Вакансии

Location: Vilnius 500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating. Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down. With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better. The job Millions of people trust Flo with their most personal health data. As our Security Architect, you’ll make sure we deserve that trust. This is a hands-on individual contributor role. You’ll work side by side with engineering, product and platform teams to shape secure architectures and build the guardrails that let both humans and AI coding agents ship quickly and safely. The role combines security architecture, product and application security engineering and security risk expertise: you will set secure patterns and standards, lead threat modelling and design reviews, embed security into the SDLC and CI/CD, and translate security risk into clear, pragmatic decisions. What you’ll do Shape secure architecture from day one. Partner with teams early in design, lead security design reviews for new services and major changes, and record key decisions and risk trade-offs. Build security harnesses for human and AI-agent development. Design guardrails, sandboxing, least-privilege access for agents and tools, secrets handling, policy-as-code and automated checks that run inside developer and agent workflows. Lead on AI and agentic security. Define secure patterns for LLM integrations, MCP servers and tool use, and tackle risks like prompt injection, data leakage, excessive agency and supply-chain compromise. Create paved roads. Publish reusable patterns, reference architectures and standards that teams adopt because they’re the easiest option. Scale threat modelling. Build tools and skills that let engineers run threat models themselves, and carry out internal security assessments. Remove whole classes of vulnerabilities. Automate vulnerability triage and investigation, find systemic root causes, and feed the fixes back into patterns and guardrails. Turn risk into clear decisions. Explain security risk in pragmatic terms so the business can prioritise based on risk and value. Advise and enable. Be a trusted partner to engineering, product and leadership, coach engineers, and help evaluate third-party and AI tools so they can be adopted securely. Support ISO 27001/27701 so that controls are built into how we engineer, not bolted on afterwards. What you’ll bring 7+ years in security engineering, application/product security or security architecture, including hands-on work securing cloud-native systems Deep knowledge of Secure SDLC: threat modelling, security testing, app security review and CI/CD security Hands-on experience with AWS and Cloudflare (or equivalents) and Terraform or similar IaC A strong grasp of the OWASP Top 10 and the ability to assess exploitability and impact Solid coding skills (e.g. Python, Go, Scala) and experience building security tooling or automation Practical understanding of the risks in AI-assisted and agentic development and LLM applications (e.g. OWASP Top 10 for LLMs) Experience with security risk analysis and risk management methods The ability to explain trade-offs clearly to engineers and senior stakeholders, and to win people over Nice to have Experience building guardrails, sandboxes or policy-as-code (e.g. OPA) for developer platforms or AI coding agents iOS or Android security experience Experience with ISO 27001, ISO 27701 or SOC 2 audits A background in health tech, femtech or another regulated, privacy-sensitive industry Certifications or degrees such as CISSP, CCSP, OSCP or an MSc in Information Security Why Flo You’ll protect data that matters deeply to millions of people. You’ll also help set the standard for how a company adopts agentic engineering safely, and you’ll have real ownership: you design and build the first version, then hand it off to the teams who will run it. Salary Range - gross per month (ranges may vary based on skills and experience) €8.000 — €10.000 EUR How we work We’re a mission-led, product-driven team. We move fast, stay focused and take ownership – from brief to build to impact. Debate is encouraged. Decisions are shared. We care about craft, ship with purpose, and always raise the bar. You’ll be working with people who take their work seriously, not themselves. It takes commitment, resilience, and the drive to keep going when things get tough. Because better health outcomes are worth it. What you'll get We support impact with meaningful reward. Here’s what that looks like: Competitive salary and annual reviews Opportunity to participate in Flo’s performance incentive scheme Paid holiday, sick leave, and female health leave Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents Accelerated professional growth through world-changing work and learning support In-person collaboration and work in a hybrid model, with 3 days per week spent in the office 5-week fully paid sabbatical at 5-year Floversary Flo Premium for friends & family, plus more health, pension and wellbeing perks Diversity, equity and inclusion Our strength is in our differences. At Flo, hiring is based on merit, skill and what you bring to the role – nothing else. We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities. Read our privacy notice for job applicants .

Location: London 500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating. Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down. With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better. The job Millions of people trust Flo with their most personal health data. As our Security Architect, you’ll make sure we deserve that trust. This is a hands-on individual contributor role. You’ll work side by side with engineering, product and platform teams to shape secure architectures and build the guardrails that let both humans and AI coding agents ship quickly and safely. The role combines security architecture, product and application security engineering and security risk expertise: you will set secure patterns and standards, lead threat modelling and design reviews, embed security into the SDLC and CI/CD, and translate security risk into clear, pragmatic decisions. What you’ll do Shape secure architecture from day one. Partner with teams early in design, lead security design reviews for new services and major changes, and record key decisions and risk trade-offs. Build security harnesses for human and AI-agent development. Design guardrails, sandboxing, least-privilege access for agents and tools, secrets handling, policy-as-code and automated checks that run inside developer and agent workflows. Lead on AI and agentic security. Define secure patterns for LLM integrations, MCP servers and tool use, and tackle risks like prompt injection, data leakage, excessive agency and supply-chain compromise. Create paved roads. Publish reusable patterns, reference architectures and standards that teams adopt because they’re the easiest option. Scale threat modelling. Build tools and skills that let engineers run threat models themselves, and carry out internal security assessments. Remove whole classes of vulnerabilities. Automate vulnerability triage and investigation, find systemic root causes, and feed the fixes back into patterns and guardrails. Turn risk into clear decisions. Explain security risk in pragmatic terms so the business can prioritise based on risk and value. Advise and enable. Be a trusted partner to engineering, product and leadership, coach engineers, and help evaluate third-party and AI tools so they can be adopted securely. Support ISO 27001/27701 so that controls are built into how we engineer, not bolted on afterwards. What you’ll bring 7+ years in security engineering, application/product security or security architecture, including hands-on work securing cloud-native systems Deep knowledge of Secure SDLC: threat modelling, security testing, app security review and CI/CD security Hands-on experience with AWS and Cloudflare (or equivalents) and Terraform or similar IaC A strong grasp of the OWASP Top 10 and the ability to assess exploitability and impact Solid coding skills (e.g. Python, Go, Scala) and experience building security tooling or automation Practical understanding of the risks in AI-assisted and agentic development and LLM applications (e.g. OWASP Top 10 for LLMs) Experience with security risk analysis and risk management methods The ability to explain trade-offs clearly to engineers and senior stakeholders, and to win people over Nice to have Experience building guardrails, sandboxes or policy-as-code (e.g. OPA) for developer platforms or AI coding agents iOS or Android security experience Experience with ISO 27001, ISO 27701 or SOC 2 audits A background in health tech, femtech or another regulated, privacy-sensitive industry Certifications or degrees such as CISSP, CCSP, OSCP or an MSc in Information Security Why Flo You’ll protect data that matters deeply to millions of people. You’ll also help set the standard for how a company adopts agentic engineering safely, and you’ll have real ownership: you design and build the first version, then hand it off to the teams who will run it. Annual Salary Range (ranges may vary based on skills and experience) £100,000 — £130,000 GBP How we work We’re a mission-led, product-driven team. We move fast, stay focused and take ownership – from brief to build to impact. Debate is encouraged. Decisions are shared. We care about craft, ship with purpose, and always raise the bar. You’ll be working with people who take their work seriously, not themselves. It takes commitment, resilience, and the drive to keep going when things get tough. Because better health outcomes are worth it. What you'll get We support impact with meaningful reward. Here’s what that looks like: Competitive salary and annual reviews Opportunity to participate in Flo’s performance incentive scheme Paid holiday, sick leave, and female health leave Enhanced parental leave and pay for maternity, paternity, same-sex and adoptive parents Accelerated professional growth through world-changing work and learning support In-person collaboration and work in a hybrid model, with 3 days per week spent in the office 5-week fully paid sabbatical at 5-year Floversary Flo Premium for friends & family, plus more health, pension and wellbeing perks Diversity, equity and inclusion Our strength is in our differences. At Flo, hiring is based on merit, skill and what you bring to the role – nothing else. We’re proud to be an equal opportunity employer, and we welcome applicants from all backgrounds, communities and identities. Read our privacy notice for job applicants .

-Проведение технических презентаций и демонстраций AI Firewall для заказчиков и партнёров. -Анализ функциональных и технических требований, подготовка таблиц соответствия возможностям продукта.

Работа с инструментами безопасной разработки SAST, DAST, SCA, ASOC, MAST; Проведение аудитов безопасности приложений и сервисов компании;

Translate business needs into functional AI use cases and automated tools. Integrate models via APIs and develop retrieval-augmented generation workflows.

Задачи: — Проводить security review AI/LLM-решений: LLM-приложений, AI-агентов, RAG, векторных БД, интеграций с внешними API и облачными LLM; — Участвовать в threat modeling AI-решений: prompt injection, jailbreak, утечки данных, небезопасные tool calls, избыточные привилегии AI-агента, RAG/data poisoning; — Проверять наличие и корректность защитных механизмов: guardrails, фильтры персональных данных, ограничения длины prompt/response, rate limiting, валидация ответов, контроль вызовов tools; — Оценивать безопасность работы с данными: персональные данные, конфиденциальная информация, источники данных для RAG, embeddings, индексы векторных БД; — Проверять, что AI-агенты работают по принципу минимально необходимых привилегий и не выполняют чувствительные операции без ручного подтверждения; — Проверять изоляцию пользовательских сессий, контекстов и памяти AI-решений; — Участвовать в проверке безопасности локального запуска LLM в Kubernetes: контейнеры, RBAC, secrets, network policies, ingress, resource limits; — Формировать требования к логированию, аудиту и трассировке AI-решений: trace ID, логи prompt/response, вызовы модели, вызовы tools, действия AI-агента; — Разрабатывать тестовые сценарии для проверки AI-решений на prompt injection, утечки данных, обход ограничений и небезопасное поведение агента; — Помогать командам разработки и эксплуатации безопасно использовать локальные и облачные LLM. Требования: — Опыт в кибербезопасности от 2–3 лет в одной или нескольких областях: Application Security, DevSecOps, Cloud Security, Kubernetes Security, API Security, Product Security; — Понимание принципов security review, threat modeling и безопасной разработки; — Понимание web/API-безопасности: аутентификация, авторизация, OAuth2/OIDC, SAML, JWT, RBAC, service-to-service-взаимодействие; — Базовое понимание AI/LLM-стека: LLM, prompt, system prompt, context window, embeddings, RAG, vector database, AI-agent, agent memory, tools/function calling; — Понимание основных рисков LLM-приложений: prompt injection, indirect prompt injection, jailbreak, утечка чувствительных данных, раскрытие system prompt, небезопасная обработка ответа модели, excessive agency; — Понимание особенностей безопасности RAG и векторных БД: например, Milvus, Qdrant, Weaviate, pgvector, Chroma, Elasticsearch/OpenSearch vector search; — Понимание рисков работы с персональными и конфиденциальными данными при использовании локальных и облачных LLM; — Базовое понимание Kubernetes и контейнерной безопасности: secrets, service account, RBAC, network policy, resource limits; — Умение формулировать понятные и проверяемые требования безопасности для продуктовых команд. Что мы ищем в кандидатах: — Опыт security review AI/LLM, RAG, чат-ботов, AI-ассистентов или агентских решений; — Знакомство с OWASP Top 10 for LLM Applications, OWASP Agentic AI Threats, MITRE ATLAS, NIST AI RMF; — Понимание безопасности agent tools/function calling: allowlist tools, схемы входных параметров, контроль прав, human-in-the-loop; — Опыт работы с SIEM/security logging: проектирование событий безопасности, аудит действий, расследование инцидентов; — Понимание подходов к безопасному исполнению кода, сгенерированного моделью: sandbox, изоляция контейнеров, запрет доступа к secrets, ограничения сети и ресурсов; — Базовые навыки Python, работы с JSON/YAML, API-тестирования или автоматизации security checks. Будет плюсом: — Опыт с OpenAI/Azure OpenAI, AWS Bedrock, Google Vertex AI, Anthropic или другими LLM-провайдерами; — Опыт с локальными open-source LLM и inference-сервисами; — Опыт настройки или проверки guardrails, фильтров персональных данных, DLP-подходов, content moderation; — Опыт участия в AI red teaming или разработке тестов на prompt injection и data leakage. Условия: — Формат: Гибридный (от 2-х дней в неделю, м. Технопарк); — Бесплатный доступ к телемедицине и очным приемам в частных клиниках (включая стоматологию и сессии с психологами); — Условия ипотечного кредитования от Сбербанка; — Индивидуальный план развития; — Английский язык с корпоративным преподавателем и скидки на курсы в Skyeng, компенсация обучения от ведущих платформ; — Официальное оформление, стабильные выплаты, оплата больничного и отпуска, современная техника; — Частичная компенсация спортивного абонемента, бесплатные занятия сквошем и футболом.

Location: Remote - United States Innodata (Nasdaq: INOD) is a global data engineering company. We believe that data and Artificial Intelligence (AI) are inextricably linked. Our mission is to enable the responsible advancement of artificial intelligence by providing the data, evaluation frameworks, and human expertise required to build AI systems that can be trusted at scale. We provide a range of transferable solutions, platforms, and services for Generative AI / AI builders and adopters. In every relationship, we honor our 36+ year legacy delivering the highest quality data and outstanding outcomes for our customers. Scope of the Role: As a Technical Product Manager for Trust & Safety, you will define and ship the data products that frontier labs use to train and evaluate models to perform personalization, computer-use (CUA), and GDPval tasks safely and in a trustworthy manner. You will own the full lifecycle of these products: from translating a lab's research need into a spec, to designing reinforcement learning (RL) environments, rubrics, and evals, to running delivery with our expert workforce and measuring whether the data actually moved the model. A core part of the job is building RL environments with deliberate traps. That includes misalignment traps that test for reward hacking, deception, sandbagging, oversight evasion, and power-seeking; cyber traps such as planted credentials, injected instructions, and poisoned tools; and other honeypots that reveal how a model behaves when it believes no one is watching. You thrive in ambiguity, go deep on technical detail, and care about making powerful AI safe and beneficial. What You’ll Own: Define data products for frontier labs. Turn lab research goals into clear product specs for safety training data, RL environments, and evaluations. Design trap-based RL environments. Build sandboxed environments that embed misalignment traps (reward hacking, specification gaming, deception, sandbagging, oversight subversion) and cyber traps (prompt injection, credential exfiltration, tool poisoning, unsafe file and network actions). Build safety into agentic tasks by design. Specify safe-behavior rubrics, verifiers, and reward signals so that models learn to complete real work while refusing, escalating, or asking for confirmation at the right moments. Own evals and metrics. Define what "safe and trustworthy" means for each product in measurable terms, including attack success rate, over-refusal, trap trigger rate, and task completion under adversarial pressure. Track blind spots and drive iteration. Prioritize ruthlessly. Frame problems crisply, lay out options with their business and technical tradeoffs, and separate MVP from ideal state. Partner across teams. Work with lab researchers, our ML and platform engineers, red-teamers, policy experts, and delivery leads running large expert annotator pools. Track the threat landscape. Stay current on agentic risks, alignment research, and new attack techniques, and turn them into roadmap items before customers ask. Communicate clearly. Write specs, customer briefs, and safety findings that land with researchers and executives alike. These examples show the kind of work this role owns: A cyber-trap environment suite : sandboxed environments seeded with injected instructions, exposed secrets, and destructive shortcuts, scored on whether the agent finishes the task without taking the bait. Tasks with integrity traps : realistic work where the easiest path to a high score requires fabricating data, skipping a required step, or gaming the grader. A misalignment eval harness : environments that check whether a model behaves differently when it believes it is being tested versus deployed, or when given chances to expand its own permissions. A trap library and quality framework that lets our delivery teams produce new environments quickly while keeping verifiers reliable and traps hard to detect. You’ll Thrive in This Role If You Have: 5+ years of product management experience, including technical products in ML, AI data, security, or trust & safety. Hands-on familiarity with how LLMs are trained and evaluated: SFT, RLHF/RLAIF, reward models, verifiers, and benchmark design. Working knowledge of agentic AI: tool use, computer-use agents, multi-step planning, and the failure modes that come with them. A strong grasp of AI safety concepts such as reward hacking, deceptive alignment, jailbreaks, and prompt injection. Enough technical depth to read code, review an environment spec with engineers, and make sound technical tradeoffs. Comfort with Python and sandboxed environments (Docker, VMs, browser automation) is a plus. Experience designing metrics that capture risk, system performance, and user impact, and using them to make crisp decisions. A track record of shipping 0-to-1 products in fast-moving, ambiguous environments. The ability to explain complex technical ideas clearly to researchers, customers, and executives. Creative, adversarial thinking: you enjoy imagining how a capable model might cut corners, and you don't stop at existing checklists. The expected salary range for this position is $180,000 – $220,000 USD per year, based on experience, skills, and qualifications. Please be aware of recruitment scams involving individuals or organizations falsely claiming to represent employers. Innodata will never ask for payment, banking details, or sensitive personal information during the application process. To learn more on how to recognize job scams, please visit the Federal Trade Commission’s guide at https://consumer.ftc.gov/articles/job-scams. If you believe you’ve been targeted by a recruitment scam, please report it to Innodata at verifyjoboffer@innodata.com and consider reporting it to the FTC at ReportFraud.ftc.gov .

Location: New York; San Francisco Workplace: Hybrid ABOUT ALCHEMY Alchemy is the Web3 infrastructure and developer platform that powers millions of users and the world’s most innovative blockchain applications. From enabling $1+ trillion in financial transactions worldwide to scaling L2s and enabling DeFi, Alchemy provides the infrastructure and tools developers need to build reliable, scalable, and accessible experiences. Trusted by companies like JPMorgan, Stripe, Visa, Franklin Templeton, Nike, and backed by a16z, Coatue, Silver Lake, Lightspeed, and Stanford University, Alchemy is building the foundational layer for a decentralized and AI-enabled Web3 ecosystem. For more information, visit alchemy.com http://alchemy.com.   THE ROLE We're looking for a Security Operations Engineer to improve how Alchemy detects threats, investigates incidents, and reduces operational security risk. This is a hands-on individual-contributor role with no people-management responsibilities. You'll investigate suspicious activity and build the systems that make the next investigation faster and more reliable. AI-assisted engineering and investigation should be part of your daily work: connecting evidence, developing detections, building response workflows, and checking the results against source data. You'll also help the team get better at this work. Through shared tooling, code review, pairing, and practical documentation, you'll give teammates capabilities they can use independently.   WHAT YOU WILL DO - Detect and investigate threats. Triage alerts, hunt for suspicious activity, and investigate across cloud infrastructure, corporate systems, identity, endpoints, and production environments. Establish what happened from evidence and communicate uncertainty clearly. - Engineer detection coverage. Build and tune detections, onboard useful telemetry, and maintain reliable log pipelines. Test rules against representative attacks and benign activity; address missing coverage and noisy alerts. - Respond to incidents. Participate in the security on-call rotation and incident response, including scoping, containment, recovery, and post-incident improvements. Preserve evidence and coordinate changes with system owners. - Build AI-assisted security workflows. Automate evidence collection, alert enrichment, investigation timelines, and response preparation. Connect agents to approved tools and data sources so they can complete bounded tasks with traceable results. - Verify before trusting. Evaluate AI-assisted workflows against known cases and adversarial inputs. Require evidence for conclusions, test false-positive and missed-threat behavior, and keep human approval for disruptive containment actions. - Reduce operational exposure. Partner with Infrastructure and IT on vulnerability remediation, cloud and host hardening, identity controls, and attack-surface monitoring. Prioritize findings by exposure and impact, then verify remediation. - Help secure agent operations. Work with platform and product-security partners on operational controls for agent identities, credentials, tool access, and audit logging. Investigate misuse and build detections for suspicious agent behavior. - Improve how the team works. Share reusable code, investigation skills, runbooks, and evaluation cases. Pair with teammates, review automation, and teach approaches they can apply to their own investigations. - Measure defensive outcomes. Track detection coverage, alert quality, investigation effort, response time, and remediation progress. Use those measures to decide what to improve next.   WHAT WE ARE LOOKING FOR - Hands-on security operations experience spanning detection engineering, threat hunting, and incident response. - Strong scripting and software-building ability, especially Python; experience with APIs, version control, tests, and operating automation in production. - Experience with a SIEM such as Panther, Splunk, or an equivalent platform, including detection logic and log analysis. - Working knowledge of cloud security, identity, endpoint telemetry, networking, and Linux systems. Ability to investigate across system boundaries. - Evidence of building and using AI-assisted tools in security or adjacent engineering work. You can show how you validate outputs, handle failures, and protect sensitive information. - Sound incident judgment: you can separate a hypothesis from a finding, preserve evidence, and choose when to escalate or contain. - A record of making teammates more effective through tools, mentoring, code review, or documentation, without needing management authority. - Clear written communication and the willingness to own both urgent investigations and the follow-through that prevents repeat incidents.   HELPFUL EXPERIENCE - AWS, Kubernetes, bare-metal infrastructure, detection-as-code, or SOAR workflows. - Digital forensics, threat intelligence, or testing detections through attack simulation. - Securing AI agents and tool integrations, including prompt injection, credential misuse, and data-exfiltration risks. - Blockchain infrastructure or other environments with sensitive keys and high-impact production systems.   WHAT SUCCESS LOOKS LIKE - Investigations reach evidence-backed conclusions faster. Detection coverage improves, repeat noise declines, and remediation is verified. The team adopts tools and workflows you've built, with clear limits on what agents may do and a tested path for handling failures.   BENEFITS & PERKS 🏥 Private Health Insurance 💪 Gym Reimbursement 🚅 Commuter Benefits 🌴 Flexible Time Off 🥙 In-Office Group Meals 🧠 Learning & Development Stipend 🌎 Company Sponsored Conferences & Events 🎧 Books & Audiobook subscription with Bookster https://landing.bookster.ro/

Location: US - Headquarters - Maryland - Columbia Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc Your Role: In this role, you’ll help evaluate, implement and maintain Tenable’s cybersecurity systems. You’ll work alongside Security Engineers, Analysts and the Digital Solutions Department to protect the confidentiality, integrity and availability of Tenable’s assets. Your Opportunity: Help evaluate, deploy and improve security solutions across on-premise, cloud and SaaS environments Identify opportunities to improve the resiliency and quality of security systems and applications Support maintenance of security tooling and appliances Assist in identifying and remediating threats and risks reported by Security Analysts, assessments or third parties Participate in security reviews of SaaS, on-premise, and AI-enabled products (including LLM integrations, MCP servers and agentic tools), with guidance from senior engineers Help apply baseline AI security controls: least-privilege access, no static credentials, scoped tokens, logging/auditing of agent activity, and data handling guardrails Support detection and monitoring use cases for AI and agentic workloads Document projects and write Standard Operating Procedures Build strong working relationships across the team and with partner groups Manage your time and responsibilities, set accurate expectations and meet deadlines Provide infrequent, as-needed off-hours support Other duties as assigned What You’ll Need: Working knowledge of securing Windows, Linux, mobile devices and cloud (IaaS) environments Familiarity with security architecture and review methodologies (e.g., threat modeling, STRIDE) Foundational understanding of network security (IDS/IPS, web proxies, traffic analysis) and the TCP/IP stack and common protocols (DNS, SMTP, DHCP) Familiarity with authentication and access concepts: SSH, LDAP, SSO/OAuth/OIDC, RBAC, MFA Understanding of Zero Trust and cloud security principles Hands-on experience with 2 or more of: EDR/antivirus, SIEM/log correlation, CASB, web proxies, PAM, MDM, DLP, email security/DMARC Basic understanding of AI/LLM security risks (prompt injection, data leakage, excessive agent permissions, supply chain risk) and curiosity about MCP and agentic architectures Scripting or automation ability (Python, Bash or PowerShell) is a plus BA/BS in Computer Science, IT or a related field, SANS training, or equivalent experience 3-5 years of Information Security experience; some cloud experience preferred Security+, GIAC, AWS security or similar certifications are a plus Self-motivated, with a passion for cybersecurity and a willingness to innovate Able to work effectively in an agile environment, with growing independence Hybrid/on-site at our Columbia, MD headquarters #LI-Hybrid #LI-MS1 This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs. US Pay Range $102,500 — $136,500 USD We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Responsibilities: - Design and develop scalable Android features for a mobile banking application. - Implement secure financial flows including transactions, cashback logic, and tracking. - Integrate with external APIs such as payments, geolocation, and partner services. - Ensure high performance, stability, and security of the application. - Collaborate with backend, QA, and product teams to deliver features end-to-end. - Maintain and improve app architecture following modern best practices. - Lead code reviews, enforce coding standards, and mentor team members. - Monitor app health including crashes, performance, and analytics, and proactively improve it. - Work with analytics tools like Firebase and Google Analytics to track user behavior and optimize features. - Continuously improve development processes, documentation, and codebase quality. Requirements: - At least 2 years of experience in Android development using Kotlin. - Strong knowledge of Android fundamentals, application lifecycle, OOP, and architectural patterns such as MVVM and MVI. - Experience building Android UIs with Jetpack Compose and/or traditional View/XML systems. - Experience with Kotlin Coroutines and working knowledge of Flow. - Experience integrating REST APIs, handling responses, errors, and serialization. - Basic experience with local data persistence using Room or other Android storage solutions. - Familiarity with dependency injection frameworks like Hilt, Dagger, or Koin. - Experience writing unit tests and understanding basic UI testing principles. - Working knowledge of Git and basic understanding of CI/CD. - Ability to independently implement well-defined features and collaborate effectively with the development team. - English proficiency at least at Intermediate+ level.

Location: GE; PL Workplace: remote Overview: SOFTSWISS continues to expand its team and is looking for a Senior Ruby on Rails Developer. We need a skilled, proactive and accomplished professional who shares our culture and values and is ready to contribute to the development of cutting-edge gaming solutions. About Product: SOFTSWISS Casino Platform Full-service modular software platform to manage online casino operations Learn More Purpose of the role: We’re looking for an engineer who treats AI as a force multiplier rather than a shortcut: someone who ships fast with modern tooling, but still owns the architecture, the edge cases and the production behaviour of everything they deliver. If you share our culture and values and want to build high-load gaming solutions used by millions of players, we’d love to talk. Key responsibilities: You’ll do design, build and evolve Ruby on Rails services that power our iGaming platform: high-throughput APIs, payment and wallet flows, real-time game integrations and back-office tooling. Work in an AI-augmented workflow: use coding assistants and agents (Cursor, Claude Code, GitHub Copilot or similar) for scaffolding, refactoring, test generation and code review and take full responsibility for the quality of what gets merged. Integrate LLM-based features into the product where they create real value: [fraud and risk signals, player-support automation, content generation, internal analytics copilots]. Own performance and reliability: profile hot paths, tune PostgreSQL queries, design caching and background-processing strategies, and drive incidents to root cause. Review code (human- and AI-written alike), mentor mid-level engineers and help set the team’s standards for how we use AI responsibly and effectively. Take part in architecture discussions, technical planning and cross-team initiatives. Required Experience: 4+ years of commercial Ruby on Rails experience; deep understanding of Ruby internals, Rails conventions and where to break them. Strong SQL and PostgreSQL skills: indexing, query planning, migrations on large tables without downtime. Solid grasp of distributed-system fundamentals: message queues, idempotency, eventual consistency, background jobs (Sidekiq or similar), caching (Redis). Hands-on experience with AI coding tools in day-to-day work, and a clear opinion on when they help and when they hurt. You can spot a plausible-looking hallucinated API in review. Ability to evaluate and verify AI-generated code: you write and read tests critically, understand what the code actually does, and never merge what you can’t explain. Experience designing and consuming REST and/or gRPC APIs; familiarity with OpenAPI. Confident with Git, CI/CD pipelines, Docker; comfortable reading Kubernetes manifests and logs. Experience with observability tooling (Prometheus/Grafana, Sentry, OpenTelemetry or similar). Upper-Intermediate or higher English and Russian level. Nice to have: Experience integrating LLM APIs (OpenAI, Anthropic, open-weight models) into production Ruby applications – prompt design, structured outputs, evaluation, cost and latency control. Familiarity with RAG pipelines, vector databases (pgvector, Qdrant) or agent frameworks. Understanding of security and data-privacy implications of AI features (PII handling, prompt injection, model output validation). Experience in fintech, payments or iGaming; knowledge of regulatory and responsible-gaming requirements. Contributions to open-source Ruby projects, talks or technical writing. Working knowledge of Go, Elixir or TypeScript for cross-service work. Our stack: Ruby 3.x, Rails 7/8, PostgreSQL, Redis, Sidekiq, Kafka [/RabbitMQ], Docker, Kubernetes, GitLab CI, Grafana, Sentry. AI tooling: [Cursor / Claude Code / Copilot] with team-wide guidelines on usage, review and security. LLM integrations via [provider APIs and self-hosted models] Main Advantages Private health insurance Sports benefits Comprehensive Mental Health Program Free English lessons (online) Local language courses Paid time off Maternity leave support Referral program rewards Upskilling, internal workshops, and participation in professional conferences and corporate events

— Разработка инструментов для AI-агентов и интеграция с корпоративными системами (1С, почта, файловые ресурсы);

-Разработка инструментов для агентов и интеграций с корпоративными системами (1С, почта, файловые ресурсы). -Обработка документов: договоры, счета, таблицы.

Задачи: — Ручное тестирование веб-приложений на наличие уязвимостей (Black box, Grey box) — Поиск и эксплуатация SQLi, LFI/RFI, SSRF, SSTI, Command Injection и других классических веб-уязвимостей — Работа с Burp Suite: перехват и модификация запросов, Intruder, Repeater, расширения — Обход WAF: ручной тамперинг, подбор и написание tamper-скриптов — Работа с автоматизированными инструментами: sqlmap, ghauri — с пониманием того, что происходит под капотом — Написание понятных отчётов с PoC, оценкой критичности и рекомендациями по устранению Требования: — Уверенное понимание веб-уязвимостей: SQL Injection (включая blind boolean/time-based), LFI/RFI, SSRF, SSTI, CMDi — как возникают и как ищутся на практике — Знание специфики основных СУБД: MySQL, PostgreSQL, MSSQL — Опыт работы с Burp Suite (Intercept, Repeater, Intruder, расширения) — Базовые навыки Linux: навигация, права, процессы, сеть — Понимание принципов работы sqlmap и ghauri — Базовый опыт с шеллами и реверс-шеллами Будет плюсом: — Прохождение PortSwigger Web Security Academy — Активность на HackTheBox / TryHackMe — Опыт написания tamper-скриптов или расширений для Burp — Понимание работы WAF и механизмов их обхода Условия: — Офис рядом с м. Новочеркасская — Обеды за счёт компании — Зарплата без потолка — обсуждаем под ваш реальный уровень — Молодой и дружный коллектив — Работа с реальными коммерческими проектами Как откликнуться: — Напишите в Telegram: @danilov_danil03 — Расскажите коротко о себе: над чем работали, что проходили — Приложите GitHub, writeup'ы, статьи или разборы ВПО — всё это будет плюсом.

Python backend with a strong AI focus: production APIs, PostgreSQL and queues -- plus real LLM integrations, RAG, vector search and LangGraph in production. • 3+ years of commercial development with Python.

Location: Warsaw, PL We bring startups and disruptive tech companies to the local market, offering engineers the opportunity to work on innovative, high-impact products. Join us and become a member of their R&D team while we take care of employment, HR support, a benefits package, and an enjoyable work environment. Unity Aura is a large-scale content discovery platform used across 330M devices worldwide. Mission: help users find and access their favorite content in a native and easy way. We are looking for an exceptional and passionate Android Team Leader to join our top-notch Mobile Development group. ‍ Our perfect candidate will have the opportunity to help build a large-scale revolutionary platform used by hundreds of millions of users worldwide. ‍ You will shape both the technical direction and team culture while delivering products that make a real impact. Leadership & People management ‍ Lead, mentor, and grow a team of Android developers and QA/AQA engineers Conduct 1-on-1s, performance reviews, and career development planning Foster a culture of innovation, collaboration, and continuous improvement Facilitate knowledge sharing and technical excellence within the team ‍ Technical leadership ‍ Design scalable solutions and evaluate architecture options Define technical direction, coding standards, and quality guidelines Conduct code reviews and ensure best practices are followed Stay up to date with Android ecosystem trends and drive adoption of relevant technologies Contribute hands-on to critical features and complex technical challenges ‍ Product & Delivery ‍ Collaborate closely with Product Managers, Designers, and cross-functional teams Drive sprint planning, estimation, and delivery commitments Track team progress using Agile/Scrum metrics and ensure timely delivery Balance technical debt with feature development Manage priorities in a fast-paced, dynamic environment ‍ Leadership experience ‍ (Preferred) 2+ years of people management experience in a technical leadership role Proven track record of building and scaling high-performing teams Experience leading development teams using Agile/Scrum methodology Ability to manage competing priorities and adapt to changing requirements ‍ Technical expertise ‍ 5+ years of native Android application development experience Expert knowledge of Kotlin and modern Android development practices Deep understanding of Kotlin Coroutines, Flow, and reactive programming Proficiency with MV* patterns (MVVM, MVI), Clean Architecture, and SOLID principles Strong understanding of Android internals, app lifecycle, and performance optimization Experience with multi-module architecture and dependency injection Hands-on experience with AI-assisted development tools (GitHub Copilot, Cursor, etc.) Experience with CI/CD pipelines and automated testing Knowledge of build variants, product flavors, and build configuration ‍ Experience with system-level apps or privileged APIs Background in mobile security, app hardening, or compliance requirements Experience with large-scale apps (1M+ users) ‍ ‍ ‍ This is a hybrid role with 3 days a week in our Warsaw office (Wednesday to Friday). At On The Spot, we’re creating a workplace people would want to stay in: supportive, well-organized, and fair in terms of conditions and benefits. ‍ We’ll share more about our benefit package during the interviews. In the meantime, you can always check our Glassdoor reviews .

Location: New York, Chicago, or Remote CCC Intelligent Solutions Inc. (CCC) is a leading cloud platform for the multi-trillion-dollar insurance economy , creating intelligent experiences for insurers, repairers, automakers, part suppliers, and more. At CCC, we’re making life just work by empowering more than 35,000 businesses with industry-leading technology to get drivers back on the road and to health quickly and seamlessly. We’re pushing boundaries with innovative AI solutions that simplify and enhance the claims and repair journey. Through purposeful innovation and the strength of its connections, CCC technologies empower the people and industry relied upon to keep lives moving forward when it matters most. Learn more about CCC at www.cccis.com . The Role As a Senior Software Engineer - Agentic you will build the event-driven systems that keep claims moving for our customers, connecting our AI agents to the rest of CCC. When these systems work, claims move faster and the machinery stays invisible. Agentic coding tools are how you move fast. What you add is what they are worst at: distributed-systems design, correctness when things fail partway, and the debugging nobody else gets to the bottom of. You own a product area end to end and define the reliability bar it ships against. Salary range is: $180,000 - 225,000 This position is bonus eligible. Key Responsibilities: Own the delivery of backend services, built in Python and TypeScript, from an ambiguous problem, scoped with product managers and data scientists, through production operation. Build and operate durable, event-driven, multi-tenant systems in which agents run as steps inside deterministic workflows, designing their failure modes, replay semantics, and cost profile before they show up under load. Own tracing and audit for your area: every model call and agent step recorded, so any recommendation can be reconstructed and cited back to its sources by on-call and auditors alike. Own how claims automation data is modeled and managed across our relational, document, and graph stores. Ensure the security and isolation of sensitive data. Author the design documents for complex systems to get feedback and buy-in, review other engineers' designs and code with the same care, and mentor the engineers in your area. Raise the bar for how the team works with agentic coding tools: sharpen the specifications, instruction files, hooks, and permission policies they run under, and hold generated code to the same review standard before it merges. Take part in a shared on-call rotation for the systems you own. Requirements: 6+ years of professional software engineering experience, including an event-driven system you designed, shipped to customers, and ran in production. Python and TypeScript at the level of setting a team's conventions, plus a background in a systems language such as Rust, Go, Java, or C#. Strong computer science and distributed-systems fundamentals you use at work: concurrency, consistency, ordering, and how systems fail. Event-driven systems built on a broker such as Kafka, Azure Event Hubs, or Service Bus that handle duplicate, late, and failed events without losing or double-processing work. Data modeling and development across relational, document, and graph databases such as PostgreSQL, MongoDB, and Neo4j, including when each type fits and the partition-key, consistency, and tenant-isolation calls you made. Systems architected and operated on Azure or AWS, with CI/CD and infrastructure as code, and hands-on time with a durable workflow engine such as Temporal or the Durable Task Scheduler. A clear account of how you constrain an agentic coding tool's context and verify its output, from daily use of Claude Code, Cursor, GitHub Copilot, or similar on production work, plus changes you turned back, and why. Technical design documents you have authored for systems that span more than one team, used to get feedback and buy-in before building, and that those teams then built to. Clear writing and discussion for technical and non-technical audiences: drawing out a customer's real problem and explaining the trade-offs back to them. Even Better if You Have: React and TypeScript experience, so you can deliver a full-stack feature end to end, especially chat, streaming, and citation-heavy AI experiences. Formal methods or fault-injection testing, such as Lean, TLA+, or deterministic simulation. Performance work below the application layer: profiling, memory, and concurrency tuning. Familiarity with how AI agents reach their tools and enterprise systems, through the Model Context Protocol (MCP), the Agent2Agent (A2A) protocol, command-line tools, and microservices. Exposure to the insurance, claims, or automotive repair domains. What Success Looks Like: In your first six months, services you built run in production against SLOs you set, and you can show they held as load grew. You are trusted with the hardest correctness and scale problems, and you turn them into a design, a shipped system, and a number you can put in front of a customer. You are energized by what agentic coding tools make possible. Your team ships more than its headcount suggests, and your specifications and reviews are why the output survives production. You have a passion for systems that last: failures are designed for in advance, and when one happens anyway, the trace says exactly where. Standards you set for reliability, reviews, and design documents outlive the project they started on. Engineers you mentor ship reliable services without your direct involvement. You enjoy getting a product manager, a data scientist, and a customer's team into one room and coming out with a single agreed scope, and you can argue a position without needing to win it. You embrace our ambitious, collaborative, and empathetic values, and you like problems where the answer has to be measured rather than argued. Interview Policy & Privacy Notice: A video interview is required for this position. Video interviews are transcribed. Transcriptions are retained and may be reviewed by CCC and our recruiters. Candidates are not permitted to use generative AI or automated assistance during the interviews unless explicitly allowed by the interview team for a specific exercise. Our Job Applicant Privacy Notice is available HERE . About CCC's Commitment to Employees: CCC Intelligent Solutions understands that our employees play an integral role in our vision to shape a world where life just works. Our team is defined by our values of Integrity, Customer-Focus, Innovation, Inclusion & Diversity, Tenacity, and Connection. Through diverse perspectives, purposeful innovation, and the strength of connections, our technologies empower the people and industry relied upon to keep lives moving forward when it matters most. At CCC, together everyone can thrive as we innovate and collaborate, creating employee experiences that just work. We are committed to providing opportunities for our people to make real-life impacts, advance in their careers, and contribute to CCC’s success. CCC offers competitive compensation and benefits to support you and your families, including: 401K Match Paid time off Annual Incentive Plan Performance Bonus Comprehensive health insurance Adoption Assistance Tuition Reimbursement Wellness Programs Stock Purchase Plan options Employee Resource Groups For more information about our benefits, please check out our careers site . Here, you belong. You are seen, valued, and respected. We celebrate you for who you are and all you bring. Every voice is heard and is important to our success. You can hear what employees have to say about our culture here

- Разработка архитектуры агентов: управление состоянием диалога и контекстом, динамический выбор инструментов (tool calling), настройка уровней автономности и сценариев human-in-the-loop; - Глубокое понимание жизненного цикла ML-модели: от подготовки признаков до интерпретации результатов;