Вакансии

Ищем специалиста на стык платежей, AppSec и антифрода для аудита PSP, закрытия внутренних утечек (доступы, Confluence) и расследования фрод-инцидентов.

Location: San Francisco, CA Workplace: OnSite ABOUT US Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Sierra was co-founded by Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/ who first met while working together at Google over 20 years ago. Bret currently serves as Chairman of the Board of Open AI. Previously, he was co-CEO of Salesforce and CTO of Facebook. Clay spent 18 years at Google, where he most recently led Google Labs. WHAT YOU'LL DO - As Sierra's first Physical Security Lead, you will build and own our global physical security program from the ground up, protecting our people, offices, events, and information as we grow across North America, Europe, and Asia. You'll partner closely with Workplace Technology, IT Engineering, Workplace, Security Engineering, People, and Legal, and set the strategy, standards, and operating model for the function as it scales. - Program strategy and standards: Assess risk across every Sierra site and set a global baseline for physical security, including policies, standards, and site-tier requirements, prioritized into a practical roadmap with a budget and clear metrics. - Access control and security systems: Own the strategy and governance for badge access, video, intrusion detection, and visitor management, in partnership with Workplace Technology, who operate our office access and network systems. Make sure access follows least privilege, is reviewed regularly, and is removed promptly when people leave. Make sure these systems are monitored and have backup power. - Office openings and build-outs: Define security requirements for new offices and build-outs as we open new sites, and partner with Workplace, landlords, architects, and integrators from design through commissioning. - Sensitive spaces, insider risk, and threat assessment: Secure executive areas, boardrooms, and conference rooms where confidential customer and company discussions happen, including technical surveillance countermeasures (TSCM) sweeps, recording-device policies, and controls for hosting visitors and guests. Build a workplace violence prevention and behavioral threat assessment program with People and Legal, and partner with Security Engineering and IT Engineering on insider risk so that physical and digital signals are reviewed together. - Policy, compliance, and customer trust: Own Sierra's Physical Security Policy and the physical controls behind our compliance programs. Represent physical security in customer security assessments and audits, and drive findings to closure. - Incident response and emergency preparedness: Own physical security incident response, investigations, and emergency plans for every office. Run drills and tabletop exercises, and set up monitoring and escalation through an in-house function or a GSOC partner. Issue safety advisories and coordinate with building security and local authorities when employees are at risk near our offices. - Events, executives, and travel: Plan security for all-hands meetings, customer events, and off-sites. Coordinate executive protection and travel risk management with trusted vendors, and own guard and security services contracts across our sites, including post orders, staffing, and performance. WHAT YOU'LL BRING - Experience: 8+ years in corporate physical security, global security, or security operations, including building or substantially scaling a program at a fast-growing technology company. Law enforcement, military, or government experience is valued alongside corporate experience. - Program building: A track record of standing up a physical security function at an early stage, including policies, vendors, budget, metrics, and team, with sound judgment about what to tackle first. - Security systems: Hands-on experience with modern, cloud-based access control, video, and visitor management platforms (for example Verkada, Brivo, Avigilon Alta, Genetec, or Envoy), and how they integrate with identity systems such as Okta. - Risk and threat assessment: Experience conducting site risk assessments, threat assessments, and investigations, and handling sensitive matters with discretion alongside People and Legal teams. - Incident leadership: Calm, decisive leadership during incidents and emergencies, including serving as incident lead and running after-action reviews. - Multi-site and international: Experience securing offices across multiple regions, including Europe and Asia, and managing guard, integrator, and executive protection vendors. - Partnership and communication: Able to build security programs that employees welcome rather than work around, and to explain risk clearly to executives, engineers, and building partners. - Work model: This role is based in our San Francisco office, with regular travel to our other offices. EVEN BETTER… - Professional certifications such as ASIS PSP or CPP. - Experience running TSCM programs or protecting sensitive R&D or AI research environments. - Experience with GSOC operations, mass notification, or travel risk management platforms. OUR VALUES - Trust: We build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work. - Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it. - Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn’t right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve. - Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time. - Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company for parents. We support and respect each other and celebrate each other’s personal and professional achievements. WHAT WE OFFER We want our benefits to reflect our values and offer the following to full-time employees: - Flexible (unlimited) paid time off - Medical, dental, and vision benefits for you and your family - Life insurance and disability benefits - Retirement plan dependent on country of employment - Parental leave - Fertility and family building benefits - Lunch, as well as delicious snacks and coffee to keep you energized when working onsite - Discretionary benefit stipend giving people the ability to spend where it matters most - Free alphorn lessons These benefits are further detailed in Sierra's policies, may vary by region and employment type, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full-time employees can participate in Sierra's equity plans subject to the terms of the applicable plans and policies. BE YOU, WITH US We're working to bring the transformative power of AI to every organization in the world. To do so, it is important to us that the diversity of our employees represents the diversity of our customers. We believe that our work and culture are better when we encourage, support, and respect different skills and experiences represented within our team. We encourage you to apply through the link on this page even if your experience doesn't precisely match the job description. Sierra is a proud equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by applicable federal, state or local laws, including veteran status and disability status. Hiring decisions are made by people, based on merit. If you need a reasonable accommodation for a disability, a religious practice, pregnancy or any related condition at any point in the application or interview process, contact us at accommodations@sierra.ai. Requests are handled confidentially and do not affect your candidacy. We will consider qualified applicants with arrest and conviction records in accordance with applicable fair chance laws.

Location: United States About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role We are looking for a Site Security Manager to lead physical security operations for the Nebius San Francisco office. You will own the day-to-day security posture of the site, protect employees, visitors, assets and infrastructure, and make sure local practices are robust, compliant and aligned with Nebius corporate standards. This is a hands-on leadership role for someone who can set clear processes, manage vendors and front-desk security personnel, and respond calmly and decisively when incidents occur. You will be the local owner of physical security: the person who turns standards into daily practice, protects people and assets, and keeps the site ready for both routine operations and unexpected events. Your responsibilities will include: Lead day-to-day physical security operations at the Nebius San Francisco office, maintaining a safe, secure and professional environment for employees, visitors and company assets. Develop,implement and continuously improve site-specific security policies, procedures and training for the San Francisco office, aligned with Nebius corporate standards and applicable U.S., California and San Francisco requirements. Monitor and manage CCTV, alarm systems and access-control processes, ensuring reliable operation, clear escalation routes and timely response to potential threats. Conduct regular risk assessments, site reviews and physical-security checks; identify vulnerabilities and drive corrective actions to completion. Serve as the primary local liaison with local law enforcement, emergency services, building management and other relevant authorities during incidents,emergencies or crises. Lead investigations into security breaches and incidents, document findings clearly, and implement corrective and preventive actions. Manage relationships with external security vendors and contractors, setting expectations and ensuring high- quality service delivery. Direct, brief and coach front-desk security personnel on-site so that security standards are applied consistently and professionally. Partner with Facilities, IT, People, Legal/Complianceand site leadership to keep local practices aligned with company-wide security, safety and business-continuity expectations. How you will make an impact: How you will make an impact: Build a site-security operation that is disciplined, reliable and easy for employees and visitors to navigate. 2 Raise risks early, communicate clearly and help the business move quickly without compromising safety or control. Create a strong local security culture through visible leadership, practicaltraining and consistent standards. We expect you to have: Proven experience managing physical security operations, preferably in largecorporate, technology, critical-infrastructure or governmental environments. Strong leadership, communication and interpersonal skills, with the ability to manage vendors, contractors and diverse on-site teams. Solid knowledge of physical-security principles, risk management, emergency response and applicable U.S.,California and San Francisco requirements. Hands-on experience with security technologies, including surveillance systems, CCTV, alarmsystems and access-control platforms. Excellent analytical and problem-solving ability, with the judgment to assess risk, prioritize remediation and implement effective solutions. Calm, credible decision-making under pressure, especially during emergencies, incidents or sensitive investigations. Clear documentation and reporting skills, including incident reports, risk summaries, findings and corrective- action plans. Key employee benefits in the US: Health insurance: 100% company-paid medical, dental, and vision coverage for employees and families. 401(k) plan: Up to 4% company match with immediate vesting. Parental leave: 20 weeks paid for primary caregivers, 12 weeks for secondary caregivers. Remote work reimbursement: Up to $85/month for mobile and internet. Disability & life insurance : Company-paid short-term, long-term and life insurance coverage. Pay Transparency We offer competitive compensation and benefits packages. Actual compensation will be determined based on job-related factors, including experience, skills, qualifications, the level at which the candidate is hired, and geographic location, consistent with applicable law. Base Compensation Range $107,100 — $133,800 USD Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: Strasbourg, France We currently have a vacancy for a Security Architect in English, to offer his/her services as an expert who will be based in Strasbourg, France . The work will be carried out either in the company’s premises or on site at customer premises. In the context of the first assignment, the successful candidate will be integrated in the Development team of the company that will closely cooperate with a major client’s IT team on site. Tasks: Designed and developed secure IT architectures aligned with organisational strategies and security requirements; Defined security, business continuity, and privacy requirements for IT systems and applications; Applied Security by Design, Privacy by Design, and Zero Trust principles; Designed security architectures for on-premises, cloud, and hybrid environments; Assessed security requirements for networks, applications, endpoints, mobile devices, and data centres; Produced security architecture documentation, technical specifications, and design guidelines; Presented security architecture designs and recommendations to stakeholders; Integrated security controls throughout the Software Development Lifecycle (SDLC); Coordinated the development, integration, and maintenance of cybersecurity solutions; Conducted security assessments, architecture reviews, and risk evaluations; Ensured compliance with security policies, standards, and certification requirements; Evaluated the impact of security solutions on system performance and architecture; Adapted security architectures to emerging threats and evolving business needs; Identified and resolved security vulnerabilities and architecture-related issues; Collaborated with technical teams to ensure secure and resilient IT solutions. Requirements University degree in IT or relevant discipline, combined with minimum 8 years of professional experience in software systems security, cybersecurity and information security practices; Experience in analysing business, user and cybersecurity requirements; Experience in defining security, business continuity, and privacy requirements; Experience in designing and implementing cybersecurity controls and solutions; Experience in designing secure IT architectures and developing architectural and functional specifications; Experience with security architecture reference models and secure development lifecycle (SDLC) practices; Experience in cloud security technologies and on-premises security architectures; Experience in integrating security solutions and ensuring architectural resilience and business continuity; Experience in selecting appropriate security specifications, procedures, and controls; Excellent knowledge of Security by Design, Privacy by Design, Secure by Default and Zero Trust Architecture principles; Knowledge of Privacy-Enhancing Technologies (PETs) and data protection principles; Relevant cybersecurity certifications and knowledge of industry best practices would be preferred; Excellent command of the English language. Benefits If you are seeking a career in an exciting and dynamic company, where you will offer your services as part of a team of a major European Institution, operating in an international, multilingual and multicultural environment where you can expect real chances to make a difference, please send us your detailed CV in English. We offer a competitive remuneration (either on contract basis or remuneration with full benefits package), based on qualifications and experience. All applications will be treated as confidential. You may also consider all our other open vacancies by visiting the career section of our web site ( www.eurodyn.com) and follow us on Twitter (@EURODYN_Careers) and LinkedIn. EUROPEAN DYNAMICS ( www.eurodyn.com ) is a leading Software, Information and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Stockholm, London, Nicosia, Hong-Kong, Valetta, etc). The company employs over 1000 engineers, IT experts and consultants (around 3% PhD, 36% MSc and 53% BSc or equivalent). We design and develop software applications using state-of-the-art technology. The group generates annual revenues in the range of EURO 40 million, with an EBITDA in the range of 20%. The value of our contract portfolio exceeds EURO 300 million. EUROPEAN DYNAMICS is a renowned supplier of IT services to government institutions, multinational corporations, public administrations and multinational companies, research and academic institutes. As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published in www.eurodyn.com/privacy. By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorize ED to process your personal data for the purposes of the company's recruitment opportunities, in line to the Policy.

Location: Remote (Ukraine) Workplace: remote ELEKS Information Security Office is looking for a Security Operations Supervisor in Lviv, Ternopil, Kyiv, or Ivano-Frankivsk. Security Operations Supervisor is responsible for designing, implementing and maintenance of ELEKS Security Operations Center (SOC) and related ISMS processes. Specifically, Security Operations Supervisor objective is to ensure efficient execution of Incident Management, Threat Intelligence, Vulnerability Management and Patch Management activities. REQUIREMENTS Working experience in architecture, design and implementation of security systems and countermeasures (e.g. SIEM, EDR, DLP, UEBA, IDS/IPS, vulnerability scanners, anti-virus and anti-malware, firewalls, encryption) Knowledge of Security Operation Center processes, ability to perform supervision of SOC and perform continuous improvement of its operations Working experience in planning and conducting of technical security audits. Knowledge of Information Security (IS) standards/frameworks (ISO 27001/2, SOC2, Cyber Essentials, PCI DSS, HiTrust), ability to establish IS processes in line with these standards Network architecture, security principles, technologies, and tools Detailed technical knowledge of Windows and UNIX operating systems Virtualization technologies and security Identity and access management principles and technologies Subnetting, DNS,DHCP, VPNs, VLANs, VoIP and other network routing methods Network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, etc.) Solid knowledge of secure coding practices, application security and cryptography technologies, ethical hacking, threat modeling, secure SDLC process Solid knowledge of disaster recovery and business continuity planning Strong analytical and conceptual skills balanced by broad perspective on how security efforts to support realization of business goals and customer satisfaction Proven leadership capabilities and strong communication and interpersonal skills English – upper-intermediate or higher RESPONSIBILITIES Develop and maintain short- and long-term goals and objectives for ELEKS Security Operations Center aligned with Information Security goals Define activities and projects supporting continuous improvement of ELEKS Security Operations Center, addressing the IS gaps identified and enhancing ELEKS security overall Evaluate new technologies and processes that enhance security capabilities. Design, architect, test, analyze, evaluate and implement new security systems and processes Perform program and project management activities to ensure successful execution of ISMS projects assigned. Coordinate the development and review of ISMS policies relevant to SOC activities and other supporting documents, such as Hardening Baselines, IS standards/procedures Effectively inform stakeholders about the status of the ELEKS information security posture. Perform periodic security reporting (both: executive and technical) Coordinate handling of the information security incidents, coordinate investigation activities, communicate with clients and, if needed, escalate to ELEKS senior management, and contact authorities (Police, CERT-UA, etc.) Plan, control, and perform installation, configuration, technical support and administration of security systems and countermeasures (e.g. SIEM, EDR, DLP, UEBA, IDS/IPS, vulnerability scanners, anti-virus and anti-malware, firewalls, encryption) Supervise and perform system hardening, security testing, and vulnerability management Prevent, detect, investigate and respond to cyber threats for the organization’s assets Build and establish plans and controls to protect digital files and information systems against unauthorized access, modification and/or destruction Coordinate configuration, management and running the phishing simulation campaigns Plan, manage and optimize the capacity of ELEKS SOC Provide leadership, training and technical advice to SOC team. Identify/address training and career development needs, provide feedback and conduct performance assessment of subordinates Management of access rights for SOC by participation in approval, review, and removal of access rights (in case of specialist termination, role change and on a regular basis as per Access Control Policy) Resolve security incidents within the SOC team and, if necessary, perform disciplinary actions in conjunction with HR team

Location: Paris Workplace: Hybrid HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. ⭐ SECURITY ASSOCIATE INTERNSHIP ⭐ Six-month end-of-studies internship in Paris. Looking for an end-of-studies internship where you do real cybersecurity work, not a side project nobody uses? Alan protects the health data of more than 1M members, and keeping it safe is part of everyday work here. You join the Security team as a full member for six months. Topics span from compliance and certifications to vulnerabilities, detection and incident response, and you have room to pick the ones where you can have the most impact. A dedicated coach guides you and supervises your thesis. The goal at the end is a full-time job at Alan. ⭐ DETAILED MISSIONS ⭐ Alan is opening new countries, and each one brings more audits, certifications and customer security reviews. Possible topics span from governance and compliance to hands-on technical work. You won't do all of them: with your coach, you choose the ones that matter most for Alan and for you. - Governance, risk and compliance: ISO 27001 and HDS (French health data hosting) certifications, statutory IT audit, customer security reviews, risk management - Vulnerability management: triage reports and scanner findings, drive fixes with engineering teams, improve our tooling - Detection and response: write detection rules, investigate alerts, support the team on incidents - Build: technical projects you own from framing to adoption. Past projects: an internal pentest for an audit, code scanning and remediation, an HDS internal audit, tooling proofs of concept - Automate what repeats, so the team spends its time where the risk is ⭐ KEY OUTCOMES ⭐ By the end of the internship, you will have: - Owned a recurring security campaign end to end and left it cheaper for the next round - Shipped one technical project to real users - Written your end-of-studies thesis on a real security subject - Worked with engineers and senior people across the company ⭐ PROFILE & COMPETENCIES ⭐ - End of studies: engineering or security track, looking for a six-month internship - Security foundations: solid basics in security and IT, and you can apply them to a concrete case - You code: Python at least, and you automate the repetitive part - Curiosity: you dig into topics you don't master yet, and you are curious about compliance, not only offensive security - Risk sense: you know not every risk is equal, and some trade-offs are worth taking - Collaboration: you work with engineers, not against them, and look for solutions that work for both sides - Clear communication: structured and written, in English (French is a plus) - Bonus: CTFs, personal security projects, a previous security internship, cloud or SaaS experience 🙌 PERKS & BENEFITS https://alan.com/about/life-at-alan/a/perks At Alan, we believe that being in good health is a basic need, and it starts with our employees. This is why Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. Therefore, we offer: - Flexible Office. Amazing office space at our HQ, sponsored co-working hubs or a full-remote experience with home office equipment sponsorship, we want you to live where you’re the happiest. - All the tools you need. Top of the range equipment: Macbook Pro, keyboard, laptop stand, monitor, and Bose noise-canceling headphones. - Flexible vacation policy and flexible working hours. Organize your time as you wish. - Transport. Country-specific commuter benefits. - Learning & Training opportunities. A highly flexible Training policy free books and budget to attend and speak at conferences if the opportunity arises. - Personal growth through coaching: At Alan, coaching isn't just a perk - it's core to who we are. Every Alaner is paired with a dedicated coach from day one, who helps maximize their impact, nurture engagement, and navigate Alan's values to develop their full potential. Learn more about our coaching culture https://alan.com/en/blog/discover-alan/a/alan-culture-excellence-through-coaching.   IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply as it can only bring learnings or success. If you identify yourself as a woman: Did you know that research shows women often apply only when meeting 100% of requirements? Remember, this is just a guide, not a checklist. We'll be thrilled to receive your application! 🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info.

We’re looking for an experienced Cybersecurity Specialist to protect and strengthen the company’s infrastructure, networks, cloud services, and web applications. We’re looking for a hands-on professional who can independently assess risks, investigate security incidents, implement Zero Trust solutions, and ensure the security of critical infrastructure.

• Развивать Microsoft Purview: классификацию данных, sensitivity labels и retention policies; • Проектировать DLP-политики для Microsoft 365, устройств и облачных сред;

Location: Remote, Massachusetts, United States, AMER From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About Us Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites. About the Role Fivetran + dbt  is seeking a Manager of Security Operations, Incident Detection and Response, to bolster and improve the robustness and security of the platform and the entire enterprise. This people-leadership role is hands-on and execution-focused, requiring deep expertise in security operations, incident detection and response, AI-driven security automation, and securing multi-tenant SaaS environments. You'll build and lead a high-performing team, own the detection and response technology stack, and serve as the accountable leader for incident response across the entire enterprise, ensuring threats are detected, contained, and remediated quickly from endpoint to cloud to production. This is a full-time remote position based out of the US (EST Time Zone). Technologies You’ll Use Crowdstrike, Okta, Google Workspace, Wiz, Open Source, Notion, JIRA What You’ll Do People Leadership: Lead, mentor, and develop a team of detection and response engineers and analysts. Set clear goals, manage performance, and grow careers while fostering a culture of ownership, curiosity, and urgency. Hiring & Team Building: Recruit, hire, and onboard top security talent. Define team structure, roles, on-call rotations, and hiring plans to scale the team alongside the business. Enterprise Incident Response: Own the incident response program for the entire enterprise, including investigation, containment, eradication, remediation, and post-incident review. Act as incident commander for major security events and coordinate with Legal, Privacy, Communications, and executive leadership. Detection Engineering: Build, optimize, and maintain high-fidelity detections across cloud, identity, endpoint, SaaS, and application layers, using threat-informed approaches such as MITRE ATT&CK to close coverage gaps. AI-Driven Security Operations: Drive the adoption of AI, including LLMs and AI agents, to automate alert triage, enrichment, investigation, and response. Evaluate and integrate AI capabilities to scale the team, and build detections for threats targeting AI systems and AI usage across the enterprise. Multi-Tenant SaaS Security: Design detection and response strategies tailored to a multi-tenant SaaS platform, including tenant isolation, cross-tenant access, and customer data protection. Lead customer-impacting incident response and coordinate customer notifications. Security Technology Ownership: Own the security operations technology stack, including SIEM, SOAR, EDR/XDR, cloud detection and response, and log pipelines. Manage the roadmap, budget, and vendor relationships. Threat Hunting & Intelligence: Lead proactive threat hunting and integrate threat intelligence to identify and mitigate emerging threats before they impact the business. Cross-Team Collaboration: Work directly with engineering, infrastructure, IT, application security, and GRC teams to integrate detection and response practices and remediate risks across build pipelines, runtime environments, and corporate systems. Tooling & Automation: Develop and maintain automation, playbooks, and integrations to streamline security processes and provide self-service security tools to the organization. Security Standards & Metrics: Implement consistent security controls, monitoring, and alerting across the enterprise. Define and report on key metrics such as mean time to detect (MTTD) and mean time to respond (MTTR), and support compliance requirements. Knowledge Sharing: Stay up to date with trends in security operations, incident response, cloud security, and AI security, applying this knowledge to improve the Fivetran platform's security posture. Skills We’re Looking For Security Operations & Incident Response Expertise: Deep expertise in detecting, investigating, and responding to security incidents, with a track record of leading enterprise-wide incident response. People Management: Proven experience managing, hiring, and developing security teams, including setting priorities, managing performance, and building a strong team culture. Multi-Tenant SaaS Experience: Extensive experience securing and responding to incidents in multi-tenant SaaS environments at scale, with a strong understanding of tenant isolation and customer data protection. AI Proficiency: Hands-on experience applying AI, including LLMs and AI agents, to security operations to automate detection, triage, and response, and a strong understanding of the risks AI introduces. Cloud & Infrastructure Security: Strong experience with cloud platforms (e.g., AWS, GCP, Azure), Kubernetes, and containerized environments, including cloud-native logging and detection. Detection & Response Tooling: Proficiency with SIEM, SOAR, EDR/XDR, identity, and cloud detection tools, and experience integrating them into automated workflows. Technology Ownership: Experience owning a security technology roadmap, including tool selection, budgets, and vendor management. Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to make sound decisions under pressure in fast-paced environments. Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams, and to communicate clearly with executives and customers during incidents. Curiosity & Urgency: Demonstrates strong curiosity, a sense of urgency, and a hands-on approach to diving deep into complex technical problems to drive timely and effective solutions. #LI-Remote #LI-AM1 The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role.  Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process. Pay Range $186,701 — $233,376 USD Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.

Location: Remote, New York, United States, AMER From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About Us Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites. About the Role Fivetran + dbt  is seeking a Manager of Security Operations, Incident Detection and Response, to bolster and improve the robustness and security of the platform and the entire enterprise. This people-leadership role is hands-on and execution-focused, requiring deep expertise in security operations, incident detection and response, AI-driven security automation, and securing multi-tenant SaaS environments. You'll build and lead a high-performing team, own the detection and response technology stack, and serve as the accountable leader for incident response across the entire enterprise, ensuring threats are detected, contained, and remediated quickly from endpoint to cloud to production. This is a full-time remote position based out of the US (EST Time Zone). Technologies You’ll Use Crowdstrike, Okta, Google Workspace, Wiz, Open Source, Notion, JIRA What You’ll Do People Leadership: Lead, mentor, and develop a team of detection and response engineers and analysts. Set clear goals, manage performance, and grow careers while fostering a culture of ownership, curiosity, and urgency. Hiring & Team Building: Recruit, hire, and onboard top security talent. Define team structure, roles, on-call rotations, and hiring plans to scale the team alongside the business. Enterprise Incident Response: Own the incident response program for the entire enterprise, including investigation, containment, eradication, remediation, and post-incident review. Act as incident commander for major security events and coordinate with Legal, Privacy, Communications, and executive leadership. Detection Engineering: Build, optimize, and maintain high-fidelity detections across cloud, identity, endpoint, SaaS, and application layers, using threat-informed approaches such as MITRE ATT&CK to close coverage gaps. AI-Driven Security Operations: Drive the adoption of AI, including LLMs and AI agents, to automate alert triage, enrichment, investigation, and response. Evaluate and integrate AI capabilities to scale the team, and build detections for threats targeting AI systems and AI usage across the enterprise. Multi-Tenant SaaS Security: Design detection and response strategies tailored to a multi-tenant SaaS platform, including tenant isolation, cross-tenant access, and customer data protection. Lead customer-impacting incident response and coordinate customer notifications. Security Technology Ownership: Own the security operations technology stack, including SIEM, SOAR, EDR/XDR, cloud detection and response, and log pipelines. Manage the roadmap, budget, and vendor relationships. Threat Hunting & Intelligence: Lead proactive threat hunting and integrate threat intelligence to identify and mitigate emerging threats before they impact the business. Cross-Team Collaboration: Work directly with engineering, infrastructure, IT, application security, and GRC teams to integrate detection and response practices and remediate risks across build pipelines, runtime environments, and corporate systems. Tooling & Automation: Develop and maintain automation, playbooks, and integrations to streamline security processes and provide self-service security tools to the organization. Security Standards & Metrics: Implement consistent security controls, monitoring, and alerting across the enterprise. Define and report on key metrics such as mean time to detect (MTTD) and mean time to respond (MTTR), and support compliance requirements. Knowledge Sharing: Stay up to date with trends in security operations, incident response, cloud security, and AI security, applying this knowledge to improve the Fivetran platform's security posture. Skills We’re Looking For Security Operations & Incident Response Expertise: Deep expertise in detecting, investigating, and responding to security incidents, with a track record of leading enterprise-wide incident response. People Management: Proven experience managing, hiring, and developing security teams, including setting priorities, managing performance, and building a strong team culture. Multi-Tenant SaaS Experience: Extensive experience securing and responding to incidents in multi-tenant SaaS environments at scale, with a strong understanding of tenant isolation and customer data protection. AI Proficiency: Hands-on experience applying AI, including LLMs and AI agents, to security operations to automate detection, triage, and response, and a strong understanding of the risks AI introduces. Cloud & Infrastructure Security: Strong experience with cloud platforms (e.g., AWS, GCP, Azure), Kubernetes, and containerized environments, including cloud-native logging and detection. Detection & Response Tooling: Proficiency with SIEM, SOAR, EDR/XDR, identity, and cloud detection tools, and experience integrating them into automated workflows. Technology Ownership: Experience owning a security technology roadmap, including tool selection, budgets, and vendor management. Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to make sound decisions under pressure in fast-paced environments. Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams, and to communicate clearly with executives and customers during incidents. Curiosity & Urgency: Demonstrates strong curiosity, a sense of urgency, and a hands-on approach to diving deep into complex technical problems to drive timely and effective solutions. #LI-Remote #LI-AM1 The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role.  Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process. Pay Range $186,701 — $233,376 USD Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.

Location: London Workplace: OnSite Company Description We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started. ROLE OVERVIEW As a Junior Application Security Analyst in the Information Security team, you will help secure Checkout.com http://Checkout.com’s software applications throughout the Secure Software Development Lifecycle (SSDLC). You will work closely with developers and product teams to integrate security early in the development process, identify and oversee the remediation of vulnerabilities, and ensure adherence to secure coding practices and application security standards. This role focuses on practical, hands-on security support while also growing your expertise in application security.   KEY RESPONSIBILITIES SSDLC & Secure Coding - Assist in integrating security controls into the SSDLC. - Support the creation and maintenance of secure coding guidelines (e.g., OWASP Top 10, CERT Secure Coding Standards). Application Security Testing - Run a Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans. - Conduct API security testing. - Support CI/CD pipelines to keep secure and effective integration. THREAT MODELING & APPLICATION SECURITY ANALYSIS - Participate in threat modeling sessions. - Document identified threats, assess risks and provide mitigation recommendations. - Assist in code and system reviews to analyse security in company’s products. VULNERABILITY MANAGEMENT - Triage and prioritise vulnerabilities from automated scans. - Track, verify and ensure security flaws remediation. - Assist to automate an AppSec pipelines COLLABORATION & AWARENESS - Collaborate with engineering teams to integrate security into product design and improve existing systems. - Help deliver training and awareness on SSDLC best practices and secure coding. - Contribute to security documentations. REQUIRED SKILLS & EXPERIENCE - 1–3 years in application security, secure software development, or related IT/security role. - Understand basic network technologies and protocols (HTTP, TCP/IP, DNS and the OSI model). - Understanding of common software vulnerabilities and their mitigations. - Basic programming experience in a popular language (e.g., Python, JavaScript, Golang). - Understanding of CI/CD pipelines and DevSecOps principles. - Basic understanding of cloud technologies (AWS, GCP or Azure) and GitHub security features. - Strong attention to detail in documentation and assessments. PREFERRED - Familiarity with SAST/DAST/SCA tools and API security testing platforms. - Exposure to cloud-native application security (AWS, Azure, GCP). - Understanding of container security (Docker, Kubernetes). - Experience of participating in Capture The Flag (CTF) competitions. KEY COMPETENCIES - Eager to learn and expand technical skills in application security. - Effective communicator with both technical and non-technical audiences. - Collaborative and proactive problem solver. - Ability to prioritise work. Additional Information Bring all of you to work We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands. We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here. It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. Life at Checkout.com http://Checkout.com We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Location: New York; Florida; Massachusetts; Virginia; Georgia; Pennsylvania Workplace: Remote About Chainalysis Blockchain technology is powering a growing wave of innovation. Businesses and governments around the world are using blockchains to make banking more efficient, connect with their customers, and investigate criminal cases. As adoption of blockchain technology grows, more and more organizations seek access to all this ecosystem has to offer. That’s where Chainalysis comes in. We provide complete knowledge of what’s happening on blockchains through our data, services, and solutions. With Chainalysis, organizations can navigate blockchains safely and with confidence. About the team Product Security at Chainalysis keeps our SaaS platform — used by governments, banks, and crypto exchanges to investigate financial crime — secure by design. We partner directly with product and platform engineering on threat modeling, design reviews, penetration testing, and remediation of findings across our AWS and Kubernetes estate. As a Senior Security Engineer, Infrastructure, you’ll help secure and operate the cloud and Kubernetes environments that support Chainalysis products and our Hosted AI Platform (HAIP). You’ll combine production operations with practical security engineering: responding to platform alerts, troubleshooting infrastructure, and shipping guardrails and improvements through Terraform and Kubernetes. You’ll work closely with Infrastructure Security, Platform Engineering, AI Core, and other engineering partners to address risks at their source and make secure, reliable infrastructure easier to operate. This is a hands-on engineering role for someone who is comfortable in a terminal, has supported production systems, and can take an infrastructure issue from investigation through resolution. In this role, you’ll: - Troubleshoot Kubernetes workloads and cloud services, investigating pod health, logs, errors, latency, and upstream provider issues to find root causes. - Ship reviewed Terraform and Kubernetes changes that strengthen HAIP and broader cloud infrastructure security and reliability. - Improve AWS and edge/network controls—including IAM, networking, secrets, encryption, logging, and Cloudflare—and reduce recurring misconfigurations through reusable patterns and runbooks. - Use Python or similar scripting, monitoring improvements, and cross-team partnership to automate operational work and drive fixes through to completion. - Participate in the AI Product on-call rotation, triage production alerts, communicate clearly, and escalate when needed. We’re looking for candidates who have: - Production cloud infrastructure experience, preferably in AWS, plus working knowledge of security controls such as IAM, networking, secrets, encryption, or logging. - Hands-on production Kubernetes experience: inspect workloads, read logs, and troubleshoot failures using command-line tools. - Experience authoring Terraform changes that have been reviewed and deployed to production; comfort shipping changes through Git and pull requests. - Production on-call or incident-response experience, including alert investigation, clear communication, and sound escalation judgment. - Python or similar scripting ability, familiarity with monitoring/logging tools - Experience working with stakeholders across the R&D organization to collaborate and resolve security issues with urgency and a team-first approach. NICE TO HAVE: - Experience operating AI/ML infrastructure, LLM platforms, or services integrating with model providers; familiarity with AI gateway concepts such as model routing or quotas. - Experience with Cloudflare or other edge/network security controls. - Exposure to cloud security posture management tools such as Wiz, Prisma Cloud, or Orca. - Experience with GitOps tools such as Argo CD or Flux. - Familiarity with blockchain, crypto, fintech, or regtech infrastructure. TECHNOLOGIES WE USE: - Cloud and containers: AWS, GCP, Kubernetes (EKS/GKE) - Infrastructure-as-Code: Terraform - Security tooling: Wiz, SonarCloud, Burp, Cloudflare - CI/CD and source control: GitHub, GitHub Actions, Artifactory and related build/deploy tooling - Languages and scripting: Java, JavaScript, Python, Go - AI Coding Agents, Tooling, Systems AI at Chainalysis AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it. AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before. About Chainalysis Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation. You belong here.  At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture. We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here https://go.chainalysis.com/rs/503-FAP-074/images/Interview%20Accommodations%20Request.pdf. We can’t wait to meet you.

Location: Remote - Brazil Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . Job Summary At Bugcrowd, we handle application security assessment at an epic scale. As an Application Security Engineer (ASE) you will curate and manage the incoming security vulnerability submissions to some of the world’s biggest companies’ bug bounty programs. Here are just a few of the reasons why we are the best: A tenure at Bugcrowd often means you have worked on not only one company’s security program but potentially on hundreds. As an ASE at Bugcrowd you will be exposed to the Internet’s best security researchers and their cutting-edge security testing methodologies. Our ASEs quickly become technically fluent in obscure/complex XSS, SQLi, XXE, IDOR, SSTI, SSRF, and many other vulnerability types. There is no other organization that offers the learning opportunity that Bugcrowd does. You will be exposed to things outside of your comfort zone. We routinely run security programs for cars, IoT devices, embedded systems, mobile applications, and more! We have an awesome team and tons of perks. We’ve even been selected as one of “The 10 Coolest Security Startups Of 2016” by crn.com. Essential Duties & Responsibilities An ASE is responsible for the ongoing triage and validation services of Bugcrowd managed programs. Under the direction of the Director of Technical Operations, you will take incoming submission data and curate it for validity, accuracy, and severity as well as communicate directly with Bugcrowd’s clients or researchers when additional information is required. ASEs also handle Incident Response – escalating and communicating about the highest severity bugs to clients. ASEs need to have strong knowledge of OWASP Top Ten type vulnerabilities. They also usually require a strong skill set in one scripting/development language, often to assist with the design or development of tooling for improving the triage/validation process.  The ASE position is perfect for security professionals looking to take their skills to the next level. Education, Experience, Skills, & Abilities Bachelor’s degree or previous security consulting experience Published and demonstrated passion for security assessment research High proficiency with Burp Suite (or any other interception proxy) and a working level of experience with other industry standard tools (nmap, sqlmap, anything included in Kali Linux) Ability to execute on individual projects but still contribute to the team Ability to complete tasks on time Strong organization, influencing, and communication skills Working Conditions The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and/or standing - Must be able to remain in a stationary position 50% of the time Carrying and /or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - remote, work-from-home 100% of the time. ADA Statement Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ada@bugcrowd.com. Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

– Сильный production-опыт с Kubernetes: upgrades, workload identity, network policies, autoscaling и расследование инцидентов.

Bleap is looking for a Software Engineer Security to own cloud, infrastructure, access, and onchain security.

Workplace: Москва и Краснодар (гибрид/офис), другие города - удаленно MAGNIT TECH — технологичный драйвер одного из крупнейших ритейлеров страны. Мы создаём будущее: от решений в области автономной логистики с полностью автоматизированными распределительными центрами до исследований потенциала квантовых вычислений. Сейчас мы в поиске Инженера SOC L2 . О продукте Команда защищает современную облачную инфраструктуру компании: Linux, Kubernetes, контейнеры и облачные сервисы. Расследуем инциденты, проактивно ищем угрозы и наводим порядок в конфигурациях безопасности, чтобы инфраструктура работала без сбоев. Работаем с реальной продуктовой средой: собственная облачная платформа, Yandex Cloud, Cloud.ru, Kafka, PostgreSQL, Redis, Object Storage. Каждый инцидент — возможность разобраться, как система устроена изнутри, на уровне процессов, сетей и ядра. Формального опыта в SOC не требуется — нам интересны и инженеры DevOps, DevSecOps, SRE с сильной технической базой, которые хотят развиваться в Cloud Security, Threat Hunting и Incident Response. Для нас важнее практические инженерные навыки и системное мышление. Задачи Расследовать сложные и нетиповые инциденты в Linux, Kubernetes, контейнерной и облачной инфраструктуре; Проводить технический анализ и DFIR: процессы, сетевые соединения, системные журналы, артефакты компрометации; Проводить проактивный поиск угроз (Threat Hunting) на основе гипотез, IoC и техник MITRE ATT&CK; Выявлять векторы атак, находить первопричины инцидентов и давать технические рекомендации по устранению угроз; Расследовать инциденты в Kubernetes: Audit Logs, события, контейнеры, активность внутри кластера; Анализировать техники атак на Kubernetes и контейнеры по MITRE ATT&CK for Containers; Выявлять небезопасные конфигурации: RBAC, NetworkPolicy, Pod Security Standards, Secrets, SecurityContext, Admission Controllers; Анализировать защищённость облачных сервисов: Kafka, S3/Object Storage, PostgreSQL, Redis; Находить ошибки в конфигурациях IAM, сетевого доступа, аутентификации, авторизации, шифрования и управления секретами; Писать скрипты и инструменты для автоматизации расследований, сбора артефактов и проверки конфигураций; Разрабатывать сценарии обнаружения атак и методы проактивного поиска угроз; Исследовать новые техники атак на Linux, Kubernetes и облачные сервисы; Готовить техническую документацию, инструкции и сценарии расследований; Делиться экспертизой с командой и развивать процессы реагирования на инциденты. Требования Уверенное знание Linux: процессы, файловая система, права доступа, systemd, сетевой стек, системные журналы, механизмы аудита; Практический опыт работы с Kubernetes: kubectl, архитектура кластера, Pod, Deployment, DaemonSet, ServiceAccount, RBAC, NetworkPolicy, Secrets; Понимание Docker/containerd, механизмов изоляции контейнеров и возможных векторов атак; Знание основных техник MITRE ATT&CK применительно к Linux, контейнерам и Kubernetes; Понимание принципов безопасной настройки облачных сервисов: IAM, S3/Object Storage, Kafka, СУБД, сетевой доступ, управление секретами; Знание сетевых протоколов TCP/IP, DNS, HTTP(S), TLS; Уверенное владение Bash — самостоятельно пишешь скрипты для автоматизации задач; Понимание Git, CI/CD, Infrastructure as Code и DevOps-практик; Умение технически анализировать проблемы и самостоятельно искать их первопричину. Будет плюсом Опыт в SOC L2/L3, Incident Response, DFIR, DevSecOps или SRE; Практический опыт с российскими облаками или частными облачными платформами; Python / Go и опыт разработки инструментов автоматизации; Опыт с Terraform, Helm, Argo CD / FluxCD, GitLab CI/CD; Знакомство с инструментами безопасности Kubernetes: Falco, Tetragon, Trivy, Kyverno; Опыт работы с Wireshark, osquery и другими DFIR-инструментами; Понимание eBPF, Kubernetes Runtime Security и обнаружения атак на уровне ОС и контейнеров; Опыт технических исследований безопасности и Threat Hunting. Условия Оформление в аккредитованную ИТ-компанию Конкурентоспособную заработную плату (обсуждается индивидуально) ДМС со стоматологией и льготными условиями для членов семьи Технику для работы График работы 5/2 с гибким началом Работу в максимально уютном офисе в Москве на ст. м. Савёловская, в Краснодаре или удаленно из других городов РФ, так же есть ИТ офисы в Санкт-Петербурге (ст. м. Балтийская) и Иннополисе Возможность проведения и участия в митапах, хакатонах, где есть возможность познакомиться с работой других подразделений Возможность реализовать свой опыт и потенциал в интересных и многоплановых проектах, получить новый интересный опыт в решении сложных задач Наличие корпоративных скидок и программ лояльности Наличие корпоративной библиотеки курсов Формат работы Москва и Краснодар (гибрид/офис), другие города - удаленно

Workplace: Удаленно Объединённая компания Wildberries и Russ — это международная технологическая компания, образованная в результате слияния двух лидеров рынка — IT-компании Wildberries и оператора наружной рекламы Russ. Обязанности Внедрять и поддерживать механизмы безопасности Kubernetes: policy-as-code, PSS/PSA, securityContext, контроль отклонений и работа с исключениями; Развивать runtime security и security observability: сбор/анализ событий, настройка правил детекта, снижение false positive, интеграции с логированием/алертингом; Улучшать сетевую безопасность кластеров: NetworkPolicies (Calico/Cilium), сегментация, контроль ingress/egress совместно с платформенной командой; Развивать автоматизацию аналитики Kubernetes-безопасности: сбор данных о конфигурациях/политиках/инцидентах, базовые отчёты и дашборды, поиск отклонений; Внедрять и сопровождать менеджмент секретов в Kubernetes: практики работы с секретами, интеграции с Vault/KMS/External Secrets, ротация и безопасная доставка секретов в workload’ы; Проводить архитектурные ревью безопасности и моделирование угроз для платформенных изменений и инфраструктурных сервисов, доводить изменения до production окружения; Автоматизировать рутину: GitOps/CI для конфигов и политик, тестирование политик, документация и runbooks. Требования Практический опыт с Kubernetes: RBAC, ServiceAccounts, securityContext, Admission, Audit Logs, PSS/PSA, харденинг Control Plane; Понимание контейнеров и Linux security на прикладном уровне; Опыт работы с 1–2 доменами: policy engines (Kyverno / OPA Gatekeeper), runtime monitoring/detection (Falco/Tetragon/Tracee или аналоги), NetworkPolicies (Calico/Cilium); Опыт secret management: Vault/External Secrets/KMS, понимание ротации, прав доступа, безопасной доставки секретов; Инструменты эксплуатации: Terraform/Ansible, Helm/Kustomize, GitOps (ArgoCD/Flux); Автоматизация: Python/Go/Bash, написание интеграций/утилит, работа с K8s API, логами/метриками; Базовая наблюдаемость: Prometheus/Alertmanager/логирование, умение разбираться в инцидентах и писать понятные runbooks. Условия Обучение и развитие: языковые клубы, собственный корпоративный университет, программы развития управленческих навыков и многое другое; Благополучие сотрудников: корпоративный пакет ДМС со стоматологией, корпоративный спорт, консультации психолога и дополнительные возможности аккредитованной IT-компании; Множество сообществ: клуб спикеров, футбола, йоги, шахмат и т.д.; Забота о семьях: создаем условия, в которых легко сочетать карьеру и заботу о близких – от гибкого подхода до масштабных проектов для детей сотрудников; Скидки и партнерские программы: на обучение, страхование, покупки и многое другое; Комфортная рабочая среда: бесплатное питание в офисе, современные офисы рядом с метро, корпоративная техника и портал для сотрудников.

Coinflow is looking for a Security Engineer to build and operate security operations, conduct penetration testing, manage vulnerabilities, and improve the secure development lifecycle.