Location: Târgu Mureș, Romania
D-ploy is a leading
IT
and Engineering Solutions company with operations worldwide. Our mission is to deliver innovative and D-ploy is an
IT
and Engineering Solutions company with operations throughout the EMEA region including Switzerland, Germany, Czech Republic, Austria, UK, as well as the USA.
We pride ourselves on delivering innovative and superior services and solutions to numerous industry-leading clients. By building relationships and trusted partnerships within the
IT
community, we optimize our customer‘s
IT
productivity and contribute to the organization’s success and value.
We are interested in talking to engaging, flexible, and solution-oriented individuals who are looking to become a part of a dynamically growing and international organization. We are focused on creating value where
IT
counts, join us!
Responsibilities
Onsite IT/OT support including break/fix for thin clients, IPCs, handhelds, and lab equipment
Local hands-and-feet support for global IT teams
Troubleshooting automation and production systems (PLC, SCADA, OT networks)
Support for software upgrades, patching, and backups in lab/OT environments
Incident, problem, and change management (ITIL-based)
Compliance with CSV, GxP, and data integrity procedures
Participation in disaster recovery and business continuity planning
Requirements
Bachelor's in IT, Engineering, or related field
5+ years of IT/OT support experience in regulated environments
Experience with industrial IT systems, SCADA/PLC, and lab software
Networking knowledge (VLAN, Firewall, Routing)
ITIL process knowledge; ServiceNow/Remedy ticketing
Database Troubleshooting Experience MSSQL
Available for onsite support and 24/7 on-call rotation
Fluency in Romanian and English (both written and spoken) is essential.
Candidate must declare Criminal Record no older than 3 months.
Benefits
Broad range of activities, tasks, and projects
Flexible working conditions
Vouchers (B-day voucher, wedding, and new born surprise)
Fishing for Friends program – our referral program
Refreshments in the D-ploy office
Further development and professional advancement
Friendly and international working environment
Company-sponsored events
Is
IT
in your DNA?
Location: Warsaw, Poland; Prague, Czechia; Sofia, Bulgaria; Bucharest, Romania; Madrid, Spain; Tbilisi, Georgia
CloudLinux
is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful.
Check out our website for more information
https://cloudlinux.com/
Imunify360 Security Suite
is a product of CloudLinux Inc., the maker of the #1 OS in security and stability for hosting providers. Imunify is an innovative security solution designed specifically for shared and VPS/Dedicated servers. The automated, easy-to-use solution with the six-layer approach to security delivers comprehensive and complete attack prevention.
The mission
We protect web hosting providers and the sites running on their infrastructure through a defense-in-depth stack: web-server-layer WAF, runtime application self-protection for PHP, deep application integrations (WordPress plugins and similar), a malware scanner with cleanup capability, and network-layer firewalls and IP reputation. The pieces talk to each other, and the threat intelligence they generate at scale powers detection across the stack.
Node.js is the segment of the hosting market growing fastest, and the next layer we want to build for it is runtime protection inside the Node.js process itself. Most Node.js workloads on managed hosting today are AI-generated web apps deployed by non-technical owners who can't, won't, and shouldn't be expected to patch their own code or audit their own dependencies. We're going to defend those apps anyway — at runtime, without their cooperation, without breaking them.
You'll build that runtime protection layer end-to-end.
What you'll own
The product. A brand-new product line, yours to define — what we intercept, what we don't, what the customer-visible surface looks like.
The technical approach. Instrumentation strategy, deployment shape, programming language — all open. You'll consult with our architects but the direction is yours.
Implementation, end to end. You'll have the full tooling stack we provide — LLM subscriptions, modern dev infrastructure, the works. Use what makes you fast.
Methodology. How you build conviction in your detection logic — your call.
Cross-layer signal. Our existing stack produces threat intelligence at unmatched scale: tens of millions of monitored sites, petabyte-scale malware sample storage, real-time domain and URL reputation, IP-level attack feeds. These are available for you to plug into. Use what helps.
How we'll measure success
The product is held to four numbers: runtime overhead, false positives, false negatives, and customer-escalation volume. They reflect what hosting providers and their customers care about. Hit them well and the product runs inside a meaningful slice of the modern Node.js web.
What we're looking for
An experienced researcher or engineer who can build and iterate on a brand-new product, driving both the research and the development. The hard part of this work is knowing what's malicious, what's vulnerable, and what's just an unusual but legitimate pattern — and being right about it across the long tail of frameworks, libraries, and customer code we'll encounter in production.
Requirements
Must have:
Proven experience building and shipping a new product, security solution, major feature, or technical system from scratch.
Strong evidence of end-to-end technical ownership, from initial investigation and architecture through implementation, release, and production iteration.
Strong web application security knowledge and current knowledge of practical exploitation.
A working sense of how detection rules behave at scale — what catches attackers without flagging the long tail of legitimate code.
Ability to start as the PM, architect, lead engineer, and QA for this product. You ask for resources or help when you need them; you don't wait to be told what to do.
Comfort directing AI coding agents to high-quality output.
Nice to have:
Prior work on runtime-protection products, application firewalls, or instrumentation tooling.
Background in malware analysis or incident response.
Familiarity with managed-hosting environments.
Public security research, vulnerability disclosures, or detection rulesets you've authored.
Familiarity with the Node.js runtime and the JavaScript ecosystem.
What it's not
Not a scope-and-handoff role — you drive the work and own the outcome.
Not a "platform team will productize this later" role — you ship to real customer fleets and watch the telemetry quickly.
Not a spec-and-review role — you are hands-on every day.
Why this matters
Most managed-hosting customers are not developers. They cannot patch their apps. They cannot audit their dependencies. They will keep deploying vulnerable code from AI assistants because that's how modern web apps get built now. The textbook advice — "secure your code, audit your dependencies" — does not apply to them.
If we don't intercept exploits at runtime, nobody will. The numbers you hit on detection, performance, and false positives will materially affect how much of the modern web stays online when the next exploit class drops.
Benefits
What's in it for you?
A focus on professional development.
Interesting and challenging projects.
Fully remote work with flexible working hours, that allows you to schedule your day and work from any location worldwide.
Paid 24 days of vacation per year, 10 days of national holidays, and unlimited sick leaves.
Compensation for private medical insurance.
Co-working and gym/sports reimbursement.
Budget for education.
The opportunity to receive a reward for the most innovative idea that the company can patent.
By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy (
https://cloudlinux.com/candidate-privacy-notice
), which provides detailed information on how we maintain and handle your data.
Location: Jeddah, Saudi Arabia; Tabuk, Saudi Arabia; Riyadh, Saudi Arabia; Al Khobar, Saudi Arabia
The
Fire Safety Engineering Lead
will act as a technical subject matter expert responsible for leading fire and life safety engineering activities at KAUST. The role will provide technical leadership in fire engineering design reviews, compliance validation, fire risk assessments, inspections, investigations, and continuous improvement.
The position will also lead and mentor Fire Safety Engineers, support the Authority Having Jurisdiction (AHJ) framework, and ensure compliance with
Saudi Building Code (SBC), NFPA, International Fire Code (IFC), and KAUST requirements
.
Responsibilities
Lead the technical delivery and execution of fire and life safety engineering activities.
Lead, supervise, mentor, and develop a team of Fire Safety Engineers.
Conduct technical reviews and compliance validation in accordance with KAUST procedures and delegated authorities.
Review fire and life safety designs for new construction, renovations, research facilities, and high-hazard environments.
Apply and interpret Saudi Building Code (SBC), NFPA, International Fire Code (IFC), and KAUST requirements.
Conduct fire risk assessments and develop risk-based mitigation strategies.
Oversee fire and life safety inspections, field assessments, system verifications, and incident investigations.
Provide technical assurance for inspection, testing, and maintenance (ITM) of fire protection systems.
Review fire protection system deficiencies and escalate overdue or high-risk corrective actions.
Lead or support investigations related to fire incidents, system failures, impairments, and unwanted fire alarms.
Identify root causes and recommend corrective and preventive actions.
Develop and deliver fire and life safety training for engineering, operations, emergency response, and other personnel.
Develop and maintain fire engineering standards, technical procedures, and guidance documents.
Establish and monitor fire and life safety objectives, metrics, and KPIs.
Analyze performance data, identify trends, and lead technical improvement initiatives.
Maintain accurate and audit-ready technical, inspection, investigation, and compliance records.
Requirements
Bachelor’s degree in Fire Engineering, Fire Protection Engineering, Mechanical Engineering, or a related engineering discipline.
Minimum 8+ years of professional experience in fire protection engineering, fire systems engineering, or a closely related field.
Strong practical knowledge of Saudi Building Code (SBC), NFPA, and International Fire Code (IFC).
Proven experience in fire engineering design reviews and compliance validation.
Proven experience conducting fire risk assessments and developing mitigation strategies.
Experience with fire protection system inspection, testing, and maintenance activities.
Experience leading or supporting fire incident investigations and corrective and preventive actions.
Proven experience leading, supervising, and mentoring technical engineering professionals.
Strong knowledge of fire and life safety engineering principles and practices.
Chartered Engineer (CEng), Professional Engineer (PE), or equivalent certification is preferred.
Recognized fire protection or fire safety certifications such as NFPA CFPS, CFPE, CFAITMS, CWBSP, or NICET are preferred.
Location: Jeddah, Saudi Arabia; Tabuk, Saudi Arabia; Riyadh, Saudi Arabia
The Safety Specialist will support the Safety Lead in implementing and maintaining occupational health and safety programs across
KAUST facilities, operations, maintenance activities, construction works, and projects
. The role will focus on field inspections, audits, risk assessments, incident investigations, safety documentation, contractor engagement, training, corrective action tracking, and compliance with
ISO 45001, HSE policies, and applicable regulatory requirements
.
The position requires a strong field-oriented HSE professional who can identify hazards, evaluate risks, provide practical safety guidance, investigate incidents, and work effectively with facility owners, project teams, contractors, and service providers.
Key Responsibilities
HSE Program Implementation: Support the Safety Lead in implementing and continuously improving risk-based safety programs across facilities, operations, maintenance, construction, and projects.
Safety Inspections & Audits: Conduct risk-based site inspections, safety audits, compliance evaluations, and field verifications to ensure HSE requirements are being followed.
Risk Assessment: Perform hazard identification and risk assessments and verify that appropriate control measures are implemented and effective.
Safety Documentation Review: Review HSE documents including risk assessments, method statements, safety plans, permits-to-work, lifting plans, excavation plans, confined-space controls, electrical work procedures, and MOC documentation.
Incident Investigation: Investigate or support investigations of accidents, injuries, incidents, and near misses, identify root causes, and recommend corrective and preventive actions.
Corrective Action Tracking: Monitor corrective and preventive actions arising from inspections, audits, investigations, and observations, ensuring timely closure and escalation of overdue actions.
HSE Training & Awareness: Develop and deliver safety training, toolbox talks, workshops, permit-to-work training, and awareness programs to improve employee and contractor competency.
Stakeholder & Contractor Support: Provide practical HSE guidance to facility owners, project teams, contractors, service providers, and other stakeholders to support safe execution of activities.
HSE Reporting & Data Analysis: Collect and analyze HSE data, KPIs, inspection findings, audit results, incident trends, and corrective action status, providing reports and recommendations to management.
Safety Culture & Compliance: Promote a strong safety culture, intervene in unsafe activities, communicate lessons learned, maintain accurate HSE records, and support compliance with ISO 45001, regulations, policies, procedures, and industry best practices.
Requirements
Education: Bachelor’s degree in Occupational Health & Safety, Engineering, Science, or a related safety discipline is required.
Professional Certification: ISO 45001 Lead Auditor certification is required.
Incident Investigation: Certification or formal training in Incident Root Cause Analysis is required.
HSE Experience: Minimum 5 years of relevant experience in occupational safety, facilities safety, construction safety, contractor management, projects, auditing, compliance, or related HSE functions.
Risk Management: Strong experience in hazard identification, risk assessment, risk control, and implementation of risk-based safety programs.
High-Risk Activities: Practical knowledge of safety controls for work at height, lifting operations, excavation, confined spaces, hot work, electrical work, and permit-to-work systems.
ISO & Audit Knowledge: Working knowledge of ISO 45001, safety management systems, auditing, inspections, incident investigation, and corrective action management. Knowledge of ISO 19011 and ISO 31000 is an advantage.
Safety Certifications: Additional recognized HSE qualifications such as CSP, CHST, NEBOSH Certificate/Diploma, IOSH, or equivalent are preferred. Train-the-Trainer certification is also an advantage.
Communication & Reporting: Excellent English communication skills with the ability to prepare professional HSE reports, inspection records, investigation reports, presentations, and safety documentation.
Location: Canada
What The Role Is
As a
Senior Engineer
at Babylist, you take on hard problems and own them end-to-end. Millions of families depend on what we build. Agents write most of the code now. So the hard part is yours: what to build, how it should work and whether what shipped was right. You're still in the code for the genuinely hard problems. Agents handle the volume. You spend your time on the parts that need a person.
We're building well beyond the registry now: the financial side of raising a kid, maternal health made simpler and more human, the education new parents are looking for and the community around them. The hard problems run across all of it, plus the platform underneath and the AI we already ship to families. You'll start on a team, but you won't be boxed into it. The roadmap is open, your scope grows as you do and you have a say in what you take on next. Senior here means owning whole problems; Staff is the next step up, setting direction across a domain.
What You'll Own
A Senior Engineer here owns problems, not just features. You're handed an outcome, you decide what to build, ship it and own whether it worked. You act on incomplete information and change course fast when the evidence says you were wrong.
What you do depends on what the team needs:
Frame the problem with your PM as a peer, run the experiment and bring customer evidence into what gets built.
Harden a critical path, kill a class of incidents or design the abstraction your team builds on.
Be the reviewer people want on the risky changes.
Manage up with crisp choices: raise the risks early and protect the right tradeoffs.
Share what you're learning about AI openly, so the whole team gets sharper.
A few problems people at this level are working on right now:
Deciding what the registry recommends to each family, from the ranking to the model behind it, and proving in a live experiment that it actually helps.
Building the evals system that catches our AI support agent making things up before a customer does.
Making a child's info one source of truth instead of five disconnected flows, so parents set it up once and new products like Early Investor build on it.
Who You Are
You've been shipping production systems for years, and you've got the judgment to show for it. You can pick up an ambiguous problem and start moving before anyone hands you the full picture.
The strongest Senior engineers here are generalists, and usually the most prolific builders on their team. You go wherever the problem leads: a backend service one week, a stubborn frontend bug the next, the data pipeline after that. When it's hard you dig in, and you learn unfamiliar parts of the stack fast. Range is the Senior signature.
Compensation
We post real numbers. For a Canada-based Senior Engineer, the starting base salary range is $255,900 to $318,600 CAD, plus a target annual bonus of 15 percent of base. That's total target cash of roughly $294,285 to $366,390 CAD. On top of that you get meaningful equity and an RRSP match. Where you start in that range depends on your experience, and your pay grows from there with performance and scope.
How We Build
AI is the default here. Engineers run agentic sessions for most of the work, and a lot of the interesting engineering now lives in the scaffolding that makes the agents good: the eval harnesses, the curated context, custom review skills and fast CI. Agents also triage incidents and handle a big share of support. A human always owns the outcome. The architecture is intentionally simple: one Rails monolith, MySQL and few moving parts. That's deliberate. Simple infrastructure lets us move fast and lets AI reason about the whole system, so the hardest problems are the ones in front of customers.
The Stack
Core app:
Rails, Packwerk, React, TypeScript, Sidekiq
Mobile:
iOS (Swift), Android (Kotlin)
Data, search & events:
MySQL, Snowflake, dbt, Airflow, Weaviate, WarpStream, Hex, Sigma
Machine learning:
deep learning, matrix factorization, retrieval & ranking, AWS SageMaker, MLflow
AI & dev tooling:
Claude Code, Devin, Linear, CodeRabbit, Warden, LangChain, Bedrock AgentCore, Maxim
Infra & ops:
AWS, Kubernetes, Terraform, GitHub Actions, Datadog, incident.io, LaunchDarkly
Key integrations:
Shopify (payments), Iterable (CRM)
Why Babylist
An engineer, expecting her first baby, couldn't find the registry she wanted. So she built it. That's how Babylist started, and it's still how we work: engineers solving problems for families. Becoming a parent is one of the biggest moments in a person's life. Millions reach it for the first time every year, making thousands of decisions and figuring it out as they go. That's who we build for, and we're a long way from done.
Ten million people give gifts through Babylist every year. We did more than $750M in revenue in 2025, up 45 percent over the year before, and we've been profitable for eight years while staying independent. So you can take on a hard, multi-year problem without watching over your shoulder for the next round or the next correction. And the team is small, around 65 engineers, so what you ship stays visible and your scope stays wide.
How We Work
Remote-first across the US and Canada, and we have been for years. That's not changing. We trust you to own your time and your outcomes, and we get everyone in a room together twice a year. Teams are small, pods of three to five engineers, so nothing you ship disappears into a committee. You'll work shoulder to shoulder with product, design and data, and with the partners across the business who rely on what you ship. You'll also stay close to customers yourself: sitting in on user interviews, watching session recordings, riding along with support. Here that's part of the engineering job, on a regular basis.
How We Hire
Three rounds, usually two to three weeks, start to finish.
Recruiter conversation (30 minutes).
Trade context: what you want next, what we're building and straight answers on comp, team and remote.
Technical screen (1 hour).
One round, no AI, language-agnostic. Reach for Google when you normally would. We just want to see how you reason from first principles.
Final round (4 hours).
Four one-hour interviews: system design, AI-assisted coding with the tools you'd actually use here, product sense and culture and values. You'll hear back either way within 24 to 48 hours.
If your timeline is tight, tell us and we'll move faster.
Benefits
Company-paid medical and fully covered dental and vision
A RRSP match
Generous paid parental leave for birthing and non-birthing parents, plus a gradual return-to-work program
Winter Wonder Week, a paid company-wide week off at the end of the year
A remote-work stipend
Mental-health and wellness support
A Few Things To Know
We record and transcribe interviews to evaluate candidates, in line with applicable privacy laws.
We expect you to use AI in your work and we welcome it in the process, but what you submit and say should reflect your own thinking.
If you have a family member or close relationship with a Babylist employee, let your recruiter know.
Official outreach only ever comes from an @babylist.com address.
Location: Canada
What The Role Is
As a
Staff Engineer
at Babylist, you own some of our hardest domains and decide where they go. Millions of families depend on what we build. Agents write most of the code now. So the hard part is yours: what to build, how it should work and whether what shipped was right. You're still in the code for the genuinely hard problems. Agents handle the volume. You spend your time on the parts that need a person. We're building well beyond the registry now: the financial side of raising a kid, maternal health made simpler and more human, the education new parents are looking for and the community around them. The hard problems run across all of it, plus the platform underneath and the AI we already ship to families.
You'll own a big piece of the product, but you won't be boxed into it. The roadmap is open. You have a say in which bets we make, and you pick what you take on next.
What You'll Own
A Staff Engineer here sets direction. You own a domain: a product surface, a platform area or a capability that cuts across several teams. You set where it's going over the next year or two, sequence the bets that get there and make the technical and product calls along the way. You're still in the code. We don't have architects who've stopped building. If you stepped away, multiple teams would feel it. Your influence shows up in the systems and the work other teams choose to build on. You don't need direct reports to have that reach. It comes from what you build.
In practice, you:
Take a fuzzy business problem from the first sketch through to production, and stay on the hook for whether it actually helped customers.
Build the platform or tooling other teams adopt by choice, and own it as it scales.
Make the architecture calls that span teams and the ones that are expensive to reverse.
Set the standard for how your domain builds with AI. Decide what good looks like, build the patterns and evals that get agents there and catch the output that's confidently wrong before it ships.
Partner with product, design and data as a peer, shaping what's worth building from the start.
Coach Senior engineers through the hard calls, the ambiguous ones as much as the technical ones.
A few problems people at this level are working on right now:
Resolving one customer across registry, shop and health, plus the friends and family buying for them, so personalization works everywhere without each team rebuilding it.
Designing the knowledge system our coding agents reliably load, and working out how much context actually helps before it starts to hurt.
Building Early Investor, our new family finance product, from scratch, on a deadline that can't move.
Who You Are
You've shipped production systems for enough years to have earned strong opinions, and you hold them loosely. You can pick up an ambiguous problem and start moving before anyone hands you the full picture. You've already changed how a team builds with AI, and the new way stuck. Most Staff engineers lean one of two ways, and both do well here. Some point their depth at the systems everyone runs on: the platforms, the reliability and security bar, the harnesses that make AI produce good code. Others point it at the customer: framing the problem with PMs as peers, owning a journey end to end, deciding what to build and learning whether it worked. You don't have to be both. You do have to be excellent at one and fluent in the other.
A few things that tend to be true of people who thrive here:
You measure yourself by impact: a customer outcome, or a system a dozen teams come to depend on.
You're curious: you spot problems before they're filed and push your own ideas until they ship.
Compensation
We post real numbers. For a Canada-based Staff Engineer, the starting base salary range is $299,300 to $372,600 CAD, plus a target annual bonus of 20 percent of base. That's total target cash of roughly $359,160 to $447,120 CAD. On top of that you get meaningful equity and an RRSP match. Where you start in that range depends on your experience, and your pay grows from there with performance and scope.
How We Build
AI is the default here. Engineers run agentic sessions for most of the work, and a lot of the interesting engineering now lives in the scaffolding that makes the agents good: the eval harnesses, the curated context, custom review skills and fast CI. Agents also triage incidents and handle a big share of support. A human always owns the outcome.
The architecture is intentionally simple: one Rails monolith, MySQL and few moving parts. That's deliberate. Simple infrastructure lets us move fast and lets AI reason about the whole system, so the hardest problems are the ones in front of customers.
The Stack
Core app:
Rails, Packwerk, React, TypeScript, Sidekiq
Mobile:
iOS (Swift), Android (Kotlin)
Data, search & events:
MySQL, Snowflake, dbt, Airflow, Weaviate, WarpStream, Hex, Sigma
Machine learning:
deep learning, matrix factorization, retrieval & ranking, AWS SageMaker, MLflow
AI & dev tooling:
Claude Code, Devin, Linear, CodeRabbit, Warden, LangChain, Bedrock AgentCore, Maxim
Infra & ops:
AWS, Kubernetes, Terraform, GitHub Actions, Datadog, incident.io, LaunchDarkly
Key integrations:
Shopify (payments), Iterable (CRM)
Why Babylist
An engineer, expecting her first baby, couldn't find the registry she wanted. So she built it. That's how Babylist started, and it's still how we work: engineers solving problems for families. Becoming a parent is one of the biggest moments in a person's life. Millions reach it for the first time every year, making thousands of decisions and figuring it out as they go. That's who we build for, and we're a long way from done.
Ten million people give gifts through Babylist every year. We did more than $750M in revenue in 2025, up 45 percent over the year before, and we've been profitable for eight years while staying independent. So you can take on a hard, multi-year problem without watching over your shoulder for the next round or the next correction. And the team is small, around 65 engineers, so what you ship stays visible and your scope stays wide.
How We Work
Remote-first across the US and Canada, and we have been for years. That's not changing. We trust you to own your time and your outcomes, and we get everyone in a room together twice a year. Teams are small, pods of three to five engineers, so nothing you ship disappears into a committee. You'll work shoulder to shoulder with product, design and data, and with the partners across the business who rely on what you ship. You'll also stay close to customers yourself: sitting in on user interviews, watching session recordings, riding along with support. Here that's part of the engineering job, on a regular basis.
How We Hire
Three rounds, usually two to three weeks start to finish.
Recruiter conversation (30 minutes).
Trade context: what you want next, what we're building and straight answers on comp, team and remote.
Technical screen (1 hour).
One round, no AI, language-agnostic. Reach for Google when you normally would. We just want to see how you reason from first principles.
Final round (4 hours).
Four one-hour interviews: system design, AI-assisted coding with the tools you'd actually use here, product sense and culture and values. You'll hear back either way within 24 to 48 hours.
If your timeline is tight, tell us and we'll move faster.
Benefits
Company-paid medical and fully covered dental and vision
A RRSP match
Generous paid parental leave for birthing and non-birthing parents, plus a gradual return-to-work program
Winter Wonder Week, a paid company-wide week off at the end of the year
A remote-work stipend
Mental-health and wellness support
A Few Things To Know
We record and transcribe interviews to evaluate candidates, in line with applicable privacy laws.
We expect you to use AI in your work and we welcome it in the process, but what you submit and say should reflect your own thinking.
If you have a family member or close relationship with a Babylist employee, let your recruiter know.
Official outreach only ever comes from an @babylist.com address
Location: São Paulo, Brazil
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles:
We Before Me
,
Do the Right Thing
, and
Get Things Done
. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
What You’ll Be Doing
Independent review and challenge of fraud risk assessments conducted by 1 LoD, including RCSA validation, control effectiveness testing, and escalation of identified gaps to senior management
Oversight and quality assurance of incident documentation, ensuring completeness, accuracy, and alignment with BCB regulatory standards; contribution to the BCB 260 annual fraud report
Regulatory SLA oversight for participant fraud investigation requests: review 1 LoD responses for adequacy, flag deficiencies, and ensure timely escalation where SLAs are at risk
BCB 343 compliance monitoring of 24-hour fraud event registrations and monthly declarations submitted by 1 LoD
Independent assessment of BCB-directed investigations: evidence review, challenge of 1 LoD findings, and preparation of formal regulatory responses
AML interface: independent identification and escalation of fraud patterns with potential money laundering indicators to the Compliance/AML function
Ongoing independent monitoring of the Dynamic Deposit Limit scoring model and Eagle Eye controls, including periodic effectiveness reviews and recommendation of adjustments to 1 LoD
Fraud data analytics: analysis of platform fraud patterns to identify emerging typologies, assess control gaps, and produce findings for senior management and regulatory reporting
2 LoD policy ownership: drafting, maintaining, and periodically reviewing fraud risk policies and procedures; providing binding guidance to 1 LoD on control design and implementation standards
What We Look For In You
Minimum 3 years of experience in risk management in the financial services industry
Strong familiarity with AI tools and a practical understanding of how to apply them to analysis, experimentation, personalization, and productivity.
A highly data-driven and results-oriented mindset.
Exceptional communication and stakeholder-management skills.
An entrepreneurial mindset, with strong ownership, adaptability, and bias toward action.
Excellent organization and project-management capabilities.
Bachelor's degree or equivalent years of experience
Flexibility to adapt working hours to collaborate effectively across multiple time zones.
Fluency in Portuguese and English.
Perks & Benefits
Competitive total compensation package
L&D programs and Education subsidy for employees' growth and development
Various team building programs and company events
Wellness and meal allowances
Comprehensive healthcare schemes for employees and dependents
More that we love to tell you along the process!
#LI-SK1
#LI-HYBRID
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: San Francisco, CA | Seattle, WA
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
Anthropic is seeking an Internal Communications Manager to serve as a dedicated communications partner to our Core Tech organization (the teams building and securing the systems behind Claude, from engineering and infrastructure to security). Depending on your background and where the need is greatest, your portfolio might center on security, on engineering more broadly, or span both - we'll shape that together during the hiring process.
Internal communications at Anthropic is not a support function that plans meetings and sends newsletters. The best people in this role operate like advisors who embed themselves deeply in the orgs they support, earn a seat at the leadership table, write on behalf of executives, and see around corners, anticipating what the organization will need to hear before anyone asks for it. There are traditional elements to the role too, like all-hands planning and org change announcements, and you'll run those with operational excellence. But the heart of the job is more creative and will require you to find ways to connect the rest of the company to some of the most consequential and least visible work at Anthropic, and making the line between that work and our mission clear and strong.
The work of Core Tech is deeply technical and the company depends on it (like architecting new products for Claude to reach users, model inference, capacity planning, building reliable systems, and the security that protects all of it) but most employees rarely see this work directly…unless something goes wrong. Your job is to change that by understanding this work, and the people doing it, well enough to tell its story credibly, and to help its leaders communicate with clarity and candor as the company scales.
Responsibilities
Own the internal communications strategy for your portfolio within Core Tech, becoming an expert in the team's work and a trusted member of its leadership team
Serve as a hands-on advisor to executives - help them think through what to say and when, draft communications in their voice, and give them honest counsel, especially in moments when that’s challenging or uncomfortable.
Translate deeply technical work into narratives that land with employees across every function, without losing the substance
Get creative about how you connect people to the work - don't default to creating a slide deck when a demo or something no one has tried yet would land better
Anticipate communications needs before they arrive (e.g. launches, incidents, organizational change, moments of external attention) and have a plan ready for how we’ll bring employees along
Design and implement strategies to boost signal and reduce noise, so employees know what's important and what it means for them
Plan and execute internal fora like all-hands and AMAs with operational excellence
Exercise sound judgment with sensitive material, especially where security work requires care about what is shared, with whom, and when
Partner closely with the broader internal communications team to ensure updates are accurately and consistently cascaded across existing channels and live forums
You may be a good fit if you
Have 8–12 years of experience in communications or an adjacent craft where you learned to make complex, high-stakes material clear under pressure (e.g journalism, speechwriting, chief of staff work, strategy and operations)
Are an exceptional writer with a particular talent for distilling technical decisions and cross-functional projects into simple, compelling narratives, and can write convincingly in someone else's voice
Have served as a trusted advisor to senior leaders and know how to build those relationships: when to push, when to listen, and how to deliver a recommendation even when it’s something an exec may not want to hear
Can embed credibly with engineers and security practitioners. You are curious about how technical systems work, ask good questions, and earn the trust of people who may be skeptical of comms by default
See the big picture and are able to connect individual team updates to company strategy and mission
Have a keen eye for organizational culture and can recognize authentic moments worth amplifying
Strong candidates may also
Have experience communicating about security, infrastructure, or other deeply technical domains
Have worked at AI companies, frontier tech companies, or other organizations where the technical work moves faster than most people can follow
Have built or run internal communications programs during periods of rapid organizational growth
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$295,000
—
$345,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Location: San Francisco, California; New York, New York
Workplace: Hybrid
WHO WE ARE
Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.
Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work.
ABOUT THE ROLE:
Millions of people use Notion every day, and we’re growing quickly. The Infrastructure Security team’s mission is to build a secure-by-default foundation across Notion’s technical stacks—architecting systems that make the secure path the easy path. As an IC4 on this team, you’ll own meaningful infrastructure security problems end-to-end: from identifying risk, to designing pragmatic controls, to shipping secure defaults that scale across engineering.
This role can be based in either San Francisco or New York City. We work from our offices on Mondays, Tuesdays and Thursdays (our Anchor Days) because we do our best thinking and building together in person. We’re looking for someone who’s excited to work alongside the team during those days.
WHAT YOU'LL ACHIEVE:
- Proactively enhance the security posture of our AWS accounts and cloud infrastructure.
- Create secure frameworks for secrets management and authentication/authorization.
- Design and deploy robust Identity and Access Management (IAM) solutions.
- Provide guidance and education on security and privacy best practices to cross-functional partners.
- Participate in (and help drive) mitigation strategies during security-related incident response.
SKILLS YOU'LL NEED TO BRING:
- Security architecture and expertise: you’ve built and maintained systems to secure cloud architectures, ranging from secrets management to Identity and Access Management solutions.
- Backend/infrastructure development: you’ve written and shipped production-grade code, and can contribute to the codebase and architecture to raise the bar on secure systems design.
- Working in production: you can debug systems in production and continuously improve components with minimal disruption.
- Pragmatic, risk-based prioritization: you model threats, balance trade-offs, and focus security investments where they drive the most business impact.
- Empathetic communication: you communicate nuanced ideas clearly in writing and in real time; in disagreements, you engage thoughtfully and look for the right compromise.
NICE TO HAVES:
- AWS security best practices, zero trust architectures, and/or deep IAM expertise.
- Data security or privacy engineering experience.
- Experience applying AI tooling to defensive security workflows.
- Participation in security communities (local or regional groups, conferences).
Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $230,000 - $280,000 per year.
By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74 and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528.
#LI-Onsite
A NOTE ON AI
You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on.
EQUAL OPPORTUNITY & ACCOMMODATIONS
We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know.
Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.
Location: Ontario, Canada; Toronto, Ontario, Canada
Mattermost is the leading collaborative workflow platform for defense, intelligence, security, and critical infrastructure. Trusted by the U.S. Department of War and Fortune 500s, our platform runs on-premises and in private clouds, delivering secure messaging, file sharing, workflow automation, audio/screenshare, and project management—all with full data and operational control. Mattermost powers high-stakes workflows across mission planning, real-time, real-world operations, DevSecOps, incident response, and cyber defense—enabling secure collaboration from tactical edge and DDIL environments to enterprise HQ. Teams operate across web, desktop, and mobile, with embedded interoperability for Microsoft Teams, Outlook, and Microsoft 365.
To learn more, visit
www.mattermost.com
We are seeking a
Senior Full Stack Engineer
to help build and scale Mattermost's core web platform for teams operating in defense and critical infrastructure sectors. You will contribute across our Go backend and React/TypeScript web frontend, building features that hold up under strict security, compliance, and reliability requirements.
Our engineering culture is AI-forward. We expect engineers to work fluently with AI coding agents such as Claude Code day-to-day — for scaffolding, refactors, code review, and test generation — and treat that as core craft rather than a shortcut. We would rather hire smart people who get stuff done than chase an exact tech-stack match. If you have a track record of shipping and owning complex software end-to-end, we want to hear from you.
What You Will Do
Architect and build full-stack features optimized for scalability and performance across Go, React, TypeScript, PostgreSQL, and Redis
Leverage AI coding agents such as Claude Code and Cursor as a core part of your daily workflow while retaining full accountability for correctness, security, and design decisions
Develop internal tooling and testing infrastructure to speed up the team's delivery, including agentic workflows and skills that make AI tooling more effective for the broader team
Own testing strategy across frontend and backend code you ship
Design and consume REST and WebSocket APIs with solid networking fundamentals
Maintain the security and compliance standards required by our government and enterprise clients
Contribute to Mattermost's open-source codebase
What We Are Looking For
Required:
Strong full-stack development experience in Go and React, or a comparable stack
Experience designing and consuming REST and WebSocket APIs with solid networking fundamentals
Relational database experience including PostgreSQL, schema design, and query optimization
Hands-on daily fluency directing AI coding agents such as Claude Code, Cursor, or Copilot for scaffolding, refactors, code review, and test generation — with the judgment to know when to trust the output and when to take the wheel yourself
Bias toward shipping and owning complex software end-to-end without close supervision
Nice to Have:
Experience with distributed systems or high-availability service architecture
Familiarity with enterprise or regulated-environment security requirements
Background in defense, intelligence, or critical infrastructure products
Open-source contributions
Experience working on distributed or remote-first teams
Experience building tools, skills, or workflows on top of AI coding agents including MCP servers, agent skills, or CI-integrated agents
How Success Is Measured
First 90 Days: Shipping full-stack features on the core platform using an AI-forward agentic development workflow and owning testing strategy across the code you ship.
Why Mattermost
Mission-driven work: Your contributions directly support the organizations and missions that depend on secure, reliable collaboration including the U.S. Department of War and critical infrastructure operators worldwide
Remote-first culture: Work from anywhere with a globally distributed, high-trust team built for autonomy and ownership
AI-forward environment: We actively adopt and build AI-enabled workflows. Agentic development is core craft here, not a novelty
End-to-end ownership: Ship and own complex software across the full stack with real accountability for what you build
Open source at the core: Be part of a vibrant developer community shaping the future of secure collaboration
Compensation
Mattermost takes a market-based approach to pay. Actual compensation may vary based on location, skills, experience, qualifications, and market conditions.
Target Salary Range: CAD $162,591–$195,000
Canada Eligibility & Compliance
Candidates must be legally authorized to work in Canada without current or future sponsorship.
This role may require obtaining and maintaining a government security clearance or equivalent designation (such as Reliability Status or Secret clearance under Canada's Controlled Goods Program), depending on customer engagement. Candidates must meet eligibility requirements to be considered.
Given Mattermost's work with U.S. defense and government customers, some positions may also require compliance with U.S. export control laws, including EAR and ITAR, which can apply to non-U.S. based employees working on covered technical data. For more information, visit the Bureau of Industry and Security and the Directorate of Defense Trade Controls.
Mattermost is an EEO Employer, we are a remote-first, open-source company.
We are continually working to expand our hiring in more countries and regions, ensuring compliance with local laws and regulations, which takes time.
Mattermost values your unique perspective—we welcome all applicants. We encourage individuals from all backgrounds to apply and are committed to assessing candidates based on their skills and qualifications. We do not tolerate discrimination against staff or applicants based on race, religion, national origin, age, disability, pregnancy status, veteran status, or other personal characteristics.
If you require accommodations during the interview process, please let us know—we’re happy to assist.
Location: United States
Mattermost is the leading collaborative workflow platform for defense, intelligence, security, and critical infrastructure. Trusted by the U.S. Department of War and Fortune 500s, our platform runs on-premises and in private clouds, delivering secure messaging, file sharing, workflow automation, audio/screenshare, and project management—all with full data and operational control. Mattermost powers high-stakes workflows across mission planning, real-time, real-world operations, DevSecOps, incident response, and cyber defense—enabling secure collaboration from tactical edge and DDIL environments to enterprise HQ. Teams operate across web, desktop, and mobile, with embedded interoperability for Microsoft Teams, Outlook, and Microsoft 365.
To learn more, visit
www.mattermost.com
We are seeking a
Senior Full Stack Engineer
to help build and scale Mattermost's core web platform for teams operating in defense and critical infrastructure sectors. You will contribute across our Go backend and React/TypeScript web frontend, building features that hold up under strict security, compliance, and reliability requirements.
Our engineering culture is AI-forward. We expect engineers to work fluently with AI coding agents such as Claude Code day-to-day — for scaffolding, refactors, code review, and test generation — and treat that as core craft rather than a shortcut. We would rather hire smart people who get stuff done than chase an exact tech-stack match. If you have a track record of shipping and owning complex software end-to-end, we want to hear from you.
What You Will Do
Architect and build full-stack features optimized for scalability and performance across Go, React, TypeScript, PostgreSQL, and Redis
Leverage AI coding agents such as Claude Code and Cursor as a core part of your daily workflow while retaining full accountability for correctness, security, and design decisions
Develop internal tooling and testing infrastructure to speed up the team's delivery, including agentic workflows and skills that make AI tooling more effective for the broader team
Own testing strategy across frontend and backend code you ship
Design and consume REST and WebSocket APIs with solid networking fundamentals
Maintain the security and compliance standards required by our government and enterprise clients
Contribute to Mattermost's open-source codebase
What We Are Looking For
Required:
Strong full-stack development experience in Go and React, or a comparable stack
Experience designing and consuming REST and WebSocket APIs with solid networking fundamentals
Relational database experience including PostgreSQL, schema design, and query optimization
Hands-on daily fluency directing AI coding agents such as Claude Code, Cursor, or Copilot for scaffolding, refactors, code review, and test generation — with the judgment to know when to trust the output and when to take the wheel yourself
Bias toward shipping and owning complex software end-to-end without close supervision
Nice to Have:
Experience with distributed systems or high-availability service architecture
Familiarity with enterprise or regulated-environment security requirements
Background in defense, intelligence, or critical infrastructure products
Open-source contributions
Experience working on distributed or remote-first teams
Experience building tools, skills, or workflows on top of AI coding agents including MCP servers, agent skills, or CI-integrated agents
How Success Is Measured
First 90 Days: Shipping full-stack features on the core platform using an AI-forward agentic development workflow and owning testing strategy across the code you ship.
Why Mattermost
Mission-driven work: Your contributions directly support the organizations and missions that depend on secure, reliable collaboration including the U.S. Department of War and critical infrastructure operators worldwide
Remote-first culture: Work from anywhere with a globally distributed, high-trust team built for autonomy and ownership
AI-forward environment: We actively adopt and build AI-enabled workflows. Agentic development is core craft here, not a novelty
End-to-end ownership: Ship and own complex software across the full stack with real accountability for what you build
Open source at the core: Be part of a vibrant developer community shaping the future of secure collaboration
Target Salary Range: $142,723- $172,723
Mattermost takes a market-based approach to pay and pay may vary depending on your location. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. These ranges may be modified in the future.
Mattermost offers a remote-first work environment with medical, dental, and vision coverage. You’ll also receive unlimited PTO plus company holidays, a work from home stipend, an annual learning and development budget for conferences, certifications, and courses, paid parental leave for all parents, and a 401(k) plan.
U.S. Eligibility & Compliance
This role may require obtaining and maintaining a U.S. government security clearance. Candidates must meet federal eligibility requirements to be considered. For more information visit
Security Clearances — United States Department of State
Applicants must meet eligibility requirements for access to export-controlled information as defined by U.S. export control laws, including EAR and ITAR. For more information visit the
Bureau of Industry and Security
and the
Directorate of Defense Trade Controls
.
Mattermost is an EEO Employer, we are a remote-first, open-source company.
We are continually working to expand our hiring in more countries and regions, ensuring compliance with local laws and regulations, which takes time.
Mattermost values your unique perspective—we welcome all applicants. We encourage individuals from all backgrounds to apply and are committed to assessing candidates based on their skills and qualifications. We do not tolerate discrimination against staff or applicants based on race, religion, national origin, age, disability, pregnancy status, veteran status, or other personal characteristics.
If you require accommodations during the interview process, please let us know—we’re happy to assist.
Location: Bucharest, Romania
Workplace: hybrid
This role requires someone who is comfortable operating in a complex and evolving landscape. The environment includes a significant legacy footprint, multiple technology generations, and a diverse ecosystem of internal and external stakeholders. You will need to balance strategic thinking with pragmatic execution, helping modernize security while supporting business continuity.
Success in this role will depend not only on strong information security expertise, but also on the ability to influence, build trust, and navigate stakeholders with different priorities and varying levels of security maturity. You'll play a key role in rebuilding confidence by delivering practical, incremental improvements while contributing to the long-term security transformation of the business.
This is a highly visible opportunity for someone who understands both the technical threat landscape and the operational realities of retail, including seasonal peaks, POS infrastructure, and third-party vendor ecosystems, and who thrives in driving meaningful change within a complex enterprise environment.
Key Responsibilities
Act as the primary security advisor to Retail business unit leadership, aligning security priorities with merchandising, store operations, and supply chain roadmaps
Identify, assess, and communicate security risks in business terms, translating technical findings into revenue, brand, and operational impact for non-technical executives, IT and business leaders
Own security risk oversight for business projects
Evaluate security risk for seasonal and peak-volume events, including surge capacity and incident readiness
Partner with business, IT, procurement and legal on third-party and vendor risk assessments for retail suppliers, payment processors, and SaaS platforms
Advise on secure design for new retail technology initiatives and enterprise infrastructure changes
Track and report the business unit's risk posture, control gaps, and remediation progress to both business leadership and the CISO
Lead incident response coordination for security events affecting stores, e-commerce, or customer data, ensuring timely and clear communication to stakeholders
Deliver security awareness training tailored to store operations staff, corporate retail teams, and seasonal workers
Support budget planning and prioritization of security investments based on retail-specific risk exposure
Required Qualifications
Bachelor's degree in Information Security, Computer Science, or related field, or equivalent practical experience
5–6 years of experience in information security, IT risk, or security risk advisory roles, including experience supporting a business unit or line of business directly
Solid understanding of retail technology environments — POS systems, supply chain systems, and third-party integrations
Strong grasp of security frameworks and risk methodologies (NIST CSF, ISO 27001, CIS Controls)
Excellent communication and stakeholder management skills, with a track record of influencing business decisions without direct authority
Experience conducting or overseeing third-party/vendor risk assessments
Experience in transformation projects at enterprise level
Fluent in French and English
Preferred Qualifications
Relevant certification such as CISSP, CISM, or CRISC
Prior experience in a BISO, security risk advisor, or embedded security liaison role
Experience supporting security during high-volume seasonal events
Exposure to GRC tooling and security metrics/reporting dashboards
Key Competencies
Business acumen paired with deep security expertise
Comfortable operating in ambiguity and fast-paced retail cycles
Strong influence and relationship-building skills across all levels of the organization
Risk-based, pragmatic decision-making that balances security with business velocity
Sound judgment under pressure, particularly during incidents or peak retail periods
Location: Tokyo, Japan
Mattermost is the leading collaborative workflow platform for defense, intelligence, security, and critical infrastructure. Trusted by the U.S. Department of War and Fortune 500s, our platform runs on-premises and in private clouds, delivering secure messaging, file sharing, workflow automation, audio/screenshare, and project management—all with full data and operational control. Mattermost powers high-stakes workflows across mission planning, real-time, real-world operations, DevSecOps, incident response, and cyber defense—enabling secure collaboration from tactical edge and DDIL environments to enterprise HQ. Teams operate across web, desktop, and mobile, with embedded interoperability for Microsoft Teams, Outlook, and Microsoft 365.
To learn more, visit
www.mattermost.com
Mattermost is seeking a highly skilled and motivated
Technical Sales Engineer
to join us as we enter the Japanese market. This is a high impact, early-stage opportunity requiring a player coach mentality with significant room for ownership, autonomy, and professional growth. As the first technical hire in Japan and the Indo Pacific region, you will lead technical demonstrations and serve as a strategic partner to our sales team, directly shaping regional growth and ensuring customer success in high trust environments.
Mattermost is an open core technology company building secure collaboration solutions for organizations in high trust environments. We enable secure messaging and workflow automation across the world's most sensitive deployments, from air gapped defense systems to private clouds. In this role, you are the technical face of Mattermost in Japan, driving our expansion into one of our most critical growth regions.
What You'll Do
Lead all regional technical activities, including presales architecture, product demos, and deep dive technical evaluations
Architect and deploy solutions within complex on premise, air gapped, and private cloud environments, ensuring operational resilience for defense and national security customers
Collaborate with system integrators, VARs, and distributors to build a sustainable technical network and contribute to the regional partner go to market plan
Translate complex technical details into value propositions for audiences ranging from executive C suite (General Officers) to frontline operational personnel
Act as a bridge between Japanese customers and our global product and engineering teams, representing local requirements to help build world class, mission ready software
Support technical engagements for key accounts to ensure customers are achieving their specific mission outcomes and workflow automation goals
What We're Looking For
Senior level technical experience, specifically within the cybersecurity sector or high growth SaaS/technology companies
Proven experience serving defense, national security, or critical infrastructure customers
Strong knowledge of closed cloud environments, on premise deployments, and the technical and operational concepts utilized within secure sectors
Independent, creative problem solver capable of negotiating technical win win scenarios; experience in global startups is preferred
Native Japanese language skills and strong English proficiency (reading/writing)
Ability to travel based on business needs to support partner events, tradeshows, and customer sites (up to 50%)
Nice to Have
Active security clearance, highly desired due to the nature of our mission critical customer base
Awareness of GenAI and its applications in secure collaboration
Bachelor's degree in a technical field or equivalent work experience
How Success Is Measured
Quota attainment: consistent achievement of enterprise ACV and ARR targets.
Pipeline generation: self-sourced pipeline as a percentage of total pipeline created.
Deal quality: average deal size, sales cycle length, and win rate across enterprise accounts.
Executive engagement: multi-threaded relationships and documented executive alignment in target accounts.
Cross-functional feedback: positive collaboration scores from Sales Engineering, Customer Success, and Product partners.
Why Mattermost
Mission-driven work: Your deals directly support the organizations and missions that depend on secure, reliable collaboration — from the tactical edge to the enterprise.
AI-forward environment: We actively adopt and build AI-enabled workflows — you’ll have access to cutting-edge tooling to accelerate your productivity.
Open source at the core: Be part of a vibrant community shaping the future of secure collaboration.
High-growth opportunity: Strong momentum in the defense and enterprise markets, with meaningful equity upside as we scale toward our revenue goals.
Compensation
Mattermost takes a market-based approach to pay. Actual compensation may vary based on location, skills, experience, qualifications, and market conditions.
Mattermost is an EEO Employer, we are a remote-first, open-source company.
We are continually working to expand our hiring in more countries and regions, ensuring compliance with local laws and regulations, which takes time.
Mattermost values your unique perspective—we welcome all applicants. We encourage individuals from all backgrounds to apply and are committed to assessing candidates based on their skills and qualifications. We do not tolerate discrimination against staff or applicants based on race, religion, national origin, age, disability, pregnancy status, veteran status, or other personal characteristics.
If you require accommodations during the interview process, please let us know—we’re happy to assist.
Location: Remote (US)
About Ondo
Ondo Finance is building institutional-grade financial infrastructure for tokenized real-world assets. We operate at the intersection of traditional finance and on-chain systems, which means our product surface has to hold up against both the ordinary threats that hit any high-value fintech and the specific ones that follow value on-chain.
About the Role
We are hiring a
Senior Security Engineer - Product Security
to own how we ship secure products at Ondo. You will be a security partner for our product engineering teams, driving threat modeling, owning secure code reviews for new products or feature expansions, maintaining and tuning AppSec tooling, and improving the existing SSDLC. You can expect to take ownership of the bug bounty program, new feature to existing product reviews, and similar broad ownership of critical functions paired to a dedicated ProdSec lead. An AI-native approach is welcome, paired with AI-driven approaches should expect to be justified by describing how doing so enables risk outcomes.
This is a hands-on IC role. You will read code, run threat models, review architecture proposals, own tooling, and push engineering teams to build products that are secure by default. You partner closely with adjacent security function like AppSec, Infrasec, and SecOps.
What You’ll Do
Drive threat modeling for new features, integrations, and architectural changes across the product surface. Push threat models past templates into decisions that engineering teams actually implement.
Own secure code review for high-risk changes — authentication, session management, cryptographic paths, wallet and signing flows, RPC and third-party integrations, permission and consent surfaces.
Expand the AppSec tooling stack and treat “reducing false positives” as a first-class deliverable. AI-native integrations are welcome.
Design and evolve our secure SDLC: where security fits in the dev workflow, what triggers a review, what a lightweight security sign-off looks like versus a full one, and how do we validate controls.
Run our responsible disclosure and bug bounty program. Set scope, triage inbound reports, decide payouts, and drive findings to closure with engineering.
Support and own appropriate scope for the intake and closure of findings from external audits and pentests — coordinate with audit vendors (Coinspect, Cantina, NCC Group, and others), organize findings into our internal risk register, and drive remediation with engineering owners.
Partner with engineering leads to align o secure-by-default patterns - libraries, templates, sensible defaults, and paved-road implementations of anything security-relevant.
Threat model blockchain-integrated components like wallet flows, RPC integrations, signing infrastructure, on-chain admin actions triggered from off-chain systems in partnership with engineers who own the on-chain code.
Contribute to hiring, mentoring, and pushing the technical bar on the Security team.
What We’re Looking For
5+ years in Product Security or Application Security, including senior IC time at a fast-moving product company.
Deep secure code review skills in at least one modern stack (TypeScript / JavaScript, Python, or Go). Ability to move across stacks at the level required to threat model.
Strong threat modeling skills, appropriate to experience - you can drive a real threat model with an engineering team, not just fill in a template. In practice, we look for core understanding of industry-relevant TTPs and IoCs and strong intuitions on how to apply those lessons learned to our products.
Practical experience owning or majorly contributing to an AppSec tooling program. You have shipped rules, tuned noise, and measured impact.
Comfortable running or building a bug bounty / responsible disclosure program end-to-end assuming properly resourced to do so.
Strong working knowledge of modern web and API security - session and auth flows, OAuth and OIDC, browser security model, common web/API vulnerability classes, and their less-common variants.
Comfortable reading Terraform, cloud IAM policies, and CI/CD configuration well enough to reason about how a product vulnerability crosses into an infra risk.
Strong engineering partnership skills - you engage constructively, understand the “why” before proposing risk controls, you know when to accept risk, and you write things down.
Willing to grow into blockchain-adjacent product security on the job, including the specific attack surface introduced by wallet, signing, and on-chain-integration code.
Blockchain Exposure Note
This role firmly lives in Web2 prodsec. But, it also requires someone who understands what “Web2 vs Web3” terminology means. In other words, how our products interact with blockchains creates unique threat models that all product security teammates must grasp. At a minimum, by Day 1 you should have strong intuitions about how blockchains will make your prodsec experience unique, you should grasp the common terminologies, and you should be able to discuss with colleagues several incident post-mortems that demonstrate how Web2 compromises lead to Web3 funds losses.
You do not need to be an expert in smart contract auditing, blockchain security architectures, or decentralized consensus-driven risk controls.
Nice to Have
Prior work at a crypto, fintech, or other company where products handle high-value or irreversible actions.
Familiarity with wallet, signing, or key-management flows.
Reading-level familiarity with Solidity or Rust, target: when ProdSec intersects with smart contracts or other on-chain applications, you can parse what the code is likely doing, and work with blockchain security subject matter experts from there.
Bug bounty history - reports, CVEs, or published write-ups.
Familiarity with browser-extension security, mobile app security, or account-abstraction wallet designs.
Public output - talks, blog posts, open-source tools, CVEs.
How We Work
The Security team values a high trust team environment where respectful candor can thrive. We expect senior engineers to have an opinionated take on how to accomplish a task, accept feedback from the team and other external stakeholders and return it in kind, and to always assume positive intent. Professionalism, ethics, and enabling stakeholders towards common goals are important always.
Location: Singapore
Workplace: OnSite
Company Description
We’re http://checkout.comCheckout.com http://Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day.
We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers.
Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale.
If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact.
With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.
Checkout.com http://Checkout.com is one of the most exciting fintechs in the world. Our mission is to enable businesses and their communities to thrive in the digital economy. We’re the strategic payments partner for some of the best known fast-moving brands globally such as Wise, Hut Group, Sony Electronics, Homebase, Henkel, Klarna and many others. Purpose-built with performance and scalability in mind, our flexible cloud-based payments platform helps global enterprises launch new products and create experiences customers love. And it's not just what we build that makes us different. It's how.
We empower passionate problem-solvers to collaborate, innovate and do their best work. That’s why we’re on the Forbes Cloud 100 list and a Great Place to Work accredited company. And we’re just getting started. We’re building diverse and inclusive teams around the world — because that’s how we create even better experiences for our merchants and our partners. And we need your help. Join us to build the digital economy of tomorrow.
JOB DESCRIPTION
How you'll make an impact
- Provide technical support to merchants during their implementation of Checkout.com http://Checkout.com payment processing technology
- Answer all merchants’ integration related questions, including but not limited to configuration, debugging, documentation, testing, go-live support, and post-live support
- Manage incidents as related to the integration (investigation, troubleshooting, escalation, resolution, reporting, time tracking and analysis of incidents)
- Collaborate and partner with internal teams such as Merchant Configuration, Sales, Account Managers, and Merchant Care, to resolve issues during customer trials, integrations, or post-implementation support
- Interact with the Product teams to pinpoint improvement ideas
- Advise Manager on issues which impact customer satisfaction and provide recommendations for appropriate actions
- Ability to multitask with multiple projects and integrations of customers
- Maintain/update existing libraries/plugins used in integrations
QUALIFICATIONS
- 5+ years of development or technical support experience in a Tech/FinTech company
- Have payments experience would be advantageous
- Understanding of API, REST, webhooks and logs is required
- Strong coding skills in at least one of these languages: Java, Javascripts, PHP, Python, Go, C#
- Experience with Node.js, React is a plus
- Knowledge in iOS/Android is a plus
- Excellent communication skills, ability to build and maintain strong relationships
- Ability to work in a customer-focused and target-driven environment
- Good in speaking and writing in both English and Chinese
Additional Information
Bring all of you to work
We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.
Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.
We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.
It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.
Life at Checkout.com http://Checkout.com
We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us.
For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/
Location: Riyadh, Saudi Arabia
Muller's Solutions is seeking an experienced Service Delivery Manager to lead and oversee managed IT services across Service Desk, Field Support, and Inventory Management functions. The ideal candidate will ensure high-quality service delivery, drive operational excellence, manage distributed teams, and maintain strong stakeholder relationships while meeting agreed SLAs and KPIs.
Key Responsibilities
Drive SLA and KPI achievement and provide regular service performance reports to senior stakeholders.
Lead and govern Service Desk, Field Support, and Inventory Management teams.
Coordinate managed service delivery across multi-vendor and cross-functional teams.
Manage team scheduling and workforce planning for shift-based operations.
Develop and execute individual development plans for team members.
Ensure effective incident, problem, and escalation management through structured governance.
Identify opportunities to improve service delivery processes and operational efficiency.
Build and maintain strong relationships with internal and external stakeholders.
Communicate effectively with technical teams, business users, and senior management.
Lead operational problem-solving initiatives and drive continuous service improvement.
Requirements
Bachelor's degree in Engineering, Information Technology, Computer Science, or a related field.
ITIL V4 Foundation Certification
(Mandatory).
Proven experience managing
30+ member managed service teams
across multiple locations.
Experience managing
shift-based IT support operations
.
Strong knowledge of
IT Service Management (ITSM)
processes and best practices.
Hands-on experience with
ServiceNow
or similar ITSM platforms.
Expertise supporting endpoint technologies, including:
Laptops and desktops
Mobile devices
Meeting room and collaboration systems
Experience coordinating services across multi-vendor environments.
Strong leadership, people management, and coaching skills.
Excellent stakeholder management and communication skills.
Strong analytical, problem-solving, and decision-making abilities.
Ability to drive operational excellence and continuous improvement initiatives.
Location: Dubai, United Arab Emirates
Job Description
We are looking for an experienced
DevOps Engineer
to build, automate, and manage enterprise deployment environments with a strong focus on
air-gapped infrastructure
and
OpenShift clusters
. The ideal candidate will design and maintain CI/CD pipelines, automate infrastructure, manage containerized applications, and ensure secure, reliable, and scalable deployments.
Key Responsibilities
Design, implement, and maintain CI/CD pipelines for application and AI solution deployments.
Work in
air-gapped environments
and manage
OpenShift clusters
.
Automate infrastructure provisioning, configuration, and deployment processes.
Manage containers, orchestration platforms, and deployment environments.
Monitor application performance, availability, and operational health.
Implement logging, monitoring, alerting, backup, and disaster recovery solutions.
Apply infrastructure security best practices, secrets management, and system hardening.
Optimize deployment efficiency, scalability, reliability, and operational costs.
Support release management, production deployments, and incident resolution.
Collaborate with development, AI, QA, and infrastructure teams.
Requirements
Bachelor's degree in Computer Science, Information Technology, or a related field.
5+ years
of DevOps experience.
Hands-on experience working in
air-gapped environments
.
Strong experience managing
Red Hat OpenShift
clusters.
Experience designing and maintaining
CI/CD pipelines
.
Experience with
Docker
and
Kubernetes/OpenShift
.
Experience automating infrastructure using
Ansible
,
Terraform
, or similar tools.
Experience with Linux administration and shell scripting.
Experience implementing monitoring and logging solutions (e.g., Prometheus, Grafana, ELK, Splunk).
Experience with backup, disaster recovery, and infrastructure security.
Knowledge of secrets management and infrastructure hardening.
Strong troubleshooting and problem-solving skills.
Location: Amman, Jordan
We are looking to hire a skilled GRC officer who will be responsible for assessing the effectiveness, efficiency, and security of our IT systems, while ensuring compliance against industry standards, best practices, and internal processes and procedures. As part of his duties, he will be responsible for overseeing compliance with and reporting to Management on how to mitigate possible risk.
Responsibilities
Develop, review, monitor, and implement the company's information security management system, including processes, policies, systems, and procedures, and continuously improve the ISMS to keep up with changing regulatory requirements and industry best practices.
Develop, review, and monitor the Firm’s business continuity & disaster recovery plan and identify potential risks areas and ensure steps are taken to mitigate same.
Investigate and report violations of processes, procedures and regulatory standards across the operations of the Firm including but not limited to engineering and operations departments with effective action plans in response to discoveries and compliance violations.
Build an internal audit plan and schedule to cover all aspects as per the management needs.
Prepare internal audit reports detailing findings, recommendations, and corrective actions.
Plan and conduct regular audits and assessments to identify areas of non-compliance and develop corrective action plans.
Monitor and report on compliance issues, including data breaches, security incidents, and regulatory changes, and take appropriate actions to address them.
Ensure that compliance-related issues are communicated effectively to the leadership team and the board of directors.
Provide guidance and training employees on security & compliance-related topics, based on the best practices and industry standards.
Foster a culture of compliance within the organization, where all employees understand the importance of compliance and their role in maintaining it.
Liaise with external auditors and regulators as necessary to demonstrate compliance with relevant laws and regulations.
Collaborate with cross-functional teams to ensure that compliance & ISMS requirements are integrated into all aspects of software development, project management and operations, etc.
Migrate, manage, and excel the GRC tasks to a well-known GRC tool.
Perform and manage an enterprise risk assessment across the organization, based on a defined risk management policy, and procedure.
Work closely with all departments on risk management tasks, including identification & mitigation of risks.
Work closely with all departments on their new tools and software’s to make sure it follows ProgressSoft vision, policies, and to reflect on any required changes to the current processes and internal controls.
Ability to read and understand third party agreements from Clients & assess the level of risk acceptance towards security terms and conditions.
Ability to perform third party risk assessments (Vendor & Client).
Understand the internal workflows and procedures, assess any areas for improvement.
Requirements
:
Bachelor’s degree in computer science or any related field.
Minimum of 1-2 years’ experience in areas related to Governance, Compliance Officer, IT Auditor or Information Technology Risk Management.
Strong knowledge of IT auditing principles, practices, and frameworks (e.g., GRCP, COBIT, ISO 27001, or related discipline).
Familiarity with security frameworks and compliance requirements (e.g., ISO27001, GDPR, PADSS).
Familiarity of cybersecurity & compliance regulations across Middle East countries (e.g. Jordan/ UAE/ Oman/ Kuwait/ Qatar etc.).
Proficiency in risk and audit tools and methodologies.
Provide insights for informed decision-making.
Excellent analytical, critical thinking and problem-solving skills.
Excellent reporting and presentation skills.
Exposure to IT Governance and its activities.
Ability to work independently and as part of a team.
Ability to multi-task, pay attention to details and meet deadlines.
Performance goal/KPI
Ensure staff members comply with all laid down processes and procedures.
Presentation to the top management and as may be required.
Ensure Staff members comply with the of technology at all levels.
Submission of timely and regular reporting to Management on the status of progress and achievements.