Вакансии

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role The Security Risk team is responsible for how Anthropic identifies, prioritizes, and drives treatment of its most important security risks. We are rebuilding risk management to operate as an engineering function through automation and AI-native platforms to enable decision making. The systems we assess span Anthropic’s full security landscape, from authorization primitives to cryptographic foundations, so the team needs breadth across domains and the ability to go deep in any of them. Security Risk, in deep partnership with Security Engineering, will help define the security program to shape how both engineers and non-engineers build and ship software. The conventional GRC playbook was not built for a company shipping frontier AI. You will help define what replaces it, with a direct line to CISO-level decisions and the mandate to build the AI-native platform underneath. You’ll work across a breadth of areas from identity and secrets management to infrastructure security, with your focus shaped by your strengths, ability to learn quickly, and the team’s priorities. This is largely greenfield work, and you will help define the architecture and discipline. Key responsibilities Take ownership of Anthropic’s most complex security risk problems and drive them end to end with minimal oversight, turning ambiguous signals into a defensible view of severity and likelihood and seeing them through escalation, treatment decisions, and remediation Build the systems that make risk measurable and let risk work scale, including quantification tooling, automated intake and triage, and the observability that partner teams use to understand their own risk posture Work alongside Security Engineering as a calibrated technical peer who pressure tests architectures and treatment plans, translates findings into prioritized remediation roadmaps, and makes the investment case for what to fix now, what to accept and track, and what to defer Mentor engineers and risk practitioners across Security and the broader engineering organization, and help build a risk engineering culture in which teams own their risks and our team provides the visibility and judgment that supports the Security risk engineering Work across the breadth of Anthropic’s security landscape, spanning areas like identity and secrets management, developer security and supply chain, infrastructure security, and secure frameworks, and build the context needed to reason about risk credibly in each Go deep where a risk demands it, understanding how these systems are built and how they fail so that assessments and treatment plans reflect engineering reality rather than abstraction Risk assessment and quantification Identify systematic risks through threat modeling and structured assessment, then drive the severity calibration and escalation conversations that follow, bringing leadership a defensible position and a clear recommendation that holds up under pointed questions Contribute to the team’s quantitative risk work, applying methods such as calibrated estimation and Monte Carlo simulation where they meaningfully change a resource or treatment decision Risk platform and automation Design and build AI-native risk tooling that uses Claude to classify incoming risks, augment triage, and continuously sense changes in our risk landscape as teams ship Create the dashboards and data pipelines that give engineering and product teams real-time visibility into their risk posture and make distributed ownership of risk practical Remediation strategy and investment Partner with Security Engineering and risk owners to design remediation roadmaps that are explicit about sequencing, ownership, and the investment required Measure outcomes rather than activity, focusing on decisions made and risk reduced Minimum qualifications At least 8 years of software engineering or security engineering experience, including leading and remediating complex security risks independently Bachelor’s degree in a related field or equivalent experience Strong programming skills in Python or at least one systems language such as Go, Rust, or C/C++ Broad knowledge across the core security engineering domains, with depth in at least one, including identity and secrets management, developer security and supply chain, infrastructure and cloud security, and secure frameworks Calibrated risk judgment, meaning you can put a defensible severity and likelihood on an ambiguous problem and change your position when the evidence changes Experience leading cross-functional security initiatives and navigating complex organizational dynamics Outstanding communication skills, translating technical concepts effectively across all levels of the organization A track record of bringing clarity and ownership to ambiguous technical problems and driving them to resolution Low ego and high empathy, with a history of growing the engineers around you and supporting diverse, inclusive teams Passion for AI safety and the role security and risk management play in building trustworthy AI systems Preferred qualifications Owned a named security risk and driven it from discovery through remediation across multiple teams Briefed executives on risk decisions and defended accept, remediate, or transfer recommendations under challenge Built security automation, detection, or risk platforms adopted across an engineering organization Shipped LLM or agent-powered tooling and workflows that automate security or risk activities A security engineering, detection engineering, or offensive security background with a risk-based prioritization mindset Built or operated a quantified security risk program (FAIR-style decomposition, Monte Carlo simulation, loss exceedance analysis) whose outputs changed real resource decisions Enough familiarity with SOC 2, ISO 27001, or FedRAMP to know what compliance does and does not buy you The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $405,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Remote US What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 6M endpoints and 17M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Security Operations Center Location: Remote, US (West Coast) Compensation Range: $100,000-$125,000 base plus bonus and equity. This role may be eligible for on-call/call-in pay in addition to base pay *The initial training period for this position will be Monday-Friday. Following training, the work schedule is subject to change and may include weekend or a 4x10 shift, depending on business requirements* What You’ll Do: Huntress is looking for a Security Operations Center Analyst to add to our growing team. In this role, you will get to triage, investigate, respond, and remediate a variety of intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyberattacks and will have daily opportunities to progress your analyst skillset and accelerate your career growth. The Huntress Security Operations Center is an elite team of individuals who wake up every day to combat threat actors. You will have daily opportunities to progress your analysis skills while being at the forefront of what’s happening in the wild. If you’re looking to accelerate your career and skills, this is the team for you! Responsibilities: Triage, investigate, and respond to alerts coming in from the Huntress platform. Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks, where possible, and provide remediations needed to remove the threat. Perform tactical malware analysis as part of investigating and triaging alerts. Investigate suspicious Microsoft M365 activity and provide remediations. Assist in escalations from the Product Support team for threat-related and SOC-relevant questions. Contribute to detection engineering creation and tuning efforts. Contribute to projects focused on driving better outcomes for our analysts and partners Contribute to our collaboratively mentored team (we're all here to make each other better!). What You Bring To The Team: 4+ years of experience in a SOC or Digital Forensics (DFIR) role Demonstrated experience with Windows, Linux, and MacOS as an attack surface Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs) Demonstrated experience with static and dynamic malware analysis concepts Working knowledge of Windows Administration or Enterprise Domain Administration Active Directory, Group Policy, Domain Trusts, etc. Working knowledge of core networking concepts Common ports/protocols, NAT, Public/Private IPs, VLANs, etc. Working knowledge of web technologies and concepts Web servers/applications, OWASP top 10, etc. Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes A strong sense of curiosity and a genuine excitement for learning Preferred Qualifications: Previous experience in an MSP/MSSP/MDR role Linux and MacOS investigative experience Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby) Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc. Demonstrated experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc. Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc. Familiarity with MSP tools such as RMMs What We Offer: 100% remote work environment - since our founding in 2015 Generous paid time off policy, including vacation, sick time, and paid holidays 12 weeks of paid parental leave Highly competitive and comprehensive medical, dental, and vision benefits plans 401(k) with a 5% contribution regardless of employee contribution Life and Disability insurance plans Stock options for all full-time employees One-time $500 reimbursement for building/upgrading home office Annual allowance for education and professional development assistance $75 USD/month digital reimbursement Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Location: Lagos, Nigeria Governance & Policy Develop, review, and maintain information security policies, standards, procedures, and guidelines. Ensure alignment with recognized frameworks and standards (e.g. ISO/IEC 27001, PCIDSS, CBN Cybersecurity Framework). Define security governance structures, roles, and decision‑making processes. Risk Management Support enterprise information security risk assessments and risk treatment plans. Maintain the security risk register and track remediation activities. Advise business units on risk acceptance, mitigation, transfer, or avoidance. Compliance & Regulatory Assurance Ensure compliance with applicable laws, regulations, and contractual requirements (e.g. NDPR, CBN Cybersecurity Framework, PCI DSS, ISO 27001). Coordinate internal and external audits, assessments, and certifications. Track and remediate audit findings and compliance gaps. Metrics, Reporting & Assurance Define and maintain security governance KPIs, KRIs, and dashboards. Prepare security posture reports for management, risk committees, and auditors. Support board‑level and executive reporting on information security matters. Third‑Party & Vendor Security Governance Support third‑party security risk assessments and due diligence processes. Review supplier security controls and contractual security clauses. Monitor ongoing compliance of critical vendors. Awareness & Continuous Improvement Support security awareness and policy training initiatives. Monitor regulatory changes and emerging governance trends. Drive continuous improvement of governance and control maturity. Requirements Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field. Minimum of 5–9 years’ experience in information security governance, risk, and compliance (GRC). Hands-on experience implementing or managing security frameworks (e.g., ISO 27001, CBN Cybersecurity Framework, NDPR, PCI DSS). Strong understanding of risk management methodologies and control frameworks. Experience working with audits, compliance reviews, and regulatory requirements. Familiarity with security tools and platforms supporting governance and compliance activities. Experience in financial services, fintech, or telecommunications is an added advantage.

Location: Philippines As a Security Analyst at Intelice Solutions, you will be a crucial part of our cybersecurity team. This role is designed for individuals who are passionate about cybersecurity and eager to develop their skills in a dynamic and supportive environment. This resource will assist in monitoring, analyzing, and responding to security incidents, ensuring the protection of our clients' data and systems. Key Responsibilities: Security Monitoring and Analysis: Monitor security alerts and events using various security tools and platforms. Analyze security incidents to determine their impact and severity. Assist in the investigation and resolution of security incidents. Assist with checking and resolving security agent related issues. Incident Response: Participate in the incident response process, including identification, containment, eradication, and recovery. Document and report security incidents and actions taken. Vulnerability Management: Assist in the identification and assessment of vulnerabilities in client systems. Support the implementation of remediation measures to address identified vulnerabilities. Threat Intelligence: Stay updated on the latest cybersecurity threats and trends. Assist in the collection and analysis of threat intelligence to enhance security posture. Security Awareness and Training: Support the development and delivery of security awareness training for clients. Promote best practices for cybersecurity within the organization and to clients. Participate in group tabletop exercises Compliance and Reporting: Assist in ensuring compliance with relevant security standards and regulations. Prepare and maintain security documentation and reports. Collaboration and Support: Work closely with senior security analysts and other IT teams to enhance overall security. Provide support for security-related projects and initiatives. Direct Manager: Security Operations Manager Qualifications: Bachelor's degree in Cybersecurity, Information Technology, or a related field. Basic understanding of cybersecurity principles and practices. Familiarity with security tools and technologies (e.g., SIEM, firewalls, antivirus software). Strong analytical and problem-solving skills. Excellent communication and teamwork abilities. Eagerness to learn and adapt in a fast-paced environment. Preferred Skills: Relevant certifications (e.g., CompTIA Cybersecurity Analyst / CySA+). Experience with scripting or programming languages (e.g., Python, PowerShell). Knowledge of network protocols and operating systems.

Location: Warsaw Our Security team keeps Asana's employees, users, and customers safe, by proactively addressing threats and fostering a culture of security throughout our product and operations. We are looking for a savvy Security Engineer to join our Blue Team in Warsaw. You will be a foundational member of the security presence in our Warsaw innovation hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection and response capabilities. Detection and response here leans on engineering practice. We are investing in automation and detection-as-code to cut down on manual triage, and we are looking for someone comfortable writing and reviewing code as part of that work. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you'll achieve: Lead detection, analysis, and response across our cloud and SaaS environments, identity providers, endpoints, and the software supply chain , ensuring timely and effective remediation of security incidents. Investigate and remediate security incidents across cloud infrastructure (AWS/GCP/Azure), identity providers (e.g., Okta), and SaaS environments. Investigate and contain software supply chain and CI/CD incidents , from unauthorized changes in build environments to suspect third-party dependencies (e.g., npm, PyPI). Help build and maintain our detection-as-code infrastructure (e.g., Panther), SOAR automation, and response playbooks, treating detection logic as tested, version-controlled production code. Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms. Conduct proactive threat hunting and operationalize threat intelligence across cloud, endpoint, and identity telemetry to catch threats beyond standard SIEM alerting. Conduct forensic analysis during security incidents to understand the scope and impact of incidents. Collaborate with engineering teams to integrate security best practices into development processes and provide guidance on secure configurations. Develop and deliver training to educate engineers on security operations and incident response best practices. About you: 7+ years of experience in threat detection, security operations, or incident response , including investigating incidents across cloud platforms, identity providers, and SaaS applications, with practical knowledge of audit logging and IAM. Proficient in Python ( Bash, Go, or JavaScript/TypeScript is a plus ) for security scripting and automation , with hands-on experience across REST APIs, Git workflows, and PR-based code reviews . Hands-on experience investigating software supply chain threats , with fluency in auditing modern developer ecosystems (e.g., npm, PyPI), build logs, and CI/CD pipelines. Familiarity with "Detection as Code" methodologies , including test-driven detection logic and rule management through CI/CD pipelines. Strong experience with SIEM platforms (e.g., Panther, Splunk, Elastic Security) for log analysis, alert correlation, and dashboard creation. Deep working knowledge of endpoint detection and response (EDR) tools (e.g., CrowdStrike, SentinelOne) with specialized expertise in macOS endpoint security, telemetry, and threat detection capabilities. Experience performing digital forensics and root-cause analysis to determine incident scope and impact. Familiarity with common attack techniques, tactics, and procedures (TTPs) and frameworks like MITRE ATT&CK. Collaborative and pragmatic, with strong communication skills across technical and non-technical partners, committed to building robust defenses and helping engineers do their best, most secure work . Demonstrated curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making. What we offer: Generous, transparent and fair compensation system (base salary and RSUs). Contract of Employment (and the option of 50% tax deductible costs for author’s rights usage in respect of applicable roles). Health insurance with dental and travel coverage (Lux Med). Breakfast and lunch catering on the days that you work from the office. Vacation allowance. Career growth budget. Home office setup budget. Gym/Fitness card. Fertility healthcare and family-forming support with Carrot. Mental Health Support in Modern Health. Group life insurance. MacBooks with all necessary accessories For this role, the estimated base salary range is between 31,900 - 36,250 PLN gross per month (subject to all taxes and necessary deductions). The actual base salary will vary based on various factors, including market and individual qualifications objectively assessed during the interview process. The listed range above is a guideline, and the base salary range for this role may be modified. In addition to base salary, your compensation package may include additional components such as equity and sales incentive pay (for most sales roles), and benefits. If you're interviewing for this role, speak with your recruiter to learn more about the total compensation and benefits for this role. #LI-Hybrid About us Asana is a leading platform for human + AI collaboration. Millions of teams around the world rely on Asana to achieve their most important goals, faster. Asana has been named to Fortune's Best Workplaces for 7+ years and recognized by Fast Company, Forbes, and Gartner for excellence in workplace culture and innovation. We offer an exceptional office-centric culture while adopting the best elements of hybrid models to ensure that every one of our global team members can work together effortlessly. With 13+ offices all over the world, we are always looking for individuals who care about building technology that drives positive change in the world and a culture where everyone feels that they belong. We believe in supporting people to do their best work and thrive. Our goal is to ensure that Asana upholds an environment where all people feel that they are respected and valued, whether they are applying for an open position or working at the company. We provide equal employment opportunities to all applicants without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by law. Join Asana’s Talent Network to stay up to date on job opportunities and life at Asana.

Обязанности: • Работать с системами информационной безопасности (SIEM, SOAR/IRP, NTA) • Заниматься мониторингом и анализом событий ИБ • Регистрировать инциденты ИБ и доводить их до закрытия • Взаимодействовать с коллегами. Требования: • Знание современных тактик и техник атакующих, основных векторов атак на корпоративные инфраструктуры, способов их обнаружения и противодействия; • Опыт работы с KSC, IRP/SOAR системами; • Понимание работы SOC (Security Operation Center) • Понимание работы средств защиты информации (FW, IDS/IPS, АВЗ, SIEM и пр.); • Ответственный подход к решению задач, способность работать в режиме многозадачности; • Высшее техническое образование (ИБ или ИТ); • Опыт работы не менее года. Условия: • Работу в федеральной компании стратегического масштаба; • Сменный график работы (сутки/трое) в комфортных условиях • Широкий стек технологий и проектов, возможность гибко строить свой карьерный трек; • Зарплату, соответствующую опыту и навыкам, прозрачную систему мотивации; • Поддержку профессионального развития - курсы и тренинги внутри департамента; • Расширенный пакет ДМС со стоматологией; • Корпоративная профсоюзная программа; • Комфортный офис рядом с м. ВДНХ; • Материальную помощь к отпуску, конкурентоспособную систему премирования.

Location: Foster City, CA Workplace: Hybrid Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. ABOUT THE ROLE We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks. You will also serve as a technical infrastructure responder during security incidents, deploying real-time cloud or network countermeasures to protect our production ecosystem. WHAT YOU'LL DO CORE RESPONSIBILITIES - Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure. - Posture Management & Visibility: Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines. - Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production. - Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build automated base-image patching and rolling upgrade pipelines. - Compliance-Driven Tracking: Track, document, and manage infrastructure vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of infrastructure remediation timelines and exception approvals. - Executive Reporting & Alerting: Escalate and report critical production exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize infrastructure risk trends and cloud compliance posture. - Remediation Collaboration: Partner with SRE, DevOps, and Platform teams to provide clear infrastructure mitigation paths. Assist in writing, reviewing, or modifying cloud configuration templates directly when necessary to resolve security flaws. - Incident Response Support: Assist Incident Response teams during active cloud or host-level breaches. Help develop and implement immediate, real-time cloud, network, or IAM configuration countermeasures to contain threats. REQUIRED SKILLS & EXPERIENCE - Experience: 5 years of experience in Cloud Security, DevSecOps, or Systems Engineering roles. - Cloud Infrastructure Depth: Strong foundational experience working with multi-cloud environments (Deep GCP expertise preferred, with working knowledge of AWS or Azure). - Posture Management & Scanning Tooling: Hands-on experience operating modern infrastructure security platforms such as Wiz, Orca, Prisma Cloud, Lacework, or cloud-native options (GCP Security Command Center). - IaC and Automation Fluency: Strong proficiency with Infrastructure as Code platforms (Terraform, Pulumi) and GitOps deployment workflows. Ability to evaluate and configure IaC scanners like Checkov, Tfsec, or KICS. - Containerization & Orchestration: Deep understanding of Docker/container security and Kubernetes architectures (e.g., GKE, EKS), including runtime security, network policies, and workload identity. - Compliance Awareness: Understanding of how infrastructure configurations and vulnerability management map to security compliance frameworks like SOC 2, ISO 27001, CIS Benchmarks, or NIST. WHAT WE VALUE - Systems Thinking: The ability to see the "big picture" and understand how security decisions impact the entire stack. - Technical Influence: The ability to drive technical alignment across the organization through expertise and collaboration rather than direct authority. - Autonomy: Comfortable leading major technical initiatives and driving outcomes with minimal oversight. - Problem-Solving Mindset: A passion for breaking down complex security challenges into elegant, scalable engineering solutions. This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday. Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only) Want to learn more about what we are up to? - Self-driving Company https://replit.com/blog/self-driving-company - Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale - AI Adoption https://replit.com/blog/ai-adoption - Build Open-Source Apps https://replit.com/build/open-source-app-builder   Interviewing + Culture at Replit - Operating Principles https://blog.replit.com/operating-principles - Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Location: Chicago DRW is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk. Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets. We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it. DRW is a place of high expectations, integrity, innovation and a willingness to challenge consensus. We are seeking a Client Platforms Security Engineer to work with the members of the security team to ensure that our client platform infrastructure, virtual or physical, is properly protected. You will engineer, maintain and implement security controls, audit configurations in a hybrid compute environment. You will generally ensure we are reducing risk footprint across the infrastructure without impacting its effectiveness. A successful candidate will have an attention to detail, the ability to understand what impact their changes will have on the business teams and the services they use. What you’ll be doing: Maintain security tools and their associated configurations Manage and coordinate updates of tools when new versions are released Working with platform teams to deploy tools and changes as necessary after validating necessary performance and functionality requirements Identify solutions in the market and test them to see if they prove viable for our environment and use case Work with the platform teams to ensure the OS builds are as hardened to the extent they can be Identify and document ways to measure effectiveness of the client platform controls Assess risk in our client platform environment and provide mitigations for those risks Identify process improvements for automation of security hardening checks on client platforms Work with the operation teams internal and external to ensure identified risks are triaged, investigated, and remediated as necessary What we’re looking for: Strong verbal, written, and interpersonal communication skills Bachelor’s degree or relevant work experience required Scripting/Development experience in any high-level language with the desire to build upon that repertoire Experience maintaining client OS platforms (e.g Windows, Linux, MacOS) in a physical and virtual world. Understanding of network fundamentals and protocols. Deep technical understanding of client OS platforms (e.g Windows, Linux, MacOS). Mobile OS platforms a plus (e.g. iOS, Android, etc) Experience with endpoint security suites and frameworks (e.g. Anti-Virus, EDR/XDR, execution flow control, etc) Strong, demonstrable experience in Cybersecurity engineering, design, implementation and documentation Experience with leading SOAR and SIEM solutions Bonus Points For: Experience managing platforms like CrowdStrike, Sentinel One, or Carbon Black App Control Experience working with Qualys and a general understanding of vulnerability management processes Experience scripting with languages like Python, Powershell, and the Linux Shell The annual base salary range for this position is $150,000 to $200,000 depending on the candidate’s experience, qualifications, and relevant skill set. The position is also eligible for an annual discretionary bonus. In addition, DRW offers a comprehensive suite of employee benefits including group medical, pharmacy, dental and vision insurance, 401k (with discretionary employer match), short and long-term disability, life and AD&D insurance, health savings accounts, and flexible spending accounts. For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at https://drw.com/privacy-notice . California residents, please review the California Privacy Notice for information about certain legal rights at https://drw.com/california-privacy-notice . [#LI-LD1]

Location: United Kingdom; Ireland; Dublin; Croatia; Hungary; Bulgaria; Sofia; Belgium; Denmark; Portugal; Poland; Sweden; Italy; Madrid; London; Czechia; Amsterdam Workplace: Remote ABOUT ELEVENLABS ElevenLabs is an AI research and product company transforming how we interact with technology. We launched in January 2023 with the first human-like AI voice model. Today, we serve millions of users and thousands of businesses - from fast-growing startups to large enterprises like Deutsche Telekom and Meta. Our investors are some of the world's most prominent, including Andreessen Horowitz, ICONIQ Growth and Sequoia. We've raised $781M in funding and our last valuation was $22B - multiples of 11, always. We have expanded from voice into three main platforms: - ElevenAgents enables businesses to deliver seamless and intelligent customer experiences, with the integrations, testing, monitoring, and reliability necessary to deploy voice and chat agents at scale. - ElevenCreative empowers creators and marketers to generate and edit speech, music, image, and video across 70+ languages. - ElevenAPI gives developers access to our leading AI audio foundational models. Everything we do is the result of the creativity and commitment of our team - builders doing the best work of their lives. We are researchers, engineers, and operators. IOI medalists and ex-founders. If you want to work hard and create lasting positive impact, we want to hear from you. HOW WE WORK - High-velocity: Rapid experimentation, lean autonomous teams, and minimal bureaucracy. - Impact not job titles: We don’t have job titles. Instead, it’s about the impact you have. No task is above or beneath you. - AI first: We use AI to move faster with higher-quality results. We do this across the whole company—from engineering to growth to operations. - Excellence everywhere: Everything we do should match the quality of our AI models. - Global team: We prioritize your talent, not your location. WHAT WE OFFER - Innovative culture: You’ll be part of a generational opportunity to define the trajectory of AI, surrounded by a team pushing the boundaries of what’s possible. - Growth paths: Joining ElevenLabs means joining a dynamic team with countless opportunities to drive impact - beyond your immediate role and responsibilities. - Learning & development: ElevenLabs proactively supports professional development through an annual discretionary stipend. - Social travel: We also provide an annual discretionary stipend to meet up with colleagues each year, however you choose. - Annual team offsite: Each year, we bring your entire team together in a new location - past offsites have included Croatia, Italy and Cancún - Co-working: If you’re not located near one of our main hubs, we offer a monthly co-working stipend. ABOUT THE ROLE We’re looking for a Security Engineer to join the ElevenLabs Security team. In this role, you’ll work at the intersection of security, software and infrastructure engineering, building the platforms, controls and tooling that let teams ship and operate cloud infrastructure securely at high velocity. You will: - Design and build security tools and guardrails that integrate directly into our infrastructure and products - Partner with Engineering and Infrastructure teams to review application architectures, develop threat models and build in secure by default patterns throughout the software development lifecycle - Identify, prioritise and remediate security vulnerabilities, working directly with engineers and contributing to fixes where required, across the entire stack. - Ship new security features which directly improve the security posture of our products in production - Design and implement supply chain security controls across build and deployment pipelines, including artefact signing, provenance, dynamic admission controls and SBOM generation REQUIREMENTS - Strong engineering background, with experience building and shipping production systems - Proven track record of building and scaling security programs - Fluency in at least one programming language (Python, Typescript, Golang etc) with the ability to read, write and maintain production quality code - Hands on experience in cloud-native environments (AWS or GCP), Kubernetes, and infrastructure-as-code (Terraform) - Strong understanding of cloud security fundamentals: IAM, networking, PKI, linux internals - Experience securing CI/CD pipelines to prevent supply chain attacks Bonus: - Experience securing AI or Machine Learning systems, including training pipelines - Background in developer experience or platform engineering, especially building developer tooling - Contributions to open source security projects, published research or talks at security conferences - Experience working in regulated environments (SOC 2, ISO27001, PCI, HIPAA or similar) LOCATION This role is remote and can be executed globally. However, to facilitate working with the Security Team, we prefer candidates based in GMT to GMT+3 or UK. If you prefer, you can work from our offices in London or Warsaw We are an equal opportunity employer and do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, veteran status, disability or other legally protected statuses.

Location: United States Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. We are seeking a skilled & hands-on Senior Security Architect for Kraken Security Labs. Kraken Security Labs provides boutique-style, deeply technical internal security consulting on current and future products. We don't merely provide high-level guidance but indeed get deeply embedded in the different engineering teams and do not mind hands-on work. Our projects span from classical infrastructure security projects, over cryptography, web3, and complex Rust projects, to securing our next generation of AI products. You will work in a small, highly technical team and collaborate with teams all across the company & world.   THE OPPORTUNITY - Design, review & verify robust security architecture in a heterogeneous environment - Conduct thorough security assessments and audits of existing architectures, recommending practical improvements - Stay updated with latest (blockchain) security trends, threats and mitigation techniques - Provide expertise to our blockchain teams, ensuring secure operational practices   WHAT YOU BRING - Proven experience as an IT security expert, with a strong background in application security - Experience in security testing diverse application - Experience with infrastructure security - Basic familiarity with security frameworks (OWASP, NIST, etc) - Excellent problem-solving skills and the ability to work in a dynamic, fast-paced environment - Strong communication and collaboration skills to effectively remotely work with stakeholders across the organization Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on X https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Location: United Kingdom; Brazil; United Arab Emirates; Ireland; Peru; Sweden; Colombia; Argentina; Romania; Cyprus; Switzerland; Portugal; Lithuania; South Africa; Czech Republic; Canada; Hungary; Mexico; Chile; Poland; Spain; Bulgaria Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. We are seeking a skilled & hands-on Senior Security Architect for Kraken Security Labs. Kraken Security Labs provides boutique-style, deeply technical internal security consulting on current and future products. We don't merely provide high-level guidance but indeed get deeply embedded in the different engineering teams and do not mind hands-on work. Our projects span from classical infrastructure security projects, over cryptography, web3, and complex Rust projects, to securing our next generation of AI products. You will work in a small, highly technical team and collaborate with teams all across the company & world.   THE OPPORTUNITY - Design, review & verify robust security architecture in a heterogeneous environment - Conduct thorough security assessments and audits of existing architectures, recommending practical improvements - Stay updated with latest (blockchain) security trends, threats and mitigation techniques - Provide expertise to our blockchain teams, ensuring secure operational practices   WHAT YOU BRING - Proven experience as an IT security expert, with a strong background in application security - Experience in security testing diverse application - Experience with infrastructure security - Basic familiarity with security frameworks (OWASP, NIST, etc) - Excellent problem-solving skills and the ability to work in a dynamic, fast-paced environment - Strong communication and collaboration skills to effectively remotely work with stakeholders across the organization Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on X https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Location: Porto, Portugal Workplace: hybrid TeamViewer provides a leading Digital Workplace platform that connects people with technology—enabling, improving and automating digital processes to make work work better. Our software solutions harness the power of AI and shape the future of digitalization. We believe that our diverse teams and strong company culture are key to the success of our products and technologies, that hundreds of millions of users around the world and around 645,000 customers across all industries rely on. With more than 1,900 employees worldwide, we celebrate the unique perspectives and talents that each individual brings to the table and foster a dynamic work environment where new ideas thrive. Are you ready to join our team and make an impact? Responsibilities Join our company as Security Engineer (all genders) and become part of an agile team designing, building, and improving security features across the TeamViewer product line and its supporting infrastructure. These will be some of your responsibilities: Design and implement security controls and mechanisms directly in our products, with a strong focus on secure-by-design principles. Identify, analyze, and mitigate vulnerabilities through threat modeling, security reviews, and hands-on testing (including aspects of offensive security). Collaborate closely with development teams to integrate security into the SDLC, from design to deployment, and improve existing security architectures. Drive the implementation of technical solutions to detect and prevent abuse scenarios in TeamViewer products. Contribute to security-related automation, tooling, and processes to scale security across engineering teams. Act as a security consultant for product and engineering teams, helping them make risk-informed design and implementation decisions aligned with the overall security strategy. Participate in applied AI security initiatives, focusing on securing AI-driven features and leveraging AI to improve security capabilities. Prepare and deliver secure coding trainings, workshops, and guidance to development teams. Requirements Degree in computer science or security or equivalent working experience Ideally 3+ years professional experience in a similar position, specifically focused on security issues Strong interest and understanding of security aspects of AI usage in Software Development process Knowledge of C++ and at least a basic understanding of other programming languages such as Java, C# or Go Good foundation in web architectures as well as scalable distributed systems Experience in implementing encryption, cryptography, software security and authentication, both in the field of software development and the design of network protocols. Passion about finding secure, innovative and user-friendly solutions for highly complex problems Experience in mentoring, consulting and guiding other developers and teams of developers in building secure solutions Experience and interest in working in distributed teams Fluency in English is mandatory, further languages such as German are a plus What we offer Onsite Onboarding in our HQ office for an optimal start Great compensation and benefits packages including company achievement bonus or sales bonus and regular salary reviews Public transport friendly offices Special terms for local gyms Access to Corporate Benefits platform with many discounts Regular Team events and company-wide celebrations Open door policy , no dress code rules, frequent all Hands and Leadership Lunches Hybrid and Flexible work time with up to 50% home office Work From Abroad Program allowing up to 40 days of work outside your contracting country We celebrate diversity as one of core values, join and drive one of the c-a-r-e initiatives together with us! TeamViewer is an equal opportunities employer and is committed to building an inclusive culture where everyone feels welcome and supported. We C-A-R-E and understand that our diverse, values-driven culture makes us stronger. As we continue to grow as a company, we also focus on enabling our employees to grow both personally and professionally. We are proud to have an open and embracing workplace environment that will empower you to be your best no matter your gender, civil or family status, sexual orientation, religion, age, disability, education level, or race. If you require any accommodations or adjustments during the application or hiring process, including interview or onboarding support, please reach out to your Talent Acquisition Partner, who will be happy to support you.

Location: Thessaloniki, Greece CENSUS is an internationally acclaimed Cybersecurity services provider. We support the needs of multiple industries, providing IT and OT security assessment services to public and private organizations around the world, including international financial institutions and Fortune 500 companies. Powered by cutting edge research, scientific analysis and real-world engineering, we deliver unparalleled security assessment services for software, devices, infrastructure and organizations. Learn more about CENSUS at census-labs.com. CENSUS continues its successful paid internship program, allowing interns to build up skills and gain experience in the area of Vulnerability Research. The intern will join our Thessaloniki team. Remote working as well as on-site working options (hybrid) are offered for the internship. Requirements Background knowledge in software security (Academic or Professional) Application debugging skills C and Python development skills x86 or x86_64 Assembly skills Good understanding of at least two operating systems (Microsoft Windows, GNU/Linux, Android, MacOS or iOS) Systems programming skills Good understanding of networking and TCP/IP concepts Also, any of the following (not strictly required) skills will be considered a plus: Reverse engineering Code auditing Familiarity with IDA Pro or Ghidra Candidates that successfully complete the internship program are offered a full time position with CENSUS. CENSUS provides: A collaborative work environment: you will be working among exceptional engineers, highly experienced in the field of Cybersecurity, that value teamwork and knowledge sharing. An efficient work environment: you will be provided with access to the necessary technology, training and resources in order to achieve your goals. CENSUS delivery processes will make sure that the output of your work is of high quality and presented in the best possible manner. An environment for personal development: instead of sticking to a project or a role, we purposefully make sure that you gain experience by working on different projects and grow by practicing different roles. A creative work environment: our engineers propose solutions to some of the most challenging technological problems, contribute to many of the company’s processes and tools, and perform leading IT Security Research with results published on major conferences and publications. An enjoyable work environment: beyond the competitive salary and benefits, we maintain a friendly and enjoyable work environment for everyone, covering work at the office, remote work and onsite work at the customer’s premises. CENSUS is an equal opportunity employer. The Company does not discriminate on the basis of race, color, creed, pregnancy, religion, gender, national origin, age, disability, marital, or any other legally protected status. The Company also makes reasonable accommodations for disabled employees. Finally, the Company prohibits the harassment of any individual based on their protected status. This policy applies to all areas of personnel actions including recruitment, hiring, training, promotion, compensation, benefits, transfer, and social and recreational programs. #LI-Remote

Location: Canada; United States Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ THE ROLE The DHI Content team builds and maintains Docker Hardened Images: a catalogue of security-hardened system packages, container images and Helm charts designed to be minimal, up to date and safe to use in security-conscious and regulated environments. This is a supply-chain and open-source maintainer role rather than a conventional backend engineering role. You will work across upstream OSS projects, package and image definitions, Helm charts, Kubernetes, integration tests, vulnerability remediation and the controls that prove content is ready to publish. The work is broad by design: customers should be able to select hardened packages and images and, where relevant, deploy them through hardened charts without the pieces drifting apart. We are moving DHI content production towards a machine-first factory. Routine work should begin with a machine-produced change and pass through automated build, test, policy and review controls. Engineers add the most value by handling difficult ecosystems, making security judgements, improving standards and turning repeated human corrections into better tooling. You will use AI-assisted engineering extensively, but remain accountable for the evidence and quality behind every result. As a Senior Supply Chain Security Engineer, you will own substantial content and improvement work from upstream discovery through release and ongoing maintenance. You will be expected to close the loop on customer and security outcomes, not only submit individual definition changes. SUCCESS IN THIS ROLE LOOKS LIKE You will succeed by becoming a trusted end-to-end owner for hardened content. Within your first year, you should have delivered complex new or updated DHI content across packages, images and Helm charts, improved the factory or its quality gates, reduced recurring manual work and raised the capability of the engineers around you. _______________________________________________________________________ RESPONSIBILITIES - Author and maintain definitions for hardened system packages and container images, including build steps, upstream tracking, multi-architecture support and reproducibility controls. - Adapt and maintain upstream Helm charts so they work correctly with DHI images under non-root, restricted and production-shaped Kubernetes security constraints. - Track upstream releases, semver patterns, monorepos, dependency chains and breaking changes, then make pragmatic decisions about when to update, patch, pin or deviate. - Triage and remediate vulnerabilities across OS packages, application dependencies, images and charts, including VEX and no-upstream-fix cases that require explicit security judgement. - Write and improve Go-based integration tests, validators and policy checks that prove packages, images and charts behave correctly in real environments. - Review human-authored and machine-authored pull requests against DHI standards, distinguish blocking issues from advice and give contributors a clear path forward. - Improve the DHI Factory by converting repeated work, review corrections and escaped defects into automation, tests, validators and reusable authoring patterns. - Help classify work into deterministic, specialist and judgement paths so people spend time where their expertise changes the outcome. - Partner with Product, Security, Support and customer-facing teams to turn demand and incidents into prioritised content and durable improvements. - Engage constructively with upstream maintainers when hardened deployment requirements expose issues or useful improvements. - Participate in the team's paid on-call rotation and drive learning from customer escalations, failed builds and content defects. - Communicate decisions, risks and progress clearly in a remote, async-first environment. _______________________________________________________________________ QUALIFICATIONS REQUIRED - Strong experience with containers, Linux and Kubernetes in production or production-shaped environments. - Practical experience reading, adapting or maintaining Helm charts and diagnosing how chart templates, values and workload security settings affect deployment behaviour. - Experience maintaining software you did not originate, such as Linux packages, container images, open-source integrations, charts or a comparable downstream distribution. - Strong YAML and configuration-review skills, including care for conventions, consistency and downstream impact across a large catalogue. - Working knowledge of container and Kubernetes security, including non-root execution, UID and GID, capabilities, filesystem restrictions, image layers and multi-architecture builds. - Practical programming ability in Go or a comparable language, sufficient to write and review integration tests, validators and content automation. - Experience tracking upstream releases and reasoning about semver, breaking changes, dependency graphs and reproducible builds. - A maintainer mindset: you catch drift, improve patterns for the next contributor and consider the effect of a change across many downstream consumers. - Familiarity with GitHub-heavy open-source workflows, including pull requests, review, release tracking and upstream contribution. - Comfort using AI-assisted engineering critically while retaining ownership of security assertions, test evidence and release quality. - A strong operational mindset and clear written and spoken communication suited to a remote, async-first company. HELPFUL, BUT NOT REQUIRED - Experience as a maintainer for Alpine, Debian, Fedora, Wolfi, Homebrew or another package ecosystem. - Helm chart authorship or meaningful contribution to an upstream chart. - Experience with SBOMs, VEX, SLSA, Sigstore, cosign, provenance or artefact signing. - Experience with apk, deb, rpm, Go modules, Maven or Gradle, npm, pip, Cargo or other dependency ecosystems. - Experience building automation for package, image or chart creation, validation and release. - Experience with FIPS, FedRAMP, PCI or other regulated and security-conscious environments. _______________________________________________________________________ WHAT TO EXPECT FIRST 30 DAYS - Build context on the DHI catalogue, its package, image and chart definitions, the DHI Factory and the team's definition of done. - Pair across both image and Helm chart work and ship a useful production change. - Learn the build, test, signing, publishing and vulnerability-remediation workflows. - Take part in reviews and an incident, escalation or failed-build learning session. FIRST 90 DAYS - Own a complex image and chart addition or update from upstream analysis through release. - Resolve a meaningful CVE, dependency or compatibility problem with clear evidence and customer impact in mind. - Improve at least one factory control, integration test, validator or reusable content pattern. - Review across artefact types and help another engineer take on a broader piece of work. ONE YEAR OUTLOOK (FIRST YEAR) - Be a trusted senior owner across hardened packages, images and Helm charts. - Deliver material catalogue growth or quality improvements without increasing human effort linearly with demand. - Reduce recurring manual work by moving a class of changes into a proven automated path. - Improve DHI's security posture, content availability and release reliability for customers. - Raise review quality and grow the team's ability to work across artefact and dependency ecosystems. Visa sponsorship: Docker considers visa sponsorship on a case-by-case basis based on business needs. _______________________________________________________________________ COMPENSATION & EQUITY All full-time roles include equity. Final compensation is determined on factors including but not limited to experience, skills, qualifications, and location. Canada: CA$210,627 – CA$341,690 base United States: $154,600 – $250,800 base ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Location: Remote Workplace: remote At Offchain, we aren’t just building products: we’re leading a movement.    As pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. We're laying the foundation that will define the next generation of digital commerce, governance, and human interaction. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security and transparency.    At the center of this vision is our people. Our team is made up of thinkers and doers that embrace new challenges and seek solutions that push existing boundaries. If you’re energized by solving unprecedented problems, and believe in the role that decentralized systems will play in creating a more equitable digital future, then we want to hear from you.    Why Offchain?   Offchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today.   Arbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack.   Arbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure.   To top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly. The Role As a Security Engineer at Offchain, you will play a key role in defining and improving our cloud security posture and collaborate across teams to ensure that our operations are secure, compliant, and aligned with regulatory and industry best practices - such as SOC2. What you'll do: Leverage your extensive experience in Cloud Security to design, implement, and improve secure cloud-native architectures and CI/CD pipelines. Apply deep expertise in cloud infrastructure security to proactively identify risks, enforce best practices, and harden systems across the entire technology stack. Automate security controls and educate developers for future-proofing against vulnerabilities. Play an active part in designing and evolving the company’s overall information security governance and compliance program through: policies, standards, procedures, awareness. Work closely with engineering, infrastructure, and product teams to make sure controls fit both business objectives and technical realities. What you'll need: 5+ years of experience in a security engineering role. Mastery of cloud infrastructure, particularly AWS. Prior experience focusing on infrastructure security and Kubernetes. Familiarity with secret management tools like Vault or KMS. Strong understanding of core information security concepts and major regulatory frameworks/standards (e.g. SOC2, ISO 27001, NIST CSF). Experience conducting security design reviews, threat modelling, and security testing. Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations. Perks: Remote-first global workforce + NY office Professional reimbursement program (facilitates industry conference attendance, certifications, and more) Medical, dental & vision coverage (US + some other countries) 401k retirement plan + company match (US only) Wellness stipend Home office set up / ergonomic equipment program Attention Offchain Job Seekers:   This role cannot be performed in California, or Colorado.   Please be advised that there has been a rise in fraudulent recruiter activities, particularly within the Web3 space. If you would like to confirm whether someone is an Offchain employee or the legitimacy of an offer you received, please email jobs@offchainlabs.com   At Offchain, we are committed to building a welcoming and supportive workplace for all employees, regardless of their background or identity. We strive to create an environment where everyone feels valued and has an equal opportunity to succeed and thrive. We encourage candidates from all walks of life to apply and join our team.

Location: London; Sofia About Us The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy, with a mission to deliver quality information and services worldwide. At the FT, curiosity thrives and ambitious thinking is rewarded. Here, you’re given the chance to reach millions, create work that matters and deliver impartial journalism in a polarised world. In our warm, collaborative culture, you’ll connect with a diverse community of experts who support your growth, career aspirations and wellbeing. Your future at the FT will be filled with opportunities that challenge and inspire you. With no fixed path, you’ll discover new skills and forge a career that can take you anywhere. Build a newsworthy career at the FT. Our Commitment to Diversity, Equity and Inclusion We believe in the power of unique perspectives and want all voices in our organisation to be heard, respected and valued. A supportive workplace is one where employees feel they can be themselves and operate to their full potential. We are committed to removing barriers for everyone, with a focus on addressing those faced by underrepresented groups. The Role Overview We’re looking for a Cyber Security Engineer to help improve application security across the FT’s cloud-native technology estate. This is a hands-on role focused on making secure engineering easier for product, platform and software engineering teams. Application security experience is essential for this role. You’ll help improve developer-friendly security guardrails across GitHub-based CI/CD pipelines, application repositories and engineering workflows. This includes working with SAST, software composition analysis, secret scanning, vulnerability management and secure coding guidance so that security findings are clear, actionable and owned by the right teams. You’ll work closely with engineers to support practical threat modelling, triage application vulnerabilities, improve security playbooks and help teams remediate issues in a pragmatic way. You do not need to be a deep AWS or cloud security specialist, but some exposure to AWS, cloud security or infrastructure-as-code security would be useful. We’re looking for someone with practical AppSec experience who wants to grow their impact - someone who enjoys working with engineers, improving tooling and helping security become part of normal delivery rather than a last-minute checkpoint. What you’ll bring to the role Application security experience: practical experience identifying, explaining and helping remediate application security risks in modern engineering environments. Developer-friendly security mindset: you enjoy working with engineers, explaining risks clearly and helping teams adopt secure practices without unnecessary friction. Vulnerability management experience: experience triaging and tracking application vulnerabilities from sources such as SAST, dependency scanning, secret scanning, penetration tests, bug bounty reports or third-party advisories. CI/CD and code security awareness: familiarity with security tooling in development workflows, such as SAST, software composition analysis, secret scanning or repository security controls. Threat modelling awareness: experience participating in, supporting or facilitating lightweight threat-modelling sessions for applications, services or new features. Automation mindset: ability to write scripts or small tools, ideally in Python, to reduce manual effort, improve visibility or make security workflows easier. Cloud security awareness: Some exposure to AWS, cloud security or infrastructure-as-code security would be useful, but is not essential. Growth mindset: willingness to keep developing across application security, cloud security, secure development and modern engineering practices. Required Experience, Essential Practical experience in application security. Experience working with software engineers to explain and remediate security issues. Familiarity with common web application security risks and secure coding practices. Experience with vulnerability triage, prioritisation and remediation tracking. Experience using or interpreting findings from tools such as SAST, software composition analysis, secret scanning or similar. Experience participating in or supporting threat-modelling activities. Ability to write scripts or small tools, ideally in Python, to automate tasks or improve visibility. Strong communication and collaboration skills. Familiarity with Agile or Scrum ways of working. Desirable Exposure to AWS security, cloud security or infrastructure-as-code security. Experience with Terraform or CloudFormation. Experience with container or Kubernetes security. Experience with bug bounty, penetration testing or security testing programmes. Experience with Splunk or similar logging/SIEM platforms. Exposure to AI security, such as LLM-enabled applications, AI-assisted development workflows or prompt/data leakage risks. Experience building dashboards, metrics or reports to support vulnerability management. Relevant security certifications or training, such as AWS security training, secure coding training, GIAC, ISC2, CREST or equivalent practical experience. What’s in it for you? Our benefits Our benefits vary by location but we are committed to providing best-in-class perks across all our offices. These include generous annual leave, medical cover, inclusive parental leave packages, subsidised gym memberships and opportunities to give back to the community. Full details of our benefits are available here. We currently operate a hybrid model which requires staff to work onsite 50% of the time, subject to role requirements & regular review. While flexible working requests will be considered, not all patterns are suitable for all roles. We believe this balanced approach supports flexibility and protects our culture, making collaboration and communication easier, building stronger relationships and team cohesion, and supporting peer learning.  We reserve discretion on reasonable notice to change this approach either generally or for specific individuals or teams. Accessibility We are a disability confident employer and Valuable 500 signatory. Please let us know if you require any reasonable adjustments/personalisation as part of the application process or to enable you to attend an interview. If you would like to discuss your requirements or have any questions, email talent@ft.com and a member of our team will be happy to help. Further information At the FT, we embrace innovation and the use of technology and appreciate that individuals may leverage AI tools as part of their job application process. Whilst we are happy for you to use AI to assist with your application, it is essential that all information provided is authentic and accurately represents your skills, experience, and qualifications. Candidates should be aware that the use of AI throughout the application process may be monitored to ensure a fair and transparent hiring process for all.

Location: London; Sofia About Us The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy, with a mission to deliver quality information and services worldwide. At the FT, curiosity thrives and ambitious thinking is rewarded. Here, you’re given the chance to reach millions, create work that matters and deliver impartial journalism in a polarised world. In our warm, collaborative culture, you’ll connect with a diverse community of experts who support your growth, career aspirations and wellbeing Your future at the FT will be filled with opportunities that challenge and inspire you. With no fixed path, you’ll discover new skills and forge a career that can take you anywhere. Build a newsworthy career at the FT. Our Commitment to Diversity, Equity and Inclusion We believe in the power of unique perspectives and want all voices in our organisation to be heard, respected and valued. A supportive workplace is one where employees feel they can be themselves and operate to their full potential. We are committed to removing barriers for everyone, with a focus on addressing those faced by underrepresented groups. The Role Overview We’re looking for a Senior Cyber Security Engineer to help mature application and cloud security across the FT’s cloud-native, AWS-hosted technology estate. This role has an approximate 50/50 focus across application security and cloud security, working closely with product, platform and engineering teams to make secure delivery easier by default. You’ll shape and improve developer-friendly guardrails across GitHub-based CI/CD pipelines, AWS environments and infrastructure-as-code workflows. This includes improving SAST, software composition analysis, secret scanning, IaC scanning, vulnerability management and AWS misconfiguration management so that findings are actionable, low-noise and owned by the right teams. Day to day, you’ll run practical threat-modelling sessions, review application and cloud designs, improve security playbooks, support vulnerability and misconfiguration remediation, and build automation that reduces toil. We’re looking for someone who has demonstrably improved security outcomes in real engineering environments, not just someone with theoretical knowledge of tools or frameworks. Depending on team structure, you may also mentor or line-manage one or two security engineers, while remaining hands-on and close to the technical work. What you’ll bring to the role Application and cloud security experience: practical experience across both application security and cloud security, ideally in AWS-hosted, cloud-native environments. Developer-friendly security mindset: you know how to work with engineers, explain risk clearly and design controls that help teams move securely without unnecessary friction. Vulnerability management at scale: experience improving how application vulnerabilities, dependency risks, bug bounty findings, penetration test findings and advisories are identified, prioritised, owned and remediated across engineering teams. Cloud misconfiguration & vulnerability management: experience identifying and reducing infrastructure-as-code and AWS vulnerabilities & misconfigurations at scale through pragmatic guardrails, tooling and clear remediation paths. Threat modelling: confidence running lightweight, practical threat-modelling sessions that lead to useful engineering decisions and risk reduction. CI/CD and code security: hands-on experience with security tooling such as SAST, software composition analysis, secret scanning and IaC scanning. Automation mindset: ability to write scripts or small tools, ideally in Python, to reduce toil, improve visibility and surface meaningful risk. Security leadership: ability to mentor other security engineers and influence engineers across the wider organisation. Depending on team structure, this may include line management. AI security awareness: experience of leveraging AI to improve and scale appsec and cloud sec controls would be useful, but is not essential. Key Responsibilities Improve application security guardrails Tune and evolve SAST, software composition analysis, secret scanning and related controls so they are actionable, low-noise and useful to engineering teams. Improve cloud and IaC security guardrails Help identify, prioritise and reduce AWS and infrastructure-as-code misconfigurations and vulnerabilities at scale. Drive vulnerability management Improve how application vulnerabilities, dependency risks, bug bounty findings, penetration test findings and third-party advisories are triaged, prioritised and remediated. Drive cloud misconfiguration management Help teams understand, own and remediate cloud security issues using pragmatic, developer-friendly workflows. Run practical threat modelling Facilitate lightweight threat-modelling sessions for new products, features, services and architectural changes. Build automation and tooling Create or improve scripts, integrations, dashboards and workflows that reduce manual effort and make risk easier to understand. Support secure architecture decisions Provide application and cloud security input into design reviews, AWS architecture decisions and larger technical changes. Partner with engineering teams Work closely with product, platform and software engineering teams to embed security into design, delivery and operational practices. Support incidents and lessons learned Provide application and cloud security expertise during incidents and feed lessons learned back into patterns, tooling and guidance. Mentor others Coach security engineers and engineering teams on practical security approaches. Depending on team structure, this may include line management of one or two security engineers. Required Experience, Essential: Strong practical experience in application security and cloud security, ideally with a balanced focus across both. Hands-on AWS security experience, including common misconfiguration patterns and practical remediation approaches. Experience improving vulnerability management across engineering teams, including prioritisation, ownership, remediation tracking and noise reduction. Experience in improving cloud or IaC misconfiguration management at scale in a developer-friendly way. Experience integrating, tuning or improving security tooling in CI/CD workflows, such as SAST, software composition analysis, secret scanning or IaC scanning. Experience running practical threat-modelling sessions that influence design, delivery or remediation decisions. Ability to write scripts or small tools, ideally in Python, to automate security workflows or improve visibility. Strong communication and collaboration skills, with the ability to influence engineers and technical leaders without relying on gatekeeping. Evidence of improving application security, cloud security or vulnerability management practices in a real engineering environment. Familiarity with Agile or Scrum ways of working. Desirable Experience with leveraging AI for AppSec and CloudSec. AWS Certified Security – Speciality or equivalent practical AWS security experience. Terraform or CloudFormation expertise. Incident-management or incident-response experience. Experience with Splunk or similar logging/SIEM platforms. Experience with security metrics, dashboards or reporting that helped drive measurable risk reduction. Experience mentoring or line-managing security engineers. What’s in it for You? Our benefits vary by location but we are committed to providing best-in-class perks across all our offices. These include generous annual leave, medical cover, inclusive parental leave packages, subsidised gym memberships and opportunities to give back to the community. Full details of our benefits are available here . We currently operate a hybrid model which requires staff to work onsite 50% of the time, subject to role requirements & regular review. While flexible working requests will be considered, not all patterns are suitable for all roles. We believe this balanced approach supports flexibility and protects our culture, making collaboration and communication easier, building stronger relationships and team cohesion, and supporting peer learning.  We reserve discretion on reasonable notice to change this approach either generally or for specific individuals or teams. Accessibility We are a disability confident employer and Valuable 500 signatory. Please let us know if you require any reasonable adjustments/personalisation as part of the application process or to enable you to attend an interview. If you would like to discuss your requirements or have any questions, email talent@ft.com and a member of our team will be happy to help. Further information At the FT, we embrace innovation and the use of technology and appreciate that individuals may leverage AI tools as part of their job application process. Whilst we are happy for you to use AI to assist with your application, it is essential that all information provided is authentic and accurately represents your skills, experience, and qualifications. Candidates should be aware that the use of AI throughout the application process may be monitored to ensure a fair and transparent hiring process for all.

Location: Remote Workplace: Remote WHO WE ARE Hi, we're DuckDuckGo, the online protection company and remote-first team of 400+ on a mission to raise the standard of trust online. Founded in 2008 and profitable since 2014, our annual revenue is in the hundreds of millions USD and millions use our browser on Mac https://spreadprivacy.com/introducing-duckduckgo-for-mac/, Windows https://spreadprivacy.com/windows-browser-open-beta/, iOS https://spreadprivacy.com/duckduckgo-privacy-browser-ios14/, and Android https://spreadprivacy.com/introducing-app-tracking-protection/, our search engine https://duckduckgo.com/, and the DuckDuckGo subscription https://duckduckgo.com/pro. We also offer private, useful, and optional AI, including Duck.ai https://duck.ai/, which lets you chat privately with ChatGPT, Claude, and other AIs, all in one place.   Our culture https://duckduckgo.com/how-we-work of trust, inclusivity, and empowered project management underpins everything we do, where each team member takes full ownership of their projects, from scoping and execution to postmortem. If you're seeking end-to-end ownership of your work, you've come to the right place! YOUR TEAM AND ROLE Working on the Security Functional Team, you'll play a pivotal role in ensuring our security capabilities keep pace with our rapid product development, including our expanding AI offerings like Duck.ai and agentic browsing, directly protecting our users across all our products. You'll also maintain incident detection and response capabilities for the company, and work on related projects. Recent projects include: - SERP security mitigations - Agentic browsing security mitigations - Agentic browser hardening - Browser and sync security audits As a Senior Security Engineer, App Sec, you'll execute on SERP security mitigations (XSS prevention, tooling development to help engineers write safer code), manage application security scanning infrastructure setup, build and maintain harnesses that get security fixes out automatically, harden our agentic browsing and DuckAI experiences against emerging threats (like prompt injection), conduct browser and sync security audits (special pages, DuckAI integrations, password manager, etc.), deliver on internal red-team operations (simulated attack scenarios), support security triage, and more! ABOUT YOU - 7+ years of experience in web or application security (performing security assessments, vulnerability research, penetration testing, or secure code review) - Recent experience creating security focused agentic harnesses - Experience influencing large feature designs to have security baked in from the start - Advanced programming or scripting experience with JavaScript. Any additional experience with our stack is a bonus: Swift/Kotlin/C#/JavaScript (native apps) or JavaScript/Perl/Go (search). - An understanding of the web security model (such as the Same Origin Policy); experience with CSP, CORS, SameSite cookies, sec-fetch-*, CORB, CORP, Sanitizer API, and Trusted Types is beneficial - Hands-on experience identifying and exploiting web vulnerabilities (XSS, CSRF, injection attacks, authorization flaws, etc.) - Familiarity with security testing tools and frameworks - Experience partnering and collaborating with Product Engineers, advising on security matters and helping teams ship secure code faster - Experience shaping how an organisation thinks about security - driving best practices, improving processes, and raising the bar across teams COMPENSATION Compensation is transparent across the organization, and all team members within the same professional level and global region receive the same compensation, plus stock options: - United States: $190,500 USD - United Kingdom: £134,600 GBP - Canada: CA$253,500 CAD - All other regions*: €157,350 EUR   *Team members outside the US, UK and Canada are currently paid $178,500 USD. Pay converts to the EUR amount above on January 1, 2027 for Spanish team members, and approximately February 1, 2027 in all other regions.   Eligibility for company-sponsored health benefits is limited to team members based in the United States. This program does not extend to team members located in other countries, such as Canada or the UK.   Our Team Member Support Guide https://duckduckgo.com/assets/hiring/team_support_guide.pdf explains how we prioritize your wellbeing including paid parental leave, office setup, and co-working allowances. HIRING PROCESS Hiring works best when it's a two-way street. Learn how we help you get to know DuckDuckGo, envision your future role here, and find out more about how we hire https://duckduckgo.com/how-we-hire. DIVERSITY, EQUITY AND INCLUSION DuckDuckGo provides equal work opportunities to all team members and applicants, and it prohibits discrimination and harassment of any type on the basis of race, color, ethnicity, caste, religion, age, sex (including pregnancy), national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by our policies or federal, state, or local laws. We want to ensure that our hiring process is accessible. If you need reasonable accommodation for any part of the application process because of a medical condition or disability, please send an email to careers@duckduckgo.com to let us know the nature of your request. PLEASE NOTE THAT: - You’ll be required to attend meetings on camera via video conferencing - Expect to travel at least two times a year: once for our all-hands meetup and again for a team retreat (each around 4-5 days). While extenuating circumstances may impact attendance, everyone is strongly encouraged to attend. - While we offer a flexible work arrangement with no core hours, expect an average full-time commitment of 40 hours per week. - A successful candidate must pass a background check as a condition of joining the team. - By applying for this role, you confirm that all information submitted is accurate and complete. You further acknowledge that providing false or fraudulent information during the application process is cause for denial of an offer, revocation of any existing offer, or other adverse action, up to and including termination after the start of your commencement of work. Disclosure Statement: Use of AI in Hiring Process As part of our commitment to enhancing our recruitment process, we utilize artificial intelligence (AI) technology to assist in reviewing and summarizing job applications and test projects, including those tools integrated into our recruitment vendor platforms. We use AI to flag potentially fraudulent applications, analyze and summarize applicants’ experience, interviews, and project performance, and help streamline our selection process. Key Principles: - Data Privacy: All information provided in your application will be handled in accordance with our Recruiting Privacy Policy https://duckduckgo.com/static-assets/files/pages/careers/DuckDuckGo-Recruiting-Privacy-Policy-effective-September-30-2025.pdf. We ensure that your personal information is protected and used solely for recruitment purposes. - Human Oversight and Accountability: The AI technology is designed to support our hiring team by providing insights and summaries of applications and evaluations of test projects against scoring rubrics. All final evaluations and hiring decisions, however, will be made by our hiring team, who will consider the AI's input alongside other factors. - Transparency: We believe in transparency regarding our hiring practices. If you have any questions about how AI is used in our recruitment process, please feel free to reach out to us. By submitting your application, you acknowledge and consent to the use of AI technology in our review process. If you would like to request an alternative selection process, please contact us at careers@duckduckgo.com. Thank you for your interest in joining DuckDuckGo! #LI-DNI