Location: Limassol; Nicosia; Athens; Thessaloniki
Workplace: hybrid
The role:
Join our dynamic Information Security GRC team to play a crucial role in strengthening our business operations. As a key member, you'll enforce our Information Security Framework, conduct internal risk assessments, and collaborate your line manager to define assessment scopes. Your responsibilities will include: review internal systems, processes, and procedures, record risks, and prepare insightful reports. Additionally, you'll contribute to Information Security projects, ensuring state-of-the-art solutions in line with regulatory requirements and best practices. This is an opportunity to make a significant impact in a forward-thinking environment, safeguarding our business while driving innovation in Information Security. Join us for a fulfilling journey!
The main responsibilities of the position include:
Plan and execute technical and targeted risk assessments in IT infrastructure, applications, technologies, and third parties
Assess internal controls, processes, and policies related to Information Technology and Security, identify deficiencies, and develop remediation strategies
Perform risk analysis on current risks and identify potential risks at operational, tactical, and strategic level
Perform risk evaluation on previously handled risks and compare mitigation approaches to potential risks
Maintain the risk register and the Information Security Risk Management Program
Identify information security risks and make recommendations that are appropriate, practical, and cost-effective
Manage and monitor the progress of remediation steps on risk assessment findings
Prepare comprehensive reports summarising the actions taken for to remediate identified risks
Provide regular reports and metrics on the security posture of the company
Act as the escalation point of the information security department for any information security related risks
Main requirements:
BSc/MSc in Information Security or any other relevant degree
At least 3 years of work experience in information security risk management and information security risk assessment
Technical knowledge of operations, physical, network, host and application security, as well as security architecture, virtualisation, and cloud infrastructures
Good understanding of security regulations and frameworks, such as ISO 27005, ISO 27001, NIST CSF and 800-53, DORA, GDPR, etc
Risk-related certifications, such as CRISC, CGRC, and CISSP, are a plus
Ability to work autonomously with minimum supervision and to integrate well within a team
Ability to articulate security risks and communicate effectively to various levels of management
Self-motivated, proactive, and efficient
Ability to work under pressure in a fast paced environment
Strong interpersonal, organisational, and project management skills
Excellent communication skills with the ability to explain technical concepts to a non-technical audience.
Excellent written and verbal skills in English
Benefit from:
Attractive remuneration package
Private health insurance
Corporate pension fund
Intellectually stimulating work environment
Continuous personal development and international training opportunities
The Hiring Experience: What Awaits You
Let’s Connect – Intro Chat with Talent Acquisition
Deep Dive – First Interview with Your Future Team
Final Connection – Final Interview
All applications will be treated with strict confidentiality!
By submitting this application, I confirm that I have read and agree to the terms of the Privacy and Data Protection Notice and the Confidentiality Undertaking.
Location: Home based - Worldwide
The Canonical Security Operations team is hiring for a Senior or Staff engineer. The Security Operations team is responsible for designing, building, and operating a world-class Security Operations Center, and the successful candidate will provide leadership, mentorship, expertise, and outstanding individual contributions towards those ends.
This role involves aspects of:
Traditional SOC duties - security monitoring, threat hunting, and response.
Security engineering - assessing and protecting Canonical platforms and products.
Software engineering - building custom tools and platforms.
Site reliability engineering - deploying, maintaining, and automating security tools.
We are looking for individuals with engineering and security experience, as well as a history of remarkable achievement. Senior security operations personnel with engineering experience and senior developers with security experience are equally well-suited to this role.
Beyond securing Canonical’s digital estate, this position represents a unique opportunity to contribute to the open source ecosystem. Team members may present at industry conferences, share threat intelligence with the wider community, or publish open source security software.
Junior positions are also available for less-experienced individuals with a compelling academic or professional background.
In this role, you will:
Provide operational and engineering leadership.
Implement and evolve Canonical’s Security Operations Center.
Design and develop security software and platforms.
Monitor for, identify, respond to, and remediate security incidents.
Assess and improve Canonical’s security controls.
Mentor early-career Security Operations engineers.
Plan and deliver work within Canonical's agile engineering framework.
Contribute to open source security.
Publish blog posts, whitepapers and conference presentations.
We are looking for:
An exceptional academic track record.
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path.
10+ years of relevant professional experience
Professional cybersecurity experience, preferably working or leading a Security Operations Center.
Professional engineering experience.
An eagerness to contribute to open source security.
Proficiency in common scripting languages, such as Python and Bash.
Knowledge of Git, GitOps, Infrastructure-as-Code, and common orchestration platforms (e.g., Kubernetes)
Though optional, we value:
Familiarity with security frameworks such as the NIST CSF, CIS CSC, and ISO 27001
Knowledge of security architecture and market-leading security tools.
Experience in a security operations team or a security operations center.
Experience in offensive or defensive security teams with hands-on ability.
Experience with advanced persistent threats.
Proficiency in additional programming languages, such as Golang.
What we offer you:
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
This global leadership role in cyber security is to manage the Security Operations (SecOps) team responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our own infrastructure and product deployments. They design and implement technical security controls that ensure security threats are automatically identified, contained and remediated. The team will also contribute ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attack.
As a leader on cyber security in the company, the SecOps team manager will collaborate with our Organisational Learning and Development team to develop playbooks and facilitate SecOps training across Canonical. They will operate in a wider security organisation, run a high performing security team and improve Canonical's security posture. They will lead initiatives to integrate the team's insights into Canonical's broader software development process.
While this is a management position, we expect managers to be expert practitioners, able to lead by example, contribute at the highest level, and assess work based on their own professional experience and skill. Candidates should have deep, hands-on expertise with a range of open source and proprietary security tooling and practices, which they can integrate into a holistic next generation security solution across the breadth of Canonical's interests.
The SecOps team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.
This role reports to the CISO.
What you will do in this role:
Hire and mentor a team of outstanding technical security professionals
Define Canonical's SecOps security standards and playbooks
Own and drive the architecture and design of the SOC
Analyse and improve Canonical's security architecture
Evaluate, select and implement new security tools and practices
Identify, contain and guide the remediation of security threats and cyber attacks
Grow the presence and thought leadership of Canonical SecOps practice
Contribute to open source threat intelligence initiatives
Drive threat modelling, table top exercises and other SecOps practices across Engineering, IS and Canonical
Develop Canonical SecOps learning and development materials
Publish blog posts, whitepapers and conference presentations
Identify, implement and track SecOps KPIs
Plan and deliver SecOps work in the framework of Canonical's agile engineering practice
Work with Security leadership to present information and influence change
What we are looking for
Proven track record of mitigating with advanced threat actors and nation state threats
Expert technical understanding of SOCs from the ground up
In depth knowledge of SOC architecture and design including strategies for logging, firewalls, network segmentation, honeypots etc
Someone who understands how the SOC works not just how to use it
Expert in Linux security
Ability to define, implement, automate and measure effective incident response playbooks
Knowledge of security architecture and market-leading security tools
Experience contributing to, and consuming, threat intelligence feeds
Experience in security risk management frameworks such as NIST CSF
An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
Deep personal motivation to be at the forefront of technology security
Leadership and management ability
Excellent business English writing and presentation skills
Confidence to report security performance metrics with accountability for accuracy and completeness
Optional things we value
Experience in offensive or defensive security teams with hands-on ability
Experience with open source security tools
Experience with security standards such as ISO 27001
Experience with security posture management of corporate endpoitns
Location: Home based - Worldwide
Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office-based roles. Teams meet two to four times yearly in person, in interesting locations around the world, to align on strategy and execution.
The company is founder-led, profitable, and growing.
Canonical is looking for exceptional security-focused software engineers to be integrated across product teams. While they also contribute to the product as engineers, their primary focus is to challenge the entire team to think more deeply about security through state-of-the-art practices such as threat modeling, table-top exercises, architecture and design reviews, static analysis tools, and fuzzing, among others.
These roles encompass all aspects of product security, including feature development, vulnerability response, proactive security, and open source community participation. Engineers in these roles collaborate closely with other Canonical teams, customers, and partners across the open source ecosystem.
Each product engineering team at Canonical reserves one or two openings for security-oriented software engineers. We also develop a number of products driven entirely by security needs, such as our AppArmor kernel investments and the Ubuntu Security Guide (USG). As the publisher of Ubuntu, we also handle long-term security response for the entire operating system and open source ecosystem. Working with tens of thousands of upstreams means that we need to be fluent in every major programming language and design, build, and adopt sophisticated tools that enable us to work at scale and speed with confidence.
Apply here if you are an exceptional security-focused software engineer, passionate about open source, and excited by Canonical's products and mission.
This role requires the ability to be productive in a globally distributed team through strong self-discipline and motivation. It also involves mandatory international travel at least twice a year, typically for one week.
Location: Worldwide, this is a globally remote role
What you'll do
Security roles might tackle any of the following:
Define, implement, and document new security features
Lead security-focused initiatives within a product engineering team
Analyze, fix, and test vulnerabilities in open source software
Contribute to Ubuntu and upstream open source projects to benefit the community
Audit and analyze source code for vulnerabilities
Integrate new tools into our security infrastructure, pipelines, and processes
Achieve and retain various security certifications
Extend and enhance Linux cryptographic components to meet country-specific compliance requirements, such as FIPS and Common Criteria (CC) certifications
Work with external partners to develop Center for Internet Security (CIS) benchmarks
Design and develop hardening automation for Ubuntu
Stay up to date with trends and developments in the security industry
Develop, test, and maintain new software capabilities
Provide guidance and support to other engineering teams on security best practices
What we are looking for in you
An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
A track record of going above and beyond expectations
Thorough understanding of the common categories of security vulnerabilities and how to fix them
Knowledge of modern software engineering techniques
Familiarity with open source development tools and methodologies
Skill in one or more of C, C++, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/Typescript
Experience as a security champion
Experience driving security within a wider SSDLC process
Professional written and spoken English
Experience with Linux (Debian or Ubuntu preferred)
Excellent interpersonal skills, curiosity, flexibility, and accountability
Passion, thoughtfulness, and self-motivation
Excellent communication and presentation skills
Results-oriented, with a personal drive to meet commitments
Optional skills we also value
Clear and effective communication with both the team and Ubuntu community members
Experience working with the Linux kernel
Experience with security certifications and knowledge of FIPS and/or Common Criteria (CC)
Experience with OVAL (Open Vulnerability Assessment Language)
Knowledge of cryptographic modules such as OpenSSL and Libgcrypt
Knowledge of low-level Linux cryptography APIs
Demonstrated ability to learn quickly
Performance engineering experience
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Nicosia; Limassol
Workplace: hybrid
The Role:
You will contribute to the implementation and maintenance of the organisation's information security program, to ensure that people and information assets are adequately protected. You will also be responsible for assessing and assuring the information security of third-party suppliers and ensuring compliance with the company’s security standards.
The main responsibilities of the position include:
Identifying and addressing security violations and inefficiencies with systems and applications
Conduct due diligence of third-party service providers’ security controls, posture and products, and ensure compliance with Company policies and security posture
Perform security assessments on third-party software and service provides such as cloud services, technology vendors, or any other services outsources to a 3rd party to identify potential risk
Monitoring and seeking assurance on the level of compliance of third-party service providers to ensure the secure supply chains of information systems, identify any information security risks, and improve their information security standards and controls
Work with Legal to ensure third party contracts and service agreements contain adequate information security contractual provisions to protect information and information processing services
Make recommendations for improving controls and practices to reduce risks related to information security
Initiating and promoting activities to foster information security awareness within the company
Main requirements:
BSc/MSc in Information Security or any other related field
Minimum 1-2 years' experience in information security or a similar role
Experience in Information Security Governance and demonstrated ability to develop policies and procedures
Skilled across various areas of Information Security such as operations, physical, network, system and application security
Possess knowledge and understanding of common security frameworks and standards, such as: ISO27001, NIST CSF, NIST 800-53 etc
CompTIA Security+, ISC2 CC, EC-Council CEH – or a relevant certification in matters of cybersecurity and/or ICT will be considered an advantage
Familiar with the European General Data Protection Regulation (GDPR) and Digital Operational Resilience Act (DORA) Regulation
Strong interpersonal, organizational and team working skills
Excellent written and oral communication skills, in both English and Greek language
Ability to work as part of a team
Benefit from:
Attractive remuneration package plus performance related reward
Private health insurance
Corporate pension fund
Intellectually stimulating work environment
Continuous personal development and international training opportunities
The Hiring Experience: What Awaits You
Let’s Connect – Intro Chat with Talent Acquisition
Deep Dive – First Interview with Your Future Team
Final Connection – Final Interview
All applications will be treated with strict confidentiality!
By submitting this application, I confirm that I have read and agree to the terms of the Privacy and Data Protection Notice and the Confidentiality Undertaking.
Location: Home based - Worldwide
This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and remain compliant to international information security standards such as FIPS 140-3 and Common Criteria. You will use your applied cryptography, Linux Security, and coding skills to enhance the Ubuntu distribution and work with organizations such as DISA and CIS to draft and implement security hardening benchmarks for Ubuntu.
As a member of the Security Hardening team you will work with and develop automation tooling to audit deployed systems for DISA-STIG and CIS benchmark compliance. You will interact with internal and external stakeholders to identify gaps in our frameworks, and develop new solutions to address these challenges. In this role you will have the opportunity to influence team and security culture, facilitate technical delivery, and help drive team direction and execution. You’ll collaborate closely with Canonical’s kernel team as well as the wider engineering organization to drive features impacting all Ubuntu users.
Day-to-day responsibilities
Collaborate with other engineers in the Security Hardening team to achieve and retain various Security certifications
Extend and enhance Linux cryptographic components (OpenSSL, Libgcrypt, GnuTLS, and others) with the features and functionality required for FIPS and CC certification
Collaborate with external security consultants to test and validate kernel and crypto module components
Work with external partners to develop security hardening benchmarks and audit + remediation automation for Ubuntu
Contribute to Ubuntu mainline and upstream projects to land solutions and benefit the community
Communication and collaboration within and outside Canonical to identify opportunities to improve our security posture, rapidly resolve issues, and deliver high-quality solutions on schedule
What we are looking for in you
Hands-on experience with low-level Linux cryptography APIs and debugging
Excellent software engineering fundamentals, including prior experience with C development, and the ability to demonstrate such
Hands-on experience with Linux system administration and shell scripting
Demonstrated knowledge of security and cryptography fundamentals + direct experience writing secure code and implementing best practices
Significant development experience working with open source libraries
Excellent verbal and written communications to enable efficient collaboration with internal and external partners in a remote-first environment
Additional skills that you might also bring
Prior experience working on FIPS/Common Criteria certified products and in-depth knowledge of the underlying standards
Prior experience working directly with DISA-STIG or CIS benchmarks, including related audit + remediation tooling (e.g. Compliance as Code)
Experience working directly with Linux Kernel
Prior experience with Python, OVAL (Open Vulnerability Assessment Language), and Ansible
History of contributions to open source projects
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person - we’ve been working remotely since 2004!
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues from your team and others
Priority Pass for travel and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm that is at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do.
Canonical has been a remote-first company since its inception in 2004. Work at Canonical is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical provides a unique window into the world of 21st-century digital business.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-Remote
Location: New York, NY / Seattle, WA / San Francisco Bay Area, CA / Remote
Workplace: remote
About CertiK
One of the fastest-growing and most trusted companies in blockchain security, CertiK is a true market leader. To date, CertiK has worked with over 3,200 Enterprise clients, secured over $310 billion worth of digital assets, and has detected over 60,000 vulnerabilities in blockchain code. Our clients include leading projects such as Aave, Polygon, Yearn, and Chiliz.
Investors = Insight Partners, Sequoia, Tiger Global, Coatue Management, Lightspeed, Advent International, SoftBank, Hillhouse Capital, Goldman Sachs, Shunwei Capital, IDG Capital, Wing, Legend Star, Danhua Capital and other investors.
About the role
We are seeking security research interns to join a top-notch security research team. We are working on a wide range of security research topics, including malware analysis, vulnerability detection, network anomaly detection, mobile app analysis, reverse engineering, and fraud detections. Multiple research tasks are ready to be explored.
Responsibilities
Develop analysis tools to facilitate security discovery and design mitigation techniques to deter security threats.
Review system implementation of sandbox, VM, network modules, and critical distributed system.
Perform vulnerability discovery and develop PoC exploits to large distributed system implementations.
Publish research findings in related academic and industry venues.
Requirements
Pursuing Masters or PhD in Computer Science or Cybersecurity related field.
Experiences in vulnerability discovery and exploitation on web applications or system software.
Preferred
Experiences in WASM or Rust/Go development is a plus.
CTF experiences are a plus as well.
Compensation
$3000 - $8000/month (Full Time). The exact compensation at which this internship is filled will be determined by the skills and experience of qualified candidates.
#blockchain
#startups
#hiring
CertiK accepts applications on an ongoing basis for this position until it is filled. The approximate date of closing will be April 30, 2024.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Location: Home based - Worldwide
As the most widely used Linux distribution, Ubuntu underpins the security of the entire internet. The role of Security Engineering Manager directly impacts the safety and security of millions of users worldwide. Join a team of security experts dedicated to protecting the open-source ecosystem and driving innovation. Your leadership will be instrumental in addressing emerging threats, developing robust security measures, and ensuring the continued integrity of Ubuntu. This is an opportunity to make a tangible difference and leave a lasting legacy on the digital landscape. The security engineering team's first responsibility is to respond to emerging threats and aim to secure the open source ecosystem for community and enterprise use. Your work will improve the security of millions of people, by addressing potential CVEs and vulnerabilities alongside the lifecycle of Canonical products such as Ubuntu. You will engage directly with our community and customers, as well as coordinating efforts across multiple engineering teams and projects to make this happen.
An Engineering Manager is responsible for line management and career guidance. The ability to develop engineering talent, to represent your team and product from a technical perspective, and to drive collaboration with other teams and customers are all critical to success in this role.
What you will do in this role
Lead and develop a team of engineers, ranging from graduate to senior
Provide technical guidance on vulnerability remediation
Drive the development of new security engineering projects
Work with upstream open source projects on vulnerability lifecycle handling
Coach, mentor, and offer career development feedback
Identify and measure team health indicators
Implement disciplined engineering processes
Represent your team and product to stakeholders, partners, and customers
Develop and evangelise great engineering and organisational practices
Plan and manage progress on agreed goals and projects
Be an active part of the security engineering leadership team, collaborating with other leaders
What we are looking for in you
An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive, and a track record of going above-and-beyond expectations
Excellent verbal and written communication skills in English
A love of developing and growing people and a track record of it
Organised and able to ensure your team delivers timely, high quality results
Professional manner interacting with colleagues, partners, and community
Solid background in software development, including expertise in support and maintenance
Mastery in any programming language (Go, Java, C, Python, ...)
Knowledgeable and passionate about software and application security
Solid experience working in an agile development environment
A demonstrated drive for continual learning
Builds trust, relationships and confidence
Result-oriented, with a personal drive to meet commitments
Ability to travel twice a year, for company events up to two weeks each
Optional things we value
Strong technical understanding of the inner-workings of Linux distributions (ideally Ubuntu or Debian)
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: US / Remote
Workplace: remote
Why Us?
CertiK is a pioneer in blockchain security, leveraging best-in-class AI technology to protect and monitor blockchain protocols and smart contracts. Founded in 2018 by professors from Yale University and Columbia University, CertiK’s mission is to secure the web3 world. CertiK applies cutting-edge innovations from academia to enterprise, enabling mission-critical applications to scale with safety and correctness.
About the Role
The primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more. We are looking to hire someone with a passion for application security and penetration testing. This is a fun and challenging full-time position. If you are excited about hacking, threat modeling, scanning, auditing, designing, and enhancing the security of applications across the board then you will thrive in this role. While you work with clients, we will also provide you with plenty of opportunities to get involved with research and development efforts to help us raise the standards of blockchain security.
Responsibilities
Perform security assessments on web, mobile, thick client applications, and browser extensions
Conduct external and internal network penetration tests
Perform security source code reviews
Perform cloud security reviews
Develop comprehensive pentest reports for both technical and non-technical audiences
Research and develop innovative techniques, tools, and methodologies for pentesting applications in the blockchain space
Contribute to the community by developing tools, presentations, and blog posts
Requirements
Passionate about cryptocurrency, DeFi, and blockchain, with a willingness to learn Web3 technologies such as smart contracts
Minimum of 4 years of experience in application security and penetration testing
Experienced in source code review for different languages, with a strong understanding of JavaScript and TypeScript
Experienced in mobile application penetration testing
Familiar with cloud platforms and their security risks, such as AWS, Azure, and GCP
Experience in programming with scripting languages such as Python and Bash
Solid understanding of cryptography
BS/MS/PhD in Computer Science or Information Security
Strong spoken and written communication skills
Bonus Points
Experienced in pentesting Web3 applications such as crypto exchanges, wallets, Dapps, and key custodian solutions
Experienced in smart contract security audits
Familiar with browser extension architecture and security risks
Actively participate in the blockchain security community
OSCP, OSWE, OSCE, GWAPT, or comparable certification
Participated in bug bounty programs and audit contests
Published security-related blog posts and spoken at security conferences and/or local meetups
About the Company
One of the fastest-growing and most trusted companies in blockchain security, CertiK is a true market leader. To date, CertiK has worked with over 3,200 Enterprise clients, secured over $310 billion worth of digital assets, and has detected over 60,000 vulnerabilities in blockchain code. Our clients include leading projects such as Aave, Polygon, Binance Smart Chain, Terra, Yearn, and Chiliz.
Investors = Insight Partners, Sequoia, Tiger Global, Coatue Management, Lightspeed, Advent International, SoftBank, Hillhouse Capital, Goldman Sachs, Coinbase Ventures, Binance, Shunwei Capital, IDG Capital, Wing, Legend Star, Danhua Capital and other investors.
Compensation
Target annual base salary for this role performed in the US is $100,000 - $180,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
#LI-Remote
#blockchain
#startups
#hiring
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Location: Home based - Worldwide
Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office-based roles. Teams meet two to four times yearly in person, in interesting locations around the world, to align on strategy and execution.
The company is founder-led, profitable, and growing.
Canonical is building a team dedicated to providing security coverage across a wide range of ecosystems and environments, working to make the world a better, safer place. We are hiring an Ubuntu Security Engineer to join an industry-leading security engineering team and help protect the open source community and Ubuntu users from emerging threats. We are looking for candidates across all levels of experience, from Graduate to Senior.
As part of the Ubuntu Security Team, you will work with some of the best and brightest people in technology to monitor, triage, respond to, and document new and existing vulnerabilities in open source software. You will collaborate with internal teams and external partners to identify issues, prioritize them, and coordinate remediation.
This is an engineering-focused role that may also involve activities such as producing security assessments, building features, conducting code reviews, developing internal tools, engaging with the open source community, and participating in industry initiatives and events.
This role requires international travel at least twice a year, usually for one week. It also requires the ability to be productive in a globally distributed team through self-discipline and self-motivation.
Location: Worldwide, this is a globally remote role
The role entails
Analyzing, fixing, and testing vulnerabilities in open source packages
Keeping track of vulnerabilities in the Ubuntu ecosystem as they are discovered, researched, and fixed, leveraging internal tools
Collaborating with other teams in the Ubuntu community and upstream developers, as needed, to exchange or develop vulnerability patches and ensure that Ubuntu includes the most robust security features
Auditing source code for vulnerabilities
Building features and tools to help teams strengthen the security of their products and contribute to the overall security of Ubuntu
What we are looking for in you
You have a thorough understanding of the common categories of security vulnerabilities and techniques for fixing them
You are familiar with coordinated disclosure practices
You are familiar with open source development tools and methodologies
You are skilled in one or more of C, Python, Go, Rust, Java, Ruby, PHP or JavaScript/TypeScript
You have excellent logic, problem-solving, troubleshooting, and decision-making skills
You can clearly and effectively communicate with the team and Ubuntu community members
Experience with Linux (Debian or Ubuntu preferred)
Excellent interpersonal skills, curiosity, flexibility, and accountability
Appreciative of diversity, polite, and effective in a multi-cultural, multi-national organization
Thoughtfulness and self-motivation
Result-oriented, with a personal drive to meet commitments
What we offer colleagues
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus or commission. We provide all team members with additional benefits which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Team Member Assistance Program & Wellness Platform
Opportunity to travel to new locations to meet colleagues
Priority Pass and travel upgrades for long-haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open-source projects and the platform for AI, IoT, and the cloud, we are changing the world of software. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence; in order to succeed, we need to be the best at what we do. Most colleagues at Canonical have worked from home since our inception in 2004. Working here is a step into the future and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: US / Remote
Workplace: remote
About the Role:
We are seeking a Senior Blockchain Security Engineer with a strong security mindset and deep technical expertise across smart contracts, blockchain nodes, and decentralized infrastructure. You will play a critical role in safeguarding Web3 projects by auditing code, building security tools, and driving research. If you have hands-on experience in Web3 and are passionate about advancing the security of decentralized technologies, we’d love to hear from you.
Responsibilities
Audit and review codebases for smart contracts, blockchain protocols, and decentralized applications (dApps) to identify and remediate vulnerabilities.
Work closely with external blockchain teams to enhance the security of their products by providing expert security consultation and implementing remediation strategies.
Conduct independent security research, explore new attack vectors, and deliver actionable insights.
Design, develop, and maintain internal security tools and frameworks to strengthen our security services.
Continuously improve internal processes, methodologies, and service offerings while ensuring high client satisfaction and long-term partnerships.
Requirements
Bachelor’s, Master’s, or PhD in Mathematics, Computer Science, or Information Security.
Minimum 3 years of professional experience as a Software Engineer, Security Engineer, or in a related role.
At least 2 years of hands-on experience with blockchain technologies, including: Smart contracts (EVM chains, Solana, Move, etc.), Blockchain protocols (nodes, SDKs, Cosmos, etc.)
Strong expertise in threat modeling, risk assessment, and security analysis.
Proficiency in one or more programming languages: Rust, Go, Solidity, Python, etc.
Passion for Cryptocurrency, DeFi, and Blockchain technologies.
Preferred Qualifications
Solid academic or practical background in Mathematics, Cryptography, or Cybersecurity.
Demonstrated experience conducting audits and collaborating with leading Web3 protocols.
Recognized achievements such as published CVEs, or strong placements in Attackathons, Bug Bounties, or Audit Contests.
About the Company
CertiK is the largest blockchain security auditor and provides a comprehensive suite of tools to secure the industry at scale. To date, CertiK has worked with over 4,900 Enterprise clients, secured over $557 billion worth of digital assets, and has detected over 18,000 vulnerabilities in blockchain code. Our clients include leading projects such as OKX, Tether, Ripple, and Pancakeswap. Our investors include top VCs like Tiger Global, Coatue Management, Shunwei Capital and Hillhouse Capital as well as industry leaders like Coinbase Ventures and Binance.
Investors = Insight Partners, Sequoia, Tiger Global, Coatue Management, Lightspeed, Advent International, SoftBank, Hillhouse Capital, Goldman Sachs, Shunwei Capital, IDG Capital, Wing, Legend Star, Danhua Capital and other investors.
About You
You’re a self-starter. You believe in tackling the most important problems, even if they are the most difficult problems. You’re comfortable with the unknown and understand that startup life means that you’re going to be wearing multiple hats. And that’s what motivates you. You’re accountable and obsessed with improvement, both in yourself and in others. You’re up to the challenge of building a world-class company that aims to be the infrastructure for more secure software for all.
Compensation
Target annual salary for this role performed in the US is $102,000 - $180,000.
The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates.
CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.
CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements.
https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf
All CertiK employees are expected to actively support diversity on their teams, and in the Company.
Location: Remote - Worldwide
About us
OpenZeppelin is the security standard onchain finance is built on. Founded in 2015, our mission is to accelerate the world's transition to an open financial system, built on open standards and secured by rigorous research.
Our open-source Contract Libraries have facilitated over $35 trillion in onchain value and are used by 10 of the top 10 tokenized money market funds and 9 of the top 10 stablecoins by market cap.
We combine AI-native security tooling with deep research and a decade of audit expertise to support leading institutions and crypto-native teams shaping the next generation of digital assets like DTCC, Fidelity, Coinbase, Uniswap, Aave, the Ethereum Foundation, and many more across the full secure development lifecycle.
Please note:
Always refer to OpenZeppelin's official job page for the most accurate information about our open roles, as we have seen multiple third party job sites posting inaccurate information.
The Security Services Team
OpenZeppelin's Security Services team is responsible for the security of the world's leading web3 protocols and top financial institutions building onchain. Our researchers partner with client teams across the full lifecycle of a protocol: working on architecture and design before any code is written, co-creating novel mechanisms and primitives with engineering teams, conducting deep audits of pre-launch codebases, and providing continuous coverage as production systems evolve. Our clients range from emerging projects shipping their first contracts to global financial institutions running production onchain systems at scale.
What you'll be doing
Review smart contracts for top decentralized applications, blockchain infrastructure and financial institutions before they launch. Find vulnerabilities, prioritize them, and present findings to the client.
Drive audits independently from start to finish, with AI as your primary collaborator. When useful, partner with another researcher to attack the code together and pressure-test findings.
Partner with client teams during the design phase of new protocols, analyzing architecture, trust assumptions, and operational constraints before any code is written (Design Reviews, Applied Research engagements).
Use AI efficiently throughout the audit process, and build skills, agents, and workflows that compound across the team.
Conduct open-ended research into cutting-edge blockchain technologies, vulnerability classes, and emerging attack vectors, and contribute findings back to OpenZeppelin's internal knowledge base and to the broader ecosystem.
You have
Hands-on and practical experience in one or more of the following: software development, cybersecurity, applied mathematics, distributed systems, cryptography, cryptoeconomics or game theory, or DeFi mechanisms.
Experience designing and developing smart contracts, not only auditing them.
Strong working knowledge of Solidity and the broader Ethereum / EVM ecosystem (common libraries, frameworks, smart contract patterns).
Modern AI tooling is central to how you work, not a novelty. You use it daily to expand audit coverage, reason about complex systems, and produce high-quality outputs faster. You evaluate AI-generated code with a critical eye.
Comfort building and extending your own tooling (skills, agents, prompts, scripts, or full workflows) that the rest of the team can adopt and build on.
An advanced English level and strong communication skills (oral and written).
Nice to have
Experience with non-EVM ecosystems and languages, such as Canton, Move (Sui, Aptos), Golang (Cosmos SDK), Cairo (Starknet), Rust-based blockchains (Solana, Stellar), or ZK circuits and cryptography-heavy systems.
Experience with risk assessment work in the crypto industry (smart contract risk assessment, threat modeling).
Working hand-in-hand with protocol teams on co-creative engagements, helping design, specify, and implement smart contracts alongside the research.
Web2 security expertise (penetration testing, web application security, infrastructure security, or appsec).
Experience with formal verification, invariant testing, or advanced fuzzing tools (Echidna, Foundry, Halmos, Certora).
A track record in audit contests (Code4rena, Sherlock, Cantina) or bug bounty platforms (Immunefi, HackerOne).
Public security research output, such as published findings, blog posts, conference talks, or contributions to open-source security tooling.
Logistics
Our interview process takes place on Google Meet and tends to consist of the following stages:
Recruiter call (30 minutes)
Manager interview (60 minutes)
Technical interview (60 minutes)
Paid work trial (paid code review assessment)
Reference checks
Please let us know if you require any accommodations for the interview process, and we’ll do our best to provide assistance.
Benefits
Meet your teammates at company gatherings around the world 😎
Enjoy the flexibility of fully remote work 🌎
Take the time you need with flexible time off 🏝
Grow your family with 8 weeks of paid leave for primary caregivers, 4 weeks for secondary caregivers, and a one-time $3,600 baby bonus 💙
Build your ideal home office with up to $500 in equipment support 🪑
Stay covered with medical insurance 🏥
Keep growing with learning and development opportunities 🧠
Get a monthly stipend for your preferred co-working space 💻
At
OpenZeppelin
, we are an equal opportunity employer and we value different perspectives. We are committed to building a diverse workforce. This includes but is not limited to gender, race, sexual orientation, religion, national origin and other characteristics that make each one of us unique. In this uniqueness, we find the most value. Come join us!
Use of AI as part of the recruiting process
As part of OpenZeppelin’s recruitment process, we may use automated tools, including artificial intelligence, to assist in reviewing applications and assessing candidate qualifications. These tools are used to support our People team by identifying relevant skills and experience, and are not used to make decisions solely by automated means. All hiring decisions involve human review. Any personal data provided as part of your application will be processed in accordance with OpenZeppelin’s
Data Privacy Notice
.
If you have questions about this recruitment process or would like to request human review of your application, please contact us at talent@openzeppelin.com.
Location: London, UK
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
The Anthropic Residency is our paid, fixed-term research program, with placements lasting between six weeks and six months. We are looking for people who have led ambitious work in a variety of technical fields and want to transition to full-time work focused on making sure AI systems are safe and beneficial for all of humanity. If you are a
professor in a quantitative discipline, a technical founder or a staff-level engineer
and want to transition to work on transformative AI, we want to hear from you. Background in machine learning is not required.
What to expect
A concrete, scoped project matched to your background, with direct mentorship from Anthropic researchers
Access to Claude models and GPU compute
Connection to the broader AI safety and security research community
Interview process
The interview process will include an initial application, recruiter screen, technical assessment, research discussion and a reference check.
Applications for this round close on November 22, 2026 (11:59 PM PT). We expect to make offers in January 2027.
You may be a good fit if you
Are motivated by making sure AI is safe and beneficial for society as a whole
Are excited to transition into working on empirical AI research full-time
Have led ambitious work in a variety of technical fields (professor in a quantitative discipline, a technical founder or a staff-level engineer)
Thrive in fast-paced, collaborative environments
Can implement ideas quickly and communicate clearly
Strong candidates may also
Have experience authoring research papers in machine learning, NLP, or AI safety
Have experience with LLMs, reinforcement learning or Kubernetes clusters and complex shared codebases
Mentors and research areas
Potential Anthropic mentors include:
Sara Price
: leads the Alignment Training team; background in data science
Ethan Perez
: leads the Alignment Science team; background in machine learning
Evan Hubinger
: leads the Alignment Stress-Testing team; formerly at The Machine Intelligence Research Institute (MIRI)
Samuel Marks
: leads the Scalable Oversight team; background in mathematics
Elana Simon
: researches the interpretability of language models and biological models; background in biomedical informatics
Belinda Li
: researches how language models represent the world, users, and themselves; background in natural language processing (PhD, MIT)
Jack Lindsey
: leads the Model Psychology team; background in theoretical neuroscience
Nicholas Carlini
: researches adversarial machine learning and AI security; previously at DeepMind and Google Brain
Jascha Sohl-Dickstein
: works at the intersection of safety and pretraining; background in physics and neuroscience, formerly Principal Scientist at Google Brain
Residents will work on empirical research questions in collaboration with Anthropic's research teams. Areas we are particularly interested in include:
AI safety & alignment
Scalable Oversight: Developing techniques to keep highly capable models helpful and honest, even as they surpass human-level intelligence in various domains.
Adversarial Robustness and AI Control: Creating methods to ensure advanced AI systems remain safe and harmless in unfamiliar or adversarial scenarios.
Model Organisms: Creating
model organisms of misalignment
to improve our empirical understanding of how alignment failures might arise.
Model Internals and Interpretability: Advancing our understanding of the internal workings of large language models to enable more targeted interventions and safety measures.
Safeguards Research: Developing robust defenses against adversarial attacks, comprehensive evaluation frameworks for model safety, and automated systems to detect and mitigate potential risks before deployment.
AI Welfare: Improving our understanding of potential AI welfare and developing related evaluations and mitigations.
AI security & frontier red-teaming
Stress-testing frontier models to understand the full extent of their current capabilities in fields such as cybersecurity, robotics or cryptography.
ML systems & reinforcement learning
Improving how frontier models are trained and building the infrastructure behind that research, from model architecture, optimizers and training data to accelerator simulators, hardware backends and RL environment pipelines.
For a fuller picture of the questions we care about, see our
Recommendations for Technical AI Safety Research Directions
and recent publications from our
Alignment
,
Interpretability
and
Frontier Red
teams.
Logistics
Duration:
Placements are six weeks, three months or six months, depending on team fit and candidate preferences. Other lengths between three and six months are possible by exception.
Location:
This application is for a remote UK position, with the option to work from our London office. However, we prefer that Residents work from our San Francisco office, where most of our research staff is based, but remote participation is possible, especially for shorter placements. Most full-time research roles at Anthropic require relocation to San Francisco. Remote participants need to be based in a country where Anthropic can hire.
Commitment:
Full-time role for the duration of the residency.
Compensation:
£265,000 to £375,000/year pro-rated for the duration of the residency + benefits
Visa sponsorship:
We sponsor visas for placements of three months or longer. For six-week placements we encourage remote participation from a country where Anthropic can hire.
Applicants may also be considered for the
Anthropic Fellows Program
.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
£265,000
—
£375,000 GBP
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: San Francisco, CA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
The Anthropic Residency is our paid, fixed-term research program, with placements lasting between six weeks and six months. We are looking for people who have led ambitious work in a variety of technical fields and want to transition to full-time work focused on making sure AI systems are safe and beneficial for all of humanity. If you are a
professor in a quantitative discipline, a technical founder or a staff-level engineer
and want to transition to work on transformative AI, we want to hear from you. Background in machine learning is not required.
What to expect
A concrete, scoped project matched to your background, with direct mentorship from Anthropic researchers
Access to Claude models and GPU compute
Connection to the broader AI safety and security research community
Interview process
The interview process will include an initial application, recruiter screen, technical assessment, research discussion and a reference check.
Applications for this round close on November 22, 2026 (11:59 PM PT). We expect to make offers in January 2027.
You may be a good fit if you
Are motivated by making sure AI is safe and beneficial for society as a whole
Are excited to transition into working on empirical AI research full-time
Have led ambitious work in a variety of technical fields (professor in a quantitative discipline, a technical founder or a staff-level engineer)
Thrive in fast-paced, collaborative environments
Can implement ideas quickly and communicate clearly
Strong candidates may also
Have experience authoring research papers in machine learning, NLP, or AI safety
Have experience with LLMs, reinforcement learning or Kubernetes clusters and complex shared codebases
Mentors and research areas
Potential Anthropic mentors include:
Sara Price
: leads the Alignment Training team; background in data science
Ethan Perez
: leads the Alignment Science team; background in machine learning
Evan Hubinger
: leads the Alignment Stress-Testing team; formerly at The Machine Intelligence Research Institute (MIRI)
Samuel Marks
: leads the Scalable Oversight team; background in mathematics
Elana Simon
: researches the interpretability of language models and biological models; background in biomedical informatics
Belinda Li
: researches how language models represent the world, users, and themselves; background in natural language processing (PhD, MIT)
Jack Lindsey
: leads the Model Psychology team; background in theoretical neuroscience
Nicholas Carlini
: researches adversarial machine learning and AI security; previously at DeepMind and Google Brain
Jascha Sohl-Dickstein
: works at the intersection of safety and pretraining; background in physics and neuroscience, formerly Principal Scientist at Google Brain
Residents will work on empirical research questions in collaboration with Anthropic's research teams. Areas we are particularly interested in include:
AI safety & alignment
Scalable Oversight: Developing techniques to keep highly capable models helpful and honest, even as they surpass human-level intelligence in various domains.
Adversarial Robustness and AI Control: Creating methods to ensure advanced AI systems remain safe and harmless in unfamiliar or adversarial scenarios.
Model Organisms: Creating
model organisms of misalignment
to improve our empirical understanding of how alignment failures might arise.
Model Internals and Interpretability: Advancing our understanding of the internal workings of large language models to enable more targeted interventions and safety measures.
Safeguards Research: Developing robust defenses against adversarial attacks, comprehensive evaluation frameworks for model safety, and automated systems to detect and mitigate potential risks before deployment.
AI Welfare: Improving our understanding of potential AI welfare and developing related evaluations and mitigations.
AI security & frontier red-teaming
Stress-testing frontier models to understand the full extent of their current capabilities in fields such as cybersecurity, robotics or cryptography.
ML systems & reinforcement learning
Improving how frontier models are trained and building the infrastructure behind that research, from model architecture, optimizers and training data to accelerator simulators, hardware backends and RL environment pipelines.
For a fuller picture of the questions we care about, see our
Recommendations for Technical AI Safety Research Directions
and recent publications from our
Alignment
,
Interpretability
and
Frontier Red
teams.
Logistics
Duration:
Placements are six weeks, three months or six months, depending on team fit and candidate preferences. Other lengths between three and six months are possible by exception.
Location:
We prefer that Residents work from our San Francisco office, where most of our research staff is based, but remote participation is possible, especially for shorter placements. Most full-time research roles at Anthropic require relocation to San Francisco. Remote participants need to be based in a country where Anthropic can hire.
Commitment:
Full-time role for the duration of the residency.
Compensation:
$350,000 to $500,000/year pro-rated for the duration of the residency + benefits
Visa sponsorship:
We sponsor visas for placements of three months or longer. For six-week placements we encourage remote participation from a country where Anthropic can hire.
Applicants may also be considered for the
Anthropic Fellows Program
.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$350,000
—
$500,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: United States Remote
Workplace: Remote
ABOUT THE TEAM
Mural helps teams think, decide, and follow through together. AI made producing content cheap. It did not make agreement, commitment, or follow-through any easier. The AI Workflows team builds the AI and agentic experiences inside Mural that help teams reach decisions and keep them.
YOUR MISSION
You will own the outcomes for new AI experiences from first idea to proven value. You will partner with the Engineering Manager and the Agentic Design Director for AI Workflows as counterparts, and together you will own the strategy. You will work with a wider team of engineers, ML engineers, designers, and product managers, moving from hypothesis to working prototype to evidence in weeks, not quarters. You will build prototypes yourself and decide what ships, what changes, and what we stop, based on what users do and what the evals tell us.
WHAT YOU'LL DO
- Set strategy for AI Workflows together with your engineering and design counterparts, own the outcomes and the evidence behind what we build, and engage deeply in the end-to-end user experience
- Find the team workflows where AI adds clear value, at the intersection of collaboration, alignment, and decision making.
- Build working prototypes with modern AI tools (Claude, Cursor, Codex, or similar) to test ideas with users before committing further investment.
- Turn each release into a hypothesis with pass/fail criteria, and make the call on whether to iterate, scale, or kill it.
- Define product-quality evals with engineering that measure usefulness, trust, and reliability, and own the call on whether an experience meets the bar to ship.
- Decide with engineering and ML when to use frontier models, when to route across models, when to bring in a new model, and when a model of our own is worth building.
- Understand the cost to serve each workflow, and work with growth and finance on how usage is metered and what the unit of value is.
- Set up the data loops that improve quality, including what we collect, how we label it, and how it feeds evals and model work.
- Design agentic experiences that work in real multiplayer sessions, where people need to understand, steer, and correct what the agent does.
- Talk with users every week and bring what you learn back into the work.
- Work with design, engineering, marketing, sales, legal, and security teams to align on shipping decisions.
- Share what you learn across the product organization so other teams can adopt the practices that work.
WHAT YOU'LL BRING
- 7+ years in product management, including shipping at least one AI product from concept to real users.
- Recent hands-on experience building agentic or LLM-based products, including what went wrong and what you changed.
- Technical fluency to design and read evals, and to work as a peer with engineers and ML engineers on context management, latency, reliability, and failure modes.
- Sound judgment on model decisions: comparing models, routing across them, adopting new ones, and deciding when fine-tuning or a custom model is worth it.
- Understanding of AI unit economics, including cost to serve, usage-based metering, and how model choices change margin.
- A record of launching, rebuilding, changing direction, and killing ideas based on evidence
- Comfort making high-stakes decisions with incomplete information, and being candid about the tradeoffs.
- Experience owning outcomes while partnering with expert engineering and design leaders as true counterparts.
- Experience creating structure where no playbook exists.
- Experience with collaboration or productivity software.
- Experience with forward-deployed or customer-embedded product work.
- Experience with agent interoperability, including MCP.
EQUAL OPPORTUNITY
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
Location: Remote (US)
About the company
Hi, we're Ondo Finance. Our mission is to provide institutional-grade, blockchain-enabled investment products and services. We have both a technology arm that develops decentralized finance technology, and an asset management arm that creates and manages tokenized funds. We are the global leader in tokenized treasuries, tokenized stocks and ETFs, and are building the future of institutional-grade financial services onchain.
Founded by folks from Goldman Sachs Digital Assets Team, we’re backed by some of the best investors in the world including Founders Fund, Coinbase Ventures, Pantera Capital, Tiger Global, and more. We are currently the leaders in the space in terms of AUM and are well capitalized to continue growing the firm. We're fully remote, with team members across the U.S.
About the role
Ondo's user research team is small but mighty, and works horizontally across the whole product suite, not inside a single pod. We're hiring a senior quantitative user researcher to build and lead quantitative research across the portfolio.
You'll set your own UXR strategy with minimal guidance, take on the hardest decision-shaping questions whichever team they come from, and answer them with evidence that holds up at scale.
What You'll Do
Own the research intake and quant roadmap. Field research questions from product, design, GTM and leadership. Turn vague asks into answerable questions, decide which need quantitative evidence (and which don't), and prioritize where evidence most reduces risk on our biggest bets.
Answer the big questions before launch. Use MaxDiff and conjoint to show which features, benefits and messages actually drive decisions. Design pre-launch experiments (stimulus tests, matched cohorts, vignettes, threshold studies) with decision rules set before fielding, and pretest instruments with cognitive interviews.
Build measurement and segments that last. Adapt or develop validated scales for trust, perceived security and comprehension, track them across products and markets, and turn our user profiles into statistically validated, sized segments.
Get data you can trust, and connect it to behavior. Design sampling, translation and fraud controls for a global, crypto-native audience, and partner with data science to link survey data with product data.
Evaluate AI-assisted experiences. Design human evaluation for AI-assisted finance features: rubrics, rater reliability, and whether user trust matches how reliable the system actually is.
Be leadership's partner for evidence. Present findings as recommendations with effect sizes, confidence and what would change the call. Give quick, right-sized answers to ad-hoc leadership questions, whether that's existing data, a fast pulse survey or a full study. Set the standards that let PMs and designers run sound lightweight surveys or data-driven validation themselves.
Requirements
7+ years of UX or applied research experience, including at least 5 years leading quantitative studies end to end, from study design through recommendation.
Experience leading quantitative research studies for financial products (e.g., brokerage, trading, banking, payments, wealth or lending).
A self-starter who operates with minimal guidance: you scope ambiguous problems, set your own priorities, and drive studies to a decision.
Deep survey science expertise: sampling and weighting, instrument design, bias control, data-quality screening, and programming in Qualtrics or similar.
Hands-on experience designing and analyzing MaxDiff and/or conjoint studies.
Strong applied statistics: regression, power analysis, and experimental and quasi-experimental design.
Fluency in R or Python for analysis and visualization.
You have an existing AI-assisted research setup, from drafting survey instruments to writing and reviewing analysis code, and you proofread/validate every output with rigor.
A track record of quantitative work that changed a product or business decision, and the ability to explain uncertainty clearly to executives and non-researchers.
Nice to Have
Experience with crypto, onchain or tokenized-asset products.
A master’s or PhD in a quantitative field such as statistics, survey methodology, behavioral economics, or marketing science.
Depth in advanced methods, such as hierarchical Bayes and simulators, psychometric scale development, segmentation, pricing research, or SQL and multilevel modeling.
Experience evaluating AI or LLM-powered products, such as human evaluation design, rubrics or rater reliability.
Research across markets in LATAM, APAC or EMEA, including translating survey instruments.
Responsible AI-native research workflows, such as using LLM tools to speed up instrument design, coding of open-ended responses or analysis.
What we offer
Competitive compensation including but not limited to salary, future token rights, and/or equity (according to your preferences) — We are well-funded and believe that great talent deserves great compensation.
Full benefits (medical, vision, and dental) and flexible vacation policy (PTO).
Remote-first team across many countries — You will be an early team member helping shape our vision, culture, and design practices.
A+ colleagues — Our team includes alumni from: Goldman Sachs, Blackrock, Two Sigma, Bridgewater, SpaceX, AWS, Meta, Google, McKinsey, Circle, Uniswap.
Best-in-class investors — We are proud to be backed by leading crypto experts and VCs, including Pantera Capital, Founders Fund and Coinbase Ventures.
Location: Remote - USA
Workplace: Remote
SOLUTIONS ARCHITECT
Our Solutions Architecture team connects business priorities with practical technical solutions, helping customers understand how Chainalysis can support their most important objectives.
In this role, you will provide technical leadership throughout the customer journey. You will turn complex requirements into clear recommendations, help customers envision how our products fit into their operating environment, and guide them toward measurable business outcomes.
As a Solutions Architect, you'll develop a deep understanding of Chainalysis solutions and the problems our customers are trying to solve. You'll explain complex concepts in a clear, compelling way to technical practitioners, business leaders, and executive stakeholders. You'll also build practical, customer-specific solutions that support deployment, integration, adoption, and long-term value.
In this role, you'll:
- Serve as a core member of the account team, partnering closely with Sales, Services, Customer Success, Product, and Engineering.
- Take ownership of customer outcomes across the full lifecycle, from initial discovery and solution design through investigation support, compliance program delivery, deployment, enablement, adoption, and expansion.
- Lead discovery conversations that uncover customer objectives, operational pain points, use cases, technical constraints, and success criteria.
- Translate business and operational needs into clear technical requirements, solution designs, and implementation paths.
- Articulate Chainalysis capabilities in a way that is relevant to each customer's compliance, risk, fraud, investigations, or security environment.
- Create tailored demonstrations, proof-of-value experiences, and technical narratives that show how Chainalysis can address customer priorities.
- Conduct blockchain investigations, deliver compliance and regulatory guidance, and build technical solutions such as notebooks, dashboards, automation workflows, data integrations, reference architectures, and agentic workflows.
- Develop AI-assisted workflows that accelerate and automate investigations, analysis, and customer processes, adapted to each customer's operating model, data, controls, and risk framework.
- Design automation that fits into existing compliance, risk, fraud, investigations, or security operations rather than requiring customers to redesign how they work.
- Help customers access and operationalize Chainalysis data through APIs, integrations, and fit-for-purpose technical patterns.
- Provide guidance on solution architecture, API implementation, workflow design, data movement, and integration considerations.
- Drive platform adoption by connecting customer workflows to Chainalysis capabilities and identifying new use cases.
- Identify creative, responsible approaches to difficult customer problems, while balancing speed, scalability, security, maintainability, and measurable impact.
- Build trust through sound technical judgment, clear communication, reliable execution, and a strong understanding of the customer's business.
- Assemble the technical evidence base, including outcome data, consumption metrics, adoption analysis, and expansion signals, that supports quarterly impact reporting and renewal conversations.
- Build customer capability and self-sufficiency rather than creating ongoing dependence on the Solutions Architecture team.
- Own the feedback loop between customers and Product/Engineering, translating field insights and feature requirements into product improvements and bringing those improvements back to customers.
- Act as a trusted advisor to customers, meeting them at their current level of crypto-maturity and partnering with them to advance their understanding, processes, and outcomes.
- Represent Chainalysis at customer meetings, industry events, and conferences.
- Contribute to the wider Solutions Architecture team through reusable assets, knowledge sharing, internal initiatives, and better ways of working.
We're looking for candidates who have:
- Several years of experience in one or more relevant areas, such as financial services, compliance, investigations, fraud, cybersecurity, digital assets, transaction monitoring, sales engineering, solutions architecture, or enterprise product management.
- Experience making complex technical or operational concepts understandable to different audiences.
- Strong storytelling, presentation, and written communication skills, with the ability to engage both technical teams and executive stakeholders.
- A creative, structured, and investigative approach to solving challenging customer problems.
- Comfort working with technical tools and learning new technologies quickly. Experience with Python or another programming language, SQL, data analysis, notebooks, workflow automation, APIs, integrations, or AI tools is valuable.
- The curiosity and initiative to develop technical depth over time; you do not need to arrive with a complete technical stack, but you should enjoy investigating how things work and building the skills to solve new problems.
- The ability to operate effectively when requirements are ambiguous, information is incomplete, or the best path forward has not yet been defined.
- A collaborative, generous approach to working with others, including a willingness to share knowledge, seek input, and improve team practices.
- A demonstrated focus on measurable customer outcomes, not simply technical activity or product usage.
- An interest in blockchain and a desire to keep building your understanding of the technology, the market, and the customers we serve.
Total Compensation:
• Base Salary Range: $160,000-$185,000
• Offers Commission: 75/25 OTE
• Offers Equity
AI at Chainalysis
AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.
AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before.
About Chainalysis
Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation.
You belong here.
At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture.
We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here https://go.chainalysis.com/rs/503-FAP-074/images/Interview%20Accommodations%20Request.pdf. We can’t wait to meet you.
УдалённоseniorМожно работать из любой страны
УдалённоheadМожно работать из любой страны
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.