling, secure code review, and automated testing (SAST, DAST, SCA) — and a solid grasp of common vulnerability classes (e.g., OWASP Top 10) Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product. Bachelor's degree in engineering, computer science or relevant field, or equivalent practical experience Bonus Points (Preferred but not required) Previous experience with Bug Bounty or vulnerability disclosure programs A background in building "paved roads" or secure-by-default internal libraries to eliminate entire classes of vulnerabilities Hands-on experience securing cloud-native platforms and Infrastructure as Code (e.g., Terraform, AWS, GCP, Kubernetes, Docker) Experience working within a fast-paced, high-growth security or SaaS company Working Conditions and Physical Requirements The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and / or standing - Must be able to remain in a stationary position 50% of the time Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - remote, work-from-home 100% of the time Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

В задачах — поиск уязвимостей в коде, API, мобильных и веб-приложениях, архитектурные ревью и аудиты. Нужно будет разбирать причины уязвимостей с разработчиками и автоматизировать процессы безопасности.

Location: Limassol, Cyprus Workplace: hybrid We are looking for an Application Security Engineer in the AppSec team. As a Senior Application Security Engineer at inDrive, you will own whole areas of our AppSec program, from security requirements and design reviews to controls that work in production. You will work with product, platform and infrastructure teams on new architecture, AI systems and the security of our apps and services. The role fits a hands-on engineer who reviews code and architecture, leads work across several teams and makes security decisions based on data. Key Responsibilities Own one or more areas of the AppSec program end to end, including the plan, the risks and the metrics. Run security design reviews and threat modeling of new features, services and AI systems, and defend security requirements at the architecture committee. Assess the security of web, mobile and API applications and find variants of confirmed vulnerabilities across other services. Coordinate external security assessments and bug bounty findings, from triage and prioritisation with teams to fix verification. Design secure authentication and authorization between users, services and internal tools together with platform teams. Choose, pilot and tune security tools, and keep only those that pay off in real findings. Turn incidents and assessment results into lasting controls, policies and secure defaults for developers. Consult development teams on complex security issues and take shifts in AppSec duty for Critical and High incidents. Skills, Knowledge and Expertise Higher education in IT, preferably in information security. Knowledge of mobile application security on Android and iOS, client-server trust, app integrity and protection against bots and account takeover. Deep knowledge of web and API security, including authentication and authorization flaws, SSRF, injections and business logic issues, and the ability to find variants of a vulnerability class across many services. Strong understanding of identity and access, OAuth 2.0, OIDC, JWT, signing key rotation, mTLS, service-to-service authentication and SSO. Understanding of security risks of AI systems and LLM agents, such as prompt injection, excessive tool permissions and agent access to sensitive data, and practical use of AI in your own security work. Practical understanding of cloud-native infrastructure, Kubernetes, containers, API gateways and AWS. Experience in threat modeling and security design review of new features and architecture. Understanding of vulnerability management and risk, including severity, SLA, compensating controls and risk acceptance. Ability to read and review code in at least one language, preferably Golang. Track record of leading projects with two or more teams from a requirement to a verified fix, and clear written English. Experience with secrets and key management, rotation and response to credential leaks. Nice to have Knowledge of software supply chain security, dependencies, CI/CD pipelines and source control platform hardening. Experience tuning SAST, DAST and SCA tools for precision and judging a tool by noise and cost per real finding. Why join us Help us challenge injustice by creating fair choices for millions of people across 47 countries. Develop your professional skills with access to mentoring, career consulting, and learning programs. Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program. Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects. Work alongside people who take initiative, speak openly, and challenge themselves to grow. Improve your language skills through co-financed courses and internal speaking clubs. Annual salary from 70 700 EUR gross. Final benefits may vary depending on the location.

Проводить архитектурные ревью и моделирование угроз как для текущих, так и для новых сервисов и функциональностей. Проводить анализ защищенности приложений, API и бизнес-логики.

Location: Remote; Portugal; Armenia; Serbia; Poland Workplace: Remote We are looking for a hands-on DevSecOps Engineer to join a fast-growing software development company delivering fintech and iGaming products. In this role, you will take ownership of security across cloud infrastructure, CI/CD pipelines, and development processes, helping build secure and scalable products. Responsibilities: - Drive the evolution of the company’s DevSecOps function by defining security initiatives, long-term priorities, and promoting a security-first engineering mindset - Partner with the DevOps team to improve the security and resilience of Kubernetes (EKS), Istio, Service Mesh, and related cloud-native infrastructure - Support engineering teams during service transitions by embedding security best practices into operational processes and ensuring effective knowledge sharing - Develop and maintain policy-as-code frameworks and infrastructure validation mechanisms using technologies such as OPA and other compliance automation tools - Improve the security of infrastructure provisioning and deployment workflows across Terraform, Ansible, and other Infrastructure-as-Code solutions - Integrate, maintain, and optimise security testing and scanning capabilities throughout the software development and release lifecycle - Build automation around security monitoring, compliance checks, and operational controls to increase efficiency and reduce manual effort Requirements: - Strong practical understanding of modern DevOps principles and secure CI/CD pipeline design - Hands-on experience with Kubernetes or other enterprise-grade container orchestration platforms - Proven experience working with Infrastructure-as-Code and configuration management technologies such as Terraform, Ansible, Chef, or equivalent tools - Solid background in administering production infrastructure, including web servers, databases, and supporting services - Good understanding of networking concepts, including TCP/IP, routing principles, and the OSI model - Experience securing distributed systems and microservices-based architectures - Proficiency with Git or other source code version control platforms - Practical experience securing cloud environments, preferably AWS, though experience with GCP or other major cloud providers is also valuable - Ability to assess infrastructure security posture, identify vulnerabilities, and implement appropriate remediation measures - Experience implementing identity and access management controls together with security automation practices - Hands-on knowledge of secrets management platforms (such as Vault) and Privileged Access Management (PAM) solutions - Experience integrating SAST, DAST, dependency scanning, container scanning, or similar security tooling into CI/CD workflows - Good understanding of Secure Software Development Lifecycle (SSDLC) principles and familiarity with security maturity frameworks such as OWASP SAMM v2 - English level: Upper-intermediate or higher What’s in it for you: - Fully remote working format - Competitive salary based on experience - Paid annual leave and sick leave - Opportunities for professional and career growth - Supportive environment focused on continuous development and long-term growth

Развивать и поддерживать GitLab CI/CD-пайплайны. Обеспечивать стабильную и непрерывную работу сборочного конвейера.

— Встраивать автоматические проверки безопасности в GitLab CI/CD и разбирать результаты AI-анализа; — Обеспечивать защиту, мониторинг и безопасное развертывание в Kubernetes, PostgreSQL, ELK, Grafana;