Вакансии

Location: Tel Aviv, Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Role Overview Nebius is seeking an experienced Security Analyst - Tier 2 for its Security Operations Center (SOC). This role is a hands-on position built for depth, serving as the investigative core of the SOC, focused on evidence and grounded conclusions. This role reports to the SOC Manager, under the Detection and Response function within the CISO Office. You are welcome to work in our offices in Tel Aviv, Israel. Key Responsibilities Investigate escalated security alerts across endpoint, identity, cloud, email, and network layers. Determine scope, impact, and root cause using EDR, SIEM, and supporting telemetry. Escalate suspected incidents to the Incident Response team and complex investigations to Tier 3. Provide structured feedback to relevant stakeholders on detection or prevention quality, false-positive patterns, and coverage gaps discovered during investigations. Contribute to and refine SOC runbooks, triage guides, and investigation procedures. Review Tier 1 escalations, coach on handoff quality, and act as the analytical reference during triage. Document investigations to a standard that supports handoff, quality review, and lessons learned. Participate in the on-call rotation, acting as the investigative point of contact outside business hours. Required Qualifications: Experience Around 5-7 years of hands-on security operations experience, with proven depth in alert investigation. Experience taking investigations to a clear verdict, including confirmed incidents. Technical Expertise Strong working command of EDR platforms and SIEM-based investigation, including writing and adapting queries independently. Solid understanding of attacker techniques, with the ability to map findings to MITRE ATT&CK in analysis and reporting. Investigation capability across at least two of: endpoint, identity, cloud, email, or network domains. Windows and Linux internals at the depth required for log and artifact analysis: processes, authentication flows, and persistence mechanisms. Solid networking fundamentals: TCP/IP, DNS, HTTP/S, and the ability to interpret network telemetry. Scripting ability (Python or similar) for analysis at scale, and familiarity with SOAR platforms. Certifications such as BTL2, OSDA, or CDSA are an advantage. Leadership & Communication Intellectual honesty, clearly distinguishing important and vague data, what is known, what is assumed, and what is still unknown. Collaborative escalation habits, hands off with context and stays available to support what comes next. Structured written communication, writing investigation notes that tell the story on their own. Fluent in English, written and verbal, comfortable working with international teams and stakeholders. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: Worldwide We are looking for an Application Security Engineer to join our Information Security team. The Information Security team is responsible for protecting Plata’s products, systems, and data by embedding security throughout the technology lifecycle. We work closely with engineering teams to identify and mitigate security risks, strengthen application defenses, and ensure security is integrated into every stage of software development. As an Application Security Engineer , you will serve as a key link between development and security teams, designing, implementing, and maintaining robust application security controls. You’ll help embed security across the entire software development lifecycle — from design and development to testing and deployment — while continuously improving our application security practices. Challenges that await you: Collaborate with Dev & Ops teams. Guide secure coding practices, participate in code reviews, and embed security seamlessly into the SDLC Conduct security reviews & threat modeling. Analyze application architecture, define threat models, and drive proactive risk identification Integrate security tools. Deploy and manage SAST, DAST, IAST, RASP, and SCA tools within CI/CD pipelines to automate early detection and remediation Handle security incidents Implement “shifting left” strategies, enforce continuous testing, fast remediation, and embed security culture across teams Educate and train. Conduct workshops to elevate developer security awareness and promote adherence to OWASP, ASVS, and secure design standards What makes you a great fit: Proficient in programming languages (web/mobile) Strong understanding of web architectures (microservices) Deep knowledge of OWASP Top 10, threat modeling, and security testing frameworks Familiarity with security tools such as ZAP, Dependency-Track, Burp Strong analytical skills with precise and thorough attention to detail Your bonus skills: Security certifications (OSCP, OSWE, GWAPT, GCPN) Contributions to or experience with bug bounty or ethical-hacking programs SaaS or cloud-native environments experience Familiarity with Kubernetes or container security Our ways of working: Innovative Spirit: A commitment to creativity and groundbreaking solutions Honest Feedback: valuing open, transparent communication Supportive Team: a strong, collaborative community Celebrating Achievements: recognizing our wins together High-Tech Environment : a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances Our benefits: Relocation support to Kazakhstan, Spain, Cyprus, or Georgia with full visa & permit support to the employee and family Flexible work from one of our offices or remote Healthcare Coverage Education Budget: Language lessons, professional training and certifications Wellness Budget: Mental health and fitness activity reimbursements Vacation Policy: Annual leave and paid sick leave as per applicable policies

Location: Bangalore Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work. Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you. Our vision: A world where everyone is free to focus on their most purposeful work, together. About the Role: With flexible, distributed-first ways of working, you'll have the support to do your best work, wherever you are. Wrike commits to its customers that their data is monitored around the clock. Our Security Operations Center delivers on that promise through a hybrid model with a 24/7 managed detection partner (Rapid7)—and our analysts are the core drivers who handle escalations, conduct deep-dive investigations, and execute immediate action. As an L2 SOC Analyst , you will play a pivotal role in our security rotation: monitoring and triaging security alerts, responding to escalations from our MDR partner, investigating incidents end-to-end, and continuously maturing our detection capabilities to protect Wrike and our customers. Your Impact: Alert Triage & Escalation: Monitor, triage, and investigate security alerts and events, including direct escalations from our 24/7 MDR partner (Rapid7). Incident Containment & Forensics: Assess risk and impact of potential incidents, conducting end-to-end investigations (log analysis, endpoint forensics, scoping) and taking swift remediation actions. On-Call Coverage: Participate in the SOC on-call rotation to guarantee round-the-clock escalation coverage. Detection Engineering & Tuning: Continuously refine and tune detection rules to minimize false positives and identify genuine threats faster. Proactive Threat Hunting: Contribute to threat hunting initiatives across endpoints, identity providers, SaaS platforms, and cloud environments. Process Improvement: Help document, refine, and optimize SOC playbooks, runbooks, incident reports, and operational escalation workflows. Your Qualifications: Experience: 2–3+ years of hands-on experience in a SOC or security monitoring environment (alert triage, incident investigation, and response). Technical Proficiency: Hands-on experience with SIEM platforms (Rapid7 InsightIDR or similar) and EDR/antimalware tooling for endpoint investigations. Core Knowledge: Strong understanding of network security fundamentals, common threat vectors, and attack frameworks (MITRE ATT&CK). Problem-Solving & Communication: Sharp logical thinking and analytical skills paired with advanced written and verbal English communication abilities. Availability: Ability and willingness to participate in an on-call rotation, including occasional nights and weekends. Standout Qualities: Hybrid Model Experience: Prior experience collaborating directly with an MDR or MSSP partner in a hybrid SOC environment. Extended Tooling Expertise: Hands-on familiarity with tools such as Splunk, Wazuh, Microsoft Defender for Endpoint, Crowdtrike, Okta, Google Workspace, AWS, or GCP. Advanced Capabilities: Previous experience in active threat hunting, detection engineering, or task automation using Python/Bash. Industry Certifications: Relevant security certifications (e.g., Security+, CySA+, GCIH, GCDA, or vendor-specific certifications). Team Dynamics: You will join a highly collaborative, vigilant, and supportive Security Operations Center team. In this role, you will work closely with internal incident responders, cross-functional IT and infrastructure teams, and directly alongside analysts from our 24/7 MDR partner (Rapid7). The team culture values transparent communication, continuous learning, and collective ownership of security outcomes. Our Work Style: We operate in a dynamic, hybrid security model utilizing modern cloud-first security tooling. Tech Stack & Tools: Rapid7 InsightIDR, EDR/XDR platforms, Okta, Google Workspace, AWS/GCP, and custom Python/Bash automation scripts. Methodologies: Framework-driven incident response aligned with MITRE ATT&CK, structured playbooks, and continuous threat-hunting cycles. What Makes Us Different: Unlike traditional SOC environments burdened by endless repetitive alerts, our hybrid model leverages an MDR partner to offload initial noise. This allows our L2 Analysts to focus on complex investigations, high-impact threat hunting, and genuine detection engineering. Benefits & Perks: 18 calendar days of paid vacation 12 days of National & Festival holidays (10 fixed, 2 flexible) Sick Leave Compensation (5 Paid Uncertified Sick Days) Menstrual Leave: Twelve (12) days per calendar year. Women employees are eligible for up to 1 day of menstrual leave per month. Parental Leave: 26 Weeks Maternity / 4 Week Paternity 2 Volunteer Days Group Medical Insurance (Employees + Dependents) Term Life Insurance (Rs 50,00,000) Personal Accident Insurance (Rs 50,00,000) Monthly Broadband / Internet Reimbursement (INR 1500) Hybrid Working Model + Complimentary Lunch & Snacks Your recruitment buddy will be Nandini Singh , Recruiter. #LI-NS2 Who Is Wrike and Our Culture We’re a team of innovators and creators who solve the complex work problems of today and tomorrow. Hybrid work mode Wrike is our people, not a place. With 1,000+ employees collaborating across nearly every time zone, we support talent through 10 global hubs — Australia, Costa Rica, Cyprus, Czechia, Estonia, France, India, Ireland, Japan, and the United States — offering flexible ways of working that include remote work, hybrid environments, and co-working spaces across many locations. While flexibility looks different across teams and regions, employees located near certain hubs — particularly in Prague (CZ), Nicosia (CY), Bangalore (IN), and Rennes (FR) — are generally expected to collaborate in person around 2–3 days per week, balancing the flexibility of distributed work with opportunities for in-person collaboration and connection. Our persona 💡  Smart: We love what we do, and we’re great at it because this is our domain. Our combined knowledge in this space is unmatched. 💚  Dedicated: We get up every day focused on helping our customers win. We’re committed to helping our teammates win, too! 🤗  Approachable: We're friendly, easy to get along with, considerate, and helpful. Our culture and Values 🤩 Customer-Focused We care about our customers. We understand the customer journey, experience, and value derived from Wrike. Decision-making and action-taking are done with the customer in mind. 🤝 Collaborative We work as one and win together, each bringing unique strengths that contribute to diversity of thought for better outcomes. Leveraging our own work management platform, we foster an environment of creative collaboration and shared achievement. 🎨 Creative We strive to succeed through continuous innovation. It’s our pursuit of novel concepts that helped us create a market category. We continue to cultivate a workplace that fosters creative thinking as a means of transcending conventional boundaries and empowers us to break new ground to deliver extraordinary work management solutions. 💪 Committed We believe in ownership at all levels of the organization, by owning workflows from start to finish. Each member of our team is an integral part of this commitment, establishing work as a platform for personal growth and transformation, as well as collective success and growth. Check out our LinkedIn Life Page , Company culture page , Instagram , Wrike Engineering Team , Medium , Meetup.com , Youtube for a feel for what life is like at Wrike.

Location: Remote Workplace: remote At Offchain, we aren’t just building products: we’re leading a movement.    As pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. We're laying the foundation that will define the next generation of digital commerce, governance, and human interaction. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security and transparency.    At the center of this vision is our people. Our team is made up of thinkers and doers that embrace new challenges and seek solutions that push existing boundaries. If you’re energized by solving unprecedented problems, and believe in the role that decentralized systems will play in creating a more equitable digital future, then we want to hear from you.    Why Offchain?   Offchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today.   Arbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack.   Arbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure.   To top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly. The Role As a Senior Security Engineer at Offchain, you will emulate the real-world tactics, techniques, and procedures of sophisticated adversaries to surface vulnerabilities across our infrastructure and ecosystem tools. You’ll run hands-on penetration tests, lead red team exercises, and work side-by-side with blue team partners to test, refine, and strengthen detection and response capabilities. Your efforts will directly shape how Offchain designs, launches, protects, and achieves compliance for the infrastructure that powers millions of users and applications - including key standards such as SOC 2. What you'll do: Conduct comprehensive code audits across a variety of internal applications and infrastructure. Conduct comprehensive penetration tests across cloud environments (AWS), infrastructure, and backend applications. Collaborate with detection engineering, threat intelligence, and incident response groups to review security controls, uncover coverage gaps, and enhance overall detection quality. Build, maintain, and evolve custom offensive tools, scripts, and automation frameworks to increase assessment speed. Offer offensive security expertise during incident investigations, including log analysis and root cause reviews. Keep up with evolving threats, vulnerabilities, and attack methods; share research internally and engage with the wider security community. Own offensive security projects from start to finish, mentor junior team members, and cultivate a culture of ongoing learning and knowledge exchange. What you'll need: 5+ years of experience in offensive security, penetration testing, red teaming, or a closely related field. Extensive experience with conducting code audits to identify and remediate security issues. Experience with binary exploitation. Mastery of AWS & specific attack techniques and configuration weaknesses. Strong understanding of adversary tactics and frameworks like MITRE ATT&CK. In-depth knowledge of web application security, including OWASP Top 10, ASVS, and common vulnerability categories. Proficiency using offensive security tools such as Burp Suite, nuclei and similar frameworks. Strong programming skills in Python, Go, or similar languages, with proven experience developing tools or automation. Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations. A natural ability to think like an attacker - creative, determined, and skilled at assessing risk across complex systems. Nice-to-haves Web3 / blockchain security exposure: smart contract auditing, bug bounty hunting (e.g., Immunefi, Code4rena), or DeFi protocol review. Familiarity with Ethereum L1 / L2 node architecture and security risks. Experience in blockchain infrastructure penetration testing. Perks: Remote-first global workforce + NY office Professional reimbursement program (facilitates industry conference attendance, certifications, and more) Medical, dental & vision coverage (US + some other countries) 401k retirement plan + company match (US only) Wellness stipend Home office set up / ergonomic equipment program

Location: San Francisco, CA Workplace: OnSite ABOUT US Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Sierra was co-founded by Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/ who first met while working together at Google over 20 years ago. Bret currently serves as Chairman of the Board of Open AI. Previously, he was co-CEO of Salesforce and CTO of Facebook. Clay spent 18 years at Google, where he most recently led Google Labs. SECURITY ENGINEER Security Engineering builds the foundations that let Sierra deliver powerful AI agents while protecting customer data and trust. We partner across product and platform to make security, privacy, and safety core product capabilities and secure defaults. WHAT YOU’LL DO Our work spans several security domains. You’ll go deep where your strengths and interests are strongest, with opportunities to explore new areas alongside the team. Build the Foundations of Trust. Design and ship systems and controls that make Sierra secure by default — spanning product security, infrastructure security, enterprise security, identity, and detection and response. You’ll work across all layers of our platform to identify risk, strengthen architectures, and build durable defenses. Own Cross-Cutting Systems. Partner with product, platform, and infrastructure team to threat model designs, review code and architectures, and implement and evolve Sierra’s security primitives. You’ll make pragmatic design trade-offs between usability, performance, reliability, and security. Find and Reduce Real Risk. Identify vulnerabilities, investigate suspicious behavior, and improve detections and response workflows across applications, cloud infrastructure, identity, endpoints, and internal systems. Turn what you learn into systemic fixes and controls that prevent entire classes of issues. Automate and Scale Security Workflows. Create developer-friendly tooling to reduce risk and friction — whether through automating security checks in CI/CD, building secure paved paths, improving vulnerability discovery, or instrumenting high-signal detection and response.     WHAT YOU’LL BRING Deep Security Expertise. Strong security fundamentals and depth in at least one domain, such as product security, platform or cloud security, enterprise security, identity, detection and response, or offensive security. You can apply that expertise across unfamiliar systems and emerging threats. Product and Platform Mindset. You care about building secure, scalable systems that enable, not block, innovation. You work closely with teams across Sierra to make trade-offs clear and help them move quickly without sacrificing trust. Software Engineering and Systems Thinking. You’re comfortable reading and writing code, understanding how production systems fit together, and building pragmatic software solutions to security problems. You can reason about system design and contribute to APIs, services, and security controls, with an eye toward reliability and maintainability. Curiosity and Ownership. You take ambiguous, cross-cutting problems from first principles to production and go deep when needed: threat modeling a distributed system, tracing an authorization decision across services, or following an investigation from weak signal to root cause. You define the problem, align partners, build the solution, and own it in production.     EVEN BETTER IF… - You’ve worked across more than one of product security, infrastructure security, enterprise security, detection and response, or offensive security. - You’ve built security frameworks, platforms, or solutions that engineers and responders rely on to prevent, detect, investigate, and remediate security issues at scale. - You have exposure to AI systems or care about designing secure-by-default LLM applications and agentic systems. - You think like an attacker — you naturally ask “what could go wrong?” when reviewing designs or investigating systems. You’ve found or fixed real security issues in production. - You thrive in 0→1 environments, where foundational systems have to balance speed, reliability, and trust. OUR VALUES - Trust: We build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work. - Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it. - Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn’t right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve. - Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time. - Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company for parents. We support and respect each other and celebrate each other’s personal and professional achievements. WHAT WE OFFER We want our benefits to reflect our values and offer the following to full-time employees: - Flexible (unlimited) paid time off - Medical, dental, and vision benefits for you and your family - Life insurance and disability benefits - Retirement plan dependent on country of employment - Parental leave - Fertility and family building benefits - Lunch, as well as delicious snacks and coffee to keep you energized when working onsite - Discretionary benefit stipend giving people the ability to spend where it matters most - Free alphorn lessons These benefits are further detailed in Sierra's policies, may vary by region and employment type, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full-time employees can participate in Sierra's equity plans subject to the terms of the applicable plans and policies. BE YOU, WITH US We're working to bring the transformative power of AI to every organization in the world. To do so, it is important to us that the diversity of our employees represents the diversity of our customers. We believe that our work and culture are better when we encourage, support, and respect different skills and experiences represented within our team. We encourage you to apply through the link on this page even if your experience doesn't precisely match the job description. Sierra is a proud equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by applicable federal, state or local laws, including veteran status and disability status. Hiring decisions are made by people, based on merit. If you need a reasonable accommodation for a disability, a religious practice, pregnancy or any related condition at any point in the application or interview process, contact us at accommodations@sierra.ai. Requests are handled confidentially and do not affect your candidacy. We will consider qualified applicants with arrest and conviction records in accordance with applicable fair chance laws.

Location: US / Remote Workplace: remote About the Company Founded in 2018 by professors of Yale University and Columbia University, CertiK is a pioneer in blockchain security, utilizing best-in-class AI technology to secure and monitor blockchain protocols and smart contracts. CertiK’s mission is to secure the cyber world. Starting with blockchain, CertiK applies cutting-edge innovations from academia into enterprise, enabling mission-critical applications to be built with security and correctness. CertiK is one of the fastest growing and most trusted companies in blockchain security and has become a true market leader. Our clients include leading projects such as Aave, Polygon, Binance Smart Chain, Yearn, and Chiliz. Our investors include top VCs like Tiger Global, Coatue Management, Shunwei Capital and Hillhouse Capital as well as industry leaders like Coinbase Ventures and Binance. About the Position The primary responsibility of this role is contributing to CertiK’s security-related services at the intersection of cybersecurity and blockchain. CertiK’s offerings include security consulting, security reviews, and security auditing of smart contracts and blockchains, alongside penetration testing and various verification processes. As a Security Engineer at CertiK,
, You’ll discover and analyze security vulnerabilities in blockchain smart contracts, summarize attacked vulnerabilities, and design feature code analysis tools. You’ll also stay up-to-date with analysis tools and new technology trends to further strengthen CertiK’s security offerings and expand our services. Responsibilities Participate in blockchain smart contract audits, identifying, analyzing, and addressing security vulnerabilities. Help evaluate and define attack models for blockchain security. Summarize and extract key characteristics from exploited code to build and maintain tools for feature code analysis. Research and work with different analysis tools, continually learning and adapting to emerging technologies in the space. Requirements A bachelor’s degree (or higher) in full-time education, preferably in a science or engineering field, plus 3+ years of work experience. Familiarity with fundamental information security concepts. Proficiency in at least one of the following languages: Solidity, Go, Rust, C++, Python, or Node.js, along with a solid grasp of common algorithms. A demonstrated ability to function in an English working environment with strong English reading and writing skills. A passion for blockchain technology and a drive to learn and adapt to new technologies. Bonus Points Experience working with production pipelines—maintaining or developing them. Familiarity with static code analysis (e.g., Syntax Analysis, Semantic Analysis, Taint analysis). Exposure to popular blockchain-related platforms and technologies (e.g., Ethereum, Hyperledger, Cosmos). Prior knowledge of blockchain smart contracts, security audits, and associated best practices. Hands-on blockchain experience such as evaluating risks for blockchain projects or analyzing on-chain security events. Target annual salary for this role performed is $90,000 - $150,000 if based in the US. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates. CertiK accepts applications for this position on an ongoing basis.   CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.   In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.   CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.   CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements. https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf   All CertiK employees are expected to actively support diversity on their teams, and in the Company.

Location: Remote - Europe About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Application Security The team is responsible for the security of Nebius's main public offerings : Compute, VPC, Managed K8s, Marketplace, Managed Soperator, and others. This includes building out the Secure SDLC , threat modeling, and vulnerability management platforms. The Role We are looking for an Senior/Staff Application Security Engineer who will ensure the security of our software by identifying and mitigating vulnerabilities, implementing best security practices, and collaborating with development teams. The ideal candidate will have a strong background in secure coding, threat modeling and building Secure SDLC. What you will do Build and maintain Application Security Posture Management (ASPM) at the Company scale. Automate and support SAST, SCA tools, etc as part of CI/CD pipelines. Improving SAST, secrets detection rules. Keeping false positive rate low. Identify, analyze, and remediate application security vulnerabilities. Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC). Develop and maintain secure coding guidelines for development teams. Conduct, run threat modeling and risk assessments for new and existing applications. Provide development teams with instruments that facilitate security-related work like threat modelling, vulnerability detection, etc. Stay updated on the latest security threats, vulnerabilities, and mitigation techniques. Serve as an application security subject matter expert to other teams. What we look for 6+ years of experience in application security. Strong knowledge of common application security risks (e.g. OWASP Top 10) and how to mitigate them. Experience with secure coding practices in languages such as Python, Go, Java, or JavaScript. Proficiency in a common programming language (such as Go or Python) with a willingness to learn Go, if necessary. Hands-on experience with security testing tools (Burp Suite, ZAP, Semgrep, etc.). Understanding of authentication protocols like SAML or OIDC. Experience in conducting threat-modeling sessions. Bonus points Confidence in presenting your ideas and opinions in a manner that can be challenged, while responding well to feedback. Experience in designing, building, and maintaining security automation. Experience in translating compliance and regulation requirements into technical specifications. Experience in exploiting vulnerabilities in web applications, Linux kernels, containers, and networks. Security certifications such as OSCP or OSWE. Hiring process Recruiter's chat (30mins) Live-coding interview (60mins) to asses basic coding skills Security interview (60mins) to asses domain expertise Security System Design interview (90mins) to assess practical experience (Optional) Technical deep dive (90mins) to present a complex and impact project. Final interview to close the hiring process (45mins) #LI-CP1 Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: Remote-Friendly (Travel-Required) | San Francisco, CA | Seattle, WA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role: Anthropic's Application Security team secures the systems that build, serve, and increasingly are Claude. The attack surface is unlike most AppSec work: multi-agent orchestration, sandboxed code execution, agents holding delegated credentials, untrusted tool output crossing trust boundaries — problems with little prior art and no off-the-shelf playbook. The way the team works is also different. We use Claude as our primary tool across every part of the job: it drives our static analysis, drafts and fixes vulnerabilities as pull requests, performs first-line bug bounty triage, and assists threat modeling for design reviews. The human work is the judgment layer — system-level reasoning, deciding what matters, and building the next thing the model can't do yet. This is a builder's role on a senior team. We hire engineers who ship production systems and clear a hands-on threat-modeling bar — people who can find the vulnerability but would rather build the system that finds them all. Every engineer owns a system end-to-end, and the team's work has shaped customer-facing product security — including Claude Code's security review tooling, its security guidance plugin, sandboxing, and auto mode. Key responsibilities: Design, build, and operate Claude-powered security systems — LLM-driven code analysis, automated vulnerability remediation, AI-assisted threat modeling — and own one or more of them end-to-end, including the cross-functional relationships that come with it Lead secure design reviews and threat modeling for novel AI systems, identifying risks that don't map to existing frameworks Evolve a public bug bounty program where automation handles routine triage and root-cause work, and engineers handle escalations and corner cases Partner with Product, Infrastructure, and Research teams as an embedded security owner — consulting on launches, shaping architecture, and influencing decisions where security is the constraint Share an operational on-run rotation with the rest of the team — bounty escalations, incident response, and launch consults on systems serving Claude in production Minimum qualifications: Hands-on application and infrastructure security experience, including cloud and containerized environments Production-quality coding ability in at least one of Python, Go, Rust, or TypeScript, with a track record of building durable systems rather than one-off scripts Practical threat-modeling and vulnerability-identification skills — you've found and reasoned about real bugs in real systems, even if breaking isn't your primary mode Demonstrated ability to operate with high autonomy and ambiguity — comfortable being handed a problem and a lot of latitude rather than a spec Clear technical communication with both engineers and leadership Preferred qualifications: 7+ years in application security, security engineering, or security-focused software engineering Already use LLMs as a core part of how you work, with opinions about where they help and where they don't Experience securing agentic, code-execution, or LLM-integrated systems specifically Prior ownership of a bug bounty program, vulnerability disclosure program, or vulnerability-management infrastructure at scale Background building security automation or developer-facing security tooling Offensive security or penetration testing experience Representative projects An increasingly autonomous vulnerability pipeline — LLM-driven code analysis finds the issue, scores it for real exploitability, and opens the fix PR, with humans as the review step rather than the author Bug bounty operations where Claude handles first-line triage and drafting, and engineers focus on the reports that actually need judgment AI-assisted threat modeling that generates intake questions, drafts the model, and recommends which design reviews need a human in the room Automated dependency vulnerability remediation across Anthropic's codebase The company-wide vulnerability dashboard and SLA enforcement layer every engineering team works against Threat models and security architecture for agentic product surfaces — code execution sandboxing, agent identity and delegated auth, tool-use boundaries The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $485,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Home based - Worldwide We have opened several senior/staff Security Operations Engineer (SOC) positions, creating a new team reporting to the CISO. We are looking for a range of experience in these positions - at the high end we are looking for deep experience defending highly contested critical assets and high-value cyber targets against advanced persistent threats and state-level actors. We have more junior roles for exceptional individuals with a proven personal interest an engagement in cyber attack and defence, and outstanding academic and career performance even if experience is limited. Our goal is to build an entirely new level of assurance and observable rigour into the open source supply chain. We have our own estate to monitor, but more broadly our goal is to raise the robustness of the entire global Ubuntu estate through the work of this team. The Security Operations (SecOps) team is responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our own infrastructure and product deployments. They design and implement technical security controls that ensure security threats are automatically identified, contained and remediated. The team will also contribute ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attack. The SecOps team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies. What you will do in this role: Implement and evolve Canonical's SecOps security standards and playbooks Analyse and improve Canonical's security architecture Evaluate, select and implement new security tools and practices Identify, contain and guide the remediation of security threats and cyber attacks Grow the presence and thought leadership of Canonical SecOps practice Contribute to open source threat intelligence initiatives Drive threat modelling, table top exercises and other SecOps practices across Engineering, IS and Canonical Develop Canonical SecOps learning and development materials Publish blog posts, whitepapers and conference presentations Identify, implement and track SecOps KPIs Plan and deliver SecOps work in the framework of Canonical's agile engineering practice Work with Security leadership to present information and influence change What we are looking for An exceptional academic track record Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path Drive and a track record of going above-and-beyond expectations Deep personal motivation to be at the forefront of technology security Expertise in threat modelling and risk management frameworks Knowledge of security architecture and market-leading security tools Experience contributing to, and consuming, threat intelligence feeds Experience in security risk management frameworks such as NIST CSF Experience with security standards such as ISO 27001 Optional things we value Experience in a security operations team or a security operations centre (SOC) Experience in offensive or defensive security teams with hands-on ability Experience with state-actor and other advanced persistent threats What we offer you We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. Distributed work environment with twice-yearly team sprints in person Personal learning and development budget of USD 2,000 per year Annual compensation review Recognition rewards Annual holiday leave Maternity and paternity leave Employee Assistance Programme Opportunity to travel to new locations to meet colleagues Priority Pass, and travel upgrades for long haul company events About Canonical Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004.​ Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical is an equal opportunity employer We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration. #LI-remote

Location: Brussels, Belgium As a Network Security Engineer at Müller's Solutions, you will be responsible for ensuring the confidentiality, integrity, and availability of our network infrastructure. Your role will include designing, implementing, and managing network security measures to protect our organization's sensitive data from cyber threats. You will work closely with various teams to monitor network traffic, respond to security incidents, and maintain compliance with industry standards. Key Responsibilities: Design, configure, and implement network security solutions, including firewalls, intrusion detection/prevention systems (IDS/IPS), and VPNs. Security ,Load balancing and Routing/Switching. Monitor network traffic for unusual activity and conduct regular security assessments and vulnerability tests. Respond to security incidents and provide detailed analysis to mitigate the impact and prevent future occurrences. Develop and enforce network security policies, procedures, and best practices to enhance the organization’s security posture. Work closely with other IT teams to support secure network operations and troubleshoot security-related issues. Stay up to date with the latest cybersecurity trends and emerging threats to continually enhance network security measures. Requirements Requirements: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. 3-5 years of experience in network security engineering or a related field. Work experience and expertise in security network engineering(installation/management/troubleshooting of security equipment such as Checkpoint and Palo Alto Firewall, ASA VPN). Strong knowledge of network security protocols, technologies, and best practices, including firewalls, IDS/IPS, VPNs, and network segmentation. Experience with security tools and technologies, including SIEM systems, vulnerability scanners, and security analytics platforms. Excellent troubleshooting and analytical skills, with the ability to identify and resolve complex security issues. Strong communication skills to effectively collaborate with cross-functional teams and explain technical concepts to non-technical stakeholders. At least 5 years of expertise in F5 WAF, Load Balancing, and Reverse Proxy (APM, ASM, LTM). Able to set up and follow an RFP process. Very good knowledge of network technology (BGP,OSPF, spanning-tree). Analytical mindset for analyzing security solutions. CCNA/CCNP/AWS Certificates are required. Preferred Qualifications: Relevant certifications such as Cisco CCNP Security, CompTIA Security+, or Certified Information Systems Security Professional (CISSP). Knowledge of compliance frameworks, such as PCI DSS, HIPAA, or ISO 27001, is a plus. Knowledge of network equipment such as Cisco ACI, DNA. Knowledge and experience with cloud network management (Microsoft Azure). Knowledge of Windows (MS Office Tools, Active Directory, etc.). CCIE is a plus Technical Expertise and Problem-Solving Abilities Adaptability and Continuous Learning.

Location: Home based - Worldwide The Canonical Security Operations team is hiring for a Senior or Staff engineer. The Security Operations team is responsible for designing, building, and operating a world-class Security Operations Center, and the successful candidate will provide leadership, mentorship, expertise, and outstanding individual contributions towards those ends. This role involves aspects of: Traditional SOC duties - security monitoring, threat hunting, and response. Security engineering - assessing and protecting Canonical platforms and products. Software engineering - building custom tools and platforms. Site reliability engineering - deploying, maintaining, and automating security tools. We are looking for individuals with engineering and security experience, as well as a history of remarkable achievement. Senior security operations personnel with engineering experience and senior developers with security experience are equally well-suited to this role. Beyond securing Canonical’s digital estate, this position represents a unique opportunity to contribute to the open source ecosystem. Team members may present at industry conferences, share threat intelligence with the wider community, or publish open source security software. Junior positions are also available for less-experienced individuals with a compelling academic or professional background. In this role, you will: Provide operational and engineering leadership. Implement and evolve Canonical’s Security Operations Center. Design and develop security software and platforms. Monitor for, identify, respond to, and remediate security incidents. Assess and improve Canonical’s security controls. Mentor early-career Security Operations engineers. Plan and deliver work within Canonical's agile engineering framework. Contribute to open source security. Publish blog posts, whitepapers and conference presentations. We are looking for: An exceptional academic track record. Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path. 10+ years of relevant professional experience Professional cybersecurity experience, preferably working or leading a Security Operations Center. Professional engineering experience. An eagerness to contribute to open source security. Proficiency in common scripting languages, such as Python and Bash. Knowledge of Git, GitOps, Infrastructure-as-Code, and common orchestration platforms (e.g., Kubernetes) Though optional, we value: Familiarity with security frameworks such as the NIST CSF, CIS CSC, and ISO 27001 Knowledge of security architecture and market-leading security tools. Experience in a security operations team or a security operations center. Experience in offensive or defensive security teams with hands-on ability. Experience with advanced persistent threats. Proficiency in additional programming languages, such as Golang. What we offer you: We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. Distributed work environment with twice-yearly team sprints in person Personal learning and development budget of USD 2,000 per year Annual compensation review Recognition rewards Annual holiday leave Maternity and paternity leave Employee Assistance Programme Opportunity to travel to new locations to meet colleagues Priority Pass, and travel upgrades for long haul company events About Canonical Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004.​ Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical is an equal opportunity employer We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration. #LI-remote

Location: Home based - Worldwide This global leadership role in cyber security is to manage the Security Operations (SecOps) team responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our own infrastructure and product deployments. They design and implement technical security controls that ensure security threats are automatically identified, contained and remediated. The team will also contribute ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attack. As a leader on cyber security in the company, the SecOps team manager will collaborate with our Organisational Learning and Development team to develop playbooks and facilitate SecOps training across Canonical. They will operate in a wider security organisation, run a high performing security team and improve Canonical's security posture. They will lead initiatives to integrate the team's insights into Canonical's broader software development process. While this is a management position, we expect managers to be expert practitioners, able to lead by example, contribute at the highest level, and assess work based on their own professional experience and skill. Candidates should have deep, hands-on expertise with a range of open source and proprietary security tooling and practices, which they can integrate into a holistic next generation security solution across the breadth of Canonical's interests. The SecOps team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies. This role reports to the CISO. What you will do in this role: Hire and mentor a team of outstanding technical security professionals Define Canonical's SecOps security standards and playbooks Own and drive the architecture and design of the SOC Analyse and improve Canonical's security architecture Evaluate, select and implement new security tools and practices Identify, contain and guide the remediation of security threats and cyber attacks Grow the presence and thought leadership of Canonical SecOps practice Contribute to open source threat intelligence initiatives Drive threat modelling, table top exercises and other SecOps practices across Engineering, IS and Canonical Develop Canonical SecOps learning and development materials Publish blog posts, whitepapers and conference presentations Identify, implement and track SecOps KPIs Plan and deliver SecOps work in the framework of Canonical's agile engineering practice Work with Security leadership to present information and influence change What we are looking for Proven track record of mitigating with advanced threat actors and nation state threats Expert technical understanding of SOCs from the ground up In depth knowledge of SOC architecture and design including strategies for logging, firewalls, network segmentation, honeypots etc Someone who understands how the SOC works not just how to use it Expert in Linux security Ability to define, implement, automate and measure effective incident response playbooks Knowledge of security architecture and market-leading security tools Experience contributing to, and consuming, threat intelligence feeds Experience in security risk management frameworks such as NIST CSF An exceptional academic track record from both high school and university Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path Drive and a track record of going above-and-beyond expectations Deep personal motivation to be at the forefront of technology security Leadership and management ability Excellent business English writing and presentation skills Confidence to report security performance metrics with accountability for accuracy and completeness Optional things we value Experience in offensive or defensive security teams with hands-on ability Experience with open source security tools Experience with security standards such as ISO 27001 Experience with security posture management of corporate endpoitns

Location: Yerevan, Armenia Description: Digitain now welcomes a highly skilled and motivated Middle Penetration Tester to join our team. The ideal candidate is expected to be responsible for identifying and evaluating vulnerabilities in our clients' systems and applications, conducting penetration testing exercises, and providing recommendations for enhancing security measures. You will work closely with cross-functional teams to ensure the implementation of robust security controls and mitigate potential risks. Responsibilities: Conduct comprehensive penetration testing on various systems, applications, and networks to identify vulnerabilities, weaknesses, and potential security risks Execute manual and automated testing methodologies to identify security flaws in networks, web applications, mobile applications, and infrastructure components Perform analysis and validation of security findings, and provide detailed reports outlining the identified vulnerabilities and potential impact to stakeholders Collaborate with development teams, system administrators, and other stakeholders to provide remediation recommendations and follow up on the implementation of necessary security controls Stay up to date with the latest security threats, vulnerabilities, and attack techniques, and incorporate this knowledge into penetration testing methodologies Contribute to the improvement of existing penetration testing frameworks, tools, and processes to enhance efficiency and effectiveness Assist in the development and maintenance of security policies, procedures, and guidelines Participate in incident response activities, including investigation and remediation of security incidents Provide guidance and mentorship to junior members of the team, assisting in their skill development and knowledge enhancement Requirements: At least 2 years of experience in penetration testing or QA Bachelor's degree in Computer Science, Information Security, or a related field Proven experience in conducting penetration testing and vulnerability assessments in a professional setting In-depth knowledge of network protocols, web application architecture, operating systems, and common security vulnerabilities Proficiency in using a variety of penetration testing tools, frameworks, and methodologies Strong understanding of common security standards, such as OWASP, NIST, and ISO 27001 Familiarity with regulatory compliance requirements, such as GDPR, HIPAA, or PCI DSS Excellent problem-solving and analytical skills, with the ability to think creatively and out-of-the-box Strong written and verbal communication skills, with the ability to clearly articulate technical concepts to both technical and non-technical stakeholders Ability to work effectively both independently and collaboratively in a fast-paced and dynamic environment High ethical standards, integrity, and a commitment to maintaining confidentiality Join our team and play a crucial role in strengthening the security posture of our clients. As a Middle Penetration Tester, you will have the opportunity to continuously enhance your skills and contribute to the protection of sensitive data and critical systems.

Location: Athens; Thessaloniki Workplace: onsite The Role:    As a Junior Systems Monitoring Officer working within our team, you will be responsible for managing a variety of risks for the company, relating to our systems and the various products we offer to our clients and partners. Using in-house tools and reports, you will monitor and evaluate client behaviour, analyse and evaluate the products we offer, and take initiative to help improve on the current tools, reports and procedures used and followed by the department. The main responsibilities of the position include: Monitor the system used by the department and analyse various reports Conduct reviews and investigations of client activity Monitor and ensure swift actions are being taken to manage a range of risks Identify, examine, and report any suspicious activities related to the violation of the Terms and Conditions or the company Work with other departments to perform daily duties and to achieve common goals Stay up to date with market and economic developments Main requirements: BSc/MSc in Mathematics, Statistics, Economics, or any other relevant field (first or upper second-class honours) Strong analytical skills Organised and methodical personality, high attention to detail Excellent oral and written communication skills in English Excellent working knowledge of Microsoft Office tools Ability to work on a well-structured, rotating shift schedule, including weekends Benefit from: Attractive remuneration package Private health insurance Corporate pension fund Intellectually stimulating work environment Continuous personal development and international training opportunities The Hiring Experience: What Awaits You Let’s Connect – Intro Chat with Talent Acquisition Deep Dive – First Interview with Your Future Team Test your edge – Aptitude Assessment Final Connection – Final Interview All applications will be treated with strict confidentiality!   By submitting this application, I confirm that I have read and agree to the terms of the Privacy and Data Protection Notice and the Confidentiality Undertaking.

Location: Home based - Worldwide This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and remain compliant to international information security standards such as FIPS 140-3 and Common Criteria.  You will use your applied cryptography, Linux Security, and coding skills to enhance the Ubuntu distribution and work with organizations such as DISA and CIS to draft and implement security hardening benchmarks for Ubuntu. As a member of the Security Hardening team you will work with and develop automation tooling to audit deployed systems for DISA-STIG and CIS benchmark compliance. You will interact with internal and external stakeholders to identify gaps in our frameworks, and develop new solutions to address these challenges. In this role you will have the opportunity to influence team and security culture, facilitate technical delivery, and help drive team direction and execution. You’ll collaborate closely with Canonical’s kernel team as well as the wider engineering organization to drive features impacting all Ubuntu users. Day-to-day responsibilities Collaborate with other engineers in the Security Hardening team to achieve and retain various Security certifications Extend and enhance Linux cryptographic components (OpenSSL, Libgcrypt, GnuTLS, and others) with the features and functionality required for FIPS and CC certification Collaborate with external security consultants to test and validate kernel and crypto module components Work with external partners to develop security hardening benchmarks and  audit + remediation automation for Ubuntu Contribute to Ubuntu mainline and upstream projects to land solutions and benefit the community Communication and collaboration within and outside Canonical to identify opportunities to improve our security posture, rapidly resolve issues, and deliver high-quality solutions on schedule What we are looking for in you Hands-on experience with low-level Linux cryptography APIs and debugging Excellent software engineering fundamentals, including prior experience with C development, and the ability to demonstrate such Hands-on experience with Linux system administration and shell scripting Demonstrated knowledge of security and cryptography fundamentals + direct experience writing secure code and implementing best practices Significant development experience working with open source libraries Excellent verbal and written communications to enable efficient collaboration with internal and external partners in a remote-first environment Additional skills that you might also bring Prior experience working on FIPS/Common Criteria certified products and in-depth knowledge of the underlying standards Prior experience working directly with DISA-STIG or CIS benchmarks, including related audit + remediation tooling (e.g. Compliance as Code) Experience working directly with Linux Kernel Prior experience with Python, OVAL (Open Vulnerability Assessment Language), and Ansible History of contributions to open source projects What we offer you We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. Distributed work environment with twice-yearly team sprints in person - we’ve been working remotely since 2004! Personal learning and development budget of USD 2,000 per year Annual compensation review Recognition rewards Annual holiday leave Maternity and paternity leave Employee Assistance Programme Opportunity to travel to new locations to meet colleagues from your team and others Priority Pass for travel and travel upgrades for long haul company events About Canonical Canonical is a pioneering tech firm that is at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004.​ Work at Canonical is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical provides a unique window into the world of 21st-century digital business. Canonical is an equal opportunity employer We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration. #LI-Remote

Location: New York, NY / Seattle, WA / San Francisco Bay Area, CA / Remote Workplace: remote About CertiK One of the fastest-growing and most trusted companies in blockchain security, CertiK is a true market leader. To date, CertiK has worked with over 3,200 Enterprise clients, secured over $310 billion worth of digital assets, and has detected over 60,000 vulnerabilities in blockchain code. Our clients include leading projects such as Aave, Polygon, Yearn, and Chiliz.  Investors = Insight Partners, Sequoia, Tiger Global, Coatue Management, Lightspeed, Advent International, SoftBank, Hillhouse Capital, Goldman Sachs, Shunwei Capital, IDG Capital, Wing, Legend Star, Danhua Capital and other investors.  About the role We are seeking security research interns to join a top-notch security research team. We are working on a wide range of security research topics, including malware analysis, vulnerability detection, network anomaly detection, mobile app analysis, reverse engineering, and fraud detections. Multiple research tasks are ready to be explored. Responsibilities Develop analysis tools to facilitate security discovery and design mitigation techniques to deter security threats. Review system implementation of sandbox, VM, network modules, and critical distributed system. Perform vulnerability discovery and develop PoC exploits to large distributed system implementations. Publish research findings in related academic and industry venues. Requirements Pursuing Masters or PhD in Computer Science or Cybersecurity related field. Experiences in vulnerability discovery and exploitation on web applications or system software. Preferred Experiences in WASM or Rust/Go development is a plus. CTF experiences are a plus as well. Compensation $3000 - $8000/month (Full Time). The exact compensation at which this internship is filled will be determined by the skills and experience of qualified candidates. #blockchain #startups #hiring CertiK accepts applications on an ongoing basis for this position until it is filled. The approximate date of closing will be April 30, 2024. CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.   In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.   CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.   CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements. https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf   All CertiK employees are expected to actively support diversity on their teams, and in the Company.

Location: US / Remote Workplace: remote Why Us? CertiK is a pioneer in blockchain security, leveraging best-in-class AI technology to protect and monitor blockchain protocols and smart contracts. Founded in 2018 by professors from Yale University and Columbia University, CertiK’s mission is to secure the web3 world. CertiK applies cutting-edge innovations from academia to enterprise, enabling mission-critical applications to scale with safety and correctness. About the Role The primary responsibility of this role is for CertiK’s security-related services. Intersecting cybersecurity and blockchain, CertiK’s security offerings include security consulting, security reviews, security auditing of smart contracts and blockchains, verification of smart contracts, penetration testing, and more. We are looking to hire someone with a passion for application security and penetration testing. This is a fun and challenging full-time position. If you are excited about hacking, threat modeling, scanning, auditing, designing, and enhancing the security of applications across the board then you will thrive in this role. While you work with clients, we will also provide you with plenty of opportunities to get involved with research and development efforts to help us raise the standards of blockchain security. Responsibilities Perform security assessments on web, mobile, thick client applications, and browser extensions Conduct external and internal network penetration tests Perform security source code reviews Perform cloud security reviews Develop comprehensive pentest reports for both technical and non-technical audiences Research and develop innovative techniques, tools, and methodologies for pentesting applications in the blockchain space Contribute to the community by developing tools, presentations, and blog posts Requirements Passionate about cryptocurrency, DeFi, and blockchain, with a willingness to learn Web3 technologies such as smart contracts Minimum of 4 years of experience in application security and penetration testing Experienced in source code review for different languages, with a strong understanding of JavaScript and TypeScript Experienced in mobile application penetration testing Familiar with cloud platforms and their security risks, such as AWS, Azure, and GCP Experience in programming with scripting languages such as Python and Bash Solid understanding of cryptography BS/MS/PhD in Computer Science or Information Security Strong spoken and written communication skills Bonus Points Experienced in pentesting Web3 applications such as crypto exchanges, wallets, Dapps, and key custodian solutions Experienced in smart contract security audits Familiar with browser extension architecture and security risks Actively participate in the blockchain security community OSCP, OSWE, OSCE, GWAPT, or comparable certification Participated in bug bounty programs and audit contests Published security-related blog posts and spoken at security conferences and/or local meetups About the Company One of the fastest-growing and most trusted companies in blockchain security, CertiK is a true market leader. To date, CertiK has worked with over 3,200 Enterprise clients, secured over $310 billion worth of digital assets, and has detected over 60,000 vulnerabilities in blockchain code. Our clients include leading projects such as Aave, Polygon, Binance Smart Chain, Terra, Yearn, and Chiliz. Investors = Insight Partners, Sequoia, Tiger Global, Coatue Management, Lightspeed, Advent International, SoftBank, Hillhouse Capital, Goldman Sachs, Coinbase Ventures, Binance, Shunwei Capital, IDG Capital, Wing, Legend Star, Danhua Capital and other investors. Compensation Target annual base salary for this role performed in the US is $100,000 - $180,000. The exact compensation at which this job is filled will be determined by the skills and experience of qualified candidates. #LI-Remote #blockchain #startups #hiring CertiK is proud to offer medical, vision, and dental insurance, 401(k) plan with company matching, life and accidental death and dismemberment insurance, HSA (with high deductible plan), FSA, and other benefits to all full-time employees, along with flexible paid time off and holidays. CertiK also offers a variable commission program for business development sales roles.   In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.   CertiK is proud to be an equal opportunity employer. We will not discriminate against any applicant or employee on the basis of age, race, color, creed, religion, sex, sexual orientation, gender, gender identity or expression, medical condition, national origin, ancestry, citizenship, marital status or civil partnership/union status, physical or mental disability, pregnancy, childbirth, genetic information, military and veteran status, or any other basis prohibited by applicable federal, state or local law.   CertiK will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements. https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf   All CertiK employees are expected to actively support diversity on their teams, and in the Company.

Location: Home based - Worldwide Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office-based roles. Teams meet two to four times yearly in person, in interesting locations around the world, to align on strategy and execution. The company is founder-led, profitable, and growing. Canonical is building a team dedicated to providing security coverage across a wide range of ecosystems and environments, working to make the world a better, safer place. We are hiring an Ubuntu Security Engineer to join an industry-leading security engineering team and help protect the open source community and Ubuntu users from emerging threats. We are looking for candidates across all levels of experience, from Graduate to Senior. As part of the Ubuntu Security Team, you will work with some of the best and brightest people in technology to monitor, triage, respond to, and document new and existing vulnerabilities in open source software. You will collaborate with internal teams and external partners to identify issues, prioritize them, and coordinate remediation. This is an engineering-focused role that may also involve activities such as producing security assessments, building features, conducting code reviews, developing internal tools, engaging with the open source community, and participating in industry initiatives and events. This role requires international travel at least twice a year, usually for one week. It also requires the ability to be productive in a globally distributed team through self-discipline and self-motivation. Location: Worldwide, this is a globally remote role The role entails Analyzing, fixing, and testing vulnerabilities in open source packages Keeping track of vulnerabilities in the Ubuntu ecosystem as they are discovered, researched, and fixed, leveraging internal tools Collaborating with other teams in the Ubuntu community and upstream developers, as needed, to exchange or develop vulnerability patches and ensure that Ubuntu includes the most robust security features Auditing source code for vulnerabilities Building features and tools to help teams strengthen the security of their products and contribute to the overall security of Ubuntu What we are looking for in you You have a thorough understanding of the common categories of security vulnerabilities and techniques for fixing them You are familiar with coordinated disclosure practices You are familiar with open source development tools and methodologies You are skilled in one or more of C, Python, Go, Rust, Java, Ruby, PHP or JavaScript/TypeScript You have excellent logic, problem-solving, troubleshooting, and decision-making skills You can clearly and effectively communicate with the team and Ubuntu community members Experience with Linux (Debian or Ubuntu preferred) Excellent interpersonal skills, curiosity, flexibility, and accountability Appreciative of diversity, polite, and effective in a multi-cultural, multi-national organization Thoughtfulness and self-motivation Result-oriented, with a personal drive to meet commitments What we offer colleagues We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus or commission. We provide all team members with additional benefits which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. Distributed work environment with twice-yearly team sprints in person Personal learning and development budget of USD 2,000 per year Annual compensation review Recognition rewards Annual holiday leave Maternity and paternity leave Team Member Assistance Program & Wellness Platform Opportunity to travel to new locations to meet colleagues Priority Pass and travel upgrades for long-haul company events About Canonical Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open-source projects and the platform for AI, IoT, and the cloud, we are changing the world of software. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence; in order to succeed, we need to be the best at what we do. Most colleagues at Canonical have worked from home since our inception in 2004.​ Working here is a step into the future and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical is an equal opportunity employer We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration. #LI-remote