Вакансии

Location: San Francisco; Remote (United States); London; Belgrade; New York City Workplace: Hybrid Perplexity is seeking a highly skilled, experienced and hands-on Offensive Security Engineer to join our dynamic security team, taking an adversarial approach to hardening Perplexity's infrastructure, applications, and AI systems. You'll plan and execute red team operations, penetration tests, and attack simulations across our cloud infrastructure, web and mobile applications, AI/ML pipeline, and corporate environment—finding real vulnerabilities before adversaries do and working directly with engineering teams to drive remediation. Responsibilities - Plan and execute red team and purple team engagements simulating advanced threat actors across cloud infrastructure (AWS, Kubernetes), endpoints, and application surfaces - Conduct continuous penetration testing of web applications, APIs, mobile clients, browser extensions, cloud infrastructure, and internal services - Assess AI/ML-specific attack surfaces including prompt injection, model exfiltration, agent abuse, tool-use exploitation, and MCP security boundaries - Develop and maintain custom offensive tooling, exploits, and automation to improve the efficiency and coverage of security testing - Perform open-scope adversary simulations that test detection and response capabilities end to end, collaborating closely with the defensive security team - Drive threat modeling sessions with engineering teams to identify and prioritize attack vectors in new features and architectures - Deliver clear, actionable findings to both technical and executive audiences; partner with engineering to validate remediations - Contribute to the security of CI/CD pipelines, supply chain integrity, and secrets management through offensive assessment - Stay current on emerging attack techniques, vulnerability research, and adversary tradecraft; bring external perspective into Perplexity's security strategy Qualifications - 5+ years of hands-on experience in offensive security, red teaming, or penetration testing - Deep technical expertise in at least two of: cloud security (AWS/GCP/Azure), web/API application security, Kubernetes and container security, macOS/Linux endpoint security, network penetration testing, or CI/CD pipeline security - Track record of discovering impactful vulnerabilities or developing novel attack techniques in production environments - Strong programming and scripting skills in Python, Go, or similar languages; comfortable writing custom tooling and exploits - Experience with industry-standard offensive tools (Burp Suite, Cobalt Strike / Sliver / Mythic, Metasploit, BloodHound, nuclei, etc.) and ability to operate beyond them - Excellent written and verbal communication; able to translate complex technical findings into clear risk narratives - Experience assessing AI/ML systems, LLM applications, or agentic workflows for security vulnerabilities - Bonus: Published security research, conference talks (DEF CON, Black Hat, BSides), CVE credits, or meaningful bug bounty contributions

Location: San Francisco; Remote (United States); London; Belgrade; New York City Workplace: Hybrid Perplexity is seeking a highly skilled, experienced and hands-on Offensive Security Engineer to join our dynamic security team, taking an adversarial approach to hardening Perplexity's infrastructure, applications, and AI systems. You'll plan and execute red team operations, penetration tests, and attack simulations across our cloud infrastructure, web and mobile applications, AI/ML pipeline, and corporate environment—finding real vulnerabilities before adversaries do and working directly with engineering teams to drive remediation. Responsibilities - Plan and execute red team and purple team engagements simulating advanced threat actors across cloud infrastructure (AWS, Kubernetes), endpoints, and application surfaces - Conduct continuous penetration testing of web applications, APIs, mobile clients, browser extensions, cloud infrastructure, and internal services - Assess AI/ML-specific attack surfaces including prompt injection, model exfiltration, agent abuse, tool-use exploitation, and MCP security boundaries - Develop and maintain custom offensive tooling, exploits, and automation to improve the efficiency and coverage of security testing - Perform open-scope adversary simulations that test detection and response capabilities end to end, collaborating closely with the defensive security team - Drive threat modeling sessions with engineering teams to identify and prioritize attack vectors in new features and architectures - Deliver clear, actionable findings to both technical and executive audiences; partner with engineering to validate remediations - Contribute to the security of CI/CD pipelines, supply chain integrity, and secrets management through offensive assessment - Stay current on emerging attack techniques, vulnerability research, and adversary tradecraft; bring external perspective into Perplexity's security strategy Qualifications - 5+ years of hands-on experience in offensive security, red teaming, or penetration testing - Deep technical expertise in at least two of: cloud security (AWS/GCP/Azure), web/API application security, Kubernetes and container security, macOS/Linux endpoint security, network penetration testing, or CI/CD pipeline security - Track record of discovering impactful vulnerabilities or developing novel attack techniques in production environments - Strong programming and scripting skills in Python, Go, or similar languages; comfortable writing custom tooling and exploits - Experience with industry-standard offensive tools (Burp Suite, Cobalt Strike / Sliver / Mythic, Metasploit, BloodHound, nuclei, etc.) and ability to operate beyond them - Excellent written and verbal communication; able to translate complex technical findings into clear risk narratives - Experience assessing AI/ML systems, LLM applications, or agentic workflows for security vulnerabilities - Bonus: Published security research, conference talks (DEF CON, Black Hat, BSides), CVE credits, or meaningful bug bounty contributions

Location: San Francisco; Remote; Toronto; New York; Montreal; Seattle Workplace: Hybrid ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F https://www.baseten.co/blog/announcing-our-series-f/, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE We are seeking an experienced and proactive Security Engineer to help us build, maintain, and continuously improve the security posture of our rapidly growing ML infrastructure platform. As one of the first dedicated security hires at Baseten, you will work cross-functionally with engineering and operations teams to ensure we’re meeting the highest standards of confidentiality, integrity, and availability. You’ll have an opportunity to shape our security strategy and best practices from the ground up, influencing the way our platform handles sensitive data for both internal and external stakeholders. RESPONSIBILITIES - Security architecture and design: Collaborate with engineering teams to design and implement secure systems and infrastructure, including cloud (AWS/GCP) environments and container orchestration platforms. - Vulnerability management: Lead proactive vulnerability assessments, pen tests, and remediation efforts to ensure our products and infrastructure remain secure. - Incident response: Develop and maintain incident response processes, including detection, analysis, containment, eradication, and post-incident reviews. - Identity and access management (IAM): Oversee IAM strategies and tools to ensure the right people have the right level of access to our systems and data. - Security compliance and audits: Work closely with operations to ensure compliance with relevant standards (e.g., SOC 2, ISO 27001) and assist with audits, policy creation, and risk assessments. - Employee security training: Develop and deliver security training programs and documentation to keep our team informed about best practices, social engineering threats, and secure coding standards. - DevSecOps integration: Partner with DevOps teams to embed security into the CI/CD pipeline, automating security checks and fostering a culture of “security as code.” REQUIREMENTS - 3+ years of experience in a Security Engineer or similar security-focused role, preferably in a fast-paced startup environment. - Strong knowledge of cloud security (AWS/GCP), container security, and infrastructure-as-code best practices. - Hands-on experience with security tooling (SIEM, IDS/IPS, vulnerability scanners) and scripting languages to automate security tasks. - Familiarity with compliance frameworks such as SOC 2, ISO 27001, and GDPR, and the ability to translate requirements into actionable security controls. - Incident response expertise, including forensic analysis and root cause investigation. - Excellent communication skills and the ability to collaborate with cross-functional teams to promote a security-first culture. BENEFITS - Competitive compensation, including meaningful equity - (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents - Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!) - Paid parental leave - Fertility and family-building stipend through Carrot - (U.S. only) Company-facilitated 401(k) - Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities. Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you. At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).

Location: Tel Aviv, Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is looking for an experienced Security Architect to join the Cyber Security organization, reporting to the Security Architect Manager. This role focuses on designing and implementing secure architectures across corporate networks and cloud environments. You will play a key role in defining secure solutions, reviewing system designs, and ensuring security is embedded across enterprise infrastructure. The ideal candidate brings strong hands-on expertise in network and cloud security, along with the ability to work closely with IT, Infrastructure, DevOps, and Engineering teams to drive secure and scalable implementations. You’re welcome to work in our offices in Tel Aviv, Israel. Your responsibilities will include to: Design and implementing secure architectures across corporate networks, cloud platforms, and hybrid environments. Define and maintain security standards, guidelines, and reference architectures aligned with organizational requirements. Review and approve architecture and design of new systems, infrastructure, and network changes. Design and support secure enterprise network architectures, including segmentation, Zero Trust, and remote access solutions. Define and implement controls for firewalls, ZTNA, proxies, and network access control (NAC). Design secure cloud architectures including IAM, networking, and workload protection. Ensure proper implementation of cloud security controls such as segmentation, encryption, and monitoring. Define and support identity and access management controls, including SSO, MFA, and privileged access. Contribute to endpoint security architecture, including EDR/XDR and device hardening standards. Identify security risks and architectural gaps and recommend mitigation strategies. Participate in architecture reviews, risk assessments, and security design discussions. Collaborate with SOC, Vulnerability Management, IT, and Engineering teams to improve overall security posture. Support implementation of security architecture initiatives and improvements across the organization. Cybersecurity Architecture Define and maintain the organization’s cybersecurity architecture, reference architectures, security standards, and design principles. Lead security architecture reviews for new systems, applications, infrastructure, and technology initiatives. Translate threat models, business requirements, and risk assessments into practical security controls. Establish security-by-design principles across cloud, infrastructure, application, and platform architectures. Identify architectural security gaps and drive remediation roadmaps. Kubernetes and Cloud-Native Security Design and implement security architectures for Kubernetes-based environments and cloud-native platforms. Secure Kubernetes clusters, control planes, worker nodes, namespaces, workloads, and cluster-to-cluster communications. Define and enforce Kubernetes security best practices, including RBAC, workload identity, network policies, admission controls, Pod Security Standards, and secrets management. Secure container images and registries, including image scanning, provenance, signing, and supply chain integrity. Implement runtime security, workload isolation, threat detection, and monitoring for containerized environments. Secure Kubernetes ingress, service-to-service communications, APIs, and service mesh architectures where applicable. Establish security controls for container orchestration platforms across development, testing, and production environments. Evaluate and manage Kubernetes security risks, misconfigurations, excessive privileges, exposed services, and vulnerable workloads. Cloud Infrastructure Security Lead security architecture across AWS and/or Microsoft Azure, including cloud-native and hybrid environments. Define secure cloud landing zones, identity and access management, network segmentation, encryption, logging, and key management. Implement preventive and detective security controls using cloud-native security services and centralized policy enforcement. Drive cloud security posture management and remediation using CSPM, CNAPP, and related technologies. Ensure alignment with organizational security requirements and relevant industry standards. Secure Development and DevSecOps Integrate security throughout the Software Development Life Cycle (SDLC), from design and coding to deployment and production operations. Partner with R&D, DevOps, and Platform Engineering teams to embed security into CI/CD pipelines. Define and implement automated security controls, including SAST, DAST, Software Composition Analysis (SCA), secrets detection, and container image scanning. Establish secure coding standards, threat modeling practices, API security requirements, and secure software supply chain controls. Promote developer-friendly security tooling and reusable security patterns that minimize friction and accelerate delivery. Drive remediation of vulnerabilities and architectural weaknesses in collaboration with engineering teams. Security Engineering and Risk Management Develop technical security standards, architecture patterns, and security control baselines. Conduct threat modeling, attack-path analysis, architecture risk assessments, and security design reviews. Define security requirements for identity, access, data protection, network security, workload isolation, and observability. Collaborate with Security Operations to improve security telemetry, detection capabilities, and incident readiness. Evaluate emerging security technologies and recommend solutions based on risk reduction, operational effectiveness, and architectural fit. Track security findings and drive measurable improvements in the organization’s security posture. We expect you to have: 6+ years of experience in cybersecurity, with a focus on cloud security, networks, and/or SDLC Experience working with cloud platforms (AWS, GCP, Azure) and cloud security best practices. Strong hands-on experience in enterprise network security (firewalls, segmentation, VPN, proxies, NAC, etc.). Solid understanding of identity and access management (IAM), Active Directory / Entra ID, and access control models. Experience working in hybrid environments (on-prem + cloud). Strong understanding of security architecture principles and risk-based design. Experience working cross-functionally with IT, Infrastructure, DevOps, and Engineering teams. Strong analytical and problem-solving skills. It will be an added bonus if you have: Experience with Zero Trust architecture and network segmentation strategies. Familiarity with cloud security tools (e.g., Wiz). Experience with enterprise identity platforms (Entra ID / Azure AD, Okta, etc.). Knowledge of regulatory and compliance frameworks (ISO 27001, SOC 2, NIST, etc.). Experience in SaaS, cloud-native, or enterprise-scale environments. Relevant certifications such as CISSP, CCSP, or equivalent. BSc in Computer Science, Information Security, or a related field. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: Lisbon, Portugal About the Role iCapital is looking for a Assistant Vice President, Cyber Cloud Security Engineer to join the Security Engineering team, within the Information Security organization. This role will establish and manage cloud security programs, build new security architecture, drive automation, and continuously identify and address security gaps across iCapital's technology landscape. The ideal candidate is a deeply technical individual contributor who can research, design, and implement security technologies, and collaborate effectively across teams and functions. Responsibilities Build and manage Cloud Security Programs across AWS, Azure, and GCP infrastructure Design, implement, and validate secure cloud infrastructure architectures, ensuring new capabilities meet established security standards and requirements. Apply Zero Trust architecture principles and best practices across cloud infrastructure design and access models. Drive continuous detection, remediation, and resolution of cloud vulnerabilities and security misconfigurations, leveraging CSPM tooling (e.g., AWS Security Hub, Wiz, or equivalent) and automation to continuously improve and maintain cloud security posture. Build automation capabilities for continuous monitoring and alerting across cloud infrastructure. Partner with engineering teams to drive the adoption of security standards and best practices, embedding security early across the development lifecycle and supporting a shift-left security culture. Collaborate with the SOC to develop and strengthen cloud detection engineering capabilities. Assist the Risk and Governance teams with the development and implementation of cloud-related policies, procedures, and standards. Engage with Platform, DevOps, and Software Engineering teams to deliver security initiatives and provide security guidance to projects across the organization. Qualifications 6–9 years of experience in cloud environments, with AWS as the primary platform, including proven hands-on expertise in cloud security architecture and infrastructure design. Relevant cloud or security certifications are a plus (e.g., AWS Certified Solutions Architect, AWS Certified Security – Specialty, CISSP, or CCSP). Proficiency with AWS-native security services, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty. Experience with cloud identity and access architecture, including federation (e.g., Okta), RBAC, ABAC, and service-to-service authentication models. Hands-on experience with Infrastructure as Code tooling such as AWS CDK, CloudFormation, or Terraform. We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday). Benefits iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO). For additional information on iCapital Network, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc

Location: Remote - European Region Workplace: hybrid Coinspaid Dev is the engineering brand behind the technology, infrastructure, and R&D expertise built within Coinspaid. With more than 120 engineersand over 11 years of industry experience, Coinspaid Dev brings together software engineering, infrastructure, security and R&D teams with experience building distributed systems and blockchain infrastructure operating across more than 20 blockchain networks. Coinspaid Dev emerges as an independent engineering brand with a straightforward mission: to advance blockchain infrastructure engineering and contribute practical expertise back to the industry. The structure is new. The experience behind it is not. We are looking for a Middle SecOps Engineer to join our Security Operations team. The candidate will have hands-on experience in monitoring, detecting, and responding to security threats across multiple environments, including endpoints, networks, and cloud platforms. This role requires strong practical knowledge of SIEM and EDR/XDR systems, data loss prevention technologies, and vulnerability management, combined with the ability to follow and improve incident response playbooks. The engineer will collaborate closely with SOC analysts, DevOps, and IT teams to ensure effective threat detection, containment, and remediation. Responsibilities: Monitor security alerts from different systems, triage and investigate potential threats. Perform end-to-end incident response: detection, analysis, containment, eradication, and recovery. Identify false positives, escalate real threats, and provide actionable remediation guidance. Analyze logs from multiple systems (OS, applications, network, cloud) to support investigations. Collaborate with DevOps, IT, and development teams to remediate vulnerabilities and misconfigurations. Participate in vulnerability management activities: scanning, prioritization, coordination with relevant teams. Follow and contribute to improvement of SOC playbooks and standard operating procedures. Provide documentation and reporting for incidents, investigations, and security events. Stay updated on emerging threats, vulnerabilities, and security technologies. Requirements: Experience working with SIEM platforms: writing and tuning detection rules, log ingestion, and investigation workflows. Experience working in a Security Operations Center (SOC) environment. Strong experience with EDR/XDR solutions: alert triage, investigation, scoping, and remediation of incidents. Experience with Data Loss Prevention (DLP) technologies and their operational use. Practical experience in triaging security alerts, identifying false positives, escalating or resolving real threats. Involvement in end-to-end incident response: detection, analysis, containment, eradication, and recovery. Understanding of incident response processes and ability to follow or improve playbooks. Experience with vulnerability management: scanning, prioritization, and coordination of remediation efforts. Ability to read and analyze logs from various systems. Nice to have: Experience with cloud environments. Knowledge of Kubernetes environment and containerized applications. Familiarity with the fintech domain. Why join CryptoProcessing by Coinspaid You’ll be joining a company that is actively shaping its space – with enough scale to matter and enough room to make an impact. At Coinspaid, people are expected to think, contribute, and take ownership – and are supported in doing so. We focus on flexibility, wellbeing, and long-term growth – without overcomplicating how benefits work. Flexible Benefits Benefit Bar – up to €230/monthA flexible monthly budget you can use for what matters most to you – from sports and mental health to coworking, home office, or medical-related expenses. Work & Flexibility Fully remote work from almost anywhere Optional offices and relocation support Flexible, async-friendly environment Growth & Learning Budget for courses, certifications, and professional development Language learning support Cross-team learning and knowledge sharing Wellbeing & Support Medical insurance or reimbursement depending on location Access to mental health support Financial support for important life events Extras Merch shop with rewards system Team offsites and company events Sounds good? Well then, we can’t wait to see your resume! To learn more please visit: https://coinspaid.com/about-us/ & https://coinspaid.com/careers/

Location: New York Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology and trading expertise has shaped QRT’s collaborative mindset which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors. Senior Detection and Response Engineer at Qube Research & Technologies (QRT) will be tasked with improving and optimizing our capability to effectively monitor, detect, respond, and remediate security incidents. You will be part of a global security team, implementing highly automated security operations processes and systems to meet dynamic company growth. You will have an opportunity to design and build systems from scratch, interact with various technologies, influence architecture, decide on specific technologies or tools, and work on cutting edge projects. As the security team, our top priority is to ensure that our data and assets are safeguarded using controls, which do not disrupt the business, whilst acting as an enabler. We work with many stakeholders at all levels across the business, including IT, Cloud and Engineering. QRT runs a hybrid technology stack across multiple data centers, extending to various locations across the public cloud. The combination of on-premises and Cloud allows us to achieve performance and low latency requirements, which are important for quantitative and systematic investments. Your future role within QRT Monitor and analyse security events and alerts from diverse and disparate data sources to detect threats Coordinate incident response activities including investigation, containment, remediation, recovery and lessons learnt Deploy, tune, administer and implement security detection and response solutions, tools, configuration and related processes Develop high fidelity security detections across our tooling suite Collaborate with cross-functional teams to improve detection capabilities, including deploying new tools, log ingestion and enrichment, developing detection use cases and playbooks or designing automated response mechanisms Capable of proactively performing threat intelligence driven hunting Liaise with external vendors / MSSP / third-party stakeholders as required Develop strategic objectives to increase the maturity of the Detection and Response function Your present skillset Extensive hands-on experience in detection and response within enterprise security environments Demonstrable experience in creating customized security detection use cases Demonstrable experience in digital forensics analysis and incident response Demonstrable experience with building, troubleshooting and optimizing Detection & Response technologies (e.g., SIEM, Threat Intelligence Platform, Automation) Understanding of different adversary tactics, techniques and procedures Technical understanding and knowledge of network and operating system fundamentals Experience working in hybrid environments (public cloud/on-prem) utilising various operating systems Experience in CI/CD pipeline development and deployment automation would be advantageous Programming/scripting language skills (e.g., Python, Bash, PowerShell) would be advantageous Excellent verbal and written communication skills across different organisation stakeholders Proactive mindset, capable of driving process improvements and automation initiatives Base salary range for this position is $160,000 to $220,000 per year. QRT Total Compensation includes discretionary performance-based bonuses and a competitive benefits package.

Location: Redwood City, CA, United States WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. WHY BOX NEEDS YOU Box has a world class security organization responsible for protecting our customer and employee data around the globe. We are looking for a Senior Enterprise AI Security Engineer to join our Enterprise Security team and own how Box adopts AI internally — safely, quickly, and at scale. This role pairs enterprise security architecture with hands-on engineering. You will assess the AI tools and agent workflows Boxers want to use, then convert each assessment into a control that holds for everyone who adopts something similar later. You do not need to have trained a model, but you do need working intuition for the failure modes: an agent handed more authority than its task requires, untrusted text arriving as instructions, or company data leaving quietly inside an API call. You will partner closely with IT, Infrastructure, Incident Response, Legal, Privacy, and the business functions piloting AI, shaping the technical direction of Box's secure AI adoption program. WHAT YOU'LL DO Core Mission Design, build, deploy, and maintain comprehensive security systems that allow Box's workforce use AI tools and agents productively without losing visibility, identity boundaries, or control of company data. Architect and operate the control plane for workforce AI: AI gateways, prompt and response logging, and egress controls across approved assistants and copilots/agents Extend identity and access management to agentic and non-human identities — scoping, credential lifecycle, delegation, OAuth grant review, and revocation for agents and connectors reaching into corporate SaaS Gate what internal agents can reach: an approval path for MCP servers and connectors, scoped permissions per tool, and isolated execution for anything that runs code Harden the AI-era endpoint and browser layer: enterprise browser policy, extension governance, AI-assisted developer tooling, and local agent runtimes Build the shared enforcement layer — policy engines, brokers, approval registries, internal libraries — that catches risky behavior in flight: injected instructions, attempts to talk around a restriction, tools used outside their intended purpose, sensitive data heading somewhere it should not, and agents behaving nothing like they did last week Lead security architecture reviews and threat modeling for AI vendors, AI features enabled inside existing SaaS platforms, and internal agent deployments, tracing where untrusted content, company data, and privileged credentials meet in each one Own the standards, reference architectures, and paved paths that define what approved AI usage concretely means at Box, and build reusable patterns Partner with IT, Infrastructure, Incident Response, Engineering, Legal, and Privacy to mature AI governance, including AI-specific response playbooks Automate through scripting, infrastructure-as-code, and orchestration instead of manual review queues, and bring AI-assisted investigation tooling to the security team itself Help raise the technical bar across the team through design and code review, mentoring and guidance Future Focus This role is for a security engineer who can meet today's adoption requests while building for fleets of agents acting on behalf of employees, delegated authority across systems of record, and corporate data flowing through models. Your work will directly shape how Box secures its people, protects customer data, and holds its position as a trusted leader in intelligent content management. WHO YOU ARE Box is an AI-first company. This means you approach your work with a growth mindset and find ways to leverage AI to help make faster, smarter decisions that will 10X your impact at Box, while providing safe adoption patterns for the company. You are a security professional with: Bachelor's or Master's degree in computer science, information security, or a related field, or equivalent practical experience 6+ years in enterprise or corporate security engineering, security platform engineering, application or product security, or a combination — with meaningful recent time spent on AI or agentic systems Hands-on experience securing real AI deployments — enterprise assistants, internal agents and the tool ecosystems around them, grounded search or RAG over company data, or AI coding tools inside a developer environment A working mental model of how AI systems get abused and paired with the ability to analyze AI workflows to determine guardrails. Strong identity and access management fundamentals Experience with security automation in Python, Go, or a similar language, and a track record of building tooling, libraries, or platform controls Fluency in the emerging problems of this space: shadow AI, agentic and non-human identity, SaaS-to-SaaS integration risk, browser security, and data exfiltration paths Exceptional communication skills, with the ability to explain AI risk and its business impact to practitioners Proven ability to work independently with autonomy, manage ambiguity, and recommend secure but risk-profiled decisions Nice to have A track record of shipping internal security platforms Exposure to isolation and permissioning for autonomous workloads, or to AI red teaming and evaluation work BENEFITS Visit this webpage to check out all of our exciting healthcare benefits: https://join.collectivehealth.com/box For all other benefits, please check out: Box Benefits + Perks Box lives its values, with community and in-person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 3 days per week. Your Recruiter will share more about how we work and company culture during the hiring process. At Box, we believe unique and diverse experiences benefit our culture, our products, our customers, our company, and our world. We aim to recruit a passionate, high-performing workforce that reflects the world we live in. If you are head-over-heels about this role but unsure if you meet all the requirements, we encourage you to apply! Box lives its values, with community and in-person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 3 days per week.Your Recruiter will share more about how we work and company culture during the hiring process. At Box, we believe unique and diverse experiences benefit our culture, our products, our customers, our company, and our world. We aim to recruit a passionate, high-performing workforce that reflects the world we live in. If you are head-over-heels about this role but unsure if you meet all the requirements, we encourage you to apply! EQUAL OPPORTUNITY We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and ‎‎independence of people with disabilities and is committed to giving them the same ‎‎opportunity to succeed as all other employees. Inclusiveness is core to our culture at Box, and we strive to ensure you get the most from your interview experience. Box makes reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please complete this form . Reasonable accommodations may include scheduling adjustments, document dictation and beyond. Notice to applicants in Los Angeles:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the Los Angeles Fair Chair Ordinance.  The Fair Chance Ordinance is provided here . Notice to applicants in San Francisco:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chair Ordinance.  The Fair Chance Ordinance is provided here . For details on how we protect your information when you apply, please see our Personnel Privacy Notice. If you are a California-resident, please read our California Applicant & Candidate Privacy Notice here . NOTICE OF USE OF AI At Box, we believe in the power of AI to improve the recruiting process while keeping people at the heart of every decision. For more information on the use of AI in our hiring process, please visit our webpage here . #LI-Hybrid Box is committed to fair and equitable compensation practices. Actual base salary (or OTE if commissionable role) is dependent upon factors such as: knowledge, skill level, experience, and work location. This role is also eligible for equity and benefits. For more information, check out our benefits and perks . In accordance with OFCCP compliance, here is the Pay Transparency Provision . Chicago Pay Range $190,000 — $237,500 USD Box is committed to fair and equitable compensation practices. Actual base salary (or OTE if commissionable role) is dependent upon factors such as: knowledge, skill level, experience, and work location. This role is also eligible for equity and benefits. For more information , check out our benefits and perks . In accordance with OFCCP compliance, here is the Pay Transparency Provision . Redwood City Pay Range $211,000 — $263,000 USD

Location: San Francisco, CA • New York, NY • United States Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As a Security Engineer you will identify and drive impactful projects to improve the security of Figma’s product, platform, and IT systems. We are hiring for multiple teams within Security Engineering: AI Security, Platform Security, Product Security, and Anti-Abuse. This is a remote first role. You will partner closely with teams across the company and focus on systemic security improvements and risk reduction. You will also participate in operational security responsibilities like security reviews, consulting, vulnerability triage, and security incident response. Examples of what you may work on across teams: AI Security Perform technical security assessments, code audits, and design reviews for new AI infrastructure, platforms, and products. Design and develop technical solutions to secure AI models, tooling, debugging workflows, and data pipelines. Advocate for secure practices across Figma’s AI infrastructure, platforms, and data systems. Build the next generation of internal AI-powered access insights and security tooling. Help run penetration testing and offensive security exercises against Figma’s AI infrastructure, platforms, and products. Platform Security Perform technical security assessments, code audits, and design reviews for changes to Figma’s cloud and corporate infrastructure. Design and develop solutions to prevent or mitigate cloud and corporate security risks. Advocate for secure practices within Figma’s cloud and corporate infrastructure. Build platforms and tooling to detect and respond to infrastructure and corporate security threats. Product Security Perform technical security assessments, code audits, and design reviews for new product features. Design and develop solutions to prevent or mitigate product security vulnerabilities. Advocate for secure development practices across Figma’s products and services. Help run penetration testing, offensive security exercises, and support our bug bounty program. Help respond to product security incidents. Anti-Abuse Design and build technical systems to prevent spam, fraud, and abuse. Partner closely with product teams to identify and address potential abuse vectors. Develop new signals and improve the use of existing signals to detect abusive behavior. Help respond to spam, fraud, and abuse incidents. This is a full-time role that can be held from one of our US hubs or remotely in the United States. We’d love to hear from you if you have: 5+ years of proven engineering experience working in either a Security Engineering or a Software Engineering role. In the case of the latter, some security experience is preferred. Strong security judgment in threat modeling and risk prioritization and/or strong technical judgment in designing and building maintainable, scalable systems. Proficiency in at least one general-purpose coding language. Strong communication and interpersonal skills, with demonstrated experience collaborating across functions. While not required, it’s an added plus if you also have: Subject matter expertise in Application Security, Cloud Security, Corporate Security, Data Access Governance, and/or IAM (Identity and Access Management). Demonstrated ability to make hard prioritization decisions in security controls. At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. #LI-Remote Pay Transparency Disclosure Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law. Annual Base Salary Range: $153,000 — $376,000 USD At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status , or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com . These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: Holding interviews in an accessible location Enabling closed captioning on video conferencing Ensuring all written communication be compatible with screen readers Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice . Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles: Candidates may submit up to 5 applications during any rolling 30-day period. Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection. Once the applicable days has passed, candidates are welcome to apply again.

О ПРОЕКТЕ StarTribe — часть крупного международного холдинга с 10-летней историей. Мы разрабатываем высоконагруженные IT-продукты для мировых брендов. Сейчас мы усиливаем команду безопасности для тестирования внутренних и публичных приложений собственной разработки. ВАШИ КЛЮЧЕВЫЕ ЗАДАЧИ — Pentesting: Проведение глубоких тестов веб-приложений (White/Grey/Black box). — Remediation: Подготовка конкретных рекомендаций по устранению уязвимостей. — Collaboration: Тесное взаимодействие с разработчиками для внедрения Security Best Practices. — DevSecOps: Участие в разработке внутреннего инструментария и автоматизации проверок. — Mentoring: Помощь коллегам и развитие экспертизы внутри команды. ЧТО МЫ ЖДЕМ ОТ ВАС — Опыт: 4+ года в области AppSec и тестирования безопасности веб-приложений. — Инструментарий: Экспертное владение Burp Suite и другими средствами анализа (Manual & Auto). — Коммуникация: Умение аргументированно доносить риски до бизнеса и находить компромиссы с Dev-командами. — Стек: Понимание специфики безопасности Node.js и PHP (дополнительно .NET / Go). БУДЕТ ПЛЮСОМ — Сертификации уровня OSCP, OSWE или Burp Suite Certified Practitioner. — Активное участие в CTF, наличие рейтинга на HackTheBox. — Наличие подтвержденных Bug Bounty репортов. УСЛОВИЯ И БЕНЕФИТЫ — Оформление: Официальный контракт по ТК Кипра. — Релокация: Частичная компенсация аренды жилья и корпоративная мобильная связь. — Бонусы: Годовой бонус по результатам, 4 дополнительных Day Off в году. — Life Quality: Корпоративное питание, спорт, мероприятия для семей и активности для детей. — Развитие: Скидка 50% на SkyEng, поддержка образовательных инициатив.

Location: Riyadh, Saudi Arabia; Dubai, United Arab Emirates; Casablanca, Morocco; Cairo, Egypt; Delhi, India Müller’s Solutions is looking for a skilled Google Cloud Security Engineer to enhance our cloud security framework and protect our critical systems and data on Google Cloud Platform (GCP). In this role, you will be responsible for identifying security vulnerabilities, implementing robust security measures, and ensuring compliance with industry standards while safeguarding our cloud architecture and applications. Key Responsibilities: Design, implement, and manage security controls and procedures for GCP services and resources. Perform risk assessments and security reviews to identify vulnerabilities and prioritize remediation measures. Monitor and analyze security alerts, events, and incidents across the cloud environment. Develop and enforce security policies, standards, and best practices for cloud operations. Implement Identity and Access Management (IAM) policies to control access to GCP resources effectively. Conduct regular security assessments and collaborate with development teams to ensure secure coding practices. Stay up to date with the latest security threats, vulnerabilities, and trends in cloud security. Provide security training and awareness for engineering teams to promote a security-first culture. Collaborate with incident response teams to investigate and respond to security incidents effectively. Maintain documentation of security policies, architecture, and processes related to GCP. Requirements Requirements: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. 3+ years of experience in cloud security, specifically within Google Cloud Platform. Strong knowledge of cloud security best practices, frameworks, and compliance (e.g., ISO 27001, NIST, GDPR). Experience with GCP security tools and services, including Security Command Center, Cloud Armor, and Cloud Identity. Expertise in Identity and Access Management (IAM), data encryption, and security configurations in GCP. Familiarity with network security principles and solutions, such as firewalls and VPNs. Excellent analytical and problem-solving skills, with the ability to handle complex security scenarios. Strong communication skills to effectively convey technical information to diverse audiences. Preferred Qualifications: Google Cloud certifications (e.g., Google Cloud Professional Cloud Security Engineer) are desirable. Experience in scripting or programming languages, such as Python or Bash, for security automation. Knowledge of DevSecOps practices and tools. Experience with tools like SIEM, vulnerability scanners, and penetration testing frameworks. Benefits 1- Attractive Package. 2- Family Benefits. 3- Visa. 4-Air Tickets.

Location: Bangalore At Reltio®, an SAP Company, we believe data should fuel your success in the enterprise AI era. Our  Context Intelligence Platform turns fragmented data into a trusted, connected context so AI agents and systems can act with expert-level judgement at enterprise scale. Reltio’s cloud-native SaaS platform harmonizes, unifies, and governs data across sources and formats—including unstructured data—in real time, turning them into data assets that can be mobilized in milliseconds to any application, user, or AI agent. Trusted by more than 200 of the world’s largest brands across industries such as life sciences, financial services, healthcare, and technology, we fuel frictionless operations and help enterprises accelerate  innovation and reduce risk. At Reltio, our values guide everything we do. With an unyielding commitment to prioritizing our “Customer First”, we strive to ensure their success. We embrace our differences and are “Better Together” as One Reltio. We are always looking to “Simplify and Share” our knowledge when we collaborate to remove obstacles for each other. We hold ourselves accountable for our actions and outcomes and strive for excellence. We “Own It”. Every day, we innovate and evolve, so that today is “Always Better Than Yesterday”. If you share and embody these values, we invite you to join our team at Reltio and contribute to our mission of excellence. Reltio has earned numerous awards and industry and analyst recognition for our technology, our culture and our people. Reltio was founded on a distributed workforce and offers flexible work arrangements to help our people manage their personal and professional lives. If you’re ready to work on unrivaled technology where your desire to be part of a collaborative team is met with a laser-focused mission to enable digital transformation with connected data, let’s talk! Job Summary: As an integral member of the Information Security Team, the Sr. Cloud Security Engineer role will be responsible for growing and leading many information security functions at Reltio. As a Sr. Cloud Security Engineer, you will use your technical experience to assess, design, engineer and implement various security and operational controls in Reltio's multi-cloud environment. These controls will be aligned and focused on achieving compliance with Reltio's security standards. The Sr. Cloud Security Engineer will partner with other technology teams for initiatives related to security strategy and implementation. The successful candidate will partner with leaders across the business to develop and deliver solutions that support business strategies and protect Reltio’s intellectual property and customer data globally. Job Duties and Responsibilities: Serve as a cloud security subject matter expert by providing guidance on industry best practices and defense in-depth strategies Proven experience with deploying security controls in a multi-cloud environment (AWS, GCP, Azure) Create security and operational controls to enforce various aspects of Reltio’s security policies Work with the respective functional teams and stakeholders to resolve security related configuration issues Perform technical risk assessments of new technology and ensure the solution meets secure architecture designs Assess and measure risk impact of a security deficiency and communicate the risk or risks to stakeholders Proactively identify issues and recommend configuration settings or supporting solutions to mitigate security deficiencies Skills You Must Have: 5+ years of experience implementing security solutions Strong cybersecurity background and knowledge Understanding of cyber threat vectors and countermeasures Understanding of Linux/Unix and Windows platforms Understanding of Cloud Infrastructure and Cloud Security Understanding of networking (WAN, LAN, wLAN), network domains (Internet, intranet, DMZ), communication techniques/protocols (IP and others), and their combined effects on network and host systems security Strong knowledge of industry standard security technology: anti-virus & anti-malware, SIEM, SOAR, vulnerability scanning, DLP, firewall, IDS/IPS, etc. Strong experience with scripting and infrastructure-as-code (IaC) Experience with industry frameworks such as SOC1/SOC2, HITRUST, ISO Solid understanding of audit methodologies and processes Experience working with virtual teams in a global environment Strong communication and presentation skills Adaptable and agile Good interpersonal, partnership, and leadership skills (without direct authority of others) Skills That Are Nice to Have: Experience developing and operationalizing a vulnerability management program Experience working with container-based architectures Security and Cloud certifications Reltio is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Reltio is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.

Location: Bangalore At Reltio®, an SAP Company, we believe data should fuel your success in the enterprise AI era. Our  Context Intelligence Platform turns fragmented data into a trusted, connected context so AI agents and systems can act with expert-level judgement at enterprise scale. Reltio’s cloud-native SaaS platform harmonizes, unifies, and governs data across sources and formats—including unstructured data—in real time, turning them into data assets that can be mobilized in milliseconds to any application, user, or AI agent. Trusted by more than 200 of the world’s largest brands across industries such as life sciences, financial services, healthcare, and technology, we fuel frictionless operations and help enterprises accelerate  innovation and reduce risk. At Reltio, our values guide everything we do. With an unyielding commitment to prioritizing our “Customer First”, we strive to ensure their success. We embrace our differences and are “Better Together” as One Reltio. We are always looking to “Simplify and Share” our knowledge when we collaborate to remove obstacles for each other. We hold ourselves accountable for our actions and outcomes and strive for excellence. We “Own It”. Every day, we innovate and evolve, so that today is “Always Better Than Yesterday”. If you share and embody these values, we invite you to join our team at Reltio and contribute to our mission of excellence. Reltio has earned numerous awards and industry and analyst recognition for our technology, our culture and our people. Reltio was founded on a distributed workforce and offers flexible work arrangements to help our people manage their personal and professional lives. If you’re ready to work on unrivaled technology where your desire to be part of a collaborative team is met with a laser-focused mission to enable digital transformation with connected data, let’s talk! Job Summary: As an integral member of the Information Security Team, the Sr. Cloud Security Engineer role will be responsible for growing and leading many information security functions at Reltio. As a Sr. Cloud Security Engineer, you will use your technical experience to assess, design, engineer and implement various security and operational controls in Reltio's multi-cloud environment. These controls will be aligned and focused on achieving compliance with Reltio's security standards. The Sr. Cloud Security Engineer will partner with other technology teams for initiatives related to security strategy and implementation. The successful candidate will partner with leaders across the business to develop and deliver solutions that support business strategies and protect Reltio’s intellectual property and customer data globally. Job Duties and Responsibilities: Serve as a cloud security subject matter expert by providing guidance on industry best practices and defense in-depth strategies Proven experience with deploying security controls in a multi-cloud environment (AWS, GCP, Azure) Create security and operational controls to enforce various aspects of Reltio’s security policies Work with the respective functional teams and stakeholders to resolve security related configuration issues Perform technical risk assessments of new technology and ensure the solution meets secure architecture designs Assess and measure risk impact of a security deficiency and communicate the risk or risks to stakeholders Proactively identify issues and recommend configuration settings or supporting solutions to mitigate security deficiencies Skills You Must Have: 5+ years of experience implementing security solutions Strong cybersecurity background and knowledge Understanding of cyber threat vectors and countermeasures Understanding of Linux/Unix and Windows platforms Understanding of Cloud Infrastructure and Cloud Security Understanding of networking (WAN, LAN, wLAN), network domains (Internet, intranet, DMZ), communication techniques/protocols (IP and others), and their combined effects on network and host systems security Strong knowledge of industry standard security technology: anti-virus & anti-malware, SIEM, SOAR, vulnerability scanning, DLP, firewall, IDS/IPS, etc. Strong experience with scripting and infrastructure-as-code (IaC) Experience with industry frameworks such as SOC1/SOC2, HITRUST, ISO Solid understanding of audit methodologies and processes Experience working with virtual teams in a global environment Strong communication and presentation skills Adaptable and agile Good interpersonal, partnership, and leadership skills (without direct authority of others) Skills That Are Nice to Have: Experience developing and operationalizing a vulnerability management program Experience working with container-based architectures Security and Cloud certifications Reltio is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Reltio is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.

Location: Gurugram, Haryana, India Company Overview ClearView Healthcare Partners is a premier life sciences strategy consulting firm headquartered in Boston, with offices in San Francisco, New York City, London, Zurich and Gurgaon. Serving clients in the biopharmaceutical, medical device, and diagnostic spaces, we provide world-class strategic decision-making support across a diverse range of business issues. Our goal is to inform actionable recommendations that allow companies to achieve their business objectives. ClearView is in the process of migrating a significant portion of its local, on-premises resources to the cloud, and this role will be a key player in ensuring that migration happens securely and that our Azure environment is configured and governed to a high standard. ClearView is looking for a Cloud Security-focused Information Security Professional to join our Information Technology team. This role will be responsible for three main areas: Cloud Security Architecture & Operations (with an emphasis on Azure), SIEM engineering, and Monitoring/Testing to ensure compliance. This position requires the ability to work with minimal direction, flexibility to changing demands, and having an eye for process improvement. This position will work in our India office but will be responsible for ClearView's Information Security globally. Responsibilities Cloud security architecture and operations Support the security workstream of ClearView's ongoing migration of on-premises resources to the cloud, helping ensure new Azure workloads are designed and configured securely from the outset. Help configure, monitor, and continuously improve security controls in Azure (with secondary support for AWS), including Defender for Cloud, Security Hub/GuardDuty, IAM, Network Security Groups (NSGs), and baseline configurations. Support identity governance in Microsoft Entra ID (Azure AD), including conditional access, privileged role assignments, and application/service principal reviews. Assist with authoring, deploying, and monitoring Azure Policy definitions and initiatives to enforce configuration standards and compliance guardrails across subscriptions. Support cloud security posture management (CSPM) efforts, identifying and remediating misconfigurations across Azure and AWS environments. Assist with design and review of cloud architecture for security best practices, including network segmentation (NSGs, firewalls), least-privilege IAM, and encryption at rest and in transit. Support secrets and key management practices using Azure Key Vault, including access policy reviews, rotation, and integration with applications and pipelines. Help assess and improve the security of containerized workloads (e.g., image scanning, registry access controls, AKS/container runtime configuration) as more services move to container-based architectures. Assist with periodic reviews of access controls, MFA configurations, and conditional access policies across cloud and on-prem environments. Support vulnerability management activities by collecting scan results, tracking remediation status, and validating fixes with relevant teams. Contribute to standard build/hardening checklists for cloud resources, servers, and laptops, and verify that new systems are deployed according to these baselines. Security monitoring and incident support Monitor cloud-native security tools and dashboards (e.g., Defender for Cloud, Security Hub, GuardDuty) as well as core SIEM, endpoint security, and email security tools for alerts and suspicious activity; help triage and escalate as needed. Support tuning of SIEM correlation rules and alert thresholds to reduce noise, under the guidance of senior staff. Build and maintain dashboards and reports (cloud and SIEM) that give IT and leadership visibility into security events and trends. Assist in initial investigation of security incidents (log collection, basic analysis, documentation) and support remediation steps defined by senior engineers. Follow established runbooks and procedures for incident response and request enhancements when gaps are identified. Endpoint and identity security Help manage endpoint security tools (EDR/AV, disk encryption, device posture checks) and respond to endpoint alerts following documented procedures. Assist with implementation and maintenance of identity and access controls (e.g., role-based access, privilege reviews, account lifecycle processes). Operational processes and documentation Maintain up-to-date technical documentation for cloud security controls, dashboards, playbooks, and standard operating procedures. Support periodic security reviews and audits by gathering evidence, screenshots, and exportable reports from cloud and security tools. Help implement and track security metrics (e.g., cloud misconfigurations remediated, mean time to acknowledge, patch/vulnerability closure rates) and suggest improvements. Assist with user onboarding/offboarding tasks related to security access, device setup, and cloud/security tooling enrollment. Collaboration and learning Partner with IT teams to ensure changes to cloud infrastructure or applications include appropriate logging and security controls. Stay current on security tooling and best practices relevant to cloud security, SIEM, and endpoint protection, and share useful findings with the team. Job Qualifications Bachelor's degree in technical, information security, or related discipline, or equivalent practical experience. 4–7 years of relevant security experience, with meaningful exposure to cloud environments (Azure and/or AWS). Strong technical aptitude with a primary interest in cloud security, alongside familiarity with security operations and endpoint protection. Experience with core Azure security services strongly preferred, such as Microsoft Entra ID, Network Security Groups (NSGs), Azure Key Vault, and Azure Policy. Exposure to securing containerized environments (e.g., image scanning, AKS/container runtime security) is a plus. Comfortable working with cloud consoles, logs, dashboards, and basic scripting or automation tools to troubleshoot and analyze issues. AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Security+, CySA+, or other relevant information security certifications. Demonstrates strong problem solving, analytical, interpersonal, and ownership skills. Possesses excellent collaboration skills for work with various internal team members. Additional Skills/Experience A broad understanding of how to secure cloud environments end to end — identity, network, data, and workload layers — rather than deep expertise in a single area. An understanding of cloud security concepts, encryption, system hardening, defense-in-depth designs, advanced persistent threats, anomaly detection, and next-generation technologies. Working knowledge and experience with any of the following: Microsoft Entra ID, Network Security Groups (NSGs), Azure Key Vault, Azure Policy, cloud IAM/PAM more broadly, Infrastructure-as-Code security scanning (Terraform, CloudFormation), container/Kubernetes security, CSPM/CWPP tools, and cloud logging (Azure Monitor, CloudTrail). Interest or prior experience supporting cloud migration initiatives, ideally with an eye toward building security in from the start rather than retrofitting it. Familiarity with traditional security technologies is a plus: VA, SIEM, DLP, IPS/IDS, AV, MFA, VPN, FW, AD, Wireless, ACLs, and port scanning. Cloud-native monitoring/log analysis experience preferred; experience with a SIEM platform (e.g., Rapid7) is a plus but not required. Working knowledge of Windows endpoints; familiarity with macOS or basic networking concepts is a plus. Awareness of security frameworks or standards (e.g., ISO 27001, NIST CSF, CIS Benchmarks for Azure/AWS) and interest in learning how they apply in practice. Knowledge of a variety of security tools, with depth in cloud-native security tooling. What We Value We recognize that not every candidate will meet every qualification listed. If you’re excited about this role and believe you have relevant experience or transferable skills, we encourage you to apply. We value curiosity, a growth mindset, and a commitment to collaboration. Equal Opportunity Employer ClearView Healthcare Partners ("CV") is an Equal Opportunity employer.  All qualified applicants will be considered for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by applicable law.

Location: CH - Shanghai, China Location: Tokyo, Japan(On-board in China) Scopely's Security team is looking for a Sr Client Security Engineer to build a new client security function in China. You will design and ship client/server-side protections for large-scale mobile games, combat sophisticated cheating ecosystems, and help ensure fair play for tens of millions of players. What You Will Do Build, and grow the Client Security team in China, setting China specific technical direction, and operational best practices. Design, implement, and maintain client-side detections against third‑party cheating tools, modified clients, hooking frameworks, and emulators on Android and iOS . Own the client security integration into Scopely's internal anti-cheat platforms working closely with teams to ensure detections are actionable and scalable. Define and evolve the obfuscation and hardening strategy for China mobile builds (e.g., binary protection, anti-debugging, anti-tamper, integrity checks), including evaluating and integrating third‑party hardening vendors where appropriate. Build and maintain strong coverage for the China mobile ecosystem , including: distribution through multiple Android app stores and OEM devices, diverse OS/ROM variants and rooted/jailbroken environments, and local PC/emulator-based cheating patterns. Contribute hands-on code (C++ plus Java/Kotlin and/or Objective‑C/Swift) in security‑sensitive paths, including detection logic, integrity checks, and secure client–server protocols. What You Will Need Experience in mobile security, game anti-cheat, or client-side security engineering, including time working directly on Android or iOS native code. Direct experience with reverse engineering. Deep hands-on experience with: Android and IOS internals hooking and instrumentation frameworks, and common mobile client security attack vectors. Strong proficiency in C/C++ and at least one mobile native language (Java/Kotlin for Android or Objective‑C/Swift for iOS), including experience shipping production code in large apps. Demonstrated experience designing and shipping client-side anti-cheat or integrity systems that integrate with server-side enforcement or analytics pipelines. Prior experience ing or technically directing a small engineering team Experience working with large-scale telemetry or anti-abuse pipelines and using data to tune detections and reduce false positives. Professional proficiency in both Mandarin and English, written and spoken Requires five days per week in the office Requires relocation to Tokyo Bonus Points BS / MS in Computer Science or Software Engineering or equivalent Experience shipping and securing mobile games or other large-scale consumer apps specific to the China market, specific exposure to: multiple Android app-store ecosystems and OEM variations, desktop/mobile emulator usage patterns, and tooling development experience specific for china mobile games Previous CTF experience, and CVE contributing experience Prior work on client obfuscation / hardening pipelines, including vendor evaluation and integration, and handling performance and stability tradeoffs. Familiarity with large-scale cloud environments, streaming data processing, and monitoring/alerting About Scopely Scopely is a leading video game and global interactive entertainment company, home to many of the world’s most beloved and enduring experiences, including two of the most successful mobile games of all-time “MONOPOLY GO!” and “Pokémon GO,” along with “Stumble Guys,” “Star Trek™ Fleet Command,” “MARVEL Strike Force,” “WWE Champions,” the Scrabble® franchise, “Yahtzee® With Buddies,” and many others. Across mobile, web, PC, and console, Scopely creates, develops, publishes, and live-operates one of the most diversified and award-winning portfolios in the games industry — bringing hundreds of millions of players together through a shared love of play. Founded in 2011, Scopely is powered by its exceptional team — including thousands of world-class gamemakers around the globe, a distinctive tenet-driven culture, and its proprietary technology platform, Playgami. Together, these strengths have fueled Scopely’s position as the #1 mobile games company in the U.S. and #2 globally, generating more than $10 billion in lifetime revenue. Whether building global sensations like “MONOPOLY GO!” from the ground up, or expanding through strategic acquisitions, including the FoxNext, GSN, and Scopely Explore games businesses — Scopely consistently delivers experiences players love today and return to for years to come. Recognized multiple times as one of the "100 Most Influential Companies in the World" by TIME magazine and one of Fast Company's "World's Most Innovative Companies" and “Best Workplaces for Innovators,” Scopely believes that video games can be a force for good — creating meaningful connections, vibrant communities, and making life better through play. Scopely has global operations and partners across four continents in more than a dozen countries worldwide. For more information, visit: https://www.scopely.com/ . Notice to Candidates: Scopely will never request payment or financial information during the application or hiring process. Please apply only through our official website and verify that all Talent Partner communications come from an email address ending in @ scopely.com . Should you have any questions or encounter any fraudulent requests/emails/websites, please immediately contact recruiting@scopely.com. Our job applicant privacy policies are available here: California Privacy Notice and EEA/UK Privacy Notice . Employment at Scopely is based solely on a person's merit and qualifications. Scopely does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law. We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state and local law.

Location: US - Bellevue, United States The Security Team of Scopely Explore (formerly known as Niantic) seeks a Cloud Security Engineer to improve the security stance of our infrastructure and production environments. Scopely Explore Engineering leads the development and operation of multiple successful mobile games. We seek creative engineers with excellent technical judgment, strong interpersonal skills, and an eagerness to embrace new technologies.  Do you want to be part of our team, and make our internal and user-facing services safer and more robust? Responsibilities You guide teams making the right security decisions when building out new infrastructure. You build automation to keep our environment safe for our engineers to use. You have an advanced understanding of foundational cloud technologies like Docker, Kubernetes and IAM. You participate in the management of the Cloud Security posture across the organization and multi cloud environments. You own and improve existing infrastructure and tooling for security. You leverage new technologies to elevate Scopely Explore security. You collaborate with the engineering teams on the rollout of security measures. You help shape the security strategy of the company through innovation. Qualifications You can demonstrate programming skills in one main programming language, as an example Go, Java or Python, this list is not exhaustive. You have 3+ years of experience in a global company with cloud-centric infrastructure. You have an in-depth understanding of Cloud technologies. You have experience building out tooling, helping engineers and improving security. You have proven strong communication and team skills in a distributed environment. You have experience in driving organization wide changes in fast moving environments. Important notes about this position While being flexible, 3 days weekly presence in the office on a regular basis is expected. The coding requirement is not optional and will be tested during the recruitment process. Coding skills must be sufficient to automate tasks when needed. AI usage is allowed if its output is understood. For candidates in CA, CO, NJ, NY, and WA, the annual salary range is provided below. In addition to base pay, employees may be eligible for equity, bonuses, and a comprehensive benefits package, including healthcare benefits, retirement benefits, pet insurance, paid holidays, paid Scopely free days, and unlimited paid time off. Base pay offered may vary depending on job-related knowledge, skills, and experience. CA, CO, NJ, NY, and WA Annual Salary Range $169,600 — $253,000 USD About Scopely Scopely is a leading video game and global interactive entertainment company, home to many of the world’s most beloved and enduring experiences, including two of the most successful mobile games of all-time “MONOPOLY GO!” and “Pokémon GO,” along with “Stumble Guys,” “Star Trek™ Fleet Command,” “MARVEL Strike Force,” “WWE Champions,” the Scrabble® franchise, “Yahtzee® With Buddies,” and many others. Across mobile, web, PC, and console, Scopely creates, develops, publishes, and live-operates one of the most diversified and award-winning portfolios in the games industry — bringing hundreds of millions of players together through a shared love of play. Founded in 2011, Scopely is powered by its exceptional team — including thousands of world-class gamemakers around the globe, a distinctive tenet-driven culture, and its proprietary technology platform, Playgami. Together, these strengths have fueled Scopely’s position as the #1 mobile games company in the U.S. and #2 globally, generating more than $10 billion in lifetime revenue. Whether building global sensations like “MONOPOLY GO!” from the ground up, or expanding through strategic acquisitions, including the FoxNext, GSN, and Scopely Explore games businesses — Scopely consistently delivers experiences players love today and return to for years to come. Recognized multiple times as one of the "100 Most Influential Companies in the World" by TIME magazine and one of Fast Company's "World's Most Innovative Companies" and “Best Workplaces for Innovators,” Scopely believes that video games can be a force for good — creating meaningful connections, vibrant communities, and making life better through play. Scopely has global operations and partners across four continents in more than a dozen countries worldwide. For more information, visit: https://www.scopely.com/ . Notice to Candidates: Scopely will never request payment or financial information during the application or hiring process. Please apply only through our official website and verify that all Talent Partner communications come from an email address ending in @ scopely.com . Should you have any questions or encounter any fraudulent requests/emails/websites, please immediately contact recruiting@scopely.com. Our job applicant privacy policies are available here: California Privacy Notice and EEA/UK Privacy Notice . Employment at Scopely is based solely on a person's merit and qualifications. Scopely does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law. We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state and local law.

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Team The Security Engineering team protects Anthropic's AI systems and maintains the trust of our users and society. We define the authentication architecture for our training infrastructure, design the cryptographic foundations that protect model weights and training data, and drive the developer security program that shapes how engineers build and ship software. The team works across several areas that collaborate closely: identity and secrets management, developer security and supply chain, infrastructure security, and secure frameworks. You will own one or two of these areas and contribute to others, with your focus shaped by your strengths and the team's priorities. This is largely greenfield work, and you will help define the architecture. About the role: Scope, design, and build complex security systems end to end, maintaining them through production and driving through ambiguous technical challenges with minimal oversight Identify systematic risks through threat modeling and risk assessment, then build the controls and infrastructure that address them Mentor engineers across the security team and broader engineering organization, contribute to hiring, and grow security engineering culture at Anthropic Enable other teams to build their own security solutions by providing design pattern guidance and expanding security ownership beyond the security team Developer security and supply chain Build and advance our developer security program by embedding security practices into the software development lifecycle and developer workflows Harden CI/CD pipelines against supply chain attacks through isolated build environments, signed attestations, dependency verification, and automated policy enforcement Identity and secrets management Architect systems that protect sensitive assets including model weights, customer data, and training datasets Build and operate credential issuance, rotation, and workload authentication across our multi-cloud environments Infrastructure security Implement and maintain cloud security controls including IAM, network segmentation, VPC architecture, and encryption across our multi-cloud and on-prem environments Contribute to cluster security controls including RBAC policies, namespace isolation, workload identity, and pod security Contribute to continuous cloud security posture management using infrastructure-as-code scanning, misconfiguration detection, and automated remediation Secure frameworks Build critical security foundations including cryptographic frameworks, mTLS infrastructure, secure serialization, and authorization systems, designed to prevent entire classes of vulnerabilities and empower engineering teams to work securely without becoming security experts themselves Partner with product, research, infrastructure, and other security teams to ensure frameworks integrate smoothly with lower-layer security controls You may be a good fit if you have: At least 8 years of software engineering experience with deep security expertise, including leading complex security initiatives independently Bachelor's degree in Computer Science or equivalent industry experience Strong programming skills in Python or at least one systems language such as Go, Rust, or C/C++ Deep understanding of identity systems, cryptographic primitives, and secrets management Working knowledge of Kubernetes security primitives including RBAC, namespaces, network policies, and service accounts Experience leading cross-functional security initiatives and navigating complex organizational dynamics Outstanding communication skills, translating technical concepts effectively across all levels of the organization A track record of bringing clarity and ownership to ambiguous technical problems and driving them to resolution Low ego and high empathy, with a history of growing the engineers around you and supporting diverse, inclusive teams Passion for AI safety and the role security engineering plays in building trustworthy AI systems Strong candidates may also have: Designed or operated identity and secrets management systems for large-scale AI or cloud infrastructure Built security frameworks or libraries adopted across an engineering organization Led a developer security program including supply chain security, secure build infrastructure, and SDLC integrations Built or secured CI infrastructure using Nix, Bazel, or Kubernetes-based deploy systems, with depth in toolchain issues, CI/CD pipelines, and developer workflow optimization Implemented machine identity or workload authentication systems using SPIFFE/SPIRE, mTLS, or equivalent Understanding of Linux systems internals including namespaces, cgroups, and seccomp, and how these underpin container and workload isolation Contributed to the security architecture of multi-cloud environments including network segmentation, data protection, and access governance Experience with network security controls including admission controllers, CNI-level policy, service mesh security, and east-west traffic enforcement Experience building runtime security monitoring using eBPF or kernel security policies Deadline to apply: None, applications will be received on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $405,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Задачи: — Поиск и анализ технических решений для автоматизации существующих и новых платёжных инструментов — Выявление уязвимых мест в web-приложениях и мобильных приложениях — Анализ API, платёжных флоу и сценариев взаимодействия систем — Проведение security-исследований и penetration-тестирования (black-box) — Подготовка технических выводов и рекомендаций для продуктовой и разработческой команд Требования: — Умение работать с API и web-запросами, понимание принципов их работы и методов подмены — Понимание процессов QA-тестирования мобильных приложений (black-box testing) — Опыт работы с network sniffer-инструментами (Charles Proxy или аналоги) — Опыт работы с Frida Framework или аналогичными инструментами для обхода ограничений на стороне приложений — Самостоятельность, аналитическое мышление, внимательность к деталям — Будет плюсом: знание HTML, CSS, JavaScript; опыт работы с Appium Framework; опыт работы с Fintech / платёжными системами / e-commerce Условия: — Приоритет кандидатам, находящимся не в Украине, России, Беларуси.