Вакансии

Разработка автоматизированных сценариев и инструментов, облегчающих тестирование и анализ эффективности антивируса. Ручной и автоматизированный поиск дефектов в разрабатываемом ПО, разработка PoC-эксплойтов.

Baader Bank is looking for an Operations Expert Securities Transfers to manage securities transfers, resolve complex cases, monitor settlement, and improve transfer processes.

Baader Bank is looking for a Junior Trader Securities Trading Market Making to quote prices, manage securities positions, maintain instruments, and optimize trading systems.

Location: Remote Roles - LATAM; San Jose, California, United States Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Opportunity The Americas Compliance team is hiring a Senior Compliance Manager to own compliance for OKXICE TSV. OKXICE TSV is the tokenized securities venue run by the OKX and Intercontinental Exchange joint venture under the SEC's Innovation Exemption, and it lets eligible US users trade tokenized US-listed stocks on-chain. You'll be the main person accountable for meeting the exemption's ongoing conditions. You'll work closely with Legal, Product, Web3 Risk Control and our AML, Sanctions and Surveillance teams. This is a new role on a new type of venue, so you'll help build the program as well as run it. What You'll Be Doing Own the compliance program for the venue's SEC exemption, including tracking each condition, testing controls and keeping records ready for regulatory examination. Manage the venue's public notice: review revisions, control versions, and make sure the notice matches how the product actually works. This includes corrections and material-change filings within the required deadlines. Run the issuer notice process from start to finish, including tracking delivery, handling objections and confirming each stock's listing date. Track and monitor TSV limits on an ongoing basis, including per-stock and volume limits against consolidated market data, periodic tier rechecks, trading halts and eligible stablecoins. Escalate breaches, significant operational events and required SEC notifications. Oversee participant onboarding and ongoing wallet maintenance and monitoring, including KYC/KYB, daily sanctions and on-chain wallet rescreening, keeping wallet-to-participant records current, and issuing and revoking the soulbound token (SBT) credential that grants access. Report to the OKXICE LLC Board of Managers and to Americas Compliance leadership, and manage and develop a TSV Compliance Analyst. What We Look For In You 8+ years of compliance experience at a broker-dealer, exchange, alternative trading system (ATS) or digital asset firm, with direct experience of SEC-regulated activity. Working knowledge of the federal securities laws that apply to trading venues, such as Regulation ATS, Regulation NMS and market manipulation rules, plus the ability to apply them to new market structures. Experience building or running compliance programs under regulatory conditions, exemptive relief or no-action positions. Familiarity with how blockchain-based trading works, including self-custodied wallets, smart contracts, liquidity pools and on-chain screening. Strong drafting skills, with experience turning complex technical or legal detail into clear public disclosures and procedures. Sound judgment and the ability to work with Product, Engineering and Legal teams across time zones. Nice to Haves Experience with tokenized securities, transfer agents or digital asset broker-dealers. Exposure to OFAC sanctions programs and blocked property handling for on-chain assets. Experience reporting to a board or joint venture governance body. A JD or a similar legal background. Perks & Benefits Competitive total compensation package Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! OKX Statement: OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

The AI Security Sales Executive is a quota-carrying sales role dedicated to Abnormal's AI Security suite: five products built to help customers govern AI, secure AI, and defend against rogue AI. Own AI Security in your region.

Без коммерческого опыта — ок, но за плечами должна быть практика: пет-проекты, CTF, разборы семплов, свои утилиты под Windows. - Знакомство с MASM, LLVM -.NET / C# для assembly loader'ов Писать боевой инструментарий под Windows: loader'ы, payload'ы, пост-эксплуатацию.

Location: Remote (Canada) Workplace: Remote BUILD SOMETHING PEOPLE LOVE Wealthsimple is Canada’s leading financial innovator. The company offers a full suite of simple, sophisticated financial products across managed investing, do-it-yourself trading, cryptocurrency, tax filing, spending and saving. Wealthsimple currently serves more than 4 million Canadians and holds over $169 billion in assets under administration. The company was founded in 2014 by a team of financial experts and technology entrepreneurs, and is headquartered in Toronto, Canada. We're proud of what we've built — and we're just getting started. Read our Culture Manual https://www.wealthsimple.com/en-ca/culture and learn more about how we work https://www.wealthsimple.com/en-ca/careers. ABOUT THE ROLE We are looking for a curious, hands-on security professional early in their career to join our Detection & Response team as an Incident Response Developer. You’ll report to the Manager of Detection & Response and work closely with senior responders to investigate security incidents, improve our response processes and build automation that helps us scale. You’ll get hands-on experience with real incidents and the mentorship to grow into the craft. The ideal candidate has a foundation in security fundamentals, some hands-on exposure to investigations or security operations, and real enthusiasm for automating repetitive work. You’re a problem-solver who stays calm when things get busy, asks good questions and wants to learn from experienced teammates. WHAT YOU'LL DO - Strengthen our incident response capabilities by building relationships with Engineering teams, writing new playbooks and automating manual steps. - Own investigations from start to finish: triage, evidence collection, analysis, containment and documentation. - Act as Incident Commander for low- and medium-severity incidents, and support senior responders on high-severity ones. - Turn recurring incident types into repeatable workflows (intake, playbook, automation, closure), from the first design through to the tooling behind them. - Report incident trends and metrics that inform team priorities. - Work with our Security Engineers to monitor, refine and expand our SIEM and SOAR platforms. - Work with the HR, Fraud and Privacy teams on investigations into potentially fraudulent and sensitive activity, including insider threats and snooping. - Participate in an on-call rotation for responding to security incidents, internal questions and operational support. - Work with the detection engineering team to develop new, high-fidelity detection rules based on incident trends and threat intelligence. SKILLS YOU BRING - 3+ years of experience in cybersecurity. - 1–2+ years of hands-on incident response experience, owning investigations end to end. - The ability to coordinate responders and stakeholders during an incident, and know when to escalate. - Experience using a SIEM to turn noise into signal, including writing queries and tuning alerts. - Proficiency with AI coding tools (Claude Code, Cursor, ChatGPT, etc.) to build and maintain automation. We invest in tooling (automation, Slack bots, AI agents) so responders spend their energy on the decisions that matter. - A workflow mindset: you can look at a messy, recurring problem and break it into steps that tooling or AI can take on. - Working knowledge of cloud infrastructure (e.g., AWS, GCP or Azure) and how to investigate within it. - Discretion and sound judgment when handling sensitive information, such as HR and insider-threat matters. - Clear, honest and inclusive communication with both internal and external stakeholders. - Good judgment under pressure, in technical problem solving and in working across teams. - A strong desire to learn from the team and others. We value making one another successful! WHY WEALTHSIMPLE? 🌸 Top-tier health benefits and life insurance 📈 Long-term group savings with employer match, through Wealthsimple for Business 🌴 20 vacation days, 4 wellness days, and unlimited sick and mental health days per year* ✈️ 90 days away: work outside Canada for up to 90 days per year* 👥 Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS 🌎 We are a hybrid team with over 1,500 employees across North America. The people are one of the best parts of working here: you'll collaborate with incredibly talented, curious, and driven teammates who are deeply committed to doing great work. *Unlimited paid sick days, Wellness Days and the 90 day away program do not apply to certain roles. ICYMI Technology & Innovation at Wealthsimple: We move quickly and build thoughtfully. That means we're always looking for better ways to work — whether that's new tools, AI, or rethinking how we approach a problem. We don't expect you to have all the answers, but we do expect curiosity and a willingness to evolve alongside the products we're building. Inclusion Statement: We're building products for a diverse world, and we need a diverse team to do it well. We strongly encourage applications from everyone, regardless of race, religion, colour, national origin, gender, sexual orientation, age, marital status, or disability status. Accessibility Statement: We're committed to an accessible hiring experience. If you need any accommodations throughout the interview process, please let us know — we'll work with you to make sure you have what you need. We also welcome any feedback on how we can better accommodate candidates with accessibility needs. AI in Hiring: We may use artificial intelligence (AI) tools to support parts of our hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our team but don't replace human judgment – all final hiring decisions are made by people. If you have questions about how your data is used, reach out to us.

Location: Remote (Canada) Workplace: Remote BUILD SOMETHING PEOPLE LOVE Wealthsimple is Canada’s leading financial innovator. The company offers a full suite of simple, sophisticated financial products across managed investing, do-it-yourself trading, cryptocurrency, tax filing, spending and saving. Wealthsimple currently serves more than 4 million Canadians and holds over $169 billion in assets under administration. The company was founded in 2014 by a team of financial experts and technology entrepreneurs, and is headquartered in Toronto, Canada. We're proud of what we've built — and we're just getting started. Read our Culture Manual https://www.wealthsimple.com/en-ca/culture and learn more about how we work https://www.wealthsimple.com/en-ca/careers. ABOUT THE ROLE We are seeking an experienced and hands-on security professional to join our Detection & Response team as a Senior Incident Response Developer. Reporting to the Manager of Detection & Response, this is a critical, technical role focused on strengthening our ability to respond to and recover from security threats. You will be a key player in investigating complex security incidents, building scalable response processes, and taking command when it matters most. The ideal candidate has a deep, technical background in hands-on incident response and a keen eye for where automation can improve and scale our capabilities. You are a natural problem-solver who remains composed under pressure, a senior team member who enjoys mentoring others in the craft of incident response, and a builder who can create the playbooks, scripts, and processes needed to protect our company and our customers. Between incidents, you'll build the tooling and workflows that make the next one faster and easier to handle. WHAT YOU'LL DO - Help take our security incident response capabilities to the next level by building relationships with Engineering teams, new playbooks and finding opportunities for automation. - Grow others in the art of Incident Response to support the program and increase consistency in outcomes. - Play a key role in building and shaping the Security Incident Response team. - Take the role of Incident Commander to bring incidents to resolution. - Turn recurring incident types into repeatable workflows (intake, playbook, automation, closure) so they become routine work for the team. - Help shape the direction of investment by informing the business of trends and relevant metrics. - Partner with our Security Engineers to monitor, refine, and expand our SIEM and SOAR platforms. - Coordinate with HR, Fraud and Privacy teams to investigate potential fraudulent and sensitive activity including insider threats and snooping. - Participate in an on-call rotation for responding to security incidents, internal questions and operational support. - Partner with the detection engineering function to develop new, high-fidelity detection rules based on incident trends and threat intelligence. SKILLS YOU BRING - 5+ years of experience in the Cybersecurity domain. - 3+ years experience being an Incident Manager, taking ownership of investigations. - Ability to lead a team during high-stress situations, providing direction and support to team members. - Understand how to turn noise into signals using a SIEM. - Proficiency with AI coding (Claude Code, Cursor, ChatGPT etc). We invest in tooling (automation, Slack bots, AI agents) so responders spend their energy on the decisions that matter. - Thinks in workflows: can look at a messy, recurring problem and break it into steps that tooling or AI can take on. - Knowledge of and familiarity with cloud infrastructure. - Believes that honesty, transparency, and inclusivity are important when communicating with both internal and external stakeholders. - Demonstrates good judgment under pressure both in terms of technical problem solving and collaborating cross functionally. - Eager to learn from the team and others. We value making one another successful! WHY WEALTHSIMPLE? 🌸 Top-tier health benefits and life insurance 📈 Long-term group savings with employer match, through Wealthsimple for Business 🌴 20 vacation days, 4 wellness days, and unlimited sick and mental health days per year* ✈️ 90 days away: work outside Canada for up to 90 days per year* 👥 Employee resource groups, including Rainbow (2SLGBTQ), Women of WS, and Black at WS 🌎 We are a hybrid team with over 1,500 employees across North America. The people are one of the best parts of working here: you'll collaborate with incredibly talented, curious, and driven teammates who are deeply committed to doing great work. *Unlimited paid sick days, Wellness Days and the 90 day away program do not apply to certain roles. ICYMI Technology & Innovation at Wealthsimple: We move quickly and build thoughtfully. That means we're always looking for better ways to work — whether that's new tools, AI, or rethinking how we approach a problem. We don't expect you to have all the answers, but we do expect curiosity and a willingness to evolve alongside the products we're building. Inclusion Statement: We're building products for a diverse world, and we need a diverse team to do it well. We strongly encourage applications from everyone, regardless of race, religion, colour, national origin, gender, sexual orientation, age, marital status, or disability status. Accessibility Statement: We're committed to an accessible hiring experience. If you need any accommodations throughout the interview process, please let us know — we'll work with you to make sure you have what you need. We also welcome any feedback on how we can better accommodate candidates with accessibility needs. AI in Hiring: We may use artificial intelligence (AI) tools to support parts of our hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our team but don't replace human judgment – all final hiring decisions are made by people. If you have questions about how your data is used, reach out to us.

Location: Remote Canada At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. About the InfoSec team At Affirm, security is integral to our mission of building honest financial products and driving the company’s long-term success. The Security Operations and Resilience Engineering (SOR) program is the foundation of our prevention, detection, and response capabilities, helping safeguard Affirm’s assets and enterprise security ecosystem. As part of our Security Team, you’ll join a group of passionate, highly skilled professionals redefining fintech security through collaboration, innovation, and a team-first mindset. About the role We’re seeking an experienced security leader to lead Affirm’s global security investigations and incident response program as we expand internationally. This leader will guide complex investigations and incidents while building the operating practices, readiness, and technical capabilities needed to support consistent response across regions and scale with the business. In this role, you’ll lead a technically deep, engineering-oriented team that manages major incidents and builds better response capabilities. You’ll direct complex investigations while staying close to the technical work, bring structure to ambiguity, guide responders and executives through critical decisions, and turn incident findings into durable engineering improvements. You’ll also help shape AI-enabled investigation workflows, including agentic approaches to evidence gathering, analysis, and coordination, with human oversight and clear security, privacy, and operational safeguards. What you’ll do Lead security incidents and investigations across the full lifecycle, from initial assessment through containment, remediation, recovery, and post-incident review. Serve as incident commander for major security events, set clear roles and decision paths, and coordinate large technical and cross-functional response groups through ambiguity. Guide technical investigations and root-cause analyses with engineering teams, validate fixes, and drive durable corrective actions across the business. Manage and develop a technical, engineering-oriented response team, set priorities, coach engineers, and build incident command depth and consistent execution across regions. Set operating objectives and global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and measures of response effectiveness. Drive engineering improvements to response tooling, security telemetry, detection, and automation, including agentic AI workflows that support investigation and analysis with appropriate human oversight and security and privacy safeguards. Translate complex security and incident metrics into actionable executive dashboards and board-level risk reporting, surfacing trends and remediation priorities that drive cross-functional action. What we look for 10+ years of experience in security operations, incident response, or a related security field. Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments, from detection and assessment through containment, remediation, and recovery. Strong technical foundation in security operations, with depth in investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments. Experience in fintech or payments, and familiarity with using threat intelligence to inform response, are nice to have. Experience managing and developing technical or engineering teams, setting direction and priorities, coaching engineers, and guiding hands-on incident work alongside engineering improvements. Track record of building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, operational measures, and security tooling such as SIEM, EDR, or SOAR. Excellent written and verbal communication, including translating complex incidents, security metrics, and customer or business impact into clear executive updates and board-level reporting, and aligning cross-functional partners. Demonstrated ability to independently move ambiguous work forward, make sound decisions with incomplete information, and drive investigations, remediation, and program improvements to completion with measurable results. An AI-forward mindset and sound judgment in applying AI to security operations, including agentic investigation or automation workflows with human oversight and appropriate security, privacy, and operational safeguards. Pay Grade - R Equity Grade - 9 Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company). CAN base pay range per year: $ 209,000 - 269,000 Location - Remote Canada This remote role is open only to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan. #LI Remote Remote-first with flexibility built in Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience. Benefits designed for you Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights: Health coverage at no cost: We cover 100% of premiums for employees and their dependents. Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you. Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to. Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount. We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help. For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law. By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and consent to the use of your personal information as described.

Location: Remote US At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. About the InfoSec team At Affirm, security is integral to our mission of building honest financial products and driving the company’s long-term success. The Security Operations and Resilience Engineering (SOR) program is the foundation of our prevention, detection, and response capabilities, helping safeguard Affirm’s assets and enterprise security ecosystem. As part of our Security Team, you’ll join a group of passionate, highly skilled professionals redefining fintech security through collaboration, innovation, and a team-first mindset. About the role We’re seeking an experienced security leader to lead Affirm’s global security investigations and incident response program as we expand internationally. This leader will guide complex investigations and incidents while building the operating practices, readiness, and technical capabilities needed to support consistent response across regions and scale with the business. In this role, you’ll lead a technically deep, engineering-oriented team that manages major incidents and builds better response capabilities. You’ll direct complex investigations while staying close to the technical work, bring structure to ambiguity, guide responders and executives through critical decisions, and turn incident findings into durable engineering improvements. You’ll also help shape AI-enabled investigation workflows, including agentic approaches to evidence gathering, analysis, and coordination, with human oversight and clear security, privacy, and operational safeguards. What you’ll do Lead security incidents and investigations across the full lifecycle, from initial assessment through containment, remediation, recovery, and post-incident review. Serve as incident commander for major security events, set clear roles and decision paths, and coordinate large technical and cross-functional response groups through ambiguity. Guide technical investigations and root-cause analyses with engineering teams, validate fixes, and drive durable corrective actions across the business. Manage and develop a technical, engineering-oriented response team, set priorities, coach engineers, and build incident command depth and consistent execution across regions. Set operating objectives and global readiness practices, including playbooks, escalation paths, exercises, on-call readiness, postmortems, and measures of response effectiveness. Drive engineering improvements to response tooling, security telemetry, detection, and automation, including agentic AI workflows that support investigation and analysis with appropriate human oversight and security and privacy safeguards. Translate complex security and incident metrics into actionable executive dashboards and board-level risk reporting, surfacing trends and remediation priorities that drive cross-functional action. What we look for 10+ years of experience in security operations, incident response, or a related security field. Proven ability to lead major security incidents and investigations in technology-driven, cloud-native environments, from detection and assessment through containment, remediation, and recovery. Strong technical foundation in security operations, with depth in investigations, incident response, detection, root-cause analysis, and/or digital forensics across cloud and enterprise environments. Experience in fintech or payments, and familiarity with using threat intelligence to inform response, are nice to have. Experience managing and developing technical or engineering teams, setting direction and priorities, coaching engineers, and guiding hands-on incident work alongside engineering improvements. Track record of building scalable response capabilities through repeatable practices, on-call readiness, exercises, postmortems, operational measures, and security tooling such as SIEM, EDR, or SOAR. Excellent written and verbal communication, including translating complex incidents, security metrics, and customer or business impact into clear executive updates and board-level reporting, and aligning cross-functional partners. Demonstrated ability to independently move ambiguous work forward, make sound decisions with incomplete information, and drive investigations, remediation, and program improvements to completion with measurable results. An AI-forward mindset and sound judgment in applying AI to security operations, including agentic investigation or automation workflows with human oversight and appropriate security, privacy, and operational safeguards. Pay Grade - R Equity Grade - 15 Employees new to Affirm typically come in at the start of the pay range . Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.) USA base pay range (CA, WA, NY, NJ, CT) per year: $ 265,000 - 325,000 USA base pay range (all other U.S. states) per year: $ 236,000 - 296,000 #LI-Remote Remote-first with flexibility built in Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience. Benefits designed for you Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights: Health coverage at no cost: We cover 100% of premiums for employees and their dependents. Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you. Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to. Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount. We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help. For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law. By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and consent to the use of your personal information as described.

Location: US, San Diego, CA Workplace: OnSite Here at Humanoid, we believe in a future where robots amplify human potential. That’s why we’ve set out on a mission to build the world’s most capable, commercially-scalable, and safe humanoid robots. We’re bringing that mission to life with HMND‑01 - our rapidly developed humanoid platform being deployed in real industrial environments - and we’re growing the team to take it even further. ABOUT THE ROLE We’re looking for a Software Engineer II to join our Platform Infrastructure team in San Diego. You’ll help build the software and tools that enable our robots to run trusted software on trusted hardware, working with security, firmware, and platform engineers across the device lifecycle. WHAT YOU'LL DO - Build and maintain software and tools for trusted boot and device provisioning, working with NVIDIA secure boot and UEFI. For example, you might help bring up a secure boot flow on a new device or build tooling to provision and verify device credentials. - Contribute to device trust and key protection using hardware roots of trust, including Trusted Platform Modules (TPMs), and security technologies such as ARM TrustZone. - Contribute to device key management though the use of Hardware Security Modules (HSMs). - Write, test, and debug software and scripts in Linux, and investigate issues across software and hardware. - Identify and reduce attack surfaces across device software, boot flows, and supporting tools. - Collaborate with security, firmware, cloud, manufacturing, and other engineering teams through design discussions, code reviews, and documentation; own well-scoped projects from design through implementation and testing, with input from experienced teammates. WHAT YOU BRING You’re a curious, collaborative engineer who takes ownership, works through unfamiliar problems, and wants to deepen your skills in device security. You’ll bring: - Software engineering experience — Typically 1–3 years of full-time experience building, testing, and maintaining production-quality software, or equivalent experience. - You have a strong foundation in object-oriented programming and software design. - You can read and reason about code, identify logic errors, and learn to contribute across C++, Python, and Rust codebases - Prior experience in all three languages is not required. B.S. or M.S. in CS, CE, EE, or a related field. - AI-assisted development — You’re comfortable using AI-assisted development tools and can understand, review, and validate the code they produce. - Security fundamentals — Familiarity with authentication, encryption, cryptographic keys, and trust boundaries, and an interest in applying them to hardware devices. - Linux and tooling — Comfort working in Linux and using scripting languages such as Python or Bash to automate tasks, build tools, and investigate problems. - Problem-solving and collaboration — A thoughtful approach to unfamiliar problems, attention to detail, and the ability to communicate clearly, seek feedback, and follow work through. - Experience with key management and/or NVIDIA platforms, such as Jetson, is a plus - Ability to work on-site at our San Diego office. WHAT WE OFFER - Comprehensive health coverage for US‑based employees, including fully paid medical, dental, and vision insurance, with virtual care and employee assistance resources. - Meaningful time off to rest and recharge: 23 days of PTO (accrued), separate sick leave, and paid company holidays. - 401(k) retirement plan with employer match. - Equity included–we believe builders should share in what they build. - Free daily catered lunch, snacks, and drinks in‑office. - Collaboration with top‑tier engineers, researchers, and product experts in AI and robotics. - Freedom to influence the product and own key initiatives. For this role in California, the expected base salary range is $123,000-$154,000 USD per year; your placement in that range depends on how your experience maps to our internal leveling.

Upvest is looking for a Securities Operations Intern to manage securities and PEA transfers, reconciliations, exceptions, tax records, and operational reporting.

The AI Security Sales Executive is a quota-carrying sales role dedicated to Abnormal's AI Security suite: five products built to help customers govern AI, secure AI, and defend against rogue AI. Own AI Security in your region.

Location: Москва Workplace: Офис В Yandex Cloud мы запустили линейку продуктов по информационной безопасности. Ищем специалиста, который будет работать на этапе пресейла: общаться с заказчиками, говорить на одном языке с CISO и специалистами по ИБ. Откликайтесь, если знаете рынок средств и сервисов безопасности. В Yandex Cloud мы запустили линейку продуктов по информационной безопасности и ищем специалиста, который будет работать на этапе пресейла: общаться с заказчиками, говорить на одном языке с CISO и специалистами по ИБ. Вам предстоит решать задачи на стыке продаж, развития бизнеса и продуктов — помогать компаниям разного масштаба подбирать эффективные решения для защиты облачной и on-premises-инфраструктуры. Обязанности Взаимодействие со специалистами смежных команд Вы будете работать в роли пресейл-менеджера с командами бизнеса, IT и ИБ заказчиков, а также с отделами продаж, развития продуктов, архитекторами и компаниями-партнёрами. Презентации и демонстрации Вам предстоит проводить презентации и демонстрации продуктов, организовывать встречи для защиты решений перед заказчиком. Важно уверенно обсуждать и бизнес-метрики, и технические аспекты. Анализ потребностей и разработка решений Вы будете прорабатывать архитектуру решений для заказчиков вместе с техническими специалистами компании, а также запускать и контролировать пилотные проекты. Развитие ИБ в отраслях Вам предстоит формировать воронку продаж, приоритизировать сделки, прогнозировать выручку и разрабатывать долгосрочную стратегию развития ключевых заказчиков. Нужно будет участвовать в мероприятиях, активно генерировать лиды и проводить обучения по продуктам и услугам ИБ компании. Больше о том, что под капотом платформы Yandex Cloud, — в канале Inside Yandex Cloud Требования * Знаете рынок средств и сервисов безопасности * Участвовали в этапе пресейла и продаже решений (Solution Sales) * Готовы погружаться в технологии, вопросы продаж и бюджетирования решений у заказчиков * Инициативны и проактивны * Обладаете сильными софт-скилами Будет плюсом * Владеете английским языком на уровне, достаточном для проведения презентаций и свободного общения с заказчиками

Location: Москва; Санкт-Петербург; Нижний Новгород Workplace: Офис, Гибридный IAM (Identity & Access Management) — один из ключевых сервисов Yandex Cloud, отвечающий за аутентификацию, авторизацию и многие другие задачи. Мы ищем опытного разработчика в core-команду IAM. Вам предстоит заниматься широким кругом задач, связанных с авторизацией и аутентификацией. IAM (Identity & Access Management) — один из ключевых сервисов Yandex Cloud, отвечающий за аутентификацию, авторизацию и многие другие задачи. Мы ищем опытного разработчика в core-команду IAM. Вам предстоит заниматься широким кругом задач, связанных с авторизацией и аутентификацией. Вашей выделенной зоной ответственности будет развитие клиентов к сервису авторизации, которые используются во многих сервисах Yandex Cloud и Яндекса. Потребуется писать расширяемый код под потребности самых разных сервисов. Подробнее о нашем подразделении читайте на странице команды Yandex Cloud Security . Обязанности Развитие системы авторизации Это ключевой продуктовый челлендж. Предстоит работать над гибкими ABAC-like ACL, консистентной авторизацией, а также развивать авторизацию как сервис. Технические челленджи В вашу зону ответственности будет входить построение и развитие control-plane для гибкой системы авторизации. Потребуются навыки проектирования модульного сервиса для control-plane. Стабильность сервисов IAM Вы будете отвечать за управление нагрузкой в одном из самых нагруженных сервисов Yandex Cloud, внедрение различных стратегий кеширования и широкий спектр задач оптимизации. Развитие продукта IAM в зоне ответственности core-команды Вам предстоит расширять функциональность авторизации, развивать движок управления политиками, создавать для пользователей Yandex Cloud новые инструменты анализа уязвимостей. Больше о том, что под капотом платформы Yandex Cloud, — в канале Inside Yandex Cloud Требования * Хорошо знаете Java, готовы изучать Go * Строили и поддерживали отказоустойчивые системы * Работали с реляционными или нереляционными хранилищами * Ответственно относитесь к документации, качеству и читаемости кода Будет плюсом * Знаете Go

Платформа Security Deck помогает компаниям снижать риски в облачной инфраструктуре. Мы ищем архитектора, который станет техническим партнёром клиентов и поможет им пройти путь от знакомства с Security Deck до её использования. Это роль на стыке cloud security, архитектуры и консалтинга. Мы развиваем Security Deck — Cloud-Native Application Protection Platform (CNAPP) Yandex Cloud, которая помогает компаниям видеть и снижать риски в облачной инфраструктуре. Security Deck объединяет управление конфигурацией и соответствием требованиям, анализ прав доступа, защиту Kubernetes и данных, инвентаризацию активов и работу с проблемами безопасности. Наша цель — дать специалистам по ИБ единый инструмент, который помогает не просто находить нарушения, а понимать их контекст, приоритизировать риски и доводить исправления до результата. Мы ищем архитектора, который станет техническим партнёром клиентов и поможет им проходить весь путь от знакомства с Security Deck до промышленного использования. Ваша миссия — связывать возможности Security Deck с реальными задачами заказчиков. Вы будете разбираться в облачной архитектуре клиентов, моделях угроз и процессах ИБ, проектировать целевой сценарий использования CNAPP, проводить демонстрации и пилоты, а также помогать заказчикам внедрять Security Deck в их технологический и организационный контур. Это роль на стыке cloud security, архитектуры, консалтинга и развития продукта. Обязанности Технический пресейл и работа с заказчиками Вы будете выявлять задачи, ограничения и критерии успеха заказчика; изучать архитектуру облачной инфраструктуры, модель доступа и процессы управления безопасностью; проводить технические презентации и демонстрации Security Deck для ИБ-, DevSecOps-, DevOps- и Cloud-подразделений; объяснять ценность CNAPP техническим специалистам, руководителям ИБ и бизнес-заказчикам; готовить архитектурные схемы, технические предложения, планы внедрения и ответы на требования заказчиков; участвовать в сложных конкурентных сделках и аргументированно сравнивать Security Deck с другими CNAPP- и CSPM-решениями. Проектирование сценариев Security Deck Вместе с клиентом вы определите, как Security Deck должен использоваться в его инфраструктуре. В эту задачу входят инвентаризация облачных активов и единое представление об их защищённости, поиск небезопасных конфигураций и контроль cloud security posture, анализ избыточных прав пользователей и сервисных аккаунтов, контроль безопасности Kubernetes, обнаружение рисков хранения и обработки данных, проверка соответствия политикам и стандартам, приоритизация findings с учётом критичности ресурса, настройка уведомлений, исключений и процессов устранения, интеграция с SIEM, SOAR, Service Desk, построение сценариев для гибридной и мультиоблачной инфраструктуры. Проведение пилотов и внедрений Вам предстоит брать на себя техническое ведение пилотных проектов: это формирование scope и критериев успешности, план работ и программа испытаний, подключение облачной инфраструктуры и источников данных, настройка политик, правил и областей контроля, анализ результатов сканирования, совместный разбор findings с командами ИБ и эксплуатации, рекомендации об устранении нарушений, демонстрация измеримого результата и помощь в переходе от пилота к промышленному использованию. Иногда потребуется самостоятельно разобраться в конфигурации IAM или Kubernetes, проанализировать логи, проверить API-вызовы, подготовить Terraform-конфигурацию либо помочь клиенту сформировать политику безопасности. Развитие продукта Вы как один из главных источников клиентской экспертизы для продуктовой команды будете собирать и структурировать обратную связь, отличать частные запросы клиентов от системных продуктовых потребностей, формировать feature requests и требования к интеграциям, выявлять пробелы в пользовательском пути, помогать приоритизировать развитие CSPM, KSPM, CIEM, DSPM и других компонентов платформы, прорабатывать новые сценарии и проверять их на реальных заказчиках, анализировать причины перехода пилотов в эксплуатацию. Развитие экспертизы и базы знаний Вам предстоит создавать типовые архитектуры внедрения Security Deck, готовить документацию, инструкции, ТЗ и программы испытаний, описывать сценарии устранения типовых проблем безопасности, разрабатывать демостенды и материалы для пилотов, обучать команды продаж, партнёров и технических специалистов, проводить воркшопы, вебинары и разборы клиентских кейсов. Больше о том, что под капотом платформы Yandex Cloud, — в канале Inside Yandex Cloud Требования * Больше трёх лет работали в customer-facing-роли: архитектором, пресейл-инженером, консультантом или специалистом по внедрению решений ИБ * Понимаете архитектуру публичных облаков и модель разделения ответственности * Знаете основные риски облачной инфраструктуры: ошибки конфигурации, избыточные права, публичный доступ, небезопасные сетевые настройки, утечки секретов и недостаточную наблюдаемость * Понимаете назначение CNAPP, CSPM, KSPM, CIEM, DSPM или близких классов решений * Знакомы с IAM, сервисными аккаунтами, ролями и принципом минимальных привилегий * Уверенно работаете с Kubernetes и понимаете типичные риски безопасности контейнерной инфраструктуры * Умеете читать логи, анализировать findings и находить первопричину проблемы * Можете спроектировать пилот, сформулировать критерии успеха и довести проект до измеримого результата * Умеете объяснять сложные технические вопросы как инженерам, так и руководителям * Готовы самостоятельно погружаться в архитектуру и задачи заказчика, а не ограничиваться демонстрацией интерфейса * Читаете техническую документацию на английском языке Будет плюсом * Работали с Yandex Cloud, AWS, Azure, GCP или другими облачными платформами * Внедряли CNAPP, CSPM, SIEM, SOAR, VM, EDR, DLP или решения для безопасности Kubernetes * Знакомы с Terraform, CLI и API облачных платформ * Понимаете DevSecOps-практики и процессы безопасной разработки * Работали с compliance-требованиями и стандартами: PCI DSS, 152-ФЗ, ГОСТ, ISO 27001 и другими * Участвовали в построении модели угроз или облачной архитектуры безопасности * Интегрировали средства защиты с SIEM, Service Desk и системами автоматизации * Проводили технические воркшопы, вебинары или публичные выступления * Имеете сертификаты в области облачных технологий или информационной безопасности

Location: Москва В Центре Робототехники Сбера мы занимаемся созданием универсального воплощенного ИИ для роботов, который способен управлять разнообразными физическими воплощениями. Кроме этого, одним из ключевых направлений нашей работы является разработка антропоморфного робота общего назначения, не безызвестного Грина. Обязанности * проведение Red Teaming и пентеста ИИ-агентов: поиск промпт-инъекций, отравлений данных, jailbreaks и обходов системных инструкций. * проектирование и внедрение защиты агентов: системы модерации, детекторы, изоляция, контроль цепочек инструментов. * консультирование инженерных команд по безопасной интеграции агентов с корпоративными системами и интернетом, помощь в проектировании архитектуры * создание практических гайдлайнов по работе с агентами (выдаче API-ключей, ограничению доступа к файловой системе и проверке действий агента). * проведение код-ревью пайплайнов агентов с фокусом на безопасность LLM-вызовов и обработку внешних данных. * аудит и поиск уязвимостей в моделях управления роботом: защита от состязательных (adversarial) атак, визуальных обманок и злонамеренного переобучения. * проектирование безопасных ML-контуров * внедрение практик MLSecOps: сканирование весов моделей, контроль целостности датасетов, аудит-логирование решений. * настройка безопасного деплоя: изоляция инференса в песочницах, управление секретами, мониторинг аномалий в поведении агентов. * участие во внутренних митапах и воркшопах для работников по безопасности ИИ. Требования * опыт в AppSec, MLSec или Red Team от 4 лет, из них 1.5–2 года — с LLM и автономными агентами * глубокое понимание механики LLM (контексты, tool calling, RAG), профиля нарушителя и угроз * практический опыт Red Teaming ИИ-агентов: поиск промпт-инъекций, отравлений данных, jailbreaks * опыт проектирования защиты агентов: системы модерации, детекторы, изоляция, контроль цепочек инструментов * навыки консультирования инженеров и проектирования безопасной архитектуры интеграции агентов * опыт проведения код-ревью пайплайнов агентов (Python/TypeScript) с фокусом на безопасность LLM-вызовов * опыт аудита моделей компьютерного зрения и управления роботами (adversarial attacks, визуальные обманки) * практическое внедрение MLSecOps: сканирование весов, контроль датасетов, аудит-логирование решений * навыки безопасного деплоя: изоляция инференса, управление секретами, мониторинг аномалий * Владение Python для написания PoC и инструментов, уверенная работа с Linux. Условия * офисный/гибридный формат в Москве (Автозаводская 23а к2) * ежегодный пересмотр зарплаты и годовая премия * расширенный ДМС и льготное страхование для семьи * уникальная система обучения Сбера для профессионального и карьерного развития * выгодная ипотека для сотрудников * подписка Прайм с возможностью совместного использования на трёх близких * вознаграждение за рекомендацию друзей в команду Сбера * корпоративная пенсионная программа.

Location: Remote-Friendly (Travel Required) | San Francisco, CA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Claude is trained and served on hardware in data centers Anthropic operates and in sites partners build and run for us. DCSE secures that footprint: the sites, the hardware moving through them, and the people and vendors who touch it. Security at that scale runs on data, and you'll be the engineer who owns it and the systems that produce it: component-level hardware inventory and chain of custody, fed by software that runs at our sites and on hosts, and continuous control monitoring, with the posture calculations that decide what each site is cleared to run. You set the architecture, agree schemas and interfaces with the teams, operators and vendors that own the sources, build the pipelines, stores and tools, and run what you ship. The goal is security that runs itself: custody, access and evidence verified continuously from records, with tools and AI agents doing the reviews. We favor simple, standard controls and tools that can be verified over elaborate ones. We use Claude throughout our engineering workflow and expect you to as well. You'll work with the rest of DCSE, including the engineers on its security monitoring platform, with Anthropic's compute and data center operations teams, and directly with data center operators, hardware vendors and logistics providers. The role is based in San Francisco, with remote applicants in the US considered, and involves regular travel to data center sites, which are critical infrastructure. Key responsibilities Hardware inventory and chain of custody: own the component-level record of what hardware exists, where it is and who has handled it: the data model, the pipelines that join inventory and custody events from many source systems, change history on every record, and the tamper-evident stores behind it Tools, automation and AI agents: build the tools and agents the team runs on this data: reconciliation, audit evidence exports, custody checks. When a review keeps costing people time, you build the tool or agent that retires it Custody workflows and field software: build the workflows and the site and host software that capture custody events as they happen (a receipt, a move, a data wipe, a decommission) and enforce who is authorized to record them Continuous control monitoring and posture: own the pipelines that turn check outcomes, assessment results and findings into per-control and per-site measures over time, against the compliance frameworks we and our partners are assessed against, and the posture calculation that decides what a site is cleared to run Data quality: build coverage checks, reconciliation against sources and alerts on a silent or drifting feed, so a wrong or missing record is caught the same day; own retention and access controls on the records Integration and reporting: agree schemas and interfaces with the engineers who run the security monitoring platform, and build the query surfaces and reports the team, site leads and leadership use directly Minimum qualifications Have designed and run production data systems (relational schemas, change data capture, batch or streaming pipelines and the services around them) and kept them correct: coverage measured, records reconciled against the source, alerts on silence, and a design that expects records to get corrupted or lost Have integrated with systems you did not control (inventory tools, ticketing systems, vendor APIs) and built data models that outlive any one source Have shipped software that runs outside a central service (host agents, site-local services, edge collectors) and kept it correct in the field, or built metrics a team made decisions on and defended them when challenged Have worked hands-on with data about physical assets or security controls: a hardware fleet, data center or supply chain inventory, asset custody, or the control and evidence data of a security or compliance program Read and review other people's code, and build with AI coding agents using Git and code review Own a domain end to end: set the approach, design and build it with the teams and vendors whose systems it depends on, and run it as something people use every day Write SQL and at least one general-purpose programming language well Preferred qualifications Experience with asset management, supply chain or warehouse systems where serialized tracking and custody transfer are the core problem Experience building continuous control monitoring or metrics for a security or compliance program, or producing evidence an assessor accepted, for example against NIST SP 800-53, ISO 27001 or SOC 2 Experience with risk or posture scoring that combines control results, findings and other evidence into a measure people make decisions on Familiarity with data center hardware and its lifecycle from receipt to decommission, and with sites and parties you did not control: colocation, cloud or GPU cloud operators, hardware manufacturers, logistics providers Have run software on many hosts or at remote sites with versioned rollout and a way to know each copy is still reporting Have built AI agents or automation that replaced recurring manual work The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $405,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.