Zenus is looking for an Application Security Engineer AppSec to test applications and APIs, identify vulnerabilities, establish secure coding standards, and validate remediation.
Загружаем…
Загружаем…
Компании и подписки · Нет нужной компании? Предложите её →
Загружаем вакансии…
Zenus is looking for an Application Security Engineer AppSec to test applications and APIs, identify vulnerabilities, establish secure coding standards, and validate remediation.
Location: United States (Remote); Canada (Remote) Workplace: Remote ROLE SUMMARY Join our dynamic team as a Staff Application Security Engineer, where you'll play a pivotal role in securing the Temporal development pipeline, product, and customer execution environment. In this position, you'll work closely with software engineering teams and customers to build security deeply into our platform across multiple clouds. You'll also build production ready AI assisted security workflows with the right guardrails. We're looking for individuals who are passionate about enabling engineering teams to build and ship securely, serving as trusted security partners across the organization. WHAT YOU’LL DO - Collaborate with product and engineering teams to integrate security principles into the design and architecture of products. - Lead complex threat modeling and risk assessments to identify vulnerabilities and potential attack vectors across the full product surface. - Drive strategy, influence architecture, and set direction for security across multiple teams or org-wide. - Manage the Secure Development pipeline including code security and 3rd party library supply chain security. - Stay current on emerging standards and guidance (e.g. OWASP Top 10 for LLMs, MCP security specifications) and translate these into actionable internal policy. - Own responsibility disclosed vulnerabilities in both Cloud and Open Source products. - Able to participate in on-call rotation. WHAT YOU’LL BRING - Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience). - 7+ years in application or product security or a related role. - Proven partnership with engineering teams, bringing security expertise to the planning and development process. - Ability to write production-quality code in at least one programming language, with a history of development beyond simple scripting. - Knowledge of encryption, authentication, and secure communication protocols. - Familiarity with tools like SAST, DAST, and penetration testing frameworks. - A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages - Excellent communication and ability to explain complex security concepts to non-technical stakeholders. - Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control. - Demonstrated experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention. NICE TO HAVE - Distributed computing and related vulnerability experience. - Familiarity with Go. - Running a Security Champions program. - Open Source automation or automation projects. - Expertise in other areas of security. - Security conference talks or published research. Temporal Technologies is an Equal Opportunity Employer. Temporal Technologies does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need. We embrace and celebrate differences and diversity. Temporal is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. If you need to request a reasonable accommodation, please let your Recruiter know so we can assist.
Location: Worldwide APPLICATION INSTRUCTIONS: If you’ve already completed the 20four7VA Recruiting Process—including the Final Interview—or have previously been contracted by a 20four7VA Client, please make sure to apply via the 20four7VA Team Portal for faster processing. Log in using your 20four7VA-issued email address to access the portal. If you’ve just logged in to the Team Portal, please proceed to review the Independent Contractor Opportunity outlined below. 💡 Quick Tip: Upload your resume first—this will automatically populate most of the fields in the application form. Let the magic happen! If you're interested in this opportunity, click APPLY TO POSITION to proceed. ******************************************************************** Title: CPT-11718 Social Media & Grant Application Support Virtual Assistant Independent Contractor – CPT-11718 Social Media & Grant Application Support Virtual Assistant/Marketing VA/Entry-Junior Level (Remote). Overview 20four7VA is seeking offshore independent contractors to deliver remote services to clients worldwide, with a primary focus on developed markets such as the United States, the United Kingdom, Canada, and Australia. An established author and entrepreneur is seeking a Marketing VA to support social media management, content creation, audience engagement, and grant application assistance. The business focuses on personal growth, reinvention, and empowering women over 45. The VA will help build a consistent and engaging online presence by creating content from the client's existing books, quotes, photographs, and videos, while also assisting with preparing and organizing grant applications. The ideal candidate will have social media management experience, strong writing and creative skills, excellent attention to detail, and the ability to manage recurring marketing and administrative tasks. The objective of each engagement is to assist the client in improving business efficiency, enhancing service delivery, or supporting operational functions through high-quality, task-specific services rendered by a qualified contractor. Scope of Services Contractors will be required to provide services that align with the following client tasks: Social Media Content Creation & Publishing Create posts and graphics using approved book quotes, photographs, and existing brand materials Develop and maintain a consistent content schedule for Instagram and Facebook Write engaging captions that reflect the client's message and audience Create simple animated graphics and lightly edit provided video clips Maintain an elegant, professional visual style aligned with the brand Prepare content drafts for client review before publishing Social Media Engagement & Brand Support Monitor comments, direct messages, and routine audience interactions during assigned hours Respond to approved inquiries and flag messages requiring client attention Research relevant topics and content ideas aligned with the brand's direction Support promotional content for books, announcements, and related activities Track basic engagement results and suggest practical improvements Help maintain consistent messaging across social media profiles Grant Application & Administrative Support Organize the client's existing list of grant opportunities and deadlines Review grant requirements and identify outstanding information or documents Assist with refining existing grant application drafts using client-provided content Compile supporting materials and complete application forms for review Track application statuses, submission deadlines, and required follow-ups Submit approved applications through designated portals when authorized by the client Each engagement is based on a defined scope of work and is governed by an independent contractor agreement. Services must be performed professionally, with adherence to any timelines, guidelines, and deliverables agreed upon in writing. Skills The Contractor must demonstrate proficiency in the following, depending on the Client’s requirements: Social media content creation and publishing experience required Strong written English and caption-writing skills required Canva or comparable design software experience required Facebook and Instagram familiarity required Basic short-form video editing strongly preferred Social media engagement and content planning experience strongly preferred Administrative writing, research, or application preparation experience preferred Grant application experience is a plus Experience supporting authors, coaches, or personal brands is a plus IDEAL CANDIDATE PROFILE Creative, organized, and attentive to brand presentation Strong written communicator with excellent attention to detail Comfortable creating polished social media content from existing materials Dependable with recurring schedules and administrative deadlines Able to organize information and prepare accurate application materials Proactive with content ideas while respecting client guidance Interested in author branding, personal development, or women's empowerment APPLICATION SOFTWARE KNOWLEDGEABLE / REQUIRED Facebook / Instagram Canva or Comparable Design Tools Basic Video Editing Software – Strongly Preferred Google Docs / Microsoft Word Google Sheets / Microsoft Excel Grant Application Portals – Training Will Be Provided Social Media Scheduling Tools Work Schedule Contracted Hours per Week: 10 Hours ( Hours may increase based on performance ) Scheduled Working Days: Monday through Friday (unless otherwise mutually agreed in writing) Daily Working Time: Flexible- TBD EST Note: The Company will make reasonable efforts to align the Assigned VA’s schedule with the Client’s preferred hours as set forth above. However, availability may vary based on time zones, capacity, and the contracted hours set in this SOW. Any changes must be mutually agreed to in writing through a revised SOW. Terms of Engagement Contractors will operate under a Master Services Agreement and a Statement of Work This is not an offer of employment; contractors are not employees of 20four7VA or any client All compensation is processed through 20four7VA according to the terms of the engagement Role Summary & Requirements REQUIRED SERVICE: Marketing VA REQUESTED EXPERIENCE TIER LEVEL: Entry, Junior Level Contracted Hours per Week: 10 hours/week ( Hours may increase based on performance ) Daily Working Time: Flexible- TBD EST Scheduled Working Days: Monday-Friday REPORTING TO/POC: To Be Determined Number of VAs: 1 GENDER PREFERENCE: None LANGUAGES SPOKEN/PREFERENCE: English ACCENT PREFERENCE: Level A-C (Excellent Written English Required) REGION PREFERENCES: Any What we offer Competitive rates Weekly payments Various open roles are available Free training and upskilling Constant support and guidance A vibrant community always ready to support you And more!
Location: Manila Workplace: remote ELEKS Customer Support Office is looking for a Field Applications Engineer in Philippines. ABOUT CLIENT Our client is a US-based technology company developing innovative software solutions for industrial automation and manufacturing environments. Its platform provides Git-based source control, real-time visibility into industrial operations, and advanced backup and recovery capabilities for automation systems. The company helps industrial organizations modernize their engineering workflows, improve operational reliability, and securely manage automation assets across complex OT environments. REQUIREMENTS 3+ years in Field Applications Engineering, Controls Engineering, Technical Support, or a similar customer-facing role Hands-on experience deploying and installing software on premises at industrial customer sites Strong experience with OT networking and network deployment, including connectivity, segmentation, and secure access; understanding of the Purdue model Practical experience with PLCs, HMIs, and industrial automation systems, including troubleshooting vendor software such as Rockwell Studio 5000 or Siemens TIA Portal Strong troubleshooting skills across controls, software, hardware, and networks; familiarity with industrial communication protocols Experience with Python, SQL, or another programming or scripting language Clear communication with technical and non-technical stakeholders; ability to work across Controls, IT, Cybersecurity, and Engineering teams Excellent written and spoken English RESPONSIBILITIES Lead on-premises deployments and installations of industrial automation software at customer sites Configure and troubleshoot OT network connectivity, infrastructure, and integration with existing industrial systems Ensure deployments align with the Purdue security model and OT network security best practices Troubleshoot PLC vendor software, industrial communication issues, and integration challenges Serve as the primary technical point of contact for deployed customers, providing troubleshooting and ongoing technical support Diagnose and resolve software, hardware, networking, and backup-related issues Collaborate with Product and Engineering teams to address complex technical issues and customer-specific integration requirements Conduct customer training sessions, technical workshops, and on-site enablement activities Support technical discovery, product demonstrations, and pilot deployments for prospective customers Provide recommendations on secure OT network access, system reliability, and backup and recovery practices Maintain technical documentation, troubleshooting guides, and deployment procedures Work closely with Customer Success, Support, Sales, and Engineering teams to ensure successful deployments and customer satisfaction
Location: United States Workplace: remote ELEKS Customer Support Office is looking for a Field Applications Engineer in the USA. ABOUT CLIENT Our client is a US-based technology company developing innovative software solutions for industrial automation and manufacturing environments. Its platform provides Git-based source control, real-time visibility into industrial operations, and advanced backup and recovery capabilities for automation systems. The company helps industrial organizations modernize their engineering workflows, improve operational reliability, and securely manage automation assets across complex OT environments. REQUIREMENTS 3+ years in Field Applications Engineering, Controls Engineering, Technical Support, or a similar customer-facing role Hands-on experience deploying and installing software on premises at industrial customer sites Strong experience with OT networking and network deployment, including connectivity, segmentation, and secure access; understanding of the Purdue model Practical experience with PLCs, HMIs, and industrial automation systems, including troubleshooting vendor software such as Rockwell Studio 5000 or Siemens TIA Portal Strong troubleshooting skills across controls, software, hardware, and networks; familiarity with industrial communication protocols Experience with Python, SQL, or another programming or scripting language Clear communication with technical and non-technical stakeholders; ability to work across Controls, IT, Cybersecurity, and Engineering teams Excellent written and spoken English RESPONSIBILITIES Lead on-premises deployments and installations of industrial automation software at customer sites Configure and troubleshoot OT network connectivity, infrastructure, and integration with existing industrial systems Ensure deployments align with the Purdue security model and OT network security best practices Troubleshoot PLC vendor software, industrial communication issues, and integration challenges Serve as the primary technical point of contact for deployed customers, providing troubleshooting and ongoing technical support Diagnose and resolve software, hardware, networking, and backup-related issues Collaborate with Product and Engineering teams to address complex technical issues and customer-specific integration requirements Conduct customer training sessions, technical workshops, and on-site enablement activities Support technical discovery, product demonstrations, and pilot deployments for prospective customers Provide recommendations on secure OT network access, system reliability, and backup and recovery practices Maintain technical documentation, troubleshooting guides, and deployment procedures Work closely with Customer Success, Support, Sales, and Engineering teams to ensure successful deployments and customer satisfaction
🕹 Список обязанностей: — Поддерживать и оптимизировать базы данных Oracle, в которых реализована критически важная бизнес-логика: PL/SQL-пакеты, хранимые процедуры и триггеры. — Заниматься тюнингом производительности, анализировать планы выполнения SQL-запросов (execution plans) и выявлять причины медленного выполнения бизнес-операций.
Location: United States, Remote Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Do you want to help bring PlayStation technology to a worldwide audience? Are you passionate about securing infrastructure that constantly pushes the boundary of the gaming industry? Are you ready to work with innovative technology, forward-thinking engineers, and a passionate security team? If so, join us! The role is a senior-level application security position combining strong technical expertise with leadership, initiative, and collaboration. You will provide strategic mentorship and hands-on support in designing, implementing, and testing secure solutions that strengthen PlayStation products and services. As a technical leader within Product Security, you’ll guide practices and influence multiple teams to embed security throughout the software development lifecycle. Key Responsibilities Lead security initiatives across the SDLC and improve development practices through scalable automation. Conduct and guide threat modeling and security requirements early in design phases. Partner with developers, architects, and product managers to align business goals with security needs. Lead security architecture and code reviews for distributed systems. Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams. Advance the Product Security strategy through multi-functional initiatives and cultural influence. Balance business and security risks through technically grounded, pragmatic recommendations. Translate lessons learned into reusable organizational assets that enhance overall security posture. Mentor engineers and practitioners, promoting secure-by-default thinking and shared accountability. Demonstrate proactive leadership, coordinating teams to deliver measurable security and business impact. Qualifications 7+ years in information security and 3+ years in software development. Bachelor’s degree or equivalent in Computer Science, Information Security, or related field. Effective communication and leadership abilities; capable of influencing technical and non-technical collaborators including management. Dedicated and proactive, finding opportunities and leading initiatives independently. Deep understanding of enterprise and cloud-native architectures and their secure design. Expertise in network and web protocols (TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect) and common attack vectors. Proven expertise in guiding security development and code evaluations and providing actionable, risk-based recommendations. Skilled in multiple programming languages (e.g., Java, C/C++, JavaScript, Python) and mitigating vulnerabilities such as OWASP Top 10. Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines. Familiar with Agile, DevOps, and modern delivery practices. Hands-on experience with cloud technologies (AWS, Azure, GCP, Kubernetes, service mesh, CDN) including secure configuration and identity management. Desired Experience Strong analytical and problem-solving skills with an attacker perspective — able to anticipate and simulate real-world attacks. Experience in penetration testing, automated testing, or testing frameworks (JUnit, pytest, REST Assured, Playwright). Security certifications preferred (GIAC, OSCP, CEH, CISSP, CCSP, or equivalent). At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. This is a flexible role that can be remote, with varying pay ranges based on geographic location. For example, if you are based out of Seattle, the estimated base pay range for this role is listed below. $177,300 — $265,900 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice (where applicable) for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.
Задачи: — Поддерживать и оптимизировать базы данных Oracle, включая PL/SQL-пакеты, хранимые процедуры и триггеры. — Заниматься тюнингом производительности, анализировать планы выполнения SQL-запросов и выявлять причины медленного выполнения бизнес-операций. — Обеспечивать высокую доступность и отказоустойчивость баз данных с использованием Oracle RAC, Data Guard и кластерных решений. — Взаимодействовать с внутренними командами и техническими специалистами клиентов при диагностике проблем, обновлении баз данных и настройке отказоустойчивых конфигураций. — Участвовать в миграциях баз данных, нагрузочном тестировании и оценке влияния новых функций на производительность системы. — Участвовать в проектировании архитектуры решений, подготовке планов внедрения и технической документации. — Диагностировать и устранять сложные инциденты в продуктивных и предпродуктивных средах. — Участвовать в развертывании и настройке новых окружений для клиентов по всему миру. — На позиции нет дежурств по графику (on-call rotation). Требования: — Опыт работы в IT от 5 лет, из них не менее 3 лет с Oracle Database. — Глубокие практические знания администрирования Oracle, тюнинга производительности и оптимизации планов выполнения SQL-запросов. — Понимание Oracle PL/SQL и его роли в реализации бизнес-логики приложений. — Практический опыт работы с Oracle RAC, Data Guard, процедурами резервного копирования и восстановления данных (backup/recovery). — Опыт поддержки крупных OLTP-систем и высокодоступных архитектур. — Уверенные навыки администрирования Linux/Unix и диагностики проблем. — Опыт непосредственного взаимодействия с внешними клиентами и решения сложных технических задач. — Английский язык на уровне, достаточном для профессионального общения. Условия: — Конкурентная заработная плата и ежегодный бонус по результатам работы. — Гибридный формат работы. — Современный офис в Новом Белграде. — Частная медицинская страховка (ДМС). — Профессиональное обучение и сертификацию за счет компании. — Курсы иностранных языков. — Обеды в офисе. — Корпоративные мероприятия и тимбилдинги. Команда и проекты: — Взаимодействие с командами Implementation, Technical Support и Development, а также с техническими специалистами крупных банков, финтех-компаний, телеком-операторов и ритейлеров по всему миру.
Location: Milan Your opportunity Since 2004, we've had one clear goal: to make payments and money management effortless for every business in Europe. Today, more than 250,000 companies use Mollie to get paid, manage money and grow, with products designed to be simple, scalable, and dependable. With 950+ Mollies across 14+ locations, we care deeply about autonomy and craft. So we work in small teams, with real ownership, and we trust you to make the right decisions. We're building for the long term, so we provide the tools you need, processes you can rely on, and a balanced work environment to help you do work you're proud of. Sound like your kind of place? Let's build together. As a Senior Engineer, you'll be at the forefront of developing financial products that will shape the future of how businesses manage their finances. Along with expanding into new markets and handling an increasing volume of transactions, Mollie has recently introduced exciting new products to broaden our offering. You’ll have the opportunity to bring your ideas to life and contribute to these impactful projects. Mollie Capital https://www.youtube.com/watch?v=xDE7DuonwiY offers easy access to flexible financing, providing funding to support growth and cash flow management. In-person payments https://www.mollie.com/gb/products/pos-payments, allows merchants to accept payments at their physical stores through our terminal and mobile app. These innovations are just the beginning, enabling Mollie to offer a seamless, all-in-one payment solution and money management platform. Our Milan Hub: In 2023, we successfully launched a new hub in one of the most vibrant cities in Europe: Milan! Since its inception, the Milan hub has been consolidated and continues to grow at a fast pace, contributing significantly to Mollie’s mission with multiple passionate agile engineering teams that will innovate, build, and enhance our portfolio of next-generation payment products. You'll work in a cross-functional team (Data, Machine Learning, Platform and Product) to accelerate our product delivery. What You will Be Doing: - Building Large-Scale Systems: Help us design and engineer systems that can scale to handle high volumes of transactions. - API and Service Development: Design, build, and maintain APIs, services, and systems across Mollie’s engineering teams. - Tech Leadership: Lead technical initiatives from architecture design to implementation, ensuring engineering excellence. - Problem-Solving: Utilize your creative problem-solving skills and analytical abilities to resolve complex issues and contribute to our mission of making financial processes effortless. - Documentation and Knowledge Sharing: Create comprehensive documentation to facilitate domain knowledge sharing and set up optimised processes. - Engineering Excellence: Own the code quality and engineering excellence and best practices of our systems. What You’ll Bring: - Always Be Shipping Mindset: It’s about consistently delivering value to customers, where speed and quality go hand in hand. - 6+ years of experience in developing large-scale applications, preferably with Java or PHP. Experience with Go, C#, or Python is also valued but you are willing to work with Java. - Proven experience in leading architectural decisions and technical initiatives, delivering end-to-end solutions, and optimising processes. - Excellent communication skills, with experience working effectively with various stakeholders. Can explain complex problems and solutions in simple terms. - Creative problem-solving skills and the ability to shape ideas with a product-first approach, as well as analyse and resolve complex issues. - Ability to hold yourself accountable for your tasks, and show a willingness to proactively identify and improve things, whether technical or business related. *Kindly note that relocation support is not offered for candidates outside of Europe for this role. Please apply to this job by sending over your CV in English.
В задачах — поиск уязвимостей в коде, API, мобильных и веб-приложениях, архитектурные ревью и аудиты. Нужно будет разбирать причины уязвимостей с разработчиками и автоматизировать процессы безопасности.
Location: United States (Remote) Workplace: Remote ROLE SUMMARY We’re looking for a Software Engineer II to join the Cloud Applications team. This team builds and operates critical parts of the Temporal Cloud customer experience, including Namespaces https://docs.temporal.io/cloud/namespaces, Audit Logs https://docs.temporal.io/cloud/audit-logs, and Export https://docs.temporal.io/cloud/export. Namespaces are the core unit of isolation within Temporal Cloud, providing security boundaries, workflow management, unique identifiers, and dedicated gRPC endpoints. Audit Logs and Export give customers reliable access to the operational and compliance data they depend on. We're looking for an engineer who is excited to learn these systems and contribute to their scalability, reliability, and developer experience. This is a hands-on role where you'll collaborate with experienced engineers, product managers and partner teams to design, build, and operate backend services and data pipelines while growing your distributed-systems expertise. WHAT YOU'LL DO - Design, implement, test, and ship well-scoped features and improvements for Temporal Cloud with support from teammates. - Build and improve services that support namespace provisioning, configuration, scalability, and reliability. - Develop data pipelines that process high-volume usage and operational data across multiple tenants. - Make thoughtful engineering tradeoffs with guidance, balancing data freshness, query cost, tenant isolation, reliability, and operational complexity. - Improve service operability through tests, instrumentation, dashboards, alerts, runbooks, and documentation. - Participate in code reviews, design discussions, incident response, and production debugging. - Collaborate across engineering, product, and customer-facing teams to understand requirements and deliver scoped projects safely. - Improve developer and customer experience through automation, better tooling, and incremental product improvements. WHAT YOU'LL BRING - Experience building and operating production backend systems in a cloud environment. - Proficiency in Go or another applicable backend or systems language, with the ability to ramp up in an existing codebase. - Strong computer science fundamentals, including data structures, concurrency basics, testing, and debugging. - Working knowledge of distributed-systems concepts such as reliability, fault tolerance, consistency, scaling, and failure handling. - Experience with databases, data pipelines, messaging systems, or object storage. - The ability to take a scoped problem, break it into smaller tasks, implement a solution end to end, and incorporate feedback. - An operational mindset, including familiarity with logging, metrics, tracing, deployment, and production troubleshooting. - Comfort collaborating across teams and communicating progress, risks, and technical tradeoffs clearly. - A commitment to correctness, maintainability, and leaving systems better than you found them. NICE TO HAVE - 3+ years of work experience - Experience with Go. - Experience with PostgreSQL, Redshift, Kinesis, Firehose - Experience with S3, Google Cloud Storage, Azure Blob Storage, or other object-storage systems. - Familiarity with Kubernetes and cloud infrastructure. - Experience supporting on-call rotations, investigating incidents, or improving production observability. - Familiarity with Temporal concepts—or a strong interest in learning the platform. TECHNOLOGY STACK - Primary language: Go - Data storage: PostgreSQL, Redshift, S3,Google Cloud Storage, Azure Blob Storage, ClickHouse - Data processing: Kinesis, Firehose - Infrastructure: Kubernetes - Core framework: Temporal You do not need experience with every technology in our stack. We value strong engineering fundamentals and the ability to learn unfamiliar systems. Temporal Technologies is an Equal Opportunity Employer. Temporal Technologies does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need. We embrace and celebrate differences and diversity. Temporal is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. If you need to request a reasonable accommodation, please let your Recruiter know so we can assist.
Location: Limassol, Cyprus Workplace: hybrid We are looking for an Application Security Engineer in the AppSec team. As a Senior Application Security Engineer at inDrive, you will own whole areas of our AppSec program, from security requirements and design reviews to controls that work in production. You will work with product, platform and infrastructure teams on new architecture, AI systems and the security of our apps and services. The role fits a hands-on engineer who reviews code and architecture, leads work across several teams and makes security decisions based on data. Key Responsibilities Own one or more areas of the AppSec program end to end, including the plan, the risks and the metrics. Run security design reviews and threat modeling of new features, services and AI systems, and defend security requirements at the architecture committee. Assess the security of web, mobile and API applications and find variants of confirmed vulnerabilities across other services. Coordinate external security assessments and bug bounty findings, from triage and prioritisation with teams to fix verification. Design secure authentication and authorization between users, services and internal tools together with platform teams. Choose, pilot and tune security tools, and keep only those that pay off in real findings. Turn incidents and assessment results into lasting controls, policies and secure defaults for developers. Consult development teams on complex security issues and take shifts in AppSec duty for Critical and High incidents. Skills, Knowledge and Expertise Higher education in IT, preferably in information security. Knowledge of mobile application security on Android and iOS, client-server trust, app integrity and protection against bots and account takeover. Deep knowledge of web and API security, including authentication and authorization flaws, SSRF, injections and business logic issues, and the ability to find variants of a vulnerability class across many services. Strong understanding of identity and access, OAuth 2.0, OIDC, JWT, signing key rotation, mTLS, service-to-service authentication and SSO. Understanding of security risks of AI systems and LLM agents, such as prompt injection, excessive tool permissions and agent access to sensitive data, and practical use of AI in your own security work. Practical understanding of cloud-native infrastructure, Kubernetes, containers, API gateways and AWS. Experience in threat modeling and security design review of new features and architecture. Understanding of vulnerability management and risk, including severity, SLA, compensating controls and risk acceptance. Ability to read and review code in at least one language, preferably Golang. Track record of leading projects with two or more teams from a requirement to a verified fix, and clear written English. Experience with secrets and key management, rotation and response to credential leaks. Nice to have Knowledge of software supply chain security, dependencies, CI/CD pipelines and source control platform hardening. Experience tuning SAST, DAST and SCA tools for precision and judging a tool by noise and cost per real finding. Why join us Help us challenge injustice by creating fair choices for millions of people across 47 countries. Develop your professional skills with access to mentoring, career consulting, and learning programs. Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program. Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects. Work alongside people who take initiative, speak openly, and challenge themselves to grow. Improve your language skills through co-financed courses and internal speaking clubs. Annual salary from 70 700 EUR gross. Final benefits may vary depending on the location.
Проводить архитектурные ревью и моделирование угроз как для текущих, так и для новых сервисов и функциональностей. Проводить анализ защищенности приложений, API и бизнес-логики.
Location: Remote - India Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . Job Summary At Bugcrowd, we handle application security assessment at an epic scale. As an Application Security Engineer (ASE) you will curate and manage the incoming security vulnerability submissions to some of the world’s biggest companies’ bug bounty programs. Here are just a few of the reasons why we are the best: A tenure at Bugcrowd often means you have worked on not only one company’s security program but potentially on hundreds. As an ASE at Bugcrowd you will be exposed to the Internet’s best security researchers and their cutting-edge security testing methodologies. Our ASEs quickly become technically fluent in obscure/complex XSS, SQLi, XXE, IDOR, SSTI, SSRF, and many other vulnerability types. There is no other organization that offers the learning opportunity that Bugcrowd does. You will be exposed to things outside of your comfort zone. We routinely run security programs for cars, IoT devices, embedded systems, mobile applications, and more! We have an awesome team and tons of perks. We’ve even been selected as one of “The 10 Coolest Security Startups Of 2016” by crn.com. Essential Duties & Responsibilities An ASE is responsible for the ongoing triage and validation services of Bugcrowd managed programs. Under the direction of the Director of Technical Operations, you will take incoming submission data and curate it for validity, accuracy, and severity as well as communicate directly with Bugcrowd’s clients or researchers when additional information is required. ASEs also handle Incident Response – escalating and communicating about the highest severity bugs to clients. ASEs need to have strong knowledge of OWASP Top Ten type vulnerabilities. They also usually require a strong skill set in one scripting/development language, often to assist with the design or development of tooling for improving the triage/validation process. The ASE position is perfect for security professionals looking to take their skills to the next level. Education, Experience, Skills, & Abilities Bachelor’s degree or previous security consulting experience Published and demonstrated passion for security assessment research High proficiency with Burp Suite (or any other interception proxy) and a working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux) Ability to execute on individual projects but still contribute to the team Ability to complete tasks on time Strong organization, influencing, and communication skills Working Conditions The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and/or standing - Must be able to remain in a stationary position 50% of the time Carrying and /or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - remote, work-from-home 100% of the time. ADA Statement Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ada@bugcrowd.com. Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/
Location: Colorado Springs, Colorado, United States About the Role iCapital is seeking an Application Architect to lead the architecture, design, and modernization of the illustration related applications. This role serves as a key member of the Core Architecture Team, partnering closely with Product, Engineering, and Implementation teams across the United States and Jaipur to drive cloud modernization, support client delivery, establish architectural standards, and provide technical leadership across strategic platform initiatives. The architect will play a critical role in advancing the transition of legacy systems to scalable Azure-based microservices while ensuring the reliability, performance, and long-term supportability of the various applications ecosystems. Responsibilities Lead architecture strategy, design reviews, and implementation guidance for several applications in the illustration area of the company. Define and govern solution architecture standards, technical roadmaps, and engineering best practices across the Illustration platform. Partner with product management, engineering leadership, and implementation teams to translate business objectives into scalable technical solutions. Drive modernization initiatives focused on Azure cloud adoption, microservices architecture, API design, and platform scalability. Lead migration planning and technical design for customers transitioning from legacy and on-premises deployments to our latest version of our application and cloud architecture. Provide architectural leadership and technical oversight to multiple scrum teams, including design reviews, story refinement, and code quality guidance. Establish and maintain integration architecture between illustration applications and other applications to improve maintainability, reliability, and operational efficiency. Participate in production support rotations and provide timely resolution of production issues impacting customers. Create architecture artifacts, technical standards, reference implementations, and proof-of-concept solutions to support strategic initiatives. Collaborate with distributed engineering teams across North America and India to ensure architectural consistency and delivery alignment. Mentor engineers in .NET, Azure, DevOps, cloud-native design patterns, and software architecture principles. Identify opportunities to improve platform observability, performance, security, reliability, and development efficiency. Qualifications 7+ years of experience in software engineering, application architecture, or solution architecture roles Bachelor's degree in computer science, software engineering, or a related technical discipline Deep expertise in designing and delivering enterprise-scale applications using Microsoft.NET technologies Strong experience architecting cloud-native solutions within Microsoft Azure environments Demonstrated experience building and modernizing distributed systems using microservices, APIs, and event-driven architectures Strong understanding of software design patterns, architecture frameworks, and engineering best practices Experience guiding multiple engineering teams through complex technical initiatives and architectural decisions Proven ability to develop technical roadmaps and lead large-scale modernization efforts Experience participating in production support and incident management processes Expertise in DevOps, CI/CD pipelines, automated testing, and cloud delivery practices Strong communication and stakeholder management skills with the ability to influence technical and business leaders Experience working in Agile software development environments and supporting Scrum teams Previous experience with illustration, annuity, wealth management, insurance, or financial services platforms Experience supporting customer-facing enterprise SaaS products Azure certifications or demonstrated expertise in Azure architecture and cloud engineering Experience leading geographically distributed engineering organizations Benefits The base salary range for this role is $100,000 to $135,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO). We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday. For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/ iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
Location: Salt Lake City, Utah, United States About the Role iCapital is seeking a .NET Application/Solutions Architect to lead the architecture, design, and modernization of the illustration related applications. This role serves as a key member of the Core Architecture Team, partnering closely with Product, Engineering, and Implementation teams across the United States and Jaipur to drive cloud modernization, support client delivery, establish architectural standards, and provide technical leadership across strategic platform initiatives. The architect will play a critical role in advancing the transition of legacy systems to scalable Azure-based microservices while ensuring the reliability, performance, and long-term supportability of the various applications ecosystems. Responsibilities Lead architecture strategy, design reviews, and implementation guidance for several applications in the illustration area of the company. Define and govern solution architecture standards, technical roadmaps, and engineering best practices across the Illustration platform. Partner with product management, engineering leadership, and implementation teams to translate business objectives into scalable technical solutions. Champion AI-first development across the engineering org using Copilot, Claude, Cursor and other tools Drive and build agentic customer facing applications providing real-time recommendations, decision support, and interactive help, using Azure Foundry, Open AI and other agentic development platforms. You are familiar with orchestration, RAG, retrieval grounding, MCP server design, etc. Drive modernization initiatives focused on Azure cloud adoption, microservices architecture, API design, and platform scalability. Lead migration planning and technical design for customers transitioning from legacy and on-premises deployments to our latest version of our application and cloud architecture. Provide architectural leadership and technical oversight to multiple scrum teams, including design reviews, story refinement, and code quality guidance. Establish and maintain integration architecture between illustration applications and other applications to improve maintainability, reliability, and operational efficiency. Participate in production support rotations and provide timely resolution of production issues impacting customers. Create architecture artifacts, technical standards, reference implementations, and proof-of-concept solutions to support strategic initiatives. Qualifications 7+ years of experience in software engineering, application architecture, or solution architecture roles Bachelor's degree in computer science, software engineering, or a related technical discipline Deep expertise in designing and delivering enterprise-scale applications using Microsoft.NET technologies Strong experience architecting cloud-native solutions within Microsoft Azure environments Demonstrated experience building and modernizing distributed systems using microservices, APIs, and event-driven architectures Strong understanding of software design patterns, architecture frameworks, and engineering best practices Experience guiding multiple engineering teams through complex technical initiatives and architectural decisions Proven ability to develop technical roadmaps and lead large-scale modernization efforts Experience participating in production support and incident management processes Expertise in DevOps, CI/CD pipelines, automated testing, and cloud delivery practices Strong communication and stakeholder management skills with the ability to influence technical and business leaders Experience working in Agile software development environments and supporting Scrum teams Previous experience with illustration, annuity, wealth management, insurance, or financial services platforms Experience supporting customer-facing enterprise SaaS products Azure certifications or demonstrated expertise in Azure architecture and cloud engineering Experience leading geographically distributed engineering organizations Benefits The base salary range for this role is $110,000 to $135,000 USD. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO). We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday. For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/ iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
Sardine is looking for a Senior Application Security Engineer to automate vulnerability management, eliminate security bug classes, and secure applications and APIs.
Команда безопасности ИИ ищет специалиста для whitebox-анализа LLM-приложений, AI-агентов, RAG и векторных БД. Нужно выявлять prompt injection и другие AI-угрозы, проверять защитные фильтры и контроль вызовов инструментов.
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Настроить подбор