Вакансии

Location: Almaty, Kazakhstan Workplace: OnSite WHY WORK AT HIGGSFIELD AI? We're the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, and powering 390 of Fortune 500 brands. We’re building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn’t just moving fast, but rewriting what fast looks like. ABOUT THE ROLE We’re looking for an IT Security Engineer to own and strengthen the security of our corporate technology environment. This is a hands-on role spanning identity and access management, endpoint security, SaaS security, Zero Trust, security automation, and incident response. You’ll work closely with Security, IT, Engineering, and business teams to build secure, scalable systems and automate the controls that protect our people, devices, applications, and data.   WHAT YOU’LL DO IDENTITY & ACCESS MANAGEMENT - Own and strengthen identity and access controls across our corporate environment, with a focus on Microsoft Entra ID. - Implement and maintain SSO/SAML, SCIM provisioning, MFA, Conditional Access, and RBAC. - Build and improve automated joiner, mover, and leaver (JML) workflows. - Regularly review permissions, privileged access, and authentication policies to reduce unnecessary access and security risk. - Help establish identity as the foundation of our Zero Trust security model. ENDPOINT SECURITY - Manage and improve endpoint security through Microsoft Intune/MDM, device compliance policies, and endpoint protection tooling. - Deploy and maintain EDR capabilities across the corporate fleet. - Establish and enforce security baselines for employee devices. - Investigate endpoint security events and remediate compromised or non-compliant devices. SAAS & CORPORATE APPLICATION SECURITY - Assess and improve the security posture of corporate SaaS applications. - Partner with application owners to implement appropriate authentication, authorization, provisioning, and data-access controls. - Identify shadow IT, excessive permissions, insecure configurations, and other SaaS-related risks. - Help establish scalable security standards for onboarding and managing new corporate applications. ZERO TRUST & CORPORATE ACCESS - Design and implement Zero Trust principles across identity, endpoints, applications, and corporate access. - Strengthen controls around privileged access, remote access, and access to sensitive systems. - Apply practical security controls that balance strong protection with employee productivity. SECURITY AUTOMATION - Automate repetitive security and IT workflows using scripts, APIs, and integrations. - Build tooling to automate access reviews, provisioning, compliance checks, alert enrichment, remediation, and other security processes. - Use scripting languages such as Python or JavaScript to improve security operations and reduce manual work. - Look for opportunities to turn manual security processes into scalable, reliable systems. DETECTION & INCIDENT RESPONSE - Monitor and investigate security alerts across identity, endpoint, and corporate systems. - Perform initial investigation and triage of suspicious activity and potential security incidents. - Support incident containment, remediation, and post-incident improvements. - Build lightweight detections and alerts for meaningful risks within the corporate environment. WHAT WE’RE LOOKING FOR - Strong hands-on experience with identity and access management, ideally within Microsoft Entra ID. - Experience implementing or managing SSO/SAML, SCIM, MFA, Conditional Access, RBAC, and JML workflows. - Experience with MDM and endpoint security, ideally Microsoft Intune and modern EDR tooling. - Understanding of SaaS and corporate application security. - Experience implementing or operating within a Zero Trust security model. - Ability to automate workflows using scripts and APIs, with experience in a language such as Python or JavaScript. - Working knowledge of security detection, investigation, and incident response. - Strong security judgment — you can distinguish theoretical risk from meaningful business risk and prioritize accordingly. - Comfortable operating independently in a fast-moving startup environment where priorities can change quickly. - Builder mindset: you look for ways to automate, simplify, and improve systems rather than relying on manual processes. NICE TO HAVE - Experience with reverse engineering, CTFs, security competitions, or similar hands-on security challenges. - Strong understanding of networking fundamentals, including VPNs, network segmentation, authentication protocols, and common lateral-movement techniques. - Experience securing rapidly scaling or highly technical organizations. - Experience working closely with engineering or product security teams. - Familiarity with cloud security concepts and modern security monitoring tools. WHAT WE OFFER: - Competitive base salary in USD - Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth. - On-site role in our Almaty office (we will relocate you from anywhere).

Location: Almaty, Kazakhstan Workplace: OnSite WHY WORK AT HIGGSFIELD AI? We're the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, and powering 390 of Fortune 500 brands. We’re building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn’t just moving fast, but rewriting what fast looks like. ABOUT THE ROLE Break new features before they ship: agentic systems, MCP servers, code-generating agents, user-deployed apps, generative models for image, video, and voice, and enterprise features (SSO, org and team management, roles). It's new ground, and you'll help define how we secure it. You go first. What you'll do: - Pentest new features and products pre-release: web, APIs, admin surfaces. - Work out the attack surface of each new feature yourself. - Hunt authorization flaws across our multi-tenant APIs and retest fixes. - Join design and code reviews early, so flaws die before they're built. - Turn recurring findings into guardrails — paved-road standards and automated checks — so a bug class dies once instead of resurfacing every release. - Bring a working repro to the team that owns the code and see the fix through. Requirements - A track record of finding real vulnerabilities in real systems — appsec work, bug bounty, or research. - The ability to read modern codebases, trace a bug to root cause, and discuss the fix with the engineers who wrote it. - A threat-modeling instinct for spotting the weak spots in a design or architecture before a line is written. - Enough cloud and container fundamentals to follow a bug into the infrastructure it runs on. - High agency. - Working English. Nice to have - LLM/agent security research, public research or CVEs, OSWE/CWEE or equivalent hands-on certificates. WHAT WE OFFER: - Competitive base salary in USD - Equity: participation in the company’s stock option program, giving you the opportunity to share in the company’s long-term growth. - On-site role in our Almaty office (we will relocate you from anywhere).

Location: Boston, MA Workplace: OnSite At WHOOP, we're on a mission to unlock and inspire performance for life. As a Senior GRC Analyst, you will play an important role in supporting WHOOP's information security governance, risk, and compliance program. You will lead security risk assessments, evaluate security controls, identify gaps, and support risk remediation efforts across the organization. Partnering with Product Security, Engineering, IT, Legal, and other stakeholders, you will help evaluate technical security risks, support Secure SDLC reviews, and improve the effectiveness of security controls and processes. We are seeking a detail-oriented, proactive GRC professional with a solid foundation in information security, technical security risk assessment experience, and the ability to work independently while collaborating effectively with engineering teams. RESPONSIBILITIES - Lead information security risk assessments and technical security control reviews across applications, cloud infrastructure, enterprise systems, and third-party technologies. - Manage and govern security risks, control gaps, and remediation activities, ensuring accurate and timely updates to the leadership. - Develop, document, and continuously improve GRC standard operating procedures (SOPs) to ensure consistent, efficient, and scalable execution of GRC processes. - Lead Secure SDLC reviews in partnership with Product Security and Engineering, reviewing security testing practices, vulnerability management, and evidence of control effectiveness. - Assess security exception requests, evaluate associated security risks and compensating controls, and translate into business risks for leadership review / acceptance and approval process. - Track and report security risk metrics, including security gaps, exception remediation status, and overdue risks. QUALIFICATIONS - 6+ years of experience in information security, cybersecurity risk management, or GRC, preferably in a technology-driven organization. - Strong understanding of cybersecurity principles and technical security controls, including application security, Secure SDLC, vulnerability management, and cloud security. - Experience conducting technical security risk evaluation, identifying security gaps, and tracking remediation activities. - Experience managing security risk registers / security exceptions register, and documenting risk assessments and findings. - Strong understanding of regulations and security frameworks such as GDPR, NIST CSF, ISO 27001 and 42001, HIPAA/HITRUST, and SOC 2. - Strong analytical, documentation, and communication skills, with the ability to engage technical stakeholders and independently manage assigned assessments. - A minimum bachelor’s degree in any discipline. Computer science, cyber security and risk or technology degrees preferred. BONUS QUALIFICATIONS - Industry certifications such as CISA, CISSP, CISM, or CRISC. - Experience conducting technical security control reviews in cloud-native or software-driven organizations. - Familiarity with DevSecOps, AI governance, Zero Trust principles, and Secure SDLC practices. This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training.  In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Location: Spain About the Opportunity Dentons Europe is currently seeking a Information Security Engineer, specializing in Microsoft cloud technologies to play a key role in strengthening and evolving our security landscape. In this role, you will design and implement security controls across cloud and hybrid environments, with a strong focus on Microsoft 365 and Microsoft Azure. You will operate at the intersection of architecture and execution shaping security decisions, guiding technical teams, and ensuring that systems, applications, and integrations meet the firm’s security, compliance, and reliability standards. As a trusted advisor and technical authority, you will work closely with Information Security, IT, and business stakeholders across Europe, embedding security into the design and delivery of technology solutions while continuously improving the organization’s overall security posture. This is an opportunity to make a visible, enterprise-wide impact in a complex, international environment. You will primarily be accountable for Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments. Act as a cybersecurity subject-matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation. Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards. Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset. Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture. Lead end-to-end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams. Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture. Provide advanced troubleshooting and technical leadership for complex or high-impact security issues. Develop and maintain security documentation, standards, reports, and control frameworks. Requirements Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering Advanced expertise in Microsoft Azure security, including at least two of: Defender for Cloud Microsoft Sentinel Infrastructure / Network Security (IaaS) Application and API security Storage and database security Advanced expertise in Microsoft 365 security, including at least two of: Microsoft Entra ID, identity and access management Microsoft Purview, data protection and compliance Microsoft 365 Defender suite Intune / Endpoint Manager Strong understanding of: Security architecture principles, including Zero Trust, defense-in-depth and least privilege Hybrid cloud environments and system integrations Vulnerability management, including analyzing penetration testing and coordinating remediation of results API security and modern integration technologies Scripting and automation skills, e.g., PowerShell, Python or Bash Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities Professional experience Proven experience designing and implementing secure solutions in Microsoft technologies-based enterprise environments Experience working with large-scale or multi-country IT environments Solid exposure to security operations, incident response and security tooling Experience collaborating across infrastructure, development and business teams Benefits Remuneration and benefits package will reflect the successful candidates experience and country where hired. Please apply with an English resume

Location: Shanghai, China We are seeking a highly skilled and motivated Cloud Infrastructure and Security Engineer to implement, operate and manage scalable, secure and resilient public cloud infrastructure. The ideal candidate will have experience with public cloud platforms (preferably Tencent Cloud), understanding of cloud-native security service and practice, and a passion for building infrastructure as code. Responsibilities: Manage daily operations of enterprise cloud platforms (Tencent Cloud) including resource provisioning, deployment, monitoring and incident resolution to ensure the stability of business systems; Deploy cloud-native infrastructure components, e.g. VPCs, subnets, routing, computing, storage and load balancing services Build and manage containerized environments e.g. Tencent TKE Enforce security best practices across public cloud environments including network segmentation, encryption, IAM and etc. Maintain access control policies under Tencent CAM and Group Account Management Ensure compliance with MLPS v2.0 Required Qualifications: Bachelor’s degree in Computer Science, Engineering or related field (or equivalent experience) 2+ years of experience in cloud infrastructure and/or security engineering roles Strong knowledge of Tencent Cloud platform and services Hands-on experience with VPC design, Network Protection, IAM Familiar with CI/CD pipelines and containers Knowledge of scripting languages, e.g. Python, Bash or PowerShell Desired Qualifications: Cloud certifications (Tencent Cloud Certificate, AWS Certificate) Experience with MLPS v2.0 Knowledge of Terraform or similar Infrastructure as a Code tools Employment Type: employment contract with FESCO Adecco, a professional personnel company in China

Location: Czechia About the Opportunity Dentons Europe is currently seeking a Information Security Engineer, specializing in Microsoft cloud technologies to play a key role in strengthening and evolving our security landscape. In this role, you will design and implement security controls across cloud and hybrid environments, with a strong focus on Microsoft 365 and Microsoft Azure. You will operate at the intersection of architecture and execution shaping security decisions, guiding technical teams, and ensuring that systems, applications, and integrations meet the firm’s security, compliance, and reliability standards. As a trusted advisor and technical authority, you will work closely with Information Security, IT, and business stakeholders across Europe, embedding security into the design and delivery of technology solutions while continuously improving the organization’s overall security posture. This is an opportunity to make a visible, enterprise-wide impact in a complex, international environment. You will primarily be accountable for Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments. Act as a cybersecurity subject-matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation. Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards. Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset. Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture. Lead end-to-end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams. Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture. Provide advanced troubleshooting and technical leadership for complex or high-impact security issues. Develop and maintain security documentation, standards, reports, and control frameworks. Requirements Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering Advanced expertise in Microsoft Azure security, including at least two of: Defender for Cloud Microsoft Sentinel Infrastructure / Network Security (IaaS) Application and API security Storage and database security Advanced expertise in Microsoft 365 security, including at least two of: Microsoft Entra ID, identity and access management Microsoft Purview, data protection and compliance Microsoft 365 Defender suite Intune / Endpoint Manager Strong understanding of: Security architecture principles, including Zero Trust, defense-in-depth and least privilege Hybrid cloud environments and system integrations Vulnerability management, including analyzing penetration testing and coordinating remediation of results API security and modern integration technologies Scripting and automation skills, e.g., PowerShell, Python or Bash Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities Professional experience Proven experience designing and implementing secure solutions in Microsoft technologies-based enterprise environments Experience working with large-scale or multi-country IT environments Solid exposure to security operations, incident response and security tooling Experience collaborating across infrastructure, development and business teams Benefits 25 days of vacation/year 3 sick days/year Meal lump-sum MultiSport card Multipass card Home Office allowance

Location: Warsaw, Poland About the Opportunity Dentons Europe is currently seeking a Information Security Engineer, specializing in Microsoft cloud technologies to play a key role in strengthening and evolving our security landscape. In this role, you will design and implement security controls across cloud and hybrid environments, with a strong focus on Microsoft 365 and Microsoft Azure. You will operate at the intersection of architecture and execution shaping security decisions, guiding technical teams, and ensuring that systems, applications, and integrations meet the firm’s security, compliance, and reliability standards. As a trusted advisor and technical authority, you will work closely with Information Security, IT, and business stakeholders across Europe, embedding security into the design and delivery of technology solutions while continuously improving the organization’s overall security posture. This is an opportunity to make a visible, enterprise-wide impact in a complex, international environment. You will primarily be accountable for Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments. Act as a cybersecurity subject-matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation. Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards. Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset. Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture. Lead end-to-end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams. Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture. Provide advanced troubleshooting and technical leadership for complex or high-impact security issues. Develop and maintain security documentation, standards, reports, and control frameworks. Requirements Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering Advanced expertise in Microsoft Azure security, including at least two of : Defender for Cloud Microsoft Sentinel Infrastructure / Network Security (IaaS) Application and API security Storage and database security Advanced expertise in Microsoft 365 security, including at least two of: Microsoft Entra ID, identity and access management Microsoft Purview, data protection and compliance Microsoft 365 Defender suite Intune / Endpoint Manager Strong understanding of: Security architecture principles, including Zero Trust, defense-in-depth and least privilege Hybrid cloud environments and system integrations Vulnerability management, including analyzing penetration testing and coordinating remediation of results API security and modern integration technologies Scripting and automation skills, e.g., PowerShell, Python or Bash Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities Professional experience Proven experience designing and implementing secure solutions in Microsoft technologies-based enterprise environments Experience working with large-scale or multi-country IT environments Solid exposure to security operations, incident response and security tooling Experience collaborating across infrastructure, development and business teams Benefits Private medical healthcare provided by Medicover MultiSport card Benefit Cafeteria system Option to join a private insurance plan An additional day off for your birthday Tailored learning & development opportunities Hybrid work model with a modern office in Warsaw city center

Location: San Francisco, CA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Safeguards team is seeking a Red Team Engineer to help ensure the safety of our deployed AI systems and products. In this role, you'll take an adversarial approach to uncover vulnerabilities across our product ecosystem before they can be exploited by malicious actors. Your work will span from technical infrastructure vulnerabilities on our products to emergent risks from advanced AI capabilities. While you'll bring best practices from traditional security approaches, the focus is on broader safety implications and novel abuse unique to advanced AI systems and associated products. You'll investigate the full spectrum of potential abuse — from coordinated account manipulation and payment fraud to novel exploitation of product features — and simulate sophisticated threat actors who chain multiple attack vectors to achieve their objectives. Key responsibilities Conduct comprehensive adversarial testing across Anthropic's product surfaces, developing creative attack scenarios that combine multiple exploitation techniques Research and implement novel testing approaches for emerging capabilities, including agent systems, tool use, and new interaction paradigms Design and execute "full kill chain" attacks that emulate real-world threat actors attempting to achieve specific malicious objectives Build and maintain systematic testing methodologies that evaluate every aspect of our systems Develop automated testing frameworks to enable continuous assessment at scale Collaborate with Product, Engineering, and Policy teams to translate findings into concrete improvements Help establish metrics for measuring detection effectiveness of novel abuse Minimum qualifications Experience in penetration testing, red teaming, or application security Experience in model jailbreaking and testing large-scale agentic workflows for non-obvious prompt injection vectors Strong technical skills in web application security, including hands-on expertise with security testing tools (e.g., Burp Suite, Metasploit, custom scripting frameworks) Experience building custom automation, including LLM-specific testing frameworks A track record of discovering novel attack vectors and chaining vulnerabilities in creative ways A public body of work such as CVEs, blog posts, or disclosed bug bounty reports Strong written and verbal communication skills, with the ability to explain technical concepts to varied audiences Preferred qualifications Experience with AI/ML security or adversarial machine learning Understanding of AI safety considerations beyond traditional security, including modern guardrails against jailbreaks Experience testing API security and rate-limiting systems Background in testing business logic vulnerabilities and authorization bypass techniques Background in anti-fraud, trust & safety, or abuse prevention systems Familiarity with distributed systems and infrastructure security Familiarity with abuse detection mechanisms and the ability to engineer novel bypasses Adaptability to understand and build engagements around emerging threats outside your direct area of expertise The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $405,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Remote - United Kingdom Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as Twilio’s next Security Engineer, Incident Response About the job The Security Incident Response Team (SIRT) is looking for a Security Engineer who is passionate about solving Twilio’s mission of security and reliability by working across the organization to lead the technical response to security events and incidents across Twilio’s global infrastructure, services and applications by effectively conducting triage, containment, remediation and driving post-incident betterments.  You will work within a team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions. You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security response processes, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program. Responsibilities In this role, you’ll: Lead and support the response to all security events and incidents across Twilio’s complex global infrastructure, services and applications. Be responsible for documentation of incidents and projects you work on and craft best practices as runbooks and standard operating procedures to share knowledge across teams. Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity. Work to improve Twilio’s security and reliability posture by driving identified betterments from security events and incidents. Rapidly acquire new technical skills and knowledge in a fast-paced, highly disruptive industry environment. Own the security incident lifecycle, respond to incidents and participate in on-call rotation and participate in RCAs for security incidents. Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work. Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale. Qualifications Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table! Required: Proven experience: 3+ years of security incident response in a production-cloud environment Subject-matter expert on security issues and technologies Ability to utilize AI for comprehensive, complex security incident response activities delivering high fidelity detections Advanced knowledge of service-oriented architectures, as well as experience with security tools and technologies fit for a cloud environment Experience working across a technology stack on difficult security challenges and initiatives Experience with SIEM platforms and the ability to extend their functionality Experience with SOAR tools and automating manual security processes Experience in either AWS, GCP, or other large cloud platform Excellent written and verbal communication skills Ability to influence and build effective working relationships with every level of the organization. Desired: AI Model Security & Posture Management: Support Implementation of  controls and safeguards to prevent AI vulnerabilities, such as prompt injections, model evasion, and data poisoning AI-Driven Threat Response: Utilize GenAI and LLM-based security use cases to rapidly interpret alerts, reduce false positives, and contextualize threat data Artifact & Evidence Triage: Collects intrusion artifacts and forensically sound images to analyze malware, trojans, and source code. Threat Intelligence Integration: Monitors external vendor data and threat intelligence to analyze trends and proactively defend against emerging risks. Location This role will be remote, and based in Ireland or U.K. Travel We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings. What We Offer Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location. Twilio thinks big. Do you? We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call Twilio Magic . Additionally, we empower employees to build positive change in their communities by supporting their volunteering and donation efforts. So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for, please consider other open positions. . Stay alert to recruitment fraud We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @ twilio.com email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps. . Twilio is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.

Location: Remote-Friendly (Travel-Required) | San Francisco, CA | Seattle, WA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Application Security team secures the systems that build, serve, and increasingly are Claude — and as Anthropic's footprint grows, that mandate now extends to companies and codebases we bring in from outside. This role establishes that function. You'll own security due diligence and secure integration for Anthropic's acquisitions — assessing a target's security posture pre-close, writing the security risk readout for leadership, and after close, bringing acquired systems up to Anthropic's bar. Security has been part of every deal to date, but this is the first dedicated role for it: you'll formalize the playbook, the risk model, and the tooling, and make them repeatable. This is an AppSec role first. You'll be an active member of the Application Security team — same rituals, same on-run rotation, same tooling, working alongside engineers securing Anthropic's own agentic product surfaces. The expectation is the same too: we use Claude as our primary tool, and you're expected to automate the repeatable parts of diligence and integration as you go, so each acquisition is easier than the last. When deal flow is quiet, you'll pick up core AppSec project work; when it's active, M&A is your priority. We're upfront that the center of gravity here is M&A rather than core product security. It's burstier, more assessment-heavy, and operates on confidential, time-sensitive work. If you like parachuting into an unfamiliar codebase under time pressure and turning it into a clear risk picture for leadership, this is that job. Key responsibilities Lead pre-close security due diligence on prospective acquisitions — coordinate external penetration testing, threat-model the target's architecture, assess security controls, and deliver the security risk readout for leadership ahead of close and integration planning Drive post-close security integration — stand up static and dynamic analysis coverage on acquired codebases, track high- and critical-severity remediation to closure, fold acquired assets into bug bounty scope, and onboard repositories to Anthropic's automated vulnerability remediation and reporting systems Coordinate adjacent security engineering teams (supply chain, cloud, corporate security, detection & response) on their portions of each integration Work across a wide set of stakeholders on every deal — corporate development, legal, security leadership, and the engineering teams inheriting acquired systems internally; engineering and security counterparts at the target company externally — translating between them and keeping the security workstream legible to all of them Formalize and scale Anthropic's M&A security playbook — risk-scoring model, diligence runbook, integration checklist — and turn as much of it as possible into Claude-powered tooling rather than manual process Share the team's operational on-run rotation (bug bounty escalations, launch consults, incident response), swapping out during periods of active deal work Contribute to core AppSec projects between deals — secure design reviews, threat modeling for agentic systems, and the team's security automation roadmap Minimum qualifications Hands-on application and infrastructure security experience, including cloud and containerized environments Demonstrated ability to rapidly assess an unfamiliar codebase or architecture and produce a clear, prioritized risk assessment for a non-security audience Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript Practical threat-modeling and vulnerability-identification skills — you've found and reasoned about real bugs in real systems Comfort operating with high autonomy, ambiguity, and tightly-held confidential context Clear written and verbal communication across varied audiences — executives, legal and corporate development partners, and engineering counterparts at an acquired company Preferred qualifications 7+ years in application security, security consulting, or security architecture Prior M&A security due diligence, third-party security assessment, or technical due diligence experience Experience standing up or scaling SAST/DAST, bug bounty, or vulnerability management coverage across multiple codebases Track record of building security automation or tooling rather than relying solely on manual review Familiarity with using LLMs as a core part of your security workflow Experience securing agentic, code-execution, or LLM-integrated systems Representative projects Point Anthropic's internal LLM-driven code analysis and AI-assisted scanning at an acquired repository nobody here has seen, and turn the output into a prioritized remediation plan in days rather than weeks Design the risk-scoring framework Anthropic uses to compare security posture across acquisitions of different shapes and sizes Build the automation that onboards an acquired codebase to Anthropic's vulnerability dashboard, dependency auto-patching, and bounty scope without a human running a checklist Write the security risk memo for a live deal and present it to corporate development and security leadership The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Baku Workplace: onsite ABOUT YOU Xsolla seeks a security engineer to join a new security team during a critical build-out phase. You work across application security and infrastructure security - reviewing code, hardening cloud environments, supporting incident response, and partnering with engineering teams to improve security posture across the company. This is a generalist role well-suited to an early-team hire. You are comfortable working across domains rather than specializing in one, and you grow into deeper expertise as the team and program mature. You collaborate closely with the security program manager and work directly with engineering teams on secure design, findings, and remediation. Our tech stack includes GCP, vSphere/ESX, Kubernetes and container workloads, MariaDB, CockroachDB, Go, PHP, and Python. You do not need expertise in all of these, but you are comfortable navigating a mixed environment and learning what you need. As always true in job descriptions, there is an intangible value that is hard to capture. We look for a diverse set of perspectives and skills. Even if you don't match every requirement, we encourage you to apply if you think you can be highly successful in this role.   ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Perform Application Security Reviews - Conduct code reviews, run SAST / DAST and dependency scanning tools, and work with engineering to resolve findings. Participate in Threat Modeling - Contribute to threat modeling sessions for new features and architecture changes, helping identify risks early in the design process. Help Harden Cloud and Container Infrastructure - Work on GCP, Kubernetes, and IAM configurations to strengthen the security of our cloud and container environments. Participate in Pen Test Remediation - Help triage penetration test findings and work with engineering teams to implement fixes, coordinating closely with the security program manager. Partner with Engineering on Secure Design - Review architectures, advise on secure implementation patterns, and help teams make informed security decisions. Identify and Track Security Findings - Document findings, assess severity, and track them through the remediation lifecycle to resolution. Support Incident Response - Help investigate and document security events, contribute to root-cause analysis, and support containment efforts. Write Async Security Guidance - Produce advisories, best-practice documentation, and practical guidance that helps engineering teams build securely across time zones. Support Product Security - Work with partners on the security posture of customer-facing services, contributing to reviews and assessments as needed. What You Bring Foundational AppSec Knowledge - Understands common vulnerability classes, secure coding patterns, and how to conduct a meaningful code review. Cloud Environment Exposure - Has worked with GCP or a similar cloud provider and is comfortable with IAM , networking, and container concepts. Code Literacy - Reads and reviews code in one or more of: Go, Python, PHP. Does not need to be a software engineer, but can follow logic and spot issues. Security Tooling Familiarity - Has used or is familiar with SAST , DAST , or dependency scanning tools and understands how they fit into a development workflow. Strong Written Communication - Writes clear, concise async documentation - findings, advisories, guidance - that works across time zones and audiences. Collaborative Mindset - Partners effectively with engineering teams. Focuses on helping teams build securely rather than just identifying problems. Self-Directed with Growth Mindset - Eager to learn, comfortable with ambiguity, and able to make progress with minimal direction in a new and evolving team. Nice to Have Threat modeling experience; Hands-on Kubernetes or container security experience; Infrastructure security background - Linux, networking, vSphere/ ESX; Familiarity with NIST CSF , PCI , SOC 2, or ISO 27001 from a technical perspective; Detection engineering or incident response experience; Experience building security automation or internal tooling; Relevant certifications ( OSCP , GWAPT , CKS , or similar hands-on certs). Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.

Location: Baku Workplace: onsite ABOUT YOU We are looking for a junior application security specialist to join a growing security team at Xsolla. This is a hands-on role where you will work closely with senior specialists to identify, assess, and help remediate security vulnerabilities across our products and infrastructure. You will be involved in day-to-day AppSec work - code reviews, vulnerability triage, threat modeling, and security testing. You are curious, detail-oriented, and eager to develop deep expertise in application security. You do not need to have all the answers, but you ask the right questions and follow through. This is a strong learning environment. You will be exposed to real-world security challenges in a payment platform operating at scale, and supported by experienced security specialists who will help you grow.   ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Triage Security Findings - Assess incoming bug bounty reports and scanner findings. Evaluate validity, calculate real severity, and escalate appropriately with clear written summaries. Assist with Vulnerability Assessments - Participate in security assessments of web applications and APIs. Help identify and document risks in new features and existing systems. Write Clear Security Documentation - Document findings, reproduction steps, and remediation guidance in a way that engineering teams can act on. Support Threat Modeling - Participate in threat modeling sessions. Learn to identify trust boundaries, data flows, and attack surfaces in system designs. Monitor Security Tools - Help operate SAST , DAST , and dependency scanning tooling. Track findings, reduce noise, and support remediation workflows. Support Code Reviews - Review code for common vulnerability classes under guidance of senior specialists. Learn to identify security issues across PHP, Python, and Go codebases. Stay Current - Follow developments in the security community. Bring awareness of new vulnerability classes, CVEs, and attack techniques relevant to our stack. What You Bring Web Security Fundamentals - Solid understanding of common vulnerability classes: OWASP Top 10, CSRF , XSS , IDOR , SQL injection, open redirect, authentication and session management weaknesses. You understand root causes, not just names. Web and Browser Fundamentals - Solid understanding of how web applications work: HTTP request/response cycle, client-server model, REST APIs, how browsers handle same-origin policy, cookies and their attributes, and CORS . This is the foundation everything else builds on. Security Testing Tools - Hands-on experience with Burp Suite or similar web application security testing tools. You have used them to intercept, modify, and replay requests — not just run automated scans. Vulnerability Documentation - Able to reproduce a vulnerability and write it up clearly: reproduction steps, proof of concept, and impact statement. Findings that engineering teams cannot reproduce or understand do not get fixed. Secure Development Awareness - Familiarity with foundational secure coding concepts: input validation, output encoding, parameterized queries, and least privilege. Code Readability - Ability to read and follow code in at least one language relevant to web security - PHP, Python, JavaScript, or Go. You don't need to be a developer, but you need to follow logic and spot security-relevant patterns. Analytical Thinking - You reason through problems methodically. You can explain not just what a vulnerability is but why it exists, how it is exploited, and what fixing it actually requires. Clear Written Communication - You write findings and summaries that are precise, reproducible, and useful to the engineers who need to act on them. Curiosity and Initiative - You dig into problems rather than stopping at the surface. When something looks wrong, you investigate before concluding Nice to Have Participation in bug bounty programs or CTF competitions; Basic scripting ability for automation - Python or Bash; Familiarity with CI/CD pipelines and where security tooling fits; Exposure to cloud environments - GCP, AWS, or Azure; Relevant coursework or certifications - eWPT, CEH , PortSwigger Web Security Academy progress, or similar entry-level credentials. Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.

Location: Global - Remote About the role Mission: Emulate the full kill chain of the real-world adversaries that target our business. As our Red Team Expert, you plan and execute full-scope, objective-driven operations from external initial access through phishing, C2, lateral movement, privilege escalation, and Active Directory domain compromise, all the way to actions on objective against our most critical assets. You operate covertly against a mature, monitored environment, defeat modern EDR/XDR and detection controls, and prove exactly how far a determined attacker could get. You then turn every operation into concrete detection engineering wins and defensive improvements alongside our Blue Team. What you'll be doing Scope, plan, and execute full-scope red team engagements and long-horizon adversary emulation campaigns mapped to real threat-actor TTPs and the MITRE ATT&CK framework. Execute the complete attack chain: OSINT and reconnaissance, initial access (phishing, payload delivery, public-facing exploitation), establishing and operating covert C2, persistence, privilege escalation, lateral movement, and domain/cloud takeover. Develop and deploy custom tooling, payloads, and C2 infrastructure; build and maintain resilient, OPSEC-safe redirector and command-and-control environments. Research and weaponize EDR/XDR evasion and bypass techniques — in-memory execution, process injection, AMSI/ETW tampering, and defense-evasion tradecraft — against CrowdStrike, SentinelOne, and Microsoft Defender XDR. Compromise Active Directory and hybrid/cloud identity: Kerberos attacks, ACL and delegation abuse, ADCS exploitation, and lateral movement across on-prem and cloud infrastructure (AWS). Run assumed-breach, insider-threat, and social-engineering scenarios, including physical and office-network intrusion paths where in scope. Work directly with the Blue Team to replay attack chains, validate and tune detections, and measurably close detection and response gaps. Document full attack narratives, kill-chain diagrams, and reproducible proof-of-concept steps that let defenders rebuild and detect every stage. Translate operational findings into prioritized, actionable remediation and detection-engineering guidance for IT, Network, and Security teams. Track operational metrics: objectives achieved, detection and response times, dwell time, evasion success rates, and remediation follow-through. Contribute to maturing Sporty's red team capability and threat-informed defense, sharing tradecraft with internal offensive and defensive staff. What you'll bring Experience (required) 5+ years of hands-on experience in offensive security, perimeter penetration testing, network security assessments, red teaming, or adversary emulation. Strong understanding of external asset discovery, DNS configuration vulnerabilities, and public IP network routing. Practical experience auditing and testing Linux and Windows environments and underlying network services. Proven ability to perform adversary emulation and bypass techniques against modern EDR/XDR solutions. Familiarity with testing physical office network hardware, routers, switches, firewalls, and workplace IT systems. Ability to turn external exposures and technical network risks into clear, actionable fixes for IT and Security teams. Experience with core web vulnerabilities and limited, scoped testing of modern API interfaces. Strong scripting ability in Python, PowerShell, Bash, or similar to automate perimeter mapping, emulation workflows, and asset discovery. Good understanding of scanning, reconnaissance, and interception tools. Strong documentation skills. Certifications (one or more required) OffSec: OSCP / OSCP+, OSEP, OSWE, OSED, OSCE3 (or legacy OSCE) , OSWA, OSMR, OSEE Hack The Box: CPTS , CBBH, CWEE, CAPE Red Team / Active Directory: CRTO, CRTL (Zero-Point Security); CRTP, CRTE, CRTM (Altered Security) GIAC: GPEN, GXPN, GWAPT, GRTP, GCPN Other recognized: PNPT (TCM Security), eCPPT / eWPTX / eMAPT (INE), BSCP (PortSwigger), CREST CRT / CCT, CPTE Community and competitive track record Bug bounty recognition: bounty awards, hall-of-fame listings, or published CVEs through HackerOne, Bugcrowd, Intigriti, YesWeHack, or vendor-run programs. CTF achievements: active player on a ranked CTFtime team, Hack The Box Hall of Fame or Pro Lab completions, or finalist/podium placements in recognized competitions (DEF CON CTF, Google CTF, HTB Business CTF, SANS Holiday Hack, and similar). What’s in it for you Sporty is a remote first company in pursuit of sustainability A competitive salary + individual performance based bonuses every quarter 28 days paid annual leave Our core working hours are 10am-3pm in your local time zone with flexibility outside of this Referral bonuses & flash bonuses Top of the line equipment Annual company retreats to provide great internal networking opportunities Interview process Remote video screening with our Talent Acquisition Team Offline Take home assignment Remote video interview with Team Members (60 Mins) Final discussion with the hiring manager (60 mins) If you're interested, we encourage you to apply! Every application is reviewed by a member of our team (AI is not used in our recruitment process), and we aim to respond within 48 hours. We are committed to maintaining a fair, secure and authentic recruitment process. Applications submitted using false, misleading or fraudulent information, including impersonated or fake profiles, will not be considered. Where reasonably necessary to protect the integrity and security of our recruitment process, we may verify a candidate’s identity and/or the accuracy of information provided during the recruitment process. Any such checks will be carried out in a proportionate and appropriate manner and in accordance with applicable data protection and employment laws.

Location: Tel Aviv-Yafo, Tel Aviv District, Israel About Aidoc Aidoc is the market leader in healthcare AI and has developed the world's largest clinical frontier model, supporting nearly 50 million patients each year. Aidoc is deployed in more than 2,000 medical centers worldwide. Since our founding in 2016, Aidoc has raised over $500 million and achieved a record number of FDA-cleared solutions. Medical diagnosis is hitting a breaking point, where the number of physicians hasn't kept up with the rapidly growing patient load. This leads to misdiagnosis and treatment delays that result in hundreds of thousands of deaths every year. Aidoc assists clinicians by precisely highlighting diseases directly on medical images, preventing misdiagnosis and ensuring that urgent patients receive the immediate attention they need. About this role As a SecOps Engineer, you will help protect Aidoc’s cloud environments, products, corporate systems, and sensitive healthcare data by investigating SIEM alerts, supporting incident response, and improving the quality of security monitoring and operations. This is a hands-on security operations role for someone who can analyze security signals, understand real risk, communicate clearly, and help the organization detect, investigate, and respond quickly and effectively to security events. You will work closely with real production environments, where accurate investigation, clear documentation, and practical escalation are critical to protecting sensitive healthcare data, customer trust, and the reliability of Aidoc’s clinical AI platform. Responsibilities Own the end-to-end investigation of SIEM alerts across cloud, product, identity, endpoint, and SaaS environments: analyze the relevant evidence, separate false positives from real threats, and prioritize cases based on risk and impact. Escalate high-risk findings with a clear summary of what happened, what is affected, why it matters, and what actions are required. Support incident response by collecting evidence, assisting with containment, tracking remediation, and maintaining clear investigation records for internal reviews, compliance needs, and post-incident learning. Improve SIEM rules, dashboards, alert logic, playbooks, telemetry coverage, and detection quality to reduce noise and strengthen security monitoring. Work with Security, IT, DevOps, R&D, Product Security, and Compliance teams to resolve issues and improve security operations. Requirements 2+ years of experience in Security Operations, SOC analysis, detection and response, incident response, cloud security operations, or a similar hands-on security role. Hands-on experience with SIEM-based investigations, including alert triage, log analysis, event correlation, evidence review, case prioritization, and escalation. Experience working with security telemetry from cloud platforms, identity providers, endpoints, SaaS systems, network tools, application logs, and production environments. Familiarity with cloud-native environments, including IAM, storage access, workloads, Kubernetes, containers, APIs, logging, monitoring, and CI/CD pipelines. Understanding of common attack techniques, including credential compromise, phishing, privilege escalation, suspicious API activity, malware, data exposure, lateral movement, and cloud misconfigurations. Experience with identity and endpoint investigation, including SSO, MFA, service accounts, privileged access, EDR alerts, and suspicious user or device activity. Ability to use query or scripting languages such as KQL, SPL, SQL, Python, Bash, or similar. Familiarity with incident response workflows, case management, evidence collection, remediation tracking, and post-incident review. Strong analytical judgment, with the ability to separate false positives from real risk and explain findings clearly. Ability to work independently, document investigations clearly, and escalate issues with the right level of urgency. Strong communication skills and the ability to work with Security, IT, DevOps, R&D, Product Security, Compliance, and business stakeholders. Close attention to detail, strong ownership, and comfort working in a fast-moving production environment. Additional Strengths Experience in healthcare, healthtech, medical devices, digital health, or regulated software environments. Familiarity with HIPAA, GDPR, SOC 2, ISO 27001, NIST CSF, or similar security and privacy frameworks. Familiarity with MITRE ATT&CK, detection logic, attacker behavior, and investigation playbooks. Experience with threat hunting, detection engineering, malware analysis, forensics, or advanced incident response. Experience with SOAR platforms, case management systems, threat intelligence feeds, detection-as-code, or SOC automation. Experience improving SOC metrics such as alert noise, false-positive rate, time to triage, time to escalation, and investigation quality. Experience working with sensitive data, PHI/PII, customer-facing environments, or audit-ready evidence collection. Working at Aidoc Our Perks: Be part of something big - using cutting-edge technologies to transform the Healthcare industry (while saving patients’ lives) We work in a hybrid model, with our new offices located at 34 HaMasger Street in Tel Aviv and parking for employees. Amazing and healthy breakfasts and lunches prepared daily by our personal chef! Stocked up kitchen & meal card Wellness: Aidoc employees-only gym, plus Pilates, Yoga, and functional workouts classes. Amazing culture - collaborative, transparent & fun! Attractive compensation package & benefits Aidoc is deeply committed to creating an inclusive workplace, and to the principle of equal opportunity for all individuals. We prohibit discrimination and harassment based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by law.

Location: Tel Aviv-Yafo, Tel Aviv District, Israel About Aidoc Aidoc is the market leader in healthcare AI and has developed the world's largest clinical frontier model, supporting nearly 50 million patients each year. Aidoc is deployed in more than 2,000 medical centers worldwide. Since our founding in 2016, Aidoc has raised over $500 million and achieved a record number of FDA-cleared solutions. Medical diagnosis is hitting a breaking point, where the number of physicians hasn't kept up with the rapidly growing patient load. This leads to misdiagnosis and treatment delays that result in hundreds of thousands of deaths every year. Aidoc assists clinicians by precisely highlighting diseases directly on medical images, preventing misdiagnosis and ensuring that urgent patients receive the immediate attention they need. About this role As a Senior Product Security Engineer, you will help ensure that security is built into the products, platforms, AI systems, and clinical workflows that support healthcare providers and patients at scale. This is a hands-on technical role focused on securing real systems in production, influencing architecture, and partnering closely with engineering, AI, DevOps, product, quality and regulatory. You will work across cloud-native services, medical imaging workflows, healthcare integrations, AI/ML pipelines, APIs, data flows, and regulated product development processes. Your work will directly support Aidoc's ability to deliver secure, reliable, and trusted clinical AI solutions to healthcare organizations worldwide. What Makes This Role Unique at Aidoc Clinical AI with real-world patient impact - Aidoc operates in an environment where security is not only about protecting systems and data. Security decisions can affect clinical workflows, care-team coordination, customer trust, and patient safety. Highly sensitive healthcare data - You will help protect medical imaging data, clinical metadata, PHI/PII, customer environments, and AI-driven workflows that require strong privacy, access control, data protection, and auditability. Security for AI/ML and medical imaging systems - The role extends beyond traditional AppSec into AI/ML security, data pipeline protection, inference integrity, model-related risks, and misuse scenarios in clinical workflows. Complex healthcare integrations - Aidoc integrates with hospital systems and healthcare workflows that may include PACS, EHR, VNA, RIS/worklists, scheduling systems, and communication platforms. You will help secure the data flows, authentication models, APIs, and deployment patterns behind these integrations. Engineering-driven security in a regulated environment - This is not a checkbox compliance role. However, because Aidoc operates in healthcare and clinical AI, security must be practical, evidence-based, and aligned with regulatory, customer, and quality expectations. Cloud-native scale and production ownership - You will work with modern cloud infrastructure, Kubernetes, containers, CI/CD pipelines, identity and access management, observability, vulnerability management, and software supply-chain controls. Responsibilities Secure product and clinical workflows end-to-end - Work directly with engineering and product teams to identify, prioritize, and remediate security risks across services, APIs, medical imaging workflows, AI outputs, data flows, and customer-facing product features. Drive secure-by-design architecture - Provide practical security guidance on authentication, authorization, tenant/customer isolation, encryption, secrets management, service-to-service communication, audit logging, and secure data handling. Strengthen cloud-native security - Improve security across cloud environments, Kubernetes, containers, IAM, network segmentation, workload identity, infrastructure-as-code, logging, monitoring, and cloud security posture management. Embed security into the development lifecycle - Integrate, tune, and operationalize security tooling across CI/CD pipelines, including SAST, SCA, IaC scanning, container scanning, secrets detection and build/release integrity controls. Own vulnerability management as an engineering system - Prioritize vulnerabilities based on exploitability, product exposure, customer impact, clinical risk, and regulatory relevance. Drive remediation with engineering teams and reduce recurring issues through root-cause improvements. Secure AI/ML-driven features and data pipelines - Partner with AI, data, and platform teams to identify risks related to training and inference data, model inputs and outputs, model misuse, data leakage, access to sensitive datasets, pipeline integrity, and production monitoring. Improve software supply-chain security - Reduce risk across open-source dependencies, third-party components, third-party algorithms, container images, build systems, artifact repositories, release pipelines, and deployment processes. Mentor and enable engineers - Help developers understand security risks, make secure design decisions, and take ownership of security in their code, services, and infrastructure. Communicate risk clearly - Translate technical security findings into clear risk, impact, and trade-off language for engineering, product, leadership, quality, regulatory, and customer-facing stakeholders. Requirements 5+ years of experience in Product Security, Application Security, Cloud Security, or a similar hands-on security engineering role. Strong hands-on experience securing production systems, not only performing assessments or reviews. Strong understanding of secure design, threat modeling, and architecture risk analysis. Deep knowledge of application security, including OWASP Top 10, API security, authentication, authorization, access control, secure session handling, input validation, and modern attack vectors. Experience securing distributed systems, APIs, web applications, backend services, and cloud-native architectures. Strong experience with cloud environments, especially AWS and/or Azure, including IAM, network security, encryption, logging, monitoring, and workload security. Experience with Kubernetes, containers, infrastructure-as-code, CI/CD pipelines, and modern DevOps workflows. Practical experience with security tooling such as SAST, SCA, IaC scanning, container scanning, secrets detection, SBOM tools, vulnerability scanners, and cloud security tools. Experience with vulnerability management, risk prioritization, remediation planning, and working with engineering teams to fix issues at scale. Strong understanding of software supply-chain security, including dependency risk, build/release integrity, artifact security, and third-party component governance. Experience working with modern development stacks such as Python, Java, JavaScript/TypeScript, React, microservices, APIs, and cloud-native services. Ability to influence engineers through technical credibility, practical guidance, and strong collaboration. Strong communication skills and the ability to explain security risks to technical and non-technical stakeholders. Working at Aidoc Our Perks: Be part of something big - using cutting-edge technologies to transform the Healthcare industry (while saving patients’ lives) We work in a hybrid model, with our new offices located at 34 HaMasger Street in Tel Aviv and parking for employees. Amazing and healthy breakfasts and lunches prepared daily by our personal chef! Stocked up kitchen & meal card Wellness: Aidoc employees-only gym, plus Pilates, Yoga, and functional workouts classes. Amazing culture - collaborative, transparent & fun! Attractive compensation package & benefits Aidoc is deeply committed to creating an inclusive workplace, and to the principle of equal opportunity for all individuals. We prohibit discrimination and harassment based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by law.

Location: Remote - Europe About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Detection and Response The Detection and Response team is responsible for detection engineering, threat intelligence, and incident response across Nebius Cloud. Its goal is to improve and maintain Nebius's security monitoring capabilities, as well as to build and maintain an end-to-end Security Incident Response program - people, processes, and tools. The Role We're hiring a Detection & Response Engineer to build and run our D&R capability from the ground up. You'll work on detection engineering, threat intelligence, and incident response functions across Nebius Cloud. You'll be responsible for detection development, handling complex security incidents, forensics, and shaping the D&R strategy. What you’ll do Detection development: maintain low false-positive and false-negative rates. Work closely with alerts consumers (20+ teams) to keep noise low and signal high, ensuring they can act quickly without missing genuine threats. Architect and operate detection coverage across our cloud and bare-metal environments Build and extend our internal D&R tools and pipelines - onboard new logs, build and automate response runbooks. Integrate threat intelligence into detection logic and IR playbooks, tracking adversary TTPs relevant to Cloud infrastructure Lead incident response end-to-end: scoping, containment, root cause analysis, post-incident reviews and controlling critical action items are closed to prevent future possible incidents. Partner with Compliance and Engineering teams to detect real threats while meeting the needs of both engineers and regulators. Define and report on D&R metrics: MTTD, MTTR, detection coverage, false positive rates, etc. Build and maintain Security Incident Response program: people, processes, tools. Build tools, runbooks, and on-call processes that scale as the company grows. What we look for 6+ years in security operations, detection engineering, or incident response. Deep hands-on experience with cloud-native environments (Kubernetes, Linux workloads, container-based infrastructure). Strong detection engineering skills: writing and tuning rules/detections in SIEM platforms (e.g., Chronicle, Splunk, Elastic) and SQL. Experience building or operating SOAR workflows and automating response at scale (ideally with Golang and Temporal). Working knowledge of threat intelligence frameworks (MITRE ATT&CK, Pyramid of Pain, Kill Chain ) and how to operationalize them in detections. Solid IR fundamentals: memory forensics, log analysis, network traffic analysis, and post-incident reporting. Stakeholder management: able to coordinate across engineers, compliance, legal, executives during active incident phase. Serve as the primary owner and driver for complex changes, as a result of incidents post-mortem. Nice to have Experience with AI/ML and GPU clusters related threats. Familiarity with eBPF-based detection or runtime security tooling (Falco, Tetragon). Background in threat hunting. Why this role at Nebius Build D&R at a company scaling from startup to global infrastructure provider in real time. Ability to evolve our internal D&R platform into a new cloud security product, delivering novel security observability for a range of neocloud customers - from big tech to AI startups. Work alongside world-class engineers on infrastructure that powers frontier AI. Competitive compensation with equity upside in a Nasdaq-listed, high-growth company. Flexible, remote-first culture. Hiring Process Recruiter's chat (30mins) Live-coding interview (60mins) to asses basic coding skills Security interview (60mins) to asses domain expertise Incident Response interview (90mins) to assess practical experience Final interview to close the hiring process (45mins) #LI-CP1 Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Обязанности: — Развертывание и поддержка облачной инфраструктуры в AWS (IaC через Terraform) — Администрирование…

Задачи: — Развертывание и поддержка облачной инфраструктуры в AWS (IaC через Terraform) — Администрирование кластеров Kubernetes (EKS) и управление деплоем через Helm — Настройка, оптимизация и защита пайплайнов в GitLab CI и GitHub Actions — Внедрение инструментов сканирования уязвимостей (SAST/DAST) и управление секретами в HashiCorp Vault — Настройка сквозного мониторинга и логирования (Prometheus, Grafana, ELK/Loki, Sentry), оперативное реагирование на инциденты — Участие во внедрении и поддержании практик информационной безопасности по стандарту ISO 27001 — Настройка и поддержка веб-серверов (Nginx), управление VPN, SSL/TLS сертификатами и DNS Требования: — Уверенное знание Linux (Ubuntu/RHEL) и владение Bash для автоматизации — Практический опыт работы с AWS (EKS, IAM, S3, RDS) и Ansible — Глубокое понимание процессов контейнеризации (Docker, Kubernetes) и автоматизации CI/CD — Понимание принципов сетевой безопасности, опыт работы с криптографическими протоколами и системами управления секретами — Знание принципов и практический интерес к внедрению стандартов безопасности ISO 27001 Условия: — Официальное оформление в соответствии с регламентом МФЦА (AIFC) — График работы 5/2, гибкий гибридный формат (сочетание офиса в Алматы и удаленки) с гибким началом дня — Стабильная заработная плата — Интересные и динамичные digital-проекты (включая AI-интеграции и масштабные веб-платформы) — Сильная техническая команда, минимум бюрократии и открытость к вашим технологическим инициативам