Вакансии

Location: Muscatatuck, IN, United States Operations Manager – II (General and Operations Management) Why IDS? IDS believes in solving complex challenges through innovation, technical expertise, and operational excellence. We support critical missions across government and defense sectors, delivering impactful solutions that enhance national security. Joining IDS means contributing to meaningful, mission-driven work in highly dynamic environments. Location Muscatatuck Indiana Job Description IDS is seeking a skilled Operations Manager II to support cyber range and training operations within a Department of Defense (DoD) environment. This role requires a hands-on leader with experience managing cyber training programs, coordinating operational activities, and supporting enterprise-level cyber test and training environments. The Operations Manager will play a key role in planning, executing, and evaluating cyber training events while ensuring alignment with mission objectives and technical requirements. Key Responsibilities Plan, coordinate, and execute cyber range and training operations Lead and manage cyber training programs for Army and Joint environments Oversee daily operational activities within cyber testbed environments Ensure training effectiveness through evaluation and continuous improvement Coordinate with senior DoD stakeholders and leadership Support integration of IT/OT systems, networking, and cyber infrastructure Manage schedules, resources, and operational priorities Maintain operational readiness of cyber range capabilities Requirements Education Bachelor’s degree in network engineering, Cybersecurity, Information Management, or related discipline OR equivalent experience in lieu of degree Experience Minimum of 7 years of experience in cyber range or computer testbed environments Minimum of 7 years of program management or equivalent senior-level DoD / defense industry experience Minimum of 2 years of experience supporting Army and Joint cyber training exercises Strong experience planning, executing, and evaluating cyber training programs Experience working with senior DoD personnel and stakeholders Demonstrated ability to manage operations in fast-paced, mission-driven environments Technical Skills Working knowledge of: Operational Technology (OT) / Information Technology (IT) systems Networking and infrastructure environments Cellular systems and communications technologies Cyber range platforms and test environments Desired Skills Strong project and operations management abilities Excellent leadership and coordination skills Strong communication and stakeholder engagement Ability to manage multiple priorities simultaneously Experience in training environment optimization and performance improvement Security Clearance Active Top Secret (TS) / Sensitive Compartmented Information (SCI) required

Location: Muscatatuck, IN, United States Senior Network Engineer – III (Computer Network Architect) Why IDS? IDS delivers innovative, mission-focused solutions that support national security and critical operations. By combining technical expertise with operational insight, we help solve complex challenges across DoD and government environments. At IDS, you’ll contribute to high-impact programs supporting advanced cyber and network operations. Location Muscatatuck, Indiana Job Description IDS is seeking a highly experienced Senior Network Engineer III to support enterprise and cyber range network architecture within a DoD environment. This position requires deep expertise in designing, implementing, and managing complex network infrastructures across distributed test range environments. The ideal candidate will serve as a technical leader responsible for network design, wireless infrastructure integration, and support of advanced cyber test and training environments. Key Responsibilities Design, configure, and maintain enterprise network architectures supporting cyber range operations Manage and optimize routing, switching, firewalls, DNS, VPNs, and VLANs Support distributed test range environments , including policy and procedure development Engineer and maintain network infrastructure across physical and virtualized systems Provide technical support for DoD network nodes and cyber range platforms Develop and implement network policies, standards, and best practices Support wireless network infrastructure , including modern cellular and Wi-Fi technologies Troubleshoot complex network issues and ensure high availability and performance Requirements Education Bachelor’s degree in Network Engineering, Cybersecurity, Information Management, or related discipline OR equivalent experience in lieu of degree Certifications Must meet DoD 8140.03 IAT II requirements (e.g., Security+, CCNA Security, or equivalent) Experience Minimum of 10 years of experience in cyber range or computer testbed environments Expert-level experience designing and configuring: Routing, switching, firewalls DNS, VPNs, VLANs Enterprise network infrastructure across bare metal and virtualized systems Experience supporting distributed test range environments , including development of policies and procedures Experience with wireless and cellular technologies , including: 802.11 (Wi-Fi) 2G, 3G, 4G, and 5G networks Experience configuring and managing DoD network nodes , including environments such as JIOR (Joint Information Operations Range) Proven ability to operate in complex, mission-driven DoD environments Desired Skills Strong network architecture and engineering leadership Advanced troubleshooting and analytical skills Experience in cyber range or training environments Strong documentation and communication skills Ability to lead initiatives and work across technical teams Security Clearance Active Top Secret (TS) / Sensitive Compartmented Information (SCI) required

Location: Muscatatuck, IN, United States Systems Administrator/Engineer – II (Systems Administrator/Engineer) Why IDS? IDS delivers innovative, mission-focused solutions that support national security and critical operations. Our teams combine deep technical expertise with real-world operational insight to solve complex challenges across the defense and public sectors. At IDS, you’ll work on impactful programs in dynamic, high-stakes environments. Location Muscatatuck, Indiana Job Description IDS is seeking a skilled Systems Administrator/Engineer II to support advanced cyber environments and enterprise infrastructure within a DoD setting. This role requires a hands-on technical expert with strong experience in systems engineering, network architecture, virtualization, and automation. The ideal candidate will have a strong background in designing, deploying, and maintaining complex environments spanning physical, virtual, and cloud-based systems. Key Responsibilities Design, configure, and maintain enterprise network and system architectures Deploy and support routing, switching, firewalls, VPNs, DNS, Active Directory, VLANs, and SANs Perform system provisioning, imaging, automation, and orchestration Manage and maintain virtualized and bare-metal environments Support infrastructure monitoring and performance optimization Engineer and administer Windows and Linux server environments Identify and mitigate network vulnerabilities, threats, and attack vectors Support integration of emerging technologies including IoT, ICS/SCADA, RF devices, and camera systems Requirements Education Bachelor’s degree in network engineering, Cybersecurity, Information Management, or related discipline OR equivalent experience in lieu of degree Certifications Must meet DoD 8140.03 IAT II requirements (e.g., Security+, CCNA Security, etc.) Experience Minimum of 7 years of experience as a Cyber SME, Cyber Architect, Systems Administrator/Engineer, or similar role Experience designing and configuring: Network infrastructure (routing, switching, firewalls) Core services (DNS, Active Directory, VPNs, VLANs, SANs) Experience with: Automation, orchestration, and configuration management Tools such as Ansible, Python, and other open-source platforms Experience across: Cloud, physical, and virtual infrastructure environments Infrastructure monitoring and performance tuning Experience with hypervisors: VMware, KVM, Xen Strong experience with: Windows Enterprise and Linux system administration Cybersecurity principles, vulnerabilities, and mitigation techniques Exposure to diverse technologies including: ICS/SCADA systems IoT devices RF technologies and sensor systems Desired Skills Strong troubleshooting and problem-solving abilities Experience in complex, mission-driven environments Ability to work independently and within cross-functional teams Strong documentation and communication skills Experience supporting cyber range or lab environments (preferred) Security Clearance Active Top Secret (TS) / Sensitive Compartmented Information (SCI) required

Location: Kazakhstan, Remote/Kazakhstan Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Yerevan, Remote/Yerevan Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Belgrade, Remote/Serbia Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: -, Remote/Uzbekistan Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Tbilisi, Remote/Tbilisi Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Dubai, UAE Workplace: onsite About us: Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success. We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today. What began as a better way to pay at checkout has grown into a financial system working the way it should have all along. About the role: The Senior Information Security Specialist (GRC) independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms. The Senior Specialist bridges technical execution and programme leadership, collaborating with leads, legal, audit, and business stakeholders to deliver mature, effective GRC outcomes aligned with the UAE Fintech regulatory environment. Key Responsibilities Information Security Governance Leadership: Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks, ensuring alignment with CSF, NCA ECC, ISO 27001, and PCI-DSS. Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives. Monitor and proactively track regulatory and legal developments affecting information security, assessing impact and recommending updates to the governance framework. Prepare and review governance documentation (RACI matrices, security charter updates, governance committee packs) and present findings to senior stakeholders. Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off. Mentor junior team members on governance documentation quality, regulatory interpretation, and risk assessment methodology. Enterprise Risk Management: Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organisation's risk appetite. Own and maintain the enterprise information security risk register, ensuring accuracy, currency, and appropriate escalation of significant risks. Lead BIA processes for critical business functions, coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning. Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations. Lead third-party information security risk management, designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register. Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption. Compliance Programme Delivery: Lead compliance monitoring activities for CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS, producing gap analyses, treatment plans, and periodic compliance status reports. Manage internal and external audit cycles, coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure. Design and deliver the security awareness programme, producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics. Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule. Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding. Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead. Cross-Functional Collaboration & Knowledge Leadership: Serve as the primary GRC point of contact for assigned business and technology teams, providing expert guidance on security requirements, risk treatment, and compliance obligations. Lead information classification and security requirements reviews for significant IT, product, and business projects. Contribute to the GRC knowledge base, developing reusable templates, guidance documents, and training materials for internal use. Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams. Skills, Knowledge and Expertise Education: Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field. A Master's degree in Information Security, Risk Management, or Business Administration is an advantage. Experience: 3+ years of progressive professional experience in information security governance, risk management, or compliance. Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities. In-depth knowledge of at least two regulatory frameworks applicable to Fintech environments (CSF, NCA ECC, PDPL, ISO 27001, PCI-DSS) is required. Experience in a regulated Fintech or banking environment is strongly preferred. Certifications & Licences: ISO 27001 Lead Implementer (required). CRISC (Certified in Risk and Information Systems Control) or CISM: required or actively working toward. CDPSE (Certified Data Privacy Solutions Engineer) is an advantage for PDPL specialists. Benefits A working environment that gives you autonomy and responsibility from day one. You should be comfortable with the idea that the quality of your work will influence the shape of your career. Participation in the company’s employee stock options program. Health Insurance Flexi Perks: A monetary benefit that gives you the freedom to use it as you choose—whether for health and well-being, education and professional development or travel needs!

Location: Riyadh, KSA Workplace: onsite The Lead Anti-Fraud Officer independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms. The Lead Anti-Fraud Officer operates as a bridge between technical execution and programme leadership — collaborating with leads, legal, audit, and business stakeholders to drive mature and effective GRC outcomes aligned with the Saudi Fintech regulatory environment. Key Responsibilities Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks. Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives. Monitor and proactively track regulatory and legal developments affecting information security — assessing impact and recommending updates to the governance framework. Prepare and review governance documentation — RACI matrices, security charter updates, governance committee packs — and present findings to senior stakeholders. Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off. Mentor GR1–GR2 team members on governance documentation quality, regulatory interpretation, and risk assessment methodology. Enterprise Risk Management Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organization's risk appetite. Own and maintain the enterprise information security risk register — ensuring accuracy, currency, and appropriate escalation of significant risks. Lead BIA processes for critical business functions — coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning. Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations. Lead third-party information security risk management — designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register. Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption. Compliance Programme Delivery Lead compliance monitoring activities for CFFR, NCA ECC, PDPL, ISO 27001, and PCI-DSS — producing gap analyses, treatment plans, and periodic compliance status reports. Manage internal and external audit cycles — coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure. Design and deliver the security awareness programme — producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics. Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule. Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding. Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead. Cross-Functional Collaboration & Knowledge Leadership Serve as the primary GRC point of contact for assigned business and technology teams — providing expert guidance on security requirements, risk treatment, and compliance obligations. Lead information classification and security requirements reviews for significant IT, product, and business projects. Contribute to the GRC knowledge base — developing reusable templates, guidance documents, and training materials for internal use. Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams. Perform additional responsibilities as assigned by management. Skills, Knowledge and Expertise Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field. A Master's degree in Information Security, Risk Management, or Business Administration is an advantage. 3–5 years of progressive professional experience in information security governance, risk management, or compliance. Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities. In-depth knowledge of the CFFR framework is required. Experience in a regulated Fintech or banking environment is strongly preferred. Benefits We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees. Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone. You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region We offer you relocation support as well as we guide you through all the process. We’ll set you up with the devices required for your work.

Location: Riyadh, KSA Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Cyber Security Lead to join our Information Security team in Riyadh. You will provide technical leadership across defensive security, while managing a team of security engineers and analysts and driving security initiatives across the organization. Key Responsibilities Lead security architecture and design reviews across IT, cloud, and product initiatives. Drive cloud security across GCP and AWS, including IAM, cloud security posture, and infrastructure security. Lead the Secure SDLC / DevSecOps programme, including application security and security tooling across CI/CD. Own vulnerability management , including vulnerability remediation, penetration testing and red team engagements. Oversee endpoint, infrastructure and network security , including EDR, DLP and firewall security. Lead detection engineering, threat intelligence and incident response , including complex security investigations. Manage and develop a team of security engineers and analysts , including mentoring, performance management and career development. Partner with Engineering, IT, Compliance and other teams to improve Tabby’s overall security posture and security standards. Skills, Knowledge and Expertise 5+ years of experience in cybersecurity / information security , including technical leadership or senior-level responsibilities. Experience leading security programmes across security architecture, cloud security, vulnerability management and application security . Strong understanding of defensive and offensive security , including penetration testing, red/purple teaming, threat hunting and incident response. Hands-on experience with SIEM, EDR/XDR, vulnerability management, CSPM, DLP and security monitoring platforms . Strong knowledge of GCP and/or AWS , IAM, cloud security and infrastructure security. Experience with DevSecOps, Secure SDLC, SAST, DAST, SCA and container security . Strong scripting and automation skills and the ability to develop or oversee security tooling and integrations. Knowledge of SAMA CSF, NCA ECC, PCI-DSS and ISO 27001 . Experience working in a regulated FinTech or banking environment . Strong technical leadership, stakeholder management and team development skills. CISSP/CISM and OSCP or equivalent certifications are required.

Location: Dubai, UAE Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Senior Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Riyadh, KSA Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. As Information Security Engineer , you’ll play a key part in monitoring and defending our infrastructure, applications, and cloud environments from cyber threats. You’ll lead incident response efforts, develop and tune detection rules, investigate security events, and collaborate with cross-functional teams to strengthen our security posture. Key Responsibilities Security Monitoring & Detection Monitor and analyze logs and alerts from a wide range of sources including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoints, servers, and cloud platforms. Perform correlation of events from multiple sources to identify advanced threats and unusual patterns of behavior. Fine-tune alert thresholds and detection logic to reduce false positives and improve signal-to-noise ratio. Maintain dashboards and reporting to provide real-time visibility into security posture. Incident Response & Investigation Serve as a frontline responder for security incidents, managing incidents through their lifecycle – detection, containment, eradication, recovery, and lessons learned. Coordinate with internal stakeholders and external vendors during high-severity incidents or data breaches. Perform root cause analysis and forensic investigations using endpoint and network-based artifacts. Maintain detailed incident documentation and contribute to post-mortem analysis and reports. Threat Intelligence & Detection Rule Development Research emerging threats and trends. Contribute to the creation and tuning of detection rules, threat-hunting queries, and use cases across multiple platforms including cloud environments. Maintaining CTI Platform along with the integration of the CTI feeds with the security controls to have active CTI driven detections. Collaboration and Communication Communicate effectively with cross-functional teams including IT, DevOps, Risk, and Compliance during incidents and investigations. Provide concise and clear updates during incident handling to stakeholders and management. Mentor junior analysts and assist in training efforts within the SOC team. Skills, Knowledge and Expertise 3–4 years of experience in a SOC or cybersecurity operations role, ideally in a fast-paced fintech or enterprise environment. Strong knowledge of security best practices, including incident handling, alert triage, log analysis, and threat modeling. Understanding of online technologies, REST APIs, microservices, and modern application architectures. Experience working in a culturally diverse and collaborative environment. Familiarity with DLP, AV, and anti-malware systems from an operational monitoring perspective. Experience with phishing detection, user behavior analytics, and security awareness campaigns. Security certifications such as Security+, CySA+, eCIR, eCTHPv2, GCIA, or GMON (preferred but not required). Strong communication skills, especially for coordinating incident response and writing clear incident reports. Experience with SIEM platforms , SOAR tools , EDR/XDR , and Threat Intelligence platforms . Familiarity with cloud environments and cloud-native logging and monitoring tools. Scripting experience (e.g., Python ) to automate tasks and improve SOC efficiency.

Location: Riyadh, KSA Workplace: onsite We're looking for an  Information Security Specialist (GRC) to join Tabby! The successful candidate will independently execute governance, risk, and compliance activities across the Tabby's information security programme. Key Responsibilities Information Security Governance Maintain and update the information security governance framework documentation, policy library, and associated standards and procedures. Draft and revise information security policies, standards, and baselines, ensuring alignment with applicable regulatory requirements and business objectives. Monitor and track changes in legal, regulatory, and contractual requirements affecting information security (SAMA CSF, PDPL, NCA ECC, PCI-DSS), updating the compliance register accordingly. Maintain and update role and responsibility matrices (RACI), information security governance committee documentation, and reporting packs. Coordinate security governance committee meetings — preparing agendas, minutes, and action tracking. Produce internal and external communication materials related to information security governance, policies, and programme updates. Information Risk Management Execute information security risk assessments independently, applying the organization's risk assessment methodology and producing complete risk registers with identified threats, vulnerabilities, likelihood, impact, and treatment plans. Maintain and update the information asset register — tracking asset owners, classifications, and associated risk profiles. Lead business impact assessment (BIA) data collection activities, coordinating with asset owners and business units to capture accurate recovery objectives and criticality ratings. Conduct control effectiveness evaluations for key information security controls, documenting findings and escalating gaps to the Lead for treatment. Coordinate third-party information security risk assessments — preparing assessment questionnaires, reviewing vendor responses, and producing risk summaries. Integrate risk and vulnerability data into procurement reviews, project onboarding, and change management processes. Prepare periodic risk reports for senior review, highlighting emerging risks, significant changes in the risk profile, and the status of risk treatment actions. Compliance & Programme Development Monitor the organization's compliance posture against SAMA CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS — tracking control status, identifying gaps, and coordinating remediation. Coordinate internal and external audit activities — gathering evidence packages, liaising with auditors, tracking findings, and monitoring remediation progress. Support the preparation of regulatory submissions, self-assessments, and compliance attestations required by SAMA, NCA, and PCI Council. Maintain and enhance the security awareness programme — developing training materials, scheduling communications, and tracking completion metrics. Monitor KPIs and KRIs for the information security programme, preparing accurate and timely dashboards for senior management review. Support the integration of information security requirements into procurement, project management, and change control processes. Cross-Functional & General GRC Support Maintain the information security policy, standard, and procedure library — managing version control, review cycles, and distribution. Support information security initiatives across business and technology teams, providing GRC subject matter expertise on projects and change programmes. Conduct information classification reviews and document security requirements for key business and IT projects. Deliver information security awareness sessions and materials to targeted staff groups. Provide analytical support for GRC team reporting, data gathering, and programme tracking activities. Skills, Knowledge and Expertise Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field. 1–3 years of professional experience in information security governance, risk management, compliance, or a closely related field. Hands-on experience with risk assessment execution, policy development, or compliance monitoring is required. Prior exposure to SAMA CSF, ISO 27001, PDPL, or NCA ECC requirements is a strong advantage. Experience in a regulated Fintech or banking environment is preferred. ISO 27001 Foundation or Lead Implementer (preferred). CompTIA Security+ or equivalent. Working toward CRISC (Certified in Risk and Information Systems Control) or CISM. Benefits We are an international team of inspired professionals located all over the globe. We  have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees. Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone. You will have an opportunity to learn and grow in one of the fastest growing fin tech companies in the region We offer you relocation support as well as we guide you through all the process. We’ll set you up with the devices required for your work.

Location: Israel - Office - Tel Aviv Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Opportunity: Tenable Research is seeking a Senior Security Researcher - Cloud Security to join our highly technical product research team working at the core of our cloud security platform. This is a rare opportunity to join an elite research team and do work that directly shapes our product. In this role, you will define how vulnerabilities in cloud assets are understood, enriched, and remediated. As AI floods production with vulnerabilities, you design the model and system that keeps teams ahead of it. You will define the foundation for how cloud vulnerabilities are treated across the platform, from reachability and exploitability to effective resolution. Your work will directly shape product direction and set the standard for what handling vulns at scale actually means. We are looking for an exceptional researcher who can bridge cloud security, application security, and vulnerability management. You are curious, comfortable with ambiguity, and driven to deeply understand how vulnerabilities manifest and how they are fixed across cloud environments and code. Your Role: Own Vulnerability Management Across Tenable's Cloud Security Platform: Define cloud vulnerability management by grounding findings in how exposure is actually created and what resolving it means for organizations. Collaborate with engineering and product teams to introduce the signals and data that validate exploitability and drive remediation. Establish the standard for what separates an actionable finding from a theoretical one. Research Exploitability and Risk Context: Research how the security context around a finding affects its real-world risk and what resolving it looks like. Define how these factors shape prioritization and remediation across the platform. Lead Remediation Research: Define how vulnerabilities across cloud and code map to the fixes that resolve them, and drive AI innovation in how remediation is understood and delivered at scale. Work with engineering and product to build the capabilities that close the loop from detection to resolution. Publish and Present: Share research through technical blogs, reports, and leading industry conferences. What You'll Need: 5+ years of hands-on experience in security research Familiarity with real-world vulnerability management: triage, prioritization, remediation, and the gap between CVSS and actual impact Strong technical background in cloud platforms (AWS, Azure, GCP), including how vulnerabilities manifest across workloads, services, and code Familiarity with application security tooling Highly curious, self-driven, and comfortable working in ambiguous, fast-evolving problem spaces Strong communication skills, both written and verbal, with the ability to clearly articulate complex technical findings And Ideally: Experience with exploit research, full-chain attack analysis, or CVE-to-fix resolution across complex dependency chains Experience leveraging AI and agentic workflows for security research and analysis Background in application security, secure code review, or supply chain security Hands-on experience with SBOM tooling, container scanning, or software composition analysis pipelines Track record of published research, conference talks, or technical blog posts Experience working with product teams and delivering value to customers through the product We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Location: Remote - US Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . Job Summary The Bugcrowd RL and Reasoning Team focuses on pushing the boundaries of autonomous cybersecurity by building authentic, verifiable reinforcement learning environments for world-leading foundational AI companies. As a Reinforcement Learning Engineer specializing in Reinforcement Learning from Verifiable Rewards (RLVR), you will design and scale automated verification pipelines that transform real-world software vulnerabilities into deterministic reward functions. In this role, you will bridge the gap between low-level security analysis and modern LLM reasoning models, engineering environments where AI agents learn to discover, exploit, and remediate software vulnerabilities with mathematical certainty. Instead of relying on subjective human feedback, your work directly powers the rigorous, verifiable reward signals that teach next-generation frontier AI models how to master complex cybersecurity domain logic. You will work at the intersection of fuzzing, dynamic program analysis, system exploitation, and scalable ML infrastructure to shape the safety and offensive/defensive capabilities of future artificial intelligence. Essential Duties and Responsibilities Design, build, and deploy high-throughput RLVR (Reinforcement Learning from Verifiable Rewards) environments that evaluate LLM action sequences against deterministic execution outcomes. Develop automated test harnesses, sandboxes, and verification engines that convert complex vulnerability research (e.g., memory corruption, web security, logic bugs) into binary pass/fail reward signals. Integrate Bugcrowd’s Mayhem automated analysis platform and real-world vulnerability feeds into continuous, scalable RL environment generation pipelines. Architect safe, isolated, and highly reproducible execution environments (using Docker, BuildKit, or Nix) capable of running thousands of simultaneous agent-driven exploitation and patching trajectories. Collaborate directly with researchers at frontier AI labs including Anthropic, OpenAI, and Cohere to define standard benchmark formats, observation spaces, and verifiable evaluation metrics for cybersecurity tasks. Implement precise telemetry, ground-truth verification algorithms, and trajectory logging to analyze agent reasoning paths and prevent reward hacking or false positives. Build low-level instrumentation and debugging tools to monitor memory states, process executions, and network behaviors during agent interaction cycles. Optimize infrastructure performance and environment reset latency to support massive-scale parallel sampling and distributed RL training workflows. Benchmark and evaluate frontier AI model performance across diverse offensive and defensive security challenges, such as automated fuzzing, exploit payload generation, and patch validation. Education, Experience, Knowledge, Skills, and Abilities Understanding of RL training workflows used by modern LLM systems, specifically execution-based feedback or Reinforcement Learning from Verifiable Rewards (RLVR). Proficiency developing applications in Python and low-level systems programming in C, with Rust experience being a strong plus. Solid understanding of software vulnerabilities, binary exploitation, fuzzing methodologies, or program analysis. Experience with DevOps pipelines (e.g., GitHub Actions), reproducible builds (Docker, BuildKit, Nix), and comfort working with Linux systems and low-level debugging. Experience working with or building benchmark environments (e.g., CTFs, SWE-bench, security challenges, or execution sandboxes). Preferred Experience Experience designing custom reward functions, ground-truth verifiers, or automated grading engines for AI safety and reasoning models. Background in low-level program analysis tools, sanitizers (e.g., ASan/MSan), compiler instrumentation, or automated exploit generation tools. Proven track record of participating in or developing competitive cybersecurity benchmarks, CTFs, or open-source AI evaluation frameworks. Working Conditions and Physical Requirements The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and / or standing - Must be able to remain in a stationary position 50% of the time Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - remote, work-from-home 100% of the time. Pay Range Disclosure At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business. The national estimate for the current base range for the position of $176,400 - $242,550. This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

Location: Poland; Bulgaria On behalf of SafetyTech Client #1 , SD Solutions is looking for a highly motivated and technically proficient Windows Malware Researcher to join our security research division . SD Solutions is a staffing company operating globally. Contact us to get more details about the benefits we offer. This role is dedicated to determining the true intent behind cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious, with a focus on Windows malware research. You need to be independent, attentive to details, organized, eager to learn new things, and eager to research and solve complex problems. Responsibilities: Review cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious Determine the underlying intent and goal behind each prompt, and assess whether the user is pursuing a legitimate purpose or an intent to cause harm Apply deep domain expertise to judge the technical context, specificity, and real-world uplift a response would give an attacker Annotate each prompt with an intent label and a clear written rationale, following the project guidelines Independently annotate the same prompts as a second researcher; cases where researchers disagree are escalated to a reviewer Flag ambiguous cases, emerging attack techniques, and gaps in the guidelines, and help improve them Requirements: Minimum of 5 years of proven , hands-on experience in Windows malware analysis and research Strong command of Windows internals and the Win32/NT API, including process injection, persistence, privilege escalation, and EDR/AV evasion techniques Static and dynamic analysis of PE files, including unpacking, deobfuscation, and sandbox and debugger use (x64dbg, IDA, Ghidra) Experience with major malware families and categories: loaders, infostealers, RATs, ransomware, and C2 frameworks Ability to write YARA rules and extract IOCs and TTPs mapped to MITRE ATT&CK Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation Clear written communication in English, with the ability to document your reasoning concisely Nice to have: GIAC GREM, eCMAP, GIAC GCFA Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research. About the company: A company building specialized evaluation infrastructure for AI safety and robustness testing. Their platform simulates adversarial conditions used by AI development teams to validate agent behavior before deployment. Currently expanding a freelance contributor pool for scenario and environment development. By applying for this position, you agree to the terms outlined in our Privacy Policy. Please take a moment to review our Privacy Policy https://sd-solutions.breezy.hr/privacy-notice , and make sure you understand its contents. If you have any questions or concerns regarding our Privacy Policy, please feel free to contact us.

Location: Tbilisi, Georgia SD Solutions is looking for a talented Content Creator & Multimedia Specialist. You will own the end-to-end media creation process - from concept and scriptwriting to filming, editing, and distribution. You will serve as one of the visual and voice representatives of SD Solutions on camera, creating engaging social media content, managing our website copy, and designing sleek internal communication assets. In this role, adaptability is key: you will actively incorporate AI tools into your creative workflows (for content generation, script brainstorming, visual assets, and automation) to scale our output while maintaining a human-centric, high-quality brand voice. At SD Solutions, we empower tech companies and high-growth businesses by building top-tier remote software engineering teams and delivering custom tech solutions. We sit at the intersection of technology, talent, and business growth. We are looking for an adaptable, tech-savvy, and forward-thinking Content Creator & Multimedia Specialist to elevate our digital presence, leverage modern AI technologies, showcase our workplace culture, and produce high-impact content across our digital channels. SD Solutions is a staffing company operating globally. Contact us to get more details about the benefits we offer. Responsibilities: 1. Video Production & On-Camera Presence End-to-End Video Production: Plan, shoot, and edit high-quality long-form and short-form video content. On-Camera Talent: Comfortably present on camera as a brand host/ambassador for video updates, interviews, employer branding, and educational shorts. Post-Production Excellence: Execute video editing, audio enhancement, motion graphics, and captioning using industry-standard tools. 2. AI-Driven Content Workflows & Innovation AI Tool Integration: Adapt to emerging AI technologies (e.g., LLMs, generative video/image tools, AI voice/editing assistants) to streamline ideation, scriptwriting, storyboard creation, and visual production. Creative Agility: Proactively experiment with new generative AI tools and social platform trends to keep SD Solutions ahead of industry standards. 3. Social Media Management & Distribution Manage content calendar execution across TikTok, Instagram, Facebook, LinkedIn, and YouTube . Tailor content assets specifically for each platform’s best practices (e.g., professional B2B insights for LinkedIn, engaging behind-the-scenes and tech culture clips for TikTok/Instagram Reels). Monitor channel analytics and user engagement to iterate and continuously optimize media performance. 4. Website Content Management Publish, refresh, and maintain written and visual content across sdsolutions.tech . Copyedit, proofread, and format blog posts, landing pages, case studies, and service offerings to ensure clarity, brand alignment, and SEO optimization. Audit existing web content regularly to maintain high standards of quality and visual appeal. 5. Internal Branding & Design Design branded visual materials for internal communications, employee announcements, company newsletters, and presentation decks. Ensure visual brand consistency across both external marketing and internal team channels. Requirements: Experience: 2+ years of proven experience in video production, video editing, and digital content creation (agency, B2B, or tech sector experience is a strong plus). AI Literacy & Adaptability: High adaptability to new technologies with a strong interest or hands-on experience in using AI tools to enhance creative productivity and content creation. Technical Skills: Proficiency with professional cameras, lighting, and audio equipment. Strong expertise in video editing software (Adobe Premiere Pro, Adobe Photoshop, Canva, or equivalent tools). On-Camera Capability: Comfortable, articulate, and confident presenting complex tech or corporate topics on camera. Platform Mastery: Deep understanding of algorithms, trends, formats, and best practices across TikTok, Instagram Reels, YouTube Shorts, LinkedIn, and Facebook. CMS & Copywriting: Basic experience working with modern CMS platforms and strong copyediting skills in English. Languages: Professional working proficiency in English (written and verbal). About the company: SD Solutions is a turnkey staffing service that helps product companies to expand their teams and develop. We are a team of young and passionate professionals who work for the result. We provide a full social package with paid vacation, sick leave, and national holidays, and medical insurance after the trial period. Our clients are top-notch companies and start-ups that bring future technologies into today’s life. We are proud of being dedicated to the latest generation of cybersecurity, fintech, health tech, AI solutions , and more. We have clients all over the globe: The USA, the UK, Canada, Malta, Bulgaria, Israel, among others. By applying for this position, you agree to the terms outlined in our Privacy Policy. Please take a moment to review our Privacy Policy https://sd-solutions.breezy.hr/privacy-notice , and make sure you understand its contents. If you have any questions or concerns regarding our Privacy Policy, please feel free to contact us.