Location: Espoo
Workplace: Hybrid
ROLE HIGHLIGHTS:
- AI Solutions Engineer
- Location: Espoo, Finland
- Department: Business Applications
- Reports to: AI Platform Lead / Head of Business Applications
- Employment type: Permanent
- Workplace model: Hybrid / Office
- Employment is subject to applicable security screening (incl. SUPO, where required)
WHY THIS ROLE MATTERS:
The Business Applications team focuses on high-impact internal use cases to help the company grow, building internal solutions and facilitating new processes as we scale our data infrastructure, tooling, and operations. As an AI Solutions Engineer, you bridge the gap between rapid AI-assisted product delivery and scalable, governed platform engineering. You will spend roughly 50% of your time taking high-value internal use cases from business needs to reliable, production-grade applications, and 50% of your time collaborating with the AI Platform Lead on our shared internal applications platform, DevOps workflows, and governance guardrails. You think ahead: instead of solving problems with brittle one-off fixes, you turn recurring needs into clean, reusable platform capabilities and help guide our Junior AI Solutions Engineers to do the same.
Who We Are
ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth.
ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system.
ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future.
Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific.
Your day-to-day responsibilities
BUILD AND SHIP INTERNAL APPLICATIONS & AI-ENABLED SOLUTIONS (~50%)
- Partner directly with stakeholders across the business to translate operational bottlenecks into clear technical designs and working, scalable applications.
- Build, iterate on, and productionize full-stack internal applications and automations (primarily Python/FastAPI, TypeScript/React, and PostgreSQL) using modern AI-first coding workflows (Cursor, Claude Code) and LLM APIs where they add real value.
- Design and maintain reliable, governed integrations with core enterprise systems and data sources (e.g., HiBob/HRIS, Salesforce, Databricks, Slack, Jira, Google Workspace, Okta).
- Own the full lifecycle of the solutions you build. All the way from rapid prototyping and stakeholder validation to production rollout, documentation, and long-term maintainability.
COLLABORATE ON THE INTERNAL TOOLS PLATFORM, DEVOPS & GOVERNANCE (~50%)
- Collaborate with the AI Platform Lead to develop, operate, and scale our AWS-based internal applications platform (ECS/Fargate, Aurora PostgreSQL, ALB/CloudFront, ECR, Secrets Manager, EventBridge) managed via Terraform.
- Build for scale rather than one-offs: when an application needs a new integration pattern, infrastructure capability, or deployment workflow, design it as a reusable, self-service platform pattern that benefits the entire fleet of internal apps.
- Maintain and improve GitHub Actions CI/CD pipelines (OIDC, automated security and IaC scanning, plan/apply workflows) and shared platform libraries (authentication, IAM database access, service-to-service communication).
- Uphold strong governance, security-by-default, and auditability across the platform by ensuring strict access controls, clear audit trails for sensitive data access and write-backs, least-privilege IAM, and traceable change management.
- Help triage and resolve platform-level operational issues, including deployment pipelines, container health, database migrations, network/egress rules, and observability/log forwarding (Splunk, CloudWatch).
ELEVATE TEAM ENGINEERING QUALITY & UNBLOCK DELIVERY
- Act as a day-to-day technical sounding board and mentor for the Junior AI Solutions Engineers on the team by reviewing PRs, guiding data modeling and API design, and helping troubleshoot tricky deployment or integration issues.
- Contribute to shared templates, runbooks, and architecture decision records (ADRs) so the team moves fast without accumulating technical or security debt.
WHAT WE’RE LOOKING FOR
Must haves:
- 4–6 years of hands-on experience in software engineering, full-stack development, or platform/DevOps engineering, with a track record of shipping and operating production web applications end to end.
- Systems and platform mindset: you naturally look past the immediate ticket to see how a solution will behave across 30+ apps in a year's time, and you strongly prefer reusable patterns, clean abstractions, and automation over ad-hoc, one-off workarounds.
- Strong appreciation for governance, security, and auditability: comfortable working in an environment where data isolation, least-privilege access, approval gates, and verifiable audit trails are non-negotiable.
- Strong proficiency in Python (e.g., FastAPI) and/or TypeScript/React, plus solid relational database skills (PostgreSQL, schema isolation, migrations).
- Practical Cloud & DevOps experience on AWS (e.g., ECS/Fargate or containers, IAM, networking/ALB, RDS/Aurora) and Infrastructure as Code (Terraform).
- Hands-on experience with CI/CD pipelines (GitHub Actions, Docker, automated testing and security checks) and AI-assisted engineering tools (Cursor, Claude Code) plus practical LLM API integration.
- Pragmatic communicator: comfortable working directly with business stakeholders to scope ambiguous problems, while holding a high bar for engineering quality under the hood.
Nice to haves:
- Experience integrating with enterprise systems and APIs such as HRIS/ATS (HiBob, Ashby), CRM (Salesforce), data platforms (Databricks), or Slack/GitHub Apps.
- Hands-on familiarity with security and compliance controls in cloud environments (OIDC/OAuth2, IAM database authentication, KMS encryption, Checkov/IaC scanning, Splunk/audit logging).
- Prior experience mentoring junior engineers and reviewing code/architecture on a fast-moving team.
APPLICATION PROCESS
- Introductory call with TA
- Hiring Manager Interview
- Technical & Platform case interview
- Skip level interview
WORKING AT ICEYE
At ICEYE, you’ll join a diverse and highly engaged team united by the ambition to make the impossible possible. As a global scale-up, we combine speed and ambition with the opportunity to take real ownership from day one. Your growth, wellbeing, and success are a priority, with continuous professional development, training opportunities, and a culture where collaboration is how we win.
HOW WE WORK (OUR VALUES)
Make the impossible possible: We set ambitious goals and stay calm under pressure. We bring grit, optimism, and ownership when things get hard, and we keep moving until we find a way.
- Be curious: Go deep, ask questions, listen carefully, and think critically. Understand the “why” behind decisions.
- See the big picture: Stay close to what’s happening across the company so you can make better decisions. Consider how your work affects others.
- Drive effective teamwork: Create psychological safety, invite different perspectives, and build inclusive teams. There are no bad questions.
- Act as one team: We win together. We match tasks to the right owner and stay agile as priorities shift.
- Have fun: What we do matters—and it should be enjoyable. Celebrate progress, take pride in results, and share the wins.
BENEFITS
Our benefits are designed to support your health and wellbeing, at work and beyond. We keep improving them based on employee feedback, and offerings vary by location. Talent Acquisition will confirm what applies for this role and location during the process.
OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION
We want ICEYE to be a place where people can be themselves and do great work. Different backgrounds and perspectives make us stronger, which is why we work to create an environment where people feel included, respected, and able to speak up. Whatever your background, we want you to bring your authentic self to the table.
We’re committed to fair, inclusive hiring and equal opportunity. Everyone is welcome to apply. If you need any adjustments or support during the recruitment process, tell us—we’ll do our best to help.
Apply now to start your ICEYE journey, and help us continue to make the impossible possible together. Read more about ICEYE and working with us at iceye.com http://iceye.com.
Architect, build, test, deploy, and maintain scalable, automated ETL/ELT pipelines using Python, dbt, and orchestration tools such as Prefect and Airflow. Administer and optimize cloud-based data warehouse and lake platforms, including Snowflake, AWS (S3, Redshift), and Google Cloud, integrating new sources and tuning for performance and cost.
You will own the reliability, performance, and cost efficiency of the PostgreSQL data platform behind our flagship CMS — primarily Amazon Aurora PostgreSQL — along with the infrastructure and automation around it. This is a reliability engineering role,.
УдалённоseniorГеография найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Manage services operations and resources, including Engagement Manager and Solution Architects, ensuring timely and successful project execution and value delivery. Manages professional service team in respect to project milestones, delivery and goals.
Yandex Cloud — технологическая платформа для создания и развития ИТ-продуктов. Архитектор решений помогает выбирать оптимальный способ решения бизнес-задач и внедрять клиентские решения на облачной платформе. Ждём, что вы работали с облачными решениями.
Yandex Cloud — технологическая платформа для создания и развития ИТ-продуктов.
Архитектор решений
— ключевая роль в клиентской организации Yandex Cloud. Он помогает выбрать оптимальный способ решения бизнес-задач и руководит внедрением клиентских решений на облачной платформе. Если вы глубоко разбираетесь в технологиях и обладаете незаурядными коммуникативными навыками, ждём ваше резюме.
Обязанности
* Вместе с менеджером по продажам выявлять и квалифицировать потребности ключевых заказчиков
* Консультировать заказчиков о сложных кейсах в работе с инструментами Yandex Cloud
* Анализировать требования заказчика к платформе
* Выбирать оптимальный сценарий решения задач заказчика на платформе Yandex Cloud
* Консультировать заказчика на этапах проверки концепции, тестирования и внедрения продукта
Больше о том, что под капотом платформы Yandex Cloud, — в канале
Inside Yandex Cloud
Требования
* Работали в качестве архитектора решений от 3 до 6 лет
* Участвовали в пресейл-активностях с коммерческими и государственными заказчиками
* Работали с облачными решениями Google Cloud Platform, AWS, Microsoft Azure
* Понимаете принципы работы платформы виртуализации, сетей, технологии хранения данных
* Знаете принципы работы Kubernetes и архитектуру микросервисных приложений
* Знакомы с платформами хранения и обработки данных и аналитики
* Понимаете современные технологические и бизнес-задачи заказчиков в банковской сфере, ритейле, медиа, электронной коммерции, продаже товаров повседневного спроса
Будет плюсом
* Имеете опыт эксплуатации контейнерных платформ и CI/CD-систем
* Знаете инструмент Terraform
* Понимаете архитектуру бэкенда и фронтенда приложений
* Имеете опыт разработки на языках программирования
Location: Москва; Санкт-Петербург
Workplace: Офис, Гибридный
Yandex Cloud Security — это подразделение в публичной облачной платформе Yandex Cloud, которое отвечает за обеспечение безопасности всей экосистемы. Ищем инженера, который возьмёт на себя создание и развитие детектирующего контента для собственных продуктов безопасности Yandex Cloud.
Yandex Cloud — это облачная платформа, которая объединяет вычислительные ресурсы, сети, хранилища, базы данных, контейнерные и другие управляемые сервисы. В её основе — множество распределённых высоконагруженных систем и API собственной разработки, которыми пользуются компании и разработчики для создания и эксплуатации своей инфраструктуры и приложений.
Команда
Yandex Cloud Detection and Response
развивает технологии обнаружения и реагирования на угрозы в облачных и гибридных инфраструктурах. Мы исследуем способы улучшения разработки и сопровождения детектирующего контента. Одно из направлений — создание AI-агентов, которые помогают исследовать данные, разрабатывать и тестировать правила, анализировать результаты их работы и автоматизировать повторяемые задачи detection engineering.
Мы ищем инженера, который будет отвечать за создание и развитие детектирующего контента для собственных продуктов безопасности Yandex Cloud. В вашей зоне ответственности будет полный жизненный цикл детекта: исследование техники атаки, определение требований к телеметрии, разработка и тестирование правила и последующий контроль качества.
Обязанности
Разработка детектирующего контента
Вы будете создавать и развивать правила обнаружения угроз для продуктов безопасности Yandex Cloud и команды SOC, работать с нормализацией и таксономией событий, тестировать детекты и контролировать их качество после выпуска.
Исследование угроз и работа с инцидентами
Вам предстоит исследовать техники атакующих, проводить Threat Hunting, участвовать в расследовании сложных инцидентов, превращать полученные результаты в новые способы обнаружения угроз. Отдельное направление работы — endpoint detection для Linux и контейнерных сред, включая телеметрию на основе eBPF.
R&D и автоматизация
Вы будете автоматизировать разработку, тестирование и выпуск детектирующего контента, а также развивать AI-агентов для анализа данных и проверки детектов.
Больше о том, что под капотом платформы Yandex Cloud, — в канале
Inside Yandex Cloud
Требования
* Работали в detection engineering, threat hunting, incident response либо на второй или третьей линии SOC
* Разрабатывали и отлаживали правила в SIEM или EDR, работали с Git и CI/CD
* Понимаете полный жизненный цикл детекта: гипотеза, требования к данным, реализация, тестирование, внедрение, мониторинг качества
* Знаете сетевые протоколы, устройства современных операционных систем и основные техники атак на Active Directory
* Понимаете модели безопасности облачных платформ: IAM, ресурсную иерархию и облачные API
* Знаете принципы виртуализации, контейнеризации
* Разбираетесь в Linux: процессы, системные вызовы, файловая и сетевая подсистемы
* Понимаете принципы eBPF и его применения для наблюдаемости и безопасности Linux-систем
* Умеете писать код или скрипты для автоматизации — прежде всего на Python или Go
* Способны самостоятельно доводить исследование до работающего результата и сопровождать его
Будет плюсом
* Работали с Yandex Cloud, AWS, Azure или GCP и их событиями безопасности
* Разрабатывали детектирующий контент для EDR
* Работали с purple teaming, adversary emulation или проверяли детекты воспроизведением техник атак
* Использовали eBPF, Falco, Tetragon, Tracee или другие средства runtime security и сбора endpoint-телеметрии
* Знаете Sigma, YARA, Suricata или другие форматы детектирующего контента
* Разбираетесь в ClickHouse, YDB или других SQL-подобных аналитических системах
Платформа Security Deck помогает компаниям снижать риски в облачной инфраструктуре. Мы ищем архитектора, который станет техническим партнёром клиентов и поможет им пройти путь от знакомства с Security Deck до её использования. Это роль на стыке cloud security, архитектуры и консалтинга.
Мы развиваем Security Deck — Cloud-Native Application Protection Platform (CNAPP) Yandex Cloud, которая помогает компаниям видеть и снижать риски в облачной инфраструктуре.
Security Deck объединяет управление конфигурацией и соответствием требованиям, анализ прав доступа, защиту Kubernetes и данных, инвентаризацию активов и работу с проблемами безопасности. Наша цель — дать специалистам по ИБ единый инструмент, который помогает не просто находить нарушения, а понимать их контекст, приоритизировать риски и доводить исправления до результата.
Мы ищем архитектора, который станет техническим партнёром клиентов и поможет им проходить весь путь от знакомства с Security Deck до промышленного использования.
Ваша миссия — связывать возможности Security Deck с реальными задачами заказчиков. Вы будете разбираться в облачной архитектуре клиентов, моделях угроз и процессах ИБ, проектировать целевой сценарий использования CNAPP, проводить демонстрации и пилоты, а также помогать заказчикам внедрять Security Deck в их технологический и организационный контур. Это роль на стыке cloud security, архитектуры, консалтинга и развития продукта.
Обязанности
Технический пресейл и работа с заказчиками
Вы будете выявлять задачи, ограничения и критерии успеха заказчика; изучать архитектуру облачной инфраструктуры, модель доступа и процессы управления безопасностью; проводить технические презентации и демонстрации Security Deck для ИБ-, DevSecOps-, DevOps- и Cloud-подразделений; объяснять ценность CNAPP техническим специалистам, руководителям ИБ и бизнес-заказчикам; готовить архитектурные схемы, технические предложения, планы внедрения и ответы на требования заказчиков; участвовать в сложных конкурентных сделках и аргументированно сравнивать Security Deck с другими CNAPP- и CSPM-решениями.
Проектирование сценариев Security Deck
Вместе с клиентом вы определите, как Security Deck должен использоваться в его инфраструктуре. В эту задачу входят инвентаризация облачных активов и единое представление об их защищённости, поиск небезопасных конфигураций и контроль cloud security posture, анализ избыточных прав пользователей и сервисных аккаунтов, контроль безопасности Kubernetes, обнаружение рисков хранения и обработки данных, проверка соответствия политикам и стандартам, приоритизация findings с учётом критичности ресурса, настройка уведомлений, исключений и процессов устранения, интеграция с SIEM, SOAR, Service Desk, построение сценариев для гибридной и мультиоблачной инфраструктуры.
Проведение пилотов и внедрений
Вам предстоит брать на себя техническое ведение пилотных проектов: это формирование scope и критериев успешности, план работ и программа испытаний, подключение облачной инфраструктуры и источников данных, настройка политик, правил и областей контроля, анализ результатов сканирования, совместный разбор findings с командами ИБ и эксплуатации, рекомендации об устранении нарушений, демонстрация измеримого результата и помощь в переходе от пилота к промышленному использованию. Иногда потребуется самостоятельно разобраться в конфигурации IAM или Kubernetes, проанализировать логи, проверить API-вызовы, подготовить Terraform-конфигурацию либо помочь клиенту сформировать политику безопасности.
Развитие продукта
Вы как один из главных источников клиентской экспертизы для продуктовой команды будете собирать и структурировать обратную связь, отличать частные запросы клиентов от системных продуктовых потребностей, формировать feature requests и требования к интеграциям, выявлять пробелы в пользовательском пути, помогать приоритизировать развитие CSPM, KSPM, CIEM, DSPM и других компонентов платформы, прорабатывать новые сценарии и проверять их на реальных заказчиках, анализировать причины перехода пилотов в эксплуатацию.
Развитие экспертизы и базы знаний
Вам предстоит создавать типовые архитектуры внедрения Security Deck, готовить документацию, инструкции, ТЗ и программы испытаний, описывать сценарии устранения типовых проблем безопасности, разрабатывать демостенды и материалы для пилотов, обучать команды продаж, партнёров и технических специалистов, проводить воркшопы, вебинары и разборы клиентских кейсов.
Больше о том, что под капотом платформы Yandex Cloud, — в канале
Inside Yandex Cloud
Требования
* Больше трёх лет работали в customer-facing-роли: архитектором, пресейл-инженером, консультантом или специалистом по внедрению решений ИБ
* Понимаете архитектуру публичных облаков и модель разделения ответственности
* Знаете основные риски облачной инфраструктуры: ошибки конфигурации, избыточные права, публичный доступ, небезопасные сетевые настройки, утечки секретов и недостаточную наблюдаемость
* Понимаете назначение CNAPP, CSPM, KSPM, CIEM, DSPM или близких классов решений
* Знакомы с IAM, сервисными аккаунтами, ролями и принципом минимальных привилегий
* Уверенно работаете с Kubernetes и понимаете типичные риски безопасности контейнерной инфраструктуры
* Умеете читать логи, анализировать findings и находить первопричину проблемы
* Можете спроектировать пилот, сформулировать критерии успеха и довести проект до измеримого результата
* Умеете объяснять сложные технические вопросы как инженерам, так и руководителям
* Готовы самостоятельно погружаться в архитектуру и задачи заказчика, а не ограничиваться демонстрацией интерфейса
* Читаете техническую документацию на английском языке
Будет плюсом
* Работали с Yandex Cloud, AWS, Azure, GCP или другими облачными платформами
* Внедряли CNAPP, CSPM, SIEM, SOAR, VM, EDR, DLP или решения для безопасности Kubernetes
* Знакомы с Terraform, CLI и API облачных платформ
* Понимаете DevSecOps-практики и процессы безопасной разработки
* Работали с compliance-требованиями и стандартами: PCI DSS, 152-ФЗ, ГОСТ, ISO 27001 и другими
* Участвовали в построении модели угроз или облачной архитектуры безопасности
* Интегрировали средства защиты с SIEM, Service Desk и системами автоматизации
* Проводили технические воркшопы, вебинары или публичные выступления
* Имеете сертификаты в области облачных технологий или информационной безопасности
Workplace: Удалённый, Офис, Гибридный
В финтех-стартап ищем разработчика на Golang. Приходите, если пишете на Go, разрабатывали распределённые отказоустойчивые системы и знаете PostgreSQL. Вы будете создавать безопасную архитектуру и прорабатывать безопасность сервисов.
ОФП (Оператор финансовых платформ) — финтех-стартап внутри экосистемы Яндекс ID. Мы создаём витрину финансовых продуктов, которая делает доступ пользователя к банковским сервисам простым, безопасным и технологичным.
Проект молодой, но амбициозный — у нас нет легаси, зато есть возможность строить архитектуру, инфраструктуру и процессы с нуля.
Почему вам может у нас понравиться:
* Никакого легаси. Всё строится с нуля — можно делать «как правильно»
* Инженерная свобода. Мы ценим осознанные решения, инициативу и здравый перфекционизм
* Сильная команда. Вы будете работать рядом с инженерами Яндекс ID, создающими сервисы, которые держат миллионы RPS и обрабатывают терабайты данных в реальном времени
* Рост и влияние. Ваши решения повлияют на архитектуру и развитие продукта с первых дней
* Стабильность и ресурсы Яндекса при гибкости стартапа
Обязанности
Построение инфраструктуры с нуля
Наши сервисы будут развёрнуты в Yandex Cloud, и впереди у нас много задач по созданию продуманной, отказоустойчивой и безопасной архитектуры. В число этих задач входит настройка CI/CD-пайплайнов, построение системы логирования, мониторинга и метрик, проектирование и настройка сетевой архитектуры, а также участие в проработке стратегии безопасности и устойчивости сервисов.
Разработка микросервисов
Мы пишем множество сервисов с чистого листа, без легаси. Среди направлений: интеграции с банками, безопасное хранение и обработка чувствительных данных, системы авторизации и идентификации пользователей, реализация сложных, долгоживущих бизнес-процессов.
Работа с регуляторными требованиями
Мы обрабатываем как персональные данные, так и данные, представляющие банковскую тайну. Это не только ответственность, но и интересные технические вызовы: криптография, безопасное хранение, аудит, изоляция окружений, контроль доступа и многое другое.
Больше о бэкенде в Яндексе — в канале
Yandex for Backend
Требования
* Разрабатывали распределённые отказоустойчивые системы
* Умеете писать на Go
* Уверенно работаете с реляционными базами данных (в идеале — с PostgreSQL)
Будет плюсом
* Работали с облачными платформами (например, с Yandex Cloud, AWS, GCP)
* Знаете и используете Redis
* Понимаете принципы и технологии криптографии: шифрование, mTLS, цифровые подписи и т. д.
* Имеете опыт интеграции с банковскими API
* Знаете и применяете OpenAPI (в том числе codegen)
* Понимаете принципы работы брокеров сообщений (и знаете, когда их не стоит использовать)
* Имеете базовые знания о сетевых протоколах и архитектуре
Location: Москва
Workplace: В офисе
О компании
MWS Cloud Platform — новая облачная платформа от МТС Web Services, построенная на собственных технологиях виртуализации и надёжной инфраструктуре МТС. Мы управляем всем циклом разработки — от оборудования и дата-центров до кода. Наша цель — создать высокотехнологичное облако для самых требовательных заказчиков, при этом понятное и удобное для разработчиков.
Присоединяйся — у нас амбициозные задачи, сильная инженерная команда и реальная возможность повлиять на архитектуру облака федерального масштаба.
Мы ищем разработчиков разного уровня от Middle до Staff, которые будут участвовать в создании нового публичного облака и развитии основных сервисов.
Обязанности
разработка ключевых сервисов для облака MWS на языке Golang
проработка архитектурных решений совместно с командами (проектирование и реализация решений)
разработка публичных и внутренних API для наших компонентов
обеспечение отказоустойчивости и масштабируемости систем
сопровождение сервисов "под ключ" (команда сама сопровождает свой сервис)
взаимодействие со смежными командами
ведение технической документации, ревью кода
при желании - можно заниматься менторингом/наставничеством менее опытных коллег.
Требования
опыт работы в коммерческой разработке на Golang от 3-х лет и более
опыт построения и поддержки отказоустойчивых систем
опыт разработки многопоточного кода
внимание к качеству системы: документации, написанию тестов, читаемости кода, observability всех компонентов
интерес к облачными технологиям и технологиями хранения данных в частности, готовность их углубленно изучать
опыт работы с большими облаками (AWS, Azure, GCP, Yandex Cloud) и хорошее понимание внутренней логики работы Kubernetes будет плюсом
опыт работы с другими языками программирования будет плюсом.
Условия
возможность удаленной работы
собственную платформу МТС Ocean для получения ИТ-ресурсов, а это значит, что деплой, мониторинг, observability - не будут для вас проблемой, вы сможете сосредоточиться на фичах
профессиональные гильдии инженеров по направлениям, чтобы поддерживать друг друга и обмениваться опытом
внутреннюю площадку TechTalks для обмена опытом, дискуссий, развития навыков самопрезентации
участие во внешних IT конференциях. Мы выступаем на HighLoad++, DataFest, Mobius, Test Driven Conf, Joker, DevOps, Матемаркетинг и даже проводим собственную конференцию по архитектуре Hello, conference
полезные курсы и вебинары в корпоративном университете и электронные библиотеки
медицинскую страховку с 1 месяца со 100% покрытием расходов, включая стоматологию, страхование жизни и здоровья в поездках за рубеж. А еще возможность застраховать родственников с корпоративной скидкой, доступ к сервису «Понимаю»: онлайн-консультации с психологом, юристом, экспертом по финансам или ЗОЖ
корпоративный и командный психолог в офисе и массажный кабинет
единую подписку МТС Premium — KION light в онлайн-кинотеатре KION, сервис МТС Music
скидки и предложения от партнеров на фитнес, занятия английским и прочее.
Location: Remote - Mexico
Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit
www.bugcrowd.com
.
Job Summary
If you like owning problems end to end, making security a default property of everything we build, and working closely with engineering, we want to meet you. Bugcrowd is looking for security engineers who move beyond standard tooling and drive measurable security outcomes our customers can rely on. You will help us shape a culture where security helps others succeed, not just points out problems.
Essential Duties and Responsibilities
Partner Closely with Engineering
: Refine architecture, validate new features, and drive security investment while prioritizing engineering velocity
Build Security Paved Roads
: Contribute to the secure defaults, libraries, and "paved roads" that systematically eradicate entire classes of vulnerabilities rather than fixing bugs one by one
Create Feedback Loops
: Tune security tooling such as SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters
Be our Best Customer
: Ensure our bug bounty program can be a model for other customers. Experiment with new ways to leverage the creativity of the crowd. Provide feedback on new platform features to engineering and product
Own Projects End to End
: Lead cross-functional product security projects from scoping through delivery, influencing product and engineering roadmaps and clearly communicating risk to both technical and non-technical stakeholders
Amplify our Impact
: Use code and automation as a lever to scale coverage and eliminate repetitive work. Build systems based on incentives and accountability rather than just bureaucratic process
Education, Experience, Knowledge, Skills, and Abilities
3+ years of experience in product security, application security, or secure software development
Can review code, automate tasks, and build security tooling in at least one modern programming language (e.g., Python, Go, Ruby, Java)
Hands-on experience with core application security practices — threat modeling, secure code review, and automated testing (SAST, DAST, SCA) — and a solid grasp of common vulnerability classes (e.g., OWASP Top 10)
Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product.
Bachelor's degree in engineering, computer science or relevant field, or equivalent practical experience
Bonus Points (Preferred but not required)
Previous experience with Bug Bounty or vulnerability disclosure programs
A background in building "paved roads" or secure-by-default internal libraries to eliminate entire classes of vulnerabilities
Hands-on experience securing cloud-native platforms and Infrastructure as Code (e.g., Terraform, AWS, GCP, Kubernetes, Docker)
Experience working within a fast-paced, high-growth security or SaaS company
Working Conditions and Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - remote, work-from-home 100% of the time
Culture
At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by
law.
Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here:
https://www.bugcrowd.com/privacy
.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at:
https://www.bugcrowd.com/about/careers/
Location: AU: Sydney (45 Clarence St); AU: Melbourne: (260 Burwood Rd); AU: Brisbane (243 Edward St)
Workplace: Hybrid
Senior Software Engineer, AI Enablement
The role & impact
You'll join a small team that builds the tools, platforms and best practices helping engineers across Xero work with AI. Rather than shipping something once and moving on, you'll own it end to end from early experimentation through to production, including the run books, monitoring and rollback thinking that keep it reliable once real engineers depend on it day to day.
This is a role with real influence. You'll help shape the technical direction of an internal skills marketplace and AI distribution platform used across the wider engineering organisation, work directly with vendors like AWS, Microsoft and GitHub on technology that isn't public yet, and help guide and challenge a team that's still early in its AI journey.
The team & how they connect
The AI Enablement team sits within Engineering Experience and focuses on helping product engineering teams work faster and better with AI through platforms, tooling and practical guidance rather than just standard tooling. It's a close-knit team, spread across Melbourne, Sydney and the Sunshine Coast, with a product manager based in Wellington, who stay connected through regular syncs and a genuinely collaborative way of working despite the distance.
Initially, you will focus on
- Our current stack is C#, .NET and AWS, with Python and TypeScript picked up along the way for AI tooling
- Building an internal skills marketplace and a distribution platform for AI tools used across Xero's engineering org
- Developing guidance and best practice for authoring agent skills, including agents for remediation tasks
- Collaborating directly with AWS, Microsoft and GitHub on early-access technology not yet available in market
Where and how you can work
You can be based anywhere in Australia, and we're also open to candidates based in New Zealand. The team works in a hybrid way and is used to connecting across time zones, with regular in person boost days to come together, plan and collaborate as a team.
Here are some of the things we're looking for, for this role
- You bring hands-on software engineering experience, ideally with C#, .NET and AWS — if your background is elsewhere, we're still keen to talk, as good engineers pick up new stacks quickly
- You've built internal tools or platforms that other engineers genuinely relied on
- Production discipline matters to you: You write runbooks, set up monitoring and think through rollback before anything goes live
- You communicate clearly and know how to bring people along with an idea, not just ship code quietly in the background
- You're curious about coding agents and AI-native tools, and you keep an eye on where AI engineering is heading
- You can challenge a decision directly and respectfully, and you learn new things in a structured, quality-focused way
Apply even if your experience isn't a perfect match! At Xero, we hire based on your skills, passion, and the unique perspective you can bring to enhance our culture and team.
Location: San Francisco; Remote (United States); Seattle; New York City
Perplexity serves hundreds of millions of queries a month. Every answer, every Perplexity Computer task, and every enterprise deployment runs on production infrastructure owned by the Cloud Infrastructure team: a fleet of Kubernetes clusters across a multi-account AWS estate, private networks that reach hyperscalers and the neoclouds serving our models, and the storage underneath our user data and agentic workloads. We're looking for SREs who treat reliability as a software problem. You'll own compute, networking, and storage at scale and keep production stable while everything built on top of it is changing fast.
RESPONSIBILITIES
- Own production at scale. Run the compute, networking, and storage foundation behind Perplexity's consumer, Computer, API, and enterprise products, and own its availability, latency, and cost.
- Run our Kubernetes fleet. Operate and upgrade the EKS clusters that host web services, search, datastores, and secure sandboxes. Tune scheduling, autoscaling, node lifecycle, DNS, and service networking so clusters stay healthy under bursty, fast-growing load.
- Engineer the network. Design and operate VPC architectures, Transit Gateway and PrivateLink connectivity, load balancing, DNS, and egress across accounts, regions, and cloud providers.
- Keep data durable and fast. Own the storage layer (EBS, S3, DynamoDB, and the managed databases and caches our services depend on), including performance, durability, backups, and restores that have actually been tested.
- Manage everything as code. Run infrastructure through Terraform and CI/CD. Build reusable modules and guardrails, and make every change reviewable, repeatable, and safe to roll back.
- Prepare for failures. Define SLOs, build alerts that someone can act on, design for zone and regional failure, and run game days and disaster-recovery exercises that prove recovery works.
- Lead incident response. Be on the critical path when things break. Drive incidents to resolution, write blameless postmortems, and land the fixes so the same failure never pages anyone twice.
- Scale ahead of demand. Own capacity planning, quotas, reservations, and cost efficiency so product launches and traffic spikes never wait on infrastructure.
- Automate away the toil. Build tooling, increasingly agent-driven, that turns provisioning, upgrades, and remediation into self-serve, hands-off workflows for every engineering team.
QUALIFICATIONS
We expect you to have real depth in most of these:
- Deep AWS expertise. You know VPC, IAM, EC2, EKS, ELB, Route 53, S3, EBS, etc. well past the console, including their limits, failure modes, and the bill that comes with them.
- Production Kubernetes at scale: cluster upgrades, CNI, CoreDNS, autoscalers like Karpenter, and debugging a misbehaving node at 3 a.m. Writing Helm charts alone doesn't count.
- Terraform mastery. You've designed module structures, managed state across many accounts, and run large refactors and imports without taking production down.
- Strong networking fundamentals (TCP/IP, DNS, TLS, load balancing, routing).
- You write real code in Python, Go, or Rust for automation, tooling, and controllers, and you'd rather automate a runbook than follow it.
- Fluency with observability tools like Datadog, Prometheus, or Grafana, and the judgment to turn metrics, logs, and traces into SLOs and alerts that matter.
- A track record of leading production incidents and turning root-cause analysis into durable fixes.
- You own problems end-to-end and do well when the path forward isn't laid out for you.
ADDITIONAL EXPERIENCE WE VALUE
- Multi-region active-active or failover architectures, and disaster-recovery programs with real recovery targets.
- Proxies, service meshes, and kernel-level networking: Envoy, Istio, Cilium, or eBPF.
- GitOps and progressive delivery: Argo CD, Flux, or similar.
- Enterprise and compliance environments: single-tenant or BYOC deployments, KMS/BYOK, SOC 2 or similar controls.
- Running stateful systems in production: Postgres, Redis, or search engines like Vespa or Elasticsearch.
- Multi-cloud or neocloud operations (GCP, CoreWeave, or similar).
- FinOps: cost attribution, Savings Plans and reservations, and making infrastructure cheaper without making it fragile.
Location: San Francisco; Remote (United States); Seattle; New York City
Perplexity serves hundreds of millions of queries a month. Every answer, every Perplexity Computer task, and every enterprise deployment runs on production infrastructure owned by the Cloud Infrastructure team: a fleet of Kubernetes clusters across a multi-account AWS estate, private networks that reach hyperscalers and the neoclouds serving our models, and the storage underneath our user data and agentic workloads. We're looking for SREs who treat reliability as a software problem. You'll own compute, networking, and storage at scale and keep production stable while everything built on top of it is changing fast.
RESPONSIBILITIES
- Own production at scale. Run the compute, networking, and storage foundation behind Perplexity's consumer, Computer, API, and enterprise products, and own its availability, latency, and cost.
- Run our Kubernetes fleet. Operate and upgrade the EKS clusters that host web services, search, datastores, and secure sandboxes. Tune scheduling, autoscaling, node lifecycle, DNS, and service networking so clusters stay healthy under bursty, fast-growing load.
- Engineer the network. Design and operate VPC architectures, Transit Gateway and PrivateLink connectivity, load balancing, DNS, and egress across accounts, regions, and cloud providers.
- Keep data durable and fast. Own the storage layer (EBS, S3, DynamoDB, and the managed databases and caches our services depend on), including performance, durability, backups, and restores that have actually been tested.
- Manage everything as code. Run infrastructure through Terraform and CI/CD. Build reusable modules and guardrails, and make every change reviewable, repeatable, and safe to roll back.
- Prepare for failures. Define SLOs, build alerts that someone can act on, design for zone and regional failure, and run game days and disaster-recovery exercises that prove recovery works.
- Lead incident response. Be on the critical path when things break. Drive incidents to resolution, write blameless postmortems, and land the fixes so the same failure never pages anyone twice.
- Scale ahead of demand. Own capacity planning, quotas, reservations, and cost efficiency so product launches and traffic spikes never wait on infrastructure.
- Automate away the toil. Build tooling, increasingly agent-driven, that turns provisioning, upgrades, and remediation into self-serve, hands-off workflows for every engineering team.
QUALIFICATIONS
We expect you to have real depth in most of these:
- Deep AWS expertise. You know VPC, IAM, EC2, EKS, ELB, Route 53, S3, EBS, etc. well past the console, including their limits, failure modes, and the bill that comes with them.
- Production Kubernetes at scale: cluster upgrades, CNI, CoreDNS, autoscalers like Karpenter, and debugging a misbehaving node at 3 a.m. Writing Helm charts alone doesn't count.
- Terraform mastery. You've designed module structures, managed state across many accounts, and run large refactors and imports without taking production down.
- Strong networking fundamentals (TCP/IP, DNS, TLS, load balancing, routing).
- You write real code in Python, Go, or Rust for automation, tooling, and controllers, and you'd rather automate a runbook than follow it.
- Fluency with observability tools like Datadog, Prometheus, or Grafana, and the judgment to turn metrics, logs, and traces into SLOs and alerts that matter.
- A track record of leading production incidents and turning root-cause analysis into durable fixes.
- You own problems end-to-end and do well when the path forward isn't laid out for you.
ADDITIONAL EXPERIENCE WE VALUE
- Multi-region active-active or failover architectures, and disaster-recovery programs with real recovery targets.
- Proxies, service meshes, and kernel-level networking: Envoy, Istio, Cilium, or eBPF.
- GitOps and progressive delivery: Argo CD, Flux, or similar.
- Enterprise and compliance environments: single-tenant or BYOC deployments, KMS/BYOK, SOC 2 or similar controls.
- Running stateful systems in production: Postgres, Redis, or search engines like Vespa or Elasticsearch.
- Multi-cloud or neocloud operations (GCP, CoreWeave, or similar).
- FinOps: cost attribution, Savings Plans and reservations, and making infrastructure cheaper without making it fragile.
Location: San Francisco; Remote (United States); Toronto; Seattle; New York City
Perplexity serves hundreds of millions of queries a month, and every one of them fans out into multiple AI inference requests running in real time. Behind that sits a large GPU fleet spread across several cloud providers. Today, our inference engineers and researchers build models while also managing networking, securing capacity, and operating the underlying GPU clusters, responsibilities we want a dedicated platform team to own. Your job is to take ownership of that infrastructure and hide its complexity behind a unified, self-serve platform for running training and inference workloads.
RESPONSIBILITIES
- Build a self-serve compute platform. Design and own the systems that let inference engineers and researchers launch training jobs and operate inference services without managing GPU provisioning, cluster configuration, or provider-specific infrastructure.
- Operate the GPU fleet. Own provisioning, lifecycle management, reliability, and capacity integration across providers, giving teams a consistent way to use compute regardless of where it runs.
- Solve for GPU scarcity. Build the scheduling and placement logic that finds available capacity across providers, packs it efficiently, and gets the right workload onto the right hardware under real constraints.
- Support two very different workloads. Keep long-running distributed training jobs healthy while simultaneously guaranteeing the availability and latency of production inference services on the same fleet.
- Own the Kubernetes for GPU orchestration. Write the operators and CRDs, and manage many clusters across providers so the platform behaves the same everywhere we run.
- Make failure boring. Build the fault tolerance, autoscaling, and observability that keep the fleet utilized and let workloads survive node loss, provider hiccups, and capacity shifts without human intervention.
- Set technical direction across teams. Partner with inference and cloud infrastructure engineers to turn operational constraints into a coherent platform architecture and roadmap.
QUALIFICATIONS
We expect you to have real depth in most of these:
- Deep Kubernetes experience — custom operators, CRDs, and multi-cluster federation, not just running kubectl apply.
- You've managed GPU clusters at scale: NVIDIA hardware, CUDA, and the networking that makes them fast (InfiniBand or RoCE).
- You've orchestrated compute across multiple clouds (CoreWeave, AWS, GCP, or similar) and understand how different each one really is.
- Strong distributed systems fundamentals: scheduling, resource allocation, and fault tolerance under load.
- You write infrastructure and systems-level code in Go, Rust or C++.
- You've supported both long-running training jobs and high-availability inference services, and you know why they pull infrastructure in opposite directions.
- You own problems end-to-end and do well when the path forward isn't laid out for you.
ADDITIONAL EXPERIENCE WE VALUE
- Inference serving stacks: vLLM, SGLang, or TensorRT-LLM.
- Slurm or other HPC schedulers.
- GPU kernel work in CUDA or Triton — not required, but notable.
- High-speed interconnects: InfiniBand, RoCE, or RDMA in production.
- Observability for ML workloads: Prometheus, Grafana, or Weights & Biases.
Location: San Francisco; Remote (United States); Toronto; Seattle; New York City
Perplexity serves hundreds of millions of queries a month, and every one of them fans out into multiple AI inference requests running in real time. Behind that sits a large GPU fleet spread across several cloud providers. Today, our inference engineers and researchers build models while also managing networking, securing capacity, and operating the underlying GPU clusters, responsibilities we want a dedicated platform team to own. Your job is to take ownership of that infrastructure and hide its complexity behind a unified, self-serve platform for running training and inference workloads.
RESPONSIBILITIES
- Build a self-serve compute platform. Design and own the systems that let inference engineers and researchers launch training jobs and operate inference services without managing GPU provisioning, cluster configuration, or provider-specific infrastructure.
- Operate the GPU fleet. Own provisioning, lifecycle management, reliability, and capacity integration across providers, giving teams a consistent way to use compute regardless of where it runs.
- Solve for GPU scarcity. Build the scheduling and placement logic that finds available capacity across providers, packs it efficiently, and gets the right workload onto the right hardware under real constraints.
- Support two very different workloads. Keep long-running distributed training jobs healthy while simultaneously guaranteeing the availability and latency of production inference services on the same fleet.
- Own the Kubernetes for GPU orchestration. Write the operators and CRDs, and manage many clusters across providers so the platform behaves the same everywhere we run.
- Make failure boring. Build the fault tolerance, autoscaling, and observability that keep the fleet utilized and let workloads survive node loss, provider hiccups, and capacity shifts without human intervention.
- Set technical direction across teams. Partner with inference and cloud infrastructure engineers to turn operational constraints into a coherent platform architecture and roadmap.
QUALIFICATIONS
We expect you to have real depth in most of these:
- Deep Kubernetes experience — custom operators, CRDs, and multi-cluster federation, not just running kubectl apply.
- You've managed GPU clusters at scale: NVIDIA hardware, CUDA, and the networking that makes them fast (InfiniBand or RoCE).
- You've orchestrated compute across multiple clouds (CoreWeave, AWS, GCP, or similar) and understand how different each one really is.
- Strong distributed systems fundamentals: scheduling, resource allocation, and fault tolerance under load.
- You write infrastructure and systems-level code in Go, Rust or C++.
- You've supported both long-running training jobs and high-availability inference services, and you know why they pull infrastructure in opposite directions.
- You own problems end-to-end and do well when the path forward isn't laid out for you.
ADDITIONAL EXPERIENCE WE VALUE
- Inference serving stacks: vLLM, SGLang, or TensorRT-LLM.
- Slurm or other HPC schedulers.
- GPU kernel work in CUDA or Triton — not required, but notable.
- High-speed interconnects: InfiniBand, RoCE, or RDMA in production.
- Observability for ML workloads: Prometheus, Grafana, or Weights & Biases.
Location: Morocco; Egypt
Intetics Inc. is a leading American technology company providing custom software application development, distributed professional teams creation, software product quality assessment, and “all-things-digital” solutions, is looking for a
Senior DevOps Engineer
to enrich its team with a skilled professional.
Responsibilities:
o Design and build resilient Cloud infrastructures that are protected against security threats
o Develop and assess Cloud security solutions to secure systems, databases, and networks
o Conduct assessment and make recommendations to ensure that appropriate controls are in place
o Gain insight into security incidents and threats by monitoring/analyzing logs and performing vulnerability assessments
o Participate in efforts that shape the company's security policies, procedures, and standards for use in Cloud environments
o Create technical and managerial level security reports for Cloud-based applications and infrastructure
o Implement and test network and security Disaster Recovery procedures to ensure business continuity
o Monitor the use of sensitive data and regulate access to safeguard information
o Ensure the confidentiality and integrity of data during transmission, storage, and processing
o Review violations of security procedures and discuss procedures with violators to ensure they are not repeated
o Provide support to end users regarding network and security-related issues
Requirements
o BSc/MSc in Information Security or any other related field o General experience of not less than 5 years in the DevOps field
o Minimum 2 years of working experience in Information Security, with a proven focus on Cloud Security
o Technical knowledge of Amazon Web Services (AWS)
o Proficiency with AWS services such as IAM, Organizations, SO, VPC, Transit Gateway, S3, EC2, RDS, ELB, CloudTrail, Config, Inspector, GuardDuty, WAF, etc.
o Clear understanding of current threats to Cloud infrastructure and advanced knowledge of securing such environments
o Expertise in DevSecOps methodologies is considered a plus
o Background building and deploying applications to the cloud (AWS, Azure, etc.) using Infrastructure as Code
o Ability to work autonomously with minimum supervision and to integrate well within a team
o Capability to quickly learn new technologies in depth
o Availability to work in CET timezone
Nice to Have:
o Code tools such as Terraform o Expertise in container security
o Proficiency with Microsoft Azure and Oracle Cloud
o Experience with IntelicsML
УдалённоseniorMorocco; Egypt; o Availability to work in CET timezone
Location: Remote, LATAM
About the company
Hi, we're Ondo Finance. Our mission is to provide institutional-grade, blockchain-enabled investment products and services. We have both a technology arm that develops decentralized finance technology, and an asset management arm that creates and manages tokenized funds. We are the global leader in tokenized treasuries, tokenized stocks and ETFs, and are building the future of institutional-grade financial services onchain.
Founded by folks from Goldman Sachs Digital Assets Team, we’re backed by some of the best investors in the world including Founders Fund, Coinbase Ventures, Pantera Capital, Tiger Global, and more. We are currently the leaders in the space in terms of AUM and are well capitalized to continue growing the firm. We're fully remote, with team members across the U.S.
About the role
We are looking for a commercially driven
Director, Business Development, Latin America
to lead Ondo’s institutional and strategic partnership growth across the region.
You will own the regional business development strategy and build relationships with banks, asset managers, brokerages, exchanges, wealth platforms, fintechs, custodians, family offices, and other institutional partners. You will identify the most attractive markets and opportunities, develop Ondo’s regional pipeline, and lead relationships from initial engagement through negotiation, launch, and expansion.
This is a senior, hands-on role requiring both strategic leadership and direct commercial execution. You will represent Ondo with senior decision makers, develop creative partnership and distribution models and navigate complex institutional sales cycles.
The ideal candidate combines a strong institutional network in Latin America with deep commercial judgment, regional market knowledge, and fluency in digital assets and financial services. They should understand how institutional clients evaluate new financial products and be able to position tokenized assets as credible solutions for investment, collateral, treasury management, distribution, and market access.
Fluency in both Spanish and Portuguese strongly preferred. The role will involve regular travel throughout Latin America.
Responsibilities
Define and execute Ondo’s institutional business development strategy across Latin America
Identify priority countries, client segments, distribution channels, and strategic opportunities across the region
Build senior relationships with banks, asset managers, brokerages, wealth platforms, exchanges, fintechs, custodians, family offices, and other institutional partners
Develop and manage a high-quality pipeline, progressing opportunities from initial engagement through commercial negotiation, contracting, launch, and expansion
Position Ondo’s tokenized products and infrastructure around the needs of institutional clients and regional markets
Structure distribution, integration, revenue-sharing, joint go-to-market, and other strategic partnership arrangements
Develop country-specific approaches that reflect local market structures, client needs, regulations, and adoption patterns
Partner with Product, Legal, Compliance, Engineering, Marketing, and Operations to develop and execute institutional opportunities
Provide regional market intelligence and client feedback to inform Ondo’s product, partnership, and go-to-market priorities
Represent Ondo at senior client meetings, conferences, industry events, and relevant policy discussions across Latin America
Establish clear regional goals, pipeline reporting, operating processes, and performance metrics
Build and lead a broader Latin American business development function as the region scales
Requirements
10+ years of experience in institutional business development, capital markets, asset management, banking, or digital assets
Strong network and track record of building institutional relationships across Latin America
Demonstrated success originating, negotiating, and closing complex, high-value commercial partnerships
Deep understanding of the Latin American financial-services landscape, including major institutions, distribution channels, market structures, and regional differences
Strong knowledge of digital assets, tokenization, stablecoins, blockchain infrastructure, or institutional crypto markets
Ability to translate complex financial and technical products into clear institutional use cases and commercial propositions
Excellent executive presence, communication, negotiation, and relationship-management skills
Strong strategic judgment combined with a willingness to operate hands-on across sourcing, pitching, negotiation, and execution
Ability to coordinate complex opportunities involving multiple internal and external stakeholders
Fluency in English, Spanish and Portuguese
Willingness to travel regularly throughout Latin America and collaborate across global time zones
Preferred Qualifications
Established relationships with banks, asset managers, brokerages, exchanges, fintechs, wealth platforms, or other relevant institutions in Brazil and Spanish-speaking Latin America
Experience with tokenized securities, stablecoins, treasury products, funds, capital markets, custody, or institutional trading infrastructure
Experience launching financial products or building new institutional markets across multiple Latin American countries
Familiarity with the regulatory and commercial environments of Brazil, Mexico, Argentina, Colombia, Chile, and other priority regional markets
What we offer
Competitive compensation including but not limited to salary, future token rights, and/or equity (according to your preferences) — We are well-funded and believe that great talent deserves great compensation.
Full benefits (medical, vision, and dental) and flexible vacation policy (PTO).
Remote-first team across many countries — You will be an early team member helping shape our vision, culture, and design practices.
A+ colleagues — Our team includes alumni from: Goldman Sachs, Blackrock, Two Sigma, Bridgewater, SpaceX, AWS, Meta, Google, McKinsey, Coinbase, Circle, Uniswap.
Best-in-class investors — We are proud to be backed by leading crypto experts and VCs, including Pantera Capital, Founders Fund and Coinbase Ventures.
Location: US, Remote
Workplace: Remote
The Luxor team has built a range of solutions for compute power, including a mining pool, custom firmware, an ASIC brokerage desk, Hashrate derivatives and compute to power CI and agents. We service clients across the globe. Our client base is growing rapidly and as such we are looking to expand our platform engineering team.
We're looking for a Senior Platform Security Engineer with strong expertise in security and compliance. You'll join Luxor AI's Platform team and own the entire area of security and compliance within the team's scope, contributing to building and running production infrastructure. This role is ideal for someone who has experienced how security and compliance operate within a large organization and now seeks the autonomy to evolve that function at a fast-growing startup. It will suit an individual energized by the importance of the data we protect and the reliability we provide to our clients.
This role will report directly to the Chief Technology Officer. This is a fully remote role based in U.S.A. with seldom travel if needed.
RESPONSIBILITIES
- Serve as a day-to-day security advisor for the team you support, advocating security requirements as an engineering team member during sprint planning, architecture reviews, process discussions, product direction, design decisions, and while work is in flight
- Build and maintain centralized automated security testing and enforcement in CI/CD, including static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), secrets scanning, and infrastructure-as-code (IaC) scanning
- Manage centralized cloud monitoring tooling for vulnerability and configuration management, and integrate ongoing patching and hardening into engineering operations
- Continually audit application environments and development processes to ensure compliance with internal and external requirements, and alignment with security standard methodologies
- Implement and maintain cloud detection and response monitoring, and act as an incident CIRT responder
- Document controls, configurations, and decisions to build durable institutional knowledge
- Enforce policies and detection using device management tooling (e.g. FleetMDM)
REQUIREMENTS
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience
- 8+ years of experience in DevOps, software engineering, or security engineering
- Proficiency with CI/CD platforms (e.g. GitHub Actions), infrastructure as code tools (e.g.,Terraform), and configuration management (e.g. Ansible)
- Proficiency in at least two of the following languages: Go, JavaScript, Rust, Python
- Hands-on cloud security experience in GCP, Alibaba, AWS, OVH, Hetzner and/or Azure, including identity and access management, containerization, network security controls, encryption, logging, and monitoring
- Harden access and controls (e.g. IAM Policy)
- Hands-on experience with Kubernetes GitOps (e.g. Flux, ArgoCD)
- Demonstrated experience implementing automated application and infrastructure security testing, secrets management, and policy-as-code enforcement
- Familiarity with penetration testing applications or experience conducting penetration testing engagements
- Strong scripting skills in Python, or Bash for automation and integration
- Experience supporting third-party attestations and audits (e.g., SOC 2 Type 2, ISO 27001), including preparation, implementation, and ongoing evidence collection
- Operated and maintained Zero Trust network infrastructures using Tailscale and Cloudflare WARP, providing direct technical support to users while managing access policies and troubleshooting remote connectivity issues.
- Deployed, configured, and administered SIEM (Security Information and Event Management).
- Strong communication and governance skills, with the ability to translate technical risk into business terms for technical and non-technical audiences, and to advocate for security without slowing down delivery
At Luxor we believe that meaningful contributions can be made by anyone. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Luxor welcomes all!
Luxor does not accept unsolicited headhunter and agency resumes. Luxor will not pay any third-party agency or company that does not have a signed agreement with Luxor.
HOW WE USE AI IN OUR HIRING PROCESS
We use AI tools to support certain parts of our hiring process, and we believe in being transparent about how they’re used.
During your application, AI may assist in reviewing CVs, qualifications, and assignments by providing additional insights, but it does not make decisions, every application is evaluated at each step by a member of our hiring team.
We also use AI to transcribe interviews so our team can stay focused on the conversation rather than note-taking. Any voice recordings are automatically deleted within 15 days.
In addition, AI helps us keep candidates informed about their application status and helps us understand how our process is working so we can improve it over time.
In all cases, AI is used to support efficiency and consistency, not to replace human judgment. If you have any questions about how we use these tools or your data, or if you would prefer to opt out of any of these features, please include them in the dedicated section of the application form, and we’ll follow up accordingly.
Москва; Санкт-Петербург
География найма не уточнена
seniorГеография найма не уточнена
seniorМосква
УдалённоRemote - Mexico
ГибридseniorAU: Sydney (45 Clarence St); AU: Melbourne: (260 Burwood Rd); AU: Brisbane (243 Edward St); You can be based anywhere in Australia, and we're also open to candidates based in New Zealand; The team works in a hybrid way and is used to connecting across time zones, with regular in person boost days to come together, plan and collaborate as a team
San Francisco; Remote (United States); Seattle; New York City
San Francisco; Remote (United States); Seattle; New York City
San Francisco; Remote (United States); Toronto; Seattle; New York City
San Francisco; Remote (United States); Toronto; Seattle; New York City
Зарплата не указана
УдалённоWillingness to travel regularly throughout Latin America and collaborate across global time zones
УдалённоUS, Remote; In addition, AI helps us keep candidates informed about their application status and helps us understand how our process is working so we can improve it over time