Вакансии

Location: Remote - United States Reddit is a community of communities. It’s built on shared interests, passion, and trust, and is home to the most open and authentic conversations on the internet. Every day, Reddit users submit, vote, and comment on the topics they care most about. With 100,000+ active communities and approximately 130 million daily active unique visitors, Reddit is one of the internet’s largest sources of information. For more information, visit www.redditinc.com . About the Role Reddit is a community of communities. It’s built on shared interests, passion, and trust and is home to the most open and authentic conversations on the internet. Every day, Reddit users submit, vote, and comment on the topics they care most about. With 100,000+ active communities and approximately 97M+ daily active unique visitors, Reddit is one of the internet’s largest sources of information. For more information, visit redditinc.com . Reddit is hiring a Staff Product Security Engineer to make the secure path the easiest path for engineers and AI agents. You'll lead the design and delivery of secure frameworks, paved paths, and workflow-native controls that eliminate recurring vulnerability classes before they reach production. As AI-assisted development accelerates code velocity faster than manual review can absorb, this role exists to close that gap structurally — through guardrails, automation, and platform-level prevention that scale with the engineering org. What You'll Do Build and evolve secure frameworks, guardrails, and library-level controls that make common vulnerability classes harder to introduce. Design security controls for AI-assisted development — including reusable rule packs and skills that shape how engineers and coding agents generate, review, and ship code. Embed security into the workflows engineers already use. Drive product security reviews for new launches and major architectural changes. Identify and eliminate systemic security debt. Shape strategy, influence architecture, and drive execution across teams. What We're Looking For 8+ years of experience in software engineering, product security, or application security, with at least 2 years operating at a staff level of scope and impact. Proficiency in one or more languages (Go, Python, JS/TS). Experience designing, building, and operating production-quality systems and developer-facing platforms. Experience building secure frameworks, libraries, or guardrails that improve security across many teams at once. Demonstrated ability to integrate security into developer workflows: CI/CD, code review, release processes, and internal platforms. Clear communicator who can explain technical detail and business impact to both engineers and leadership. Comfortable in fast-moving environments where AI-assisted development is reshaping how software is built and reviewed. Experience with vulnerability discovery and remediation pipelines, including bug bounty or researcher-reported findings. Track record of mentoring engineers and raising the technical bar across a security or platform engineering org. Preferred Qualifications Experience securing AI/LLM systems, agentic workflows, or AI-assisted development tooling. Familiarity with authentication/authorization systems, cloud-native platforms, and how to secure them. #LI-Remote Pay Transparency: This job posting may span more than one career level. In addition to base salary, this job is eligible to receive equity in the form of restricted stock units, and depending on the position offered, it may also be eligible to receive a commission. Additionally, Reddit offers a wide range of benefits to U.S.-based employees, including medical, dental, and vision insurance, 401(k) program with employer match, generous time off for vacation, and parental leave. To learn more, please visit https://www.redditinc.com/careers/ . To provide greater transparency to candidates, we share base salary ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar stage growth companies. Final offer amounts are determined by multiple factors including, skills, depth of work experience and relevant licenses/credentials, and may vary from the amounts listed below. The base salary range for this position is: $217,000 — $303,900 USD In select roles and locations, the interviews will be recorded, transcribed and summarized by artificial intelligence (AI). You will have the opportunity to opt out of recording, transcription and summarization prior to any scheduled interviews. During the interview, we will collect the following categories of personal information: Identifiers, Professional and Employment-Related Information, Sensory Information (audio/video recording), and any other categories of personal information you choose to share with us. We will use this information to evaluate your application for employment or an independent contractor role, as applicable.  We will not sell your personal information or disclose it to any third party for their marketing purposes.  We will delete any recording of your interview promptly after making a hiring decision.  For more information about how we will handle your personal information, including our retention of it, please refer to our Candidate Privacy Policy for Potential Employees and Contractors . Reddit is proud to be an equal opportunity employer, and is committed to building a workforce representative of the diverse communities we serve.  Reddit is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If, due to a disability, you need an accommodation during the interview process, please let your recruiter know.

Location: Singapore, Singapore OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Team Our Trading Product Group leads the design of all the products on OKX's derivatives trading exchange, including spot trading, spot margin, futures, leveraged tokens, trading options etc. What You’ll Be Doing AI Agent Review & Escalation - Review AI agent outputs across risk monitoring workflows — assess findings for accuracy, identify false positives, and escalate risk events through the appropriate channels with clear, well-documented rationale. Risk Patrol Operation - Operate AI-assisted investigation workflows covering key risk metrics. Verify agent reasoning, identify analytical gaps, and ensure the quality output of investigations. Market Abuse Investigation - Review AI-surfaced signals related to suspected market abuse, assess the validity, and escalate to the appropriate team with a structured findings report. SOP Development & Agent Skill Authorship - Translate frontline risk experience into structured SOPs and agent skill sets. Identify blind spots in current detection logic, document edge cases, and collaborate with the Product team to continuously improve automated coverage. Risk System Quality Review - Conduct regular reviews of agent performance — assessing output quality, surfacing systematic errors, and proposing refinements. Serve as a quality gate between automated risk outputs and business-level decisions. Cross-Functional Risk Coordination - Communicate escalated risk findings clearly to Product, Compliance, Legal, and Operations teams. Ensure AI-generated intelligence is accurately interpreted and translated into actionable, well-documented recommendations. What We Look For In You 3+ years in trading risk, ideally at a crypto exchange or derivatives venue. Deep knowledge of attack vectors: pump-and-dump, wash trading, liquidation suicide attacks, Sybil patterns, flash crashes. Strong data intuition — Able to QA AI-generated analysis, spot anomalies in outputs, and challenge agent conclusions. Comfort operating in an AI-augmented workflow: prompting agents, reading structured outputs, making final calls under time pressure. Excellent judgment in ambiguous, high-pressure situations — You decide, the agent advises. Cross-functional collaboration skills; able to work with PMs, engineers, and compliance. Nice-To-Haves Hands-on experience with LLM-based tools, SQL, or Python — Enough to validate AI-generated queries. Personal trading experience or financial risk certification (FRM/CFA). Mandarin proficiency for collaboration with technical teams. Experience writing or refining risk SOPs or runbooks. Perks & Benefits Competitive total compensation package L&D programs and education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Canada; England; Portugal; Spain; Italy; Germany; United States Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ THE ROLE You are a product security engineer with a strong engineering foundation. Embedded in the Desktop engineering team, you will bring an engineering-first perspective to the security of a complex, cross-platform product built at the intersection of identity, OCI runtimes, and Linux kernel internals. You will read and write Go, contribute security fixes and hardening to the codebase, and make security a first-class concern from the inside out: not as an outside reviewer, but as a contributing member of the team. This role is for a security engineer who builds: someone who applies an engineer’s instinct to making Docker Desktop more secure by default. _______________________________________________________________________ RESPONSIBILITIES - 6+ years of experience in product security, application security, or software engineering with a security focus, including time embedded with or partnered closely with product engineering teams. - Proficiency in Go (or a comparable systems language), with the ability to review security-sensitive code and ship production-quality fixes and tooling. - Solid understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries. - Solid grasp of container runtime security (e.g. runc, containerd, BuildKit) and OCI specifications. - Working knowledge of identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts. - Hands-on experience performing security design reviews and threat modeling for product features. - Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters. - Strong written and verbal communication skills; comfortable bridging the gap between a dedicated security team and a product engineering team. _______________________________________________________________________ QUALIFICATIONS - 6+ years of software engineering experience, with meaningful exposure to security-sensitive systems or a strong personal interest in security. - Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience - Strong proficiency in Go, with a track record of writing and shipping production-grade code. - Solid understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries. - Familiarity with OCI specifications and container runtime internals. - Working knowledge of identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts. - Comfort participating in security design reviews and threat modeling, even if security has not been your primary title. - Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters. - Strong written and verbal communication skills; comfortable bridging the gap between a dedicated security team and a product engineering team. _______________________________________________________________________ WHAT TO EXPECT FIRST 30 DAYS - You will onboard into the team and get hands-on with the Docker Desktop codebase, architecture, and development workflow. You will meet your counterparts in the central security organization and learn how vulnerability reports are currently handled. The goal is to listen, ask questions, and build a clear picture of the product’s current security posture, not to change anything yet. FIRST 90 DAYS - You will be an active participant in design and code reviews, bringing a security lens to features in flight and landing your first security fixes in the codebase. You will have taken ownership of the vulnerability intake process, handling your first end-to-end triage cycles with minimal guidance. You will have a working relationship with the engineers on the team and a growing sense of where the most meaningful security investments should be made. ONE YEAR OUTLOOK (FIRST YEAR) - You will be the team’s trusted authority on product security and a contributor to the codebase. You will have driven meaningful improvements to threat modeling practices, auth flows, container isolation defaults, or time-to-remediation, and shipped security improvements directly to the code. Your work will be directly visible in the security and resilience of a product used by millions of developers every day. Visa sponsorship: Docker considers visa sponsorship on a case-by-case basis based on business needs. _______________________________________________________________________ COMPENSATION & EQUITY All full-time roles include equity. Final compensation is determined on factors including but not limited to experience, skills, qualifications, and location. Canada: CA$271,150 – CA$434,000 base United States: $194,150 – $312,950 base Europe: €113,860 – €186,780 base ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Location: Hong Kong Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped our collaborative mindset, which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors. Your future role within QRT As a Senior Security Engineer, you will play a hands-on role in building, operating, uplifting, and evolving core security platforms and controls across hybrid, multicloud, and on-prem environments. You will act as a subject matter expert for key security solutions, ensuring security controls are observable, scalable, and well integrated across the wider technology ecosystem. You will actively partner with stakeholders, build strong relationships with engineering, infrastructure, and wider business teams, and collaborate across functions to help shape a modern, scalable security function from the ground up. Key Responsibilities Perform the hands-on implementation, operation, and continuous improvement of core security platforms and key security controls, including responsibility for platform health, effectiveness, and ongoing evolution Act as subject matter expert for assigned security solutions, championing their roadmap, integration, and operational performance Support hands-on BAU operation of security products within a global, 24/7 follow-the-sun Security Operations model, including participation in rotational weekend coverage, in depth troubleshooting, and responding to security events that impact system availability, stability, or operational performance, acting as an escalation point for complex issues Design and implement new security controls and technologies to strengthen the organisation’s cyber resilience Drive security solution observability and monitoring, ensuring appropriate coverage, alerting, and operational visibility Implement automated and scalable security solutions, processes, and controls across hybrid, multi cloud, and on prem environments to improve resilience and reduce manual effort Oversee and support security changes in a controlled and well communicated manner Build, maintain, and continuously improve operational runbooks, playbooks, and procedures to support reliable day to day operations Partner with engineering, infrastructure, and wider business stakeholders to embed practical, scalable security controls that support fast moving delivery models Contribute to the design, implementation, and enforcement of security policies, standards, and best practices Position security as a business enabler by aligning controls with operational effectiveness and supporting innovation without compromising protection Mentor and support other engineers through technical guidance, knowledge sharing, and practical leadership To be considered a good cultural fit, you should have: Humble, curious and hungry to learn Flexible and reliable team player who enjoys working in a collaborative environment Strong communication and interpersonal skills will be needed to collaborate with colleagues across the firm globally Your Present Skillset: Minimum 10 years’ experience in a security engineering or closely related role Strong hands-on experience operating and uplifting security technologies including firewalls, EDR, identity solutions, vulnerability management platforms, SASE, CASB, proxies, SIEM and security analytics, cloud security controls, and automation driven security platforms Strong technical foundations across networking, operating systems, cloud platforms, and security engineering concepts Solid understanding of major network protocols across multiple layers of the stack Experience protecting and safeguarding data and assets at both the network and platform layers Proven hands-on experience operating security controls and security operations capabilities in production environments Ability to analyse network traffic and troubleshoot complex issues using tools such as tcpdump and Wireshark Strong understanding of offensive security from an adversary perspective, including how attacks manifest and how controls fail in real world environments Demonstrated ability to identify and respond to threats in distributed environments, particularly where system availability, stability, or operational performance is impacted Programming or scripting skills in at least one high level language, with a strong focus on automation and operational efficiency Strong sense of ownership and accountability, with a track record of driving complex issues through to resolution Broad understanding of security principles and technologies spanning product and software security, cloud platforms, and business applications Experience securing both Windows and Linux based systems Extensive experience with one or more public cloud platforms such as AWS, Microsoft Azure, or Alibaba Cloud, particularly within hybrid environments In-depth knowledge of threat modelling, risk assessment, and mitigation strategies for largescale, complex systems in fast paced environments Experience with low latency or performance sensitive financial systems is an advantage QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.

Location: Atlanta, Georgia, United States About At-Bay At-Bay is the world’s first InsurSec provider designed from the ground up to help businesses tackle cyber risk head on. By combining industry-leading insurance with world-class cybersecurity technology, At-Bay offers end-to-end prevention and protection for the digital age. With 98% of cyber insurance claims in the past five years coming from small and mid-size businesses with revenue under $2B, providing an integrated solution to help manage risk is more critical than ever. At-Bay helps its 35,000+ customers close their security technology and skills gap — all through their cyber insurance policy — making them less likely to be hit with a ransomware attack. As a full-stack insurance company, At-Bay offers multiple lines of specialty insurance, including Cyber, Tech E&O, and Miscellaneous Professional Liability (MPL) policies. Responsibilities Manage and grow At-bay’s core wholesale broker base and GWP, making sure our brokers are getting world-class service at all times. Portfolio Management: Closely manage and monitor a middle market book of business, ensuring financial targets are met and implementing strategies to optimize profitability. Propose & negotiate price, coverage, and terms for insurance policies, and achieve favorable outcomes while balancing risk and business goals Solicit and analyze risk within At-bay’s guidelines and ensure proper documentation. service existing renewals and new business portfolio Collaborate with cyber analytics, product, marketing and other parts of At-bay to make sure brokers are getting the best At-bay has to offer Work with technology and data teams to create tools to enhance the underwriting process Attributes and Qualifications Approximately 3-6 years of experience as underwriter in cyber liability, Tech, Media E&O, Miscellaneous E&O, other E&O lines or specialty commercial insurance You possess solid knowledge of specialty commercial underwriting, and insurance industry theories and practices Strong technology affinity, ability to work with advanced analytics software Technical background. Strong plus if you already know what DNS, IP addresses, ports, databases, and other software/computer networking concepts You’re an amazing team player; you make everyone else on the team better and you don’t let your ego get in the way

Location: Riyadh, Saudi Arabia As a Senior Email Security Engineer at Müller's Solutions, you will be responsible for designing, implementing, and managing email security solutions to protect the organization's email systems from cyber threats such as phishing, spam, malware, and data leakage. You will lead initiatives to strengthen email security posture, conduct threat analysis, and collaborate with IT teams to ensure secure and reliable email communication. Key Responsibilities: Own enterprise email security gateways in production environments Design, tune, and operate: Anti‑phishing, anti‑spoofing, and malware controls Secure mail routing, TLS enforcement, and quarantine workflows Lead incident response for email‑borne threats (BEC, malware, zero‑day phishing) Integrate email security with M365 Defender / SIEM / SOAR / DLP Produce audit‑ready evidence aligned to SAMA / NCA frameworks Mentor L1/L2 analysts and document operational runbooks Design, deploy, and maintain email security solutions including anti-phishing, anti-spam, email encryption, and data loss prevention technologies. Monitor and analyze email security incidents, respond to threats, and conduct investigations to mitigate risk. Implement and manage email security protocols such as SPF, DKIM, DMARC to enhance email authentication and trustworthiness. Collaborate with other IT and security teams to integrate email security with overall cybersecurity strategy. Develop and enforce email security policies, procedures, and best practices. Conduct regular security assessments and vulnerability testing on email systems. Stay current on emerging email threats and advanced attack techniques to proactively recommend improvements. Provide training and awareness sessions regarding email security to employees and stakeholders. Requirements Requirements: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. FireEye EX / Trellix Email SecurityCisco Secure Email Gateway (ESA / IronPort)Trend Micro ScanMailProofpoint or Mimecast Microsoft Defender for Office 365 & EOP Exchange Online mail flow & hybrid email routing DMARC, DKIM, SPF enforcement & troubleshooting Email threat hunting & forensic analysis5+ years of experience in email security or related cybersecurity roles. Strong knowledge of email security technologies such as Microsoft Defender for Office 365, Proofpoint, Mimecast, or similar platforms. Proficiency in implementing and managing SPF, DKIM, and DMARC protocols. Experience with email encryption standards and data loss prevention (DLP) solutions. Demonstrated ability to analyze and respond to email-based threats such as phishing and malware. Familiarity with incident response procedures and security information and event management (SIEM) tools. Excellent problem-solving skills with strong attention to detail. Strong communication skills to educate and collaborate with technical and non-technical teams. Preferred Qualifications: Relevant certifications such as Certified Email Security Specialist (CESS), CISSP, or CISM. Experience with scripting and automation for email security processes. Knowledge of compliance standards related to email security and data privacy (e.g., GDPR, HIPAA). Experience in a managed security service provider (MSSP) environment is a plus. Strong advantage Experience in regulated Saudi environments Evidence‑driven operations (audits, compliance, KPIs) Incident leadership during phishing or BEC events Benefits Why Join Us: Opportunity to work with a talented and passionate team. Competitive salary and benefits package. Exciting projects and innovative work environment.

Location: Baku Workplace: onsite ABOUT YOU We are looking for a senior application security specialist to join a growing security team at Xsolla. This is a hands-on role where you will own security initiatives end-to-end - identifying, assessing, and driving remediation of security vulnerabilities across our products and infrastructure. You will lead day-to-day AppSec work - deep code reviews, vulnerability triage, threat modeling, and security testing - and set the standards for how this work is done. You are rigorous, pragmatic, and able to balance security risk against business velocity in a payment platform operating at scale. You will also mentor junior specialists and help raise the security bar across engineering teams. ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. Responsibilities Own Vulnerability Management - Lead triage of bug bounty reports and scanner findings. Set severity standards, drive escalation policy, and ensure remediation SLAs are met across teams. Lead Security Assessments - Plan and conduct in-depth security assessments and penetration tests of web applications, APIs, and services. Define assessment scope and methodology. Drive Threat Modeling - Facilitate threat modeling sessions with engineering teams. Identify trust boundaries, data flows, and attack surfaces early in the design phase, and embed the practice into the SDLC . Own AppSec Tooling Strategy - Select, operate, and tune SAST , DAST , SCA , and secrets-scanning tooling. Design noise-reduction and auto-triage workflows; integrate security gates into CI/CD. Lead Secure Code Reviews - Perform security-focused code reviews across PHP, Python, and Go codebases. Define secure coding guidelines and review checklists for engineering teams. Mentor and Educate - Coach junior security specialists, run internal security training, and champion security awareness among developers. Write Clear Security Documentation - Document findings, reproduction steps, and remediation guidance in a way engineering teams can act on. Set the documentation standard for the team. What You Bring 4+ years in application security or a closely related security engineering role, with demonstrable ownership of AppSec programs or major initiatives. Deep Web Security Expertise - Expert-level understanding of vulnerability classes ( OWASP Top 10 and well beyond: SSRF , deserialization, request smuggling, OAuth/ OIDC flaws, business logic abuse). You understand root causes, exploitation chains, and realistic impact in production systems. Offensive Testing Proficiency - Extensive hands-on experience with Burp Suite and manual testing methodology. You can find vulnerabilities that scanners miss and chain low-severity issues into meaningful impact. Code Fluency - Comfortable reading and auditing code in at least one of: PHP, Python, Go, JavaScript. Able to trace data flows across services and spot vulnerable patterns without runtime access. Secure SDLC Experience - Practical experience embedding security into development workflows: security requirements, design review, CI/CD security gates, and developer enablement. Risk Communication - You can calculate and defend real severity, push back on inflated findings, and explain risk to both engineers and leadership in their own language. Analytical Thinking - You reason through problems methodically and can explain not just what a vulnerability is, but why it exists, how it is exploited, and what fixing it actually requires. Ownership and Follow-Through - You drive findings to resolution across team boundaries without being asked. Nice to Have Track record in bug bounty programs (accepted reports on major platforms) or notable CTF results; Strong automation skills - Python or Go for building internal security tooling; Experience securing cloud-native environments - GCP preferred; Kubernetes security a plus; Advanced certifications - OSWE , OSCP , BSCP , or GWAPT; Experience in payments, fintech, or other regulated environments ( PCI DSS familiarity); CVE credits, public security research, or conference talks. Xsolla operates across multiple time zones. Strong written communication is essential - you will need to document your work clearly so findings and context are not lost across handoffs. We value directness, intellectual honesty, and follow-through. If you do not know something, say so and find out. If you find something, explain it clearly and see it through to resolution.

Location: New York; Stockholm; San Francisco Workplace: OnSite ABOUT US: AI NEEDS A NEW INFRASTRUCTURE LAYER. WE'RE BUILDING IT AT MODAL. Every era of computing brought new workloads that previous infrastructure couldn't support: mainframes, databases, and the cloud. Each time, the company that rebuilt the layer underneath defined the decade. AI is no different, except it touches everything instead of one slice, and the window to build the layer underneath it is open right now. Our customers include category-defining companies like Ramp https://modal.com/blog/how-ramp-built-a-full-context-background-coding-agent-on-modal, Cognition, DoorDash, and Suno. They rely on Modal for instant GPU access, sub-second container starts, and native storage, so it's simple to serve low-latency inference, fine-tune models, and access production-ready sandboxes at scale. We've passed $1B in annualized run rate, up 15x from a year ago. In October 2026 we raised a $750M Series D led by Accel at a $15.75B valuation. Our team includes creators of popular open-source projects (e.g.,Seaborn https://github.com/mwaskom/seaborn,Luigi https://github.com/spotify/luigi), academic researchers, international olympiad medalists, and experienced engineering and product leaders with decades of experience. THE ROLE: We’re looking for an Infrastructure Security Engineer to design and secure the core systems that power our platform. This role focuses on building security directly into our infrastructure: from container isolation and orchestration to identity and secrets management in a multi-tenant, cloud-native environment. You’ll work closely with engineering teams to define secure primitives and ensure our platform is resilient, scalable, and trustworthy by design. This is a hands-on, deeply technical role focused on real systems, not compliance or policy. WHAT YOU’LL WORK ON: Platform & Runtime Security - Design and improve isolation mechanisms for multi-tenant workloads (containers, sandboxing, execution environments) - Strengthen boundaries between customers, workloads, and internal systems - Identify and mitigate risks in distributed, dynamic compute environments Container & Orchestration Security - Secure and harden containerized workloads and orchestration systems (e.g., Kubernetes or similar) - Improve workload isolation, scheduling boundaries, and runtime protections - Evaluate tradeoffs in multi-tenant execution models Identity & Access Management - Design and improve authentication and authorization systems across services - Implement strong service-to-service identity and least-privilege access patterns - Improve access controls across infrastructure and internal systems Secrets & Key Management - Build and maintain systems for securely managing secrets, tokens, and credentials - Improve rotation, auditing, and access controls - Reduce secret sprawl and integrate secure patterns into developer workflows Cloud & Infrastructure Security - Secure cloud environments across providers (AWS, GCP, etc.) with a focus on consistency and portability - Improve network boundaries, service segmentation, and access controls - Embed security into infrastructure-as-code and deployment systems Engineering Partnership - Work closely with product and infrastructure teams to design secure systems from the ground up - Review architecture and code for security risks and provide actionable guidance - Identify patterns in risks and drive cross-cutting improvements YOU MAY BE A FIT IF: Core Experience - You have experience securing cloud-native infrastructure and distributed systems in production - You have a background in infrastructure, backend, or security engineering - You’ve worked in multi-tenant or high-scale environments Technical Depth - You have a strong understanding of containerization and orchestration systems (e.g., Kubernetes or similar) - You’ve designed or secured isolation mechanisms in multi-tenant systems - You have a solid understanding of authentication, authorization, and service identity models - You have experience with secrets management and secure handling of credentials - You have a strong foundation in networking concepts (segmentation, service communication, access boundaries) Mindset - You have a builder mentality: you design and implement, not just review - You take a pragmatic approach to security in fast-moving environments - You’re comfortable working deeply with engineers and influencing system design NICE-TO-HAVE: - Experience with sandboxing or runtime isolation technologies (e.g., gVisor, Firecracker, seccomp, or similar) - Familiarity with kernel-level or low-level isolation primitives - Experience securing Kubernetes or similar orchestration systems in production - Background in developer infrastructure, compute platforms, or multi-tenant systems

Location: United Kingdom, Remote Workplace: remote Olo is a leading SaaS platform accelerating digital transformation in the restaurant industry, by helping customers deliver more personalised and profitable guest experiences. As a result, our digital ordering, payment, and guest engagement solutions enable brands to do more with less and make every guest feel like a regular. While our roots are in NYC, we’re intentionally investing in Belfast and Northern Ireland as a key hub, with an established leadership presence, a local team, and community for the long term. This role is fully remote, offering you flexibility to work from anywhere within the UK. Your new role As Senior Security Engineer, you will help Olo reduce identified risks, respond to adversarial attacks while maintaining the up-time of our systems, and implement the right strategic risk mitigation measures to safeguard the data of our clients and their customers while supporting innovation. You will also provide white glove service and support to internal and external stakeholders by addressing security questions and support issues as needed, and by mentoring other engineers in how to best provide support.  Additionally, you will help in the identification and prioritisation of future project initiatives based on risk, and execute on cross-functional projects with a high degree of ownership and excellence, all while actively mentoring other team members and elevating the collective team’s capabilities and skill sets through peering and informal training. How you’ll make an impact Lead improvements in detection and response capabilities, continuously optimising monitoring, alerting, and incident response processes. Mentor junior and mid-level engineers, setting a high standard in security practices and offering guidance for professional development. Participate actively in an on-call rotation, responding to escalated security incidents and coordinating effective resolutions. Demonstrate excellence in white-glove service delivery, ensuring security incidents are managed thoroughly and with professionalism. Define and collaborate on implementing leading security practices, ensuring strategies align with organisational security goals and industry standards. Take ownership of security project execution, prioritising tasks and aligning initiatives with team and company objectives. Use and optimise advanced security tools, including SIEMs and vulnerability scanners, to enhance detection, logging, and analysis capabilities. Conduct regular and detailed vulnerability assessments, identifying gaps in security controls and implementing mitigation strategies. Support compliance efforts, ensuring documentation, audits, and regulatory standards are met to maintain certifications and adherence to best practices. Collaborate with cross-functional teams, including development and IT, to integrate security best practices within architectural frameworks. Lead security awareness initiatives, educating technical teams on advanced security topics and secure coding practices. Stay informed on emerging security threats and technologies, continuously evaluating and integrating relevant tools or methodologies. Provide guidance for risk management processes, helping to establish and maintain effective risk identification and mitigation protocols. Develop and document security processes and procedures, ensuring consistency and readiness for both routine and high-stress security incidents. Support leadership with reporting by providing insights and data on incidents, vulnerabilities, project progress, and metrics to inform security decisions. Lead automation and process optimisation efforts by developing scripts and tools to automate repetitive security tasks as well as to enhance detection and response capabilities through the use of automation and integration of security tools. What will set you up for success Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent security experience). 5+ years of experience in security engineering and operations, including extensive experience in blue team operations, security architecture, DevOps, and general operations. Deep knowledge of information technology, evolving threats, attack patterns, incident response, and cybersecurity standards. Proven ability to develop and lead incident response, including remediation, mitigation, and regular status updates and reporting. Skilled in security event evaluation, discerning legitimate security incidents from false positives, incident investigation, countermeasures, and impact monitoring. Strong understanding of operating system, networking, and application hardening for Windows, macOS, and Linux, including virtualisation security. Experience deploying, maintaining, and administering security technologies like IDS, DLP, FIM, firewalls, SIEM, MFA, vulnerability assessment tools, web proxies, and WAFs. Experience with cloud providers and Infrastructure as Code (IaC) tools, such as Terraform, Ansible, or CloudFormation. Proficiency in AWS security best practices. Skills in automation, development, or scripting for enhanced security operations. Advanced knowledge of Application Security, modern web protocols, and Web Application Firewalls. Proficiency in email security protocols like SPF, DKIM, and DMARC. About Olo   Olo is a leading restaurant technology provider with ordering, payment, and guest engagement solutions that help brands increase orders, streamline operations, and improve the guest experience. Each day, Olo processes millions of orders on its open SaaS platform, gathering the right data from each touchpoint into a single source—so restaurants can better understand and better serve every guest on every channel, every time. Over 800 restaurant brands trust Olo and its network of more than 400 integration partners to innovate on behalf of the restaurant community, accelerating technology’s positive impact and creating a world where every restaurant guest feels like a regular. Learn more at olo.com   Applicant Privacy Notice (United Kingdom)

Location: Dhahran, Saudi Arabia Eram Talent is looking for a detail-oriented and knowledgeable GRC (Governance, Risk, and Compliance) Analyst with COBIT certification to join our team. As a trusted Talent Acquisition partner, we serve various industries by providing top-notch recruitment solutions. The GRC Analyst will play a crucial role in ensuring that our clients' IT governance, risk management, and compliance frameworks are effectively designed, implemented, and maintained. The successful candidate will work closely with stakeholders to identify and assess risks, develop control frameworks based on COBIT standards, and ensure compliance with relevant regulations and policies. This role involves continuous monitoring, reporting, and improvement of governance processes to ensure operational excellence and risk mitigation. Key Responsibilities: Develop, implement, and maintain GRC frameworks using COBIT principles and best practices. Conduct risk assessments and internal control evaluations to identify gaps and recommend improvements. Monitor compliance with IT policies, procedures, and regulatory requirements. Collaborate with IT and business teams to ensure proper governance and risk mitigation strategies are in place. Prepare and present reports to senior management on governance, risk, and compliance statuses. Support audit activities and facilitate responses to audit findings related to IT governance. Stay updated on new regulations and frameworks affecting IT governance and compliance. Promote awareness and understanding of GRC practices across the organization. Requirements Bachelor’s degree in Information Technology, Computer Science, Business Administration, or a related field. Experience in developing and implementing governance frameworks. Familiarity with compliance standards (e.g., ISO 38500, COBIT, NIST). Experience managing governance-related projects, including the ability to define objectives, allocate resources, and monitor progress. Good understanding of IT governance principles and best practices COBIT certification is mandatory. ISO/IEC 35800 (Corporate Governance Of IT) is preferred Proven experience as a GRC analyst or similar role, preferably in IT governance and risk management. Strong understanding of IT governance frameworks, especially COBIT. Knowledge of compliance requirements, risk management methodologies, and regulatory frameworks. Excellent analytical, problem-solving, and communication skills. Ability to work collaboratively with cross-functional teams and senior management. Detail-oriented with strong organizational skills. Experience supporting IT audits and addressing audit findings. Knowledge of other governance frameworks (e.g., ISO 27001, ITIL) is a plus.

Location: Japan; Remote; Singapore About the role We are seeking a hands-on Security Engineer who thrives in a startup environment. You'll work alongside product owners and engineers with the objective to secure the products in Startale's ecosystem. Products include a next-generation decentralized exchange with a fully on-chain order book (Strium), a user-facing application (StartaleApp) and a stablecoin (USDSC). This is a hands-on, technical role . You'll be the person who actively tests our systems, hunts for vulnerabilities, models threats against our products, and works with engineers to close the gaps — not the person who writes policies and generates reports. You'll report to the Security Lead and collaborate daily with Backend, Frontend, DevOps, and Blockchain engineering teams. Why this role Startale's products handle user funds and on-chain transactions so security work has tangible impact. Owning the security posture of a project at scale and complexity such as Strium is an opportunity for professional growth. You will have direct influence over how product security is built across the organization. Focus is on driving product security and not on maintaining compliance documentation. Our team is backed by and partnering with leading Japanese enterprises so you will have a chance to work in a stable and well-funded company but with the autonomy and speed of a small team. Key responsibilities Security Assessments & Penetration Testing : Conduct hands-on security testing of our applications, APIs, and infrastructure. Simulate real attack scenarios against our products. Find the vulnerabilities before external attackers or whitehat researchers do. Work with engineers to fix issues pragmatically. Threat Modeling : Build threat models for new services and features — especially Strium's trading engine, order book, and transaction flows. Identify attack surfaces, model adversary behavior, and define what needs to be hardened before launch. Vulnerability Triage & Remediation : Own the end-to-end lifecycle of findings — from discovery through severity assessment, developer-facing write-ups, remediation guidance, and verification of fixes. Coordinate with engineers so issues actually get closed. Vulnerability Disclosure & Bug Bounty : Manage incoming whitehat reports, validate findings by reproducing them, assess severity, communicate with researchers. AI Tools Security Support : Assess technical risks related to AI tools used within teams (such as data exfiltration, prompt injection, training-on-input), maintain security baselines for AI coding tools and review AI-powered internal tools. Qualifications Must-have 5+ years of hands-on experience with a focus on application security, penetration testing, or product security. Demonstrated ability to find vulnerabilities — through manual testing, architecture and/or code review, or creative attack simulation. You should be able to describe specific bugs you've found and how you found them. Practical experience with exchange or trading platform security — from a DEX (preferred) or DeFi protocol. You should understand order book mechanics, transaction flows, wallet security, and the threat landscape specific to trading infrastructure. Scripting and automation ability — you write tools and automate to scale security across the stack, not just audit and write reports. Experience triaging vulnerabilities and writing clear, actionable remediation guidance for developers. Strong written communication in English — you'll write tickets, assessment reports and researcher responses. Strong plus Experience with cloud infrastructure security — least-privilege enforcement, network security, secrets management. Experience with container security — network policies, RBAC, pod security standards, image scanning, Dockerfile hardening, base image management. Ability to read and review code in at least one of: TypeScript/JavaScript, Solidity, Rust. Understanding of software supply chain security, including dependency risks, build integrity, and methods for tracking what components are included in shipped software. Experience managing or participating in a bug bounty program (e.g. Immunefi, HackerOne). Domain plus Experience securing AI/LLM tooling in engineering teams — prompt injection risks, data leakage prevention, tool configuration hardening Japanese language ability (not required, but useful for company context) Location / Timezone Strong preference for Tokyo-based or Singapore-based candidates - Startale office locations. Remote-friendly for exceptional candidates — must have 3+ hours overlap with Tokyo business hours (JST, UTC+9). Target start date As soon as available; realistic target start of Q3 2026. Target companies Decentralized exchanges, DeFi protocols, blockchain security firms, L1/L2 chain security teams, or fintech companies with trading infrastructure. We're also open to strong AppSec engineers from cloud-native startups who have genuine interest in web3. Ideal candidate You're a hands-on security engineer who finds real vulnerabilities, not just runs scanners. You've secured a trading platform or exchange and understand the threats specific to financial infrastructure — order book manipulation, transaction signing, wallet compromise, front-running. You can take a system, map the attack surface, and come back with findings that matter. You write clear reports that engineers act on, and you know the difference between a theoretical risk and a real one. You're comfortable working independently in a fast-moving team where there's no playbook — you write the playbook.

Location: Amsterdam, Netherlands; Tel Aviv, Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is looking for an experienced Security Architect Manager to lead our cybersecurity architecture function, with a strong focus on Kubernetes security, cloud infrastructure, cloud-native architectures, and secure software development. The role is responsible for defining and implementing security architecture principles, designing secure cloud-native environments, and embedding security throughout infrastructure provisioning and software development lifecycles. The successful candidate will combine deep technical expertise in Kubernetes and cloud security with proven team leadership, architectural design, and cross-functional collaboration skills. They will work closely with Cloud Engineering, DevOps, R&D, Platform Engineering, IT, and Security teams to ensure that security is built into the organization’s technology foundations. Your responsibilities will include: Cybersecurity Architecture Define and maintain the organization’s cybersecurity architecture, reference architectures, security standards, and design principles. Lead security architecture reviews for new systems, applications, infrastructure, and technology initiatives. Translate threat models, business requirements, and risk assessments into practical security controls. Establish security-by-design principles across cloud, infrastructure, application, and platform architectures. Identify architectural security gaps and drive remediation roadmaps. Kubernetes and Cloud-Native Security Design and implement security architectures for Kubernetes-based environments and cloud-native platforms. Secure Kubernetes clusters, control planes, worker nodes, namespaces, workloads, and cluster-to-cluster communications. Define and enforce Kubernetes security best practices, including RBAC, workload identity, network policies, admission controls, Pod Security Standards, and secrets management. Secure container images and registries, including image scanning, provenance, signing, and supply chain integrity. Implement runtime security, workload isolation, threat detection, and monitoring for containerized environments. Secure Kubernetes ingress, service-to-service communications, APIs, and service mesh architectures where applicable. Establish security controls for container orchestration platforms across development, testing, and production environments. Evaluate and manage Kubernetes security risks, misconfigurations, excessive privileges, exposed services, and vulnerable workloads. Cloud Infrastructure Security Lead security architecture across AWS and/or Microsoft Azure, including cloud-native and hybrid environments. Define secure cloud landing zones, identity and access management, network segmentation, encryption, logging, and key management. Implement preventive and detective security controls using cloud-native security services and centralized policy enforcement. Drive cloud security posture management and remediation using CSPM, CNAPP, and related technologies. Ensure alignment with organizational security requirements and relevant industry standards. Secure Development and DevSecOps Integrate security throughout the Software Development Life Cycle (SDLC), from design and coding to deployment and production operations. Partner with R&D, DevOps, and Platform Engineering teams to embed security into CI/CD pipelines. Define and implement automated security controls, including SAST, DAST, Software Composition Analysis (SCA), secrets detection, and container image scanning. Establish secure coding standards, threat modeling practices, API security requirements, and secure software supply chain controls. Promote developer-friendly security tooling and reusable security patterns that minimize friction and accelerate delivery. Drive remediation of vulnerabilities and architectural weaknesses in collaboration with engineering teams. Security Engineering and Risk Management Develop technical security standards, architecture patterns, and security control baselines. Conduct threat modeling, attack-path analysis, architecture risk assessments, and security design reviews. Define security requirements for identity, access, data protection, network security, workload isolation, and observability. Collaborate with Security Operations to improve security telemetry, detection capabilities, and incident readiness. Evaluate emerging security technologies and recommend solutions based on risk reduction, operational effectiveness, and architectural fit. Track security findings and drive measurable improvements in the organization’s security posture. Team Leadership and Collaboration Lead, mentor, and develop a team of cybersecurity architects and security engineers. Define team strategy, technical priorities, delivery plans, and measurable performance indicators. Build effective partnerships with Cloud Engineering, DevOps, R&D, Platform Engineering, and other technology stakeholders. Communicate complex architectural risks and technical trade-offs to senior management and engineering leadership. Foster a culture of engineering excellence, automation, accountability, and continuous improvement. We expect you to have: 7+ years of experience in cybersecurity, security engineering, cloud security, or security architecture. 3+ years of experience managing technical teams or leading senior technical professionals. Strong practical knowledge of Kubernetes architecture and container security in production environments. Demonstrated experience securing cloud-native workloads and distributed systems. Strong expertise in AWS and/or Microsoft Azure security architecture. Hands-on understanding of Kubernetes RBAC, network policies, admission controllers, workload security, secrets management, and container runtime security. Experience with Docker or other container technologies, Kubernetes deployment workflows, and container registries. Strong understanding of cloud networking, IAM, encryption, key management, logging, and workload protection. Practical experience with Infrastructure as Code and automated security controls. Experience securing CI/CD pipelines and integrating security into software development processes. Knowledge of threat modeling, vulnerability management, security architecture reviews, and risk assessment methodologies. Proven ability to influence engineering teams and translate security requirements into scalable technical solutions. Excellent communication skills in English. Key Success Metrics Improved security posture and reduced attack surface across Kubernetes and cloud environments. Reduction in critical misconfigurations, excessive privileges, and recurring architectural vulnerabilities. Increased adoption of secure-by-design architecture patterns across engineering teams. Improved security coverage and automation across CI/CD pipelines and infrastructure provisioning. Reduced time to remediate critical security findings. Consistent implementation of Kubernetes and cloud security baselines. Improved collaboration between cybersecurity, cloud infrastructure, platform, and development teams. Development of a high-performing cybersecurity architecture team. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: Atlanta, Georgia, United States About At-Bay At-Bay is the world’s first InsurSec provider designed from the ground up to help businesses tackle cyber risk head on. By combining industry-leading insurance with world-class cybersecurity technology, At-Bay offers end-to-end prevention and protection for the digital age. With 98% of cyber insurance claims in the past five years coming from small and mid-size businesses with revenue under $2B, providing an integrated solution to help manage risk is more critical than ever. At-Bay helps its 35,000+ customers close their security technology and skills gap — all through their cyber insurance policy — making them less likely to be hit with a ransomware attack. As a full-stack insurance company, At-Bay offers multiple lines of specialty insurance, including Cyber, Tech E&O, and Miscellaneous Professional Liability (MPL) policies. Responsibilities Manage and grow At-bay’s core wholesale broker base and GWP, making sure our brokers are getting world-class service at all times. Portfolio Management: Closely manage and monitor a middle market book of business, ensuring financial targets are met and implementing strategies to optimize profitability. Propose & negotiate price, coverage, and terms for insurance policies, and achieve favorable outcomes while balancing risk and business goals Solicit and analyze risk within At-bay’s guidelines and ensure proper documentation. service existing renewals and new business portfolio Collaborate with cyber analytics, product, marketing and other parts of At-bay to make sure brokers are getting the best At-bay has to offer Work with technology and data teams to create tools to enhance the underwriting process Attributes and Qualifications Approximately 5-10 years of experience as underwriter in cyber liability, Tech, Media E&O, Miscellaneous E&O, other E&O lines or specialty commercial insurance You have a track record of strong account retention and new business results - even in a soft market You possess solid knowledge of specialty commercial underwriting, and insurance industry theories and practices Strong technology affinity, ability to work with advanced analytics software Technical background. Strong plus if you already know what DNS, IP addresses, ports, databases, and other software/computer networking concepts You’re an amazing team player; you make everyone else on the team better and you don’t let your ego get in the way

Location: Atlanta, Georgia, United States About At-Bay At-Bay is the world’s first InsurSec provider designed from the ground up to help businesses tackle cyber risk head on. By combining industry-leading insurance with world-class cybersecurity technology, At-Bay offers end-to-end prevention and protection for the digital age. With 98% of cyber insurance claims in the past five years coming from small and mid-size businesses with revenue under $2B, providing an integrated solution to help manage risk is more critical than ever. At-Bay helps its 35,000+ customers close their security technology and skills gap — all through their cyber insurance policy — making them less likely to be hit with a ransomware attack. As a full-stack insurance company, At-Bay offers multiple lines of specialty insurance, including Cyber, Tech E&O, and Miscellaneous Professional Liability (MPL) policies. Responsibilities Manage and grow At-bay’s core wholesale broker base and GWP, making sure our brokers are getting world-class service at all times. Portfolio Management: Closely manage and monitor a middle market book of business, ensuring financial targets are met and implementing strategies to optimize profitability. Propose & negotiate price, coverage, and terms for insurance policies, and achieve favorable outcomes while balancing risk and business goals Solicit and analyze risk within At-bay’s guidelines and ensure proper documentation. service existing renewals and new business portfolio Collaborate with cyber analytics, product, marketing and other parts of At-bay to make sure brokers are getting the best At-bay has to offer Work with technology and data teams to create tools to enhance the underwriting process Attributes and Qualifications Approximately 3-6 years of experience as underwriter in cyber liability, Tech, Media E&O, Miscellaneous E&O, other E&O lines or specialty commercial insurance You possess solid knowledge of specialty commercial underwriting, and insurance industry theories and practices Strong technology affinity, ability to work with advanced analytics software Technical background. Strong plus if you already know what DNS, IP addresses, ports, databases, and other software/computer networking concepts You’re an amazing team player; you make everyone else on the team better and you don’t let your ego get in the way

Location: The Netherlands; Poland; Portugal; United Kingdom; Spain; Italy; Israel Workplace: Remote The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for experienced, hands-on security practitioners, who will drive the adoption of modern security processes and tooling, with focus on automation and backed up by data-driven decisions. What you will do: - Secure cloud infrastructure supporting the ClickHouse products and services (AWS, GCP and Azure) - Collaborate with product and engineering teams to facilitate safe and secure use of public cloud infrastructure and resources - Develop and implement security systems (e.g. CSPM, infrastructure as code, secrets management) to secure and harden ClickHouse cloud infrastructure - Identify and respond to identified security issues, vulnerabilities, and incidents - Identify security gaps and vulnerabilities in ClickHouse assets - Develop processes, tooling and automation to scale security processes and mitigate risks to the business What you bring along: - Strong knowledge of and experience with multiple cloud service providers (AWS, GCP, Azure) - Experience securing large-scale customer-facing cloud infrastructures based on Kubernetes - Expertise in common cloud-based DevOps practices (e.g. CI/CD, infrastructure as code, secrets management) - Development and automation experience Bonus Points: - BS, MS, or PhD in Computer Science or related field - Previous contributions to open source projects - Security or cloud related certifications (AWS, GCP, Azure) #LI-JL1 PERKS - Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries. - Healthcare - Employer contributions towards your healthcare. - Equity in the company - Every new eligible team member who joins our company receives equity. - Time off - Flexible time off in the US, generous entitlement in other countries. - A USD$500 Home office setup if you’re a remote employee. - Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. CULTURE - WE ALL SHAPE IT As part of a rapidly scaling start-up, you will be instrumental in shaping our culture. Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse. EQUAL OPPORTUNITY & PRIVACY ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.

Location: San Francisco fal is the generative media ecosystem powering the next generation of AI products. We build the infrastructure, tools, and model access that teams need to move from idea to production, and do it at scale without compromise. For developers and enterprises, fal is the foundation that makes generative media not just possible, but practical: a unified platform where high-performance inference, orchestration, and observability come together to unlock new categories of AI-native products. As generative media reshapes industries across a market projected to grow by hundreds of billions over the next decade, fal is becoming the ecosystem that ambitious teams build on. ABOUT THE ROLE We’re hiring for a Staff Detection & Response Engineer to build fal's detection and response (D&R) program. You’ll own how we find, investigate, and contain threats across our organization and ecosystem. You’ll set the strategy, select the tooling, build the system, and lead incidents end to end, with room to grow the team as the program matures. Proficiency in building with and using AI is central to this role. What You’ll Do Build Detection - Stand up logging and telemetry pipelines across cloud, Kubernetes, bare-metal GPU hosts, threat intel platforms and identity/SaaS providers - Write, test, and tune detections as code, keeping signal high and noise low - Lead and run threat hunting to turn findings into lasting detections - Build AI-driven detection and response, using LLMs and agents for triage, enrichment, investigation, and alert correlation Own Incident Response - Lead incidents from triage and containment through forensics, communication, and post-incident review - Write the IR plan and playbooks, establish severity models, and set on-call rotations - Design and lead tabletop exercises with engineering and leadership Shape the Program - Own the D&R roadmap and build-vs-buy decisions - Define and report on coverage, MTTD, and MTTR - Partner with infra, platform, and ML teams to fix the gaps exposed by incidents - Own detection and incident response controls and evidence for SOC 2, ISO 27001 What We’re Looking For - AI fluency: you use LLMs, agents, and AI coding tools daily to build detections, automate investigations, and ship tooling - 5+ years in security engineering, with deep hands-on detection engineering and incident response experience - Experience leading incidents in cloud-native environments (AWS/GCP, Kubernetes, Linux) - Sound judgment during incidents, with actions proportional to real business impact - Hands-on with SIEM, EDR, and cloud security tooling - Has built or scaled a D&R or IR program, ideally as an early hire or founding team member - Communicates clearly under pressure to different audiences, from engineers to executives Nice to Have - Specialization in GPU infrastructure, ML platforms, or multi-tenant compute - Background or experience in forensics, malware analysis, or threat intelligence - Hands-on experience with detections-as-code or SOAR automation - Experience supporting SOC 2 or ISO 27001 audits COMPENSATION & BENEFITS - Competitive salary + equity - Full health, dental, and vision coverage - Opportunity to work on frontier AI infrastructure WHAT WE OFFER AT FAL - Interesting and challenging work - A lot of learning and growth opportunities - We offer visa sponsorship and will help you relocate to San Francisco. - Health, dental, and vision insurance (US) - Regular team events and offsites COMPENSATION - $180,000 - $250,000 + equity + comprehensive benefits package U.S. EQUAL EMPLOYMENT OPPORTUNITY INFORMATION: fal provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other classification protected by applicable law.

Location: New York, New York, United States About At-Bay At-Bay is the world’s first InsurSec provider designed from the ground up to help businesses tackle cyber risk head on. By combining industry-leading insurance with world-class cybersecurity technology, At-Bay offers end-to-end prevention and protection for the digital age. With 98% of cyber insurance claims in the past five years coming from small and mid-size businesses with revenue under $2B, providing an integrated solution to help manage risk is more critical than ever. At-Bay helps its 35,000+ customers close their security technology and skills gap — all through their cyber insurance policy — making them less likely to be hit with a ransomware attack. As a full-stack insurance company, At-Bay offers multiple lines of specialty insurance, including Cyber, Tech E&O, and Miscellaneous Professional Liability (MPL) policies. Responsibilities Manage and grow At-bay’s core wholesale broker base and GWP, making sure our brokers are getting world-class service at all times. Portfolio Management: Closely manage and monitor an SMB book of business, ensuring financial targets are met and implementing strategies to optimize profitability. Propose & negotiate price, coverage, and terms for insurance policies, and actively identify account rounding opportunities Solicit and analyze risk within At-bay’s guidelines and ensure proper documentation. service existing renewals and new business portfolio Collaborate with cyber analytics, product, marketing and other parts of At-bay to make sure brokers are getting the best At-bay has to offer Work with technology and data teams to create tools to enhance the underwriting process Attributes and Qualifications Approximately 1-3 years of experience as underwriter in cyber liability, Tech, Media E&O, Miscellaneous E&O, other E&O lines or specialty commercial insurance You possess solid knowledge of specialty commercial underwriting, and insurance industry theories and practices Strong technology affinity, ability to work with advanced analytics software Technical background. Strong plus if you already know what DNS, IP addresses, ports, databases, and other software/computer networking concepts You’re an amazing team player; you make everyone else on the team better and you don’t let your ego get in the way Our estimated base pay range for this role is $100,000-$120,000 per year. Base salary is determined by a variety of factors including but not limited to market data, location, internal equitability, domain knowledge, experiences and skills. In general, if the position sparks your interest we encourage you to apply - our team prioritizes talent.

Location: New York, New York, United States About At-Bay At-Bay is the world’s first InsurSec provider designed from the ground up to help businesses tackle cyber risk head on. By combining industry-leading insurance with world-class cybersecurity technology, At-Bay offers end-to-end prevention and protection for the digital age. With 98% of cyber insurance claims in the past five years coming from small and mid-size businesses with revenue under $2B, providing an integrated solution to help manage risk is more critical than ever. At-Bay helps its 35,000+ customers close their security technology and skills gap — all through their cyber insurance policy — making them less likely to be hit with a ransomware attack. As a full-stack insurance company, At-Bay offers multiple lines of specialty insurance, including Cyber, Tech E&O, and Miscellaneous Professional Liability (MPL) policies. Responsibilities Manage and grow At-bay’s core wholesale broker base and GWP, making sure our brokers are getting world-class service at all times. Portfolio Management: Closely manage and monitor an SMB book of business, ensuring financial targets are met and implementing strategies to optimize profitability. Propose & negotiate price, coverage, and terms for insurance policies, and actively identify account rounding opportunities Solicit and analyze risk within At-bay’s guidelines and ensure proper documentation. service existing renewals and new business portfolio Collaborate with cyber analytics, product, marketing and other parts of At-bay to make sure brokers are getting the best At-bay has to offer Work with technology and data teams to create tools to enhance the underwriting process Attributes and Qualifications Approximately 3-6 years of experience as underwriter in cyber liability, Tech, Media E&O, Miscellaneous E&O, other E&O lines or specialty commercial insurance You possess solid knowledge of specialty commercial underwriting, and insurance industry theories and practices Strong technology affinity, ability to work with advanced analytics software Technical background. Strong plus if you already know what DNS, IP addresses, ports, databases, and other software/computer networking concepts You’re an amazing team player; you make everyone else on the team better and you don’t let your ego get in the way Our estimated base pay range for this role is $130,000-$150,000 per year. Base salary is determined by a variety of factors including but not limited to market data, location, internal equitability, domain knowledge, experiences and skills. In general, if the position sparks your interest we encourage you to apply - our team prioritizes talent.