Вакансии

The Systems Administrator owns the day-to-day administration of our SaaS and cloud vendor stack, with security and logging as the first priority. You will also provide hands-on IT support to employees.

Location: United States Workplace: Remote At ClickUp, we're building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an AI-native company. Every team member is expected to leverage AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what's possible. 🚀 Security at ClickUp Security at ClickUp is engineering-focused. We partner with teams across the company to protect our platform, our internal systems and our customers through secure design, defensive controls, detection and response. We build tooling and automation, including AI-powered workflows, to turn what we learn into lasting improvements.   About the team Infrastructure Security at ClickUp secures the cloud, compute, network and access layers underneath ClickUp: a multi-account AWS organization, a large Kubernetes fleet, infrastructure managed as code and the identity systems engineers use to reach production. We are a small team that works agentic first, using AI agents we build and maintain ourselves to multiply what a team our size can cover.   You will support this mission by thinking like a developer, breaking down a problem that we face, testing a method to approach it with automation, and implementing solutions that yield compounding value. Your skills to uncover threat indicators will be the foundation of this work.   The role - Architecture, proposals and reviews. Act as an initial reviewer on infrastructure proposals and designs from engineering and non-engineering teams such as business systems and go-to-market. Write our own security proposals and review the changes that follow. Translate security requirements and agent findings into clear guidance for less-technical partners, and bring their needs back into our designs. - Agentic security tooling and agent infrastructure. Build, evaluate and maintain the agents behind our reviews, triage and investigations, and help run the sandboxed, observable infrastructure they operate on. - Detection, investigation and response. Lead cloud and infrastructure alerts and incidents through to resolution and root cause, working alongside AppSec and incident response on incidents that span both. - Identity, access and least privilege. Move people, CI and services toward least privilege and just-in-time access across our cloud organization and the tooling engineers use to reach production. Deliver fixes as secure building blocks that teams adopt by default. - Compute, network and pipeline security. Harden our container, serverless and virtual machine workloads, our network perimeter and our CI/CD pipelines, and add checks so each class of issue is caught automatically next time. - Continuous review and audit evidence. Move vulnerability, access and attack-surface reviews from point-in-time checks to continuous monitoring that also produces evidence for our infrastructure controls. Qualifications - 5+ years in security engineering, cloud infrastructure or SRE, with at least 2 years securing AWS at organization scale. - At least a year of agentic development experience: building agent skills and tools for real engineering work, and developing and maintaining the development harness they run in, from configuration and permissions to integrations, evaluations and cost controls. You can secure agents against prompt injection, over-privileged tools and unaudited actions, and explain how agents fall into the confused deputy problem and the lethal trifecta. You validate agent output against evidence and decide where human review is required. - Deep AWS IAM experience: IAM Identity Center or an equivalent SSO model, SCPs, permission boundaries, resource and key policies, cross-account trust, and the ability to prove a policy's effect with simulation rather than inference. - Production Kubernetes security on EKS or similar, covering RBAC, workload identity, network policy, admission control and container runtime hardening. - AWS networking for security: VPC design, endpoints and endpoint policies, network and DNS firewalls, egress control, and WAF. - Fluency with infrastructure as code such as Terraform, including reusable patterns, multi-environment rollouts and reading plans for security impact. - Experience with CNAPP, SIEM or runtime security tooling and the cloud detection sources around it, such as CloudTrail, GuardDuty and Access Analyzer. - Experience investigating cloud and infrastructure security events: correlating cloud audit, Kubernetes, identity and network logs to establish what happened, its blast radius and its root cause. - A track record of reviewing architecture and writing design proposals, guiding teams toward secure designs through conversation rather than mandate, mentoring others through reviews, and turning a review into a change another team is glad to make. - Python, Go or TypeScript for security automation. - Clear written and verbal communication, including explaining technical risk to non-technical partners. Most of our work with other teams is asynchronous, so much of the job is a well-evidenced finding, proposal or design note that another team can act on without a meeting. Desirable - Experience using AI agents in a SOC or other incident response workflows. - Sandboxed runtime experience with gVisor, Firecracker or Kata. - Offensive security or red-team experience in cloud and Kubernetes environments. - Policy engines such as OPA or Rego. - Supporting audits like SOC 2 with automated evidence collection.   Our stack AWS, Kubernetes, infrastructure as code, CI/CD with federated identity, an enterprise identity provider, observability and cloud security platforms, and AI agent tooling. Equal Opportunity Employer ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. Privacy Notice ClickUp collects and processes personal data in accordance with applicable data protection laws. You can find further details by viewing our Global Candidate Privacy Notice. https://clickup.com/careers-terms/candidate-privacy-notice If you are a Philippine Job Applicant, please also see our Philippine Data Privacy Notice https://t333.s.clickup-attachments-stg.com/t333/d9a53ce2-6d2c-48cd-84b1-ed4e525f9613/Philippine%20Data%20Privacy%20Notice_2024.pdf?view=open for further details. Visa Sponsorship Please note we are unable to sponsor or take over sponsorship of an employment visa for roles outside of engineering and product at this time. Sponsorship for engineering and product roles is not guaranteed, but is instead based on the business needs for that specific role at that time. Please reach out to the recruiter with any questions. Fraud Alert ClickUp Talent Acquisition will only initiate contact via an @clickup.com http://clickup.com email or through our official careers portal on clickup.com http://clickup.com. We will never request fees, payments, or sensitive personal information. Please disregard any offers received outside these channels and report them to support@clickup.com. AI Processing Notice ClickUp may use artificial intelligence and machine learning technologies to help review and screen candidates' employment applications against role-related criteria. These tools support, but do not replace, human decision‑making. If you have questions or need an accommodation in the recruitment process, please contact us at AskPeople@ClickUp.com.

Location: United States Are you interested in working directly for a single sponsor while having the security and additional career opportunities that working for a global CRO can bring? Our team says it’s the best of both worlds…. ClinChoice is searching for a Principal Statistical Programmer Consultant to join one of our clients. ClinChoice is a global full-service CRO with a strong focus on quality, professional development, and supportive culture. As a client-facing role, we are looking for confident candidates with the ability to work independently whilst establishing a high-trust environment with the client’s counterparts. Position Overview We are seeking an experienced Principal Statistical Programmer to provide programming expertise and leadership in support of clinical development programs, primarily focused on solid tumor oncology studies. The ideal candidate will have extensive experience in clinical trial statistical programming, strong SAS programming skills, and in-depth knowledge of oncology endpoints, CDISC standards, and regulatory submission requirements. This individual will contribute to the development and execution of clinical programming deliverables across Phase I–III clinical trials. Key Responsibilities Lead and oversee statistical programming activities for oncology clinical trials, with a primary focus on solid tumor indications. Develop, validate, and maintain SDTM and ADaM datasets in compliance with CDISC standards. Program and review complex TFLs (Tables, Figures, and Listings) for clinical study reports and regulatory submissions. Support oncology efficacy and safety analyses, including Overall Survival (OS), Progression-Free Survival (PFS), Objective Response Rate (ORR), Duration of Response (DoR), and Disease Control Rate (DCR). Demonstrate expertise in Kaplan-Meier analysis, Cox proportional hazards models, and other time-to-event analyses. Work closely with biostatisticians, data management, clinical teams, and cross-functional stakeholders to ensure timely and high-quality deliverables. Provide technical leadership, programming oversight, and mentorship to junior and senior statistical programmers. Review programming specifications, analysis datasets, and statistical outputs for accuracy and consistency. Support regulatory submissions and respond to health authority requests, as needed. Identify opportunities to improve programming standards, processes, and efficiencies. Required Qualifications Bachelor's or Master's degree in Statistics, Biostatistics, Mathematics, Computer Science, or a related discipline. Extensive experience in clinical statistical programming within the pharmaceutical or biotechnology industry. Strong hands-on experience with SAS programming, including SAS Base, SAS Macro, and SAS/STAT. Significant experience supporting solid tumor oncology clinical trials, preferably across Phase I, II, and III studies. Strong knowledge of oncology efficacy endpoints, including OS, PFS, ORR, and DoR. Expertise in CDISC SDTM and ADaM standards. Experience developing and validating complex TFLs for clinical study reports and regulatory submissions. Knowledge of ICH-GCP and regulatory requirements (FDA/EMA). Excellent communication, problem-solving, and cross-functional collaboration skills. Preferred Qualifications Experience with immuno-oncology and targeted cancer therapies. Exposure to clinical trials involving head and neck, lung, colorectal, breast, or other solid tumor indications. Experience with FDA or EMA regulatory submissions. Prior experience providing technical leadership and mentoring statistical programming teams. The Application Process Once you have submitted your CV, you will receive an acknowledgement that we received it. If you have the requirements we need, you will be invited for phone interview as the first step.  Unfortunately, due to the number of applications we receive, we cannot reply to everyone individually if you are not successful. Who will you be working for? About ClinChoice ClinChoice is a global full-service CRO specializing in clinical development and functional solutions for pharmaceutical, biotechnology, medical device, and consumer health companies. We have over 28 years of proven high-quality delivery and results across all our services, with over 4,000 professionals in more than 20 countries across the Americas, Europe, and Asia-Pacific. Our Company Ethos Our mission drives our culture: to contribute to a healthier and safer world by accelerating the development and commercialization of innovative drugs and devices. Our employees are the most valuable company asset and they are the fulcrum around which all ClinChoice activities are built and close management and training is the core instrument to develop and maintain highly-qualified personnel. The continuous training keeps the resources qualified in terms of competence and expertise and gives all personnel the clear tools needed to manage both internal and client processes with the same methodology.   The success of these core values is evidenced by our below industry average turnover rates. ClinChoice is an equal opportunity employer. We have based our success on attracting, developing, and promoting talent guided by diversity and inclusivity. Our employees come from very diverse backgrounds: gender, race, beliefs, and ethnicities. We recognize this is our strength and celebrate it. #LI-TT1 #LI-Remote #Principal #contract

Location: United States (Remote) Workplace: Remote ROLE SUMMARY We're looking for a senior software engineer to join a high-impact team building the systems that power Temporal Cloud's customer experience at scale. Our team owns some of the most critical surface area in the product — Namespaces https://docs.temporal.io/cloud/namespaces, Audit Logs https://docs.temporal.io/cloud/audit-logs, and Export https://docs.temporal.io/cloud/export. Namespaces are the core unit of isolation within Temporal Cloud, providing security boundaries, workflow management, unique identifiers, and dedicated gRPC endpoints. Audit Logs and Export give customers reliable access to the operational and compliance data they depend on. In this role, you'll work on a new initiative, set technical direction and build systems that directly shape how customers provision, operate, and extract value from Temporal Cloud. You'll partner closely with engineers, product managers, and solutions architects to design resilient architectures, drive cross-functional execution, and raise the bar on reliability and scalability for our most critical features. If you thrive on ambiguous, high-leverage problems and take pride in building durable systems that grow with the business, we'd love to meet you. WHAT YOU’LL DO - Lead the Design of Business-Critical Systems: Own end-to-end technical design and delivery for the services that power namespace scalability, reliability, and the customer data products built on top of them. - Bridge Instrumentation and Product Value: Partner with analytics and product engineers to ensure what gets collected actually powers meaningful customer insights; translate business questions into durable event schemas that outlast the feature that introduced them. - Architect Data Pipelines for Scale and Correctness: Define and evolve our data pipeline architecture for high-throughput usage and operational data; make principled tradeoffs across data freshness, query cost, tenant isolation, and fault-tolerance. - Drive Data Quality as a First-Class Concern: Establish schema contracts, pipeline-level anomaly detection, and alerting for silent failures — holding the line on data correctness before bad numbers reach customers. - Raise the Engineering Bar: Set quality standards through code and design reviews; introduce patterns and tooling that improve maintainability, observability, and incident response across the team. - Mentor and Multiply Impact: Grow the engineers around you, unblock execution, and foster a culture of ownership, learning, and pragmatic excellence. - Improve Developer and Customer Experience: Identify opportunities to streamline customer flows via automation, better tooling, and targeted platform improvements that reduce friction and support load. TECHNOLOGY STACK - Primary Language: Go - Data Storage: PostgreSQL, Redshift, S3, Google Cloud Storage, Azure Blob Storage - Data Warehouse: Snowflake, Databricks, Clickhouse, Big Query - Data Processing: Kinesis, Firehose - Infrastructure: Kubernetes - Core Framework: Temporal (of course 😉) WHAT YOU’LL BRING - Deep experience designing and delivering production-grade backend systems in cloud environments, with direct ownership over architecture and operational outcomes — including what happens when things go wrong. - Strong proficiency in at least one systems or backend language (Go preferred), with the ability to navigate large codebases and drive technical decisions with confidence. - Hands-on experience building and operating distributed systems: concurrency, reliability, scaling, consistency, and failure handling in production. - Solid experience with data pipelines and storage systems (Postgres, Redshift, Kafka/Kinesis, S3-compatible storage, Clickhouse) and a track record of ensuring correctness and traceability at scale. - Experience with production operations: observability, incident response, performance tuning, on-call readiness, and continuous delivery. - Ability to work effectively across functions — translating ambiguous requirements from product managers and solutions architects into clear, executable technical plans. - Strong written and verbal communication: you write crisp design docs, align stakeholders on tradeoffs, and can explain a complex system to someone who didn't build it. - A builder's mindset: you enjoy simplifying complex workflows, improving tooling, and leaving systems better than you found them. WHAT YOU CAN EXPECT - High-impact ownership over systems tied directly to revenue, customer lifecycle, and platform scalability - Collaborative engineering culture focused on quality, pragmatism, and measurable outcomes - Exceptional technical colleagues and a feedback-rich environment - Lean processes and autonomy without unnecessary bureaucracy - Strong emphasis on reliability and operational excellence—balanced with rapid iteration - A team that values mentorship, thoughtful design, and steady improvements that compound over time Temporal Technologies is an Equal Opportunity Employer. Temporal Technologies does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need. We embrace and celebrate differences and diversity. Temporal is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. If you need to request a reasonable accommodation, please let your Recruiter know so we can assist.

Location: Austin, United States Workplace: hybrid TeamViewer provides a leading Digital Workplace platform that connects people with technology—enabling, improving and automating digital processes to make work work better. Our software solutions harness the power of AI and shape the future of digitalization. We believe that our diverse teams and strong company culture are key to the success of our products and technologies, that hundreds of millions of users around the world and around 645,000 customers across all industries rely on. With more than 1,900 employees worldwide, we celebrate the unique perspectives and talents that each individual brings to the table and foster a dynamic work environment where new ideas thrive. Are you ready to join our team and make an impact? We’re looking for a Product Manager to own the roadmap for how Managed Service Providers (MSPs) use our Digital Employee Experience (DEX) platform. You’ll help MSPs monitor and improve the employee technology experience across multiple customers from one place, while keeping each customer’s data and permissions separate. Responsibilities Set the product strategy and roadmap for MSPs. Talk directly with partners and customers to understand their workflows and decide what to build next. Work with Engineering and UX to build features such as a view across customer accounts, delegated admin access, reusable automations, and reporting. Own features from discovery through launch. Use adoption, customer feedback, and time saved by MSP teams to guide what you improve next. Partner with Sales, Marketing, and Customer Success to launch new capabilities and help MSPs adopt them. Requirements 5+ years of enterprise software product management experience, including owning a roadmap and bringing features from discovery to launch. Experience building for, selling through, or working with MSPs. You understand how service providers manage multiple customers. Experience with multi-tenant SaaS products and an understanding of how to keep customer data and access separate. Knowledge of DEX, endpoint management, end-user computing, IT operations, observability, or a related area. Ability to make clear trade-offs using customer feedback, product data, and business goals, and explain those decisions to technical and commercial teams. A relevant degree or equivalent practical experience, authorization to work in the U.S., and flexibility to work with customers and partners across time zones. Nice to have Experience with federal, defense, or other regulated public-sector customers, including federal systems integrators. Familiarity with FedRAMP, DoD cloud requirements such as IL5, or federal procurement. What we offer Competitive compensation and bonuses Flexible PTO and paid holidays 401(k) with employer matching Comprehensive Health insurance package including 100% employer-paid medical coverage Up to 12 weeks of Parental Leave Basic Life Insurance, Short-Term & Long-Term Disability, 100% employer-paid Quarterly teambuilding events, leadership luncheons, and companywide “All Hands” meetings Open door policy and business casual dress code We celebrate diversity as one of our core values. Join c-a-r-e and lead change initiatives together with us! Work location for this position is Austin, TX. TeamViewer is an equal opportunities employer and is committed to building an inclusive culture where everyone feels welcome and supported. We C-A-R-E and understand that our diverse, values-driven culture makes us stronger. As we continue to grow as a company, we also focus on enabling our employees to grow both personally and professionally. We are proud to have an open and embracing workplace environment that will empower you to be your best no matter your gender, civil or family status, sexual orientation, religion, age, disability, education level, or race. If you require any accommodations or adjustments during the application or hiring process, including interview or onboarding support, please reach out to your Talent Acquisition Partner, who will be happy to support you. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States.

Location: San Francisco, CA • New York, NY • United States Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Application Platform is part of Product Platform within Figma’s Infrastructure organization. We build shared foundations that help engineers ship backend product work quickly, safely, and reliably. The team owns a large Ruby application that powers Figma’s REST APIs, asynchronous jobs, and workflow orchestration. Our systems sit on critical production paths and shape the day-to-day experience of backend engineers across Figma. We’re looking for an experienced backend engineer with meaningful production Ruby experience who enjoys building for other engineers. You don’t need to be a Ruby language specialist. You should be comfortable making informed tradeoffs in a substantial shared codebase and turning recurring problems into durable systems, tools, and paved paths that improve engineering velocity across the company. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Design and evolve shared Ruby frameworks for REST APIs, asynchronous jobs, workflow orchestration, and data access Improve the availability, reliability, scalability, and performance of backend systems that support critical product functionality Modernize a large Ruby codebase through safe architectural changes, including moving REST APIs from Sinatra toward Rails and introducing stronger endpoint abstractions and type safety Make backend development faster by improving hot reloading, local workflows, test infrastructure, CI reliability, debugging tools, and iteration speed Strengthen the scalability, isolation, observability, and recovery capabilities of Figma’s asynchronous job platform Partner with product engineers—your customers—and Infrastructure teams to identify recurring pain points and turn them into reusable platform capabilities Establish pragmatic engineering practices through shared libraries, APIs, documentation, tooling, code review, and technical guidance Mentor other engineers and contribute to a culture of thoughtful execution, high technical standards, and shared ownership We’d love to hear from you if you have: Bring 5+ years of professional software engineering experience, including 3+ years building production systems with Ruby Build, maintain, and evolve large Ruby applications and shared backend codebases that support multiple engineering teams Design reliable distributed systems at production scale, including APIs, background processing, testing, observability, and operations Improve complex, established systems through architecture, modularization, migrations, performance, reliability, or developer tooling Create scalable abstractions, navigate technical tradeoffs, and collaborate with and mentor engineers across teams While it’s not required, it’s an added plus if you also have: Build or operate background-job and workflow systems, with an understanding of concepts such as retries, idempotency, scheduling, backpressure, isolation, or failure recovery Work with cloud and infrastructure technologies such as AWS, Kubernetes, Terraform, or workflow systems like Temporal Improve developer productivity through test performance, local development workflows, CI, or large-scale code migrations At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. Pay Transparency Disclosure Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law. Annual Base Salary Range: $235,000 — $376,000 USD At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status , or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com . These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: Holding interviews in an accessible location Enabling closed captioning on video conferencing Ensuring all written communication be compatible with screen readers Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice . Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles: Candidates may submit up to 5 applications during any rolling 30-day period. Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection. Once the applicable days has passed, candidates are welcome to apply again.

Location: Remote Workplace: Remote About Prefect Prefect builds automation for an unpredictable world. The last decade of automation was about protecting workflows from unpredictability; in the agentic era, unpredictability is the point. Our mission is to give people confidence in automated work, whether that work is a mission-critical data pipeline or a fleet of AI agents. In August 2026, Prefect and Dagster, competitors for eight years, joined forces to build the next generation of automation infrastructure. Today, our ecosystem includes Dagster, the data platform; Prefect, the agent platform; and FastMCP, the leading open-source developer framework for the MCP ecosystem. Together, our open-source and commercial products are trusted by Fortune 500 companies, data innovators, and high-growth technology companies around the world. We think of our culture as the operating system of the company. We’ve carefully created a supportive, high-performance environment that empowers our team to do the best work of their careers, have meaningful impact, and continue growing personally and professionally. We’re a remote-first team that values high standards, ownership, and thoughtful collaboration. THE ROLE In August, Dagster and Prefect became one company. Behind the scenes, that left us with two of nearly everything: two SOC 2 programs, two ways of managing laptops, overlapping tools and accounts, and a long list of tools that each need one clear owner. We're hiring a Security & IT Operations Engineer to turn all of it into one setup that runs well and gets easier to run every quarter. You'll own the day-to-day of our security compliance program and our corporate IT. You'll report to our Security & Systems Lead as the first hire on this new team. Our customers are enterprise data, infrastructure, ML and AI teams, and our products run code inside their data infrastructure. AI has made attacks cheap and fast, so customers look hard at how we protect them, and a well-run security and compliance program is a big part of our answer. You won’t be pushing security uphill here. More engineers volunteered for our new Security Guild than its first sprint had room for. Building on both companies’ existing security work, the guild is implementing shared product security tools and consistent vulnerability management and incident response processes across Prefect and Dagster. That commitment is helping us stay ahead of AI-accelerated attacks. You’ll enjoy this role if you like a mix of hands-on work and longer-term improvements, and want a meaningful say in how our IT and compliance programs run. WHAT YOU’LL OWN - Run day-to-day compliance. Keep SOC 2 controls, evidence collection, access reviews, policy acknowledgments and training on track. Work directly with auditors and control owners, and follow findings through to resolution. - Help consolidate our compliance programs. With our team lead and consultant, choose a GRC platform and set up both programs. Help adapt control descriptions across environments and design activities that minimize manual work. - Own corporate IT. Run Google Workspace and our SaaS apps, handle onboarding and offboarding with People Operations, and manage our Mac fleet in Rippling. Help employees with laptop and access issues, and improve the setup as you learn where people get stuck. - Improve access management. Work with our identity partner on how access is requested, approved, granted and removed. Own the daily processes and keep them documented. - Protect corporate systems. Manage macOS and application updates, investigate endpoint alerts, and track vulnerabilities through remediation. Verify fixes and participate in phishing and other corporate incident response with our team lead. - Automate repetitive work. Use scripts, APIs, workflow tools or AI to reduce manual IT and compliance tasks and make common requests self-service. Recently completed projects include consolidating Mac device management into Rippling, running access reviews that support both SOC 2 programs, and working with teams to assign tool owners and retire duplicates. WHERE THE ROLE CAN GROW We’re building the Security & Systems function for the combined company, and this role will help shape it. Starting with ownership of day-to-day IT and compliance, you can grow toward broader security operations and engineering—including vulnerability management, corporate incident response, and corporate security engineering—or toward risk management and AI governance. The direction will depend on your strengths, interests, and the company’s needs, with opportunities to take on more program ownership and planning as the function develops. WHAT YOU’LL BRING We’re looking for hands-on IT and compliance experience, practical technical judgment, and the ability to take ownership. Your experience may be deeper in one area, but you should be comfortable across both. - You’ve owned recurring SOC 2 activities and worked directly with external auditors, or bring auditing experience. You understand how controls work, what evidence demonstrates they’re operating, and how to adapt them across systems and teams. - You’ve administered and secured corporate IT systems, including account management, onboarding/ offboarding and Macs managed through an MDM. You’re comfortable with patching, endpoint alerts, remediation tracking, phishing or suspicious account activity, and helping employees troubleshoot problems. - You’re comfortable automating recurring tasks with scripts, APIs, workflow tools or AI, and can explain something you’ve built. A small, useful improvement is a good example. - You drive work across teams: establish owners and deadlines, work through blockers, and follow through until tasks are completed and documented. You know when to resolve something yourself and when to escalate. NICE TO HAVE - Experience with Google Workspace, Rippling, or a GRC platform such as Vanta, Drata or Thoropass. - Familiarity with SSO, SCIM provisioning or other ways to automate account access. - Experience helping implement or migrate an IT or compliance system, or improving a process that involved several teams. WHO THIS ROLE IS NOT FOR - You’re looking to leave hands-on IT support behind. Helping someone with a laptop or access problem is part of the job, alongside larger projects and automation work. - You need a settled, fully documented environment from day one. We’re still bringing two companies’ systems together, and you’ll help work out how the combined setup should run. WHAT YOU'LL GET IN RETURN: Base Salary Ranges: - San Francisco Bay Area and NYC metro: $165,000 - $219,000 - Washington, D.C., Boston, LA metro and Seattle: $150,000 - $194,000 - Denver, Chicago, Atlanta and all other US metros: $149,000 - $193,000 Actual base salary within each range depends on the candidate's location, experience, and qualifications. Equity and benefits are not included in the range above. Your recruiter can share more about the salary range for your preferred location during the hiring process. Perks and Benefits: - Remote-first team with flexible-first culture - Equity Stock Options - 401(k) with 5% company match (vests immediately!) - Unlimited PTO - Medical, Dental and Vision insurance - Generous Parental Leave - Life Insurance and Disability benefits - $800/month remote work stipend And that's just the start — for more info check out our benefits and perks on our careers page. BELONGINGNESS AT PREFECT: Belongingness at Prefect is our commitment to ensuring mutual power, access, and opportunity among all groups and individuals who make up our community. We operationalize belongingness through actions large and small on a daily basis, but always with the goal that all groups and individuals can contribute as their most authentic self to the evolution of our product, our team, and our community. Belongingness is also our commitment to bridge with individuals or groups not yet established in our community, acknowledge differences in a way that affirms distinct identities, and allows for a new, more expansive group identity to form. EQUAL OPPORTUNITY AT PREFECT: Prefect is an equal opportunity employer and encourages applications from people of all backgrounds. All applicants will be considered for employment without attention to race, religion, color, sex (including pregnancy, sexual orientation and gender identity/expression), national origin, disability or any other status protected under applicable federal, state, or local laws. Delaney is a real live person (👋🏻) and is looking forward to learning more about you through your application.

We are looking for a Senior IT Security Engineer (based in #Cyprus, #Serbia, or #Remote) to establish and lead our day-to-day security function. This is a hands-on, senior-level role focusing on infrastructure, cloud security, access controls, and endpoint defense.

Location: Intellias Meet your recruiter Yuliia Serednia yuliia.serednia@intellias.com https://www.linkedin.com... Vacancy details Software Engineering Rust Engineer Senior Ukraine Remote APPLY NOW REFER A FRIEND Our client is a company that enables people, enterprises, and cities to harness the power of location. By making sense of the world through the lens of location, it empowers their customers to achieve better outcomes from helping a city manage its infrastructure or an enterprise optimize its assets to delivering drivers to their destination safely. What project we have for you Designing the MCP Server for the client’s API from scratch. This project focuses on the development of a robust and scalable MCP server. This server will act as a vital bridge, enabling AI agents and other MCP-compatible clients to intelligently interact with Client’s Location APIs. By creating this crucial piece of infrastructure, you will empower AI to understand and reason about the physical world, opening up new possibilities in logistics, autonomous systems, urban planning, and beyond. What you will do Design and implement core services for: MCP Server (tool registry, session management, protocol endpoints). MCP Content Delivery (streaming, heavy data transformation, async workers). Guardrails (usage quotas, rate limiting, anomaly detection, schema validation). Advanced trace collection and observability dashboards. Extend and maintain the McpEngine and its built-in navigational tools. Implementing the logic to interface with a diverse set of Location APIs, ensuring efficient and reliable data exchange. Optimize system performance for high-throughput/low-latency operations. Participate in code reviews, architecture discussions, and sprint planning. Collaborate closely with QA, DevOps, and BA to refine backlog items and deliver secure, high-quality releases. Contribute to documentation, runbooks, and best practices for maintainability and scalability. What you need for this 5+ years of professional experience in backend development with Rust. Solid understanding of distributed systems and high-load data processing (streaming, queuing, caching). Experience integrating with RESTful APIs (request/response modeling, error handling, retries, timeouts). Experience designing platform-agnostic cores, where business logic is decoupled from transport and serving layers. Good understanding of the Model Context Protocol (MCP) and its client-server architecture is highly desirable. Ability to design and maintain domain models and data types that map to external APIs and internal reasoning needs. Familiarity with tracing/logging and observability patterns in async Rust. Understanding of geospatial concepts: geocoding, routing, transit, traffic. What it’s like to work at Intellias At Intellias, where technology takes center stage, people always come before processes. By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That’s why we offer a range of benefits that support your well-being and charge your professional growth. We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer. All applicants will be considered for employment without discrimination based on race, color, religion, age, gender, nationality, disability, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by applicable law. We welcome and celebrate the uniqueness of every individual. Join Intellias for a career where your perspectives and contributions are vital to our shared success. Skills MCP Rust SQL

Мы ищем сильного пресейл-инженера по кибербезопасности, который сможет выступать техническим лидером на этапе продажи и помогать клиентам превращать бизнес-и ИБ-потребности в реалистичные, конкурентоспособные и архитектурно выверенные решения.

Location: Remote Canada At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. About the InfoSec team The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. About the role In this role, you'll help mature Affirm's insider threat program. You'll build out the controls, detection use cases, and investigative practices that make it work day to day, support insider risk investigations, and partner with Legal, HR, Privacy, and Compliance to keep the program effective, proportionate, and trusted by Affirmers. What you’ll do Lead the build-out of key insider threat workstreams, from initial design through to day-to-day operation Build out the program's operating mechanics, including investigative standards, playbooks, and the metrics and reporting that show whether the program is working Support insider risk investigations alongside SIRT, bringing insider threat expertise, telemetry and evidence analysis, and written findings and risk recommendations Partner with Legal, HR/Employee Relations, Privacy, and Compliance on case handling and escalation criteria, helping ensure the program respects employee privacy and meets legal and regulatory obligations Threat model Affirm's highest-risk data and systems for insider risk, and partner with detection engineers to turn the results into production detections Own and improve the controls that reduce insider risk, including data loss prevention, endpoint monitoring, secure browser and contractor access controls, SaaS posture management, and access governance, working with system owners to close gap Automate the program's operational load with workflow automation platforms and Python, covering evidence collection, case routing, and reporting Build and expand agentic automations that assist with insider risk triage and investigation, and define which decisions stay with a human What we look for Deep expertise in security engineering, security operations, insider risk, or digital forensics Track record of standing up new security capabilities where little existed before Experience running investigations end to end, including evidence handling, log and endpoint forensics, timeline reconstruction, and written findings suitable for Legal and HR audiences Ability to write and evaluate detection logic against endpoint, identity, cloud, and SaaS telemetry in a SIEM (Splunk, Elastic, Panther, Chronicle, or similar) Hands-on experience with insider risk tooling such as DLP, UEBA, endpoint detection and response, CASB, and access governance, with a practical sense of their strengths and limits Working knowledge of Python for security tooling and automation Experience building and maintaining production workflows in automation platforms such as Tines, Torq, or similar Experience building and running agentic automations in production that assist with alert triage and investigation, such as LLM-driven enrichment, summarization, or first-pass analysis, with a clear view of where human review stays in the loop Discretion and sound judgment handling sensitive investigations, and comfort navigating the privacy, legal, and employee-relations considerations that insider work carries Clear written and verbal communication skills, with the ability to work across Security, Engineering, Legal, HR, Privacy, and Compliance Experience in regulated or financial services environments (SOC 2, PCI DSS, GLBA) is a plus Base Pay Grade - N Equity Grade - Canada 6 Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). In addition, the employees may be eligible for equity rewards offered by Affirm Holdings, Inc. (parent company). CAN base pay range per year: $153,000 - $213,000 $CAD. This remote role is open only to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan. #LI-Remote Remote-first with flexibility built in Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience. Benefits designed for you Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights: Health coverage at no cost: We cover 100% of premiums for employees and their dependents. Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you. Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to. Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount. We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help. For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law. By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and consent to the use of your personal information as described.

Location: Remote (United States) Thank you for considering Tailscale. If this job description resonates with you, please apply. Frequently cited statistics show that people who identify with historically marginalized groups are likely to apply to jobs only if they meet 100% of the qualifications. We encourage you to help us break that statistic! About Tailscale Tailscale is making safe connection effortless by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital. About the Role We are seeking a Product Manager to own Tailscale's networking features — the layer that decides how traffic finds its destination by name on top of Tailscale’s seamless mesh connectivity solution. Concretely, you will own four feature sets: App Connectors , DNS , Funnel , and Tailscale Serve & Services . A tailnet gives every device an identity and an address. Networking features are what turn addresses into something a person, a script, or an AI agent can actually use — a name, a service, an app, a URL. App Connectors route traffic to specific SaaS and private applications by name, so access follows the app rather than the IP. DNS — MagicDNS, split DNS, custom name servers, search domains Tailscale Serve & Services make a workload — not a machine — the unit of connectivity and access: addressable, load-balanced, and durable across the instances behind it. This is the wedge that lets customers replace a service registry, and eventually much of what they use a service mesh for, with Tailscale. Funnel is Tailscale's ingress story: securely exposing a Service running inside the tailnet to the public internet, from a hobbyist sharing a dev server to production webhooks and public endpoints. This is the most user-visible role in Tailscale's Dataplane Platform, and the work is as much product design as it is networking. DNS settings, connector topologies, and service definitions are configured by network engineers and IT admins in the admin console, API, and CLI, and the distance between "magical" and "unusable" is the object model, the defaults, and the error messages. See How Tailscale Works , Tailscale Funnel , and Four ways to Tailscale a service to learn more. Key Responsibilities Own the vision, strategy, and roadmap for Tailscale's networking features: App Connectors, DNS, Funnel, and Tailscale Services Own the operator experience across these surfaces: how network engineers and IT admins configure, segment, monitor, and troubleshoot them at scale, in both the admin console and the CLI Partner with GTM, Customer Success, and Solutions Engineering on production commitments and strategic deals, and champion the migration path from reverse proxies, bastion hosts, cloud ingress, and service meshes to Tailscale Build systematic customer insight across the full spread of Tailscale users, from a homelab operator exposing a media server through Funnel to a large enterprise replacing its service registry What We Are Looking For 7+ years in product management, including direct ownership of an application-layer connectivity product: reverse proxies, ingress controllers or gateways, API gateways, service mesh or service registry, DNS and traffic management, secure tunneling and exposure products, or identity-aware proxy connectors A track record of turning a complex networking system into a legible product surface: you can point to an object model, a set of defaults, or a configuration experience you designed and explain why it was right End-to-end ownership of a product area: strategy, requirements, launch (docs, enablement, rollout), and the iteration after launch Evidence of data-informed decisions — metrics you defined, instrumentation you pushed for, and at least one time the data changed your mind Nice To Have Experience with Product Led Growth and how to balance that with enterprise buying motions Kubernetes networking: ingress, Gateway API, operators, or service exposure patterns Hands-on experience with secure tunneling and exposure products (ngrok, Cloudflare Tunnel, Cloudflare Access, Teleport, Zscaler Private Access) as a builder or a heavy user Abuse prevention, rate limiting, or trust and safety work on a publicly exposed service Familiarity with VPN and tunneling protocols (WireGuard, IPsec), BGP, cloud VPC peering, or PrivateLink-style private connectivity Public technical writing, conference talks, or open-source contributions in networking Hands-on experience with Tailscale at work or at home As a company, we strive to maintain fair and equitable compensation practices within our team across all roles and all levels. Tailscale's compensation package includes base salary, equity, and comprehensive benefits. The salary range displayed on each job posting represents the target range for a new hire's base salary. Individual offers may vary based on experience and skill set. US Pay Range $177,000 — $221,000 USD What We Offer An inclusive, flexible environment where you can be your authentic self. We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life. A competitive total compensation package. This includes a base salary, an equity incentive plan and variable commission (for quota-based roles). Comprehensive group benefits with no waiting period. Take advantage of coverage for health, vision, dental, and more for you and your family! Remote first company —most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description. Employer-funded retirement contributions. Tailscale will match your retirement contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of your eligible compensation. Connect with other Tailscalars IRL. Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, the United Kingdom, and Singapore. We support intentional in-person connection through team travel and distributed collaboration. Support for your personal and professional development. Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities. Paid time off and a healthy work-life integration. Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world! A build-your-own home office setup. You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $500 USD to customize your workstation to make it your own. Paid parental leave program . We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups (20 weeks for birthing parents, 16 weeks for non-birthing parents). Tailscale is committed to providing an accessible and inclusive hiring process. If you require an accommodation at any stage of the recruitment process or related to any aspect of this role, please contact your recruiter. Our hiring process uses AI-assisted tools to help screen and assess candidates. All hiring decisions are made by people. Please be aware that legitimate emails from Tailscale's talent team will only originate from @tailscale.com, @greenhouse.io, and @interviews.modernloop.io email addresses. For more information about protecting yourself from impersonators and scams, please visit https://tailscale.com/scam-awareness .

Location: Remote (Canada) Thank you for considering Tailscale. If this job description resonates with you, please apply. Frequently cited statistics show that people who identify with historically marginalized groups are likely to apply to jobs only if they meet 100% of the qualifications. We encourage you to help us break that statistic! About Tailscale Tailscale is making safe connection effortless by delivering software that makes it easy to securely interconnect people and their devices, no matter where they are. From hobbyists to multinational corporations, teams of every size use Tailscale each day to protect their networks, share access to internal tools, and more. We're building a future for the Internet that's easy, sensible, and safe, like it used to be. Founded in 2019 and fully distributed, we're backed by Accel, CRV, Insight, Heavybit, and Uncork Capital. About the Role We are seeking a Product Manager to own Tailscale's networking features — the layer that decides how traffic finds its destination by name on top of Tailscale’s seamless mesh connectivity solution. Concretely, you will own four feature sets: App Connectors , DNS , Funnel , and Tailscale Serve & Services . A tailnet gives every device an identity and an address. Networking features are what turn addresses into something a person, a script, or an AI agent can actually use — a name, a service, an app, a URL. App Connectors route traffic to specific SaaS and private applications by name, so access follows the app rather than the IP. DNS — MagicDNS, split DNS, custom name servers, search domains Tailscale Serve & Services make a workload — not a machine — the unit of connectivity and access: addressable, load-balanced, and durable across the instances behind it. This is the wedge that lets customers replace a service registry, and eventually much of what they use a service mesh for, with Tailscale. Funnel is Tailscale's ingress story: securely exposing a Service running inside the tailnet to the public internet, from a hobbyist sharing a dev server to production webhooks and public endpoints. This is the most user-visible role in Tailscale's Dataplane Platform, and the work is as much product design as it is networking. DNS settings, connector topologies, and service definitions are configured by network engineers and IT admins in the admin console, API, and CLI, and the distance between "magical" and "unusable" is the object model, the defaults, and the error messages. See How Tailscale Works , Tailscale Funnel , and Four ways to Tailscale a service to learn more. Key Responsibilities Own the vision, strategy, and roadmap for Tailscale's networking features: App Connectors, DNS, Funnel, and Tailscale Services Own the operator experience across these surfaces: how network engineers and IT admins configure, segment, monitor, and troubleshoot them at scale, in both the admin console and the CLI Partner with GTM, Customer Success, and Solutions Engineering on production commitments and strategic deals, and champion the migration path from reverse proxies, bastion hosts, cloud ingress, and service meshes to Tailscale Build systematic customer insight across the full spread of Tailscale users, from a homelab operator exposing a media server through Funnel to a large enterprise replacing its service registry What We Are Looking For 7+ years in product management, including direct ownership of an application-layer connectivity product: reverse proxies, ingress controllers or gateways, API gateways, service mesh or service registry, DNS and traffic management, secure tunneling and exposure products, or identity-aware proxy connectors A track record of turning a complex networking system into a legible product surface: you can point to an object model, a set of defaults, or a configuration experience you designed and explain why it was right End-to-end ownership of a product area: strategy, requirements, launch (docs, enablement, rollout), and the iteration after launch Evidence of data-informed decisions — metrics you defined, instrumentation you pushed for, and at least one time the data changed your mind Nice To Have Experience with Product Led Growth and how to balance that with enterprise buying motions Kubernetes networking: ingress, Gateway API, operators, or service exposure patterns Hands-on experience with secure tunneling and exposure products (ngrok, Cloudflare Tunnel, Cloudflare Access, Teleport, Zscaler Private Access) as a builder or a heavy user Abuse prevention, rate limiting, or trust and safety work on a publicly exposed service Familiarity with VPN and tunneling protocols (WireGuard, IPsec), BGP, cloud VPC peering, or PrivateLink-style private connectivity Public technical writing, conference talks, or open-source contributions in networking Hands-on experience with Tailscale at work or at home As a company, we strive to maintain fair and equitable compensation practices within our team across all roles and all levels. Tailscale's compensation package includes base salary, equity, and comprehensive benefits. The salary range displayed on each job posting represents the target range for a new hire's base salary. Individual offers may vary based on experience and skill set. CAN Pay Range $237,180 — $296,140 CAD What We Offer An inclusive, flexible environment where you can be your authentic self. We recognize the impact of diverse voices and backgrounds on the growth of our people, product, and company. And that flexibility in how and when you work empowers our team to integrate work and life. A competitive total compensation package. This includes a base salary, an equity incentive plan and variable commission (for quota-based roles). Comprehensive group benefits with no waiting period. Take advantage of coverage for health, vision, dental, and more for you and your family! Remote first company —most of our teams work fully remotely. Enjoy a change of scenery wherever you can get wifi, participate in virtual and in-person social events, and leverage our corporate co-working program to visit WeWork (or other similar spaces near you). Some roles require in-office collaboration depending on team needs, which will be clearly noted in the job description. Employer-funded retirement contributions. Tailscale will match your retirement contributions dollar-for-dollar, up to a maximum annual employer contribution equal to 0.75% of your eligible compensation. Connect with other Tailscalars IRL. Attend our annual company retreat, participate in team off-sites, and collaborate in person with teammates across Canada, the United States, the United Kingdom, and Singapore. We support intentional in-person connection through team travel and distributed collaboration. Support for your personal and professional development. Grow your career thoughtfully with $1500 USD annually for professional development, or take advantage of mentorship, coaching, and internal promotion opportunities. Paid time off and a healthy work-life integration. Our flexible, paid time off program supports you for any situation life throws your way, whether moving homes or travelling the world! A build-your-own home office setup. You choose your own company-owned laptop (Mac or PC), receive a monthly home internet reimbursement, and $500 USD to customize your workstation to make it your own. Paid parental leave program . We care about your life outside of work and encourage new parents to take advantage of parental leave top-ups (20 weeks for birthing parents, 16 weeks for non-birthing parents). Tailscale is committed to providing an accessible and inclusive hiring process. If you require an accommodation at any stage of the recruitment process or related to any aspect of this role, please contact your recruiter. Our hiring process uses AI-assisted tools to help screen and assess candidates. All hiring decisions are made by people. Please be aware that legitimate emails from Tailscale's talent team will only originate from @tailscale.com, @greenhouse.io, and @interviews.modernloop.io email addresses. For more information about protecting yourself from impersonators and scams, please visit https://tailscale.com/scam-awareness .

Location: San Francisco fal is the generative media ecosystem powering the next generation of AI products. We build the infrastructure, tools, and model access that teams need to move from idea to production, and do it at scale without compromise. For developers and enterprises, fal is the foundation that makes generative media not just possible, but practical: a unified platform where high-performance inference, orchestration, and observability come together to unlock new categories of AI-native products. As generative media reshapes industries across a market projected to grow by hundreds of billions over the next decade, fal is becoming the ecosystem that ambitious teams build on. ABOUT THIS ROLE: We’re hiring a Staff Security Engineer to set the technical direction for security across fal.ai http://fal.ai. You’ll work across our GPU compute fleet, multi-cloud and Kubernetes environments, inference APIs, and the AI systems our teams build and use. You’ll design the security architecture, build the controls yourself, and make secure-by-default the easiest path for every engineer. Proficiency in building with and using AI is central to this role. WHAT YOU’LL DO - Secure the Platform - Design isolation for multi-tenant GPU workloads, customer code, and model execution - Protect model weights, customer data, and inference endpoints with strong identity, encryption, and access controls - Harden cloud, Kubernetes, CI/CD, and the software supply chain Secure AI Systems - Threat model inference, agentic workflows, and internal AI tools, including prompt injection, data leakage, and model supply chain risks - Build guardrails for agents and AI tools, such as scoped permissions, sandboxing, and audit logging - Use LLMs and agents to automate security reviews, vulnerability triage, and remediation Set the Technical Direction - Own the security architecture and the roadmap for our highest-risk areas - Run design reviews and publish secure patterns that teams can adopt without waiting on security - Run vulnerability management from discovery through prioritization and fix - Mentor engineers and raise the security bar across the company QUALIFICATIONS/NICE-TO-HAVES - AI fluency: you use LLMs, agents, and AI coding tools daily to build, review, and automate security work - 8+ years of engineering experience, including 5+ in hands-on security engineering - Deep knowledge of cloud security (AWS/GCP), Kubernetes, Linux, and identity and access systems - Strong in Python or Rust; you write and ship production code - A record of security improvements that engineering teams adopted, led without formal authority - Explains security risk in business terms to engineers and executives alike - Experience with GPU infrastructure, ML platforms, or multi-tenant compute - Securing LLM-based systems or agent frameworks, or AI red teaming - Sandboxing and isolation technologies such as gVisor, Firecracker, or Kata - Experience supporting SOC 2 or ISO 27001 audits WHAT WE OFFER AT FAL - Interesting and challenging work - A lot of learning and growth opportunities - We offer visa sponsorship and will help you relocate to San Francisco. - Health, dental, and vision insurance (US) - Regular team events and offsites COMPENSATION - $180,000 - $250,000 + equity + comprehensive benefits package   U.S. EQUAL EMPLOYMENT OPPORTUNITY INFORMATION: fal provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other classification protected by applicable law.

Location: Portugal; Spain; France; Germany; Poland; United Kingdom As the Senior macOS QA Engineer, you will be responsible for validating the stability, security, and compatibility of a secure macOS platform used to protect sensitive systems. This is a hands-on manual and exploratory QA role (not an automation role) that requires deep, practical experience with macOS internals, system extensions, and application behavior. You will work alongside a highly experienced team of engineers and reverse engineers to design and execute manual test plans that dig into system extensions, inter-process communication, and low-level operating system behavior. If you thrive on identifying edge cases, love all things macOS, enjoy breaking complex systems in controlled ways, and have an investigative mindset for system behavior, this role is for you. This is not a fit if macOS has been a secondary platform, or if your experience is mainly iOS, web or automation. Responsibilities Test macOS security features spanning system extensions, Endpoint Security, and Network Extension frameworks. Design and execute manual test plans for system extensions, inter-process communication (XPC), and low-level operating system integration points. Explore and document edge cases, race conditions, compatibility scenarios, and regressions across macOS versions. Reproduce and isolate complex issues related to sandboxing, SIP and TCC interactions, Launch Services, and daemon behaviors. Work directly with development, support, product, and automation teams to triage, verify, and regress bugs and compatibility issues. Validate interactions between the platform and third-party macOS apps and services. Collaborate with SDETs to turn exploratory and regression cases into automation candidates. Maintain close familiarity with changes in macOS releases and how they may impact functionality and compatibility. Requirements 5+ years of QA experience with macOS applications, with a focus on security, system-level, or compatibility testing. Strong understanding of macOS internals, including System Extensions, Endpoint Security, XPC, TCC, SIP, Launch Services, and file systems. Familiarity with macOS diagnostic and monitoring tools such as Console, Activity Monitor, Instruments, fs_usage, dtrace, tcpdump, and lldb. Experience testing low-level products such as VPNs, endpoint security tools, or antivirus software. Ability to read crash reports and debug logs and identify root causes. Ability to work independently and investigate issues thoroughly before escalating. Excellent written communication for clear test case documentation and bug reports. Comfortable working in Terminal (launchctl, log, systemextensionsctl, tccutil) Able to set up and fully clean test environments (VMs/snapshots, removing extensions, resetting permissions) Availability to work during US Eastern Time (EST) business hours. Claims will be checked: Interviews include hands-on questions about the experience listed on your CV. Benefits Compensation: $6,500 USD per month PTO and holidays ** Only CVs submitted in English will be considered **

Location: United States, Remote Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Bungie is seeking a Senior Systems Engineer with a focus on End User Experience (EUX) and Endpoint Engineering to join our Studio IT team. This role will help design, build, and improve the technology experience used by Bungie employees every day, with a focus on secure, reliable, and scalable endpoint platforms and services. Are you passionate about making technology easier and more dependable for the people using it? Do you enjoy solving complex endpoint problems, automating repetitive work, and improving how devices and applications are deployed and managed? Can you balance security, usability, and operational needs without creating unnecessary friction for our users? Then come help Bungie IT Engineering support the teams creating our world-class games. As a Senior Systems Engineer at Bungie, you will architect, implement, and support endpoint platforms, device management, application delivery, and supporting infrastructure across Bungie’s environment. You’ll work with a team of experienced IT engineers and partner closely with Studio IT Support, Information Security, infrastructure teams, application owners, and development teams to continuously improve the technology experience for our users. This role is expected to take technical ownership of EUX platforms and services, identify recurring pain points, and build solutions that reduce friction for both users and support teams. You will help establish standards, automate common workflows, and ensure endpoint services can scale with the changing needs of game development. Successful candidates will have strong experience engineering and supporting enterprise endpoint environments, be comfortable owning complex technical problems, and be able to turn user and business needs into practical technical solutions. They will also be an effective mentor, collaborator, project owner, and communicator. Responsibilities Architect, implement, and maintain endpoint management platforms and services supporting Bungie employees and development teams Own and improve the lifecycle of Bungie’s endpoints from provisioning and configuration through ongoing management and retirement Engineer solutions for Windows and macOS endpoint management, configuration, compliance, and application delivery Design and automate device provisioning and deployment workflows that reduce manual effort and improve the onboarding experience Develop automation and tooling to improve endpoint reliability, consistency, and supportability at scale Identify recurring user and support pain points and engineer solutions that address their underlying causes Improve software packaging, deployment, patching, configuration, and lifecycle management across managed endpoints Partner with Information Security to implement and meet endpoint security requirements while balancing security, usability, and development needs Partner closely with Studio IT Support to understand recurring issues, improve escalation paths, and reduce support demand through engineering Serve as a senior escalation point for complex endpoint, operating system, application, and device-management issues Evaluate endpoint health, performance, and operational data to identify opportunities for improvement Lead technical projects from requirements and design through implementation, validation, documentation, and operational handoff Evaluate new technologies and determine where they can improve the employee and developer technology experience Mentor engineers and provide technical guidance and training to Studio IT Support and other technical teams Maintain clear and useful documentation of systems, standards, architecture, runbooks, and processes Required Skills Strong experience engineering and operating endpoint management solutions in a large enterprise environment Experience with Microsoft Intune, Ivanti and other modern endpoint management technologies Strong knowledge of Windows endpoint architecture, configuration, deployment, troubleshooting, and lifecycle management Experience managing macOS endpoints using enterprise device-management technologies Experience with automated device provisioning technologies such as Windows Autopilot, Apple Automated Device Enrollment, or comparable solutions Experience with enterprise software packaging, deployment, patching, and application lifecycle management Experience designing and enforcing endpoint configuration and compliance policies Experience automating administrative and endpoint workflows using PowerShell, Python, APIs, or comparable technologies Experience troubleshooting complex endpoint issues across operating systems, applications, identity, networking, and security layers Understanding of Active Directory and Microsoft Entra ID as they relate to endpoint authentication, device identity, policy, and access Understanding of endpoint security technologies and concepts including EDR, disk encryption, local privilege management, certificates, and device compliance Experience independently leading complex technical projects involving multiple teams and stakeholders Demonstrated ability to partner with support organizations and turn recurring operational issues into engineering improvements Ability to evaluate technical decisions from both an engineering and end-user perspective Ability to mentor other engineers and help establish technical standards and best practices Strong written and verbal communication skills Bachelor's degree or equivalent Nice-to-Have Skills Experience with Jamf Pro or other enterprise Apple management platforms Experience with Microsoft Configuration Manager (SCCM/MECM) and migrations from traditional to modern endpoint management Experience with Windows Autopilot and modern Windows provisioning Experience managing developer workstations or other high-performance/specialized endpoint environments Experience supporting endpoints within game development, software development, media production, or another highly technical creative environment Experience with endpoint analytics, digital employee experience (DEX), or observability platforms Experience with application virtualization, VDI, or remote workstation technologies Experience with privileged access and endpoint privilege management Experience with PKI, certificate deployment, and certificate lifecycle management Experience integrating endpoint platforms with identity, security, ITSM, and asset-management systems Experience with infrastructure-as-code, configuration management, or CI/CD practices Experience designing technology solutions for distributed, hybrid, or globally located teams At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. This is a flexible role that can be remote, with varying pay ranges based on geographic location. For example, if you are based out of Seattle, the estimated base pay range for this role is listed below. $155,900 — $233,900 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice (where applicable) for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: San Francisco; New York Workplace: Hybrid ABOUT ALCHEMY Alchemy is the Web3 infrastructure and developer platform that powers millions of users and the world’s most innovative blockchain applications. From enabling $1+ trillion in financial transactions worldwide to scaling L2s and enabling DeFi, Alchemy provides the infrastructure and tools developers need to build reliable, scalable, and accessible experiences. Trusted by companies like JPMorgan, Stripe, Visa, Franklin Templeton, Nike, and backed by a16z, Coatue, Silver Lake, Lightspeed, and Stanford University, Alchemy is building the foundational layer for a decentralized and AI-enabled Web3 ecosystem. For more information, visit alchemy.com http://alchemy.com.   THE ROLE We're looking for a hands-on IT leader to build and run the business systems that help Alchemy work. You'll own enterprise applications and their integrations, manage and develop the IT team, and help teams across the company redesign how they work with AI. This is a player-coach role. You'll configure applications, write integrations, debug workflows, and ship automations yourself. You'll also set priorities, coach engineers, manage performance, and keep day-to-day IT service dependable. You'll identify recurring manual processes, build automations or agent workflows, and decide which steps need human review. You'll deploy and test those systems and teach the team to maintain them.   WHAT YOU WILL DO - Own business applications. Lead technical administration and improvement of Salesforce and connected sales tools, People Ops systems such as Rippling and ChartHop, and other business applications as priorities require. Partner with business owners on configuration, data quality, permissions, and technical escalations. - Build across systems. Write and maintain API integrations, scripts, and workflows that connect applications, reconcile data, and automate employee and business processes. Own testing, monitoring, failure recovery, and documentation. - Redesign work around AI. Partner with Sales, People Ops, Recruiting, Finance, and Legal to identify workflows worth rebuilding. Deliver agents and automations that can gather context, carry out authorized steps, verify results, and escalate exceptions to the right person. - Manage the team. Set priorities and expectations, run regular feedback and development conversations, hire, and manage performance. Balance service coverage with project work and make clear tradeoffs when demand exceeds capacity. - Raise the team's AI capability. Build alongside engineers, review their work, and turn successful approaches into shared tools, skills, and runbooks. Make AI-assisted building and verification part of how the team delivers work. - Keep IT service reliable. Oversee support quality, onboarding and offboarding, escalations, and operational coverage with the engineers responsible for service desk, identity, endpoints, and office technology. Jump into difficult issues when needed. - Make automation safe to operate. Partner with Security on least-privilege access, sensitive-data handling, audit trails, and approval boundaries. Use explicit approvals for high-impact actions and provide a way to stop or roll back failed automation. - Own the application roadmap and spend. Evaluate tools, manage vendor relationships and renewals, and bring application expertise in-house where it improves service or cost. Measure improvements through reliability, turnaround time, manual work removed, and adoption by the teams served.   WHAT WE ARE LOOKING FOR - Deep hands-on experience administering enterprise SaaS applications and building integrations; strong Salesforce experience and the ability to learn unfamiliar business systems. - Experience managing technical staff, including coaching, prioritization, hiring, and performance management. You're comfortable staying close to implementation. - Ability to build and debug with APIs, scripting, and workflow platforms such as n8n or Okta Workflows, with sound practices for testing and production changes. - Evidence of shipping AI-enabled workflows that other people use. You can explain what you delegated to AI, what you verified, where it failed, and how you improved it. - Experience helping a team adopt new tools and working practices, including supporting people with different starting skill levels. - Strong judgment about identity, access, employee data, and business-critical changes. You know when deterministic automation or a human decision is the better choice. - Ability to translate business needs into technical work, explain tradeoffs, and follow through on operational details.   HELPFUL EXPERIENCE - Supporting People Ops, Recruiting, Finance, or Legal applications alongside sales systems. - Employee lifecycle automation, identity integrations, and IT service management. - Building agent integrations, reusable skills, or evaluation suites with an internal AI platform.   WHAT SUCCESS LOOKS LIKE - Business systems have clear technical ownership. - The IT team delivers dependable support and application improvements, with fewer recurring manual tasks. - Teams across the company use workflows you've helped build, and your engineers can extend and operate them without depending on you for every change.   BENEFITS & PERKS 🏥 Private Health Insurance 💪 Gym Reimbursement 🚅 Commuter Benefits 🌴 Flexible Time Off 🥙 In-Office Group Meals 🧠 Learning & Development Stipend 🌎 Company Sponsored Conferences & Events 🎧 Books & Audiobook subscription with Bookster https://landing.bookster.ro/

Location: New York; San Francisco Workplace: Hybrid ABOUT ALCHEMY Alchemy is the Web3 infrastructure and developer platform that powers millions of users and the world’s most innovative blockchain applications. From enabling $1+ trillion in financial transactions worldwide to scaling L2s and enabling DeFi, Alchemy provides the infrastructure and tools developers need to build reliable, scalable, and accessible experiences. Trusted by companies like JPMorgan, Stripe, Visa, Franklin Templeton, Nike, and backed by a16z, Coatue, Silver Lake, Lightspeed, and Stanford University, Alchemy is building the foundational layer for a decentralized and AI-enabled Web3 ecosystem. For more information, visit alchemy.com http://alchemy.com.   THE ROLE We're looking for a Security Operations Engineer to improve how Alchemy detects threats, investigates incidents, and reduces operational security risk. This is a hands-on individual-contributor role with no people-management responsibilities. You'll investigate suspicious activity and build the systems that make the next investigation faster and more reliable. AI-assisted engineering and investigation should be part of your daily work: connecting evidence, developing detections, building response workflows, and checking the results against source data. You'll also help the team get better at this work. Through shared tooling, code review, pairing, and practical documentation, you'll give teammates capabilities they can use independently.   WHAT YOU WILL DO - Detect and investigate threats. Triage alerts, hunt for suspicious activity, and investigate across cloud infrastructure, corporate systems, identity, endpoints, and production environments. Establish what happened from evidence and communicate uncertainty clearly. - Engineer detection coverage. Build and tune detections, onboard useful telemetry, and maintain reliable log pipelines. Test rules against representative attacks and benign activity; address missing coverage and noisy alerts. - Respond to incidents. Participate in the security on-call rotation and incident response, including scoping, containment, recovery, and post-incident improvements. Preserve evidence and coordinate changes with system owners. - Build AI-assisted security workflows. Automate evidence collection, alert enrichment, investigation timelines, and response preparation. Connect agents to approved tools and data sources so they can complete bounded tasks with traceable results. - Verify before trusting. Evaluate AI-assisted workflows against known cases and adversarial inputs. Require evidence for conclusions, test false-positive and missed-threat behavior, and keep human approval for disruptive containment actions. - Reduce operational exposure. Partner with Infrastructure and IT on vulnerability remediation, cloud and host hardening, identity controls, and attack-surface monitoring. Prioritize findings by exposure and impact, then verify remediation. - Help secure agent operations. Work with platform and product-security partners on operational controls for agent identities, credentials, tool access, and audit logging. Investigate misuse and build detections for suspicious agent behavior. - Improve how the team works. Share reusable code, investigation skills, runbooks, and evaluation cases. Pair with teammates, review automation, and teach approaches they can apply to their own investigations. - Measure defensive outcomes. Track detection coverage, alert quality, investigation effort, response time, and remediation progress. Use those measures to decide what to improve next.   WHAT WE ARE LOOKING FOR - Hands-on security operations experience spanning detection engineering, threat hunting, and incident response. - Strong scripting and software-building ability, especially Python; experience with APIs, version control, tests, and operating automation in production. - Experience with a SIEM such as Panther, Splunk, or an equivalent platform, including detection logic and log analysis. - Working knowledge of cloud security, identity, endpoint telemetry, networking, and Linux systems. Ability to investigate across system boundaries. - Evidence of building and using AI-assisted tools in security or adjacent engineering work. You can show how you validate outputs, handle failures, and protect sensitive information. - Sound incident judgment: you can separate a hypothesis from a finding, preserve evidence, and choose when to escalate or contain. - A record of making teammates more effective through tools, mentoring, code review, or documentation, without needing management authority. - Clear written communication and the willingness to own both urgent investigations and the follow-through that prevents repeat incidents.   HELPFUL EXPERIENCE - AWS, Kubernetes, bare-metal infrastructure, detection-as-code, or SOAR workflows. - Digital forensics, threat intelligence, or testing detections through attack simulation. - Securing AI agents and tool integrations, including prompt injection, credential misuse, and data-exfiltration risks. - Blockchain infrastructure or other environments with sensitive keys and high-impact production systems.   WHAT SUCCESS LOOKS LIKE - Investigations reach evidence-backed conclusions faster. Detection coverage improves, repeat noise declines, and remediation is verified. The team adopts tools and workflows you've built, with clear limits on what agents may do and a tested path for handling failures.   BENEFITS & PERKS 🏥 Private Health Insurance 💪 Gym Reimbursement 🚅 Commuter Benefits 🌴 Flexible Time Off 🥙 In-Office Group Meals 🧠 Learning & Development Stipend 🌎 Company Sponsored Conferences & Events 🎧 Books & Audiobook subscription with Bookster https://landing.bookster.ro/