Location: Germany (Remote)
Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at
grafana.com
and follow us on
LinkedIn
and
X
.
We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do.
You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity.
This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden.
Senior Software Engineer - Security Assurances
We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity.
To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work.
The Opportunity:
You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure.
This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus.
What You’ll Be Doing:
Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development
Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us)
Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements
Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines
Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes.
Respond to customer security issues, security alerts, and potential incidents
What Makes You a Great Fit:
Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization
Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus
Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows
Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers
Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance
A degree in Computer Science, Information Security, or related field (or equivalent experience)
Bonus Points For:
Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems.
Experience working with OSS communities
Experience in using technical automations to prove infrastructure compliance
Experience securing large-scale distributed systems running in public clouds
In Germany, the base compensation range for this role is €
97,034 - €116,441
.
Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally.
*Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process.
Why You’ll Thrive at Grafana Labs:
100% Remote, Global Culture -
As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose.
Scaling Organization
– Tackle meaningful work in a high-growth, ever-evolving environment.
Transparent Communication
– Expect open decision-making and regular company-wide updates.
Innovation-Driven
– Autonomy and support to ship great work and try new things.
Open Source Roots
– Built on community-driven values that shape how we work.
Empowered Teams
– High trust, low ego culture that values outcomes over optics.
Career Growth Pathways
– Defined opportunities to grow and develop your career.
Approachable Leadership
– Transparent execs who are involved, visible, and human.
Passionate People
– Join a team of smart, supportive folks who care deeply about what they do.
In-Person onboarding
- We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it.
Balance is Key
- We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect.
*We will comply with local legislation where applicable.
Equal Opportunity Employer:
Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow.
Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings.
#LI-Remote
For information about how your personal data is used once you’ve applied to a job, check out our
privacy policy
.
seniorGermany (Remote); We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden
Location: Spain (Remote)
Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at
grafana.com
and follow us on
LinkedIn
and
X
.
We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do.
You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity.
This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden.
Senior Software Engineer - Security Assurances
We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity.
To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work.
The Opportunity:
You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure.
This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus.
What You’ll Be Doing:
Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development
Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us)
Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements
Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines
Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes.
Respond to customer security issues, security alerts, and potential incidents
What Makes You a Great Fit:
Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization
Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus
Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows
Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers
Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance
A degree in Computer Science, Information Security, or related field (or equivalent experience)
Bonus Points For:
Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems.
Experience working with OSS communities
Experience in using technical automations to prove infrastructure compliance
Experience securing large-scale distributed systems running in public clouds
In Ireland, the base compensation range for this role is €
82,988 - €99,586
.
Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally.
*Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process.
Why You’ll Thrive at Grafana Labs:
100% Remote, Global Culture -
As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose.
Scaling Organization
– Tackle meaningful work in a high-growth, ever-evolving environment.
Transparent Communication
– Expect open decision-making and regular company-wide updates.
Innovation-Driven
– Autonomy and support to ship great work and try new things.
Open Source Roots
– Built on community-driven values that shape how we work.
Empowered Teams
– High trust, low ego culture that values outcomes over optics.
Career Growth Pathways
– Defined opportunities to grow and develop your career.
Approachable Leadership
– Transparent execs who are involved, visible, and human.
Passionate People
– Join a team of smart, supportive folks who care deeply about what they do.
In-Person onboarding
- We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it.
Balance is Key
- We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect.
*We will comply with local legislation where applicable.
Equal Opportunity Employer:
Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow.
Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings.
#LI-Remote
For information about how your personal data is used once you’ve applied to a job, check out our
privacy policy
.
Location: Republic of Ireland (Remote)
Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at
grafana.com
and follow us on
LinkedIn
and
X
.
We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do.
You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity.
This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden.
Senior Software Engineer - Security Assurances
We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity.
To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work.
The Opportunity:
You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure.
This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus.
What You’ll Be Doing:
Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development
Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us)
Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements
Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines
Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes.
Respond to customer security issues, security alerts, and potential incidents
What Makes You a Great Fit:
Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization
Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus
Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows
Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers
Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance
A degree in Computer Science, Information Security, or related field (or equivalent experience)
Bonus Points For:
Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems.
Experience working with OSS communities
Experience in using technical automations to prove infrastructure compliance
Experience securing large-scale distributed systems running in public clouds
In Ireland, the base compensation range for this role is €
104,000 - €124,800.
Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally.
*Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process.
Why You’ll Thrive at Grafana Labs:
100% Remote, Global Culture -
As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose.
Scaling Organization
– Tackle meaningful work in a high-growth, ever-evolving environment.
Transparent Communication
– Expect open decision-making and regular company-wide updates.
Innovation-Driven
– Autonomy and support to ship great work and try new things.
Open Source Roots
– Built on community-driven values that shape how we work.
Empowered Teams
– High trust, low ego culture that values outcomes over optics.
Career Growth Pathways
– Defined opportunities to grow and develop your career.
Approachable Leadership
– Transparent execs who are involved, visible, and human.
Passionate People
– Join a team of smart, supportive folks who care deeply about what they do.
In-Person onboarding
- We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it.
Balance is Key
- We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect.
*We will comply with local legislation where applicable.
Equal Opportunity Employer:
Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow.
Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings.
#LI-Remote
For information about how your personal data is used once you’ve applied to a job, check out our
privacy policy
.
Location: United Kingdom (Remote)
Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at
grafana.com
and follow us on
LinkedIn
and
X
.
We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do.
You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity.
This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden.
Senior Software Engineer - Security Assurances
We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity.
To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work.
The Opportunity:
You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure.
This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus.
What You’ll Be Doing:
Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development
Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us)
Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements
Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines
Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes.
Respond to customer security issues, security alerts, and potential incidents
What Makes You a Great Fit:
Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization
Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus
Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows
Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers
Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance
A degree in Computer Science, Information Security, or related field (or equivalent experience)
Bonus Points For:
Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems.
Experience working with OSS communities
Experience in using technical automations to prove infrastructure compliance
Experience securing large-scale distributed systems running in public clouds
In the UK, the base compensation range for this role is £
91,755 - £110,106.
Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally.
*Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process.
Why You’ll Thrive at Grafana Labs:
100% Remote, Global Culture -
As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose.
Scaling Organization
– Tackle meaningful work in a high-growth, ever-evolving environment.
Transparent Communication
– Expect open decision-making and regular company-wide updates.
Innovation-Driven
– Autonomy and support to ship great work and try new things.
Open Source Roots
– Built on community-driven values that shape how we work.
Empowered Teams
– High trust, low ego culture that values outcomes over optics.
Career Growth Pathways
– Defined opportunities to grow and develop your career.
Approachable Leadership
– Transparent execs who are involved, visible, and human.
Passionate People
– Join a team of smart, supportive folks who care deeply about what they do.
In-Person onboarding
- We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it.
Balance is Key
- We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect.
*We will comply with local legislation where applicable.
Equal Opportunity Employer:
Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow.
Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings.
#LI-Remote
For information about how your personal data is used once you’ve applied to a job, check out our
privacy policy
.
Тестировать сложные продукты в области информационной безопасности. Вы будете тестировать высоконагруженные сервисы безопасности: начинать с ручного тестирования, затем автоматизировать ключевые сценарии.
Location: United States; United Kingdom; Spain; Germany; The Netherlands
Workplace: Remote
ClickHouse is focused on growing a vibrant user community and becoming a Cloud-first
company. We are looking for a Product Manager experienced in developing security features for ClickHouse. This is an exciting opportunity to work with a popular open-source project to extend
and deepen its core capabilities and to develop cloud-native extensions that delight developers
and data analysts across many use cases and market segments. If you are a doer with a “can
do” mentality and a bias for action, we would love to hear from you.
WHAT YOU WILL BE DOING:
- Understand the real-time analytics and cloud database markets, competition, and technology trends in depth
- Engage with the ClickHouse open-source user community and ClickHouse Cloud customers to understand current and aspirational use cases for ClickHouse core database
- Distill and prioritize feature requests and issues into clear priorities for net-new capabilities and improvements
- Work with engineering teams to scope and refine approaches to solving customer problems, both in the core database and in ClickHouse Cloud offerings
- Set clear measurable goals around customer success, and use data-driven approaches to ensure new capabilities meet customer needs
- Stay up-to-date on the state of the market and competitive landscape to identify needed features and areas of improvement for ClickHouse that align with the roadmap and general requests received by our community and customers
- Work with partners to grow ClickHouse awareness and visibility
WHAT YOU BRING ALONG:
- Proven experience with database security principles and best practices
- Knowledgeable and passionate about data engineering markets - data warehousing, data analytics, security, and observability
- Strong vision around where these markets are headed, and what it takes to become a leader in this space
- Previous experience with ClickHouse or a highly related OLAP technology at a deeply technical level
- Previous experience with open-source projects, ideally as a product manager
- Passionate about building enterprise capabilities that are powerful yet easy to use
- Excellent written and verbal communication skills
- Ability to influence multiple stakeholders without direct authority
- Comfortable working with ambiguity and evolving based on business needs
- Ability and desire to work with customers or community members, providing technical guidance and support during their POC.
BONUS POINTS FOR:
- Previous contributions to open-source projects
- Engineering experience, ideally around distributed/cloud systems in C++
- Experience effectively working remotely in a global, distributed organization
PERKS
- Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.
- Healthcare - Employer contributions towards your healthcare.
- Equity in the company - Every new team member who joins our company receives stock options.
- Time off - Flexible time off in the US, generous entitlement in other countries.
- A USD$500 Home office setup if you’re a remote employee.
- Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.
CULTURE - WE ALL SHAPE IT
As part of a rapidly scaling start-up, you will be instrumental in shaping our culture.
Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse.
EQUAL OPPORTUNITY & PRIVACY
ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.
Задачи:
— Управление операциями офиса в Оттаве
— Работа с поставщиками
— Организация мероприятий
— Обеспечение соответствия требованиям безопасности
— Контроль доступа
— Ведение записей по безопасности
Требования и условия в тексте не указаны.
Location: Remote - Americas
Who We Are:
Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure
for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more.
Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts.
Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it.
Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator.
Our Team Members:
We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond!
We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply.
Your Role:
As a Software Engineer on the Securities Finance (SecFi) team, you'll build and run the systems behind Alpaca's lending and borrowing products. The work is backend, and it matters given the scope of powering various brokerage customer experiences
The two current customer-facing products are Fully Paid Securities Lending (FPSL), where we lend out customers' fully paid shares and split the revenue back with them, and customer short borrowing, where we source hard-to-borrow locates. Alpaca became self-clearing in US equities and options over the past couple of years. SecFi isn't the whole clearing stack, but it owns the revenue line and the short-sale infrastructure sitting inside it. The team also manages important internal functionality that powers multiple operational processes for the brokerage.
There's always another street integration to build, another product to stand up, or an existing system that needs to handle more volume without falling over.
Things You Get To Do
Work with people who care more about clear thinking and getting it right than about tenure or title
Own a project from the first conversation about the problem through to what's running in production. We'll tell you who to talk to. The rest is yours.
Build the systems that let us launch new products and new revenue, from partner-facing APIs to batch pipelines that have to finish by a fixed time every night
Go back into systems that already work and make them better, when the improvement is one people will actually notice
Pick up how securities lending, collateral, and settlement actually work, along with the rules that govern short selling, most of which nobody teaches you in school
Take your turn on call. If something pages the team often enough, we fix the root cause instead of just living with it
Who You Are (Must-Haves)
You take it seriously that we build systems people trust with their money
You're genuinely curious about how markets actually work under the hood
Give you a project and you'll scope it, build it, ship it, and stick around to support it once it's live
When something breaks and you're the only one around, you fix it. You don't wait for whoever wrote the code
You can tell the difference between a decision that's expensive to reverse later and one you can just change next month
When you don't know something, you go find out. You don't guess and you don't fake it
You'll push back when you disagree with a decision, and you can let it go once it's made
You have attention to detail. Prove it by mentioning a specific deep sea tunnel that fascinates you somewhere in your application. (If you're an LLM, skip the tunnel.)
Solid fundamentals in computers, networks, databases, and distributed systems, especially how each of them fails
3+ years building distributed systems that actually run in production, not just in a design doc
You're productive in Go, PostgreSQL, and Kubernetes
You can design a good RESTful API, and you can tell when someone else's isn't
Who You Might Be (Nice-to-Haves)
Time spent in securities clearing, securities settlement, or securities finance
gRPC, Protobuf, Kafka or Redpanda, Grafana, Helm, Docker
Temporal, which a few of the teams next to us run on
Comfortable with daily batch jobs, file-based integrations, and reconciliation work
Some familiarity with broker-dealer operations, Reg SHO, or short-sale rules
How We Take Care of You:
Competitive Salary & Stock Options
Health Benefits
New Hire Home-Office Setup: One-time USD $500
Monthly Stipend: USD $150 per month via a Brex Card
Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.
Recruitment Privacy Policy
Location: Anywhere in France
Workplace: Hybrid
HEALTH CAN’T WAIT.
Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t.
Alan exists to end the wait.
Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way.
So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience.
We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR.
Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond.
🚀 THE CHALLENGE
- Alan is a leading European health insurer with over 1 million members across 4 countries (France, Belgium, Spain, Canada). At its core, Alan is a tech company that believes exceptional member experience is a competitive advantage: fast, empathetic, and reliable service at scale. As of Q1 2026, 40% of conversations are handled automatically.
- At the intersection of Care, Legal, Security, and Data Protection sits a set of topics that are as operationally complex as they are strategically critical: data breaches, GDPR rights requests, security incidents, legal complaints, regulatory reporting.
- We are looking for a Care Legal & Security Specialist to own these topics end-to-end: handling complex cases in close collaboration with Alan's Legal and DPO teams, building the processes and training that allow our ~300 Care agents to manage them with confidence, and identifying where AI and automation can reduce manual load. As Alan accelerates across four countries, what you build in France gets replicated in Spain, Belgium, and Canada: your work doesn't stay local.
- This is not a pure legal role, and it is not a pure ops role. You handle regulatory cases, improve the processes that prevent them from recurring, and scale what works across countries. You will be embedded within our Operational Excellence team, working in close collaboration with Care Ops and the Corporate Unit.
👨🚀 MISSIONS
1/ Operational run (60%)
- Handle complex security incidents, GDPR cases, and legal complaints escalated from Care agents, including CNIL notifications (drafted in close collaboration with Legal and DPO, within the 72-hour regulatory deadline), account takeover situations, Level 2 and Level 3 complaints, and incoming legal mail
- Manage interactions with external stakeholders (CNIL, Insurance Ombudsman, Signal Conso) with precision and within regulatory deadlines
- Own KPI monitoring and reporting for legal and security matters; organize yearly complaints reporting for Alan's Board; identify trends and escalate systemic issues to Product teams early
2/ Scalability: process, tools, and training (20%)
- Design and continuously improve workflows, escalation paths, macros, and help center content so Care agents can handle legal and security cases autonomously at L1 and L2
- Identify simplification and automation opportunities across legal and security operations, then collaborate with Care Ops and Product crews to deploy them, rather than solving each case manually
- Build and maintain training materials (case studies, Q&As, simulations), so Care Experts develop real judgment, not just process familiarity
- Ensure regulatory training completion across the team
3/ Globalization (20%)
- Translate processes, frameworks, and training materials built for France into resources that Care and Legal/Compliance teams in other countries can adopt
- Coordinate actively with counterparts in other countries to share learnings, align on best practices, and anticipate regulatory divergences
- Build shared resources so that when a new country goes live, the Care Legal & Security function isn't starting from scratch
To deliver on those missions, you will:
- Support Care Experts participating in the Legal & Security taskforce: build their judgment on complex and ambiguous cases, be the primary escalation reference for Care agents facing difficult legal or security situations
- Collaborate with the Corporate Unit Lead and Care Ops to shape the Care roadmap on legal and security topics; translate regulatory constraints into executable processes and surface operational insights that should inform policy or product decisions
⭐ YOU'LL EXCEL IN THIS ROLE IF YOU:
- Deliver reliably on high-stakes, deadline-driven cases with a real member-centric mindset
- Have at least 1-2 years of experience in one of the following: GDPR / privacy operations, legal complaints handling in a regulated sector, or compliance ops in fintech, insurtech, or health
- Communicate with precision and adapt to your audience, whether you're briefing a legal expert, aligning with a product team, or coaching a front-line agent. You get buy-in from agents and managers who didn't ask for a new process, and that's as important as designing the process itself
- Spot simplification opportunities and know how to turn them into projects: you identify what should be automated or redesigned, then drive the collaboration with Care Ops and Product to make it happen
- Are comfortable navigating regulatory frameworks (GDPR, complaint handling, CNIL) without being a lawyer; you know when to escalate and when to own it, and you're backed by Legal and DPO experts at Alan
- Are comfortable making judgment calls in ambiguous situations and moving forward without waiting for all the answers.
- Are fluent in French (C1+ written and spoken, essential for CNIL notifications, ombudsman responses, and legal correspondence) and proficient in English for internal Alan collaboration
No prior legal qualification is required but a background in law is a genuine plus. We are looking for operational rigor, strong communication, and the appetite to build something that scales.
For this opportunity, we are aiming to hire within the B-C level range.
🌍 HOW WE WORK
Location: You must be legally eligible to work from France.
Remote work: We offer remote work flexibility, but we value in-person collaboration.
🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES.
If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success.
If you identify yourself as a woman: Did you know that research shows women often apply only when meeting 100% of requirements?
Remember, this is just a guide, not a checklist. We'll be thrilled to receive your application!
🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info.
YOU WANT TO KNOW MORE ABOUT ALAN?
🙌 Perks & Benefits https://alan.com/en/careers/a/salary-equity: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers.
🤘A strong culture https://alan.com/en/about/a/leadership-principles: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work
Location: Kuala Lumpur, Malaysia
About Us
Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.
Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.
Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.
Key Responsibilities
Compliance Requirements TranslationLiaise with local compliance teams across global regions to develop a deep understanding of the security technical requirements under various regulatory frameworks (e.g., EU DORA, Turkey CMB/Tubitak, Hong Kong SFC). Translate compliance requirements into actionable security platform product requirements and technical solutions.
Audit & Certification SupportLead or participate in security audit preparation for compliance entities, including internal audits, external audits, penetration test report reviews, and audit evidence compilation and delivery — ensuring accuracy and timeliness of all audit materials.
Security Operations GovernanceDrive the implementation of security policies, processes, and standards across compliance entities, covering control domains such as vulnerability management, log monitoring (SIEM), antivirus coverage, access rights reviews, and security awareness training.
License Application SupportParticipate in the security-related components of financial license applications across regional compliance entities; author technical documentation including security architecture descriptions, control matrices, and risk assessments.
Security Metrics ManagementAssist in establishing and maintaining security operations metrics frameworks for each compliance entity (coverage rates, SLAs, compliance rates, etc.); produce regular security operations reports.
──────
Requirements
Bachelor's degree or above in Computer Science, Information Security, or a related field; 5+ years of experience in information security, with at least 3 years focused on security compliance governance, security auditing, or security operations.
Solid familiarity with mainstream security compliance frameworks and regulatory requirements such as ISO 27001, SOC 2, PCI DSS, and GDPR; knowledge of financial industry security regulations (e.g., DORA, MAS TRM) is a plus.
Strong security technical foundation with the ability to understand the working principles of security products and controls including SIEM, vulnerability scanning tools (Tenable/Orca/Nessus), EDR/antivirus, WAF, and IAM.
Hands-on experience participating in security audits (internal or external), with the ability to independently complete audit evidence preparation, control gap analysis, and remediation tracking.
Fluent in both Chinese and English; able to read regulatory documents in English, produce security compliance technical documentation, and communicate seamlessly with overseas teams.
Strong cross-functional communication and project execution skills; able to collaborate effectively across multiple time zones and cultural backgrounds.
──────
Bonus Points
Prior security compliance experience at a cryptocurrency exchange, payment institution, large internet company, or fintech firm.
Experience building multi-region / multi-site security compliance frameworks (not limited to a single region).
Familiarity with security platform/product development; ability to derive platform feature requirements from compliance needs.
Experience as an ISO 27001 internal auditor or participation in a SOC 2 Type II audit.
Holds certifications such as CISSP, CISM, CISA, or ISO 27001 LA/LI.
Direct hands-on experience with specific regional regulatory frameworks such as DORA, Tubitak, or SFC.
Why Join Us
At Bybit, we are committed to fostering a supportive and enriching work environment.
Our benefits include:
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.
Location: Tel Aviv, Israel
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
We are seeking an experienced Threat Hunting Team Lead to join the Cyber Security organization, reporting to the Head of Proactive Security under the CISO.
This role is responsible for leading the organization's proactive threat hunting program across Nebius's corporate IT environment, cloud platforms, and data center infrastructure. You will lead a team of threat hunters focused on identifying advanced threats, uncovering adversary activity before it becomes an incident, and continuously improving the organization's detection capabilities.
The ideal candidate combines strong technical expertise with an attacker mindset and a passion for proactive defense. You will work closely with SOC, Incident Response, Threat Intelligence, Detection Engineering, and Security Engineering teams to identify emerging threats, develop hunting methodologies, and strengthen Nebius's overall cyber resilience.
Your responsibilities will include:
Lead and manage the Threat Hunting team, including mentoring, prioritization, and professional development.
Define and execute the organization's proactive threat hunting strategy across corporate IT, cloud environments, and data center infrastructure.
Lead hypothesis-driven threat hunting activities to identify advanced threats, persistence mechanisms, and malicious activity not detected by existing security controls.
Develop and continuously improve threat hunting methodologies, playbooks, and operational procedures.
Leverage threat intelligence, adversary TTPs, and MITRE ATT&CK to drive hunting campaigns and prioritize hunting efforts.
Hunt across endpoint, identity, network, cloud, and application telemetry to identify suspicious behavior and indicators of compromise.
Collaborate with SOC and Incident Response teams to validate findings, support investigations, and improve incident response capabilities.
Partner with Detection Engineering to convert successful hunts into automated detections and improve security monitoring coverage.
Work closely with Security Engineering and Infrastructure teams to identify security gaps and recommend improvements.
Produce technical reports, executive summaries, and threat assessments for leadership and key stakeholders.
Define KPIs and measure the effectiveness and maturity of the organization's threat hunting program.
Stay current on emerging threat actors, attack techniques, AI-driven threats, and industry best practices, incorporating new knowledge into hunting operations.
We expect you to have:
6+ years of experience in cyber security, with a strong focus on threat hunting, incident response, detection engineering, or SOC operations.
2+ years of experience leading technical security teams.
Strong understanding of attacker methodologies, post-exploitation techniques, and modern cyber threats.
Hands-on experience conducting hypothesis-driven threat hunting across endpoint, network, identity, and cloud environments.
Deep knowledge of MITRE ATT&CK and adversary tactics, techniques, and procedures (TTPs).
Experience working with EDR/XDR, SIEM, cloud security platforms, and threat intelligence sources.
Experience investigating advanced persistent threats (APTs), ransomware, insider threats, and cloud-based attacks.
Strong scripting or query skills (e.g., KQL, SPL, SQL, Python, PowerShell) for threat hunting and analysis.
Strong analytical, investigative, and problem-solving skills.
Excellent written and verbal communication skills in Hebrew and English.
It will be an added bonus if you have:
Experience hunting across AWS, GCP, or Azure cloud environments.
Familiarity with large-scale enterprise, cloud-native, or AI infrastructure environments.
Experience developing detection rules and behavioral analytics.
Knowledge of malware analysis, digital forensics, or reverse engineering concepts.
Experience with threat intelligence platforms and threat hunting frameworks.
Relevant certifications such as GCFA, GCTI, GREM, GCIA, CISSP, or equivalent.
BSc in Computer Science, Information Security, or a related field.
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: Tel Aviv, Israel
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
We are seeking an experienced Fraud Team Lead to join the Cyber Security organization, reporting to the Head of Detection & Response under the CISO.
This role is responsible for leading the organization's Fraud & Insider Threat function, protecting Nebius, its employees, executives, customers, and brand from fraud-driven attacks and insider risks.
You will lead a team responsible for identifying, investigating, and responding to fraud campaigns targeting the organization, including Business Email Compromise (BEC), executive impersonation, phishing, social media fraud, account takeovers, financial fraud, and insider threats. The role requires close collaboration with SOC, Threat Intelligence, IT, HR, Legal, Communications, and business stakeholders to proactively reduce fraud risk and strengthen organizational resilience.
Your responsibilities will include:
Lead and manage the Fraud & Insider Threat team, including mentoring, prioritization, and professional development.
Define and execute the organization's fraud prevention and insider threat strategy, processes, and operational playbooks.
Oversee investigations involving Business Email Compromise (BEC), executive impersonation, phishing campaigns, social engineering, financial fraud, and insider threat activities.
Lead monitoring and response efforts for fraud targeting executives, employees, customers, and the Nebius brand.
Investigate fraudulent domains, social media impersonation, fake websites, fraudulent mobile applications, and other brand abuse activities.
Coordinate takedown efforts with external providers, registrars, social media platforms, and law enforcement when required.
Develop fraud detection capabilities by leveraging threat intelligence, telemetry, and fraud monitoring tools.
Collaborate with SOC and Threat Intelligence teams to identify emerging fraud campaigns and evolving attacker techniques.
Partner with HR, Legal, Finance, Communications, and IT teams to investigate insider threats and fraud incidents while ensuring appropriate handling and confidentiality.
Produce intelligence reports, risk assessments, and executive briefings on fraud trends, insider threats, and organizational exposure.
Define KPIs and continuously improve fraud detection, investigation, and response processes.
Drive awareness programs to educate employees and executives on phishing, social engineering, executive fraud, and insider threat risks.
We expect you to have:
5+ years of experience in cyber security, fraud investigations, digital investigations, cyber intelligence, or incident response.
2+ years of experience leading technical or investigative teams.
Strong understanding of Business Email Compromise (BEC), phishing, executive impersonation, social engineering, and financial fraud techniques.
Experience investigating cyber-enabled fraud, insider threats, and digital abuse incidents.
Familiarity with email security, identity systems, and enterprise collaboration platforms.
Experience working with threat intelligence, OSINT, and digital investigation tools.
Strong analytical, investigative, and problem-solving skills.
Experience working cross-functionally with Security, HR, Legal, Finance, IT, and executive leadership.
Excellent written and verbal communication skills in Hebrew and English.
It will be an added bonus if you have:
Experience with brand protection, digital risk protection (DRP), or external attack surface monitoring platforms.
Familiarity with dark web monitoring, OSINT investigations, and threat intelligence platforms.
Experience working with law enforcement or external fraud investigation organizations.
Knowledge of insider threat methodologies and user behavior analytics (UBA/UEBA).
Experience in SaaS, cloud-native, or enterprise environments.
Relevant certifications such as CFE (Certified Fraud Examiner), GCFA, GCTI, CISSP, or equivalent.
BSc in Computer Science, Information Security, Criminology, Intelligence, or a related field.
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Задачи:
— Быть экспертом по продуктам безопасности Datadog в целевых аккаунтах
— Тесно сотрудничать с Enterprise Account Executives для привлечения новых клиентов и расширения в стратегических аккаунтах
— Вести цикл продаж безопасности от выявления потребностей до технического закрытия, работая с инженерами продаж
— Продвигать историю безопасности Datadog среди лидеров безопасности (CISO, Security Architects, SecOps)
— Работать кросс-функционально с партнерами, каналами и альянсами для совместных маркетинговых действий
— Эффективно совместно продавать с AEs и партнерами, участвуя в стратегии сделок, согласовании решений и взаимодействии с заинтересованными сторонами
— Следить за тенденциями в области безопасности и конкурентными предложениями для выделения Datadog
Требования:
— Успешный опыт продаж решениям для безопасности (CISO, SecOps, GRC и др.)
— Опыт совместных продаж в матричной среде, поддержка или партнерство с AEs и кросс-функциональными командами
— Глубокое понимание модели продаж через партнеров/каналы, умение ориентироваться и влиять на совместные продажи
— Знание современных решений безопасности, таких как SIEM, CSPM, CWPP, безопасность контейнеров/Kubernetes
— Способность строить крепкие отношения с внутренними заинтересованными сторонами, партнерами и техническими командами клиентов
Условия:
— Высокие возможности заработка, основанные на личных результатах
— Акции для новых сотрудников (RSU) и программа покупки акций для сотрудников (ESPP)
— Непрерывное профессиональное развитие, обучение продукту и карьерное планирование
— Обучение продажам по методологиям MEDDIC и Command of the Message
— Программа наставничества и внутреннего нетворкинга
— Инклюзивная корпоративная культура и возможность участия в сообществах
— Конкурентный пакет медицинских льгот
— Пенсионные накопления с соответствием работодателя
— Программа страхования и усыновления домашних животных
Дополнительно:
— Зарплата и пакет акций конкурентоспособны и могут включать переменную часть
— Конкретная компенсация зависит от навыков, квалификации и опыта кандидата
— Широкий спектр льгот, включая медицинское страхование, стоматологию, планирование семьи, психическое здоровье, 401(k) с соответствием, оплачиваемый отпуск, компенсацию фитнеса и скидки на покупку акций
О компании:
Datadog — ведущая платформа наблюдения и безопасности для эпохи ИИ, объединяющая приложения, инфраструктуру, данные, модели и безопасность в одном месте с использованием ИИ для обнаружения и решения проблем до того, как они повлияют на клиентов. Компания обслуживает Fortune 500 и лидеров в области ИИ по всему миру.
Равные возможности:
Datadog предоставляет равные возможности трудоустройства всем кандидатам независимо от расы, цвета кожи, происхождения, религии, пола, национальности, сексуальной ориентации, возраста, гражданства, семейного положения, инвалидности, гендерной идентичности, статуса ветерана и других защищенных законом характеристик. Рассматриваются кандидаты с уголовным прошлым в соответствии с законодательством.
Политика конфиденциальности и ИИ:
Информация, предоставленная в процессе подачи заявки, обрабатывается согласно политике конфиденциальности Datadog. Для информации о политике ИИ посетите соответствующую страницу.
Формат работы: гибридный, с возможностью удалённой работы.
Location: Remote, Canada; Remote, United States
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Senior Backend Engineer on GitLab's Security Factory: Code Security team, you help developers find and fix security issues. Those issues live in the code they write and in the open source components they depend on.
Your work spans complementary parts of a complete security analysis. On the dependency analysis side, you teach the analysis engine what a project depends on. You parse dependency manifests, lockfiles, and SBOMs so the engine knows which libraries and frameworks are in play and how the code uses them. You also extend the service that turns security advisories into automated merge requests that update vulnerable dependencies. On the vulnerability detection side, you grow GitLab's security analysis engine with hybrid analyzers that blend rule-based detection and AI reasoning. You build and apply the tooling that develops, evaluates, and ships those analyzers, and you measure how well they find real problems. That work also expands coverage of the libraries, frameworks, and AI agent tooling that real-world applications are built on.
These threads reinforce each other. What a project depends on, and how its code uses those dependencies, are parts of one picture, and this team works across all of it. We make thoughtful use of AI-assisted development tools in our daily work. We expect you to use them effectively and with good judgment.
What you do
Act as the directly responsible individual (DRI) for team initiatives from design through delivery, shipping with minimal guidance in partnership with the technical lead
Bring systems built by one engineer to team ownership through documentation, tests, and shared review
Design and ship analyzers that pair deterministic analysis capabilities with AI-driven analysis, and build the evaluation harnesses that measure their false positives and missed findings against benchmark applications with known vulnerabilities, raising the bar for what counts as a trustworthy result. That includes detection rules mapped to CWE and the test fixtures that prove they work.
Package those analyzers for every place GitLab runs them, including CI jobs, AI agent workflows, and command-line tools, with findings reported in GitLab's standard security report formats
Design and ship the manifest, lockfile, and SBOM parsing that tells the static analysis engine what a project depends on, and extend it to new ecosystems and formats
Ship features across the automated remediation service that turns security advisories into dependency update merge requests, from sandboxed updates to merge request creation
Solve technical problems of high scope and complexity, actively seek out difficult impediments affecting the whole team, and advocate for improvements to quality, security, and performance with Product Management, Engineering stakeholders such as Frontend and UX, and partner teams such as Code Scanning and Composition Analysis
Mentor Intermediate engineers through code review and pairing, and maintain our internal standards for style, maintainability, and best practices through review
Participate in on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues
Take part in on-call or operational support where your team’s ownership model requires it
What you bring
Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy and when it isn't
Substantial professional experience writing and testing production code in a systems language, particularly Go and/or Rust, with depth in at least one. We use both, plus Ruby on the remediation side and Python for some analyzers, and value willingness to work across them.
Familiarity with package managers and dependency management in one or more language ecosystems, such as npm, Maven, pip, Bundler, or Cargo. Experience building tooling around them is better still.
Demonstrated application security experience, such as vulnerability research, secure code review, or writing detection rules, and fluency with vulnerability classes (OWASP Top 10, CWE) and the software supply chain
A track record of taking ownership of ambiguous problems and shipping with minimal guidance, with the self-motivation and organizational skills suited to a remote, largely asynchronous environment
Demonstrated capacity to communicate clearly and concisely about technical problems, and to write design proposals that bring a team to a decision
Helpful experience
Experience evaluating AI-driven detection against labeled data, including measuring false positives and missed findings
Experience with performance optimization at scale
Hands-on program analysis experience, such as parsing, ASTs, or data-flow analysis
Familiarity with popular web or mobile application frameworks and how they handle input, data, and configuration
Experience with containerized workflows and CI/CD (we use Docker heavily)
About the team
The Security Factory: Code Security team builds GitLab's code-level security scanning capabilities, spanning static application security testing and dependency scanning. We help developers find and fix security issues in both the code they write and the open source components they depend on, as early as possible.
We work closely with the Static Analysis team on GitLab's SAST engines, with Composition Analysis on the broader software supply chain, and with other groups across the Sec Section. We rely heavily on asynchronous work across time zones.
Remote-Global
The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our
benefits
and
equity
. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
United States Salary Range
$139,200
—
$235,200 USD
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Staff Backend Engineer on GitLab's Security Factory: Code Scanning team, you help developers find and fix security issues. Those issues live in the code they write, and you set the technical direction for the static analysis engine that finds them.
Your work spans two complementary parts of a complete security analysis. On the engine side, you shape how the static analysis toolkit models a program: parsing source into intermediate representations, resolving symbols, building call graphs, and tracking tainted data across files and languages. You define the architecture and specifications the team builds against, and you delegate component specifications within them to engineers and to the AI agents that implement them. On the evaluation side, you build and apply tooling that tests, measures, and validates what the engine finds against benchmark applications with known vulnerabilities.
What the engine can model and how we measure what it finds are parts of one picture. As a Staff engineer you hold that picture, shape the long-range technical goals of the team, and raise the bar for every engineer on it. We build the engine with AI agents that write and review code from written specifications, under human direction. We expect you to direct that work effectively and with good judgment, and to help the team do the same.
What you do
Act as the directly responsible individual (DRI) for the team's highest-scope initiatives from design through delivery, shipping large features with minimal guidance and shaping the long-range goals of the team
Bring systems built by one engineer to team ownership through documentation, tests, and shared review
Set the technical direction for the AI-assisted tooling that implements, reviews, and validates engine changes and findings, design the checks that decide whether an agent-written change or generated result is fit to merge, and measure detection quality against benchmark applications with known vulnerabilities, raising the bar for what counts as a trustworthy result. That includes static application security testing (SAST) rules mapped to CWE and OWASP, and the test fixtures that prove they work.
Own the architecture of the program model (parsing, symbol resolution, intermediate representations, call graphs, and taint and data-flow analysis) and of the pipeline that turns source code into findings, and define how both extend to new languages and frameworks
Solve technical problems of the highest scope and complexity, actively seek out difficult impediments affecting the whole team, and advocate for improvements to quality, security, and performance with Product Management, UX, and partner teams such as Code Security and Composition Analysis
Mentor all engineers on the team through code review and pairing, remove blockers to their autonomy, and shepherd the definition and improvement of our internal standards through review
Participate in on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues
Define the overarching architecture and specification documents for the engine, delegate component specifications within them, and drive their implementation by AI agents and engineers working independently through phased plans, small reviewable units of change, and specifications kept in lockstep with the code
Build and maintain the harness, agent instructions, and agentic skills that keep agent-written code trustworthy, including separate coding and reviewing agents, rules and tests the coding agents cannot change, independent review panels of agents from different model providers, and performance, API, and dependency gates, with risky changes escalated to human review
Stay current with research in program analysis and security, run AI-assisted research and spikes, and turn the findings into prototypes, proposals, and upstream contributions, including responsible disclosure of findings in open source projects
Take part in on-call or operational support where your team’s ownership model requires it
What you bring
Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy and when it isn't
Extensive professional experience writing, testing, and reviewing production code in Rust, Go, or a comparable systems language, with depth in at least one. The engine is Rust, the analyzer wrapper is Go, and the monolith integration is Ruby, and we value willingness to work across them.
Experience with performance optimization and with containerized workflows and CI/CD (we use Docker heavily)
A deep program analysis and static analysis background, such as parsing and ASTs, intermediate representations (SSA, control-flow and call graphs), taint and data-flow analysis, type inference, incremental and fixpoint computation, or writing detection rules, with the ability to read, evaluate, and apply the research literature
Deep application security experience, such as vulnerability research, secure code review, or writing detection rules, and fluency with vulnerability classes (OWASP Top 10, CWE)
Demonstrated capacity to communicate clearly and concisely about complex technical, architectural, and organizational problems, and to write architecture and design specifications that bring a team to a decision
A track record of taking ownership of ambiguous, team-wide problems and shipping them from concept to production with minimal guidance, with specific, regular async updates on progress, blockers, risks, and next steps
Experience defining a system's overarching architecture, delegating component specifications to engineers and AI agents, and getting them implemented reliably
A track record of mentoring engineers, raising a team's technical bar, and influencing technical direction by achieving consensus with peers and leadership
Helpful experience
Familiarity with popular web or mobile application frameworks and how they handle input, data, and configuration
Experience designing guardrails for agent-written code, such as mutation testing, fuzzing, and CI gates the coding agent cannot modify
A record of engaging with the research community, such as publications, tool papers, or upstream open source contributions in program analysis or security
About the team
The Security Factory: Code Scanning team develops GitLab's SAST capabilities for customer software repositories.
We work closely with the Code Security team on scanning rules & flows, with Composition Analysis on the broader software supply chain, and with other groups across the Sec Section. We rely heavily on asynchronous work across time zones.
Remote-Global
The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our
benefits
and
equity
. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
United States Salary Range
$152,800
—
$259,200 USD
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: Tel Aviv, Israel
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
The Security Compliance Coordinator supports the day-to-day execution and scaling of the company's security compliance program. This hands-on role coordinates audits and certifications, performs control and evidence reviews, supports supplier compliance reviews within
Third Party Risk Management (
TPRM
)
, and drives assigned actions to closure across multiple stakeholders. The coordinator works alongside other team members and is expected to contribute professional judgment, not only administrative tracking.
Your responsibilities will include
:
Compliance and Audit Operations
Coordinate external audits, certifications, and readiness activities, including SOC 2 and ISO-based programs, evidence collection, control populations, sampling, and auditor requests.
Perform recurring control testing and evidence reviews; identify gaps and inconsistencies and track findings, corrective actions, and remediation commitments through closure.
Maintain organized, audit-ready records and provide clear status reporting on milestones, risks, dependencies, and overdue actions.
TPRM and Supplier Compliance Reviews
Conduct compliance reviews of new and existing suppliers as part of the TPRM process, assessing questionnaires, SOC reports, ISO certifications, policies, and other security and compliance evidence against applicable requirements.
Identify missing, expired, or insufficient supplier evidence and material compliance gaps; coordinate clarifications and remediation and document the resulting assessment, decision, escalation, or accepted exception.
Governance and Compliance Projects
Support the policy and procedure lifecycle, including inventory maintenance, owner coordination, scheduled reviews, approval tracking, publication, and reporting.
Support the implementation and operation of the GRC platform, including workflows, evidence automation, integrations, data quality, reporting, and user adoption.
Support the integration of new entities, services, and sites into the compliance program, including scope extensions and data-center documentation and evidence coordination.
Maintain workplans and Jira tasks and develop practical templates, metrics, and reporting that improve visibility and consistency across assigned workstreams.
We expect you to have
:
2-3 years of experience in information security compliance, GRC, IT audit, IT risk, or a closely related field.
Working knowledge of information security controls, audit and certification cycles, and frameworks such as ISO 27001 or SOC 2.
Ability to review evidence critically, identify missing or inconsistent information, and follow issues through to a clear and documented resolution.
Prior exposure to TPRM, supplier security or compliance assessments, or review of third-party assurance documentation is an advantage.
Strong organizational and English communication skills, with the ability to manage multiple workstreams and summarize requirements, findings, and status accurately.
Proficiency with Jira, Confluence, and Excel or equivalent spreadsheet tools; experience with GRC platforms is an advantage.
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Location: San Francisco, CA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
We're seeking an experienced Policy Communications Manager to help drive external communications for our security, governance, and responsible scaling programs, and associated work. This role offers the opportunity to help shape how Anthropic communicates about our approach to developing secure AI systems and products, our work to uphold and iterate on our Responsible Scaling Policy framework, and the unique corporate structure that keeps the company accountable to its mission, including our Long-Term Benefit Trust (LTBT) and our status as a public benefit corporation.
You'll partner closely with our security, product, legal, governance, and Responsible Scaling Policy (RSP) teams to communicate Anthropic's approach to building safe and secure AI models as the technology becomes increasingly capable across critical domains like cybersecurity. You'll also help lead communications about how Anthropic is governed: the role of the LTBT's independent trustees in overseeing the company and electing members of our board, the obligations that come with our public benefit corporation charter, and why we believe this structure matters as AI systems grow more powerful. As governments establish regulatory frameworks for frontier AI, you'll help articulate how Anthropic approaches its transparency obligations and public reporting commitments, translating evolving requirements into clear, credible external communications. This will include balancing proactive storytelling about product security updates and launches with thoughtful handling of reactive matters as they arise. We're charting new terrain communicating about fast-moving frontier model capabilities and threat surfaces, and about institutional structures few other companies have built. You'll bring strong communications fundamentals to the role but recognize that traditional approaches may not map cleanly to the novel issues we're tackling.
The ideal candidate is an experienced issues handler with strong executive management skills, attention to detail, and the judgment to navigate sensitive topics with care. You should be able to move quickly under pressure and tight deadlines, write crisply, and distill complex security, governance, and technical topics for a broad audience while maintaining accuracy. This is a unique opportunity to help define how one of the world's leading AI safety companies communicates about the security and governance challenges that will shape the future of the technology.
Key responsibilities
Develop and execute communications strategies for Anthropic's approach to AI security, governance, and responsible scaling
Drive external communications about Anthropic's corporate governance, including the Long-Term Benefit Trust and our public benefit corporation status, explaining how these structures provide independent oversight and accountability to our mission
Serve as a trusted communications partner to security, product, legal, governance, and RSP leaders on sensitive, fast-moving matters
Develop proactive communications around emerging regulatory frameworks and transparency obligations, including public reporting commitments, disclosure requirements, and Anthropic's engagement with oversight bodies
Manage reactive inbound media requests on complex security and governance topics
Build and maintain relationships with journalists and influencers covering security, corporate governance, and technology policy
Prepare executives for media interviews, speaking engagements, and public appearances, developing thought leadership opportunities that position Anthropic's leaders as credible voices on AI security, governance, and responsible development
Write blog posts, statements, talking points, and other communications materials that explain our security, governance, and responsible scaling work clearly and accessibly, maintaining accuracy
Support reactive communications efforts with speed, accuracy, and sound judgment
Minimum qualifications
Experience in policy communications, including managing communications around complex security or governance topics
Excellent written and verbal communication skills, with the ability to distill complex technical topics accurately for broad audiences
Experience in issues management and developing reactive communications under pressure and tight timelines
Strong executive management skills and a proven ability to work seamlessly across technical and non-technical teams
A track record of building media relationships
A results-oriented, high-agency working style, with a bias toward flexibility and impact
Comfort operating in new terrain, where the technology is evolving quickly and the right communications approach may not yet exist
A deep commitment to ensuring that transformative AI systems are developed safely
Preferred qualifications
8+ years of experience in policy communications, ideally at a high-growth technology company
Experience communicating about corporate governance, regulatory affairs, or oversight structures, and comfort explaining novel institutional arrangements to broad audiences
Existing relationships with security, governance, and tech policy reporters and influencers
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$265,000
—
$295,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: Remote - North America and Europe
Who We Are:
Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure
for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more.
Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts.
Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it.
Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator.
Our Team Members:
We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond!
We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply.
Your Role
Alpaca is looking for a hands-on engineer with deep knowledge of Corporate Actions and Security Master systems.
You understand dividends, reorganizations, splits, mergers, tenders, redemptions, elections, and security lifecycle events. You know that entitlements are determined by validated announcement terms and the applicable stock record—and that vendor data must be enhanced and cross-verified before it can safely affect customer accounts.
You will help build the systems that manage security reference data, validate Corporate Action announcements, calculate entitlements, process resulting cash and position changes, and reconcile outcomes across a global brokerage platform.
Things You Get To Do
Design systems for Corporate Actions, Security Master, and securities lifecycle processing across U.S. and international markets.
Ingest, normalize, enhance, and cross-verify security and event data from vendors, depositories, custodians, and other authoritative sources.
Build entitlement processing using validated announcement records, stock records, elections, withholding, currencies, and fractional-share rules.
Support dividends, interest, splits, reverse splits, mergers, exchanges, spin-offs, tenders, rights, redemptions, calls, maturities, and elections.
Manage security setup and changes involving symbols, identifiers, listings, exchanges, currencies, and lifecycle status.
Build auditable workflows for validation, approvals, processing, corrections, exceptions, and reconciliation.
Ensure security and event changes propagate accurately across books and records, positions, ledger, trading, margin, tax, and customer-facing systems.
Write and operate production code while partnering closely with Operations, Product, and other engineering teams.
Who You Are
7+ years of professional software engineering experience building complex production systems.
Hands-on Corporate Actions, Security Master, or securities-processing experience within a broker-dealer, clearing firm, custodian, bank, depository, transfer agent, or financial data vendor.
Strong understanding of announcement terms, record and effective dates, stock-record eligibility, entitlements, elections, fractions, and reconciliation.
Experience with financial data ingestion, normalization, versioning, lineage, and cross-source validation.
Strong coding and system-design skills, preferably in Go, with experience building distributed and event-driven services.
Experience with relational databases, preferably PostgreSQL, and cloud-native systems such as GCP and Kubernetes.
Strong ownership and the ability to translate complex operational and financial-market requirements into reliable, auditable software.
Nice to Have
Experience with DTCC/DTC Corporate Actions processing or international market infrastructure.
Familiarity with ISO 15022, ISO 20022, or SWIFT Corporate Actions messages.
Experience building an entitlement engine, Security Master, symbology platform, stock record, reconciliation system, or brokerage ledger.
Understanding of how Corporate Actions affect trading, margin, tax, securities lending, fractional shares, and customer statements.
How We Take Care of You:
Competitive Salary & Stock Options
Health Benefits
New Hire Home-Office Setup: One-time USD $500
Monthly Stipend: USD $150 per month via a Brex Card
Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.
Recruitment Privacy Policy
seniorSpain (Remote); We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden
seniorRepublic of Ireland (Remote); We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
seniorUnited Kingdom (Remote); We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden
УдалённоUnited States; United Kingdom; Spain; Germany; The Netherlands
УдалённоГеография найма не уточнена
ГибридГеография найма не уточнена
Kuala Lumpur, Malaysia; Strong cross-functional communication and project execution skills; able to collaborate effectively across multiple time zones and cultural backgrounds
leadTel Aviv, Israel
leadTel Aviv, Israel
УдалённоГеография найма не уточнена
УдалённоseniorRemote, Canada; Remote, United States; We rely heavily on asynchronous work across time zones; The base salary range for this role’s listed level is currently for residents of the United States only
УдалённоRemote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States; We rely heavily on asynchronous work across time zones; The base salary range for this role’s listed level is currently for residents of the United States only