Вакансии

Location: Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Staff Backend Engineer on GitLab's Security Factory: Code Scanning team, you help developers find and fix security issues. Those issues live in the code they write, and you set the technical direction for the static analysis engine that finds them. Your work spans two complementary parts of a complete security analysis. On the engine side, you shape how the static analysis toolkit models a program: parsing source into intermediate representations, resolving symbols, building call graphs, and tracking tainted data across files and languages. You define the architecture and specifications the team builds against, and you delegate component specifications within them to engineers and to the AI agents that implement them. On the evaluation side, you build and apply tooling that tests, measures, and validates what the engine finds against benchmark applications with known vulnerabilities. What the engine can model and how we measure what it finds are parts of one picture. As a Staff engineer you hold that picture, shape the long-range technical goals of the team, and raise the bar for every engineer on it. We build the engine with AI agents that write and review code from written specifications, under human direction. We expect you to direct that work effectively and with good judgment, and to help the team do the same. What you do Act as the directly responsible individual (DRI) for the team's highest-scope initiatives from design through delivery, shipping large features with minimal guidance and shaping the long-range goals of the team Bring systems built by one engineer to team ownership through documentation, tests, and shared review Set the technical direction for the AI-assisted tooling that implements, reviews, and validates engine changes and findings, design the checks that decide whether an agent-written change or generated result is fit to merge, and measure detection quality against benchmark applications with known vulnerabilities, raising the bar for what counts as a trustworthy result. That includes static application security testing (SAST) rules mapped to CWE and OWASP, and the test fixtures that prove they work. Own the architecture of the program model (parsing, symbol resolution, intermediate representations, call graphs, and taint and data-flow analysis) and of the pipeline that turns source code into findings, and define how both extend to new languages and frameworks Solve technical problems of the highest scope and complexity, actively seek out difficult impediments affecting the whole team, and advocate for improvements to quality, security, and performance with Product Management, UX, and partner teams such as Code Security and Composition Analysis Mentor all engineers on the team through code review and pairing, remove blockers to their autonomy, and shepherd the definition and improvement of our internal standards through review Participate in on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues Define the overarching architecture and specification documents for the engine, delegate component specifications within them, and drive their implementation by AI agents and engineers working independently through phased plans, small reviewable units of change, and specifications kept in lockstep with the code Build and maintain the harness, agent instructions, and agentic skills that keep agent-written code trustworthy, including separate coding and reviewing agents, rules and tests the coding agents cannot change, independent review panels of agents from different model providers, and performance, API, and dependency gates, with risky changes escalated to human review Stay current with research in program analysis and security, run AI-assisted research and spikes, and turn the findings into prototypes, proposals, and upstream contributions, including responsible disclosure of findings in open source projects Take part in on-call or operational support where your team’s ownership model requires it What you bring Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy and when it isn't Extensive professional experience writing, testing, and reviewing production code in Rust, Go, or a comparable systems language, with depth in at least one. The engine is Rust, the analyzer wrapper is Go, and the monolith integration is Ruby, and we value willingness to work across them. Experience with performance optimization and with containerized workflows and CI/CD (we use Docker heavily) A deep program analysis and static analysis background, such as parsing and ASTs, intermediate representations (SSA, control-flow and call graphs), taint and data-flow analysis, type inference, incremental and fixpoint computation, or writing detection rules, with the ability to read, evaluate, and apply the research literature Deep application security experience, such as vulnerability research, secure code review, or writing detection rules, and fluency with vulnerability classes (OWASP Top 10, CWE) Demonstrated capacity to communicate clearly and concisely about complex technical, architectural, and organizational problems, and to write architecture and design specifications that bring a team to a decision A track record of taking ownership of ambiguous, team-wide problems and shipping them from concept to production with minimal guidance, with specific, regular async updates on progress, blockers, risks, and next steps Experience defining a system's overarching architecture, delegating component specifications to engineers and AI agents, and getting them implemented reliably A track record of mentoring engineers, raising a team's technical bar, and influencing technical direction by achieving consensus with peers and leadership Helpful experience Familiarity with popular web or mobile application frameworks and how they handle input, data, and configuration Experience designing guardrails for agent-written code, such as mutation testing, fuzzing, and CI gates the coding agent cannot modify A record of engaging with the research community, such as publications, tool papers, or upstream open source contributions in program analysis or security About the team The Security Factory: Code Scanning team develops GitLab's SAST capabilities for customer software repositories. We work closely with the Code Security team on scanning rules & flows, with Composition Analysis on the broader software supply chain, and with other groups across the Sec Section. We rely heavily on asynchronous work across time zones. Remote-Global The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $152,800 — $259,200 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Canada Wide - Excluding Quebec Workplace: Remote Play a key role in shaping Safe Software's product security program - from strengthening security practices within the software development lifecycle and supporting the AI governance program that enables developers to safely maximize their use of AI tools, to working directly with customers and partners on their security needs. This role requires both a strong technical foundation in cybersecurity and the ability to communicate clearly with audiences ranging from engineers to customers and partners. DETAILED DESCRIPTION We have an immediate opening and are excited to find the right candidate to join our team. Safe Software is hiring a Product Security Specialist II to join our Product Security team, which sits within the Information Security group. The scope of the role is deliberately broad: you will help write and maintain security policies and documentation, contribute to the AI governance program for developers, support the vulnerability disclosure process, and ensure security coverage extends to apps and services built outside of core engineering. Customer and partner engagement is a significant part of the work - including security questionnaires, assessments, and direct participation in customer and partner driven security meetings. This is an individual contributor role suited for someone who thrives across a variety of security domains, is comfortable owning their areas independently, and enjoys an environment where the security program is actively growing. The role is remote-friendly. ABOUT THE TEAM At Safe Software, the Product Security team co-owns product security domains with Engineering across the full product lifecycle - from secure architecture and SDLC integration, to supply chain security, incident response, developer enablement, AI governance, metrics, and compliance. We define the standards and strategic direction; Engineering owns the technical execution. Our team fosters a collaborative, security-conscious culture that supports innovation without compromise. WHAT YOU'LL BE DOING As a Product Security Specialist II, you will: - Stakeholder Enablement and Communication: Work directly with developers, product management, customer experience teams, customers, and partners - explaining security concepts for each audience, handling security questionnaires and assessments, and participating in customer and partner driven security meetings. - Security Policy and Standards: Contribute to security policies across product security domains, help maintain the risk register, and support compliance monitoring to verify that policies are followed. - Supply Chain Security: Conduct security and compliance reviews of third-party libraries and vendor components, including licensing and known risk signals. - AI Security and Governance: Support Safe's AI governance program for developers by contributing to policies and standards for AI-assisted development, monitoring emerging - AI security risks, and assisting with training and awareness across the Engineering organization. - Vulnerability Disclosure: Support the product security vulnerability disclosure process, including CVE registration, security advisory drafting, and contributing to postmortems and lessons-learned reviews. - Security for Non-Engineering Apps and Services: Own ongoing security coverage for apps and services developed outside of core Engineering, including publicly accessible services (e.g., websites and APIs), internal tools, IT-developed scripts, and AI agents built for internal use. - Metrics and Reporting: Contribute to security KPI tracking, governance dashboards, and reporting for leadership and external stakeholders. QUALIFICATIONS, SKILLS, AND COMPETENCIES Safers come from a variety of backgrounds. That said, candidates most successful in this role typically have experience with the following: REQUIRED SKILLS - 3+ years of experience in product security, application security, or a closely related cybersecurity role. - A strong technical background in cybersecurity, including solid understanding of common vulnerability classes, secure development practices, and security tooling (e.g., OWASP Top 10, SAST, DAST, SCA). - Demonstrated ability to communicate security concepts clearly to stakeholders of varying technical backgrounds - from developers to customers who may have no security expertise. - Strong analytical skills and the ability to interpret noisy or incomplete data. - Proficiency in Python for automation, tooling, or analysis. - Experience with Agentic AI. - A degree in Computer Science, Cybersecurity, Information Technology, or a related field - or equivalent practical experience. NICE TO HAVE - Familiarity with compliance frameworks such as SOC 2 or ISO 27001. - Security certifications (e.g., CISSP, CISM, or similar). - Familiarity with and/or experience using and supporting FME in production - environments. CAREER GROWTH This position aligns with our Product Security Specialist II level on the individual contributor path. With demonstrated impact and initiative, you'll have opportunities to: - Take ownership of specific security domains (e.g., incident response, developer enablement, compliance, etc). - Progress into a senior product security role with broader scope and influence. WHAT YOU CAN EXPECT When you choose a career with Safe Software, you're also choosing… - Meaningful Work: Make a profound impact across our business, workplace and data integration product. - A Supportive Environment: Feel empowered to share your ideas and implement them with high autonomy and team support. - Social Responsibility: Become part of a team that finds meaningful ways to give back. Take paid time off to volunteer for one of our Safe-organized opportunities that align with our core community initiatives. - Learning & Career Development: We believe in your continuous learning and growth. Take advantage of an annual learning budget and training programs paid for by Safe. - Flexible Working Hours: Flexible and remote-friendly work arrangements to fit your lifestyle. Work when you want, and how you want to. - Work-Life Balance: There's no place for burnout at Safe. Maintain a healthy balance of your personal and work life without splitting yourself in two. Enjoy 3 weeks of vacation to recharge, plus an additional paid 6 seasonal days off per year. - Health & Wellness: Extended health, dental, health or lifestyle spending, and counseling benefits from day 1. That's right, no waiting period. - Family is important: We are dedicated to supporting our employees through parenthood and offer a Parental Leave Top-Up Program for new parents through childbirth or adoption. - Shared Success: Share in Safe's success with our bi-annual profit sharing and RRSP/TFSA matching program. - An Accessible Commute: Regardless of your commute method, we're located close to public transit, and provide complimentary parking and bike storage for our team! ABOUT SAFE SOFTWARE Safe Software transforms organizations with FME, the only All-Data Any-AI Enterprise Integration Platform connecting all your data, anywhere, at any velocity. With over 30 years of expertise and 25,000+ enterprise customers across 125+ countries, we simplify your data journey, wherever it leads. Founded in 1993, Safe is headquartered in Surrey, BC with over 300 team members and counting. We’re always looking for talented individuals with diverse backgrounds who are determined to learn and grow. Are you ready to join the team? OUR COMMITMENT TO DIVERSITY AND INCLUSION Safe Software is an equal opportunity employer and we truly believe that innovation and strength begin with diversity and inclusion. We welcome all candidates regardless of race, gender identity or expression, sexual orientation, age, ability, disability, national or ethnic origin, political belief, religion, or family status. Should you require accommodations during the recruitment process, please contact hr_dept@safe.com. NOTICE REGARDING USE OF AUTOMATED TOOLS IN HIRING At Safe Software, we use automated tools to help us process applications and identify qualified candidates. These tools may assist in screening resumes and summarizing interview content based on the information you provide. This helps our team review applications efficiently while ensuring every candidate is considered based on the requirements of the role. Please be assured that the final hiring decision is always made by a member of our team. For more information on how we protect your privacy, please see our policy https://www.safe.com/legal/#applicant-privacy-policy. If you have questions about this process, please contact us at hr_dept@safe.com.

Location: Poland Workplace: remote About airSlate airSlate is a global SaaS technology company that develops no-code workflow automation, electronic signature, and document management solutions. Our award-winning products - SignNow, pdfFiller, DocHub, altaFlow, Instapage, and US Legal Forms - serve over hundreds of millions of  users and more than one million customers worldwide, helping organizations of every size digitize processes, improve efficiency, and transform how they work.   We’re in an exciting phase of growth and transformation, with teammates in more than 20 countries across three continents and main hubs in the United States, Poland, Romania, Ukraine and Philippines.  At airSlate, we’re building value for customers and a culture where growth and innovation go hand in hand. We’re looking for people eager to shape products, scale a company, and thrive in a fast-moving environment. About Cloud and Security team: Our security team protects user data and keeps the airSlate platform stable. We work closely with product, engineering, and operations teams to reduce security risks at every stage, from design to production. We also monitor threats, run system audits, and help everyone in the company follow secure work practices. And now, we are looking for a Senior Security Engineer (Cloud & AppSec) who is prepared to contribute to the next chapter of our company's growth. The person will join our Security Engineering team of five and take on the responsibility of keeping our cloud infrastructure and products secure. As Senior Security Engineer, you will help product and engineering teams build secure products, find and fix risks early, and respond quickly when something goes wrong. What you'll be working on: Secure our AWS and GCP environments: access management (IAM, least privilege, workload identities), network segmentation, encryption, and key and secrets management Find and fix cloud misconfigurations and security risks before they cause problems Set up security logging and monitoring, and investigate suspicious activity Test the security of our web, mobile, and network-based applications Run and improve our security scanning tools (SAST, DAST, SCA) and connect them to CI/CD pipelines Help teams build secure products from the start by joining architecture reviews, threat modeling sessions, and risk assessments Explain security findings clearly and work with engineers until the issues are fixed Handle security incidents of different kinds (application, infrastructure, user-related): investigate, triage, contain, and write post-mortems Prepare for SOC 2 and CASA audits and external assessments together with product and compliance teams Configure and monitor our CDN Work alongside a small, experienced, and proactive team that solves complex problems together What we expect from you: 4+ years of professional experience in information security, application security, or a related field Hands-on experience securing AWS and/or GCP Practical experience with SAST, DAST, and SCA tools, including choosing, setting up, and integrating them into CI/CD Experience in security testing of web, mobile, or network applications Experience in incident response, from investigation to post-mortem Good knowledge of secure development practices across the SDLC, including threat modeling Working knowledge of Bash, Python, Go, or Terraform Clear communication skills and the ability to explain risks so that teams act on them English at B2 level or higher, written and spoken What helps you rock: Experience preparing for compliance audits such as SOC 2, CASA, PCI DSS, or NIST CSF Previous experience as a DevOps engineer or developer What we offer   Flexible working environment - Our teams operate across the globe. We value in‑person collaboration in our hubs, but we also embrace remote and hybrid working. You can work from one of our offices in the United States, Poland, Romania or Ukraine, or remotely from many countries.   Competitive compensation and stock options - We offer salaries that reflect local market conditions and experience,  plus a performance-based bonus system and stock options so you share in the company’s growth.   Professional growth and learning - We invest in your development through courses, conferences, and access to learning resources. We encourage career growth and internal mobility, supporting teammates who want to explore new opportunities within airSlate.   Health and well‑being - We provide comprehensive benefits tailored to each country, including health coverage, wellness programmes and access to fitness options. We also dedicate quarterly company-wide Mental Health Days, when everyone takes time off to rest and recharge.   Family‑friendly culture - Family life is part of who we are, and we embrace it in many forms. From flexibility for parents to our airSlate Junior Club for kids, to company-wide family days and our pet-friendly approach, we’re committed to making work and life easier to balance.   Giving back - We support charitable initiatives around the world through the airSlate Care programme. Our current focus includes humanitarian aid in Ukraine and other regions, matching employee donations and supporting causes chosen by our teams.   Open communication - We encourage transparent dialogue at all levels. From team discussions to company-wide Q&A sessions with our CEO, we make sure everyone has the chance to be heard and to influence how we grow.   It is airSlate's policy to comply with all applicable equal employment opportunity laws by making all employment decisions without unlawful regard or consideration of any individual’s race, religion, ethnicity, color, sex, sexual orientation, gender identity or expressions, transgender status, sexual and other reproductive health decisions, marital status, age, national origin, genetic information, ancestry, citizenship, physical or mental disability, veteran or family status or any other basis protected by applicable national, federal, state, provincial or local law. airSlate's policy prohibits unlawful discrimination based on any of these impermissible bases, as well as any bases or grounds protected by applicable law in each jurisdiction. If you need assistance or an accommodation during the application process because of a disability, it is available upon request. airSlate is pleased to provide such assistance and no applicant will be penalized as a result of such a request. Pursuant to relevant law, where applicable, airSlate will consider for employment qualified applicants with arrest and conviction records.   Read our Recruitment Privacy Notice to Learn how we process your personal information.

Задачи: — Развёртывание, настройка и сопровождение инструментов безопасной разработки - OSA, SCA, SAST — Развёртывание, настройка и сопровождение средств защиты runtime k8s — Разработка и отладка правил обнаружения аномалий и реагирования для защиты микросервисов в runtime — Аудит инструментов разработки, харденинг и формирование требований ИБ к их настройке — Разработка скриптов автоматизации для работы с компонентами платформы разработки (для использования командами разработки с целью реализации требований безопасности) — Реализация Security (Quality) Gate и разработка правил принятия решений — Подготовка инструкций для команд разработки, ведение технической документации Требования: — Уверенное владение скриптовыми языками Python, Bash — Опыт написания и поддержки CI/CD пайплайнов на одном из DSL: GitLab CI, GitHub Actions, Jenkins — GitLab CI предпочтительнее — Глубокое понимание архитектуры docker и k8s, опыт администрирования и харденинга этих систем — Опыт работы с основными ресурсами k8s: ingress, rolebindings, serviceaccount и др, и модулями: istio, cilium, cert-manager, OPA и др. — Опыт работы с инструментами runtime защиты в k8s, опыт написания правил обнаружения аномалий и реагирования, знание принципа работы данных инструментов — Опыт работы с Vault, ArgoCD или аналогами, настройка интеграций этих инструментов с VCS — Опыт написания манифестов для развёртывания приложений в k8s — Знание современных концепций обеспечения ИБ — Опыт написания инструкций и технической документации Будет преимуществом: — Опыт разработки и поддержки микросервисов на Go — Опыт администрирования инструментов разработки (GitLab, Nexus, GitLab/Jenkins CI/CD или аналогов)

Location: Tel Aviv Via is using technology to transform transportation around the world. From changing a single person’s daily commute to reducing humanity’s collective environmental footprint — we’ve got huge goals. As a Application Security Engineer at Via, you will be a key member of the team, responsible for ensuring the security of Via's applications throughout the software development lifecycle. You will work closely with development, operations, and product teams to identify and mitigate vulnerabilities, promote secure coding practices, and build a robust application security program. What You’ll Do: Perform security assessments, including penetration testing, vulnerability scanning, and code reviews, to identify security weaknesses in applications. Collaborate with development teams to remediate identified vulnerabilities and implement secure coding practices. Define and implement application security testing strategies, including static analysis, dynamic analysis, and software composition analysis. Use AI (LLMs, agents, MCP-based tooling) to improve AppSec work such as vulnerability triage, code review, remediation and detection, and set best practices for doing so safely. Design and build security tooling and automation, such as CI/CD integrations, internal services and AI-assisted workflows. Contribute to the development and maintenance of application security policies, standards, and procedures. Research and evaluate new application security tools and technologies. Monitor application security metrics and provide regular reports on the security posture of applications. Participate in incident response activities related to application security. Champion a security-first culture within the engineering organization. Who You Are: A Bachelor's degree in Computer Science or a related field is a plus. Minimum of 3 years of experience as an Application Security Engineer or a similar role. Strong understanding of application security concepts, including OWASP Top 10, CWE Top 25, and SANS Critical Security Controls. Experience with various application security testing tools and techniques (e.g., SAST, DAST, SCA). Proficiency in at least one scripting language (e.g., Python, JavaScript, Ruby). Experience with secure coding practices and vulnerability remediation. Familiarity with CI/CD pipelines and DevOps practices. Excellent communication and collaboration skills. Ability to work independently and as part of a team. Experience with cloud platforms (AWS is an advantage). Compensation and Benefits Our product impacts millions of users around the world  providing alternative transport solutions that are more: efficient and accessible, changing cities to make them greener. Competitive compensation package which includes base salary and equity Health insurance with a discount for family members Hybrid work and a lovely office situated in the heart of TLV, in Midtown, close to the light rail and train station Career development and growth opportunities Other perks: Freefit and other sports lessons, 10bis/Cibus - you choose!, happy hours, team events, communities and many more benefits We’re Via, and we build technology that changes the way the world moves. We’re driven by a simple mission: to create modern and efficient public transportation systems that provide far greater access to jobs, healthcare, and education. With our best in class suite of products, we make transit thrive. Our teams of worldclass engineers, data-scientists, product managers, operations specialists, marketers, transit experts and more bring cutting-edge AI-powered software and innovative technology-enabled operations to our partners across the globe. Founded in 2012, Via builds solutions to digitize, automate, and enable data-driven decision making for entire transportation networks; fixed-route buses, microtransit, paratransit, school buses, autonomous vehicles, and more. If you’re excited to be at the forefront of modernizing the future of transportation, are up for solving tough problems, and willing to become/already are a transit nerd, we are the place for you. Even if your past experience doesn’t align perfectly with every qualification in the job description for this role, we encourage you to apply. You may be just the right candidate for this or other opportunities. Ready to join the ride? Via is an equal opportunity employer.

Location: Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As the Senior Director, Global Subject Matter Expertise (SME) Solutions Architecture, you will build and lead GitLab's Subject Matter Expert organization: three regional teams in AMER, EMEA and APJ, each covering Security & Compliance, Platform, Core DevSecOps, and AI & Competitive. This team is the depth layer of GitLab's technical selling model. It wins the most complex opportunities, scales product expertise into the Account SA team, and turns field insight into product direction. This is a leader of leaders role. You will manage three regional SME Managers, not individual contributors, and develop them as leaders in their own right. The SME organization is new, so we are looking for a transformational leader who thrives in ambiguity, builds structure where none exists, and has a track record of standing up high-performing technical teams in fast-growing, evolving businesses. You will work as a peer to GitLab's regional Solutions Architecture Senior Directors and partner closely with Sales, Customer Success, Product, Engineering, Product Marketing and Sales Operations. Together you will make sure GitLab brings the right depth to the right opportunities, and that what the field learns shapes what GitLab builds next. What you'll do Set the strategy, operating model and global standards for the SME organization, aligned to the VP Global SA and GitLab's go-to-market plan. Build the resourcing model from product-level bookings and consumption targets. Size each product group by region based on where the plan needs specialist coverage. Act as the field's senior partner to Product Management and Engineering. Run a structured feedback loop that shapes roadmap, launch readiness and early-access programs. Hire, mentor and develop regional SME Managers and, through them, the full global team. Own the engagement model with the regional SA Senior Directors, Post-Sales SAs and Customer Success: triage rules, coverage thresholds, the closed-won handoff to Post-Sales SAs, and escalation paths. Create and improve upon the processes, metrics and KPIs for SME-led technical evaluations, workshops, demos and Proofs of Value. Partner with CRO staff, regional sales leaders and AVPs on product-category performance, forecast risk and competitive strategy. Partner with Enablement to drive  field readiness for new product launches with Product Marketing and Enablement, including Duo Agent Platform, security and platform offerings. Build strong relationships with key customers at the technical sponsor and executive level. Use AI to change how the team works, including deal research, demo creation, PoV automation and knowledge sharing. Drive organizational transformation by finding gaps early, building structure where none exists, and leading change without waiting for top-down direction. What you'll bring 5+ years second-line leadership experience (managing managers) in Solutions Architecture, Sales Engineering or a technical specialist organization. Experience building or scaling a specialist, overlay or global SA team in enterprise SaaS, DevSecOps, security or developer tools. A record of tying technical-team design to bookings and consumption outcomes, with the data to show it. The ability to lead through ambiguity and rapid organizational change, bringing clarity and direction while strategy is still forming. Strong relationships with Product and Engineering leaders, and a history of shaping roadmap from field insight. Fluency across the software development lifecycle, application security (SAST, DAST, SCA), cloud platforms (AWS, GCP, Azure), Kubernetes and AI-assisted development, including LLM evaluation and production deployment patterns. Executive presence with technical practitioners, managers and C-level stakeholders. Proven ability to partner across Sales, Partners, Product, Engineering, Marketing, Customer Success and Professional Services. A self-starting, entrepreneurial approach. You don't wait for a playbook; you write it. How you'll be measured Global product-category commit attainment and consumption growth. Time from technical win to first workload in customer’s production environment on SME-engaged opportunities compared with non-engaged opportunities. SME coverage and engagement speed on the top 10% of opportunities. Account Team capability lift: fewer escalations and more deals handled without an SME over time. Product impact: field sentiment on the product feedback process along with field-sourced requirements adopted into the roadmap. Team health: hiring against plan, manager development, engagement and retention. About the team The Subject Matter Expertise (SME) organization is part of GitLab's Solutions Architecture team, a trusted technical partner for the field. SMEs bring the deepest product expertise to GitLab's most complex opportunities and carry customer feedback into conversations about product direction, enablement and value messaging. The team is distributed and all-remote, and relies on clear communication, strong judgment and shared operating practices across regions. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $244,200 — $409,500 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Remote | North America or Europe ABOUT SQUADS Squads is a financial technology company building products and APIs for the stablecoin economy. We build on open infrastructure, global money, and internet capital markets to deliver better financial services to businesses, individuals, and developers. Our products span the company’s mission: Squads Multisig helps teams secure and manage assets on Solana; Altitude gives businesses a global account to run their financial operations; and Fuse brings stablecoins and tokenized assets to personal finance. More than 450 teams use Squads Multisig to secure over $10 billion in value. Our investors include Haun Ventures, Multicoin Capital, Electric Capital, Coinbase Ventures, Toly, Mert, and others. THE ROLE You’ll own product and infrastructure security across Squads, working closely with our Head of Security, CTO, and engineering leads across Multisig, Altitude, Fuse, and the infrastructure that powers them. That means being in the room when systems are designed, reviewing code before it ships, and driving every finding to verified closure. This is a hands-on role. You’ll read code, write threat models, and build the tooling and standards that make the secure path the default as engineering grows. We’re looking for a senior practitioner who can tell engineers what to fix and why, and hold the line on what matters without slowing the team down. WHAT YOU’LL OWN DESIGN & CODE REVIEW - Join product and engineering calls as the security reviewer, raising concerns while designs are still cheap to change - Lead threat modeling and security design reviews for new products, features, and infrastructure changes - Perform hands-on secure code review across backend services, APIs, frontends, and Solana programs, with a focus on authentication, authorization, and access control VULNERABILITY MANAGEMENT - Own the full lifecycle for findings from audits, pentests, code scanning, and bug bounty: triage, prioritization, remediation tracking, and fix verification - Set severity and SLA standards, and hold the team to them - Run bug bounty intake, validate external reports against source, coordinate with audit partners, and scope internal assessments SECURE SDLC & INFRASTRUCTURE - Tune and extend SAST, dependency, secrets, and container scanning in CI/CD so engineers trust the signal - Review IAM, network controls, encryption, and secrets management across our cloud environments, including API key ownership, permissions, and rotation - Assess what internal AI tools, MCP integrations, and agents can reach in production, and scope their access to what they need - Define product security standards, review checklists, and developer guidance that scale with the team YOU MIGHT BE RIGHT FOR THIS IF - You’ve been the senior security partner to engineering leadership, and teams sought out your review instead of routing around it - You find business logic, authorization, and race condition bugs by reading code, and you know where scanners go blind - You use LLMs and agents to cover far more code than one person could, and you know where the models miss - You rank findings by what an attacker could actually do with them, and your write-ups tell engineers exactly what to change - You’ve worked where security failures carry direct financial impact: fintech, crypto, payments, or stablecoins - You’ve built a security function early, when the process and tooling still needed to be defined - You pick your battles, and engineers ship faster with you in the room REQUIREMENTS - 8+ years in product security, application security, or security engineering, built on a software engineering foundation - Ownership of threat modeling and architecture review for complex financial or distributed systems, with the standing to shape design decisions - A track record of finding critical, non-obvious vulnerabilities in large production codebases (TypeScript, Rust, Go, or Python), including through LLM and agent-based review workflows you built and ran - Experience building and running a vulnerability management program or bug bounty end to end, including the CI/CD scanning that feeds it - Deep expertise in IAM, secrets management, network controls, and container security on AWS or a comparable provider - Strong written communication and the judgment to work independently - Experience reviewing Solana programs (Rust/Anchor) or working at an audit firm, cryptography and key management (HSMs, MPC, PKI), offensive testing across web and mobile, red teaming AI systems, or supporting SOC 2 from the product side is a plus. WHY THIS MIGHT BE INTERESTING Most product security roles sit downstream of engineering, reviewing what’s already been decided. This one sits in the room. You’ll shape how a self-custody platform, a business account, a consumer app, and the infrastructure under all of them get built, across Solana programs and traditional backend services alike. The stakes are concrete: a missed authorization check here moves money. You’ll work directly with our Head of Security and CTO, with the ownership to build the product security program while operating it. Small team, high standards. Learn more about our core values here https://squads.xyz/company.

Location: Москва Наша компания ищет опытного специалиста на должность руководителя управления по кибербезопасности. В рамках этого проекта успешный кандидат будет ответственен за разработку и реализацию стратегий и политик в области кибербезопасности для дочерней компании Сбера "Пульс". Оформление в ДЗО «Пульс». Обязанности * обеспечение защиты инфраструктуры, данных и автоматизированных систем ДЗО * развитие комплексной системы управления и обеспечения функции КБ ДЗО, управление деятельностью ДЗО в области КБ * Реализация политики КБ ДЗО, моделей угроз, разработка и актуализация внутренних нормативных документов по направлению КБ * организация и внедрение процессов управления КБ, в том числе, процессов мониторинга и реагирования на инциденты КБ, управления рисками КБ * выявление угроз и оценка рисков кибербезопасности для систем и компонентов информационной инфраструктуры ДЗО * повышение осведомленности в области КБ сотрудников ДЗО * Внедрение и сопровождение средств защиты информации (DLP, AV, VPN, SIEM, WAF и т.д.) * обеспечение КБ на этапах жизненного цикла разработки, внедрения и эксплуатации ПО в ДЗО * внедрение и развитие процессов безопасной разработки ПО в подразделении в соответствии с лучшими мировыми практиками (ФСТЭК, NIST, OWASP, Mitre ATT&CK) * эксплуатация средств безопасной разработки (OSA, SAST, DAST, SCA и т.п.) * проведение расследований инцидентов КБ, устранение их последствий, разработка корректирующих мероприятий * организация и проведение аудитов и оценок защищенности КБ * организация и ответственность за обеспечение КБ при доступе к АС, сервисам, ИТ-активам подразделения, в т.ч. удаленном доступе. Требования * высшее образование в области КБ или ИТ * опыт работы в области КБ от 10 лет, опыт работы CISO – от 4 лет * знание и опыт применения российских и международных стандартов в области КБ и требований регулирующих организаций в области защиты информации (149-ФЗ, 152-ФЗ, 98-ФЗ, 63-ФЗ, 187-ФЗ, РД и подзаконные акты, ISO, NIST, CIS Controls) * знания и опыт применения стандартов в области ИТ (TOGAF, ITSM, Cobit и др.) * навыки разработки нормативной документации КБ, подготовки отчетов; * знания мировых практик и фреймворков (BSIMM, SAMM и т.д.). Понимание и практический опыт в области разработки защищенного ПО (SSDLC), использования OWASP * знание основ культуры DevOps, CI/CDL/CDP, гибкой методологии разработки * понимание методологии формирования требований КБ при проектировании и разработке ПО в разрезе безопасности * понимание принципов работы веб-приложений, микросервисной архитектуры, контейнеризированных приложений, подходов к их защите; * опыт работы со средствами защиты информации (AV, VPN, SIEM, WAF и т.д.), средствами безопасной разработки (SAST, OSA/SCA, DAST и пр.), средствами контроля конечных устройств (EDR) * понимание принципов работы систем аутентификации и авторизации; * понимание принципов работы сетевой инфраструктуры * понимание принципов работы и организации операционных систем, сетей, баз данных и обеспечения безопасности хранения, обработки и передачи данныx * навыки расследования инцидентов КБ. Условия * Инновационные, амбициозные проекты и задачи, которые развивают: всегда есть возможность прокачать свои навыки в работе и профессионально расти; * Среда для обмена знаниями – высокая экспертиза внутри команды; * Сплоченная команда, работающая над общими задачами и умеющая хорошо отдыхать; * Нашу культуру создают сами сотрудники – мы их слышим и помогаем создавать и поддерживать корпоративные комьюнити по интересам * Стабильная заработная плата; * в пяти минутах от метро "Кутузовская", с фитнес залом; * Более 400 образовательных программ СберУниверситета для профессионального и карьерного развития;  * Расширенный ДМС, льготное страхование для семьи и корпоративная пенсионная программа; * Гибкий дисконт по ипотечному кредиту, равный 1/3 ключевой ставки ЦБ; * Подписка Прайм с возможностью использования трёх близких;

Задачи: — собирать и формализовать требования от уровня идей и фичей до конкретных контрактов микросервисов и интеграций — декомпозировать эпики на пользовательские и системные истории — проектировать и ревьюить OpenAPI-контракты по подходу contract-first, согласовывать изменения общих контрактов (включая core-common) между командами — описывать событийное взаимодействие через Kafka: сущности, поля, ActionType, карту топиков и потоков данных — прорабатывать интеграции: протоколы и форматы обмена со смежными системами, модели идентичности и механизм проброса прав проектов из мастер-системы на базе общей системы идентификации — анализировать фичи, наследуемые из ядра GitLab (проекты, группы, членство и уровни доступа, MR, ветки, пайплайны, лейблы, сниппеты) — определять, что используется «как есть», что обёрнуто сервисами, что заменено городскими модулями, и переописывать эту картину в рамках апгрейда 15 → 17/18 — ставить задачи разработке, выполнять приёмочное ревью реализации на соответствие спецификации и участвовать в ревью спецификаций — разрабатывать схемы, сценарии и критерии приёмки, вести и актуализировать документацию подсистем — проводить демо-показы создаваемого функционала Требования: — опыт работы системным/бизнес-аналитиком в продуктовой разработке распределённых систем (микросервисы) — openapi/swagger на уровне написания и ревью спецификаций, а не только чтения — понимание событийной архитектуры (брокеры сообщений, pub/sub, идемпотентность, согласованность, обработка ошибок) — базовые знания Kafka — проектирование интеграций между системами: форматы обмена, контракты, версионирование, обратная совместимость — умение рисовать архитектурные схемы (uml / bpmn / er) — sql на уровне анализа данных (postgresql) Будет плюсом: — понимание модели gitlab (проекты/группы/доступы/mr/pipelines) и опыт с форками open-source — oidc/oauth2 и sso — sast/проверки безопасности кода, антивирусные проверки репозиториев — опыт в городских ис москвы — c4, redis/opensearch/s3 Условия: — рыночная зарплата и премии — драйвовые задачи и ресурсы для их реализации — гибридный формат работы, офис в бизнес-центре класса А (метро Курская) — преимущества аккредитованной IT-компании — материальная помощь в случае важных событий в жизни — корпоративное обучение у топовых провайдеров и доступ к онлайн-библиотеке — корпоративные тренировки и спортивные активности - бег, футбол, волейбол, баскетбол, теннис и другие — комьюнити по интересам — скидки от партнеров на ДМС, связь, развлечения, подарки, спорт и т.д.

Location: Remote - Costa Rica Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit www.bugcrowd.com . Job Summary If you like owning problems end to end, making security a default property of everything we build, and working closely with engineering, we want to meet you. Bugcrowd is looking for security engineers who move beyond standard tooling and drive measurable security outcomes our customers can rely on. You will help us shape a culture where security helps others succeed, not just points out problems. Essential Duties and Responsibilities Partner Closely with Engineering : Refine architecture, validate new features, and drive security investment while prioritizing engineering velocity Build Security Paved Roads : Contribute to the secure defaults, libraries, and "paved roads" that systematically eradicate entire classes of vulnerabilities rather than fixing bugs one by one Create Feedback Loops : Tune security tooling such as SAST, DAST, SCA, and secret scanning to reduce noise and focus on what matters Be our Best Customer : Ensure our bug bounty program can be a model for other customers. Experiment with new ways to leverage the creativity of the crowd. Provide feedback on new platform features to engineering and product Own Projects End to End : Lead cross-functional product security projects from scoping through delivery, influencing product and engineering roadmaps and clearly communicating risk to both technical and non-technical stakeholders Amplify our Impact : Use code and automation as a lever to scale coverage and eliminate repetitive work. Build systems based on incentives and accountability rather than just bureaucratic process Education, Experience, Knowledge, Skills, and Abilities 3+ years of experience in product security, application security, or secure software development Can review code, automate tasks, and build security tooling in at least one modern programming language (e.g., Python, Go, Ruby, Java) Hands-on experience with core application security practices — threat modeling, secure code review, and automated testing (SAST, DAST, SCA) — and a solid grasp of common vulnerability classes (e.g., OWASP Top 10) Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product. Bachelor's degree in engineering, computer science or relevant field, or equivalent practical experience Bonus Points (Preferred but not required) Previous experience with Bug Bounty or vulnerability disclosure programs A background in building "paved roads" or secure-by-default internal libraries to eliminate entire classes of vulnerabilities Hands-on experience securing cloud-native platforms and Infrastructure as Code (e.g., Terraform, AWS, GCP, Kubernetes, Docker) Experience working within a fast-paced, high-growth security or SaaS company Working Conditions and Physical Requirements The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation. Sitting and / or standing - Must be able to remain in a stationary position 50% of the time Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day. Environment - remote, work-from-home 100% of the time Culture At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work. We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well. Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point. At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring. Disclaimer This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence. The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets). Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by law. Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here: https://www.bugcrowd.com/privacy . Equal Employment Opportunity: Bugcrowd is EOE, Disability/Age Employer. Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com. Apply at: https://www.bugcrowd.com/about/careers/

Location: Athens, Greece; Thessaloniki, Greece We are seeking a DevOps Engineer (Mid/Senior, 3+ years) to own CI/CD pipelines, Azure cloud infrastructure, and Kubernetes operations across multiple production environments, supporting digital platforms delivered to public sector and enterprise clients across Europe. The position is fully remote with the option of working from our premises in Athens, Crete or Thessaloniki. Main Responsibilities and Tasks Design, build, and maintain CI/CD pipelines in Azure DevOps and Jenkins (YAML pipelines, Jenkinsfile, shared libraries) from commit to production; Manage and scale Kubernetes clusters on AKS across dev, staging, and production; author Helm charts; manage namespaces, RBAC, configmaps, secrets, and ingress; Provision and version infrastructure with Terraform/Bicep and manage configuration with Ansible across multiple Azure environments; Enforce security gates in pipelines — Trivy container scans, Checkov IaC policies, SonarQube SAST quality gates; manage secrets via HashiCorp Vault and Azure Key Vault; Own observability — Prometheus/Grafana dashboards, ELK/OpenSearch log aggregation, OpenTelemetry instrumentation; define and track SLOs and error budgets; Manage network configuration — DNS, VPN, ingress controllers, load balancers, and network policies; lead blameless post-mortems. Requirements Bachelor's degree in Computer Science, IT Engineering, or equivalent demonstrable experience; 3+ years of hands-on DevOps, Build & Release, or Cloud Engineering experience in production; Deep hands-on Azure: VMs, VNets, Storage, Azure AD, Load Balancers, AKS; Kubernetes day-2 operations; Docker image build, publish, and hardening; Azure DevOps (YAML pipelines, repos, artifacts, agent pools, branching policies) and Jenkins (Jenkinsfile, shared libraries); Git workflows (GitFlow or trunk-based); Terraform for infrastructure-as-code and Ansible for configuration management (playbooks, roles, inventories); Trivy, Checkov, and SonarQube as blocking pipeline gates; secrets management with HashiCorp Vault or Azure Key Vault; Scripting in Python and/or Bash/PowerShell; Prometheus + Grafana, ELK/OpenSearch; networking fundamentals (DNS, VPN, ingress, load balancers, network policies); English B2+. Desired Qualifications Certifications: AZ-400, AZ-104 or AZ-305, CKA. Experience with GitHub Actions, Kustomize/advanced Helm, Bicep/ARM, OpenTelemetry, APM tooling (Dynatrace, Datadog, New Relic), service mesh (Istio/Linkerd), Nginx Ingress, cert-manager, external-dns. Multi-cloud exposure (AWS); database operations in pipelines (PostgreSQL, MySQL, Redis); message brokers (RabbitMQ, Kafka); high-availability, multi-region, or regulated-industry infrastructure. Benefits We believe in rewarding talent and dedication. Here's what you can expect as part of our team: Competitive full-time salary; Private Health Coverage on the Company’s group program; Flexible Working Hours; Top-of-the-Line Tools; Professional Development: Benefit from language courses, specialized training, and continuous learning opportunities; Career Growth: Work with some of the most innovative and exciting specialists in the industry; Dynamic Work Environment: Thrive in a setting that offers challenging goals, autonomy, and mentoring, fostering both personal and company growth. If you want an exciting challenge, work with some of the coolest technologies, and enjoy your time doing it, then join us! Submit your detailed CV in English, quoting reference: ( ADE1/11/26 ). You may also consider all our other open vacancies by visiting the career section of our website ( www.eurodyn.com ) and follow us on Twitter (@EURODYN_Careers) and LinkedIn. EUROPEAN DYNAMICS (ED) ( www.eurodyn.com ) is a leading European Software, Information, and Communication Technologies company, operating internationally (Athens, Brussels, Luxembourg, Copenhagen, Berlin, Stockholm, London, Nicosia, Valetta, Vienna, Den Haag, Hong Kong, etc.) The company employs over 1100 engineers, IT experts, and consultants (around 3% PhD, 41% MSc, and 54% BSc). We design and develop software applications using integrated, state-of-the-art technology. Our current IT projects have a value exceeding 300 million EURO. EUROPEAN DYNAMICS is a renowned supplier of IT services to European Union Institutions, international organizations, European Agencies, and national government Administrations in 40 countries and 4 continents. As part of our dedication to the diversity of our workforce, we are committed to Equal Employment Opportunity without regard for race, colour, national origin, ethnicity, gender, disability, sexual orientation, gender identity, or religion. EUROPEAN DYNAMICS (ED) adheres to the General Data Protection Regulation principles by applying its Privacy Policy as published at www.eurodyn.com/privacy By submitting an application to this position and by sharing your personal data with ED, you acknowledge and accept its Policy and authorize ED to process your personal data for the purposes of the company's recruitment opportunities, in line with the Policy.

О проекте: Мы создаем ASOC платформу, которая позволит командам разработки ПО получать единую картину реальных угроз безопасности и нейтрализовывать их. Задачи: — Проектировать архитектуру ASOC платформы - собирать, приоритезировать данные со сканеров SAST, DAST, SCA, secret detection — Разрабатывать и развивать модули платформы - от интеграции со сканерами до логики автоматического триажа — Автоматизировать рутину - писать скрипты и пайплайны, которые заменяют ручной разбор алертов на воспроизводимые процессы — Встраивать инструменты безопасности в CI/CD внутренних и внешних команд разработчиков — Проводить аудит зрелости процессов разработки ПО — Готовить процессы и доказательную базу к сертификации по ГОСТ Р 56939-2024, BSIMM, SAMM так, чтобы результатом была успешная сертификация разрабатываемого ПО по требованиям безопасности информации Требования: — Опыт пилотирования и внедрения нескольких решений из списка: SAST, DAST, SCA/OSA, ASOC/ASPM, API Security, Container Security — Понимание архитектуры DevSecOps-процессов: как инструменты встраиваются в CI/CD, как управлять ложными срабатываниями, как строить метрики зрелости (MTTR, coverage, density of defects) — Знание российских и международных стандартов безопасности и умение их применять для улучшения процессов (ГОСТ Р 56939-2024, BSIMM, SAMM) — Высшее образование в сфере ИБ или ИТ Условия: — Официальное трудоустройство по ТК РФ — Корпоративная техника для комфортной работы — ДМС со стоматологией — Участие в деятельности профессиональных сообществ — Собственная корпоративная библиотека — Возможность получать квалификацию за счёт компании — Зимняя «витаминизация»: бесплатно фрукты в офисах — Профессиональная текущая команда, готова делиться экспертизой — Яркие корпоративы и нескучные тимбилдинги!

Location: Warsaw, Mazowieckie, Poland; Sofia City, Bulgaria; Limassol, Cyprus Workplace: hybrid Capital.com's Product Security team protects our web and mobile applications, infrastructure, and external perimeter in a highly regulated environment. As Senior/Staff Application Security Engineer, you will raise the bar for application security across the organisation. This role is measured by leverage: how well you design, automate, and scale security processes so that many engineering teams can build securely by default. You will lead security architecture reviews and threat modelling, increasingly with the help of AI tooling, and turn one-off security work into repeatable, self-service capabilities. The role combines deep hands-on offensive and defensive security expertise with the engineering mindset needed to automate at scale. You will work closely with development, QA, DevOps, and platform teams. Responsibilities: Security Architecture & Threat Modelling: Lead security architecture reviews and threat modelling for new and existing systems, using AI tools to make reviews faster, more consistent, and scalable across teams Act as a security force multiplier by influencing the standards, patterns, and guardrails that let teams move fast and stay secure Security Automation & Tooling: Design, build, and automate scalable security processes that engineering teams can self-serve, covering secure design review, threat modelling, testing, and remediation workflows Integrate and automate security checks across the SDLC and CI/CD pipelines (SAST, DAST, SCA, secrets, and IaC scanning), tuned for strong signal and low friction Own and evolve security tooling such as DefectDojo and SAST, DAST, and SCA platforms, maximising automation, coverage, and integration Apply AI and LLM-based tooling to architecture review, threat modelling, code review, and vulnerability triage, and help define how the team adopts these tools safely Security Testing & Vulnerability Management: Conduct and oversee security assessments of web and mobile applications, APIs, and cloud infrastructure, including manual testing and PoC development Run vulnerability scans across internal infrastructure and the external perimeter, then analyse findings, define remediation, and track issues to closure Support and triage the Bug Bounty Program and external vulnerability reports, automating triage where possible Participate in and help lead red teaming and offensive security exercises Enablement: Drive knowledge sharing on secure development, mentor engineers, and deliver training for development and QA teams Requirements: Experience: 5+ years in application or product security, or equivalent depth, with a track record of senior or staff-level impact Demonstrable experience leading security architecture reviews and threat modelling (e.g. STRIDE, attack trees, data-flow analysis) across multiple teams or products Proven ability to automate and scale security processes by building tooling, integrations, and self-service workflows that reduce manual effort Technical: Strong hands-on security testing skills, including code review and web, mobile, and API application security assessments, as well as the ability to triage and validate external vulnerability reports and bug bounty submissions Strong software engineering ability in at least one language (e.g. Python, Go, JavaScript), with the ability to build automation, not just scripts Deep understanding of the OWASP Top Ten, secure design, and secure coding best practices Experience with SAST, DAST, SCA, and vulnerability management platforms, and integrating them into CI/CD Strong understanding of modern application architectures: REST APIs, microservices, cloud-based systems, and containers Practical experience applying AI and LLM tooling to security work, or clear enthusiasm and aptitude to do so Collaboration: Excellent communication and influencing skills: you can explain security concepts to technical and non-technical stakeholders and drive change without direct authority A self-starter who enjoys solving complex problems, building leverage through automation, mentoring others, and strengthening security culture Nice to have: Experience securing the AI harness: hardening LLM and agent pipelines, prompts, tool and MCP integrations, and model endpoints against prompt injection, data leakage, and insecure agent actions Experience securing Kubernetes, including cluster hardening, RBAC, network policies, admission control, workload isolation, and image and supply-chain security Experience securing AWS infrastructure, including IAM, network and account architecture, key and secret management, and CSPM Experience building AI-assisted security tooling or internal self-service security platforms Experience mentoring or technically leading a security team Offensive or advanced security certifications such as OSAI, OSEP, OSCP, or OSWE What you'll get in return: You will join the company, that cares about work and life balance Annual Bonus based on the performance review cycle Generous Annual Leave Policy Medical Insurance and Pension fund, with additional benefit packages based on the location Hybrid working model (3 days from our modern office and 2 days fully remotely) Comprehensive Workation Policy with 30 more remote days available. Possibility of taking two additional days of paid leave per year to dedicate to volunteering efforts.

Location: Warsaw, Mazowieckie, Poland; Sofia City, Bulgaria; Limassol, Cyprus Workplace: hybrid Capital.com builds and operates web and mobile trading platforms, public and partner APIs, and the backend services behind them, all in a highly regulated environment. As Application Security Architect, you will be the senior design authority for the security of these products. You will set the direction for how we secure software at scale: you will own secure-by-design patterns and standards, lead threat modelling and architecture reviews, and define the application security baseline that engineering teams build against. Working closely with the Product Security team and the Director of Product Security, you will guide AppSec processes and set the vision for your area without direct line management. You will treat security as a shared outcome rather than a gate, balancing strong protection with developer experience and delivery speed, and you will earn adoption through enablement rather than mandates. Responsibilities: Security Architecture & Standards: Define and maintain secure-by-default reference architectures for common patterns: web apps, mobile backends, microservices, public and partner APIs, and event-driven services Own core application security architecture decisions: authentication and authorisation, session management, API security, secrets management, multi-tenant isolation, and security logging and auditing Lead the redesign of user authentication and the delivery of security features into the product Develop and roll out application security standards, secure-coding guidelines, configuration standards, reusable design patterns, and architecture decision records (ADRs) that engineers can apply without a security expert in the room Define internal policies for the safe use of AI-assisted and vibe-coding tools Define security requirements for acquired technology and guide its secure integration Threat Modelling & Design Review: Establish and run a threat-modelling operating model, covering scope, cadence, templates, and facilitation, proportionate to each product's risk tier Own the security review stage of the new product approval process, covering architecture design and configuration Lead design reviews for high-impact initiatives: new products, new auth flows, payment and sensitive-data flows, platform migrations, and major refactors Identify design-level risks and agree practical, prioritised mitigations with engineering teams Secure SDLC, DevSecOps & Supply Chain: Assess the current state of application security, propose improvements, and drive the secure SDLC strategy with Engineering and Security leadership Oversee AppSec processes and own the tooling strategy (SAST, DAST, IAST, SCA, and secrets scanning), including how findings flow back to engineering Embed security controls as guardrails in CI/CD through policy-as-code, with agreed enforcement and escalation paths Partner with DevOps to organise repository management and prevent supply-chain attacks, covering safe component usage, dependency management, SBOMs, and build integrity Improve the security of our internal tools Requirements: Experience: 8+ years in technology, including 5+ years in a dedicated application or product security role, with a strong engineering background and hands-on architecture or design ownership Proven track record creating, documenting, and rolling out security standards, patterns, and best practices across a complex engineering organisation Deep, demonstrable threat-modelling experience across product portfolios Technical: Experience designing and implementing a secure SDLC in a cloud-native environment. Strong AWS knowledge is required, and exposure to GCP or other clouds is welcome Strong command of OWASP standards (Top 10, ASVS) and DevSecOps practice, including AppSec tooling (SAST, DAST, IAST, SCA, secrets scanning) and vulnerability management Deep understanding of modern distributed architectures: microservices, REST and GraphQL APIs, event-driven systems, OAuth2/OIDC, and containerised workloads (Docker, Kubernetes). You should be able to reason about their trust boundaries, attack surface, and data flows across web and mobile clients Collaboration: Exceptional ability to influence and align engineering teams without direct authority, and to brief both engineers and executives Pragmatism and strategic thinking: you balance the ideal with the achievable, protect delivery throughput, and turn long-term direction into an actionable plan Clear written communication through diagrams, ADRs, and patterns, plus a track record of mentoring and cross-functional collaboration Nice to have: Experience in fintech, trading, brokerage, or another regulated environment Awareness of relevant regulatory and compliance drivers: FCA and CySEC operational resilience, GDPR, and PCI DSS Software supply-chain security, including SBOMs and artifact and build integrity Experience securing AI-integrated product features, or using AI to scale an AppSec programme Experience building or running a Security Champions programme CSSLP, GIAC GDSA, or a hands-on offensive security certification. Certifications are valued but secondary to demonstrated experience What you'll get in return: You will join the company, that cares about work and life balance Annual Bonus based on the performance review cycle Generous Annual Leave Policy Medical Insurance and Pension fund, with additional benefit packages based on the location Hybrid working model (3 days from our modern office and 2 days fully remotely) Comprehensive Workation Policy with 30 more remote days available. Possibility of taking two additional days of paid leave per year to dedicate to volunteering efforts.

Задачи: — поиск уязвимостей в коде; — безопасность SDLC; — использование SAST, DAST, SCA; — анализ архитектуры и защита веб-приложений. Требования: — опыт триажа результатов сканеров Semgrep, CodeQL, Svace под C, Go, Java; — знание классов CWE; — middle знания языка C, умение читать код, проходить граф вызовов, понимание работы с указателями и памятью в C; — знание Go, анализ гонок данных, утечек горутин, обработка ошибок; — знание Java, умение читать код, знание основ работы JVM; — знание архитектуры Kubernetes, понимание работы. Условия: — проектный формат работы, загрузка от 6 месяцев; — трудоустройство через ИП или самозанятый, возможен переход в штат по ТК; — локация строго Россия. Суть проекта: — госзаказ, система "Честный знак".

Задачи: — Проектировать и автоматизировать средства контроля, механизмы обнаружения и инструменты для улучшения информационной безопасности инфраструктуры и продуктов Algolia — Исследовать, оценивать и рекомендовать новые технологии, методы и фреймворки информационной безопасности — Проектировать, внедрять и поддерживать системы мониторинга и устранения проблем информационной безопасности для защиты данных клиентов и систем Algolia — Сотрудничать с инженерными и продуктовыми командами для интеграции информационной безопасности в новые функции, системы и конвейеры разработки — Способствовать улучшению стандартов, процессов и лучших практик информационной безопасности в компании — Проводить оценку рисков и моделирование угроз для основных систем, сервисов и сторонних поставщиков — Участвовать и иногда возглавлять мероприятия по реагированию на инциденты информационной безопасности и анализу после инцидентов — Поддерживать текущие и новые инициативы по информационной безопасности и соответствию (например, SOC 2, Type II, ISO 27001, C5, GDPR) — Управлять и развивать программы публичного багбаунти и раскрытия уязвимостей Algolia Требования: — 3–6 лет опыта в инженерии информационной безопасности, защите инфраструктуры или смежных технических областях — Владение скриптингом или автоматизацией на одном из языков: Python, Bash, Go или аналогичных — Предпочтение опыту работы с Kubernetes — Глубокое понимание принципов информационной безопасности для современных облачных сред (AWS, GCP, Azure) и дата-центров — Опыт эксплуатации, настройки и управления системами логирования/SIEM, обнаружения угроз, управления позицией безопасности, EDR, SAST, SOAR, CTI и другими системами информационной безопасности, предпочтительно с опытом работы с Crowdstrike или Obsidian — Знание распространённых угроз, векторов атак и стратегий их смягчения — Хорошее понимание компьютерных систем, сетей и низкоуровневых протоколов с точки зрения информационной безопасности — Опыт обнаружения инцидентов, реагирования и управления уязвимостями — Отличные коммуникативные навыки для объяснения рисков и концепций информационной безопасности технической и нетехнической аудитории — Способность работать совместно с вице-президентом по информационной безопасности и самостоятельно достигать бизнес-целей — Свободное владение английским языком Желательно: — Опыт масштабирования программ информационной безопасности в быстрорастущих SaaS-компаниях — Сертификаты или эквивалентное обучение по облачной информационной безопасности (например, AWS Security Specialty, GCP Professional Security Engineer) — Опыт работы с системами управления секретами, такими как Hashicorp Vault — Участие в сообществах информационной безопасности, багбаунти, open-source инструментах или CTF — Опыт в области инженерии конфиденциальности, моделирования угроз или безопасного проектирования ПО Условия: — Гибкая модель работы с возможностью полностью удалённой или гибридной работы — Работа в международной команде с офисами в Париже, Нью-Йорке, Лондоне, Сиднее и Бухаресте — Конкурентная годовая зарплата в диапазоне £66,080–£91,800 — Культура, ориентированная на обучение, сотрудничество и инновации в области информационной безопасности — Поддержка профессионального развития и возможность влиять на безопасность систем, используемых миллионами пользователей

Location: Remote, Singapore GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Manager, Customer Success Architects , you will lead a distributed Asia Pacific team of Customer Success Architects and Customer Success Managers that help customers realize value from GitLab through strong adoption, measurable outcomes, and trusted partnership. You will partner closely with both executive sponsors and day-to-day end users/practitioners to drive adoption and measurable outcomes. Reporting to the Sr Director of Customer Experience, APJ , you will coach Customer Success Managers & Customer Success Architects to support account health across onboarding, adoption stages, executive business reviews, and renewals, while also improving how the team works. This is a people leadership role with broad scope: you will develop talent, strengthen customer relationships, and partner across Sales, Product, Engineering, and other teams so customers are supported through growth, change, and escalation. What you'll do Lead a team of Customer Success Architects & Customer Success Managers focused on customer adoption, account health, customer satisfaction, and advocacy. Ensure delivery of the Success package entitlements and increase value by driving usage and consumption Coach team members through regular feedback, development support, and career growth conversations to strengthen knowledge, communication, and execution. Partner with the Sr Director of Customer Experience APJ and Sales stakeholders  to define team goals, clarify responsibilities, and align priorities with company direction. Manage resource assignments, staffing levels, and hiring activity to support team coverage and customer needs. Develop senior-level relationships with customers and support the team in building trusted advisor partnerships. Collaborate with Sales, Product Management, Engineering, Professional Services, Renewals and other internal teams to create a consistent customer experience. Support customers during escalations by working with other leaders to coordinate clear, effective responses. Improve the processes and tools used by the team and oversee initiatives tied to objectives and key results. What you'll bring Experience leading customer-facing delivery teams in software, technology, consulting, sales, or customer success environments preferably in DevOps or related domain. Ability to guide teams that drive software adoption and manage customer relationships across onboarding, adoption, business reviews, and renewals. Knowledge of software development lifecycle practices, related tools, and agile or DevOps ways of working. Familiarity with cloud or container technologies such as Kubernetes and Docker, application security concepts such as static application security testing (SAST) and dynamic application security testing (DAST), or cloud platforms such as Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure. Skill in translating strategy into clear initiatives, coordinating execution, and tracking delivery across competing priorities. Capability to lead distributed teams across regions, cultures, and lines of business, while working effectively with senior executives and external stakeholders. Willingness to travel occasionally for customer meetings and team events, as needed. Strength in communication, coaching, feedback, delegation, planning, and process improvement. Warmth and care in your leadership approach—able to coach with empathy and build trust on a human level. Interest in candidates with transferable experience who can connect technical concepts to business value and collaborate well across functions. About the team On the Customer Success Management team, we are accountable for success bookings, customer adoption, measurable outcomes, customer satisfaction, and building customer advocacy across GitLab. We also act as a key connection point between customers and the broader GitLab ecosystem, helping streamline collaboration with Product Management, Engineering, Sales, Professional Services, and other partners. In this role, you will manage a team in Asia Pacific while collaborating asynchronously with stakeholders across regions, with a focus on helping customers succeed at scale and improving how the organization supports them. How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Задачи: — Партнёрство с Account Executives для согласования технических решений с целями клиентов, поддержка пресейл-активностей и стимулирование дохода через стратегические продажи. — Понимание и навигация по требованиям государственного сектора, включая процессы закупок, руководства NIST, рамки DoD (например, PlatformOne, IronBank) и федеральные требования к соответствию (например, CMMC). — Проведение демонстраций и Proof of Value (POV) для технических и нетехнических заинтересованных сторон, демонстрируя, как JFrog обеспечивает безопасные, масштабируемые практики DevSecOps и MLOps. — Поддержка запросов информации (RFI), запросов предложений (RFP) и тендерных процессов, обеспечивая техническую точность и соответствие стандартам государственных закупок. — Руководство клиентов на протяжении технического жизненного цикла, перевод бизнес-целей в проектные решения и сотрудничество с командами продукта и инженерии для влияния на дорожную карту на основе обратной связи с рынка. — Пропаганда лучших практик DevSecOps, включая разработку эталонных архитектур DoD/Federal, и стимулирование внедрения в федеральных агентствах. — Отслеживание отраслевых тенденций, поддержание экспертизы в DevOps, облачных технологиях, доставке программного обеспечения и новых технологиях, актуальных для цифровой трансформации государственного сектора. Требования: — Более 5 лет практического опыта с технологиями DevOps, включая Docker, Kubernetes, Git, CI/CD инструменты, Artifactory, инструменты сборки и современные практики SDLC. — Более 3 лет практического опыта в области сканирования уязвимостей (SCA, SAST, DAST), сетевой безопасности, безопасности контейнеров/Kubernetes, безопасности цепочки поставок программного обеспечения (SBOM, подписание артефактов, SLSA) и интеграции безопасности в CI/CD. — Опыт технических продаж, пресейла или инженерных продаж является плюсом, предпочтительно с клиентами государственного сектора США. — Знание методологии MEDDPICC является плюсом. — Знание программ и требований государственного сектора, включая среды DoD, классификации уровней воздействия, стандарты NIST и федеральные модели закупок. — Владение облачными платформами AWS, Azure, GCP и Linux, способность проектировать гибридные архитектуры и масштабируемые решения развертывания. — Способность проводить POC и технические презентации, сильные коммуникативные навыки для объяснения бизнес-ценности технической и исполнительной аудитории. — Отличные письменные и устные коммуникативные навыки. — Ориентация на клиента, решение задач и страсть к обеспечению успеха миссии. — Требуется гражданство США. — Готовность к командировкам не менее 25% по США. — Возможны требования к безопасности правительства; наличие активного допуска к секретной информации является плюсом. Условия: — Предпочтение кандидатам, проживающим в Вашингтоне, округ Колумбия. — Годовой базовый оклад от $160,000 до $172,500, зависит от навыков, квалификации, опыта и местоположения. — Возможность получения бонусов или комиссионных. — Пакет акций (RSU). — Участие в плане покупки акций сотрудниками. — Комплексные медицинские, стоматологические, офтальмологические, пенсионные и оздоровительные программы. — Равные возможности трудоустройства без дискриминации.